last executing test programs: 6.277252369s ago: executing program 2 (id=433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xad2b}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.202109037s ago: executing program 1 (id=434): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x7f, 0x7, 0x0, 0x10040, 0x8f}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000500000093"]) 5.993587853s ago: executing program 4 (id=435): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x23b, &(0x7f0000002540)="$eJzsmb9rFEEUx7+zu7d3hAS0sLE5i4ARzN7unkoaQW1FEBJRy8OsIbrJyd0VuYBosLHxD/APUSGVhZ2NWFhZxIBgoaWNgiPzy53s3q17d3a+TzF58+bNm/dm5t7ABgRB/Lccfvp+8OzKytpZAPNYRF3rv7iZjWPZf3zu1rT4ZtvBft4fA8B51vf+sr4P4PVlF3is3HL+g9vji9rnGs8CugEHZ7R8EwyBGeICJSZguK3V9yzZBI80YXe66frdzTQJRROJJhZNG+BH4v+2x7AOoKGXYFZ8/eHu/U4K9JSQJkaocbNOYSgveH/8pIk3wqZs/zwcHogTumhtgTivW0+f7Il+oPUhHLmXgggOIn0wbTCsav0K6giCoKm7SWTlf9LL/Lvq2Kz8KyQphcYkxrMLx5dLbUwSY2zMxZ85jF+8kjHn/NEknv2pjqCiYH7zFWcJ08nXcprFWX6mWciv3h2xCVMkyPpDHFPpKQ3Tp3xJJ/22OOvzv76i+7bmYd7Gn/3WZYIsXAAKQ+/n0vSarXl3VQsnjvg5NeZX4Jddkqx+Mg84rU0ZOPesV6E12HrQ6g93lze3OhvJRrIdx+0L4bkwPB+3ZG1WbUn9a8j6NGfVv5p6MnJ2YnEfO53BoBftAINe5Jt+/EK2VsVdfdn9Kuc5sv45WPrJuX5eajLt+uh45PtXV/OY7C25Y4MnCIIgCIIgCIIgCIIgCIIooflB/dWfrhfm0cQr6G+VzPxPrIgXX5cTfgcAAP//o2BSgg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 5.926761096s ago: executing program 0 (id=436): r0 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) syz_clone(0x1184680, 0x0, 0x0, 0x0, 0x0, 0x0) shmdt(r0) 5.206914889s ago: executing program 3 (id=437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x2}) 5.09306461s ago: executing program 1 (id=438): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800088, &(0x7f0000000cc0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nls=maccenteuro,session=0x0000000080000001,force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c00033535581a8c93022615d197068a585571f9e001682f64b69c250d32a806d038c69e92463d89236f11ed181e846b20639efe06565a7339be5124740524d0f6b1e7210a5251729cffe820717f00dbdf5993aa65c2586a838662613a63030aa4daf67afc0b9b3984982f81f11ea99bdda5c3bd61dff3b0ef4569954e9767b63da48d58086c70101b2a7663f55c9c962fe9c984d6ef0a74576865d5798b6aca5e93287321e3ef2d"], 0x1, 0x6f7, &(0x7f00000010c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=@known='user.syz\x00') 4.855350599s ago: executing program 2 (id=439): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000006c0)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x3) 4.684619777s ago: executing program 4 (id=440): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) read(r0, &(0x7f0000001bc0)=""/55, 0x37) 4.535600578s ago: executing program 0 (id=441): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/10, 0xa}, {0x0}], 0x2}, 0x44c7}], 0x1, 0x0, 0x0) 4.507816561s ago: executing program 3 (id=442): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2000, 0xfd, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="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", 0x368}, {&(0x7f0000000bc0)="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", 0x1e5}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913854bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b91", 0x38}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 4.014973557s ago: executing program 3 (id=443): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt(0xffffffffffffffff, 0x80, 0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r2, 0xae80, 0x0) flock(0xffffffffffffffff, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x4480, 0x0) 3.86484073s ago: executing program 1 (id=444): r0 = socket(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @local, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0xff}]}}}}}, 0x0) 3.788037294s ago: executing program 4 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x40, 0x0, 0x0, 0x0, {[@generic={0x4, 0x3, "a4"}]}}}}}}}, 0x0) 3.688527144s ago: executing program 0 (id=446): unshare(0x2040400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f0000000000)) 3.360965394s ago: executing program 2 (id=447): unshare(0x26060400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 3.15963485s ago: executing program 4 (id=448): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@quiet}, {@fat=@nocase}, {@nodots}, {}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@fat=@errors_continue}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}]}, 0xfd, 0x23d, &(0x7f0000000040)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 2.944561778s ago: executing program 0 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xad2b}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.877074414s ago: executing program 1 (id=450): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x2, 0x0) 2.779428767s ago: executing program 3 (id=451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 2.248131561s ago: executing program 2 (id=452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x2}) 2.076220831s ago: executing program 4 (id=453): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000580)='./file0\x00', 0x800802, &(0x7f0000000040)={[{@codepage={'codepage', 0x3d, 'iso8859-2'}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@gid}]}, 0x21, 0x306, &(0x7f0000000240)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/172, 0xac) 1.880491565s ago: executing program 3 (id=454): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.735364034s ago: executing program 1 (id=455): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x83}}, {@init_itable}, {@mblk_io_submit}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.566419697s ago: executing program 0 (id=456): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @empty, 0x401}, 0x1c) sendmmsg$unix(r0, &(0x7f0000005640)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x48840) 1.464865154s ago: executing program 2 (id=457): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x805, 0x0, 0x2, 0x88d7, 0x8f, 0x1007, 0x8010, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 1.170660427s ago: executing program 3 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x40, 0x0, 0x0, 0x0, {[@generic={0x4, 0x3, "a4"}]}}}}}}}, 0x0) 908.515778ms ago: executing program 0 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xad2b}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 827.436749ms ago: executing program 4 (id=469): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x697, &(0x7f0000000980)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x400) 712.264505ms ago: executing program 2 (id=460): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x80, 0x8000, 0x7, 0x7fff, {{0x5, 0x4, 0x2, 0xb, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @multicast2, @empty}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x62f01423b0379a5c}, 0x4040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab07"], 0xfe33) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x1c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_mount_image$fuse(0x0, 0x0, 0xa0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, 0x0, 0x0, 0x208408, 0x0) 0s ago: executing program 1 (id=461): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt(0xffffffffffffffff, 0x80, 0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r2, 0xae80, 0x0) flock(0xffffffffffffffff, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x4480, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 192.836184][ T5786] cgroup: Unknown subsys name 'net' [ 192.974758][ T5786] cgroup: Unknown subsys name 'cpuset' [ 192.998580][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 199.382006][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.682138][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.720100][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.729340][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.737332][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.746508][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.758766][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.767219][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.774917][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.778451][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.790948][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.806047][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.809887][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.819913][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.830799][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.839908][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.849997][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.861261][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.869762][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.890194][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.899872][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.982847][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.000813][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.011406][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.034870][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.046747][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.467066][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 205.786838][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 205.922702][ T5103] Bluetooth: hci3: command tx timeout [ 205.928351][ T5103] Bluetooth: hci1: command tx timeout [ 205.935543][ T5814] Bluetooth: hci2: command tx timeout [ 206.020766][ T5814] Bluetooth: hci0: command tx timeout [ 206.079399][ T5814] Bluetooth: hci4: command tx timeout [ 206.148639][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 206.193352][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 206.591877][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 207.016050][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.027293][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.035441][ T5812] bridge_slave_0: entered allmulticast mode [ 207.045168][ T5812] bridge_slave_0: entered promiscuous mode [ 207.139237][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.146792][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.154697][ T5803] bridge_slave_0: entered allmulticast mode [ 207.164409][ T5803] bridge_slave_0: entered promiscuous mode [ 207.177166][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.187913][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.195998][ T5812] bridge_slave_1: entered allmulticast mode [ 207.205479][ T5812] bridge_slave_1: entered promiscuous mode [ 207.341118][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.348779][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.356827][ T5803] bridge_slave_1: entered allmulticast mode [ 207.366475][ T5803] bridge_slave_1: entered promiscuous mode [ 207.742518][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.788509][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.796770][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.804678][ T5817] bridge_slave_0: entered allmulticast mode [ 207.814376][ T5817] bridge_slave_0: entered promiscuous mode [ 207.868622][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.876473][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.884413][ T5805] bridge_slave_0: entered allmulticast mode [ 207.893193][ T5805] bridge_slave_0: entered promiscuous mode [ 207.915655][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.926765][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.934662][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.944480][ T5805] bridge_slave_1: entered allmulticast mode [ 207.954267][ T5805] bridge_slave_1: entered promiscuous mode [ 207.974908][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.985253][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.993218][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.001201][ T5817] bridge_slave_1: entered allmulticast mode [ 208.010676][ T5814] Bluetooth: hci1: command tx timeout [ 208.011081][ T5817] bridge_slave_1: entered promiscuous mode [ 208.016372][ T5819] Bluetooth: hci3: command tx timeout [ 208.028519][ T5103] Bluetooth: hci2: command tx timeout [ 208.089265][ T5814] Bluetooth: hci0: command tx timeout [ 208.151320][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.196508][ T5814] Bluetooth: hci4: command tx timeout [ 208.210741][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.218634][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.226438][ T5802] bridge_slave_0: entered allmulticast mode [ 208.236321][ T5802] bridge_slave_0: entered promiscuous mode [ 208.475445][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.483159][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.491153][ T5802] bridge_slave_1: entered allmulticast mode [ 208.503703][ T5802] bridge_slave_1: entered promiscuous mode [ 208.520940][ T5812] team0: Port device team_slave_0 added [ 208.553946][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.613629][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.666870][ T5812] team0: Port device team_slave_1 added [ 