last executing test programs: 7.0901546s ago: executing program 0 (id=928): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 6.636995828s ago: executing program 0 (id=930): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x86, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 6.329640632s ago: executing program 0 (id=931): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x210008, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRES16, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303000003030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca711c31732d000000000000000000", @ANYRES32, @ANYBLOB="0265e4b63566648baa83ca01b927365a9ee1b6caf4acc11f6c33e95e1fd84b6f85503408bd89e455ed30b8abdeb1aac1cc1ee3cf0ecf14f88a2f50e088947e482c253e752b391c03f8ae61ff9606450ace5636d5444e3f27b4bfb7bf62e468d247268383b2b904c40c421f7c191f8736c828d89e7cde45ddc8f6c1fdd0452be67f6d47ef4214b358a9f9a4b9b09d86b60a10c57ac30cc84f04230e0d32842562ed4f2525"], 0xff, 0xc3c, &(0x7f0000001100)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 4.25208311s ago: executing program 0 (id=952): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x4, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x0, r1}) 4.250358347s ago: executing program 2 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x400, &(0x7f0000000000)=0x0) r2 = eventfd2(0xb, 0x80000) io_submit(r1, 0x3, &(0x7f00000009c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, 0x0, 0x0, 0x2, 0x0, 0x1, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) 4.09329689s ago: executing program 3 (id=944): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x246f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x10, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x800000000000015) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.801115561s ago: executing program 1 (id=945): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@random="5b1a073f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x2c, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @multicast1}, {0x18, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5}}}}}}, 0x0) 3.784746813s ago: executing program 2 (id=946): socket$inet(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 3.492078251s ago: executing program 2 (id=947): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x92) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfb) 3.292224398s ago: executing program 1 (id=949): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 3.287443637s ago: executing program 3 (id=950): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x58}], 0x1) 3.069330396s ago: executing program 3 (id=951): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8000, 0x7, 0x40, 0xe00}, 0x1c) sendmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f00000000c0)=@can={0x1d, r1}, 0x80, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x4f8}}], 0x1, 0x0) 2.865951963s ago: executing program 4 (id=953): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="039b070000"]) 2.710061979s ago: executing program 0 (id=954): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b872545b4560a117fffffff81004e224e207f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a6960000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.605646615s ago: executing program 4 (id=955): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) tkill(0x0, 0x7) writev(r0, 0x0, 0x0) 2.550684429s ago: executing program 1 (id=956): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000280)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x29, 0x37}], 0x18, 0x20000000}], 0x1, 0x0) 2.349430678s ago: executing program 3 (id=957): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="ffff8aee4000"}) 2.012489892s ago: executing program 2 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x24}}, 0x0) 1.936480517s ago: executing program 4 (id=959): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1.840745461s ago: executing program 1 (id=960): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 1.759851847s ago: executing program 0 (id=961): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x8000c2, &(0x7f0000000380), 0x1, 0x5bf, &(0x7f00000003c0)="$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") r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x84082) 1.668403937s ago: executing program 3 (id=962): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000140)={[{@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@nodots}, {@dots}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@nfs}, {@dots}, {@fat=@tz_utc}, {@fat=@errors_continue}, {@nodots}, {@fat=@nocase}, {@fat=@check_strict}, {@fat=@check_normal}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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") mount$9p_tcp(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0x0) 1.564705967s ago: executing program 2 (id=963): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.23773807s ago: executing program 4 (id=964): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0x4) 1.009347044s ago: executing program 1 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001"], 0x64}}, 0x0) 758.404688ms ago: executing program 3 (id=966): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) 501.840471ms ago: executing program 4 (id=967): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000000}) 140.49748ms ago: executing program 4 (id=968): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000001c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "3312b2ef88d6d754ad9152c2e4c60f0b"}, 0x15, 0x0) 50.457813ms ago: executing program 1 (id=969): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 0s ago: executing program 2 (id=970): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) close(r0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) kernel console output (not intermixed with test programs): 85] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.400605][ T5194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.450916][ T5196] hsr_slave_0: entered promiscuous mode [ 209.459576][ T5196] hsr_slave_1: entered promiscuous mode [ 209.498369][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.505804][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.532653][ T5185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.552852][ T5194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.638350][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.661007][ T5181] hsr_slave_0: entered promiscuous mode [ 209.671724][ T5181] hsr_slave_1: entered promiscuous mode [ 209.682076][ T5181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.690411][ T5181] Cannot create hsr debugfs directory [ 209.778307][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.862319][ T5186] team0: Port device team_slave_0 added [ 209.877025][ T5194] team0: Port device team_slave_0 added [ 209.891538][ T5186] team0: Port device team_slave_1 added [ 210.018540][ T5194] team0: Port device team_slave_1 added [ 210.207248][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.214576][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.241049][ T5186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.292114][ T5185] hsr_slave_0: entered promiscuous mode [ 210.302022][ T5185] hsr_slave_1: entered promiscuous mode [ 210.310778][ T5185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.318620][ T5185] Cannot create hsr debugfs directory [ 210.383621][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.390785][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.417288][ T5186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.492846][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.500512][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.526988][ T5194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.637518][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.644925][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.671324][ T5194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.901870][ T5186] hsr_slave_0: entered promiscuous mode [ 210.911686][ T5186] hsr_slave_1: entered promiscuous mode [ 210.921550][ T5186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.930663][ T5186] Cannot create hsr debugfs directory [ 211.035603][ T5183] Bluetooth: hci1: command tx timeout [ 211.041252][ T5183] Bluetooth: hci0: command tx timeout [ 211.047163][ T5183] Bluetooth: hci4: command tx timeout [ 211.052782][ T5183] Bluetooth: hci3: command tx timeout [ 211.058654][ T5183] Bluetooth: hci2: command tx timeout [ 211.317184][ T5196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.390738][ T5194] hsr_slave_0: entered promiscuous mode [ 211.408173][ T5194] hsr_slave_1: entered promiscuous mode [ 211.417297][ T5194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.425295][ T5194] Cannot create hsr debugfs directory [ 211.444020][ T5196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.465682][ T5196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.561586][ T5196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.979048][ T5181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.012632][ T5181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.119312][ T5181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.189119][ T5181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.391511][ T5185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.452550][ T5185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.483421][ T5185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.529751][ T5185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.588039][ T5186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.671188][ T5186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.799577][ T5186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.839557][ T5186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.962296][ T5194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.024450][ T5194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.050214][ T5194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.094495][ T5196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.114399][ T5201] Bluetooth: hci2: command tx timeout [ 213.120020][ T5201] Bluetooth: hci3: command tx timeout [ 213.120733][ T5183] Bluetooth: hci4: command tx timeout [ 213.131303][ T5183] Bluetooth: hci0: command tx timeout [ 213.137423][ T5183] Bluetooth: hci1: command tx timeout [ 213.154367][ T5194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.445884][ T5196] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.564733][ T3154] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.572412][ T3154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.715804][ T3154] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.723583][ T3154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.013156][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.036850][ T5181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.060105][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.228965][ T5186] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.271075][ T5181] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.352492][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.360273][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.379562][ T5185] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.500583][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.508322][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.525672][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.533433][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.554208][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.561860][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.650841][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.658627][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.797036][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.804949][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.314504][ T5194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.515376][ T5194] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.629994][ T3154] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.637791][ T3154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.730065][ T3154] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.737857][ T3154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.302552][ T5196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.914524][ T5186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.160338][ T5181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.470552][ T5186] veth0_vlan: entered promiscuous mode [ 217.564662][ T5185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.632638][ T5186] veth1_vlan: entered promiscuous mode [ 217.726115][ T5181] veth0_vlan: entered promiscuous mode [ 217.956889][ T5181] veth1_vlan: entered promiscuous mode [ 218.131971][ T5194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.157219][ T5186] veth0_macvtap: entered promiscuous mode [ 218.230079][ T5185] veth0_vlan: entered promiscuous mode [ 218.289044][ T5186] veth1_macvtap: entered promiscuous mode [ 218.333046][ T5185] veth1_vlan: entered promiscuous mode [ 218.453106][ T5181] veth0_macvtap: entered promiscuous mode [ 218.524983][ T5181] veth1_macvtap: entered promiscuous mode [ 218.586385][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.732425][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.804978][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.816025][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.831088][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.848094][ T5185] veth0_macvtap: entered promiscuous mode [ 218.877852][ T5186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.888121][ T5186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.897753][ T5186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.906919][ T5186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.969764][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.980744][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.997417][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.062203][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.069023][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.092234][ T5185] veth1_macvtap: entered promiscuous mode [ 219.131728][ T5181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.142063][ T5181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.151310][ T5181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.160550][ T5181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.211525][ T5194] veth0_vlan: entered promiscuous mode [ 219.330685][ T5194] veth1_vlan: entered promiscuous mode [ 219.367064][ T5196] veth0_vlan: entered promiscuous mode [ 219.391379][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.402280][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.412676][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.423461][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.442999][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.613968][ T5196] veth1_vlan: entered promiscuous mode [ 219.692084][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.705210][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.715901][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.726879][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.742006][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.857299][ T5185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.866635][ T5185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.875952][ T5185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.885250][ T5185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.929685][ T5194] veth0_macvtap: entered promiscuous mode [ 219.979759][ T5194] veth1_macvtap: entered promiscuous mode [ 220.140544][ T5196] veth0_macvtap: entered promiscuous mode [ 220.180670][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.191758][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.201984][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.212735][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.223021][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.236095][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.252057][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.332184][ T5196] veth1_macvtap: entered promiscuous mode [ 220.453938][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.467116][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.480559][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.495320][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.505622][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.516404][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.526667][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.537443][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.552503][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.621304][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.632236][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.645794][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.657817][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.668023][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.678874][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.697133][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.708952][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.721913][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.732429][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.743347][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.753497][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.764283][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.774463][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.785222][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.806267][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.859561][ T5194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.870039][ T5194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.884065][ T5194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.893135][ T5194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.947151][ T5196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.958161][ T5196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.968130][ T5196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.977286][ T5196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.348522][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.359819][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.636124][ T3209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.644797][ T3209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.833156][ T5186] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.234892][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.242866][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.432249][ T3101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.441872][ T3101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.586752][ T5363] Illegal XDP return value 2203971693 on prog (id 3) dev N/A, expect packet loss! [ 226.587668][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.604635][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.708115][ T3101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.723957][ T3101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.427471][ T3154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.436637][ T3154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.618244][ T3154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.626481][ T3154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.748604][ T3101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.756924][ T3101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.811188][ T5372] loop1: detected capacity change from 0 to 64 [ 227.856812][ T5372] ======================================================= [ 227.856812][ T5372] WARNING: The mand mount option has been deprecated and [ 227.856812][ T5372] and is ignored by this kernel. Remove the mand [ 227.856812][ T5372] option from the mount to silence this warning. [ 227.856812][ T5372] ======================================================= [ 227.947867][ T3209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.956123][ T3209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.962720][ T5384] mac80211_hwsim hwsim11 veyh0_vlan: renamed from wlan1 (while UP) [ 229.391546][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 229.452585][ T5390] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12'. [ 229.703892][ T5392] netlink: 'syz.4.13': attribute type 1 has an invalid length. [ 229.711695][ T5392] netlink: 'syz.4.13': attribute type 3 has an invalid length. [ 229.725945][ T5392] netlink: 216 bytes leftover after parsing attributes in process `syz.4.13'. [ 229.737015][ T5392] NCSI netlink: No device for ifindex 813332851 [ 229.936738][ T5395] netlink: 'syz.1.15': attribute type 46 has an invalid length. [ 230.525015][ T5401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 233.322640][ T5435] loop4: detected capacity change from 0 to 164 [ 234.106211][ T5448] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure [ 234.813739][ T5286] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 234.984301][ T5286] usb 1-1: Using ep0 maxpacket: 16 [ 235.092116][ T5462] loop1: detected capacity change from 0 to 256 [ 235.114650][ T5286] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.125310][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.136788][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.151658][ T5286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.163348][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.409572][ T5286] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.419420][ T5286] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.428033][ T5286] usb 1-1: Manufacturer: syz [ 235.547964][ T5286] usb 1-1: config 0 descriptor?? [ 236.277715][ T1762] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 236.442097][ T5286] rc_core: IR keymap rc-hauppauge not found [ 236.448747][ T5286] Registered IR keymap rc-empty [ 236.455708][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.553594][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.565069][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.575333][ T1762] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 236.589273][ T1762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.601447][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.628021][ T1762] usb 2-1: config 0 descriptor?? [ 236.637870][ T5286] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 236.654089][ T5286] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 236.853437][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.894050][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.023809][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.062453][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.085448][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.130589][ T1762] steelseries 0003:1038:1410.0001: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 237.151990][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.174136][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.202029][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.213847][ T5241] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 237.233784][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.262048][ T5286] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.288891][ T5286] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 237.305316][ T5286] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.324495][ T5286] usb 1-1: USB disconnect, device number 2 [ 237.412128][ T1819] usb 2-1: USB disconnect, device number 2 [ 237.484151][ T5241] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.513054][ T5241] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 237.522341][ T5241] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 237.532905][ T5241] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.578166][ T5241] usb 3-1: language id specifier not provided by device, defaulting to English [ 237.890500][ T5241] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.900325][ T5241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.224102][ T1819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 238.413542][ T1819] usb 4-1: Using ep0 maxpacket: 16 [ 238.461137][ T1819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.472692][ T1819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.484471][ T1819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.498104][ T1819] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.507606][ T1819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.616768][ T5241] usb 3-1: 0:2 : does not exist [ 238.764716][ T1819] usb 4-1: config 0 descriptor?? [ 238.900980][ T5241] usb 3-1: USB disconnect, device number 2 [ 239.348091][ T1819] microsoft 0003:045E:07DA.0002: report is too long [ 239.357662][ T1819] microsoft 0003:045E:07DA.0002: item 0 4 0 8 parsing failed [ 239.370336][ T1819] microsoft 0003:045E:07DA.0002: parse failed [ 239.377470][ T1819] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 239.686368][ T1819] usb 4-1: USB disconnect, device number 2 [ 239.792939][ T5508] loop2: detected capacity change from 0 to 128 [ 239.900147][ T5508] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.955701][ T5508] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.348269][ T5194] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.419877][ T5516] loop0: detected capacity change from 0 to 64 [ 242.022347][ T1819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 242.244304][ T1819] usb 2-1: Using ep0 maxpacket: 8 [ 242.285511][ T1819] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.295868][ T1819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.306103][ T1819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.319551][ T1819] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.333998][ T1819] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.336848][ T5542] loop2: detected capacity change from 0 to 1024 [ 242.343498][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.406237][ T5544] warning: `syz.4.