last executing test programs: 54.92307274s ago: executing program 2 (id=10713): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, 0x0}]) 54.126029175s ago: executing program 2 (id=10716): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fddbdf25090000003c000380140002007663616e300000000000000000000001"], 0x50}}, 0x0) 51.508694579s ago: executing program 2 (id=10726): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xf}, 0x14, &(0x7f0000000500)=[{&(0x7f0000000040)="27031000590400000508002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000819b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33311e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfec7}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 49.956383954s ago: executing program 2 (id=10734): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 48.725351315s ago: executing program 2 (id=10739): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r0 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 11.968283139s ago: executing program 4 (id=10879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000001200000000f0000000c0007"], 0x20}}, 0x0) 10.500356548s ago: executing program 4 (id=10884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000a000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.644496097s ago: executing program 4 (id=10890): bpf$MAP_CREATE(0x1f00000000000000, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}}, 0x0) 7.730998461s ago: executing program 4 (id=10893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) 6.9093946s ago: executing program 1 (id=10895): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1000000000000000290000003700000000000000000000008299860e4b3337f660d912b7f955fb8c46d6f660fb91adcd98fc823a07e91e62fea5cc8817db3924bb64262687ab74f962fbe66425f89c52d01591"], 0x18}, 0x0) 6.833040414s ago: executing program 3 (id=10896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000001600), 0x4) 5.966534102s ago: executing program 1 (id=10898): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x80fe, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x1020000}}, 0x1c) 5.468161257s ago: executing program 4 (id=10899): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1a10716, &(0x7f0000000140), 0x80, 0x470, &(0x7f0000001200)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000013c0)) 5.16474047s ago: executing program 0 (id=10900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.112393336s ago: executing program 1 (id=10901): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="8aef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) 5.105005079s ago: executing program 3 (id=10902): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x4d, 0x0, &(0x7f0000000240)) 4.413159178s ago: executing program 0 (id=10903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r0, &(0x7f0000000100)}, 0x20) 4.046336799s ago: executing program 1 (id=10904): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.962470664s ago: executing program 3 (id=10905): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) io_setup(0x20, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.540023914s ago: executing program 0 (id=10906): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x0, &(0x7f0000000240)) 3.147491868s ago: executing program 3 (id=10907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x1}) 2.947288494s ago: executing program 4 (id=10908): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.617206221s ago: executing program 0 (id=10909): syz_mount_image$minix(&(0x7f00000006c0), &(0x7f0000000680)='./bus\x00', 0x804002, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="460d5bffafc0a24ca686d2c2ffb4cf5f4526b7b05719201d1a6e11d86a17ace724da5d1a5cdd19fa42d681b65e6790d2ac7a90f733b8ae88af8fc5817af7c290021a01915daf57fbcbeb65d1ff41896d95c8f78907c929e0f3c7295e31395bed34a95de71671aa7a75c829f1d02b8223cc29301f7eb37942f09192bdb6ef582d4fc9f8e41f376747537e49000000000000000000000000000000cd0b50727f689c316cf7e56d45f3430d9676867d02637bc23543a14d4f9c2a9bc94a430af0e3729e70bf", @ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRES32=0x0], 0xd, 0x1b4, &(0x7f0000000340)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 2.080671643s ago: executing program 3 (id=10910): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1a00001, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723dd592f1af2c696f636861727365743d63703836332c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x5, 0x330, &(0x7f0000000140)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.134911692s ago: executing program 0 (id=10911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x51, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 748.541301ms ago: executing program 3 (id=10912): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) shutdown(r1, 0x1) 650.279303ms ago: executing program 1 (id=10913): r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 403.787985ms ago: executing program 0 (id=10914): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a000000000000109022400010000000009040100020300000009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x4, {0x4, 0x0, "7dea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 216.658832ms ago: executing program 2 (id=10791): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, 0x0) 0s ago: executing program 1 (id=10915): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): 196006][T26518] FAT-fs (loop3): Directory bread(block 68) failed [ 2153.203414][T26518] FAT-fs (loop3): Directory bread(block 69) failed [ 2153.210621][T26518] FAT-fs (loop3): Directory bread(block 70) failed [ 2153.217637][T26518] FAT-fs (loop3): Directory bread(block 71) failed [ 2153.224590][T26518] FAT-fs (loop3): Directory bread(block 72) failed [ 2153.231568][T26518] FAT-fs (loop3): Directory bread(block 73) failed [ 2153.413203][ T2570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.740036][ T2570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.917038][T24480] Bluetooth: hci7: command tx timeout [ 2154.009426][T22643] IPVS: starting estimator thread 0... [ 2154.116470][T26534] IPVS: using max 192 ests per chain, 9600 per kthread [ 2154.244024][ T2570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.346781][T26466] bridge0: port 1(bridge_slave_0) entered blocking state [ 2154.354645][T26466] bridge0: port 1(bridge_slave_0) entered disabled state [ 2154.365628][T26466] bridge_slave_0: entered allmulticast mode [ 2154.375712][T26466] bridge_slave_0: entered promiscuous mode [ 2154.558040][T26466] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.565852][T26466] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.574978][T26466] bridge_slave_1: entered allmulticast mode [ 2154.584883][T26466] bridge_slave_1: entered promiscuous mode [ 2154.853940][ T2570] bridge_slave_1: left allmulticast mode [ 2154.860271][ T2570] bridge_slave_1: left promiscuous mode [ 2154.867115][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.929704][T26541] loop1: detected capacity change from 0 to 256 [ 2154.985804][ T2570] bridge_slave_0: left allmulticast mode [ 2154.992752][ T2570] bridge_slave_0: left promiscuous mode [ 2154.999666][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.581550][T26539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2155.588428][T26539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2155.662864][T26539] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2155.670953][T26539] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2155.773521][T26539] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2156.242041][ T2570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2156.358756][ T2570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2156.413537][ T2570] bond0 (unregistering): Released all slaves [ 2156.709430][T26466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2156.809703][T26466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2156.916455][T24480] Bluetooth: hci1: command 0x0406 tx timeout [ 2157.681910][T26466] team0: Port device team_slave_0 added [ 2157.723115][T24480] Bluetooth: hci7: command 0x0c1a tx timeout [ 2157.866916][T26541] FAT-fs (loop1): IO charset cpush not found [ 2158.068378][T26466] team0: Port device team_slave_1 added [ 2158.583211][T26558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9574'. [ 2159.056573][T24480] Bluetooth: hci1: command 0x0406 tx timeout [ 2159.099768][ T2570] hsr_slave_0: left promiscuous mode [ 2159.238112][ T2570] hsr_slave_1: left promiscuous mode [ 2159.366397][ T2570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2159.374288][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2159.472008][ T2570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2159.480001][ T2570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2159.637159][ T2570] veth1_macvtap: left promiscuous mode [ 2159.643215][ T2570] veth0_macvtap: left promiscuous mode [ 2159.649553][ T2570] veth1_vlan: left promiscuous mode [ 2159.655176][ T2570] veth0_vlan: left promiscuous mode [ 2159.797649][T24480] Bluetooth: hci7: command 0x0c1a tx timeout [ 2160.000512][T26565] loop3: detected capacity change from 0 to 1024 [ 2160.109553][T26565] EXT4-fs: Ignoring removed oldalloc option [ 2160.190404][T26565] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2160.360766][T26565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2161.169996][ T5203] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2161.877893][T24480] Bluetooth: hci7: command 0x0c1a tx timeout [ 2162.578488][ T2570] team0 (unregistering): Port device team_slave_1 removed [ 2162.769396][ T2570] team0 (unregistering): Port device team_slave_0 removed [ 2163.072953][T26597] loop1: detected capacity change from 0 to 64 [ 2163.421116][T26466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2163.428646][T26466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.455628][T26466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2163.713499][T26466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2163.721008][T26466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.749032][T26466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2164.437723][T26609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9591'. [ 2164.542511][T26466] hsr_slave_0: entered promiscuous mode [ 2164.640345][T26466] hsr_slave_1: entered promiscuous mode [ 2164.695222][T26466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2164.703467][T26466] Cannot create hsr debugfs directory [ 2165.107384][T26613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9593'. [ 2166.052641][T22643] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2166.297529][T22643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2166.309224][T22643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.319585][T22643] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2166.329131][T22643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.409316][T22643] usb 2-1: config 0 descriptor?? [ 2166.979251][T22643] pantherlord 0003:0F30:0111.0024: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0 [ 2166.993878][T22643] pantherlord 0003:0F30:0111.0024: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 2167.257074][T15683] usb 2-1: USB disconnect, device number 115 [ 2167.432787][T26466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2167.542693][T26466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2167.650355][T26466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2167.778553][T26466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2167.907383][T26640] loop3: detected capacity change from 0 to 128 [ 2168.004514][T26640] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 2168.522667][ T5203] sysv_free_block: trying to free block not in datazone [ 2168.557779][ T5203] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2169.788895][T26466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2169.891213][T26466] 8021q: adding VLAN 0 to HW filter on device team0 [ 2170.125743][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.133642][ T2570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2170.255078][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.262930][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2171.743198][ T9016] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2171.848884][T26663] loop3: detected capacity change from 0 to 4096 [ 2171.889312][T26663] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 2171.986363][ T9016] usb 2-1: Using ep0 maxpacket: 32 [ 2172.055683][ T9016] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2172.067370][ T9016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2172.079271][ T9016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2172.089606][ T9016] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2172.103182][ T9016] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 2172.113877][ T9016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.157785][ T9016] usb 2-1: config 0 descriptor?? [ 2172.504978][T26663] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 2172.662710][ T9016] wacom 0003:056A:00B3.0025: unknown main item tag 0x0 [ 2172.745733][ T9016] wacom 0003:056A:00B3.0025: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 2172.763342][T26663] ntfs3: loop3: ino=21, "bus" fallocate(0x10) is not supported [ 2172.819266][ T9016] wacom 0003:056A:00B3.0025: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.1-1/input0 [ 2172.842101][ T9016] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B3.0025/input/input52 [ 2173.057737][ T9016] usb 2-1: USB disconnect, device number 116 [ 2173.534624][T26466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2174.200778][T26695] loop1: detected capacity change from 0 to 256 [ 2174.672091][T26695] FAT-fs (loop1): Directory bread(block 64) failed [ 2174.679355][T26695] FAT-fs (loop1): Directory bread(block 65) failed [ 2174.686596][T26695] FAT-fs (loop1): Directory bread(block 66) failed [ 2174.693517][T26695] FAT-fs (loop1): Directory bread(block 67) failed [ 2174.700658][T26695] FAT-fs (loop1): Directory bread(block 68) failed [ 2174.707599][T26695] FAT-fs (loop1): Directory bread(block 69) failed [ 2174.714656][T26695] FAT-fs (loop1): Directory bread(block 70) failed [ 2174.721797][T26695] FAT-fs (loop1): Directory bread(block 71) failed [ 2174.728955][T26695] FAT-fs (loop1): Directory bread(block 72) failed [ 2174.735796][T26695] FAT-fs (loop1): Directory bread(block 73) failed [ 2176.366531][ T29] audit: type=1326 audit(1725008426.587:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26717 comm="syz.1.9625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8379ef9 code=0x0 [ 2176.390391][ T29] audit: type=1326 audit(1725008426.627:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26717 comm="syz.1.9625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fc3c8379ef9 