208.684395][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.783509][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.804600][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.864603][ T5803] team0: Port device team_slave_0 added [ 208.988520][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.006468][ T5817] team0: Port device team_slave_0 added [ 209.062559][ T5803] team0: Port device team_slave_1 added [ 209.118085][ T5805] team0: Port device team_slave_0 added [ 209.166718][ T5817] team0: Port device team_slave_1 added [ 209.253494][ T5805] team0: Port device team_slave_1 added [ 209.262977][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.270462][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.296830][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.354215][ T5802] team0: Port device team_slave_0 added [ 209.365700][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.374203][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.400657][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.477357][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.485947][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.513301][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.575111][ T5802] team0: Port device team_slave_1 added [ 209.585895][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.593330][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.619772][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.688829][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.696334][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.722555][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.800959][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.808095][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.835772][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.853837][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.861076][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.887389][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.904213][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.911448][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.937933][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.997842][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.005163][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.031700][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.080805][ T5814] Bluetooth: hci1: command tx timeout [ 210.086446][ T5814] Bluetooth: hci3: command tx timeout [ 210.090517][ T5819] Bluetooth: hci2: command tx timeout [ 210.163660][ T5819] Bluetooth: hci0: command tx timeout [ 210.185927][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.193730][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.221472][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.245417][ T5819] Bluetooth: hci4: command tx timeout [ 210.331139][ T5812] hsr_slave_0: entered promiscuous mode [ 210.342548][ T5812] hsr_slave_1: entered promiscuous mode [ 210.401251][ T5803] hsr_slave_0: entered promiscuous mode [ 210.412105][ T5803] hsr_slave_1: entered promiscuous mode [ 210.420945][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 210.426892][ T5803] Cannot create hsr debugfs directory [ 210.783363][ T5817] hsr_slave_0: entered promiscuous mode [ 210.793484][ T5817] hsr_slave_1: entered promiscuous mode [ 210.802467][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 210.808389][ T5817] Cannot create hsr debugfs directory [ 210.911336][ T5805] hsr_slave_0: entered promiscuous mode [ 210.922225][ T5805] hsr_slave_1: entered promiscuous mode [ 210.931499][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 210.937421][ T5805] Cannot create hsr debugfs directory [ 211.064083][ T5802] hsr_slave_0: entered promiscuous mode [ 211.074620][ T5802] hsr_slave_1: entered promiscuous mode [ 211.083800][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 211.089881][ T5802] Cannot create hsr debugfs directory [ 212.159420][ T5819] Bluetooth: hci3: command tx timeout [ 212.165106][ T5819] Bluetooth: hci2: command tx timeout [ 212.165478][ T5814] Bluetooth: hci1: command tx timeout [ 212.241981][ T5819] Bluetooth: hci0: command tx timeout [ 212.319343][ T5819] Bluetooth: hci4: command tx timeout [ 212.612024][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.651578][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.709332][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.786175][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.812173][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.890854][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.916768][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.956025][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.004698][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.035415][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.075994][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.158529][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.359646][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.478310][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.600262][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.634191][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.661287][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.696791][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.733065][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.770264][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.202930][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.390080][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.465631][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.603214][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.643781][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.651404][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.711736][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.768360][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.776022][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.793421][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.800990][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.896802][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.904407][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.012998][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.261448][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.269241][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.302665][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.310311][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.348290][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.526786][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.575809][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.760482][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.768099][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.815422][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.867462][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.905723][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.913446][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.116929][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.287197][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.294979][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.381753][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.483193][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.490966][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.866610][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.796299][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.938198][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.146704][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.579362][ T5803] veth0_vlan: entered promiscuous mode [ 218.618388][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.690218][ T5803] veth1_vlan: entered promiscuous mode [ 218.863369][ T5812] veth0_vlan: entered promiscuous mode [ 218.958214][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.999919][ T5812] veth1_vlan: entered promiscuous mode [ 219.298492][ T5803] veth0_macvtap: entered promiscuous mode [ 219.356346][ T5802] veth0_vlan: entered promiscuous mode [ 219.416701][ T5803] veth1_macvtap: entered promiscuous mode [ 219.498091][ T5812] veth0_macvtap: entered promiscuous mode [ 219.589623][ T5802] veth1_vlan: entered promiscuous mode [ 219.618626][ T5812] veth1_macvtap: entered promiscuous mode [ 219.770257][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.779210][ T5817] veth0_vlan: entered promiscuous mode [ 219.870206][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.906692][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.964167][ T5817] veth1_vlan: entered promiscuous mode [ 220.027980][ T3544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.059144][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.091647][ T5802] veth0_macvtap: entered promiscuous mode [ 220.162639][ T3544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.199814][ T5802] veth1_macvtap: entered promiscuous mode [ 220.222169][ T3544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.262271][ T3544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.318454][ T4284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.380620][ T4284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.441867][ T4284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.467298][ T5817] veth0_macvtap: entered promiscuous mode [ 220.511088][ T4284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.566572][ T5817] veth1_macvtap: entered promiscuous mode [ 220.591121][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.700574][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.833358][ T4435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.890755][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.911253][ T4435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.941886][ T4435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.024515][ T4435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.060405][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.168760][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.198784][ T5805] veth0_vlan: entered promiscuous mode [ 221.275239][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.346007][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.370308][ T5805] veth1_vlan: entered promiscuous mode [ 221.470169][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.852584][ T5805] veth0_macvtap: entered promiscuous mode [ 221.930967][ T5805] veth1_macvtap: entered promiscuous mode [ 222.199791][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.280514][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.417791][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.471069][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.557578][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.622270][ T1860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.533948][ T4130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.542978][ T4130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.729753][ T4130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.737858][ T4130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.888624][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.897142][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.953774][ T4130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.962148][ T4130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.058598][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.066819][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.302926][ T1860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.311156][ T1860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.538203][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 228.622241][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.630402][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.008640][ T1860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.017671][ T1860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.470768][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 229.836391][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.843257][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.965726][ T5993] loop2: detected capacity change from 0 to 32768 [ 230.185132][ T5993] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 230.185275][ T5993] allowing incompatible features above 0.0: (unknown version) [ 230.185372][ T5993] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 230.226090][ T5993] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 230.234661][ T5993] bcachefs (loop2): initializing new filesystem [ 230.259522][ T5993] bcachefs (loop2): going read-write [ 230.361274][ T5993] bcachefs (loop2): marking superblocks [ 230.441554][ T5993] bcachefs (loop2): initializing freespace [ 230.476185][ T5993] bcachefs (loop2): done initializing freespace [ 230.497455][ T5993] bcachefs (loop2): reading snapshots table [ 230.503998][ T5993] bcachefs (loop2): reading