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 242.552218][ T5542] hfsplus: bad catalog entry type [ 242.803888][ T5551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.83'. [ 243.143381][ T3101] hfsplus: b-tree write err: -5, ino 4 [ 243.614917][ T5241] usb 2-1: USB disconnect, device number 3 [ 243.807184][ T5553] loop0: detected capacity change from 0 to 2048 [ 244.763748][ T5286] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.802488][ T5577] loop1: detected capacity change from 0 to 512 [ 244.938931][ T5286] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 245.051051][ T5286] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.061245][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.069725][ T5286] usb 4-1: Product: syz [ 245.074245][ T5286] usb 4-1: Manufacturer: syz [ 245.083523][ T5286] usb 4-1: SerialNumber: syz [ 245.108463][ T5577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.122042][ T5577] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.199062][ T5577] EXT4-fs error (device loop1): ext4_empty_dir:3090: inode #12: comm syz.1.95: Directory hole found for htree leaf block 0 [ 245.255166][ T5577] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #12: comm syz.1.95: Directory hole found for htree leaf block 0 [ 245.272092][ T5286] usb 4-1: bad CDC descriptors [ 245.594646][ T5286] usb 4-1: USB disconnect, device number 3 [ 245.982418][ T5181] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.994277][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 247.733965][ T5617] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 247.748412][ T5617] macsec1: entered promiscuous mode [ 247.754921][ T5617] macsec1: entered allmulticast mode [ 247.760469][ T5617] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 247.960033][ T5617] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 247.968593][ T5617] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 248.088793][ T5621] loop4: detected capacity change from 0 to 736 [ 248.446216][ T5627] loop2: detected capacity change from 0 to 1764 [ 248.695007][ T5612] loop0: detected capacity change from 0 to 4096 [ 248.821639][ T5612] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 249.602880][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 249.727362][ T5635] netlink: 104 bytes leftover after parsing attributes in process `syz.2.121'. [ 249.736993][ T5635] netlink: 104 bytes leftover after parsing attributes in process `syz.2.121'. [ 249.847250][ T5639] loop0: detected capacity change from 0 to 128 [ 249.986836][ T5639] ufs: You didn't specify the type of your ufs filesystem [ 249.986836][ T5639] [ 249.986836][ T5639] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 249.986836][ T5639] [ 249.986836][ T5639] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 250.149041][ T5641] loop3: detected capacity change from 0 to 64 [ 250.258064][ T5639] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 250.280771][ T5641] hfs: unable to locate alternate MDB [ 250.286746][ T5641] hfs: continuing without an alternate MDB [ 250.335510][ T5639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.123'. [ 250.373778][ T29] audit: type=1326 audit(1727768092.426:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.4.124" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 251.450150][ T5645] loop2: detected capacity change from 0 to 4096 [ 251.521100][ T5655] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.293521][ T1819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 252.371168][ T5669] loop1: detected capacity change from 0 to 2048 [ 252.408776][ T5669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.673188][ T5673] loop2: detected capacity change from 0 to 256 [ 252.720047][ T1819] usb 5-1: Using ep0 maxpacket: 32 [ 252.748079][ T5674] loop3: detected capacity change from 0 to 256 [ 252.784818][ T1819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.796524][ T1819] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 252.806178][ T1819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.828736][ T5674] vfat: Bad value for 'time_offset' [ 252.846744][ T1819] usb 5-1: config 0 descriptor?? [ 253.340614][ T1819] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 253.444435][ T1819] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 253.554254][ T1819] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 253.562104][ T1819] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 253.637606][ T5682] tap0: tun_chr_ioctl cmd 1074025677 [ 253.643908][ T5682] tap0: linktype set to 6 [ 253.652466][ T1819] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 253.660540][ T1819] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -110 [ 253.744744][ T1819] usb 5-1: USB disconnect, device number 2 [ 253.910020][ T5686] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.699375][ T5689] loop0: detected capacity change from 0 to 1024 [ 258.143130][ T5747] loop0: detected capacity change from 0 to 1024 [ 258.589955][ T13] hfsplus: b-tree write err: -5, ino 4 [ 258.812200][ T5761] netlink: 'syz.0.176': attribute type 7 has an invalid length. [ 258.906952][ T5241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 259.132920][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.144473][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.157295][ T5241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 259.170751][ T5241] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 259.180267][ T5241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.205323][ T5241] usb 2-1: config 0 descriptor?? [ 259.671691][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.681243][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.689572][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.700099][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.707635][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.715106][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.730271][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x1 [ 259.742331][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.749915][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.757355][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.767446][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.774902][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.782273][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.789701][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.800154][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.807587][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.813103][ T5773] loop2: detected capacity change from 0 to 8 [ 259.814976][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.815177][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.848124][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.858182][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.865762][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.873056][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.880525][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.890694][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.900506][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.907970][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.918090][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.933059][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.935474][ T5766] sctp: failed to load transform for md5: -2 [ 259.942142][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.958385][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.965948][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.976256][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.983772][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 259.991076][ T5241] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 260.183098][ T5773] SQUASHFS error: lzo decompression failed, data probably corrupt [ 260.191772][ T5773] SQUASHFS error: Failed to read block 0x91: -5 [ 260.198430][ T5773] SQUASHFS error: Unable to read metadata cache entry [8f] [ 260.205959][ T5773] SQUASHFS error: Unable to read inode 0x11f [ 260.289969][ T5201] Bluetooth: hci4: command tx timeout [ 260.385582][ T5241] elecom 0003:056E:010C.0004: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 260.720030][ T5241] usb 2-1: USB disconnect, device number 4 [ 261.954776][ T1819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 262.093627][ T5261] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 262.150468][ T1819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.160906][ T1819] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 262.170439][ T1819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.188475][ T5804] loop0: detected capacity change from 0 to 128 [ 262.212089][ T5804] EXT4-fs: Ignoring removed nobh option [ 262.232898][ T1819] usb 3-1: config 0 descriptor?? [ 262.264115][ T5804] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.304368][ T5804] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.310019][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.328213][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.338864][ T5261] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 262.348552][ T5261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.422714][ T5261] usb 4-1: config 0 descriptor?? [ 262.915924][ T5186] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.939504][ T5812] netlink: 'syz.4.194': attribute type 16 has an invalid length. [ 262.947891][ T5812] netlink: 'syz.4.194': attribute type 3 has an invalid length. [ 262.956017][ T5812] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.194'. [ 263.123047][ T1819] logitech 0003:046D:C626.0005: unbalanced delimiter at end of report description [ 263.139542][ T1819] logitech 0003:046D:C626.0005: parse failed [ 263.146692][ T1819] logitech 0003:046D:C626.0005: probe with driver logitech failed with error -22 [ 263.165690][ T1819] usb 3-1: USB disconnect, device number 3 [ 263.267837][ T5814] loop4: detected capacity change from 0 to 764 [ 263.274788][ T5261] sony 0003:1345:3008.0006: unknown main item tag 0x0 [ 263.275024][ T5261] sony 0003:1345:3008.0006: unknown main item tag 0x0 [ 263.275242][ T5261] sony 0003:1345:3008.0006: unknown main item tag 0x0 [ 263.275438][ T5261] sony 0003:1345:3008.0006: unknown main item tag 0x0 [ 263.376397][ T5261] sony 0003:1345:3008.0006: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 263.388611][ T5261] sony 0003:1345:3008.0006: failed to claim input [ 263.395626][ T5814] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 263.465546][ T5814] Symlink component flag not implemented [ 263.471480][ T5814] Symlink component flag not implemented [ 263.489947][ T5814] Symlink component flag not implemented (128) [ 263.497537][ T5814] Symlink component flag not implemented (122) [ 263.594469][ T5261] usb 4-1: USB disconnect, device number 4 [ 264.361510][ T5822] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 264.416383][ T5824] loop2: detected capacity change from 0 to 256 [ 264.984684][ T5824] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 265.715872][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.966751][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.187898][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 266.283085][ T5851] input: syz0 as /devices/virtual/input/input6 [ 267.215650][ T3209] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.790052][ T3209] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.248793][ T5193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.266351][ T5193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.339427][ T5876] capability: warning: `syz.4.223' uses 32-bit capabilities (legacy support in use) [ 268.351290][ T5193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.367819][ T5193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.458005][ T3209] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.473602][ T5193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.484631][ T5193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.654108][ T5881] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 268.979860][ T3209] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.136948][ T3209] bridge_slave_1: left allmulticast mode [ 270.142851][ T3209] bridge_slave_1: left promiscuous mode [ 270.150113][ T3209] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.476348][ T5901] loop3: detected capacity change from 0 to 4096 [ 270.519033][ T3209] bridge_slave_0: left allmulticast mode [ 270.525202][ T3209] bridge_slave_0: left promiscuous mode [ 270.531888][ T3209] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.554041][ T5193] Bluetooth: hci3: command tx timeout [ 271.142598][ T5904] sctp: [Deprecated]: syz.1.236 (pid 5904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.142598][ T5904] Use struct sctp_sack_info instead [ 271.464948][ T5901] ntfs3: loop3: ino=9, ntfs_iget5 [ 271.470399][ T5901] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 271.495668][ T3209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.675656][ T3209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.724986][ T3209] bond0 (unregistering): Released all slaves [ 272.208726][ T5915] loop4: detected capacity change from 0 to 2048 [ 272.462110][ T5922] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.634222][ T5193] Bluetooth: hci3: command tx timeout [ 273.502640][ T5937] qrtr: Invalid version 0 [ 273.510623][ T5922] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 273.523042][ T5922] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 273.536447][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 273.630398][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 273.718289][ T3209] hsr_slave_0: left promiscuous mode [ 273.730255][ T3209] hsr_slave_1: left promiscuous mode [ 274.006042][ T5922] Remounting filesystem read-only [ 274.079996][ T3209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.087934][ T3209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.104385][ T3209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.112258][ T3209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.157571][ T5196] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 274.291181][ T3209] veth1_macvtap: left promiscuous mode [ 274.297091][ T3209] veth0_macvtap: left promiscuous mode [ 274.302972][ T3209] veth1_vlan: left promiscuous mode [ 274.311315][ T3209] veth0_vlan: left promiscuous mode [ 274.780913][ T5193] Bluetooth: hci3: command tx timeout [ 275.693483][ T3209] team0 (unregistering): Port device team_slave_1 removed [ 275.723739][ T3209] team0 (unregistering): Port device team_slave_0 removed [ 276.803567][ T5193] Bluetooth: hci3: command tx timeout [ 278.002267][ T5984] loop3: detected capacity change from 0 to 2048 [ 278.171825][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.182631][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.182661][ T5984] NILFS (loop3): invalid segment: Checksum error in segment payload [ 278.182806][ T5984] NILFS (loop3): trying rollback from an earlier position [ 278.190454][ T5870] bridge_slave_0: entered allmulticast mode [ 278.217408][ T5870] bridge_slave_0: entered promiscuous mode [ 278.352067][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.368403][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.376431][ T5870] bridge_slave_1: entered allmulticast mode [ 278.462813][ T5984] NILFS (loop3): recovery complete [ 278.501046][ T5995] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.550089][ T5870] bridge_slave_1: entered promiscuous mode [ 278.601088][ T5994] loop1: detected capacity change from 0 to 256 [ 