last executing test programs: 33.228951385s ago: executing program 2 (id=7679): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1270, 0x1158, 0x0, 0x148, 0x1158, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12d0) 31.084897405s ago: executing program 2 (id=7684): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) prctl$PR_MPX_DISABLE_MANAGEMENT(0x3) 30.666976682s ago: executing program 2 (id=7687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000240)={0x0, 0xa, 0xffffffffffffff9a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.635197172s ago: executing program 2 (id=7693): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) 26.631789306s ago: executing program 2 (id=7698): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) poll(&(0x7f0000000140)=[{r0, 0x19f23}], 0x1, 0x0) 26.107337308s ago: executing program 2 (id=7701): set_mempolicy(0x4005, &(0x7f0000000000)=0x7e, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1) 11.355530285s ago: executing program 4 (id=7751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000100002800c000180080001001400000004000180"], 0x28}}, 0x0) 9.448580935s ago: executing program 4 (id=7755): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000)="de", 0xfdef}]) 8.225991658s ago: executing program 0 (id=7760): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000140)={[{@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@creator={'creator', 0x3d, "8761b331"}}, {@codepage={'codepage', 0x3d, 'cp866'}}, {@uid}]}, 0x5, 0x2fb, &(0x7f0000000240)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0\x00', 0x0) 8.015730197s ago: executing program 4 (id=7763): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b rejected, failed to enable media [ 2185.198699][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2185.205748][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2186.243347][T22930] loop1: detected capacity change from 0 to 128 [ 2186.268333][T22930] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 2186.320859][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.320859][T22930] loop1: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 2186.335015][T22930] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 2186.343794][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.343794][T22930] loop1: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 2186.359772][T22930] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 2186.368635][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.368635][T22930] loop1: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 2186.382338][T22930] Buffer I/O error on dev loop1, logical block 1157, async page read [ 2186.391041][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.391041][T22930] loop1: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 2186.413489][T22930] Buffer I/O error on dev loop1, logical block 3211264, async page read [ 2186.424606][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.424606][T22930] loop1: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 2186.438604][T22930] Buffer I/O error on dev loop1, logical block 8768635, async page read [ 2186.447316][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.447316][T22930] loop1: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 2186.463701][T22930] Buffer I/O error on dev loop1, logical block 13466417, async page read [ 2186.473018][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.473018][T22930] loop1: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 2186.486937][T22930] Buffer I/O error on dev loop1, logical block 209285, async page read [ 2186.505926][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.505926][T22930] loop1: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 2186.521942][T22930] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 2186.533051][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.533051][T22930] loop1: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 2186.547998][T22930] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 2186.556799][T22930] syz.1.7399: attempt to access beyond end of device [ 2186.556799][T22930] loop1: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 2186.571071][T22930] Buffer I/O error on dev loop1, logical block 1157, async page read [ 2186.642499][ T29] audit: type=1800 audit(1724046443.073:100): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7399" name="/" dev="loop1" ino=2 res=0 errno=0 [ 2186.975864][T17161] sysv_free_block: trying to free block not in datazone [ 2187.001329][T17161] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2187.500582][ T5438] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2187.731697][T12755] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 2187.740626][T12755] Bluetooth: hci7: Injecting HCI hardware error event [ 2187.748907][T12755] Bluetooth: hci7: hardware error 0x00 [ 2187.769845][ T5438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.781818][ T5438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.792057][ T5438] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2187.801574][ T5438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.903006][ T5438] usb 4-1: config 0 descriptor?? [ 2188.356744][ T5438] steelseries 0003:1038:1410.0023: item fetching failed at offset 3/7 [ 2188.370707][ T5438] steelseries 0003:1038:1410.0023: parse failed [ 2188.377856][ T5438] steelseries 0003:1038:1410.0023: probe with driver steelseries failed with error -22 [ 2188.605842][ T5435] usb 4-1: USB