snapshots done [ 230.631623][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 230.648411][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 230.663972][ T5993] bcachefs (loop2): done starting filesystem [ 230.972995][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.981407][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.095250][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 231.187143][ T6020] sctp: [Deprecated]: syz.3.7 (pid 6020) Use of int in max_burst socket option. [ 231.187143][ T6020] Use struct sctp_assoc_value instead [ 231.307840][ T5993] syz.2.3 (5993) used greatest stack depth: 1152 bytes left [ 231.399800][ T5803] bcachefs (loop2): shutting down [ 231.405166][ T5803] bcachefs (loop2): going read-only [ 231.411499][ T5803] bcachefs (loop2): finished waiting for writes to stop [ 231.445081][ T5803] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 231.501499][ T4069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.510315][ T4069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.909825][ T5803] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 231.995139][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 232.096575][ T5803] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 232.121603][ T5803] bcachefs (loop2): marking filesystem clean [ 232.340573][ T5803] bcachefs (loop2): shutdown complete [ 232.705043][ T5867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.869501][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 232.940186][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 233.089906][ T5867] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 233.100803][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.109647][ T5867] usb 1-1: Product: syz [ 233.114021][ T5867] usb 1-1: Manufacturer: syz [ 233.118825][ T5867] usb 1-1: SerialNumber: syz [ 233.191790][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.204804][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.216612][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.226691][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.240068][ T11] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.249453][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.349651][ T5867] usb 1-1: config 0 descriptor?? [ 233.377761][ T5867] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 233.424923][ T11] usb 4-1: config 0 descriptor?? [ 233.979885][ T11] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 234.269519][ T42] usb 4-1: USB disconnect, device number 2 [ 235.282848][ T5867] gspca_sonixj: reg_r err -71 [ 235.339769][ T5867] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 235.430653][ T5867] usb 1-1: USB disconnect, device number 2 [ 235.592923][ T6044] fido_id[6044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 235.825536][ T6047] 8021q: VLANs not supported on sit0 [ 236.337924][ T6056] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 236.754108][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.007188][ T6059] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 237.575879][ T6065] binder: 6062:6065 unknown command 0 [ 237.581766][ T6065] binder: 6062:6065 ioctl c0306201 80000080 returned -22 [ 237.750176][ T5867] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 237.898764][ T6071] syz_tun: entered allmulticast mode [ 237.960608][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 238.022114][ T6070] syz_tun: left allmulticast mode [ 238.044855][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 238.141992][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.151605][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.160115][ T5867] usb 2-1: Product: syz [ 238.164477][ T5867] usb 2-1: Manufacturer: syz [ 238.169357][ T5867] usb 2-1: SerialNumber: syz [ 238.272148][ T5867] usb 2-1: config 0 descriptor?? [ 238.330127][ T5867] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 238.339965][ T5867] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 238.574900][ T6074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.586332][ T6074] bridge0: port 3(macvlan2) entered blocking state [ 238.593667][ T6074] bridge0: port 3(macvlan2) entered disabled state [ 238.601159][ T6074] macvlan2: entered allmulticast mode [ 238.606750][ T6074] team0: entered allmulticast mode [ 238.612270][ T6074] team_slave_0: entered allmulticast mode [ 238.618205][ T6074] team_slave_1: entered allmulticast mode [ 238.652126][ T6074] macvlan2: entered promiscuous mode [ 238.662609][ T6074] bridge0: port 3(macvlan2) entered blocking state [ 238.670056][ T6074] bridge0: port 3(macvlan2) entered forwarding state [ 238.733668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 238.915980][ T6078] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 238.922774][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 238.932001][ T6081] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 238.938838][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.946609][ T6078] vhci_hcd vhci_hcd.0: Device attached [ 238.947935][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 239.091085][ T5867] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 239.143349][ T42] vhci_hcd: vhci_device speed not set [ 239.172423][ T6081] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 239.219418][ T42] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 239.290049][ T6078] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 239.296947][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 239.305328][ T6078] vhci_hcd vhci_hcd.0: Device attached [ 239.394151][ T6081] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 239.401111][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 239.410042][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 239.524414][ T6078] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(16) [ 239.531386][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.542312][ T6078] vhci_hcd vhci_hcd.0: Device attached [ 239.600774][ T5867] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 239.609550][ T5867] em28xx 2-1:0.0: board has no eeprom [ 239.651369][ T6091] vhci_hcd: connection closed [ 239.653694][ T6083] vhci_hcd: connection closed [ 239.656066][ T6087] vhci_hcd: connection closed [ 239.659420][ T6089] vhci_hcd: connection closed [ 239.672707][ T4435] vhci_hcd: stop threads [ 239.674648][ T6080] vhci_hcd: connection reset by peer [ 239.677885][ T4435] vhci_hcd: release socket [ 239.693459][ T4435] vhci_hcd: disconnect device [ 239.780425][ T4435] vhci_hcd: stop threads [ 239.784874][ T4435] vhci_hcd: release socket [ 239.793728][ T4435] vhci_hcd: disconnect device [ 239.883494][ T4435] vhci_hcd: stop threads [ 239.887956][ T4435] vhci_hcd: release socket [ 239.893040][ T4435] vhci_hcd: disconnect device [ 239.929285][ T4435] vhci_hcd: stop threads [ 239.933952][ T4435] vhci_hcd: release socket [ 239.938611][ T4435] vhci_hcd: disconnect device [ 240.006439][ T4435] vhci_hcd: stop threads [ 240.011739][ T4435] vhci_hcd: release socket [ 240.016602][ T4435] vhci_hcd: disconnect device [ 240.099950][ T5867] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 240.108160][ T5867] em28xx 2-1:0.0: dvb set to bulk mode. [ 240.116601][ T11] em28xx 2-1:0.0: Binding DVB extension [ 240.264415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 240.436486][ T6104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 240.629249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 240.638089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 240.769038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 240.831535][ T6098] kvm: pic: non byte read [ 240.837023][ T6098] kvm: pic: level sensitive irq not supported [ 240.837276][ T6098] kvm: pic: non byte read [ 240.976563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 241.380290][ T6066] em28xx 2-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 241.394310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 241.512862][ T5869] usb 2-1: USB disconnect, device number 2 [ 241.521829][ T5869] em28xx 2-1:0.0: Disconnecting em28xx [ 241.720852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.886285][ T6113] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 241.901738][ T11] em28xx 2-1:0.0: Registering input extension [ 242.007350][ T5869] em28xx 2-1:0.0: Closing input extension [ 242.137510][ T5869] em28xx 2-1:0.0: Freeing device [ 242.583365][ T6119] loop2: detected capacity change from 0 to 128 [ 242.634144][ T6119] msdos: Unknown parameter 'u×°¿µSõFF&ê76—¢I·!¬K‡ÛÁ±¬_í2šÇQ®3+œèþ\›âfÊ¿].V¥ÖQ:ä~&;C’fAòŽ¾ôéÏþ¶+ÏÖ¥že½@ÀAÀŽ}pÓ®ÿÂÝé]A¥4µl’«—lö«–@°BEO¯ËpyÅ›' [ 242.656985][ T6116] loop3: detected capacity change from 0 to 2048 [ 242.730234][ T6116] ======================================================= [ 242.730234][ T6116] WARNING: The mand mount option has been deprecated and [ 242.730234][ T6116] and is ignored by this kernel. Remove the mand [ 242.730234][ T6116] option from the mount to silence this warning. [ 242.730234][ T6116] ======================================================= [ 242.908431][ T6121] syzkaller0: entered promiscuous mode [ 242.914588][ T6121] syzkaller0: entered allmulticast mode [ 243.762221][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.35'. [ 243.771478][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 243.995347][ T6135] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 244.089130][ T6135] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 244.089386][ T6130] Zero length message leads to an empty skb [ 244.099643][ T6135] team0: Failed to send options change via netlink (err -105) [ 244.112276][ T6135] team0: Port device netdevsim3 added [ 244.200124][ T35] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 244.329447][ T42] vhci_hcd: vhci_device speed not set [ 244.389411][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 244.604601][ T5869] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 244.614221][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.740631][ T5869] usb 1-1: config 0 descriptor?? [ 245.777955][ T6150] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 245.844533][ T6148] team0: Failed to send options change via netlink (err -105) [ 245.854794][ T6148] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 245.866140][ T6148] team0: Port device netdevsim3 removed [ 245.884850][ T6148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.161039][ T6155] vlan2: entered allmulticast mode [ 246.166567][ T6155] batadv0: entered allmulticast mode [ 246.207950][ T6156] batman_adv: batadv0: Adding interface: gretap1 [ 246.215181][ T6156] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 246.331340][ T6148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.578808][ T6148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.827545][ T6148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.010095][ T6159] team_slave_0: entered promiscuous mode [ 247.016106][ T6159] team_slave_1: entered promiscuous mode [ 247.034019][ T6159] vlan2: entered promiscuous mode [ 247.048294][ T6159] team0: entered promiscuous mode [ 247.093503][ T5869] usb 1-1: Cannot set autoneg [ 247.099559][ T5869] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 247.205719][ T5869] usb 1-1: USB disconnect, device number 3 [ 247.443100][ T3534] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.683303][ T3544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.774881][ T4435] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.930277][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.546239][ T6174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.744513][ T6177] loop0: detected capacity change from 0 to 1024 [ 248.755681][ T6177] EXT4-fs: inline encryption not supported [ 248.770265][ T6177] EXT4-fs: Ignoring removed i_version option [ 248.788024][ T6177] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 248.912295][ T6174] syz_tun: entered allmulticast mode [ 249.045395][ T6174] dvmrp8: entered allmulticast mode [ 249.124260][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.51: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.151914][ T6172] syz_tun: left allmulticast mode [ 249.215464][ T6177] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 249.224409][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.51: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.251513][ T6183] netlink: 'syz.4.54': attribute type 4 has an invalid length. [ 249.323950][ T6177] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 249.333378][ T6177] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.51: Failed to acquire dquot type 0 [ 249.468062][ T6177] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 249.514705][ T6177] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.51: mark_inode_dirty error [ 249.648797][ T6177] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 249.659993][ T6177] EXT4-fs (loop0): 1 orphan inode deleted [ 249.693170][ T6177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.716326][ T35] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.772705][ T35] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 