code=0x0 [ 2177.349100][T26466] veth0_vlan: entered promiscuous mode [ 2177.503070][T26731] netlink: 'syz.3.9629': attribute type 10 has an invalid length. [ 2177.523909][T26731] 8021q: adding VLAN 0 to HW filter on device team0 [ 2177.542078][T26731] bond0: (slave team0): Enslaving as an active interface with an up link [ 2177.601006][T26466] veth1_vlan: entered promiscuous mode [ 2177.638916][T26733] netlink: 'syz.0.9630': attribute type 1 has an invalid length. [ 2177.699357][T26731] netlink: 'syz.3.9629': attribute type 10 has an invalid length. [ 2177.738636][T26731] bond0: (slave team0): Releasing backup interface [ 2177.837729][T26731] bridge0: port 3(team0) entered blocking state [ 2177.846732][T26731] bridge0: port 3(team0) entered disabled state [ 2177.853796][T26731] team0: entered allmulticast mode [ 2177.859478][T26731] team_slave_0: entered allmulticast mode [ 2177.865537][T26731] team_slave_1: entered allmulticast mode [ 2177.876951][T26731] team0: entered promiscuous mode [ 2177.882381][T26731] team_slave_0: entered promiscuous mode [ 2177.889634][T26731] team_slave_1: entered promiscuous mode [ 2178.225274][T26466] veth0_macvtap: entered promiscuous mode [ 2178.340752][T26466] veth1_macvtap: entered promiscuous mode [ 2178.600349][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.611541][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.621981][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.633019][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.643798][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.654752][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.666450][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2178.677955][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.693874][T26466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2178.923332][T26743] loop3: detected capacity change from 0 to 256 [ 2179.144272][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2179.155175][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2179.167783][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2179.179833][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2179.190396][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2179.201401][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2179.214357][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2179.225314][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2179.235703][T26466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2179.246625][T26466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2179.262641][T26466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2179.345598][T26743] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 2179.611520][T26466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2179.621110][T26466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2179.631227][T26466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2179.640615][T26466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2180.430407][T26757] 9pnet_fd: p9_fd_create_unix (26757): problem connecting socket: éq‰Y’3aK: -111 [ 2181.913704][T26772] loop1: detected capacity change from 0 to 64 [ 2183.939990][T26795] loop3: detected capacity change from 0 to 128 [ 2184.159462][T26795] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 2184.167769][T26795] FAT-fs (loop3): Filesystem has been set read-only [ 2184.245683][ T29] audit: type=1800 audit(1725008434.447:162): pid=26795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9650" name="file2" dev="loop3" ino=1048788 res=0 errno=0 [ 2186.048545][T26820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9655'. [ 2187.816495][T22643] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2188.077029][T22643] usb 4-1: Using ep0 maxpacket: 8 [ 2188.129629][T22643] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2188.141043][T22643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2188.152916][T22643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2188.163188][T22643] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2188.176907][T22643] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2188.187368][T22643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.281620][T22643] usb 4-1: config 0 descriptor?? [ 2188.850645][T22643] kye 0003:0458:5011.0026: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2188.946234][T22643] kye 0003:0458:5011.0026: unbalanced collection at end of report description [ 2188.965668][T22643] kye 0003:0458:5011.0026: parse failed [ 2188.972023][T22643] kye 0003:0458:5011.0026: probe with driver kye failed with error -22 [ 2189.158906][T22643] usb 4-1: USB disconnect, device number 124 [ 2189.553555][ T2570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2189.562541][ T2570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2189.892466][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2189.901273][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2190.051689][T26849] loop1: detected capacity change from 0 to 4096 [ 2190.101597][T26849] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 2190.546724][T15683] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2190.705290][T26864] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 2190.790576][T15683] usb 4-1: Using ep0 maxpacket: 8 [ 2190.819146][T15683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 2190.831931][T15683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2190.842564][T15683] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 2190.852202][T15683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.901999][T15683] usb 4-1: config 0 descriptor?? [ 2191.504531][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9673'. [ 2191.505990][T15683] hid-alps 0003:044E:1215.0027: hidraw0: USB HID v40.00 Device [HID 044e:1215] on usb-dummy_hcd.3-1/input0 [ 2191.774393][T22643] usb 4-1: USB disconnect, device number 125 [ 2192.768569][T24480] Bluetooth: hci0: command tx timeout [ 2193.439578][T26887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9681'. [ 2193.449220][T26887] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9681'. [ 2193.458830][T26887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9681'. [ 2193.468151][T26887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9681'. [ 2193.479759][T26887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9681'. [ 2194.554588][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2194.561615][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2196.527508][T18089] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2196.796646][T18089] usb 2-1: Using ep0 maxpacket: 16 [ 2196.854440][T18089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2196.864821][T18089] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 2196.874724][T18089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.930599][T18089] usb 2-1: config 0 descriptor?? [ 2197.457406][T18089] sigmamicro 0003:1C4F:0059.0028: unknown main item tag 0x0 [ 2197.511868][T18089] sigmamicro 0003:1C4F:0059.0028: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.1-1/input0 [ 2197.595507][T18089] usb 2-1: USB disconnect, device number 117 [ 2198.681225][T26943] loop1: detected capacity change from 0 to 64 [ 2198.992341][T26943] syz.1.9707: attempt to access beyond end of device [ 2198.992341][T26943] loop1: rw=2049, sector=153, nr_sectors = 8 limit=64 [ 2199.008205][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.008205][T26943] loop1: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 2199.029426][T26943] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 2199.042586][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.042586][T26943] loop1: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 2199.057609][T26943] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 2199.066596][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.066596][T26943] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 2199.080567][T26943] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 2199.089677][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.089677][T26943] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 2199.104134][T26943] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 2199.113209][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.113209][T26943] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 2199.127179][T26943] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 2199.136201][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.136201][T26943] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 2199.153658][T26943] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 2199.163778][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.163778][T26943] loop1: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 2199.178231][T26943] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 2199.187413][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.187413][T26943] loop1: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 2199.201676][T26943] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 2199.210730][T26943] syz.1.9707: attempt to access beyond end of device [ 2199.210730][T26943] loop1: rw=2049, sector=174, nr_sectors = 1 limit=64 [ 2199.224656][T26943] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 2199.233777][T26943] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 2201.794755][T26974] loop1: detected capacity change from 0 to 512 [ 2201.875408][T26974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2202.052683][T26977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9722'. [ 2202.068352][T26974] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 2202.077272][T26974] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 2202.099806][T26974] EXT4-fs (loop1): 1 truncate cleaned up [ 2202.107866][T26974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2202.361799][T26974] EXT4-fs: group quota file already specified [ 2202.641615][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2202.936417][T18089] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2203.166797][T18089] usb 4-1: Using ep0 maxpacket: 8 [ 2203.211897][T18089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2203.223656][T18089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2203.233881][T18089] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2203.248497][T18089] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 2203.258380][T18089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.330123][T18089] usb 4-1: config 0 descriptor?? [ 2203.843234][T18089] apple 0003:05AC:0274.0029: item fetching failed at offset 6/70 [ 2203.902263][T18089] apple 0003:05AC:0274.0029: parse failed [ 2203.909478][T18089] apple 0003:05AC:0274.0029: probe with driver apple failed with error -22 [ 2204.102067][T18089] usb 4-1: USB disconnect, device number 126 [ 2205.297438][T27008] binder: 27005:27008 ioctl c018620c 200005c0 returned -22 [ 2205.479438][T11556] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2205.658019][T27012] smb3: Bad value for 'uid' [ 2205.662828][T27012] smb3: Bad value for 'uid' [ 2205.715712][T11556] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.726771][T11556] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2205.736413][T11556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.831004][T11556] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2206.856373][T18089] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2207.029409][T11556] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 2207.038006][T11556] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 2207.069996][T11556] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 2207.156721][T18089] usb 2-1: Using ep0 maxpacket: 16 [ 2207.173702][T18089] usb 2-1: config 0 has too many interfaces: 231, using maximum allowed: 32 [ 2207.183150][T18089] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 231 [ 2207.192743][T18089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2207.279359][T18089] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice= 0.00 [ 2207.289451][T18089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2207.298206][T18089] usb 2-1: SerialNumber: syz [ 2207.330777][T15683] usb 4-1: USB disconnect, device number 127 [ 2207.344052][T18089] usb 2-1: config 0 descriptor?? [ 2207.472395][T18089] input: USB Touchscreen 134c:0002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 2207.729860][T11556] usb 2-1: USB disconnect, device number 118 [ 2211.988002][T27064] CUSE: DEVNAME unspecified [ 2214.076647][T18089] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2214.288747][T27085] netlink: 'syz.4.9770': attribute type 29 has an invalid length. [ 2214.334123][T18089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.345923][T18089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.356532][T18089] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2214.366222][T18089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.440135][T27090] netlink: 'syz.4.9770': attribute type 29 has an invalid length. [ 2214.502711][T18089] usb 3-1: config 0 descriptor?? [ 2214.553969][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2214.624117][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.634703][ C1] buffer_io_error: 6 callbacks suppressed [ 2214.634778][ C1] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 2214.676190][ C1] I/O error, dev loop6, sector 524287745 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.686662][ C1] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 2214.695502][ C1] I/O error, dev loop6, sector 524287746 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.705856][ C1] Buffer I/O error on dev loop6, logical block 524287746, async page read [ 2214.714747][ C1] I/O error, dev loop6, sector 524287747 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.725062][ C1] Buffer I/O error on dev loop6, logical block 524287747, async page read [ 2214.733992][ C1] I/O error, dev loop6, sector 524287748 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.744256][ C1] Buffer I/O error on dev loop6, logical block 524287748, async page read [ 2214.753198][ C1] I/O error, dev loop6, sector 524287749 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.763515][ C1] Buffer I/O error on dev loop6, logical block 524287749, async page read [ 2214.772449][ C1] I/O error, dev loop6, sector 524287750 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.782725][ C1] Buffer I/O error on dev loop6, logical block 524287750, async page read [ 2214.791659][ C1] I/O error, dev loop6, sector 524287751 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2214.801916][ C1] Buffer I/O error on dev loop6, logical block 524287751, async page read [ 2215.048687][T27092] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9775'. [ 