278.903094][ T5984] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 278.915128][ T5994] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 279.017628][ T5984] Remounting filesystem read-only [ 279.120020][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.146008][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.288814][ T5870] team0: Port device team_slave_0 added [ 279.349974][ T5870] team0: Port device team_slave_1 added [ 279.777694][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.785049][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.818099][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.002215][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.009569][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.036197][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.234417][ T6011] loop4: detected capacity change from 0 to 1024 [ 280.526032][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.532706][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.704869][ T5870] hsr_slave_0: entered promiscuous mode [ 280.732409][ T5870] hsr_slave_1: entered promiscuous mode [ 280.749228][ T6011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.763826][ T5870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.771612][ T5870] Cannot create hsr debugfs directory [ 282.549480][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.694846][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.804886][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.918635][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.747394][ T6037] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 284.148258][ T6045] loop0: detected capacity change from 0 to 512 [ 284.250359][ T6045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 284.266902][ T6045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 284.330836][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.583540][ T6045] EXT4-fs (loop0): 1 orphan inode deleted [ 284.589545][ T6045] EXT4-fs (loop0): 1 truncate cleaned up [ 284.597513][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.694890][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.778817][ T3154] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.786603][ T3154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.904790][ T3154] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.912482][ T3154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.156629][ T6057] netlink: 92 bytes leftover after parsing attributes in process `syz.3.283'. [ 285.639013][ T5186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.296621][ T6071] loop3: detected capacity change from 0 to 24 [ 286.390033][ T6071] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 286.690278][ T6075] process 'syz.3.287' launched './file1' with NULL argv: empty string added [ 287.006386][ T6078] loop0: detected capacity change from 0 to 256 [ 287.082424][ T6078] exfat: Deprecated parameter 'namecase' [ 287.202219][ T6078] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 287.704533][ T6086] overlay: filesystem on ./file0 not supported [ 287.839895][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.298947][ T1819] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 288.498188][ T1819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.509255][ T1819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.675255][ T1819] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.684825][ T1819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.693113][ T1819] usb 4-1: Product: syz [ 288.697858][ T1819] usb 4-1: Manufacturer: syz [ 288.705840][ T1819] usb 4-1: SerialNumber: syz [ 288.867915][ T5870] veth0_vlan: entered promiscuous mode [ 289.031456][ T5870] veth1_vlan: entered promiscuous mode [ 289.144124][ T5870] veth0_macvtap: entered promiscuous mode [ 289.169400][ T5870] veth1_macvtap: entered promiscuous mode [ 289.237460][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.248921][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.261678][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.272463][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.282610][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.296678][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.306842][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.321555][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.340824][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.849770][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.864423][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.875893][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.890259][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.900991][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.911788][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.936742][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.999042][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.008227][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.020000][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.029164][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.105575][ T6118] loop4: detected capacity change from 0 to 1024 [ 291.156630][ T1819] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 291.216656][ T1819] cdc_ncm 4-1:1.0: bind() failure [ 291.233604][ T1819] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 291.240781][ T1819] cdc_ncm 4-1:1.1: bind() failure [ 291.283696][ T1819] usb 4-1: USB disconnect, device number 5 [ 291.695733][ T6118] hfsplus: bad catalog entry type [ 292.314252][ T34] hfsplus: b-tree write err: -5, ino 4 [ 293.022907][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 293.032305][ T6141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.302'. [ 293.831342][ T29] audit: type=1326 audit(1727768135.746:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 293.856319][ T29] audit: type=1326 audit(1727768135.746:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 293.868415][ T6143] loop1: detected capacity change from 0 to 4096 [ 293.879066][ T29] audit: type=1326 audit(1727768135.746:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 293.967723][ T6143] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 294.006070][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 294.018643][ T6155] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 294.694016][ T6161] tipc: Started in network mode [ 294.699271][ T6161] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 294.713621][ T6161] tipc: Enabling of bearer rejected, failed to enable media [ 294.965683][ T6143] ntfs3: loop1: mft corrupted [ 294.970760][ T6143] ntfs3: loop1: Failed to load $Extend (-22). [ 294.977968][ T6143] ntfs3: loop1: Failed to initialize $Extend. [ 296.182909][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 296.681703][ T6192] loop3: detected capacity change from 0 to 64 [ 296.727224][ T6188] netlink: 152 bytes leftover after parsing attributes in process `syz.0.315'. [ 297.013689][ T1819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 297.388506][ T3154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.396711][ T3154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.468356][ T1819] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 297.478299][ T1819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.617186][ T1819] usb 5-1: config 0 descriptor?? [ 297.766549][ T3154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.774847][ T3154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.193924][ T5261] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 298.355028][ T6210] loop3: detected capacity change from 0 to 24 [ 298.371471][ T6210] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 298.703891][ T6214] mmap: syz.1.323 (6214) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 298.706122][ T1819] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 298.811096][ T1819] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 298.820467][ T1819] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 299.024128][ T5261] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 299.033441][ T5261] usb 1-1: config 0 has no interface number 0 [ 299.039815][ T5261] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.065236][ T5261] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.076740][ T5261] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 299.086300][ T5261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.206465][ T5261] usb 1-1: config 0 descriptor?? [ 299.207196][ T6220] loop3: detected capacity change from 0 to 64 [ 299.316825][ T5286] usb 5-1: USB disconnect, device number 3 [ 299.769013][ T5261] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x0 [ 299.779416][ T5261] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x0 [ 299.788094][ T5261] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x0 [ 299.797100][ T5261] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x0 [ 299.805700][ T5261] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x0 [ 299.814391][ T5261] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x0 [ 299.822832][ T5261] logitech-djreceiver 0003:046D:C71B.0007: unknown main item tag 0x0 [ 299.881060][ T5261] logitech-djreceiver 0003:046D:C71B.0007: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 300.091427][ T5261] usb 1-1: USB disconnect, device number 3 [ 301.726994][ T6232] loop1: detected capacity change from 0 to 1764 [ 301.735676][ T6241] loop0: detected capacity change from 0 to 1024 [ 301.829073][ T6232] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 301.842980][ T6232] ISOFS: unable to read i-node block [ 301.848951][ T6232] isofs_fill_super: get root inode failed [ 301.892605][ T6241] hfsplus: extend alloc file! (8192,65536,366) [ 303.025270][ T6258] overlay: Unknown parameter 'fsuuid' [ 303.780368][ T6270] loop2: detected capacity change from 0 to 64 [ 303.902450][ T6272] loop1: detected capacity change from 0 to 1024 [ 304.120332][ T6270] hfs: keylen 94 too large [ 304.322859][ T6279] hfs: keylen 94 too large [ 304.327669][ T6279] hfs: request for non-existent node 1818584064 in B*Tree [ 304.335232][ T6279] hfs: request for non-existent node 1818584064 in B*Tree [ 304.810545][ T5241] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 304.819331][ T5241] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 304.863693][ T5286] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 304.985819][ T5261] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 305.045255][ T5241] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 305.170907][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.182263][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.198253][ T5261] usb 4-1: config 0 has an invalid interface number: 204 but max is 1 [ 305.198398][ T5261] usb 4-1: config 0 has no interface number 1 [ 305.207945][ T5261] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 305.208116][ T5261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.208251][ T5261] usb 4-1: Product: syz [ 305.208357][ T5261] usb 4-1: Manufacturer: syz [ 305.208465][ T5261] usb 4-1: SerialNumber: syz [ 305.213148][ T5261] usb 4-1: config 0 descriptor?? [ 305.215027][ T5286] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 305.266401][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.438647][ T6294] loop1: detected capacity change from 0 to 8 [ 305.468964][ T5286] usb 1-1: config 0 descriptor?? [ 305.519143][ T5261] snd-usb-audio 4-1:0.204: probe with driver snd-usb-audio failed with error -22 [ 305.649571][ T5261] usb 4-1: USB disconnect, device number 6 [ 305.968445][ T5286] hid-generic 0003:05AC:4262.0009: unbalanced delimiter at end of report description [ 306.086981][ T5393] udevd[5393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.134423][ T5286] hid-generic 0003:05AC:4262.0009: probe with driver hid-generic failed with error -22 [ 306.234827][ T5286] usb 1-1: USB disconnect, device number 4 [ 306.348376][ T29] audit: type=1326 audit(1727768148.406:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz.2.361" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 307.556660][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.453472][ T5261] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 308.683052][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 308.744785][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.373'. [ 308.906510][ T5261] usb 1-1: Using ep0 maxpacket: 16 [ 308.948445][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 308.949585][ T5261] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 308.969558][ T5261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.190756][ T5261] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.202048][ T5261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.210861][ T5261] usb 1-1: Product: syz [ 309.215516][ T5261] usb 1-1: Manufacturer: syz [ 309.220358][ T5261] usb 1-1: SerialNumber: syz [ 309.374243][ T5261] usb 1-1: config 0 descriptor?? [ 309.438547][ T5261] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 309.448271][ T5261] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 309.608152][ T6341] loop2: detected capacity change from 0 to 256 [ 309.958778][ T6341] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 310.072406][ T5261] em28xx 1-1:0.0: chip ID is em2750 [ 310.286961][ T5261] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 310.300441][ T5261] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 310.313772][ T5261] em28xx 1-1:0.0: No AC97 audio processor [ 310.378275][ T5261] usb 1-1: USB disconnect, device number 5 [ 310.385956][ T5261] em28xx 1-1:0.0: Disconnecting em28xx [ 310.477929][ T5261] em28xx 1-1:0.0: Freeing device [ 310.706931][ T6339] loop1: detected capacity change from 0 to 4096 [ 310.835964][ T6339] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 312.670748][ T6376] tun0: tun_chr_ioctl cmd 1074025677 [ 312.676802][ T6376] tun0: linktype set to 805 [ 312.743504][ T5261] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 