249.781804][ T35] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 249.823945][ T6185] loop1: detected capacity change from 0 to 2048 [ 250.013567][ T6185] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 250.021926][ T6185] UDF-fs: Scanning with blocksize 512 failed [ 250.231689][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.317477][ T6187] veth0_to_team: entered promiscuous mode [ 250.339238][ T6185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.374647][ T5802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 250.393356][ T6191] netlink: 'syz.2.58': attribute type 4 has an invalid length. [ 250.448256][ T5802] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 250.483916][ T5802] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 250.529843][ T30] audit: type=1800 audit(1758207375.574:2): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.55" name="file1" dev="loop1" ino=818 res=0 errno=0 [ 250.571870][ T6193] netlink: 'syz.2.58': attribute type 4 has an invalid length. [ 250.701712][ T30] audit: type=1800 audit(1758207375.754:3): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.55" name="file1" dev="loop1" ino=818 res=0 errno=0 [ 252.349295][ T6214] input: syz1 as /devices/virtual/input/input7 [ 253.095770][ T6210] loop0: detected capacity change from 0 to 1024 [ 253.291285][ T6210] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 253.302542][ T6210] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 253.431903][ T6210] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #32: comm syz.0.65: iget: special inode unallocated [ 253.551330][ T6210] EXT4-fs (loop0): Remounting filesystem read-only [ 253.558491][ T6210] EXT4-fs (loop0): no journal found [ 253.814472][ T6229] loop2: detected capacity change from 0 to 256 [ 254.108812][ T6229] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 254.788444][ T6242] tipc: Started in network mode [ 254.788666][ T6242] tipc: Node identity 6e9c1ce01566, cluster identity 4711 [ 254.790145][ T6242] tipc: Enabled bearer , priority 0 [ 254.810813][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 254.839591][ T6242] syzkaller0: entered promiscuous mode [ 254.839702][ T6242] syzkaller0: entered allmulticast mode [ 254.931548][ T6242] tipc: Resetting bearer [ 254.976901][ T6239] tipc: Resetting bearer [ 254.983311][ T42] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 254.992485][ T6239] tipc: Disabling bearer [ 255.029391][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 255.036421][ T5869] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 255.036575][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.047976][ T5869] usb 1-1: config 0 descriptor?? [ 255.074731][ T5869] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 255.140206][ T42] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 255.140436][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.162806][ T42] usb 2-1: config 0 descriptor?? [ 256.819978][ T6254] vlan2: entered promiscuous mode [ 257.596789][ T42] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 257.607522][ T42] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 257.620468][ T42] asix 2-1:0.0: probe with driver asix failed with error -71 [ 257.693466][ T42] usb 2-1: USB disconnect, device number 3 [ 258.275604][ T5869] gspca_vc032x: reg_r err -71 [ 258.280739][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.295032][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.302856][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.308323][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.314003][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.319692][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.325137][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.330866][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.336385][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.342088][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.347578][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.353344][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.358827][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.364459][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.370210][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.375650][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.381285][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 258.395428][ T5869] gspca_vc032x: Unknown sensor... [ 258.404825][ T5869] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 258.554685][ T6268] tipc: Started in network mode [ 258.563480][ T6268] tipc: Node identity 720d19e945ea, cluster identity 4711 [ 258.573686][ T6268] tipc: Enabled bearer , priority 0 [ 258.657997][ T6272] syzkaller0: entered promiscuous mode [ 258.664314][ T6272] syzkaller0: entered allmulticast mode [ 258.711226][ T5869] usb 1-1: USB disconnect, device number 4 [ 258.781682][ T6268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 258.868557][ T6268] tipc: Resetting bearer [ 259.021121][ T6264] tipc: Resetting bearer [ 259.096369][ T6264] tipc: Disabling bearer [ 259.289398][ T6276] pimreg: entered allmulticast mode [ 259.420696][ T6276] pimreg: left allmulticast mode [ 259.596375][ T6278] loop4: detected capacity change from 0 to 256 [ 259.761044][ T6278] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 260.087466][ T6285] tipc: Enabled bearer , priority 0 [ 260.111242][ T6285] syzkaller0: entered promiscuous mode [ 260.111354][ T6285] syzkaller0: entered allmulticast mode [ 260.195747][ T6285] tipc: Resetting bearer [ 260.299442][ T6282] tipc: Resetting bearer [ 260.333882][ T6282] tipc: Disabling bearer [ 260.422326][ T6289] tipc: Started in network mode [ 260.422515][ T6289] tipc: Node identity 1ea152b6843a, cluster identity 4711 [ 260.423411][ T6289] tipc: Enabled bearer , priority 0 [ 260.453254][ T6280] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.477893][ T6289] syzkaller0: entered promiscuous mode [ 260.478011][ T6289] syzkaller0: entered allmulticast mode [ 260.550278][ T6289] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.561645][ T6289] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.598008][ T6289] tipc: Resetting bearer [ 260.688814][ T6287] tipc: Resetting bearer [ 260.722823][ T6287] tipc: Disabling bearer [ 261.011754][ T6293] process 'syz.3.91' launched '/dev/fd/5' with NULL argv: empty string added [ 261.674574][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.685343][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.989996][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.023862][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.872498][ T3534] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.926470][ T3534] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.947147][ T30] audit: type=1326 audit(1758207388.004:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 262.957307][ T3534] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.990734][ T6315] syzkaller0: entered promiscuous mode [ 263.003650][ T6315] syzkaller0: entered allmulticast mode [ 263.040461][ T6313] tipc: Enabled bearer , priority 0 [ 263.055655][ T3534] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.070375][ T30] audit: type=1326 audit(1758207388.034:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.093020][ T30] audit: type=1326 audit(1758207388.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.116020][ T30] audit: type=1326 audit(1758207388.044:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.147573][ T30] audit: type=1326 audit(1758207388.044:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.169982][ T30] audit: type=1326 audit(1758207388.074:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.192608][ T30] audit: type=1326 audit(1758207388.084:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.215750][ T30] audit: type=1326 audit(1758207388.084:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.238323][ T30] audit: type=1326 audit(1758207388.094:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.266129][ T30] audit: type=1326 audit(1758207388.094:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 263.423818][ T6310] tipc: Resetting bearer [ 263.511818][ T6308] tipc: Resetting bearer [ 263.578406][ T6308] tipc: Disabling bearer [ 263.790999][ T6323] loop4: detected capacity change from 0 to 128 [ 263.829827][ T6322] tipc: Started in network mode [ 263.835295][ T6322] tipc: Node identity 9ae19eb3b3af, cluster identity 4711 [ 263.844126][ T6322] tipc: Enabled bearer , priority 0 [ 263.873649][ T6323] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 263.897143][ T6323] hpfs: filesystem error: improperly stopped [ 263.903627][ T6323] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 263.911881][ T6323] hpfs: You really don't want any checks? You are crazy... [ 263.940607][ T6325] syzkaller0: entered promiscuous mode [ 263.948501][ T6325] syzkaller0: entered allmulticast mode [ 263.980308][ T6323] hpfs: hpfs_map_sector(): read error [ 263.986161][ T6323] hpfs: code page support is disabled [ 263.998579][ T6322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.027893][ T6323] hpfs: hpfs_map_4sectors(): unaligned read [ 264.086496][ T6325] tipc: Resetting bearer [ 264.098183][ T6323] hpfs: hpfs_map_4sectors(): unaligned read [ 264.104505][ T6323] hpfs: filesystem error: unable to find root dir [ 264.185220][ T6320] tipc: Resetting bearer [ 264.258483][ T6323] hpfs: hpfs_map_4sectors(): unaligned read [ 264.291702][ T6320] tipc: Disabling bearer [ 264.306263][ T6323] hpfs: hpfs_map_sector(): read error [ 264.711972][ T6336] capability: warning: `syz.3.102' uses 32-bit capabilities (legacy support in use) [ 264.815514][ T6323] KVM: debugfs: duplicate directory 6323-8 [ 265.339440][ T6338] tipc: Enabled bearer , priority 0 [ 265.357605][ T6338] syzkaller0: entered promiscuous mode [ 265.363530][ T6338] syzkaller0: entered allmulticast mode [ 265.504466][ T6338] tipc: Resetting bearer [ 265.676218][ T6337] tipc: Resetting bearer [ 265.710084][ T6337] tipc: Disabling bearer [ 265.852393][ T6347] syzkaller0: entered promiscuous mode [ 265.858304][ T6347] syzkaller0: entered allmulticast mode [ 265.941020][ T6346] tipc: Enabled bearer , priority 0 [ 266.148312][ T6342] tipc: Resetting bearer [ 266.198807][ T11] IPVS: starting estimator thread 0... [ 266.243641][ T6339] tipc: Resetting bearer [ 266.312355][ T6339] tipc: Disabling bearer [ 266.332446][ T6352] IPVS: using max 192 ests per chain, 9600 per kthread [ 266.844945][ T6361] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 266.854292][ T6361] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 266.874105][ T6361] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 267.337891][ T6366] loop2: detected capacity change from 0 to 1024 [ 267.385658][ T6366] EXT4-fs: inline encryption not supported [ 267.393500][ T6366] EXT4-fs: Ignoring removed i_version option [ 267.489846][ T6366] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.769987][ T6366] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.112: lblock 2 mapped to illegal pblock 2 (length 1) [ 267.892398][ T6366] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.112: lblock 0 mapped to illegal pblock 48 (length 1) [ 267.932338][ T6366] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.112: Failed to acquire dquot type 0 [ 267.978474][ T6373] IPVS: Error connecting to the multicast addr [ 268.072446][ T6366] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 268.162809][ T6366] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.112: mark_inode_dirty error [ 268.244204][ T6366] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 268.255564][ T6366] EXT4-fs (loop2): 1 orphan inode deleted [ 268.264232][ T6366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.290277][ T58] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.369766][ T58] __quota_error: 16 callbacks suppressed [ 268.369848][ T58] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 268.384855][ T58] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 268.953818][ T5814] Bluetooth: Unexpected continuation frame (len 30) [ 269.079093][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.094619][ T6394] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 269.171850][ T5803] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 269.202834][ T6396] vlan2: entered promiscuous mode [ 269.208098][ T6396] batadv0: entered promiscuous mode [ 269.244721][ T5803] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 269.248256][ T6393] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 269.276312][ T5803] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 269.451665][ T6393] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 270.065794][ T6408] loop2: detected capacity change from 0 to 1024 [ 270.110035][ T6383] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 270.329756][ T6383] usb 4-1: Using ep0 maxpacket: 32 [ 270.396381][ T6383] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.407372][ T6383] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.421381][ T6383] usb 4-1: config 0 