2215.283047][T18089] a4tech 0003:09DA:022B.002A: invalid report_count 36114 [ 2215.290610][T18089] a4tech 0003:09DA:022B.002A: item 0 2 1 9 parsing failed [ 2215.384222][T18089] a4tech 0003:09DA:022B.002A: parse failed [ 2215.391418][T18089] a4tech 0003:09DA:022B.002A: probe with driver a4tech failed with error -22 [ 2215.597982][T22656] usb 3-1: USB disconnect, device number 111 [ 2219.378236][T24480] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 2219.779919][T27140] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.9798'. [ 2220.108061][T27134] geneve2: entered promiscuous mode [ 2220.113579][T27134] geneve2: entered allmulticast mode [ 2220.193925][T27143] loop1: detected capacity change from 0 to 16 [ 2220.283665][T27143] erofs: (device loop1): mounted with root inode @ nid 36. [ 2220.428265][ T29] audit: type=1800 audit(1725008470.677:163): pid=27143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9799" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 2220.549952][ T9016] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2220.836603][ T9016] usb 3-1: Using ep0 maxpacket: 8 [ 2220.876558][ T9016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2220.888093][ T9016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2220.898487][ T9016] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 2220.908158][ T9016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.005708][ T9016] usb 3-1: config 0 descriptor?? [ 2221.749272][ T9016] elo 0003:04E7:0009.002B: item fetching failed at offset 5/7 [ 2221.818453][ T9016] elo 0003:04E7:0009.002B: parse failed [ 2221.824725][ T9016] elo 0003:04E7:0009.002B: probe with driver elo failed with error -22 [ 2222.267864][ T9016] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2222.407488][T15683] usb 3-1: USB disconnect, device number 112 [ 2222.475739][ T9016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.496622][ T9016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2222.507985][ T9016] usb 5-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.00 [ 2222.517519][ T9016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.623951][ T9016] usb 5-1: config 0 descriptor?? [ 2223.213762][ T9016] wacom 0003:056A:0038.002C: item fetching failed at offset 3/5 [ 2223.263747][ T9016] wacom 0003:056A:0038.002C: parse failed [ 2223.270806][ T9016] wacom 0003:056A:0038.002C: probe with driver wacom failed with error -22 [ 2223.396647][T24480] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2223.405320][T24480] Bluetooth: hci1: Injecting HCI hardware error event [ 2223.419407][T24480] Bluetooth: hci1: hardware error 0x00 [ 2223.530375][ T9016] usb 5-1: USB disconnect, device number 91 [ 2224.781021][T27175] mkiss: ax0: crc mode is auto. [ 2225.073607][T27169] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 2225.476930][T24480] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2226.603800][T27193] usb usb8: check_ctrlrecip: process 27193 (syz.4.9820) requesting ep 01 but needs 81 [ 2226.972027][T27196] loop1: detected capacity change from 0 to 128 [ 2227.034636][T27196] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 2227.050089][T27196] sysv_count_free_blocks: free block count was -2041545935, correcting to 0 [ 2227.424074][T27196] sysv_count_free_inodes: unable to read inode table [ 2227.686740][ T5193] sysv_free_block: trying to free block not in datazone [ 2227.693941][ T5193] sysv_free_block: trying to free block not in datazone [ 2227.701905][ T5193] sysv_free_block: trying to free block not in datazone [ 2227.709303][ T5193] sysv_free_block: trying to free block not in datazone [ 2227.718104][ T5193] sysv_free_block: trying to free block not in datazone [ 2227.725325][ T5193] sysv_free_block: trying to free block not in datazone [ 2227.733176][ T5193] sysv_free_block: trying to free block not in datazone [ 2227.797464][ T5193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2229.066916][ T29] audit: type=1326 audit(1725008479.297:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27210 comm="syz.4.9829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb028979ef9 code=0x0 [ 2229.845907][T27212] loop1: detected capacity change from 0 to 4096 [ 2229.884165][T27212] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 2230.113104][T27212] ntfs3: loop1: Failed to load $Extend (-22). [ 2230.119763][T27212] ntfs3: loop1: Failed to initialize $Extend. [ 2230.365121][T27223] loop3: detected capacity change from 0 to 2048 [ 2230.417307][T27223] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2230.497902][T27224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2230.518614][T27223] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 2230.565253][T27223] Remounting filesystem read-only [ 2231.116468][ T9016] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2231.327408][ T9016] usb 5-1: Using ep0 maxpacket: 8 [ 2231.445522][ T9016] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 2231.455131][ T9016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.463910][ T9016] usb 5-1: Product: syz [ 2231.468712][ T9016] usb 5-1: Manufacturer: syz [ 2231.473599][ T9016] usb 5-1: SerialNumber: syz [ 2231.579985][ T9016] usb 5-1: config 0 descriptor?? [ 2231.692785][ T9016] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 2231.700891][ T9016] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 2232.168267][ T9016] radio-raremono 5-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 2232.478400][ T9016] radio-raremono 5-1:0.0: V4L2 device registered as radio32 [ 2232.833419][T18089] usb 5-1: USB disconnect, device number 92 [ 2232.840546][T18089] radio-raremono 5-1:0.0: Thanko's Raremono disconnected [ 2234.327341][T27247] netlink: 'syz.3.9847': attribute type 5 has an invalid length. [ 2234.448534][T27169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2234.519606][T27169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2234.529346][T27169] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2234.545033][T27169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2234.581144][T27169] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2234.600968][T27169] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2236.059149][T27262] loop3: detected capacity change from 0 to 1024 [ 2236.678881][T27169] Bluetooth: hci6: command tx timeout [ 2237.563389][T27248] chnl_net:caif_netlink_parms(): no params data found [ 2238.207292][T27289] loop3: detected capacity change from 0 to 128 [ 2238.224316][T27289] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 2238.235331][T27289] FAT-fs (loop3): Filesystem has been set read-only [ 2238.763134][T27169] Bluetooth: hci6: command tx timeout [ 2239.122781][T27297] loop1: detected capacity change from 0 to 512 [ 2239.268646][T27297] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 2239.366840][T27297] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9864: invalid indirect mapped block 2683928664 (level 1) [ 2239.566870][T27297] EXT4-fs (loop1): Remounting filesystem read-only [ 2239.574546][T27297] EXT4-fs (loop1): 1 truncate cleaned up [ 2239.582959][T27297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2239.835221][T27297] EXT4-fs: user quota file already specified [ 2239.914181][T27248] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.924273][T27248] bridge0: port 1(bridge_slave_0) entered disabled state [ 2239.932516][T27248] bridge_slave_0: entered allmulticast mode [ 2239.942246][T27248] bridge_slave_0: entered promiscuous mode [ 2240.051238][T27248] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.059311][T27248] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.067608][T27248] bridge_slave_1: entered allmulticast mode [ 2240.077690][T27248] bridge_slave_1: entered promiscuous mode [ 2240.118983][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2240.419025][T27248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2240.559774][T27248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2240.888985][T27169] Bluetooth: hci6: command tx timeout [ 2241.011281][T27248] team0: Port device team_slave_0 added [ 2241.089712][T27248] team0: Port device team_slave_1 added [ 2241.186772][T27313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9871'. [ 2241.196874][T27313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9871'. [ 2241.367776][T27248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2241.375051][T27248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2241.401781][T27248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2241.571505][T27248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2241.580029][T27248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2241.606746][T27248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2242.312731][T27248] hsr_slave_0: entered promiscuous mode [ 2242.358071][T27248] hsr_slave_1: entered promiscuous mode [ 2242.396627][T27248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2242.404646][T27248] Cannot create hsr debugfs directory [ 2242.916286][T27169] Bluetooth: hci6: command tx timeout [ 2243.090249][T27329] loop1: detected capacity change from 0 to 16 [ 2243.141340][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9880'. [ 2243.168988][T27329] erofs: (device loop1): mounted with root inode @ nid 36. [ 2243.873116][T27248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.177384][T27248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.268375][T27338] tipc: Enabling of bearer rejected, failed to enable media [ 2244.452922][T27248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.655929][T27344] loop1: detected capacity change from 0 to 256 [ 2244.734851][T27248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2245.521874][T27248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2245.617460][T27248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2245.818582][T27248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2245.927908][T27248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2245.945256][T27354] usb usb7: usbfs: process 27354 (syz.4.9888) did not claim interface 2 before use [ 2246.451613][T27353] loop1: detected capacity change from 0 to 1764 [ 2246.507692][T27353] iso9660: Unknown parameter 'over¬ˇderockperm' [ 2247.355089][T27248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2247.438843][T27363] netlink: 'syz.1.9895': attribute type 1 has an invalid length. [ 2247.448154][T27363] netlink: 988 bytes leftover after parsing attributes in process `syz.1.9895'. [ 2247.518825][T27248] 8021q: adding VLAN 0 to HW filter on device team0 [ 2247.607859][T19637] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.615740][T19637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2247.758055][T19637] bridge0: port 2(bridge_slave_1) entered blocking state [ 2247.765836][T19637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2248.184171][T27248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2248.427218][T22643] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2248.656981][T22643] usb 2-1: Using ep0 maxpacket: 16 [ 2248.701255][T22643] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2248.711535][T22643] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.722780][T22643] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2248.732335][T22643] usb 2-1: config 1 has no interface number 1 [ 2248.738952][T22643] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2248.748410][T22643] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2248.759779][T22643] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2248.802545][T22643] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2248.813356][T22643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.822597][T22643] usb 2-1: Product: syz [ 2248.827331][T22643] usb 2-1: Manufacturer: syz [ 2248.832337][T22643] usb 2-1: SerialNumber: syz [ 2249.245892][T22643] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 2249.254555][T22643] usb 2-1: 2:1 : format type 39 is not supported yet [ 2249.262410][T22643] usb 2-1: selecting invalid altsetting 0 [ 2249.501059][T22643] usb 2-1: USB disconnect, device number 119 [ 2249.659777][ T5573] udevd[5573]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2250.729099][T27248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2251.327369][T27248] veth0_vlan: entered promiscuous mode [ 2251.450376][T27248] veth1_vlan: entered promiscuous mode [ 2251.851679][T27248] veth0_macvtap: entered promiscuous mode [ 2251.935159][T27248] veth1_macvtap: entered promiscuous mode [ 2252.220253][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.231239][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.241530][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.252439][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.263674][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.274538][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.285189][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.298166][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.308930][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.319962][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.336257][T27248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2252.588501][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.601681][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.614213][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.625112][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.635291][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.646736][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.656941][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.667899][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.678230][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.689174][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.700522][T27248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.711775][T27248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.728063][T27248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2252.881015][T27248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.891361][T27248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.900743][T27248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.915478][T27248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.987512][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9909'. [ 2253.783086][T27396] loop3: detected capacity change from 0 to 4096 [ 2253.857306][T27396] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 2254.380615][T27396] ntfs3: loop3: failed to convert "c46c" to cp866 [ 2255.309899][T27415] loop1: detected capacity change from 0 to 1024 [ 2255.322197][T27415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2255.331979][T27415] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 