disconnect, device number 87 [ 2189.258155][T22976] netlink: 'syz.0.7419': attribute type 62 has an invalid length. [ 2189.825199][T12755] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 2190.214119][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7426'. [ 2190.784299][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7432'. [ 2190.810587][ T5438] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2191.050868][ T5438] usb 3-1: Using ep0 maxpacket: 16 [ 2191.117774][T23007] loop0: detected capacity change from 0 to 512 [ 2191.131465][ T5438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2191.143049][ T5438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2191.158739][ T5438] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2191.168324][ T5438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.187325][ T5438] usb 3-1: config 0 descriptor?? [ 2191.347772][T23007] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.7433: corrupted in-inode xattr: invalid ea_ino [ 2191.429665][T23007] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7433: couldn't read orphan inode 15 (err -117) [ 2191.482683][T23007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2191.690019][ T5438] uclogic 0003:28BD:0071.0024: interface is invalid, ignoring [ 2191.856739][T21054] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2192.018311][T19421] usb 3-1: USB disconnect, device number 107 [ 2192.953938][T23036] loop2: detected capacity change from 0 to 128 [ 2192.968762][T23035] loop0: detected capacity change from 0 to 512 [ 2193.088630][T23035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2193.485626][T21054] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2193.675381][T23046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7449'. [ 2193.895679][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7452'. [ 2193.984594][ T5438] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2194.219378][ T5438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.231480][ T5438] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 2194.243420][ T5438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.267410][T23058] loop2: detected capacity change from 0 to 512 [ 2194.301082][ T5438] usb 1-1: config 0 descriptor?? [ 2194.316688][T23058] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2194.463587][T23058] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2194.504737][T23058] EXT4-fs (loop2): 1 truncate cleaned up [ 2194.512708][T23058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2194.610194][T23056] loop3: detected capacity change from 0 to 2048 [ 2194.740595][T23056] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2194.827816][ T5438] petalynx 0003:18B1:0037.0025: unknown main item tag 0xd [ 2194.835582][ T5438] petalynx 0003:18B1:0037.0025: unexpected long global item [ 2194.843522][T16533] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2194.852260][T23063] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2194.853027][T23056] bio_check_eod: 4 callbacks suppressed [ 2194.853097][T23056] syz.3.7454: attempt to access beyond end of device [ 2194.853097][T23056] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 2194.875598][ T5438] petalynx 0003:18B1:0037.0025: parse failed [ 2194.891535][ T5438] petalynx 0003:18B1:0037.0025: probe with driver petalynx failed with error -22 [ 2194.987492][T20473] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2195.060625][ T5438] usb 1-1: USB disconnect, device number 96 [ 2195.114683][T16533] usb 2-1: Using ep0 maxpacket: 16 [ 2195.147911][T16533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2195.159517][T16533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2195.170619][T16533] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2195.179970][T16533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.234046][T16533] usb 2-1: config 0 descriptor?? [ 2195.335269][T23065] loop2: detected capacity change from 0 to 512 [ 2195.371043][T23065] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2195.398341][T23065] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.7457: corrupted in-inode xattr: invalid ea_ino [ 2195.625490][T23065] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7457: couldn't read orphan inode 12 (err -117) [ 2195.706257][T16533] elan 0003:04F3:0755.0026: item fetching failed at offset 3/5 [ 2195.709164][T23065] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2195.776560][T16533] elan 0003:04F3:0755.0026: Hid Parse failed [ 2195.783589][T16533] elan 0003:04F3:0755.0026: probe with driver elan failed with error -22 [ 2195.932452][T16533] usb 2-1: USB disconnect, device number 113 [ 2196.210932][T14553] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2196.232182][T20473] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 2196.389222][T23076] loop0: detected capacity change from 0 to 256 [ 2196.450769][T14553] usb 4-1: Using ep0 maxpacket: 32 [ 2196.463026][T14553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2196.474614][T14553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2196.484959][T14553] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 2196.494484][T14553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.562491][T14553] usb 4-1: config 0 descriptor?? [ 2196.692919][T23076] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc14df490, utbl_chksum : 0xe619d30d) [ 2197.001211][T23083] netlink: 'syz.1.7465': attribute type 29 has an invalid length. [ 2197.009449][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7465'. [ 