interface 0 has no altsetting 0 [ 270.428461][ T6383] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 270.438099][ T6383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.670514][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 270.681539][ T6383] usb 4-1: config 0 descriptor?? [ 270.927970][ T5869] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 270.937238][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 271.040064][ T5869] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 271.049764][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.057998][ T5869] usb 2-1: Product: syz [ 271.063053][ T5869] usb 2-1: Manufacturer: syz [ 271.067862][ T5869] usb 2-1: SerialNumber: syz [ 271.274703][ T5869] usb 2-1: config 0 descriptor?? [ 271.663531][ T6383] usbhid 4-1:0.0: can't add hid device: -71 [ 271.670894][ T6383] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 271.766732][ T6383] usb 4-1: USB disconnect, device number 3 [ 271.790310][ T6419] syz_tun: entered promiscuous mode [ 271.879296][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'. [ 271.920468][ T30] audit: type=1326 audit(1758207396.984:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 271.939882][ T5869] mos7840 2-1:0.0: required endpoints missing [ 272.000829][ T5869] usb 2-1: USB disconnect, device number 4 [ 272.092622][ T30] audit: type=1326 audit(1758207397.014:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.115904][ T30] audit: type=1326 audit(1758207397.014:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.139492][ T30] audit: type=1326 audit(1758207397.024:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.162643][ T30] audit: type=1326 audit(1758207397.024:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.185046][ T30] audit: type=1326 audit(1758207397.054:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.207286][ T30] audit: type=1326 audit(1758207397.054:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.230588][ T30] audit: type=1326 audit(1758207397.064:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.253144][ T30] audit: type=1326 audit(1758207397.074:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 272.350079][ T6424] batman_adv: batadv0: Adding interface: dummy0 [ 272.356548][ T6424] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.382269][ T6424] batman_adv: batadv0: Interface activated: dummy0 [ 272.496544][ T6424] batadv0: mtu less than device minimum [ 272.505163][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.518318][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.531563][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.544825][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.557963][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.571347][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.584494][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.597794][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 272.611146][ T6424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 273.400760][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 273.445930][ T6440] misc userio: Invalid payload size [ 273.499321][ T6383] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 273.600238][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 273.641641][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.653134][ T5862] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 273.664730][ T5862] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.674763][ T5862] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.686143][ T5862] usb 4-1: config 1 interface 1 has no altsetting 0 [ 273.812373][ T6383] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 273.824070][ T6383] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 273.837737][ T6383] usb 2-1: config 0 has no interface number 1 [ 273.844296][ T6383] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.858668][ T6383] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 274.018382][ T5862] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.028005][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.036439][ T5862] usb 4-1: Product: syz [ 274.041126][ T5862] usb 4-1: Manufacturer: syz [ 274.045944][ T5862] usb 4-1: SerialNumber: syz [ 274.124251][ T6383] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 274.134030][ T6383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.142423][ T6383] usb 2-1: Product: syz [ 274.146808][ T6383] usb 2-1: Manufacturer: syz [ 274.151773][ T6383] usb 2-1: SerialNumber: syz [ 274.298703][ T6383] usb 2-1: config 0 descriptor?? [ 274.361886][ T5862] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 274.371070][ T5862] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 274.400678][ T6383] usb-storage 2-1:0.127: USB Mass Storage device detected [ 274.445038][ T6383] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 274.490839][ T6444] loop0: detected capacity change from 0 to 64 [ 274.600466][ T6383] usb-storage 2-1:0.0: USB Mass Storage device detected [ 274.654453][ T6383] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 274.672386][ T5862] usb 4-1: USB disconnect, device number 4 [ 274.840466][ T6383] usb 2-1: USB disconnect, device number 5 [ 274.982938][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.255850][ T6449] loop2: detected capacity change from 0 to 128 [ 276.415346][ T6449] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.580328][ T6449] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.939361][ T6478] tipc: Enabled bearer , priority 0 [ 276.963721][ T6478] syzkaller0: entered promiscuous mode [ 276.970062][ T6478] syzkaller0: entered allmulticast mode [ 277.109595][ T6478] tipc: Resetting bearer [ 277.166051][ T6477] tipc: Resetting bearer [ 277.234053][ T6477] tipc: Disabling bearer [ 278.211071][ T5803] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.221213][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 278.461954][ T5869] usb 5-1: config 0 has an invalid interface number: 45 but max is 0 [ 278.470764][ T5869] usb 5-1: config 0 has no interface number 0 [ 278.477095][ T5869] usb 5-1: config 0 interface 45 altsetting 2 bulk endpoint 0xB has invalid maxpacket 1023 [ 278.488058][ T5869] usb 5-1: config 0 interface 45 has no altsetting 0 [ 278.640768][ T5869] usb 5-1: New USB device found, idVendor=0499, idProduct=1009, bcdDevice=2b.79 [ 278.650582][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.658835][ T5869] usb 5-1: Product: syz [ 278.663914][ T5869] usb 5-1: Manufacturer: syz [ 278.668728][ T5869] usb 5-1: SerialNumber: syz [ 278.812177][ T5869] usb 5-1: config 0 descriptor?? [ 278.820627][ T6494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 279.195224][ T5869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.351038][ T5869] snd-usb-audio 5-1:0.45: probe with driver snd-usb-audio failed with error -2 [ 279.436766][ T5869] usb 5-1: USB disconnect, device number 2 [ 279.701854][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.478548][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 280.643518][ T6521] syz_tun: entered promiscuous mode [ 280.801158][ T5814] Bluetooth: hci4: unexpected event 0x3e length: 1024 > 260 [ 280.801437][ T5814] Bluetooth: hci4: unexpected subevent 0x0d length: 1023 > 260 [ 281.841924][ T6538] loop4: detected capacity change from 0 to 512 [ 282.029936][ T6538] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 282.054264][ T6538] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.160: bad orphan inode 15 [ 282.121489][ T6538] ext4_test_bit(bit=14, block=4) = 1 [ 282.127014][ T6538] is_bad_inode(inode)=0 [ 282.132456][ T6538] NEXT_ORPHAN(inode)=0 [ 282.136709][ T6538] max_ino=32 [ 282.140280][ T6538] i_nlink=1 [ 282.152301][ T6538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.567748][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 282.672482][ T6549] veth0: entered promiscuous mode [ 282.688171][ T6549] veth0: left promiscuous mode [ 282.778649][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.439344][ T5814] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 283.448056][ T5814] Bluetooth: hci4: Injecting HCI hardware error event [ 283.456113][ T5814] Bluetooth: hci4: hardware error 0x00 [ 283.550624][ T6562] tipc: Enabled bearer , priority 0 [ 283.645464][ T6560] syzkaller0: entered promiscuous mode [ 283.651856][ T6560] syzkaller0: entered allmulticast mode [ 283.776844][ T6560] tipc: Resetting bearer [ 283.847747][ T6558] tipc: Resetting bearer [ 283.878234][ T6558] tipc: Disabling bearer [ 284.321123][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 284.345834][ T6573] loop2: detected capacity change from 0 to 8 [ 284.453837][ T6573] SQUASHFS error: xz decompression failed, data probably corrupt [ 284.462073][ T6573] SQUASHFS error: Failed to read block 0x108: -5 [ 284.468605][ T6573] SQUASHFS error: Unable to read metadata cache entry [106] [ 284.476350][ T6573] SQUASHFS error: Unable to read inode 0x11f [ 284.530136][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 284.580365][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 284.648096][ T5862] usb 1-1: config 128 has an invalid interface number: 66 but max is 0 [ 284.656892][ T5862] usb 1-1: config 128 has no interface number 0 [ 284.663720][ T5862] usb 1-1: config 128 interface 66 has no altsetting 0 [ 284.724565][ T5862] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=1e.90 [ 284.734302][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.749161][ T5862] usb 1-1: Product: syz [ 284.753580][ T5862] usb 1-1: Manufacturer: syz [ 284.758366][ T5862] usb 1-1: SerialNumber: syz [ 284.787314][ T6578] loop4: detected capacity change from 0 to 2048 [ 284.849890][ T6577] loop1: detected capacity change from 0 to 2048 [ 284.963337][ T6578] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.083308][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.096659][ T6577] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.291474][ T6578] syz.4.179: attempt to access beyond end of device [ 285.291474][ T6578] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 285.301664][ T5862] comedi comedi5: could not set alternate setting 3 in high speed [ 285.314005][ T5862] usbduxsigma 1-1:128.66: driver 'usbduxsigma' failed to auto-configure device. [ 285.314722][ T6582] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.502350][ T5862] usbduxsigma 1-1:128.66: probe with driver usbduxsigma failed with error -71 [ 285.526731][ T5814] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 285.603892][ T5862] usb 1-1: USB disconnect, device number 5 [ 285.752845][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.945975][ T6580] loop3: detected capacity change from 0 to 4096 [ 285.981945][ T6580] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 286.136966][ T6580] ntfs3(loop3): $AttrDef is corrupted. [ 286.314518][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 286.347370][ T5814] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 286.400804][ T6587] veth0: entered promiscuous mode [ 286.509674][ T6587] veth0: left promiscuous mode [ 286.640242][ T5814] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 286.653057][ T5814] Bluetooth: hci3: Injecting HCI hardware error event [ 286.665895][ T5814] Bluetooth: hci3: hardware error 0x00 [ 287.007251][ T6596] loop0: detected capacity change from 0 to 64 [ 287.381358][ T6601] tipc: Enabled bearer , priority 0 [ 287.425957][ T6601] syzkaller0: entered promiscuous mode [ 287.426066][ T6601] syzkaller0: entered allmulticast mode [ 287.472678][ T6601] tipc: Resetting bearer [ 287.494686][ T6599] tipc: Resetting bearer [ 287.509395][ T6599] tipc: Disabling bearer [ 288.680734][ T6607] loop4: detected capacity change from 0 to 32768 [ 288.724258][ T5814] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 288.843589][ T6607] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 288.843725][ T6607] allowing incompatible features above 0.0: (unknown version) [ 288.843824][ T6607] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 288.883369][ T6607] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 288.891968][ T6607] bcachefs (loop4): initializing new filesystem [ 288.915095][ T6607] bcachefs (loop4): going read-write [ 288.986461][ T6607] bcachefs (loop4): marking superblocks [ 289.046773][ T6607] bcachefs (loop4): initializing freespace [ 289.050178][ T6625] loop0: detected capacity change from 0 to 512 [ 289.081069][ T6607] bcachefs (loop4): done initializing freespace [ 289.103336][ T6607] bcachefs (loop4): reading snapshots table [ 289.111108][ T6607] bcachefs (loop4): reading snapshots done [ 289.201829][ T6625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.239113][ T6607] bcachefs (loop4): done starting filesystem [ 289.421416][ T6625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.434638][ T6625] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.889184][ T42] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 290.071037][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 290.099640][ T6641] erspan0: entered promiscuous mode [ 290.115030][ T6641] erspan0: left promiscuous mode [ 290.175385][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.200640][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 290.295219][ T42] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 290.344945][ T42] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 290.377389][ T42] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 290.434982][ T42] usb 3-1: string descriptor 0 read error: -22 [ 290.446484][ T42] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 290.457663][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.488664][ T5805] bcachefs (loop4): shutting down [ 290.494395][ T5805] bcachefs (loop4): going read-only [ 290.500792][ T5805] bcachefs (loop4): finished waiting for writes to stop [ 290.517166][ T42] adutux 3-1:168.0: interrupt endpoints not found [ 290.546081][ T5805] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4 [ 290.817260][ T42] usb 3-1: USB disconnect, device number 2 [ 290.867185][ T5805] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 290.953035][ T5805] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 290.981688][ T5805] bcachefs (loop4): marking filesystem clean [ 291.161719][ T5805] bcachefs (loop4): shutdown complete [ 291.251912][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.262129][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.486884][ T6647] tipc: Enabled bearer , priority 0 [ 291.541156][ T6649] syzkaller0: entered promiscuous mode [ 291.546999][ T6649] syzkaller0: entered allmulticast mode [ 291.671500][ T6647] tipc: Resetting bearer [ 291.753869][ T6646] tipc: Resetting bearer [ 291.801096][ T6646] tipc: Disabling bearer [ 293.171780][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 293.198619][ T6669] erspan0: entered promiscuous mode [ 293.219751][ T6669] erspan0: left promiscuous mode [ 294.039085][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 294.039166][ T30] audit: type=1326 audit(1758207419.094:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 294.173961][ T30] audit: type=1326 audit(1758207419.144:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 294.543361][ T30] audit: type=1326 audit(1758207419.264:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 294.565919][ T30] audit: type=1326 audit(1758207419.274:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 294.588575][ T30] audit: type=1326 audit(1758207419.274:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 295.782942][ T6696] program syz.2.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.387180][ T6705] loop4: detected capacity change from 0 to 64 [ 296.422324][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 296.449985][ T6706] erspan0: entered promiscuous mode [ 296.464963][ T6706] erspan0: left promiscuous mode [ 297.750459][ T6709] loop1: detected capacity change from 0 to 4096 [ 297.844608][ T6709] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 298.233842][ T6709] ntfs3(loop1): ino=1a, mi_enum_attr [ 298.240114][ T6709] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 298.300618][ T6721] random: crng reseeded on system resumption [ 298.350792][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 298.544642][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 298.570571][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 298.583023][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.688477][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.699421][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.707699][ T42] usb 1-1: Product: syz [ 298.713113][ T42] usb 1-1: Manufacturer: syz [ 298.718004][ T42] usb 1-1: SerialNumber: syz [ 298.837815][ T42] usb 1-1: config 0 descriptor?? [ 298.911847][ T42] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 298.921770][ T42] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 298.954442][ T6726] loop4: detected capacity change from 0 to 1024 [ 299.047735][ T6726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.232558][ T6716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.238719][ T6716] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 299.265284][ T6726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.386605][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.396734][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.407430][ T30] audit: type=1800 audit(1758207424.444:45): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.228" name="bus" dev="loop1" ino=34 res=0 errno=0 [ 299.511277][ T6716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.518023][ T6716] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 299.528712][ T6709] kAFS: No cell specified [ 299.550866][ T30] audit: type=1800 audit(1758207424.524:46): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.228" name="file2" dev="loop1" ino=31 res=0 errno=0 [ 299.892267][ T6735] comedi comedi1: das16m1: I/O port conflict (0x501,8) [ 299.900539][ T42] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 299.931309][ T42] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 299.980134][ T42] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 299.987387][ T42] em28xx 1-1:0.0: No AC97 audio processor [ 300.111781][ T42] usb 1-1: USB disconnect, device number 6 [ 300.119814][ T42] em28xx 1-1:0.0: Disconnecting em28xx [ 300.126850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 300.153392][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.204647][ T42] em28xx 1-1:0.0: Freeing device [ 300.376728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 300.722626][ T6741] loop4: detected capacity change from 0 to 256 [ 300.769262][ T6741] exfat: Deprecated parameter 'utf8' [ 300.842571][ T6743] bond0: (slave bond_slave_1): Releasing backup interface [ 301.030234][ T6741] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 301.713142][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 302.397667][ T6763] tipc: Enabled bearer , priority 0 [ 302.461609][ T6766] syzkaller0: entered promiscuous mode [ 302.467543][ T6766] syzkaller0: entered allmulticast mode [ 302.629808][ T6763] tipc: Resetting bearer [ 302.744736][ T6762] tipc: Resetting bearer [ 302.792591][ T6762] tipc: Disabling bearer [ 303.020047][ T6761] loop2: detected capacity change from 0 to 4096 [ 303.376912][ T6761] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 303.414489][ T6761] ntfs3(loop2): Failed to load $Extend (-22). [ 303.421462][ T6761] ntfs3(loop2): Failed to initialize $Extend. [ 303.661660][ T6761] ntfs3(loop2): ino=5, "/" indx_read [ 303.717194][ T6780] .: renamed from bond0 (while UP) [ 305.250152][ T6802] loop3: detected capacity change from 0 to 512 [ 305.261777][ T6798] tipc: Enabled bearer , priority 0 [ 305.306777][ T6798] syzkaller0: entered promiscuous mode [ 305.312894][ T6798] syzkaller0: entered allmulticast mode [ 305.362810][ T6792] loop0: detected capacity change from 0 to 4096 [ 305.380344][ T6792] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 305.394247][ T6798] tipc: Resetting bearer [ 305.403919][ T6797] tipc: Resetting bearer [ 305.419396][ T6802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.433061][ T6802] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.447837][ T6797] tipc: Disabling bearer [ 305.698336][ T6802] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.267: Directory hole found for htree leaf block 0 [ 305.861107][ T6792] ntfs3(loop0): ino=19, mi_enum_attr [ 305.866695][ T6792] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 306.180212][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.734608][ T6816] loop1: detected capacity change from 0 to 512 [ 306.863106][ T6816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.876553][ T6816] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.029906][ T6824] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 307.426416][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.271710][ T5862] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 308.568177][ T5862] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 308.577385][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.588054][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 308.597500][ T5862] usb 3-1: config 1 has no interface number 0 [ 308.604158][ T5862] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 308.617345][ T5862] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 308.726067][ T5862] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.736365][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.744830][ T5862] usb 3-1: Product: syz [ 308.749340][ T5862] usb 3-1: Manufacturer: syz [ 308.754146][ T5862] usb 3-1: SerialNumber: syz [ 309.409904][ T6841] loop3: detected capacity change from 0 to 4096 [ 309.449522][ T6841] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 309.481178][ T5870] usb 3-1: USB disconnect, device number 3 [ 309.533409][ T6847] usb usb1: usbfs: process 6847 (syz.1.286) did not claim interface 0 before use [ 309.748745][ T6841] ntfs3(loop3): Inode r=19 is not in use! [ 309.755347][ T6841] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 309.920253][ T6841] ntfs3(loop3): ino=1b, mi_enum_attr [ 309.925957][ T6841] ntfs3(loop3): ino=1b, mi_enum_attr [ 310.681832][ T6862] random: crng reseeded on system resumption [ 310.867828][ T6864] loop1: detected capacity change from 0 to 256 [ 311.217379][ T6864] FAT-fs (loop1): Directory bread(block 64) failed [ 311.229872][ T6864] FAT-fs (loop1): Directory bread(block 65) failed [ 311.236821][ T6864] FAT-fs (loop1): Directory bread(block 66) failed [ 311.245546][ T6864] FAT-fs (loop1): Directory bread(block 67) failed [ 311.252791][ T6864] FAT-fs (loop1): Directory bread(block 68) failed [ 311.259806][ T6864] FAT-fs (loop1): Directory bread(block 69) failed [ 311.266687][ T6864] FAT-fs (loop1): Directory bread(block 70) failed [ 311.273651][ T6864] FAT-fs (loop1): Directory bread(block 71) failed [ 311.280849][ T6864] FAT-fs (loop1): Directory bread(block 72) failed [ 311.287598][ T6864] FAT-fs (loop1): Directory bread(block 73) failed [ 311.524120][ T6864] syz.1.294: attempt to access beyond end of device [ 311.524120][ T6864] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 311.742054][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 312.001157][ T5870] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 312.010820][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.105937][ T5870] usb 3-1: config 0 descriptor?? [ 312.593543][ T5870] ath6kl: Failed to submit usb control message: -71 [ 312.602204][ T5870] ath6kl: unable to send the bmi data to the device: -71 [ 312.609905][ T5870] ath6kl: Unable to send get target info: -71 [ 312.621315][ T5870] ath6kl: Failed to init ath6kl core: -71 [ 312.633726][ T5870] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 312.760882][ T6383] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 312.788412][ T5870] usb 3-1: USB disconnect, device number 4 [ 313.010682][ T6383] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 313.019727][ T6383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.101258][ T6383] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 313.111172][ T6383] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 313.121664][ T6383] usb 5-1: Manufacturer: syz [ 313.194805][ T6383] usb 5-1: config 0 descriptor?? [ 313.701446][ T6383] rc_core: IR keymap rc-hauppauge not found [ 313.707769][ T6383] Registered IR keymap rc-empty [ 313.715661][ T6383] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 313.730011][ T6383] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 313.924418][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 313.956769][ T6383] usb 5-1: USB disconnect, device number 3 [ 314.950001][ T6914] bond0: Error: Cannot enslave bond to itself. [ 315.065919][ T6917] loop3: detected capacity change from 0 to 64 [ 316.067279][ T6933] loop0: detected capacity change from 0 to 1024 [ 316.122798][ T6933] EXT4-fs: Ignoring removed nobh option [ 316.128774][ T6933] EXT4-fs: Ignoring removed bh option [ 316.310821][ T6933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.636187][ T6945] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 316.734068][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.746904][ T6946] tipc: Enabled bearer , priority 0 [ 316.799846][ T6946] syzkaller0: entered promiscuous mode [ 316.805682][ T6946] syzkaller0: entered allmulticast mode [ 316.918231][ T6946] tipc: Resetting bearer [ 317.040210][ T6944] tipc: Resetting bearer [ 317.091113][ T6944] tipc: Disabling bearer [ 317.149184][ T6953] tipc: Enabled bearer , priority 0 [ 317.200628][ T6949] syzkaller0: entered promiscuous mode [ 317.206476][ T6949] syzkaller0: entered allmulticast mode [ 317.261644][ T30] audit: type=1107 audit(1758207442.314:47): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 317.307040][ T6953] tipc: Resetting bearer [ 317.384149][ T6948] tipc: Resetting bearer [ 317.492279][ T6948] tipc: Disabling bearer [ 