2255.343449][T27415] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 2255.353652][T27415] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2255.387153][T27415] JBD2: no valid journal superblock found [ 2255.393238][T27415] EXT4-fs (loop1): Could not load journal inode [ 2255.980314][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2255.987568][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2256.918296][T27427] loop3: detected capacity change from 0 to 2048 [ 2257.065885][T27434] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2257.198069][T27427] NILFS (loop3): failed to count free inodes: err=-34 [ 2259.092823][T27452] loop1: detected capacity change from 0 to 1024 [ 2259.216336][T27452] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 2259.958431][T27463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9933'. [ 2261.814591][T19646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2261.822932][T19646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2262.110147][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2262.119623][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2268.390005][T27505] loop1: detected capacity change from 0 to 1024 [ 2269.299793][T27505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2269.680251][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2271.748524][T24522] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2272.065247][T24522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.076959][T24522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.087362][T24522] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 2272.096880][T24522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.139924][T24522] usb 4-1: config 0 descriptor?? [ 2272.679303][T24522] logitech-djreceiver 0003:046D:C534.002D: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input0 [ 2272.860110][T11556] usb 4-1: USB disconnect, device number 2 [ 2273.189966][T27548] team0: Device veth0_macvtap failed to register rx_handler [ 2277.611582][T27595] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9986'. [ 2278.128108][T27599] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 2278.234901][T27600] loop3: detected capacity change from 0 to 256 [ 2279.205654][T27610] loop3: detected capacity change from 0 to 164 [ 2279.408267][T27610] isofs: isofs_export_get_parent(): child directory not normalized! [ 2279.770516][T27613] ö˙˙: entered promiscuous mode [ 2280.842779][T27626] loop3: detected capacity change from 0 to 64 [ 2280.903903][T27624] loop1: detected capacity change from 0 to 1024 [ 2281.079992][T27624] hfsplus: bad catalog entry type [ 2281.546216][T19652] hfsplus: b-tree write err: -5, ino 4 [ 2281.955763][T27636] loop1: detected capacity change from 0 to 256 [ 2284.329078][T27649] loop3: detected capacity change from 0 to 4096 [ 2284.389518][T27649] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 2284.573894][T27649] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 2284.721660][T27649] ntfs3: loop3: ino=1a, Correct links count -> 1. [ 2284.920047][T27649] ntfs3: loop3: ino=5, "/" directory corrupted [ 2285.426646][T24522] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2285.755828][T24522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2285.767936][T24522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2285.782010][T24522] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 2285.792797][T24522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2285.835684][T24522] usb 2-1: config 0 descriptor?? [ 2286.046765][T27672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10024'. [ 2286.462686][T24522] wacom 0003:056A:0017.002E: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 2286.544132][T24522] wacom 0003:056A:0017.002E: hidraw0: USB HID v0.00 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 2286.560960][T24522] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.002E/input/input57 [ 2286.837331][T24522] usb 2-1: USB disconnect, device number 120 [ 2289.729143][ T29] audit: type=1326 audit(1725008539.927:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.3.10036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1476f79ef9 code=0x0 [ 2289.805411][T27704] loop1: detected capacity change from 0 to 256 [ 2292.104011][T27721] loop1: detected capacity change from 0 to 1024 [ 2292.229972][T27725] netlink: 'syz.0.10048': attribute type 16 has an invalid length. [ 2292.777310][T19652] hfsplus: b-tree write err: -5, ino 4 [ 2293.191539][T27732] devpts: called with bogus options [ 2294.930351][T22643] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2295.338130][T22643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2295.349605][T22643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2295.359944][T22643] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2295.373820][T22643] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 2295.383416][T22643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.454934][T22643] usb 3-1: config 0 descriptor?? [ 2296.870055][T27762] loop1: detected capacity change from 0 to 1024 [ 2297.108808][T27762] hfsplus: bad catalog entry type [ 2297.357750][T22643] glorious 0003:258A:0036.002F: unknown main item tag 0x0 [ 2297.454158][T22643] glorious 0003:258A:0036.002F: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.2-1/input0 [ 2297.608749][T19640] hfsplus: b-tree write err: -5, ino 4 [ 2298.069738][T24522] usb 3-1: USB disconnect, device number 113 [ 2298.463879][T27771] loop1: detected capacity change from 0 to 1024 [ 2300.395161][T27796] program syz.0.10081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2300.975221][T27802] netlink: 'syz.4.10080': attribute type 4 has an invalid length. [ 2302.399309][T27818] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 2303.147834][ T29] audit: type=1326 audit(1725008553.357:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27826 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8379ef9 code=0x7ffc0000 [ 2303.148114][ T29] audit: type=1326 audit(1725008553.387:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27826 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3c8379ef9 code=0x7ffc0000 [ 2303.148370][ T29] audit: type=1326 audit(1725008553.387:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27826 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8379ef9 code=0x7ffc0000 [ 2303.148626][ T29] audit: type=1326 audit(1725008553.387:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27826 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8379ef9 code=0x7ffc0000 [ 2304.846658][T22643] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2305.046614][T22643] usb 4-1: Using ep0 maxpacket: 8 [ 2305.079583][T22643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2305.091542][T22643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2305.102047][T22643] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2305.115361][T22643] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2305.127593][T22643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.219760][T22643] usb 4-1: config 0 descriptor?? [ 2305.936525][T22643] hid-picolcd 0003:04D8:C002.0030: No report with id 0x11 found [ 2306.116872][T22643] usb 4-1: USB disconnect, device number 3 [ 2308.496198][T27870] overlayfs: conflicting options: nfs_export=on,index=off [ 2308.686459][T22643] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2308.707459][T27863] loop3: detected capacity change from 0 to 4096 [ 2308.899639][T22643] usb 2-1: Using ep0 maxpacket: 16 [ 2308.943738][T22643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2308.955330][T22643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2308.965563][T22643] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2308.979130][T22643] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2308.988625][T22643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.074916][T22643] usb 2-1: config 0 descriptor?? [ 2309.547571][T22643] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 2309.555347][T22643] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 2309.563215][T22643] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 2309.571197][T22643] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 2309.579220][T22643] microsoft 0003:045E:07DA.0031: item 0 4 0 8 parsing failed [ 2309.688996][T22643] microsoft 0003:045E:07DA.0031: parse failed [ 2309.695932][T22643] microsoft 0003:045E:07DA.0031: probe with driver microsoft failed with error -22 [ 2309.827761][T24522] usb 2-1: USB disconnect, device number 121 [ 2311.197584][T27890] autofs: Bad value for 'fd' [ 2311.209884][T27889] loop1: detected capacity change from 0 to 1024 [ 2311.337266][T22643] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2311.547058][T22643] usb 4-1: Using ep0 maxpacket: 16 [ 2311.587633][T22643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2311.599000][T22643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2311.609420][T22643] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2311.618924][T22643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.623210][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10124'. [ 2311.771411][T22643] usb 4-1: config 0 descriptor?? [ 2312.307547][T22643] hid (null): bogus close delimiter [ 2312.347043][T22643] nzxt-kraken2 0003:1E71:170E.0032: bogus close delimiter [ 2312.354929][T22643] nzxt-kraken2 0003:1E71:170E.0032: item 0 0 2 10 parsing failed [ 2312.434617][T22643] nzxt-kraken2 0003:1E71:170E.0032: hid parse failed with -22 [ 2312.443207][T22643] nzxt-kraken2 0003:1E71:170E.0032: probe with driver nzxt-kraken2 failed with error -22 [ 2312.577820][T22643] usb 4-1: USB disconnect, device number 4 [ 2314.516719][T22643] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2314.707008][T22643] usb 3-1: Using ep0 maxpacket: 32 [ 2314.747829][T22643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.748037][T22643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.748202][T22643] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2314.748465][T22643] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 2314.748648][T22643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.759039][T22643] usb 3-1: config 0 descriptor?? [ 2315.346691][T27929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10145'. [ 2315.535473][T22643] cmedia_hs100b 0003:0D8C:0014.0033: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.2-1/input0 [ 2316.014477][T22643] usb 3-1: USB disconnect, device number 114 [ 2316.224639][T27934] loop1: detected capacity change from 0 to 256 [ 2316.502824][T27934] FAT-fs (loop1): Directory bread(block 64) failed [ 2316.510446][T27934] FAT-fs (loop1): Directory bread(block 65) failed [ 2316.517639][T27934] FAT-fs (loop1): Directory bread(block 66) failed [ 2316.524469][T27934] FAT-fs (loop1): Directory bread(block 67) failed [ 2316.531685][T27934] FAT-fs (loop1): Directory bread(block 68) failed [ 2316.538790][T27934] FAT-fs (loop1): Directory bread(block 69) failed [ 2316.545770][T27934] FAT-fs (loop1): Directory bread(block 70) failed [ 2316.552720][T27934] FAT-fs (loop1): Directory bread(block 71) failed [ 2316.559879][T27934] FAT-fs (loop1): Directory bread(block 72) failed [ 2316.566819][T27934] FAT-fs (loop1): Directory bread(block 73) failed [ 2317.469385][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2317.477851][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2317.661788][T24522] kernel write not supported for file /131/loginuid (pid: 24522 comm: kworker/1:4) [ 2317.801685][T27947] tipc: Started in network mode [ 2317.807145][T27947] tipc: Node identity 460, cluster identity 4711 [ 2317.813740][T27947] tipc: Node number set to 1120 [ 2318.095529][T27950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10155'. [ 2318.631015][T27953] loop1: detected capacity change from 0 to 1024 [ 2318.719846][T27953] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 2318.868830][T27953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2319.460501][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2319.787593][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10163'. [ 2319.797159][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10163'. [ 2320.633294][T27982] netlink: 'syz.1.10169': attribute type 33 has an invalid length. [ 2320.642204][T27982] netlink: 'syz.1.10169': attribute type 3 has an invalid length. [ 2320.650461][T27982] netlink: 152988 bytes leftover after parsing attributes in process `syz.1.10169'. [ 2321.227956][T27989] netlink: 'syz.1.10172': attribute type 5 has an invalid length. [ 2322.677473][T28003] loop1: detected capacity change from 0 to 16 [ 2322.742455][T28003] erofs: (device loop1): mounted with root inode @ nid 36. [ 2323.382602][T28010] loop1: detected capacity change from 0 to 256 [ 2323.427884][T28011] No buffer was provided with the request [ 2323.436250][T28010] exfat: Deprecated parameter 'utf8' [ 2323.477862][T28012] netlink: 'syz.4.10177': attribute type 31 has an invalid length. [ 2323.534183][T28015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10185'. [ 2323.548899][T28010] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 2325.336301][ T29] audit: type=1326 audit(1725008575.617:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28027 comm="syz.0.10192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc873179ef9 code=0x0 [ 2325.623296][T28019] loop3: detected capacity change from 0 to 4096 [ 2325.675249][T28019] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 2329.356702][T28076] loop1: detected capacity change from 0 to 8 [ 2329.718678][T28076] SQUASHFS error: Unable to read directory block [629:46] [ 2330.078540][T28082] loop3: detected capacity change from 0 to 128 [ 2330.157015][T28082] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 2330.716910][ T5203] sysv_free_block: flc_count > flc_size [ 2330.722716][ T5203] sysv_free_block: flc_count > flc_size [ 2330.733630][ T5203] sysv_free_block: flc_count > flc_size [ 2330.740937][ T5203] sysv_free_block: flc_count > flc_size [ 2330.746922][ T5203] sysv_free_block: flc_count > flc_size [ 2330.752837][ T5203] sysv_free_block: flc_count > flc_size [ 2330.761405][ T5203] sysv_free_block: flc_count > flc_size [ 2330.767704][ T5203] sysv_free_block: flc_count > flc_size [ 2330.774188][ T5203] sysv_free_block: flc_count > flc_size [ 2330.780102][ T5203] sysv_free_block: flc_count > flc_size [ 2330.787367][ T5203] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2332.324997][T28087] loop1: detected capacity change from 0 to 4096 [ 2332.520578][T28100] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2334.063741][T28113] loop3: detected capacity change from 0 to 512 [ 2334.143864][T28113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2334.436929][T28113] EXT4-fs (loop3): 1 truncate cleaned up [ 