313.061027][ T5261] usb 3-1: Using ep0 maxpacket: 32 [ 313.292484][ T5261] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 313.302539][ T5261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.311024][ T5261] usb 3-1: Product: syz [ 313.316559][ T5261] usb 3-1: Manufacturer: syz [ 313.321401][ T5261] usb 3-1: SerialNumber: syz [ 313.385318][ T5261] usb 3-1: config 0 descriptor?? [ 314.291979][ T5261] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 314.579658][ T5261] usb 3-1: USB disconnect, device number 4 [ 315.435504][ T6398] loop4: detected capacity change from 0 to 4096 [ 316.280739][ T6420] loop2: detected capacity change from 0 to 2048 [ 316.672259][ T6420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.358731][ T6435] loop1: detected capacity change from 0 to 1024 [ 317.519793][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 317.645962][ T6440] veth0_macvtap: left promiscuous mode [ 317.881271][ T6443] loop3: detected capacity change from 0 to 512 [ 317.939893][ T6445] loop0: detected capacity change from 0 to 2048 [ 318.265143][ T6435] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 318.272452][ T6435] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 318.291423][ T6445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.435891][ T6443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.449240][ T6443] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.514821][ T34] hfsplus: b-tree write err: -5, ino 4 [ 318.776079][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.089239][ T6457] loop4: detected capacity change from 0 to 256 [ 319.350480][ T6461] loop2: detected capacity change from 0 to 128 [ 319.391927][ T6457] FAT-fs (loop4): Directory bread(block 64) failed [ 319.401816][ T6457] FAT-fs (loop4): Directory bread(block 65) failed [ 319.409030][ T6457] FAT-fs (loop4): Directory bread(block 66) failed [ 319.416012][ T6457] FAT-fs (loop4): Directory bread(block 67) failed [ 319.427678][ T6457] FAT-fs (loop4): Directory bread(block 68) failed [ 319.440471][ T6457] FAT-fs (loop4): Directory bread(block 69) failed [ 319.447952][ T6457] FAT-fs (loop4): Directory bread(block 70) failed [ 319.454950][ T6457] FAT-fs (loop4): Directory bread(block 71) failed [ 319.466674][ T6457] FAT-fs (loop4): Directory bread(block 72) failed [ 319.473622][ T6457] FAT-fs (loop4): Directory bread(block 73) failed [ 319.541683][ T6461] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.599625][ T6461] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.696632][ T5286] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 320.052711][ T5870] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.114462][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 320.186483][ T5286] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.194948][ T5286] usb 4-1: config 0 has no interface number 0 [ 320.201309][ T5286] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.211694][ T5286] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 320.223983][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.249359][ T5286] usb 4-1: config 0 descriptor?? [ 320.279592][ T5286] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 320.682006][ T5261] usb 4-1: USB disconnect, device number 7 [ 320.728475][ T6475] loop0: detected capacity change from 0 to 16 [ 320.905367][ T6464] loop1: detected capacity change from 0 to 4096 [ 320.948307][ T29] audit: type=1326 audit(1727768162.976:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.430" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 321.154544][ T6476] loop2: detected capacity change from 0 to 2048 [ 321.331189][ T6476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.344570][ T6476] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.217215][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.221612][ T6486] cgroup: Need name or subsystem set [ 322.496413][ T5261] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 322.560397][ T6494] netlink: 136 bytes leftover after parsing attributes in process `syz.4.441'. [ 322.570545][ T6494] netlink: 89 bytes leftover after parsing attributes in process `syz.4.441'. [ 322.693558][ T5261] usb 1-1: Using ep0 maxpacket: 8 [ 322.745012][ T5261] usb 1-1: config 0 has no interfaces? [ 322.750910][ T5261] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 322.760892][ T5261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.896157][ T5261] usb 1-1: config 0 descriptor?? [ 323.429920][ T5261] usb 1-1: USB disconnect, device number 6 [ 323.799581][ T6513] loop1: detected capacity change from 0 to 512 [ 323.944494][ T6513] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 324.071256][ T6513] EXT4-fs (loop1): 1 truncate cleaned up [ 324.080037][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.181934][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 324.229279][ T6513] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.447: Logical block already allocated [ 324.288358][ T6513] EXT4-fs (loop1): Remounting filesystem read-only [ 324.450708][ T6518] loop4: detected capacity change from 0 to 4096 [ 324.712326][ T6518] NILFS (loop4): invalid segment: Checksum error in segment payload [ 324.720889][ T6518] NILFS (loop4): trying rollback from an earlier position [ 324.970282][ T6530] loop2: detected capacity change from 0 to 256 [ 325.076804][ T5181] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.145555][ T6518] NILFS (loop4): recovery complete [ 325.178291][ T6532] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.559199][ T6535] loop0: detected capacity change from 0 to 64 [ 325.837737][ T6535] hfs: walked past end of dir [ 326.175470][ T6541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.458'. [ 326.244834][ T6543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.461'. [ 326.254531][ T6543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.461'. [ 326.763795][ T5261] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 326.936934][ T5261] usb 1-1: Using ep0 maxpacket: 8 [ 326.962723][ T5261] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.974256][ T5261] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.984426][ T5261] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.002078][ T5261] usb 1-1: config 1 interface 0 has no altsetting 0 [ 327.136084][ T6557] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 327.241108][ T5261] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 327.251058][ T5261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.259457][ T5261] usb 1-1: Product: syz [ 327.264080][ T5261] usb 1-1: Manufacturer: syz [ 327.268937][ T5261] usb 1-1: SerialNumber: syz [ 327.697838][ T5261] usbhid 1-1:1.0: can't add hid device: -22 [ 327.705026][ T5261] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 327.845120][ T5261] usb 1-1: USB disconnect, device number 7 [ 328.000918][ T6565] loop1: detected capacity change from 0 to 1024 [ 328.042272][ T6565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.294044][ T6565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.634191][ T5187] Bluetooth: hci2: command 0x0406 tx timeout [ 328.634694][ T5189] Bluetooth: hci0: command 0x0406 tx timeout [ 328.644531][ T5187] Bluetooth: hci1: command 0x0406 tx timeout [ 329.049009][ T5181] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.052123][ T6593] loop3: detected capacity change from 0 to 128 [ 330.244687][ T6593] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 330.543829][ T6593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.734377][ T6610] netlink: 'syz.3.488': attribute type 64 has an invalid length. [ 332.278011][ T6619] loop0: detected capacity change from 0 to 256 [ 332.445752][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 334.800564][ T6654] loop1: detected capacity change from 0 to 128 [ 335.727260][ T3035] kworker/u8:8: attempt to access beyond end of device [ 335.727260][ T3035] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 336.023920][ T29] audit: type=1326 audit(1727768178.046:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.513" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 339.049727][ T6699] loop1: detected capacity change from 0 to 4096 [ 339.132964][ T5286] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 339.146851][ T6699] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 339.324660][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 339.412991][ T5286] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 339.422593][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.431041][ T5286] usb 5-1: Product: syz [ 339.438252][ T5286] usb 5-1: Manufacturer: syz [ 339.442055][ T6717] program syz.2.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.443011][ T5286] usb 5-1: SerialNumber: syz [ 339.521642][ T5286] usb 5-1: config 0 descriptor?? [ 339.541197][ T5286] gspca_main: sq930x-2.14.0 probing 2770:930c [ 339.721027][ T6699] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 339.920631][ T6719] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 339.930852][ T6719] syz_tun: entered promiscuous mode [ 339.958365][ T6719] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 340.025641][ T6699] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 340.032257][ T6699] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 341.612077][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 341.621909][ T6732] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 341.954610][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.961290][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.214706][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 342.227289][ T5286] gspca_sq930x: ucbus_write failed -71 [ 342.233369][ T5286] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 342.261108][ T5286] usb 5-1: USB disconnect, device number 4 [ 342.389642][ T6738] loop0: detected capacity change from 0 to 256 [ 342.449398][ T6736] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 342.457472][ T6736] netlink: 'syz.2.544': attribute type 2 has an invalid length. [ 342.475509][ T6740] loop4: detected capacity change from 0 to 128 [ 342.522078][ T6740] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 342.628607][ T6740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.223132][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.232778][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.245033][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.270480][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.353731][ T5183] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.363640][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.801527][ T6777] Bluetooth: MGMT ver 1.23 [ 345.975319][ T6778] loop2: detected capacity change from 0 to 1024 [ 346.130558][ T6757] chnl_net:caif_netlink_parms(): no params data found [ 346.480423][ T5193] Bluetooth: hci5: command tx timeout [ 347.616462][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.627084][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.635128][ T6757] bridge_slave_0: entered allmulticast mode [ 347.644393][ T6757] bridge_slave_0: entered promiscuous mode [ 347.849750][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.857801][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.868657][ T6757] bridge_slave_1: entered allmulticast mode [ 347.878125][ T6757] bridge_slave_1: entered promiscuous mode [ 348.323408][ T6757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.412654][ T6757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.641227][ T5193] Bluetooth: hci5: command tx timeout [ 348.932721][ T6757] team0: Port device team_slave_0 added [ 349.031545][ T6757] team0: Port device team_slave_1 added [ 350.378001][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.385503][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.411997][ T6757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.719432][ T5193] Bluetooth: hci5: command tx timeout [ 350.734920][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.742093][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.768258][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.781124][ T6757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.994960][ T6794] loop4: detected capacity change from 0 to 4096 [ 351.032367][ T6794] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 351.107721][ T6805] loop2: detected capacity change from 0 to 256 [ 351.379512][ T6757] hsr_slave_0: entered promiscuous mode [ 351.551067][ T6805] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe1fd6063, utbl_chksum : 0xe619d30d) [ 351.567652][ T6805] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 351.618591][ T6757] hsr_slave_1: entered promiscuous mode [ 351.634766][ T6757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.642732][ T6757] Cannot create hsr debugfs directory [ 351.791249][ T6794] ntfs3: loop4: Failed to read $UpCase (-4). [ 351.814615][ T6805] exFAT-fs (loop2): error, in sector 160, dentry 14 should be unused, but 0xc1 [ 351.824872][ T6805] exFAT-fs (loop2): Filesystem has been set read-only [ 351.838319][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.847831][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.912746][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.956585][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.028297][ T5183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 352.090383][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.448925][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.929720][ T5183] Bluetooth: hci5: command tx timeout [ 353.044774][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.301501][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.688373][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.887489][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 354.269636][ T6757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.404792][ T13] bridge_slave_1: left allmulticast mode [ 354.410680][ T13] bridge_slave_1: left promiscuous mode [ 