317.649536][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.657634][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.665780][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.673740][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.683753][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.691763][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.699879][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.707717][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.716358][ T6959] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 317.840101][ T6954] loop4: detected capacity change from 0 to 4096 [ 317.925649][ T6954] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 317.952878][ T6962] loop1: detected capacity change from 0 to 8 [ 318.142505][ T6954] ntfs3(loop4): ino=19, mi_enum_attr [ 318.148241][ T6954] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 318.326736][ T6954] ntfs3(loop4): failed to convert "c46c" to cp865 [ 318.337919][ T6966] loop2: detected capacity change from 0 to 64 [ 318.367711][ T6954] ntfs3(loop4): ino=20, mi_enum_attr [ 318.670205][ T6970] loop3: detected capacity change from 0 to 256 [ 318.974800][ T6970] FAT-fs (loop3): Directory bread(block 64) failed [ 318.981807][ T6970] FAT-fs (loop3): Directory bread(block 65) failed [ 318.988722][ T6970] FAT-fs (loop3): Directory bread(block 66) failed [ 318.996047][ T6970] FAT-fs (loop3): Directory bread(block 67) failed [ 319.003267][ T6970] FAT-fs (loop3): Directory bread(block 68) failed [ 319.011191][ T6970] FAT-fs (loop3): Directory bread(block 69) failed [ 319.018518][ T6970] FAT-fs (loop3): Directory bread(block 70) failed [ 319.025509][ T6970] FAT-fs (loop3): Directory bread(block 71) failed [ 319.032798][ T6970] FAT-fs (loop3): Directory bread(block 72) failed [ 319.039706][ T6970] FAT-fs (loop3): Directory bread(block 73) failed [ 319.245316][ T6977] net_ratelimit: 10 callbacks suppressed [ 319.245396][ T6977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.550948][ T6981] tipc: Enabled bearer , priority 0 [ 319.616817][ T6982] syzkaller0: entered promiscuous mode [ 319.629986][ T6982] syzkaller0: entered allmulticast mode [ 319.696073][ T6981] tipc: Resetting bearer [ 319.835129][ T6980] tipc: Resetting bearer [ 319.889306][ T6980] tipc: Disabling bearer [ 319.951886][ T6986] random: crng reseeded on system resumption [ 320.082889][ T6988] tipc: Enabled bearer , priority 0 [ 320.230585][ T6985] syzkaller0: entered promiscuous mode [ 320.243315][ T6985] syzkaller0: entered allmulticast mode [ 320.335144][ T6985] tipc: Resetting bearer [ 320.379752][ T6991] tipc: Can't bind to reserved service type 0 [ 320.444488][ T6984] tipc: Resetting bearer [ 320.526763][ T6984] tipc: Disabling bearer [ 321.071950][ T6997] 8021q: VLANs not supported on gre0 [ 321.791026][ T6995] loop3: detected capacity change from 0 to 4096 [ 321.906055][ T7005] loop2: detected capacity change from 0 to 512 [ 321.949240][ T7007] loop0: detected capacity change from 0 to 128 [ 322.010996][ T7005] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.123834][ T7007] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.216236][ T7007] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 322.417307][ T7011] loop4: detected capacity change from 0 to 1024 [ 322.537960][ T5802] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.062308][ T3544] hfsplus: b-tree write err: -5, ino 4 [ 323.234778][ T7019] tipc: Started in network mode [ 323.240354][ T7019] tipc: Node identity 3eeea7bb4c96, cluster identity 4711 [ 323.248481][ T7019] tipc: Enabled bearer , priority 0 [ 323.333065][ T7021] syzkaller0: entered promiscuous mode [ 323.338768][ T7021] syzkaller0: entered allmulticast mode [ 323.522380][ T7017] tipc: Resetting bearer [ 323.577997][ T7026] loop3: detected capacity change from 0 to 256 [ 323.622477][ T7017] tipc: Disabling bearer [ 323.801743][ T7028] 8021q: VLANs not supported on gre0 [ 323.874481][ T7026] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 323.888171][ T7026] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 324.460337][ T7035] random: crng reseeded on system resumption [ 324.738358][ T7038] loop0: detected capacity change from 0 to 512 [ 324.799796][ T7038] EXT4-fs: Ignoring removed i_version option [ 324.861264][ T7038] EXT4-fs (loop0): orphan cleanup on readonly fs [ 324.867948][ T7038] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 324.923315][ T7038] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 324.940886][ T7038] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.373: attempt to clear invalid blocks 2 len 1 [ 325.039986][ T7038] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.373: invalid indirect mapped block 1819239214 (level 0) [ 325.124593][ T7038] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.373: invalid indirect mapped block 1819239214 (level 1) [ 325.195565][ T7043] loop3: detected capacity change from 0 to 512 [ 325.241417][ T7045] loop1: detected capacity change from 0 to 256 [ 325.280762][ T7038] EXT4-fs (loop0): 1 truncate cleaned up [ 325.302085][ T7038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.397528][ T7043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.410979][ T7043] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.591973][ T7045] FAT-fs (loop1): Directory bread(block 64) failed [ 325.600255][ T7045] FAT-fs (loop1): Directory bread(block 65) failed [ 325.607317][ T7045] FAT-fs (loop1): Directory bread(block 66) failed [ 325.614311][ T7045] FAT-fs (loop1): Directory bread(block 67) failed [ 325.621814][ T7045] FAT-fs (loop1): Directory bread(block 68) failed [ 325.628545][ T7045] FAT-fs (loop1): Directory bread(block 69) failed [ 325.635640][ T7045] FAT-fs (loop1): Directory bread(block 70) failed [ 325.642560][ T7045] FAT-fs (loop1): Directory bread(block 71) failed [ 325.649785][ T7045] FAT-fs (loop1): Directory bread(block 72) failed [ 325.656512][ T7045] FAT-fs (loop1): Directory bread(block 73) failed [ 325.893512][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.056447][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.461809][ T7057] 8021q: VLANs not supported on gre0 [ 326.781929][ T7059] tipc: Enabled bearer , priority 0 [ 326.841956][ T7060] syzkaller0: entered promiscuous mode [ 326.847680][ T7060] syzkaller0: entered allmulticast mode [ 326.961063][ T7062] loop1: detected capacity change from 0 to 8 [ 327.029672][ T7059] tipc: Resetting bearer [ 327.120127][ T7058] tipc: Resetting bearer [ 327.163618][ T7058] tipc: Disabling bearer [ 327.714206][ T7070] loop1: detected capacity change from 0 to 256 [ 327.752142][ T7070] exfat: Deprecated parameter 'namecase' [ 327.821930][ T7070] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 328.111388][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 328.208303][ T7074] loop0: detected capacity change from 0 to 2048 [ 328.307376][ T7074] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.318549][ T7074] NILFS (loop0): mounting unchecked fs [ 328.353490][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 328.390694][ T5870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.401584][ T5870] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 328.412850][ T5870] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 328.422917][ T5870] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.438459][ T5870] usb 3-1: config 1 interface 1 has no altsetting 0 [ 328.536729][ T7078] loop1: detected capacity change from 0 to 128 [ 328.557623][ T7074] NILFS (loop0): recovery complete [ 328.563004][ T5870] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.563170][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.563297][ T5870] usb 3-1: Product: syz [ 328.563402][ T5870] usb 3-1: Manufacturer: syz [ 328.563512][ T5870] usb 3-1: SerialNumber: syz [ 328.677775][ T7079] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.729715][ T7078] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 328.858554][ T7078] hpfs: filesystem error: improperly stopped [ 328.866216][ T7078] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 328.875491][ T7078] hpfs: You really don't want any checks? You are crazy... [ 328.968549][ T5870] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 328.977780][ T5870] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 329.000371][ T7078] hpfs: hpfs_map_sector(): read error [ 329.005947][ T7078] hpfs: code page support is disabled [ 329.034598][ T7078] hpfs: hpfs_map_4sectors(): unaligned read [ 329.063676][ T7078] hpfs: hpfs_map_4sectors(): unaligned read [ 329.070153][ T7078] hpfs: filesystem error: unable to find root dir [ 329.317797][ T5870] usb 3-1: USB disconnect, device number 5 [ 329.396682][ T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 329.629358][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 329.694756][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.705727][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.707077][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.715155][ T42] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 329.740891][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.032430][ T42] hub 4-1:1.0: bad descriptor, ignoring hub [ 330.038593][ T42] hub 4-1:1.0: probe with driver hub failed with error -5 [ 330.293496][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.303626][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.461449][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 330.499379][ T5870] usb 4-1: USB disconnect, device number 5 [ 330.776908][ T7095] tipc: Enabled bearer , priority 0 [ 330.902500][ T7096] syzkaller0: entered promiscuous mode [ 330.908504][ T7096] syzkaller0: entered allmulticast mode [ 331.133841][ T7092] tipc: Resetting bearer [ 331.209951][ T7092] tipc: Disabling bearer [ 331.388417][ T7104] tipc: Enabled bearer , priority 0 [ 331.520910][ T7107] syzkaller0: entered promiscuous mode [ 331.526706][ T7107] syzkaller0: entered allmulticast mode [ 331.626247][ T7100] tipc: Resetting bearer [ 331.677106][ T7100] tipc: Disabling bearer [ 331.733637][ T7110] batman_adv: batadv0: Adding interface: dummy0 [ 331.740341][ T7110] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.766392][ T7110] batman_adv: batadv0: Interface activated: dummy0 [ 331.824429][ T7111] batadv0: mtu less than device minimum [ 331.832932][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.846069][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.859406][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.872611][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.885722][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.899100][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.912291][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.925425][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 331.938582][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 332.100009][ T7105] loop2: detected capacity change from 0 to 4096 [ 332.181089][ T7105] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 332.259905][ T7114] loop0: detected capacity change from 0 to 2048 [ 332.289642][ T7114] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 332.336978][ T7105] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 332.367496][ T7114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.563754][ T7105] ntfs3(loop2): Failed to load $Extend (-22). [ 332.570689][ T7105] ntfs3(loop2): Failed to initialize $Extend. [ 332.778711][ T7120] loop1: detected capacity change from 0 to 512 [ 332.992574][ T7120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.005833][ T7120] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.353703][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.379318][ T7128] loop0: detected capacity change from 0 to 512 [ 333.394578][ T7129] loop4: detected capacity change from 0 to 256 [ 333.455958][ T7128] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 333.541762][ T7128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 333.608273][ T7128] System zones: 1-12 [ 333.635769][ T7128] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.410: corrupted in-inode xattr: e_value size too large [ 333.663971][ T7135] loop2: detected capacity change from 0 to 47 [ 333.692318][ T7129] FAT-fs (loop4): Directory bread(block 64) failed [ 333.699464][ T7129] FAT-fs (loop4): Directory bread(block 65) failed [ 333.706384][ T7129] FAT-fs (loop4): Directory bread(block 66) failed [ 333.713461][ T7129] FAT-fs (loop4): Directory bread(block 67) failed [ 333.720537][ T7129] FAT-fs (loop4): Directory bread(block 68) failed [ 333.727374][ T7129] FAT-fs (loop4): Directory bread(block 69) failed [ 333.734626][ T7129] FAT-fs (loop4): Directory bread(block 70) failed [ 333.741645][ T7129] FAT-fs (loop4): Directory bread(block 71) failed [ 333.747926][ T7128] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.410: couldn't read orphan inode 15 (err -117) [ 333.748633][ T7129] FAT-fs (loop4): Directory bread(block 72) failed [ 333.773944][ T7129] FAT-fs (loop4): Directory bread(block 73) failed [ 333.805864][ T7128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.870607][ T7136] netlink: 68 bytes leftover after parsing attributes in process `syz.1.415'. [ 333.880319][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 