2334.444835][T28113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2334.938694][ T5203] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2335.432710][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10227'. [ 2335.446943][T28123] tipc: Started in network mode [ 2335.452042][T28123] tipc: Node identity , cluster identity 8 [ 2336.017909][T28114] loop1: detected capacity change from 0 to 4096 [ 2336.143314][T28114] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 2336.351810][T28114] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 2339.367913][T28158] netlink: 'syz.3.10246': attribute type 12 has an invalid length. [ 2339.376405][T28158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10246'. [ 2339.487497][T22643] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2339.746249][T22643] usb 3-1: Using ep0 maxpacket: 8 [ 2340.207068][T22643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2340.218640][T22643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2340.228944][T22643] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 2340.238405][T22643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.254821][T22643] usb 3-1: config 0 descriptor?? [ 2341.135363][T28166] loop3: detected capacity change from 0 to 8 [ 2341.168570][T22643] uclogic 0003:2179:0077.0034: interface is invalid, ignoring [ 2341.407941][T28166] SQUASHFS error: Unable to read directory block [629:46] [ 2341.516462][T22643] usb 3-1: USB disconnect, device number 115 [ 2341.900035][T28160] loop1: detected capacity change from 0 to 4096 [ 2341.948426][T28160] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 2342.412941][T28160] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 2344.471502][T28190] loop1: detected capacity change from 0 to 256 [ 2344.993292][T28190] FAT-fs (loop1): Directory bread(block 64) failed [ 2345.000763][T28190] FAT-fs (loop1): Directory bread(block 65) failed [ 2345.008033][T28190] FAT-fs (loop1): Directory bread(block 66) failed [ 2345.014854][T28190] FAT-fs (loop1): Directory bread(block 67) failed [ 2345.022390][T28190] FAT-fs (loop1): Directory bread(block 68) failed [ 2345.029405][T28190] FAT-fs (loop1): Directory bread(block 69) failed [ 2345.036546][T28190] FAT-fs (loop1): Directory bread(block 70) failed [ 2345.043362][T28190] FAT-fs (loop1): Directory bread(block 71) failed [ 2345.050647][T28190] FAT-fs (loop1): Directory bread(block 72) failed [ 2345.057622][T28190] FAT-fs (loop1): Directory bread(block 73) failed [ 2345.242531][T28190] bio_check_eod: 8 callbacks suppressed [ 2345.242622][T28190] syz.1.10261: attempt to access beyond end of device [ 2345.242622][T28190] loop1: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 2345.263164][T28190] syz.1.10261: attempt to access beyond end of device [ 2345.263164][T28190] loop1: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 2345.356281][ T29] audit: type=1800 audit(1725008595.567:171): pid=28190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10261" name="file2" dev="loop1" ino=1048827 res=0 errno=0 [ 2352.578612][T28234] loop1: detected capacity change from 0 to 2048 [ 2352.630290][T28234] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2352.704545][T28241] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2357.729676][ T29] audit: type=1326 audit(1725008607.727:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28277 comm="syz.3.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1476f79ef9 code=0x7ffc0000 [ 2357.752762][ T29] audit: type=1326 audit(1725008607.757:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28277 comm="syz.3.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1476f79ef9 code=0x7ffc0000 [ 2357.779603][ T29] audit: type=1326 audit(1725008607.787:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28277 comm="syz.3.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f1476f79ef9 code=0x7ffc0000 [ 2357.809825][ T29] audit: type=1326 audit(1725008607.787:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28277 comm="syz.3.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1476f79ef9 code=0x7ffc0000 [ 2357.833183][ T29] audit: type=1326 audit(1725008607.787:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28277 comm="syz.3.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1476f79ef9 code=0x7ffc0000 [ 2358.518135][T27169] Bluetooth: hci6: command tx timeout [ 2359.917937][T28303] tipc: Started in network mode [ 2359.923176][T28303] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 2359.938054][T28303] tipc: Enabled bearer , priority 10 [ 2361.075430][T11578] tipc: Node number set to 4269801488 [ 2361.605132][T28318] loop3: detected capacity change from 0 to 164 [ 2361.734800][T28318] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 2361.770653][T28316] loop1: detected capacity change from 0 to 2048 [ 2361.910507][T28319] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2362.127259][ T29] audit: type=1800 audit(1725008612.257:177): pid=28316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10315" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2365.259564][T28341] loop3: detected capacity change from 0 to 1024 [ 2365.558190][T28341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 2366.101940][ T5203] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 2366.707508][T28357] netlink: 'syz.1.10334': attribute type 11 has an invalid length. [ 2366.899241][T28359] loop3: detected capacity change from 0 to 64 [ 2368.295558][T28367] loop1: detected capacity change from 0 to 512 [ 2368.350804][T28367] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2368.407723][T28371] kernel profiling enabled (shift: 63) [ 2368.415522][T28371] profiling shift: 63 too large [ 2368.574768][T28367] EXT4-fs (loop1): 1 truncate cleaned up [ 2368.583028][T28367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2369.169923][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2369.574353][T28380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10339'. [ 2369.599725][T28382] loop1: detected capacity change from 0 to 64 [ 2372.567663][T28397] loop3: detected capacity change from 0 to 128 [ 2372.655996][ C0] sched: RT throttling activated [ 2372.776975][T28387] loop1: detected capacity change from 0 to 32768 [ 2372.786815][T28387] BTRFS error: invalid value 0 for thread_pool [ 2374.829298][T28408] loop3: detected capacity change from 0 to 2048 [ 2374.955551][T28418] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2375.339784][T28422] loop1: detected capacity change from 0 to 256 [ 2375.378059][T28423] qrtr: Invalid version 0 [ 2375.456841][T28422] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 2376.259329][T18089] kernel write not supported for file /cpuinfo (pid: 18089 comm: kworker/0:4) [ 2376.581473][T28432] loop3: detected capacity change from 0 to 256 [ 2376.723332][T28432] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2376.793970][T28435] xt_hashlimit: size too large, truncated to 1048576 [ 2376.900834][ T29] audit: type=1800 audit(1725008627.177:178): pid=28432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10363" name="bus" dev="loop3" ino=1048828 res=0 errno=0 [ 2378.084936][T28444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10369'. [ 2378.874794][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2378.881810][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2380.924086][T28461] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2385.131773][T28497] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 2386.847887][T28514] binder: 28511:28514 ioctl c0306201 200003c0 returned -22 [ 2389.469453][T28544] loop1: detected capacity change from 0 to 1024 [ 2389.566576][T28544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2390.267329][T28553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10419'. [ 2390.278356][T28553] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10419'. [ 2395.639708][T28594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10439'. [ 2396.896459][T24522] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2397.434544][T24522] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2397.539306][T24522] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7 [ 2397.548846][T24522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.557516][T24522] usb 4-1: Product: syz [ 2397.561956][T24522] usb 4-1: Manufacturer: syz [ 2397.567065][T24522] usb 4-1: SerialNumber: syz [ 2397.839576][T24522] usb 4-1: config 0 descriptor?? [ 2397.880571][T24522] usb 4-1: bad CDC descriptors [ 2398.177980][T24522] usb 4-1: USB disconnect, device number 5 [ 2398.258604][T28617] loop1: detected capacity change from 0 to 164 [ 2403.608100][T28670] loop3: detected capacity change from 0 to 256 [ 2404.087822][T28672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10471'. [ 2404.982181][T28678] netlink: 'syz.0.10477': attribute type 1 has an invalid length. [ 2405.589715][T24522] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2405.806480][T24522] usb 2-1: Using ep0 maxpacket: 8 [ 2405.820463][T24522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2405.831988][T24522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2405.842724][T24522] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2405.852346][T24522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.875584][T24522] usb 2-1: config 0 descriptor?? [ 2406.427270][T24522] greenasia 0003:0E8F:0012.0035: unknown main item tag 0x0 [ 2406.447538][T24522] greenasia 0003:0E8F:0012.0035: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 2406.459549][T24522] greenasia 0003:0E8F:0012.0035: no inputs found [ 2406.658967][T18089] usb 2-1: USB disconnect, device number 122 [ 2406.763704][T28694] netlink: 'syz.3.10484': attribute type 1 has an invalid length. [ 2406.772045][T28694] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10484'. [ 2408.117229][T18089] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2408.347164][T18089] usb 5-1: Using ep0 maxpacket: 32 [ 2408.365394][T18089] usb 5-1: too many configurations: 30, using maximum allowed: 8 [ 2408.404392][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.415451][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2408.486463][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.497491][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2408.606569][T22643] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2408.615844][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.627849][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2408.882419][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.893064][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2408.953441][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.966532][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2408.993436][T22643] usb 2-1: Using ep0 maxpacket: 32 [ 2409.036555][T22643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2409.048265][T22643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2409.058650][T22643] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2409.070074][T22643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.118738][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2409.129340][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2409.159781][T22643] usb 2-1: config 0 descriptor?? [ 2409.184779][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2409.195575][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2409.300561][T18089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2409.312116][T18089] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2409.627573][T18089] usb 5-1: string descriptor 0 read error: -71 [ 2409.634960][T18089] usb 5-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 2409.645450][T18089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.729256][T18089] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 2409.738606][T18089] usb 5-1: no configuration chosen from 8 choices [ 2409.769380][T22643] ft260 0003:0403:6030.0036: unknown main item tag 0x0 [ 2409.811489][T18089] usb 5-1: USB disconnect, device number 93 [ 2409.899768][T22643] ft260 0003:0403:6030.0036: failed to retrieve chip version [ 2409.909524][T22643] ft260 0003:0403:6030.0036: probe with driver ft260 failed with error -71 [ 2410.035669][T22643] usb 2-1: USB disconnect, device number 123 [ 2411.783302][T28731] loop3: detected capacity change from 0 to 256 [ 2412.289826][T28733] loop1: detected capacity change from 0 to 1764 [ 2413.075109][T28741] loop1: detected capacity change from 0 to 128 [ 2413.087807][T28741] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2413.611707][T24522] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2413.780091][T28745] netlink: 'syz.1.10510': attribute type 1 has an invalid length. [ 2413.828039][T24522] usb 3-1: Using ep0 maxpacket: 32 [ 2413.878679][T24522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2413.878959][T24522] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2413.879141][T24522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2413.894250][T24522] usb 3-1: config 0 descriptor?? [ 2414.638255][T24522] nintendo 0003:057E:200E.0037: unknown main item tag 0x0 [ 2414.767199][T24522] nintendo 0003:057E:200E.0037: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 2414.910654][T24522] nintendo 0003:057E:200E.0037: Failed charging grip handshake [ 2414.921835][T24522] nintendo 0003:057E:200E.0037: Failed to initialize controller; ret=-110 [ 2415.037846][T24522] nintendo 0003:057E:200E.0037: probe - fail = -110 [ 2415.045629][T24522] nintendo 0003:057E:200E.0037: probe with driver nintendo failed with error -110 [ 2415.140772][T24522] usb 3-1: USB disconnect, device number 116 [ 2417.957643][T28775] loop1: detected capacity change from 0 to 256 [ 2418.254841][T28775] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 2419.794520][T28791] loop1: detected capacity change from 0 to 256 [ 2419.845156][T28791] vfat: Bad value for 'fmask' [ 2421.683344][T24522] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2422.133097][T24522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2422.144833][T24522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2422.155420][T24522] usb 3-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 2422.165348][T24522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2422.299675][T24522] usb 3-1: config 0 descriptor?? [ 2423.470601][T24522] usb 3-1: USB disconnect, device number 117 [ 2424.123751][T28819] loop1: detected capacity change from 0 to 256 [ 2424.484764][T28819] FAT-fs (loop1): Directory bread(block 64) failed [ 2424.492383][T28819] FAT-fs (loop1): Directory bread(block 65) failed [ 2424.500056][T28819] FAT-fs (loop1): Directory bread(block 66) failed [ 2424.507170][T28819] FAT-fs (loop1): Directory bread(block 67) failed [ 2424.542770][T28819] FAT-fs (loop1): Directory bread(block 68) failed [ 2424.552775][T28819] FAT-fs (loop1): Directory bread(block 69) failed [ 2424.560032][T28819] FAT-fs (loop1): Directory bread(block 70) failed [ 2424.567047][T28819] FAT-fs (loop1): Directory bread(block 71) failed [ 2424.574062][T28819] FAT-fs (loop1): Directory bread(block 72) failed [ 2424.581076][T28819] FAT-fs (loop1): Directory bread(block 73) failed [ 2425.583163][T28824] loop1: detected capacity change from 0 to 512 [ 2425.834340][T28824] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 2425.846222][T28824] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2425.859103][T28824] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.10547: Failed to acquire dquot type 1 [ 2425.994930][T28824] EXT4-fs (loop1): 1 truncate cleaned up [ 2426.002930][T28824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2426.016949][T28824] ext4 filesystem being mounted at /2432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2426.102423][T24480] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2426.192659][T24480] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2426.213481][T24480] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2426.243246][T24480] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2426.262792][T24480] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2426.275744][T24480] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2426.331193][T28824] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 2426.342291][T28824] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2426.352805][T28824] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.10547: Failed to acquire dquot type 1 [ 2426.816966][T28830] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 2426.875015][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2428.213231][T19652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2428.365791][T24480] Bluetooth: hci8: command tx timeout [ 2428.466871][T19652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2428.631236][T19652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2428.861981][T19652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.067020][T28834] chnl_net:caif_netlink_parms(): no params data found [ 2429.486293][T19652] team0: left allmulticast mode [ 2429.491562][T19652] team_slave_0: left allmulticast mode [ 2429.497596][T19652] team_slave_1: left allmulticast mode [ 2429.503324][T19652] team0: left promiscuous mode [ 2429.508559][T19652] team_slave_0: left promiscuous mode [ 2429.515076][T19652] team_slave_1: left promiscuous mode [ 2429.522741][T19652] bridge0: port 3(team0) entered disabled state [ 2429.619066][T19652] bridge_slave_1: left allmulticast mode [ 2429.625196][T19652] bridge_slave_1: left promiscuous mode [ 2429.632957][T19652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2429.731148][T19652] bridge_slave_0: left allmulticast mode [ 2429.737430][T19652] bridge_slave_0: left promiscuous mode [ 2429.744125][T19652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2430.462019][T24480] Bluetooth: hci8: command tx timeout [ 2430.631739][T28864] loop1: detected capacity change from 0 to 1024 [ 2430.662306][T28864] EXT4-fs: Ignoring removed nobh option [ 2430.671083][T28864] EXT4-fs: Ignoring removed orlov option [ 2430.678006][T28864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2430.969440][T28864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2431.659298][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2431.927804][T19652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2432.028450][T19652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2432.141660][T19652] bond0 (unregistering): Released all slaves [ 2432.453239][T19652] tipc: Disabling bearer [ 2432.461195][T19652] tipc: Left network mode [ 2432.519695][T24480] Bluetooth: hci8: command tx timeout [ 2434.120101][T28890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10568'. [ 2434.130776][T19652] hsr_slave_0: left promiscuous mode [ 2434.249609][T19652] hsr_slave_1: left promiscuous mode [ 2434.286606][T19652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2434.323866][T19652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2434.331982][T19652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2434.527998][T19652] veth1_macvtap: left promiscuous mode [ 2434.533835][T19652] veth0_macvtap: left promiscuous mode [ 2434.540034][T19652] veth1_vlan: left promiscuous mode [ 2434.545692][T19652] veth0_vlan: left promiscuous mode [ 2434.596532][T24480] Bluetooth: hci8: command tx timeout [ 2435.234989][T19652] infiniband syz2: set down [ 2437.164384][T19646] smc: removing ib device syz2 [ 2437.232012][T28919] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10579'. [ 2437.242347][T28919] netlink: 'syz.1.10579': attribute type 1 has an invalid length. [ 2437.482023][T19652] team0 (unregistering): Port device team_slave_1 removed [ 2437.588939][T19652] team0 (unregistering): Port device team_slave_0 removed [ 2438.697030][T28834] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.698605][T11578] infiniband syz2: ib_query_port failed (-19) [ 2438.704834][T28834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.719032][T28834] bridge_slave_0: entered allmulticast mode [ 2438.728779][T28834] bridge_slave_0: entered promiscuous mode [ 2439.777392][T28834] bridge0: port 2(bridge_slave_1) entered blocking state [ 2439.788385][T28834] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.796680][T28834] bridge_slave_1: entered allmulticast mode [ 2439.807673][T28834] bridge_slave_1: entered promiscuous mode [ 2441.446255][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2441.455241][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2442.245065][T28834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2442.508292][T28834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2443.758997][T28834] team0: Port device team_slave_0 added [ 2443.856893][T28834] team0: Port device team_slave_1 added [ 2444.328048][T28948] netlink: 'syz.4.10588': attribute type 29 has an invalid length. [ 2444.410869][T28834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2444.418225][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2444.444900][T28834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2444.667757][T28834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2444.674999][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2444.706737][T28834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2444.721304][T28949] netlink: 'syz.4.10588': attribute type 29 has an invalid length. [ 2445.043611][T27169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2445.059872][T27169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2445.079332][T27169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2445.118153][T27169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2445.131706][T28834] hsr_slave_0: entered promiscuous mode [ 2445.151298][T27169] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2445.170638][T27169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2445.268389][T28834] hsr_slave_1: entered promiscuous mode [ 2445.387128][T28834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2445.394994][T28834] Cannot create hsr debugfs directory [ 2447.322168][T27169] Bluetooth: hci3: command tx timeout [ 2448.727706][T28965] loop1: detected capacity change from 0 to 32768 [ 2448.757717][T28965] bcachefs (/dev/loop1): error validating superblock: Invalid superblock: member info area missing [ 2448.770897][T28965] bcachefs: bch2_fs_get_tree() error: invalid_sb_members_missing [ 2449.284962][T28834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2449.441103][T27169] Bluetooth: hci3: command tx timeout [ 2449.522079][T28834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2449.638003][T28834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2449.827651][T28834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2450.097452][T28954] chnl_net:caif_netlink_parms(): no params data found [ 2451.506239][T27169] Bluetooth: hci3: command tx timeout [ 2452.435843][T28834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2452.680468][T28834] 8021q: adding VLAN 0 to HW filter on device team0 [ 2452.988857][T19637] bridge0: port 1(bridge_slave_0) entered blocking state [ 2452.996777][T19637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2453.028398][T28954] bridge0: port 1(bridge_slave_0) entered blocking state [ 2453.038836][T28954] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.047234][T28954] bridge_slave_0: entered allmulticast mode [ 2453.057355][T28954] bridge_slave_0: entered promiscuous mode [ 2453.207977][T19637] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.215871][T19637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2453.279338][T28954] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.291335][T28954] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.305553][T28954] bridge_slave_1: entered allmulticast mode [ 2453.315751][T28954] bridge_slave_1: entered promiscuous mode [ 2453.565799][T27169] Bluetooth: hci3: command tx timeout [ 2454.225747][T28954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2454.284474][T28834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2454.335815][T28954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2454.754683][T28954] team0: Port device team_slave_0 added [ 2454.849831][T28954] team0: Port device team_slave_1 added [ 2455.213212][T28954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2455.221683][T28954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2455.251663][T28954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2455.510782][T28954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2455.519303][T28954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2455.547714][T28954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2456.842331][T28935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.871070][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10612'. [ 2457.153788][T28935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2457.480483][T28935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2457.606874][T28954] hsr_slave_0: entered promiscuous mode [ 2457.664144][T28954] hsr_slave_1: entered promiscuous mode [ 2457.698604][T28954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2457.709147][T28954] Cannot create hsr debugfs directory [ 2457.883081][T28935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2458.482595][T28834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2459.028126][T28935] bridge_slave_1: left allmulticast mode [ 2459.037151][T28935] bridge_slave_1: left promiscuous mode [ 2459.043865][T28935] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.182389][T28935] bridge_slave_0: left allmulticast mode [ 2459.188470][T28935] bridge_slave_0: left promiscuous mode [ 2459.195189][T28935] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.659928][T29046] sock: sock_timestamping_bind_phc: sock not bind to device [ 2460.216983][T29050] netlink: 'syz.0.10621': attribute type 2 has an invalid length. [ 2460.225269][T29050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10621'. [ 2460.770945][T28935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2460.868358][T28935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2461.002038][T28935] bond0 (unregistering): Released all slaves [ 2461.863348][T28834] veth0_vlan: entered promiscuous mode [ 2462.325778][T29063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10626'. [ 2462.335722][T29063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10626'. [ 2462.479623][T28935] hsr_slave_0: left promiscuous mode [ 2462.524890][T28935] hsr_slave_1: left promiscuous mode [ 2462.552347][T28935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2462.560469][T28935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2462.630174][T28935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2462.638709][T28935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2462.776551][T28935] veth1_macvtap: left promiscuous mode [ 2462.782489][T28935] veth1_vlan: left promiscuous mode [ 2462.788297][T28935] veth0_vlan: left promiscuous mode [ 2465.312077][T28935] team0 (unregistering): Port device team_slave_1 removed [ 2465.437412][T28935] team0 (unregistering): Port device team_slave_0 removed [ 2466.144264][T28834] veth1_vlan: entered promiscuous mode [ 2466.688937][T29096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10636'. [ 2466.863487][T28834] veth0_macvtap: entered promiscuous mode [ 2466.934088][T28834] veth1_macvtap: entered promiscuous mode [ 2467.192825][T28954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2467.295095][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2467.307445][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.318977][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2467.330935][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.341756][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2467.352699][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.362909][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2467.373667][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.384645][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2467.395530][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.411952][T28834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2467.462263][T28954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2467.527823][T29100] loop1: detected capacity change from 0 to 512 [ 2467.597942][T28954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2467.637324][T29100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2467.699187][T29100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 2467.711635][T29100] System zones: 1-12 [ 2467.781129][T28954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2467.795372][T29100] EXT4-fs (loop1): 1 truncate cleaned up [ 2467.805407][T29100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2467.878890][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2467.890033][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.900273][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2467.911055][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.921317][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2467.932141][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.943954][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2467.955108][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.965328][T28834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2467.976211][T28834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2467.991648][T28834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2468.091301][ T29] audit: type=1800 audit(1725008718.267:179): pid=29100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10638" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 