354.418471][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.666740][ T13] bridge_slave_0: left allmulticast mode [ 354.672650][ T13] bridge_slave_0: left promiscuous mode [ 354.679691][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.805509][ T5183] Bluetooth: hci0: command tx timeout [ 355.341502][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.435058][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.473901][ T13] bond0 (unregistering): Released all slaves [ 355.604278][ T6757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.699317][ T6831] tipc: Started in network mode [ 355.705136][ T6831] tipc: Node identity 0300000003, cluster identity 4711 [ 355.712792][ T6831] tipc: Enabling of bearer rejected, failed to enable media [ 355.841220][ T6806] chnl_net:caif_netlink_parms(): no params data found [ 356.049345][ T6757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.536388][ T6845] tap0: tun_chr_ioctl cmd 99999999 [ 356.626636][ T6757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.963349][ T5183] Bluetooth: hci0: command tx timeout [ 357.635976][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 357.698635][ T13] hsr_slave_0: left promiscuous mode [ 357.755465][ T13] hsr_slave_1: left promiscuous mode [ 357.799963][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.807952][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.836158][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.844303][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.952200][ T13] veth1_macvtap: left promiscuous mode [ 357.958478][ T13] veth0_macvtap: left promiscuous mode [ 357.964629][ T13] veth1_vlan: left promiscuous mode [ 357.970186][ T13] veth0_vlan: left promiscuous mode [ 359.013887][ T13] team0 (unregistering): Port device team_slave_1 removed [ 359.038087][ T5183] Bluetooth: hci0: command tx timeout [ 359.067723][ T13] team0 (unregistering): Port device team_slave_0 removed [ 359.566454][ T6757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.778187][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 359.808205][ T6757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.907372][ T6757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.322103][ T6757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.361061][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.370881][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.378878][ T6806] bridge_slave_0: entered allmulticast mode [ 360.394502][ T6806] bridge_slave_0: entered promiscuous mode [ 360.535493][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.543344][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.551117][ T6806] bridge_slave_1: entered allmulticast mode [ 360.560459][ T6806] bridge_slave_1: entered promiscuous mode [ 361.040938][ T6806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.115065][ T5183] Bluetooth: hci0: command tx timeout [ 361.128559][ T6806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.553692][ T6901] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 361.798021][ T6904] loop0: detected capacity change from 0 to 4096 [ 361.880047][ T6806] team0: Port device team_slave_0 added [ 361.927018][ T6806] team0: Port device team_slave_1 added [ 362.008205][ T6904] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 362.287610][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.294919][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.321802][ T6806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.457366][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.466355][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.492820][ T6806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.801134][ T6757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.827310][ T6806] hsr_slave_0: entered promiscuous mode [ 362.880060][ T6806] hsr_slave_1: entered promiscuous mode [ 362.906561][ T6806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.914629][ T6806] Cannot create hsr debugfs directory [ 363.383442][ T6757] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.383655][ T6917] sctp: [Deprecated]: syz.2.610 (pid 6917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.383655][ T6917] Use struct sctp_sack_info instead [ 363.450724][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.458678][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.585845][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.593890][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.707105][ T6934] loop0: detected capacity change from 0 to 512 [ 364.757536][ T6934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 364.851806][ T6934] EXT4-fs (loop0): 1 orphan inode deleted [ 364.858203][ T6934] EXT4-fs (loop0): 1 truncate cleaned up [ 364.866948][ T6934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.072689][ T6939] loop4: detected capacity change from 0 to 64 [ 365.418981][ T6936] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 365.795420][ T6806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.840630][ T6806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.854096][ T5186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.926725][ T6806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.087790][ T6806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.374912][ T5286] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 366.576494][ T5286] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 366.586202][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.630007][ T5286] usb 5-1: config 0 descriptor?? [ 366.945831][ T5286] kaweth 5-1:0.0: Firmware present in device. [ 366.988039][ T6757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.152764][ T5286] kaweth 5-1:0.0: Statistics collection: 0 [ 367.159523][ T5286] kaweth 5-1:0.0: Multicast filter limit: 0 [ 367.169113][ T5286] kaweth 5-1:0.0: MTU: 0 [ 367.176744][ T5286] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 367.458150][ T6957] loop0: detected capacity change from 0 to 1024 [ 367.707430][ T5286] kaweth 5-1:0.0: Error setting SOFS wait [ 367.714098][ T5286] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 367.784720][ T6757] veth0_vlan: entered promiscuous mode [ 367.812103][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.865763][ T6757] veth1_vlan: entered promiscuous mode [ 367.931163][ T6806] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.041959][ T5286] usb 5-1: USB disconnect, device number 5 [ 368.227838][ T6806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.239369][ T6806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.323893][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.331542][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.349681][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.357503][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.466312][ T6757] veth0_macvtap: entered promiscuous mode [ 368.561457][ T6757] veth1_macvtap: entered promiscuous mode [ 368.825106][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.835945][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.846239][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.857529][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.867663][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.884038][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.898025][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.908850][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.924156][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.944469][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.956573][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.962831][ T6971] loop0: detected capacity change from 0 to 1024 [ 368.966587][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.966676][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.966776][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.011224][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.026224][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.218144][ T6971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.269122][ T6973] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 369.386423][ T6971] EXT4-fs error (device loop0): __ext4_new_inode:1070: comm syz.0.624: reserved inode found cleared - inode=18 [ 369.419687][ T6973] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 369.460073][ T6981] loop4: detected capacity change from 0 to 512 [ 369.702717][ T6981] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.625: bg 0: block 5: invalid block bitmap [ 369.709200][ T6757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.724552][ T6757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.733731][ T6757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.742744][ T6757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.862025][ T6981] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 369.936369][ T5186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.957771][ T6981] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.625: invalid indirect mapped block 3 (level 2) [ 370.037148][ T6981] EXT4-fs (loop4): 1 orphan inode deleted [ 370.043433][ T6981] EXT4-fs (loop4): 1 truncate cleaned up [ 370.050873][ T6981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.216322][ T6981] EXT4-fs error (device loop4): empty_inline_dir:1850: inode #12: block 7: comm syz.4.625: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 370.332263][ T6981] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 370.366099][ T6806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.738170][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.010241][ T6806] veth0_vlan: entered promiscuous mode [ 371.056863][ T6806] veth1_vlan: entered promiscuous mode [ 371.329329][ T6806] veth0_macvtap: entered promiscuous mode [ 371.361703][ T6806] veth1_macvtap: entered promiscuous mode [ 371.418117][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.429005][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.446129][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.459110][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.469992][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.481328][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.491888][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.502675][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.513810][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.525030][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.548476][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.676093][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.686944][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.697170][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.708000][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.718331][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.729156][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.739400][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.753089][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.769442][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.798811][ T6806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.808126][ T6806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.819870][ T6806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.830199][ T6806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.844714][ T7053] loop0: detected capacity change from 0 to 524288000 [ 375.554061][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.643'. [ 375.880082][ T7071] loop2: detected capacity change from 0 to 512 [ 376.024561][ T7071] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 376.334569][ T7071] EXT4-fs (loop2): 1 truncate cleaned up [ 376.342127][ T7071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.468838][ T7071] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.2.645: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 376.569982][ T7071] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 376.632106][ T7071] EXT4-fs warning (device loop2): ext4_rename_delete:3733: inode #2: comm syz.2.645: Deleting old file: nlink 5, error=-117 [ 377.320212][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.614352][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.622415][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.697872][ T3154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.706102][ T3154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.152005][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.160317][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.188534][ T1819] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 378.253252][ T6978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.261438][ T6978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.411275][ T1819] usb 3-1: Using ep0 maxpacket: 8 [ 378.472115][ T1819] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 378.481008][ T1819] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 378.491867][ T1819] usb 3-1: config 135 has no interface number 0 [ 378.498502][ T1819] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.819552][ T1819] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 378.829021][ T1819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.837483][ T1819] usb 3-1: Product: syz [ 378.841885][ T1819] usb 3-1: Manufacturer: syz [ 378.846912][ T1819] usb 3-1: SerialNumber: syz [ 379.061907][ T1819] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 379.068693][ T1819] usb 3-1: No valid video chain found. [ 379.106947][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 379.275250][ T7118] loop1: detected capacity change from 0 to 256 [ 379.354412][ T4617] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 379.516819][ T5286] usb 3-1: USB disconnect, device number 5 [ 379.541305][ T7118] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 379.556077][ T7118] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 379.564147][ T4617] usb 4-1: Using ep0 maxpacket: 16 [ 380.285651][ T4617] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 380.295153][ T4617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.303845][ T4617] usb 4-1: Product: syz [ 380.308346][ T4617] usb 4-1: Manufacturer: syz [ 380.313357][ T4617] usb 4-1: SerialNumber: syz [ 380.355901][ T4617] usb 4-1: config 0 descriptor?? [ 380.913362][ T4617] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 380.973930][ T4617] usb 4-1: USB disconnect, device number 8 [ 381.406478][ T7145] Process accounting resumed [ 381.621816][ T7149] loop0: detected capacity change from 0 to 512 [ 381.882352][ T7149] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 381.956449][ T7155] netlink: 52 bytes leftover after parsing attributes in process `syz.1.664'. [ 382.016422][ T7149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 382.084010][ T7149] System zones: 1-12 [ 382.172078][ T7149] EXT4-fs (loop0): 1 truncate cleaned up [ 382.179807][ T7149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.664094][ T5186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.762326][ T7168] loop3: detected capacity change from 0 to 512 [ 382.918869][ T7168] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.670: invalid block [ 382.994062][ T7168] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.670: invalid indirect mapped block 4294967295 (level 1) [ 383.133672][ T7168] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.670: invalid indirect mapped block 4294967295 (level 1) [ 383.156477][ T7168] EXT4-fs (loop3): 2 truncates cleaned up [ 383.164338][ T7168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.381598][ T7168] EXT4-fs error (device loop3): ext4_get_parent:1860: inode #11: comm syz.3.670: bad parent inode number: 3 [ 383.610234][ T7184] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 383.618348][ T7184] netlink: 'syz.1.673': attribute type 2 has an invalid length. [ 383.762862][ T6757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.875416][ T7182] loop2: detected capacity change from 0 to 1024 [ 383.962347][ T7182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.975266][ T7182] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.406534][ T7194] netlink: 'syz.1.677': attribute type 27 has an invalid length. [ 384.628666][ T7190] loop4: detected capacity change from 0 to 2048 [ 384.669827][ T1762] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 384.678869][ T1762] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 384.771747][ T1762] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 384.967070][ T5193] Bluetooth: hci4: command 0x0406 tx timeout [ 384.988316][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 385.232083][ T7190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.334530][ T7208] qrtr: Invalid version 0 [ 385.402502][ T7190] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.675: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 385.434037][ T7190] EXT4-fs (loop4): Remounting filesystem read-only [ 385.646475][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.725792][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.523708][ T1762] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 386.650970][ T5286] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 386.702792][ T1762] usb 4-1: Using ep0 maxpacket: 8 [ 386.756705][ T1762] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.767137][ T1762] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.777448][ T1762] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.787831][ T1762] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.806608][ T1762] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.817565][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.925620][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.936436][ T5286] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 386.947795][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.016520][ T5286] usb 5-1: config 0 descriptor?? [ 387.579068][ T1762] usb 4-1: GET_CAPABILITIES returned 2f [ 387.585431][ T1762] usbtmc 4-1:16.0: can't read capabilities [ 387.831811][ T5286] logitech 0003:046D:C626.000B: unbalanced delimiter at end of report description [ 387.887508][ T5286] logitech 0003:046D:C626.000B: parse failed [ 387.894243][ T5286] logitech 0003:046D:C626.000B: probe with driver logitech failed with error -22 [ 387.915643][ T5241] usb 4-1: USB disconnect, device number 9 [ 388.093113][ T5286] usb 5-1: USB disconnect, device number 6 [ 388.368395][ T7246] loop0: detected capacity change from 0 to 8 [ 388.454712][ T7244] loop2: detected capacity change from 0 to 512 [ 388.727056][ T7244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.727769][ T5183] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 388.740342][ T7244] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.840039][ T7244] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz.2.697: Directory hole found for htree leaf block 0 [ 388.871224][ T7244] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #12: comm syz.2.697: Directory hole found for htree leaf block 0 [ 389.117881][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.548757][ T7261] loop2: detected capacity change from 0 to 256 [ 389.860019][ T7261] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 390.066485][ T7269] netlink: 'syz.4.709': attribute type 5 has an invalid length. [ 390.434846][ T7253] loop0: detected capacity change from 0 to 4096 [ 390.765927][ T7253] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 391.211846][ T4617] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 391.677239][ T4617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.687853][ T4617] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 391.697389][ T4617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.746204][ T4617] usb 4-1: config 0 descriptor?? [ 392.077036][ T5241] usb 4-1: USB disconnect, device number 10 [ 392.193993][ T29] audit: type=1326 audit(1727768234.226:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 392.216048][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.222729][ T29] audit: type=1326 audit(1727768234.226:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 392.251559][ T29] audit: type=1326 audit(1727768234.226:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 392.275707][ T29] audit: type=1326 audit(1727768234.226:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 392.298185][ T29] audit: type=1326 audit(1727768234.226:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 392.320105][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.767157][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 392.812202][ T7292] loop2: detected capacity change from 0 to 1024 [ 392.877899][ T7292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.889336][ T7292] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 393.503794][ T7292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.548670][ T7307] ipvlan2: entered promiscuous mode [ 394.051921][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.143000][ T7312] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 394.468907][ T7317] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 394.676635][ T7319] loop2: detected capacity change from 0 to 256 [ 395.277352][ T5183] Bluetooth: hci3: command 0x0406 tx timeout [ 395.366532][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.731'. [ 395.864011][ T1819] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 396.348808][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.743'. [ 396.393625][ T1819] usb 2-1: Using ep0 maxpacket: 8 [ 396.409971][ T1819] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.472772][ T1819] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 396.482343][ T1819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.490889][ T1819] usb 2-1: Product: syz [ 396.495491][ T1819] usb 2-1: Manufacturer: syz [ 396.500321][ T1819] usb 2-1: SerialNumber: syz [ 396.944127][ T1819] usb 2-1: USB disconnect, device number 5 [ 397.225033][ T5241] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 397.426428][ T5241] usb 5-1: Using ep0 maxpacket: 8 [ 397.485293][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.495837][ T5241] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 397.505702][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.635933][ T5241] usb 5-1: config 0 descriptor?? [ 397.992575][ T7362] loop1: detected capacity change from 0 to 256 [ 398.092262][ T7362] MINIX-fs: mounting file system with errors, running fsck is recommended [ 398.116960][ T7364] loop0: detected capacity change from 0 to 64 [ 398.224532][ T7364] hfs: unable to locate alternate MDB [ 398.230227][ T7364] hfs: continuing without an alternate MDB [ 398.315846][ T29] audit: type=1800 audit(1727768240.366:14): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.753" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 398.336168][ T5241] logitech 0003:046D:C295.000C: item fetching failed at offset 0/3 [ 398.402337][ T5241] logitech 0003:046D:C295.000C: parse failed [ 398.409656][ T5241] logitech 0003:046D:C295.000C: probe with driver logitech failed with error -22 [ 398.494686][ T5241] usb 5-1: USB disconnect, device number 7 [ 399.902617][ T7385] loop4: detected capacity change from 0 to 512 [ 400.084376][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.762'. [ 400.159359][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 400.441555][ T7385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.455898][ T7385] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.752338][ T7400] loop0: detected capacity change from 0 to 512 [ 400.787610][ T7400] EXT4-fs: Ignoring removed nobh option [ 400.900502][ T5196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.912787][ T7400] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 400.938150][ T7400] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 401.013800][ T7400] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #13: comm syz.0.766: casefold flag without casefold feature [ 401.177140][ T7400] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.766: couldn't read orphan inode 13 (err -117) [ 401.229087][ T7400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.469599][ T7400] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.766: Abort forced by user [ 401.544043][ T7400] EXT4-fs (loop0): Remounting filesystem read-only [ 401.615539][ T7400] fscrypt (loop0, inode 2): Error -5 getting encryption context [ 402.011665][ T5186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.433491][ T1819] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 402.654606][ T1819] usb 5-1: Using ep0 maxpacket: 16 [ 402.717245][ T1819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 402.755221][ T1819] usb 5-1: config 0 has too many interfaces: 119, using maximum allowed: 32 [ 402.762731][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 402.764298][ T1819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 119 [ 402.865037][ T1819] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=7d.64 [ 402.874902][ T1819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.889952][ T1819] usb 5-1: Product: syz [ 402.894537][ T1819] usb 5-1: Manufacturer: syz [ 402.899372][ T1819] usb 5-1: SerialNumber: syz [ 403.156169][ T1819] usb 5-1: config 0 descriptor?? [ 403.321547][ T1819] hub 5-1:0.0: bad descriptor, ignoring hub [ 403.327850][ T1819] hub 5-1:0.0: probe with driver hub failed with error -5 [ 403.405471][ T1819] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 403.409792][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.421652][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.499104][ T1819] usb 5-1: USB disconnect, device number 8 [ 404.797385][ T7456] sctp: [Deprecated]: syz.2.794 (pid 7456) Use of int in maxseg socket option. [ 404.797385][ T7456] Use struct sctp_assoc_value instead [ 405.142357][ T4618] udevd[4618]: worker [5485] terminated by signal 33 (Unknown signal 33) [ 405.168603][ T4618] udevd[4618]: worker [5485] failed while handling '/devices/virtual/block/loop4' [ 405.830329][ T7470] loop3: detected capacity change from 0 to 1024 [ 406.185974][ T7470] EXT4-fs: Ignoring removed orlov option [ 406.223711][ T7470] EXT4-fs (loop3): Test dummy encryption mode enabled [ 406.633851][ T7470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.003674][ T5286] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 407.071765][ T7470] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 407.193799][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 407.214617][ T5286] usb 5-1: config 0 has no interfaces? [ 407.234003][ T5286] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 407.243996][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.252263][ T5286] usb 5-1: Product: syz [ 407.256857][ T5286] usb 5-1: Manufacturer: syz [ 407.261684][ T5286] usb 5-1: SerialNumber: syz [ 407.283726][ T5286] usb 5-1: config 0 descriptor?? [ 407.450804][ T7470] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 407.756899][ T6757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.812282][ T1819] usb 5-1: USB disconnect, device number 9 [ 408.656389][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 409.793624][ T7530] 9pnet_rdma: rdma_create_trans (7530): problem binding to privport: 13 [ 410.491470][ T7544] netem: change failed [ 410.861577][ T7552] loop3: detected capacity change from 0 to 64 [ 411.352343][ T7556] netlink: 408 bytes leftover after parsing attributes in process `syz.4.832'. [ 411.397239][ T7555] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 411.405111][ T7558] Trying to free block not in datazone [ 411.405250][ T7558] minix_free_block (loop3:21): bit already cleared [ 412.029036][ T7562] loop1: detected capacity change from 0 to 512 [ 412.167917][ T7569] input: syz1 as /devices/virtual/input/input8 [ 412.242090][ T7562] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.834: corrupted in-inode xattr: invalid ea_ino [ 412.354108][ T7562] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.834: couldn't read orphan inode 15 (err -117) [ 412.381573][ T7573] sctp: [Deprecated]: syz.4.837 (pid 7573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.381573][ T7573] Use struct sctp_sack_info instead [ 412.455798][ T7562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.600282][ T7568] loop3: detected capacity change from 0 to 1024 [ 412.750652][ T7568] hfsplus: extend alloc file! (8192,65536,366) [ 412.955967][ T7580] loop4: detected capacity change from 0 to 164 [ 413.181625][ T6806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.228862][ T7580] rock: directory entry would overflow storage [ 413.235542][ T7580] rock: sig=0x4f50, size=4, remaining=3 [ 413.241422][ T7580] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 413.476882][ T7582] netlink: 'syz.0.843': attribute type 21 has an invalid length. [ 413.485479][ T7582] netlink: 'syz.0.843': attribute type 20 has an invalid length. [ 413.493660][ T7582] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.589728][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 414.337582][ T7592] loop0: detected capacity change from 0 to 1024 [ 414.362936][ T7592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.417982][ T7592] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 414.879374][ T7601] netlink: 56 bytes leftover after parsing attributes in process `syz.1.851'. [ 414.889352][ T7601] netlink: 56 bytes leftover after parsing attributes in process `syz.1.851'. [ 414.914807][ T7592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.230229][ T7606] netlink: 'syz.4.854': attribute type 64 has an invalid length. [ 415.244078][ T7606] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 415.748424][ T5241] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 416.076273][ T5241] usb 3-1: Using ep0 maxpacket: 8 [ 416.127436][ T5186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.227551][ T5241] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 416.236119][ T5241] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.246734][ T5241] usb 3-1: config 0 has no interface number 0 [ 416.253086][ T5241] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 416.267240][ T5241] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.281349][ T5241] usb 3-1: config 0 interface 52 has no altsetting 0 [ 416.291217][ T5241] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 416.305197][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.432023][ T5241] usb 3-1: config 0 descriptor?? [ 416.467845][ T7624] netlink: 64 bytes leftover after parsing attributes in process `syz.4.863'. [ 416.477470][ T7624] netlink: 64 bytes leftover after parsing attributes in process `syz.4.863'. [ 416.852023][ T5241] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input9 [ 417.640400][ T5241] usb 3-1: USB disconnect, device number 6 [ 417.947149][ T7639] loop1: detected capacity change from 0 to 1024 [ 417.972091][ T7639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.053814][ T7639] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 418.105226][ T4617] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 418.111352][ T7639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.325659][ T4617] usb 5-1: Using ep0 maxpacket: 8 [ 418.398741][ T4617] usb 5-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 418.408298][ T4617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.416722][ T4617] usb 5-1: Product: syz [ 418.421131][ T4617] usb 5-1: Manufacturer: syz [ 418.426090][ T4617] usb 5-1: SerialNumber: syz [ 418.614394][ T4617] usb 5-1: config 0 descriptor?? [ 418.634355][ T4617] usb-storage 5-1:0.0: USB Mass Storage device detected [ 418.931659][ T4617] usb 5-1: USB disconnect, device number 10 [ 419.208032][ T6806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.557079][ T7663] can0: slcan on ttyS3. [ 419.707302][ T7664] can0 (unregistered): slcan off ttyS3. [ 419.714393][ T7664] Falling back ldisc for ttyS3. [ 419.892501][ T7668] netlink: 48 bytes leftover after parsing attributes in process `syz.1.877'. [ 419.925146][ T7670] bond0: option arp_interval: invalid value (18446744073304936960) [ 419.933625][ T7670] bond0: option arp_interval: allowed values 0 - 2147483647 [ 422.157523][ T7702] loop3: detected capacity change from 0 to 512 [ 422.202622][ T7702] EXT4-fs: Ignoring removed nobh option [ 422.543379][ T7702] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 422.551503][ T7702] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 422.624258][ T7702] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #13: comm syz.3.896: casefold flag without casefold feature [ 422.716828][ T7702] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.896: couldn't read orphan inode 13 (err -117) [ 422.839284][ T7702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.234801][ T7702] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.896: Abort forced by user [ 423.350095][ T7702] EXT4-fs (loop3): Remounting filesystem read-only [ 423.476390][ T7702] fscrypt (loop3, inode 2): Error -5 getting encryption context [ 423.704530][ T7735] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 424.129755][ T6757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.861567][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.915'. [ 424.967510][ T7755] loop0: detected capacity change from 0 to 64 [ 425.369296][ T7763] loop4: detected capacity change from 0 to 1024 [ 425.586287][ T7763] hfsplus: extend alloc file! (8192,65536,366) [ 426.321707][ T7772] loop2: detected capacity change from 0 to 512 [ 426.357254][ T7772] EXT4-fs: Ignoring removed nobh option [ 426.482775][ T7772] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 426.548573][ T7772] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 426.557315][ T7772] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #13: comm syz.2.924: casefold flag without casefold feature [ 426.682593][ T7772] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.924: couldn't read orphan inode 13 (err -117) [ 426.773872][ T7772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.000263][ T7772] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.924: Abort forced by user [ 427.118014][ T7772] EXT4-fs (loop2): Remounting filesystem read-only [ 427.150117][ T7772] fscrypt (loop2, inode 2): Error -5 getting encryption context [ 427.416697][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.946384][ T7796] loop3: detected capacity change from 0 to 1024 [ 428.140878][ T7789] loop0: detected capacity change from 0 to 2048 [ 428.645196][ T3035] hfsplus: b-tree write err: -5, ino 4 [ 429.596970][ T7814] loop0: detected capacity change from 0 to 128 [ 430.477628][ T7814] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.481394][ T7826] sp0: Synchronizing with TNC [ 430.537711][ T7814] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.789542][ T7837] loop4: detected capacity change from 0 to 16 [ 430.842450][ T7837] erofs: (device loop4): mounted with root inode @ nid 36. [ 430.958593][ T5186] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.231228][ T7854] loop0: detected capacity change from 0 to 512 [ 432.314666][ T7854] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 432.380203][ T7858] loop3: detected capacity change from 0 to 256 [ 432.468256][ T7860] loop2: detected capacity change from 0 to 512 [ 432.595723][ T7860] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.963: casefold flag without casefold feature [ 432.663796][ T7860] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.963: couldn't read orphan inode 15 (err -117) [ 432.693751][ T5286] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 432.837754][ T7860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.920134][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.965'. [ 433.103384][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 433.140289][ T5286] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 433.151646][ T5286] usb 1-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 433.171310][ T5286] usb 1-1: config 0 has no interface number 0 [ 433.182252][ T5286] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 82, changing to 10 [ 433.198803][ T5286] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1703, setting to 1024 [ 433.214274][ T5286] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.227723][ T5286] usb 1-1: config 0 interface 52 has no altsetting 0 [ 433.344358][ T5286] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 433.358138][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 433.367239][ T5286] usb 1-1: Product: syz [ 433.371645][ T5286] usb 1-1: SerialNumber: syz [ 433.451331][ T5286] usb 1-1: config 0 descriptor?? [ 433.728550][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.759946][ T5286] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input12 [ 433.908937][ T6978] ===================================================== [ 433.916819][ T6978] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 [ 433.925611][ T6978] n_tty_receive_buf_closing+0x539/0xb40 [ 433.931896][ T6978] n_tty_receive_buf_common+0x196b/0x2490 [ 433.938781][ T6978] n_tty_receive_buf2+0x4c/0x60 [ 433.944304][ T6978] tty_ldisc_receive_buf+0xd0/0x290 [ 433.950109][ T6978] tty_port_default_receive_buf+0xdf/0x190 [ 433.956763][ T6978] flush_to_ldisc+0x473/0xdb0 [ 433.962008][ T6978] process_scheduled_works+0xae0/0x1c40 [ 433.968630][ T6978] worker_thread+0xea7/0x14f0 [ 433.974069][ T6978] kthread+0x3e2/0x540 [ 433.978744][ T6978] ret_from_fork+0x6d/0x90 [ 433.983886][ T6978] ret_from_fork_asm+0x1a/0x30 [ 433.989226][ T6978] [ 433.992038][ T6978] Uninit was created at: [ 433.997183][ T6978] __kmalloc_noprof+0x661/0xf30 [ 434.002658][ T6978] __tty_buffer_request_room+0x36e/0x6d0 [ 434.013779][ T6978] __tty_insert_flip_string_flags+0x140/0x570 [ 434.021990][ T6978] uart_insert_char+0x39e/0xa10 [ 434.027579][ T6978] serial8250_read_char+0x1a7/0x5d0 [ 434.033514][ T6978] serial8250_handle_irq+0x970/0x1130 [ 434.039492][ T6978] serial8250_default_handle_irq+0x120/0x2b0 [ 434.046209][ T6978] serial8250_interrupt+0xc5/0x360 [ 434.051985][ T6978] __handle_irq_event_percpu+0x118/0xca0 [ 434.058438][ T6978] handle_irq_event+0xef/0x2c0 [ 434.064025][ T6978] handle_edge_irq+0x340/0xfb0 [ 434.069384][ T6978] __common_interrupt+0x97/0x1f0 [ 434.084657][ T6978] common_interrupt+0x92/0xb0 [ 434.094723][ T6978] asm_common_interrupt+0x2b/0x40 [ 434.100326][ T6978] [ 434.103291][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: kworker/u8:0 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 434.119767][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 434.131178][ T6978] Workqueue: events_unbound flush_to_ldisc [ 434.137315][ T6978] ===================================================== [ 434.144572][ T6978] Disabling lock debugging due to kernel taint [ 434.150844][ T6978] Kernel panic - not syncing: kmsan.panic set ... [ 434.157407][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: kworker/u8:0 Tainted: G B 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 434.169968][ T6978] Tainted: [B]=BAD_PAGE [ 434.174240][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 434.184459][ T6978] Workqueue: events_unbound flush_to_ldisc [ 434.190498][ T6978] Call Trace: [ 434.193901][ T6978] [ 434.196952][ T6978] dump_stack_lvl+0x216/0x2d0 [ 434.201831][ T6978] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 434.207826][ T6978] dump_stack+0x1e/0x30 [ 434.212174][ T6978] panic+0x4e2/0xcf0 [ 434.216262][ T6978] ? kmsan_get_metadata+0x41/0x1c0 [ 434.221571][ T6978] kmsan_report+0x2c7/0x2d0 [ 434.226266][ T6978] ? __msan_warning+0x95/0x120 [ 434.231251][ T6978] ? n_tty_receive_buf_closing+0x539/0xb40 [ 434.237295][ T6978] ? n_tty_receive_buf_common+0x196b/0x2490 [ 434.243416][ T6978] ? n_tty_receive_buf2+0x4c/0x60 [ 434.248648][ T6978] ? tty_ldisc_receive_buf+0xd0/0x290 [ 434.254221][ T6978] ? tty_port_default_receive_buf+0xdf/0x190 [ 434.260416][ T6978] ? flush_to_ldisc+0x473/0xdb0 [ 434.265452][ T6978] ? process_scheduled_works+0xae0/0x1c40 [ 434.271380][ T6978] ? worker_thread+0xea7/0x14f0 [ 434.276427][ T6978] ? kthread+0x3e2/0x540 [ 434.280880][ T6978] ? ret_from_fork+0x6d/0x90 [ 434.285657][ T6978] ? ret_from_fork_asm+0x1a/0x30 [ 434.290797][ T6978] ? kmsan_get_metadata+0x13e/0x1c0 [ 434.296174][ T6978] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 434.302183][ T6978] ? kmsan_get_metadata+0x13e/0x1c0 [ 434.307563][ T6978] ? kmsan_get_metadata+0x13e/0x1c0 [ 434.312933][ T6978] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 434.318925][ T6978] ? __update_load_avg_cfs_rq+0x121/0x10e0 [ 434.324941][ T6978] ? kmsan_get_metadata+0x13e/0x1c0 [ 434.330326][ T6978] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 434.336321][ T6978] ? kmsan_get_metadata+0x13e/0x1c0 [ 434.341693][ T6978] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 434.347681][ T6978] __msan_warning+0x95/0x120 [ 434.352481][ T6978] n_tty_receive_buf_closing+0x539/0xb40 [ 434.358370][ T6978] n_tty_receive_buf_common+0x196b/0x2490 [ 434.364380][ T6978] n_tty_receive_buf2+0x4c/0x60 [ 434.369453][ T6978] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 434.375214][ T6978] tty_ldisc_receive_buf+0xd0/0x290 [ 434.380627][ T6978] tty_port_default_receive_buf+0xdf/0x190 [ 434.386647][ T6978] flush_to_ldisc+0x473/0xdb0 [ 434.391520][ T6978] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 434.398169][ T6978] ? __pfx_flush_to_ldisc+0x10/0x10 [ 434.403556][ T6978] process_scheduled_works+0xae0/0x1c40 [ 434.409349][ T6978] worker_thread+0xea7/0x14f0 [ 434.414232][ T6978] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 434.420246][ T6978] kthread+0x3e2/0x540 [ 434.424535][ T6978] ? __pfx_worker_thread+0x10/0x10 [ 434.429859][ T6978] ? __pfx_kthread+0x10/0x10 [ 434.434670][ T6978] ret_from_fork+0x6d/0x90 [ 434.439273][ T6978] ? __pfx_kthread+0x10/0x10 [ 434.444068][ T6978] ret_from_fork_asm+0x1a/0x30 [ 434.449052][ T6978] [ 434.452461][ T6978] Kernel Offset: disabled [ 434.456845][ T6978] Rebooting in 86400 seconds..