2197.087958][T23083] netlink: 'syz.1.7465': attribute type 29 has an invalid length. [ 2197.096420][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7465'. [ 2197.173424][T14553] aquacomputer_d5next 0003:0C70:F003.0027: unknown main item tag 0x0 [ 2197.182192][T14553] aquacomputer_d5next 0003:0C70:F003.0027: unknown main item tag 0x0 [ 2197.190810][T14553] aquacomputer_d5next 0003:0C70:F003.0027: unknown main item tag 0x0 [ 2197.199233][T14553] aquacomputer_d5next 0003:0C70:F003.0027: unknown main item tag 0x0 [ 2197.207974][T14553] aquacomputer_d5next 0003:0C70:F003.0027: unknown main item tag 0x0 [ 2197.363139][T14553] aquacomputer_d5next 0003:0C70:F003.0027: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 2197.521941][T14553] usb 4-1: USB disconnect, device number 88 [ 2197.914286][T23089] loop0: detected capacity change from 0 to 2048 [ 2198.028501][T23089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2198.498899][T23095] loop2: detected capacity change from 0 to 2048 [ 2198.562245][T23095] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 2198.641269][T23095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2198.730866][T16533] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2198.932990][T16533] usb 4-1: Using ep0 maxpacket: 32 [ 2199.027552][T16533] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2199.037238][T16533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.045751][T16533] usb 4-1: Product: syz [ 2199.050163][T16533] usb 4-1: Manufacturer: syz [ 2199.055077][T16533] usb 4-1: SerialNumber: syz [ 2199.077057][T16533] usb 4-1: config 0 descriptor?? [ 2199.109057][T16533] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2199.751182][T16533] gspca_stk1135: reg_w 0x3 err -71 [ 2199.757642][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.764379][T16533] gspca_stk1135: Sensor write failed [ 2199.769913][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.776629][T16533] gspca_stk1135: Sensor write failed [ 2199.784594][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.791958][T16533] gspca_stk1135: Sensor read failed [ 2199.797554][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.804242][T16533] gspca_stk1135: Sensor read failed [ 2199.819884][T16533] gspca_stk1135: Detected sensor type unknown (0x0) [ 2199.829480][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.836123][T16533] gspca_stk1135: Sensor read failed [ 2199.841694][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.848237][T16533] gspca_stk1135: Sensor read failed [ 2199.853929][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.860561][T16533] gspca_stk1135: Sensor write failed [ 2199.866092][T16533] gspca_stk1135: serial bus timeout: status=0x00 [ 2199.872782][T16533] gspca_stk1135: Sensor write failed [ 2199.878530][T16533] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 2200.028859][T19421] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2200.032040][T16533] usb 4-1: USB disconnect, device number 89 [ 2200.271431][T19421] usb 3-1: Using ep0 maxpacket: 8 [ 2200.298539][T19421] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2200.353101][T19421] usb 3-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=5a.be [ 2200.362911][T19421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.371448][T19421] usb 3-1: Product: syz [ 2200.375950][T19421] usb 3-1: Manufacturer: syz [ 2200.380979][T19421] usb 3-1: SerialNumber: syz [ 2200.407433][T19421] usb 3-1: config 0 descriptor?? [ 2200.418645][T19421] usb 3-1: selecting invalid altsetting 1 [ 2200.431926][T19421] catc 3-1:0.0: Can't set altsetting 1. [ 2200.437866][T19421] catc 3-1:0.0: probe with driver catc failed with error -5 [ 2200.711371][T19421] usb 3-1: USB disconnect, device number 108 [ 2201.364783][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7486'. [ 2201.378857][T23129] loop0: detected capacity change from 0 to 256 [ 2202.716442][T23133] loop2: detected capacity change from 0 to 4096 [ 2202.756746][T23149] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7498'. [ 2203.113616][T23151] loop1: detected capacity change from 0 to 1024 [ 2203.154457][T23151] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 2203.235292][T23151] hfsplus: filesystem is marked journaled, leaving read-only. [ 2203.273280][T19421] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2203.524494][T19421] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 2203.534040][T19421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.588005][T19421] usb 1-1: config 0 descriptor?? [ 2203.645826][T19421] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2203.717901][T23161] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 2203.717901][T23161] program syz.3.7504 not setting count and/or reply_len properly [ 2204.068063][T19421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2204.103733][T19421] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 2204.119416][T19421] usb 1-1: media controller created [ 2204.247361][T19421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2204.432432][T19421] gp8psk_fe: Frontend attached [ 2204.437581][T19421] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 2204.446291][T19421] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2204.640064][T19421] gp8psk: usb in 138 operation failed. [ 2204.646203][T19421] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 2204.656105][T19421] gp8psk: found Genpix USB device pID = 203 (hex) [ 2204.718541][T19421] usb 1-1: USB disconnect, device number 97 [ 