334.291880][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.327752][ T7138] tipc: Enabled bearer , priority 0 [ 334.404599][ T7140] syzkaller0: entered promiscuous mode [ 334.411302][ T7140] syzkaller0: entered allmulticast mode [ 334.508022][ T7138] tipc: Resetting bearer [ 334.590123][ T7137] tipc: Resetting bearer [ 334.701832][ T7137] tipc: Disabling bearer [ 334.782902][ T7142] batman_adv: batadv0: Adding interface: dummy0 [ 334.789734][ T7142] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.815584][ T7142] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 334.854943][ T7150] tipc: Enabling of bearer rejected, failed to enable media [ 335.122880][ T7152] loop4: detected capacity change from 0 to 2048 [ 335.150310][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 335.177240][ T7151] syz_tun: entered promiscuous mode [ 335.409553][ T7152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.671474][ T7152] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.420: bg 0: block 234: padding at end of block bitmap is not set [ 335.743383][ T7158] tipc: Enabled bearer , priority 0 [ 335.850814][ T7162] syzkaller0: entered promiscuous mode [ 335.856586][ T7162] syzkaller0: entered allmulticast mode [ 336.102526][ T7157] tipc: Resetting bearer [ 336.219062][ T7157] tipc: Disabling bearer [ 336.375433][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.433862][ T7164] loop0: detected capacity change from 0 to 2048 [ 336.583793][ T7164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.697704][ T7164] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.169235][ T6383] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 337.363962][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.438377][ T6383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.450118][ T6383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.460365][ T6383] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.473626][ T6383] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 337.483035][ T6383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.524609][ T6383] usb 5-1: config 0 descriptor?? [ 337.972293][ T7179] loop2: detected capacity change from 0 to 16 [ 338.037032][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.045500][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.054978][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.062619][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.071625][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.078811][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.086379][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.087913][ T7179] erofs (device loop2): mounted with root inode @ nid 36. [ 338.093683][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.093860][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.115934][ T6383] ortek 0003:1223:3F07.0002: unknown main item tag 0x0 [ 338.126807][ T6383] ortek 0003:1223:3F07.0002: item fetching failed at offset 66/69 [ 338.202373][ T7177] loop1: detected capacity change from 0 to 2048 [ 338.325231][ T7182] loop0: detected capacity change from 0 to 256 [ 338.387252][ T7184] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.471472][ T6383] ortek 0003:1223:3F07.0002: probe with driver ortek failed with error -22 [ 338.556070][ T7182] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 338.558288][ T6383] usb 5-1: USB disconnect, device number 4 [ 338.575962][ T7182] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 339.150432][ T7186] loop3: detected capacity change from 0 to 256 [ 339.169350][ T7186] exfat: Deprecated parameter 'utf8' [ 339.175053][ T7186] exfat: Deprecated parameter 'utf8' [ 339.248670][ T7186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d) [ 339.547630][ T7188] tipc: Enabled bearer , priority 0 [ 339.554939][ T7191] loop4: detected capacity change from 0 to 16 [ 339.621419][ T7191] erofs (device loop4): mounted with root inode @ nid 36. [ 339.652617][ T7193] program syz.1.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.727151][ T7188] tipc: Resetting bearer [ 339.741274][ T7191] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 339.750108][ T7191] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 339.758185][ T7191] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 339.766273][ T7191] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 339.774491][ T7191] syz.4.435: attempt to access beyond end of device [ 339.774491][ T7191] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 339.789409][ T7191] syz.4.435: attempt to access beyond end of device [ 339.789409][ T7191] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 339.808425][ T7191] syz.4.435: attempt to access beyond end of device [ 339.808425][ T7191] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 339.824835][ T7191] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 339.908820][ T7187] tipc: Disabling bearer [ 339.929637][ T7191] erofs (device loop4): read error -117 @ 0 of nid 36 [ 339.936690][ T7191] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 340.605647][ T7200] loop1: detected capacity change from 0 to 1024 [ 340.868337][ T30] audit: type=1800 audit(1758207465.924:48): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.438" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 341.000846][ T7203] loop2: detected capacity change from 0 to 2048 [ 341.193304][ T7203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.310606][ T4284] hfsplus: b-tree write err: -5, ino 4 [ 341.394197][ T7203] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.439: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 341.472234][ T7203] EXT4-fs (loop2): Remounting filesystem read-only [ 341.821517][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.475930][ T7230] loop4: detected capacity change from 0 to 512 [ 342.569162][ T7230] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 342.785476][ T7236] tipc: Enabled bearer , priority 0 [ 342.918761][ T7236] tipc: Resetting bearer [ 343.003115][ T5163] udevd[5163]: worker [6013] terminated by signal 33 (Unknown signal 33) [ 343.055002][ T7232] tipc: Disabling bearer [ 343.057928][ T5163] udevd[5163]: worker [6013] failed while handling '/devices/virtual/block/loop4' [ 343.604972][ T7246] loop4: detected capacity change from 0 to 64 [ 343.625059][ T7245] usb usb8: usbfs: process 7245 (syz.3.454) did not claim interface 0 before use [ 343.969606][ T7250] loop1: detected capacity change from 0 to 512 [ 344.023874][ T7250] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.130919][ T7250] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 344.144603][ T7250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.309432][ T7250] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.455: bad orphan inode 131083 [ 344.419820][ T7250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.477469][ T7258] tipc: Enabled bearer , priority 0 [ 344.634361][ T7258] tipc: Resetting bearer [ 344.665102][ T7250] overlayfs: upper fs needs to support d_type. [ 344.739459][ T7257] tipc: Disabling bearer [ 344.961504][ T7264] loop4: detected capacity change from 0 to 1024 [ 345.250665][ T7264] ===================================================== [ 345.258111][ T7264] BUG: KMSAN: uninit-value in hfsplus_cat_bin_cmp_key+0xd9/0x190 [ 345.266535][ T7264] hfsplus_cat_bin_cmp_key+0xd9/0x190 [ 345.272354][ T7264] hfs_find_rec_by_key+0xae/0x240 [ 345.277559][ T7264] __hfsplus_brec_find+0x271/0x840 [ 345.283276][ T7264] hfsplus_brec_find+0x4df/0x9f0 [ 345.288393][ T7264] hfsplus_rename_cat+0x423/0x17e0 [ 345.293963][ T7264] hfsplus_link+0x409/0xc30 [ 345.298667][ T7264] vfs_link+0x8e8/0xb30 [ 345.303183][ T7264] do_linkat+0x4af/0x1040 [ 345.307711][ T7264] __ia32_sys_linkat+0x176/0x250 [ 345.313211][ T7264] ia32_sys_call+0x19be/0x4310 [ 345.318145][ T7264] __do_fast_syscall_32+0xb0/0x150 [ 345.328807][ T7264] do_fast_syscall_32+0x38/0x80 [ 345.335581][ T7264] do_SYSENTER_32+0x1f/0x30 [ 345.340484][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.347030][ T7264] [ 345.349674][ T7264] Uninit was created at: [ 345.354147][ T7264] __kmalloc_noprof+0x95f/0x1310 [ 345.359511][ T7264] hfsplus_find_init+0x90/0x1d0 [ 345.364599][ T7264] hfsplus_rename_cat+0x10d/0x17e0 [ 345.370106][ T7264] hfsplus_link+0x409/0xc30 [ 345.374813][ T7264] vfs_link+0x8e8/0xb30 [ 345.379348][ T7264] do_linkat+0x4af/0x1040 [ 345.383901][ T7264] __ia32_sys_linkat+0x176/0x250 [ 345.389254][ T7264] ia32_sys_call+0x19be/0x4310 [ 345.394197][ T7264] __do_fast_syscall_32+0xb0/0x150 [ 345.399683][ T7264] do_fast_syscall_32+0x38/0x80 [ 345.404708][ T7264] do_SYSENTER_32+0x1f/0x30 [ 345.409582][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.416115][ T7264] [ 345.418570][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.4.469 Not tainted syzkaller #0 PREEMPT(none) [ 345.433417][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.445395][ T7264] ===================================================== [ 345.452631][ T7264] Disabling lock debugging due to kernel taint [ 345.459134][ T7264] Kernel panic - not syncing: kmsan.panic set ... [ 345.465709][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.4.469 Tainted: G B syzkaller #0 PREEMPT(none) [ 345.476689][ T7264] Tainted: [B]=BAD_PAGE [ 345.480955][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.491176][ T7264] Call Trace: [ 345.494580][ T7264] [ 345.497618][ T7264] __dump_stack+0x26/0x30 [ 345.502168][ T7264] dump_stack_lvl+0x53/0x270 [ 345.506980][ T7264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.513009][ T7264] dump_stack+0x1e/0x25 [ 345.517398][ T7264] vpanic+0x361/0xc50 [ 345.521612][ T7264] panic+0x15d/0x160 [ 345.525773][ T7264] kmsan_report+0x31c/0x320 [ 345.530480][ T7264] ? __msan_warning+0x1b/0x30 [ 345.535352][ T7264] ? hfsplus_cat_bin_cmp_key+0xd9/0x190 [ 345.541125][ T7264] ? hfs_find_rec_by_key+0xae/0x240 [ 345.546511][ T7264] ? __hfsplus_brec_find+0x271/0x840 [ 345.551972][ T7264] ? hfsplus_brec_find+0x4df/0x9f0 [ 345.557259][ T7264] ? hfsplus_rename_cat+0x423/0x17e0 [ 345.562760][ T7264] ? hfsplus_link+0x409/0xc30 [ 345.567647][ T7264] ? vfs_link+0x8e8/0xb30 [ 345.572179][ T7264] ? do_linkat+0x4af/0x1040 [ 345.576886][ T7264] ? __ia32_sys_linkat+0x176/0x250 [ 345.582224][ T7264] ? ia32_sys_call+0x19be/0x4310 [ 345.587336][ T7264] ? __do_fast_syscall_32+0xb0/0x150 [ 345.592813][ T7264] ? do_fast_syscall_32+0x38/0x80 [ 345.598011][ T7264] ? do_SYSENTER_32+0x1f/0x30 [ 345.602856][ T7264] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.609597][ T7264] ? filter_irq_stacks+0x49/0x190 [ 345.614779][ T7264] ? kmsan_get_metadata+0xfb/0x160 [ 345.620089][ T7264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.626079][ T7264] ? kmsan_get_metadata+0xfb/0x160 [ 345.631370][ T7264] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 345.637810][ T7264] ? kmsan_get_metadata+0xfb/0x160 [ 345.643095][ T7264] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 345.649506][ T7264] ? kmsan_get_metadata+0xfb/0x160 [ 345.654796][ T7264] __msan_warning+0x1b/0x30 [ 345.659454][ T7264] hfsplus_cat_bin_cmp_key+0xd9/0x190 [ 345.665033][ T7264] hfs_find_rec_by_key+0xae/0x240 [ 345.670207][ T7264] ? __pfx_hfsplus_cat_bin_cmp_key+0x10/0x10 [ 345.676390][ T7264] __hfsplus_brec_find+0x271/0x840 [ 345.681681][ T7264] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 345.687566][ T7264] hfsplus_brec_find+0x4df/0x9f0 [ 345.692642][ T7264] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 345.698534][ T7264] hfsplus_rename_cat+0x423/0x17e0 [ 345.703860][ T7264] ? kmsan_get_metadata+0xfb/0x160 [ 345.709148][ T7264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.715150][ T7264] ? vsnprintf+0x1b36/0x1bd0 [ 345.719958][ T7264] ? sprintf+0x1d2/0x210 [ 345.724436][ T7264] hfsplus_link+0x409/0xc30 [ 345.729159][ T7264] ? __pfx_hfsplus_link+0x10/0x10 [ 345.734371][ T7264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.740377][ T7264] ? __pfx_hfsplus_link+0x10/0x10 [ 345.745588][ T7264] vfs_link+0x8e8/0xb30 [ 345.749954][ T7264] do_linkat+0x4af/0x1040 [ 345.754513][ T7264] __ia32_sys_linkat+0x176/0x250 [ 345.759665][ T7264] ia32_sys_call+0x19be/0x4310 [ 345.764588][ T7264] __do_fast_syscall_32+0xb0/0x150 [ 345.769861][ T7264] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 345.775808][ T7264] do_fast_syscall_32+0x38/0x80 [ 345.780818][ T7264] do_SYSENTER_32+0x1f/0x30 [ 345.785470][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.791993][ T7264] RIP: 0023:0xf7fe5539 [ 345.796201][ T7264] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 345.815969][ T7264] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 000000000000012f [ 345.824544][ T7264] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 345.832649][ T7264] RDX: 00000000ffffff9c RSI: 00000000800006c0 RDI: 0000000000000400 [ 345.840768][ T7264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.848857][ T7264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.856951][ T7264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.865074][ T7264] [ 345.868557][ T7264] Kernel Offset: disabled [ 345.872946][ T7264] Rebooting in 86400 seconds..