2468.263888][T28834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2468.273337][T28834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2468.282888][T28834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2468.292337][T28834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2468.392213][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2469.709872][T28954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2470.017475][T28954] 8021q: adding VLAN 0 to HW filter on device team0 [ 2470.081993][T28936] bridge0: port 1(bridge_slave_0) entered blocking state [ 2470.082560][T28936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2470.166954][T28935] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.167523][T28935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2473.415752][T28954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2474.136934][T28954] veth0_vlan: entered promiscuous mode [ 2474.217231][T28954] veth1_vlan: entered promiscuous mode [ 2474.772113][T28954] veth0_macvtap: entered promiscuous mode [ 2474.892432][T28954] veth1_macvtap: entered promiscuous mode [ 2475.207244][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2475.221640][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.232949][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2475.246430][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.263514][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2475.274503][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.284830][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2475.295781][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.306252][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2475.322160][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.335437][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2475.346462][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.362810][T28954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2475.902820][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2475.914793][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.925182][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2475.938013][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.948834][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2475.959826][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.970154][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2475.981401][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2475.991745][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2476.003429][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.013919][T28954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2476.024756][T28954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2476.042514][T28954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2476.472396][T28954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.482067][T28954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.492843][T28954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.503447][T28954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2478.499524][T29210] loop1: detected capacity change from 0 to 256 [ 2478.950231][T24697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2478.958502][T24697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2479.054272][T29210] FAT-fs (loop1): Directory bread(block 64) failed [ 2479.061332][T29210] FAT-fs (loop1): Directory bread(block 65) failed [ 2479.068769][T29210] FAT-fs (loop1): Directory bread(block 66) failed [ 2479.075578][T29210] FAT-fs (loop1): Directory bread(block 67) failed [ 2479.082800][T29210] FAT-fs (loop1): Directory bread(block 68) failed [ 2479.089778][T29210] FAT-fs (loop1): Directory bread(block 69) failed [ 2479.096996][T29210] FAT-fs (loop1): Directory bread(block 70) failed [ 2479.105500][T29210] FAT-fs (loop1): Directory bread(block 71) failed [ 2479.112979][T29210] FAT-fs (loop1): Directory bread(block 72) failed [ 2479.119895][T29210] FAT-fs (loop1): Directory bread(block 73) failed [ 2479.483305][T24697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2479.491756][T24697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2481.709359][T29238] loop1: detected capacity change from 0 to 128 [ 2481.872980][T29238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10672'. [ 2481.890809][T29238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10672'. [ 2482.591928][T29247] netlink: 'syz.3.10676': attribute type 29 has an invalid length. [ 2483.319252][T27169] Bluetooth: hci6: command 0x0406 tx timeout [ 2483.369782][T29257] loop3: detected capacity change from 0 to 64 [ 2484.126615][T28834] hfs: node 4:3 still has 1 user(s)! [ 2485.397836][T29282] netlink: 'syz.0.10690': attribute type 2 has an invalid length. [ 2485.961735][T24697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2485.973161][T24697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2486.246248][T19646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2486.254355][T19646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2487.358028][T29297] loop3: detected capacity change from 0 to 512 [ 2487.413559][T29297] EXT4-fs: Ignoring removed oldalloc option [ 2487.589636][T29297] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 2487.670762][T29297] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.10696: invalid indirect mapped block 2683928664 (level 1) [ 2487.763956][T29297] EXT4-fs (loop3): 1 truncate cleaned up [ 2487.772005][T29297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2487.967487][T29297] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.10696: Invalid block bitmap block 3 in block_group 0 [ 2488.340451][T28834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2488.727785][T29312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10701'. [ 2489.002483][T29314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10704'. [ 2489.628096][T22656] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2489.956652][T22656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2489.974178][T22656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2489.984578][T22656] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2489.994131][T22656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.079763][T22656] usb 2-1: config 0 descriptor?? [ 2490.645236][T22656] topre 0003:0853:0146.0039: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.1-1/input0 [ 2490.844365][ T9016] usb 2-1: USB disconnect, device number 124 [ 2492.068681][T29341] loop1: detected capacity change from 0 to 64 [ 2492.126484][T11556] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2492.366948][T11556] usb 4-1: Using ep0 maxpacket: 16 [ 2492.395141][T11556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2492.407036][T11556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2492.421179][T11556] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2492.435751][T11556] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2492.445639][T11556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.507361][T11556] usb 4-1: config 0 descriptor?? [ 2493.037975][T11556] corsair 0003:1B1C:1B02.003A: unknown main item tag 0x0 [ 2493.139099][T11556] corsair 0003:1B1C:1B02.003A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 2493.268700][T11556] corsair 0003:1B1C:1B02.003A: Failed to get K90 initial state (error -71). [ 2493.347583][T11556] usb 4-1: USB disconnect, device number 6 [ 2495.255079][T29366] loop3: detected capacity change from 0 to 512 [ 2495.362629][T29366] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.10728: corrupted in-inode xattr: bad e_name length [ 2495.552985][T29366] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.10728: couldn't read orphan inode 15 (err -117) [ 2495.627688][T29366] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2496.089570][T28834] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 2498.469398][T29400] loop1: detected capacity change from 0 to 256 [ 2500.130452][T29421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10752'. [ 2500.462482][T29423] loop3: detected capacity change from 0 to 64 [ 2500.833531][T29427] netlink: 'syz.1.10756': attribute type 1 has an invalid length. [ 2501.752915][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2501.759961][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2501.870398][T29437] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10761'. [ 2502.691989][T29449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10765'. [ 2502.766969][T29448] mkiss: ax0: crc mode is auto. [ 2503.432219][T29454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10769'. [ 2505.044270][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10778'. [ 2506.692483][T29486] loop3: detected capacity change from 0 to 1024 [ 2507.024054][T29486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2507.606867][T28834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2508.196841][T11556] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2508.406669][T11556] usb 2-1: Using ep0 maxpacket: 16 [ 2508.451120][T11556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2508.462636][T11556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2508.473029][T11556] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 2508.482545][T11556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2508.671709][T11556] usb 2-1: config 0 descriptor?? [ 2509.019337][T24480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2509.061920][T24480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2509.072640][T24480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2509.094738][T24480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2509.118209][T24480] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2509.139734][T24480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2509.196901][T11556] wacom 0003:056A:00B1.003B: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 2509.222203][T11556] wacom 0003:056A:00B1.003B: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.1-1/input0 [ 2509.239932][T11556] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B1.003B/input/input60 [ 2509.604146][T11556] usb 2-1: USB disconnect, device number 125 [ 2511.316894][T24480] Bluetooth: hci1: command tx timeout [ 2511.999132][T29514] chnl_net:caif_netlink_parms(): no params data found [ 2512.136225][T11556] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2512.406875][T11556] usb 4-1: Using ep0 maxpacket: 8 [ 2512.606615][T11556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2512.618274][T11556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2512.628591][T11556] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2512.638082][T11556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.640147][T29538] program syz.4.10804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2512.750496][T11556] usb 4-1: config 0 descriptor?? [ 2513.176724][T29544] loop1: detected capacity change from 0 to 1024 [ 2513.297532][T11556] elecom 0003:056E:010D.003C: item fetching failed at offset 5/7 [ 2513.382404][T11556] elecom 0003:056E:010D.003C: probe with driver elecom failed with error -22 [ 2513.396332][T24480] Bluetooth: hci1: command tx timeout [ 2513.574438][T29544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2513.681582][T29044] usb 4-1: USB disconnect, device number 7 [ 2514.243951][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2514.801178][T29514] bridge0: port 1(bridge_slave_0) entered blocking state [ 2514.811525][T29514] bridge0: port 1(bridge_slave_0) entered disabled state [ 2514.819636][T29514] bridge_slave_0: entered allmulticast mode [ 2514.829420][T29514] bridge_slave_0: entered promiscuous mode [ 2514.981777][T29514] bridge0: port 2(bridge_slave_1) entered blocking state [ 2514.989920][T29514] bridge0: port 2(bridge_slave_1) entered disabled state [ 2514.998040][T29514] bridge_slave_1: entered allmulticast mode [ 2515.008524][T29514] bridge_slave_1: entered promiscuous mode [ 2515.426894][T29514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2515.536576][T24480] Bluetooth: hci1: command tx timeout [ 2515.727474][T29514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2515.863753][T29565] loop1: detected capacity change from 0 to 64 [ 2516.199641][T29514] team0: Port device team_slave_0 added [ 2516.272458][T29565] hfs: request for non-existent node 16777216 in B*Tree [ 2516.283918][T29565] hfs: request for non-existent node 16777216 in B*Tree [ 2516.302826][T29514] team0: Port device team_slave_1 added [ 2516.759200][T29514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2516.767174][T29514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2516.798152][T29514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2517.021569][T29514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2517.029052][T29514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2517.055710][T29514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2517.566733][T24480] Bluetooth: hci1: command tx timeout [ 2517.756428][T29514] hsr_slave_0: entered promiscuous mode [ 2517.804107][T29514] hsr_slave_1: entered promiscuous mode [ 2517.903046][T29514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2517.911096][T29514] Cannot create hsr debugfs directory [ 2518.436090][T29588] loop1: detected capacity change from 0 to 2048 [ 2518.643516][T29588] EXT4-fs: Ignoring removed mblk_io_submit option [ 2518.844797][T29588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2519.103876][T29588] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.10823: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 2519.446162][T29514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2519.709528][ T5193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2519.935273][T29514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2520.333346][T29514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2520.515246][T29609] loop3: detected capacity change from 0 to 512 [ 2520.541179][T29609] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 2520.647159][T29609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 2520.656706][T29609] System zones: 1-12 [ 2520.664100][T29609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2520.671311][T29609] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.10831: Inode bitmap for bg 0 marked uninitialized [ 2520.711361][T29514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2520.896338][T29609] EXT4-fs (loop3): Remounting filesystem read-only [ 2520.905082][T29609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2521.478789][T28834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2521.495449][T29514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2521.616837][T29620] vlan2: entered promiscuous mode [ 2521.622172][T29620] vlan2: entered allmulticast mode [ 2521.631209][T29514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2521.751592][T29514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2521.881894][T29514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2523.745377][T29514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2524.066218][T29514] 8021q: adding VLAN 0 to HW filter on device team0 [ 2524.120542][T28936] bridge0: port 1(bridge_slave_0) entered blocking state [ 2524.128438][T28936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2524.222623][T28936] bridge0: port 2(bridge_slave_1) entered blocking state [ 2524.230600][T28936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2524.646746][T22643] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2524.771351][T29649] netlink: 'syz.1.10848': attribute type 29 has an invalid length. [ 2524.859041][T29651] netlink: 'syz.1.10848': attribute type 29 has an invalid length. [ 2524.976979][T22643] usb 4-1: Using ep0 maxpacket: 16 [ 2525.034224][T22643] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2525.048103][T22643] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2525.055093][T22643] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 2525.065001][T22643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.146487][T22643] usb 4-1: config 0 descriptor?? [ 2525.374190][T11578] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2526.019769][T11578] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=4b.d6 [ 2526.029693][T11578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.038524][T11578] usb 5-1: Product: syz [ 2526.042959][T11578] usb 5-1: Manufacturer: syz [ 2526.048045][T11578] usb 5-1: SerialNumber: syz [ 2526.092831][T22643] usb 4-1: string descriptor 0 read error: -71 [ 2526.115001][T22643] uclogic 0003:5543:3031.003D: failed retrieving string descriptor #200: -71 [ 2526.125093][T22643] uclogic 0003:5543:3031.003D: failed retrieving pen parameters: -71 [ 2526.133675][T22643] uclogic 0003:5543:3031.003D: failed probing pen v2 parameters: -71 [ 2526.142432][T22643] uclogic 0003:5543:3031.003D: failed probing parameters: -71 [ 2526.151593][T22643] uclogic 0003:5543:3031.003D: probe with driver uclogic failed with error -71 [ 2526.241281][T11578] usb 5-1: config 0 descriptor?? [ 2526.317494][T11578] asix 5-1:0.0: probe with driver asix failed with error -22 [ 2526.505614][T22643] usb 4-1: USB disconnect, device number 8 [ 2527.397992][ T9016] usb 5-1: USB disconnect, device number 94 [ 2527.844721][T29514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2528.734938][T29514] veth0_vlan: entered promiscuous mode [ 2528.971127][T29514] veth1_vlan: entered promiscuous mode [ 2529.119231][T29680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10859'. [ 2529.144641][T29680] gre1: entered allmulticast mode [ 2529.299416][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10862'. [ 2529.571348][T29514] veth0_macvtap: entered promiscuous mode [ 2529.732764][T29514] veth1_macvtap: entered promiscuous mode [ 2530.019585][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.030569][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.041702][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.053203][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.063440][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.074335][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.084628][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.096075][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.111390][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.123700][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.133984][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.145024][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.155273][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.166191][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.185697][T29514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2530.353586][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.364643][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.374998][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.386373][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.396727][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.412326][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.423974][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.434959][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.445224][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.456127][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.466299][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.477186][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.487396][T29514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.498200][T29514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.528045][T29514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2531.086438][T29514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2531.095575][T29514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2531.104829][T29514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2531.114454][T29514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2531.480522][T29698] netlink: 'syz.1.10867': attribute type 1 has an invalid length. [ 2531.761948][T29704] ax25_connect(): syz.4.10869 uses autobind, please contact jreuter@yaina.de [ 2535.020292][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10879'. [ 2536.604476][T24480] Bluetooth: hci8: command tx timeout [ 2536.697620][T29758] loop3: detected capacity change from 0 to 64 [ 2536.791685][T29758] hfs: unable to locate alternate MDB [ 2536.797744][T29758] hfs: continuing without an alternate MDB [ 2538.168088][T29773] loop3: detected capacity change from 0 to 256 [ 2538.205776][T29774] loop1: detected capacity change from 0 to 24 [ 2538.306795][T29774] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 2538.582996][T29773] FAT-fs (loop3): Directory bread(block 64) failed [ 2538.590024][T29773] FAT-fs (loop3): Directory bread(block 65) failed [ 2538.602028][T29773] FAT-fs (loop3): Directory bread(block 66) failed [ 2538.610445][T29773] FAT-fs (loop3): Directory bread(block 67) failed [ 2538.617695][T29773] FAT-fs (loop3): Directory bread(block 68) failed [ 2538.624508][T29773] FAT-fs (loop3): Directory bread(block 69) failed [ 2538.631759][T29773] FAT-fs (loop3): Directory bread(block 70) failed [ 2538.638771][T29773] FAT-fs (loop3): Directory bread(block 71) failed [ 2538.645735][T29773] FAT-fs (loop3): Directory bread(block 72) failed [ 2538.652798][T29773] FAT-fs (loop3): Directory bread(block 73) failed [ 2539.508133][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10894'. [ 2539.522715][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10894'. [ 2543.039407][T22656] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2543.217163][ T2570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2543.225283][ T2570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2543.422168][T22656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2543.433798][T22656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2543.444179][T22656] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2543.454031][T22656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.567449][T22656] usb 2-1: config 0 descriptor?? [ 2543.591246][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2543.599745][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2544.686809][T22656] asus 0003:0B05:1ABE.003E: unknown main item tag 0x0 [ 2544.697228][T22656] asus 0003:0B05:1ABE.003E: unknown main item tag 0x0 [ 2544.704454][T22656] asus 0003:0B05:1ABE.003E: unknown main item tag 0x0 [ 2544.711948][T22656] asus 0003:0B05:1ABE.003E: unknown main item tag 0x0 [ 2544.719275][T22656] asus 0003:0B05:1ABE.003E: unknown main item tag 0x0 [ 2544.750848][T22656] asus 0003:0B05:1ABE.003E: hidraw0: USB HID v0.00 Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 2544.765303][T22656] asus 0003:0B05:1ABE.003E: Asus input not registered [ 2544.772432][T29833] loop3: detected capacity change from 0 to 64 [ 2544.822760][T22656] asus 0003:0B05:1ABE.003E: probe with driver asus failed with error -12 [ 2544.868721][T22656] usb 2-1: USB disconnect, device number 126 [ 2546.512267][T29847] ===================================================== [ 2546.519783][T29847] BUG: KMSAN: uninit-value in xfrm_state_find+0x17d0/0x8a40 [ 2546.528508][T29847] xfrm_state_find+0x17d0/0x8a40 [ 2546.533721][T29847] xfrm_resolve_and_create_bundle+0x7d7/0x51f0 [ 2546.540297][T29847] xfrm_lookup_with_ifid+0x3f7/0x35b0 [ 2546.546069][T29847] xfrm_lookup_route+0x63/0x2b0 [ 2546.551144][T29847] ip_route_output_flow+0x21d/0x2b0 [ 2546.557063][T29847] __ip4_datagram_connect+0xbfc/0x1290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2546.562789][T29847] __ip6_datagram_connect+0x200/0x1580 [ 2546.568812][T29847] ip6_datagram_connect_v6_only+0xa7/0x110 [ 2546.574888][T29847] inet_dgram_connect+0x2e9/0x6a0 [ 2546.580787][T29847] __sys_connect+0x606/0x690 [ 2546.591186][T29847] __x64_sys_connect+0x91/0xe0 [ 2546.598162][T29847] x64_sys_call+0x27a5/0x3ba0 [ 2546.603191][T29847] do_syscall_64+0xcd/0x1e0 [ 2546.608085][T29847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2546.614320][T29847] [ 2546.616970][T29847] Local variable tmp.i.i created at: [ 2546.622396][T29847] xfrm_resolve_and_create_bundle+0x36c/0x51f0 [ 2546.630845][T29847] xfrm_lookup_with_ifid+0x3f7/0x35b0 [ 2546.636719][T29847] [ 2546.639295][T29847] CPU: 1 UID: 0 PID: 29847 Comm: syz.1.10915 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 2546.650603][T29847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2546.661864][T29847] ===================================================== [ 2546.669147][T29847] Disabling lock debugging due to kernel taint [ 2546.675435][T29847] Kernel panic - not syncing: kmsan.panic set ... [ 2546.682032][T29847] CPU: 1 UID: 0 PID: 29847 Comm: syz.1.10915 Tainted: G B 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 2546.694727][T29847] Tainted: [B]=BAD_PAGE [ 2546.699042][T29847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2546.709660][T29847] Call Trace: [ 2546.713127][T29847] [ 2546.716204][T29847] dump_stack_lvl+0x216/0x2d0 [ 2546.721127][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.727191][T29847] dump_stack+0x1e/0x30 [ 2546.731558][T29847] panic+0x4e2/0xcd0 [ 2546.735652][T29847] ? kmsan_get_metadata+0xa1/0x1c0 [ 2546.741099][T29847] kmsan_report+0x2c7/0x2d0 [ 2546.745828][T29847] ? ip6_pol_route+0x19db/0x1fc0 [ 2546.750987][T29847] ? __msan_warning+0x95/0x120 [ 2546.755969][T29847] ? xfrm_state_find+0x17d0/0x8a40 [ 2546.761301][T29847] ? xfrm_resolve_and_create_bundle+0x7d7/0x51f0 [ 2546.767843][T29847] ? xfrm_lookup_with_ifid+0x3f7/0x35b0 [ 2546.774452][T29847] ? xfrm_lookup_route+0x63/0x2b0 [ 2546.779704][T29847] ? ip_route_output_flow+0x21d/0x2b0 [ 2546.785303][T29847] ? __ip4_datagram_connect+0xbfc/0x1290 [ 2546.791163][T29847] ? __ip6_datagram_connect+0x200/0x1580 [ 2546.797020][T29847] ? ip6_datagram_connect_v6_only+0xa7/0x110 [ 2546.803250][T29847] ? inet_dgram_connect+0x2e9/0x6a0 [ 2546.808693][T29847] ? __sys_connect+0x606/0x690 [ 2546.813667][T29847] ? __x64_sys_connect+0x91/0xe0 [ 2546.818811][T29847] ? x64_sys_call+0x27a5/0x3ba0 [ 2546.823923][T29847] ? do_syscall_64+0xcd/0x1e0 [ 2546.828928][T29847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2546.835315][T29847] ? fib6_rule_saddr+0x89/0x600 [ 2546.840399][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.845827][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.851347][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.857379][T29847] ? xfrm_state_find+0x197/0x8a40 [ 2546.862714][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.868135][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.874186][T29847] ? __xfrm_dst_hash+0x33c/0x640 [ 2546.879321][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.884735][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.890774][T29847] __msan_warning+0x95/0x120 [ 2546.895594][T29847] xfrm_state_find+0x17d0/0x8a40 [ 2546.900778][T29847] ? __rcu_read_unlock+0x48/0xe0 [ 2546.905968][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.911413][T29847] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2546.917973][T29847] ? dst_release+0x17e/0x1a0 [ 2546.922766][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.928807][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.934233][T29847] xfrm_resolve_and_create_bundle+0x7d7/0x51f0 [ 2546.940642][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.946083][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.952562][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.958106][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.964768][T29847] xfrm_lookup_with_ifid+0x3f7/0x35b0 [ 2546.970370][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2546.975896][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2546.981955][T29847] xfrm_lookup_route+0x63/0x2b0 [ 2546.987023][T29847] ip_route_output_flow+0x21d/0x2b0 [ 2546.992594][T29847] __ip4_datagram_connect+0xbfc/0x1290 [ 2546.998392][T29847] __ip6_datagram_connect+0x200/0x1580 [ 2547.004109][T29847] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2547.010201][T29847] ? lock_sock_nested+0x1de/0x200 [ 2547.015436][T29847] ip6_datagram_connect_v6_only+0xa7/0x110 [ 2547.021461][T29847] ? __pfx_ip6_datagram_connect_v6_only+0x10/0x10 [ 2547.028099][T29847] inet_dgram_connect+0x2e9/0x6a0 [ 2547.033360][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2547.038799][T29847] __sys_connect+0x606/0x690 [ 2547.043602][T29847] ? kmsan_get_metadata+0x13e/0x1c0 [ 2547.049226][T29847] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2547.055798][T29847] ? __pfx_inet_dgram_connect+0x10/0x10 [ 2547.061708][T29847] __x64_sys_connect+0x91/0xe0 [ 2547.066777][T29847] x64_sys_call+0x27a5/0x3ba0 [ 2547.071678][T29847] do_syscall_64+0xcd/0x1e0 [ 2547.076383][T29847] ? clear_bhb_loop+0x25/0x80 [ 2547.081292][T29847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2547.087421][T29847] RIP: 0033:0x7fc3c8379ef9 [ 2547.091993][T29847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2547.111935][T29847] RSP: 002b:00007fc3c91f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2547.120810][T29847] RAX: ffffffffffffffda RBX: 00007fc3c8515f80 RCX: 00007fc3c8379ef9 [ 2547.128955][T29847] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 2547.137077][T29847] RBP: 00007fc3c83e793e R08: 0000000000000000 R09: 0000000000000000 [ 2547.145205][T29847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2547.153419][T29847] R13: 0000000000000000 R14: 00007fc3c8515f80 R15: 00007ffee672d678 [ 2547.161578][T29847] [ 2547.165011][T29847] Kernel Offset: disabled [ 2547.169443][T29847] Rebooting in 86400 seconds..