2205.169207][T23179] syz.3.7512: attempt to access beyond end of device [ 2205.169207][T23179] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2205.184746][T23179] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 2205.263320][T19421] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 2207.118108][T23204] loop2: detected capacity change from 0 to 64 [ 2207.204941][T23206] loop3: detected capacity change from 0 to 64 [ 2207.514095][ T29] audit: type=1800 audit(1724046463.893:101): pid=23206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7526" name="file2" dev="loop3" ino=19 res=0 errno=0 [ 2208.083952][T23196] loop0: detected capacity change from 0 to 32768 [ 2208.093154][T23196] BTRFS error: invalid value 0 for thread_pool [ 2208.970216][T23227] cannot load conntrack support for proto=3 [ 2209.000743][T23226] loop3: detected capacity change from 0 to 512 [ 2209.018492][T23226] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2209.035031][T23226] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 2209.315570][T23229] loop3: detected capacity change from 0 to 512 [ 2209.495259][T23229] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.7536: corrupted in-inode xattr: invalid ea_ino [ 2209.525094][T23231] loop2: detected capacity change from 0 to 512 [ 2209.621359][T23229] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7536: couldn't read orphan inode 15 (err -117) [ 2209.655257][T23229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2209.667342][T23231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2209.681488][T23231] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2209.856610][T23231] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.7537: path /246/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2210.035415][T20506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2210.106830][T20473] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2210.540827][T16517] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2210.720890][T16517] usb 2-1: Using ep0 maxpacket: 8 [ 2210.733355][T16517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2210.733549][T16517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2210.733702][T16517] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2210.733935][T16517] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2210.734104][T16517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.738271][T16517] usb 2-1: config 0 descriptor?? [ 2211.249890][T16517] logitech 0003:046D:C29C.0028: report_id 0 is invalid [ 2211.250027][T16517] logitech 0003:046D:C29C.0028: item 0 1 1 8 parsing failed [ 2211.268423][T16517] logitech 0003:046D:C29C.0028: parse failed [ 2211.268902][T16517] logitech 0003:046D:C29C.0028: probe with driver logitech failed with error -22 [ 2211.297156][T23260] loop0: detected capacity change from 0 to 256 [ 2211.299427][T23260] exfat: Deprecated parameter 'utf8' [ 2211.299756][T23260] exfat: Deprecated parameter 'utf8' [ 2211.367038][T23260] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 2211.494782][ T5435] usb 2-1: USB disconnect, device number 114 [ 2212.181062][T16517] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2212.467383][T16517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.467575][T16517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.467781][T16517] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 2212.467947][T16517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.483968][T16517] usb 4-1: config 0 descriptor?? [ 2212.487606][ T3616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.648708][ T3616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.795852][ T3616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.972081][ T3616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.041216][T16517] magicmouse 0003:05AC:0269.0029: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 2213.201542][T16517] usb 4-1: USB disconnect, device number 90 [ 2213.257623][ T3616] bridge_slave_1: left allmulticast mode [ 2213.257735][ T3616] bridge_slave_1: left promiscuous mode [ 2213.258636][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.298043][ T3616] bridge_slave_0: left allmulticast mode [ 2213.298161][ T3616] bridge_slave_0: left promiscuous mode [ 2213.299071][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.971203][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2214.009142][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2214.052214][ T3616] bond0 (unregistering): Released all slaves [ 2214.769650][T23285] loop3: detected capacity change from 0 to 256 [ 2214.795271][T23285] exfat: Deprecated parameter 'utf8' [ 2214.795567][T23285] exfat: Deprecated parameter 'namecase' [ 2214.796135][T23285] exfat: Deprecated parameter 'namecase' [ 2214.796311][T23285] exfat: Deprecated parameter 'utf8' [ 2214.901043][T23285] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 2215.454873][T23290] loop1: detected capacity change from 0 to 1024 [ 2215.462677][ T3616] hsr_slave_0: left promiscuous mode [ 2215.505021][ T3616] hsr_slave_1: left promiscuous mode [ 2215.533060][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2215.533254][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2215.553916][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2215.554204][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2215.613815][T22960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2215.619979][ T3616] veth1_macvtap: left promiscuous mode [ 2215.620129][ T3616] veth0_macvtap: left promiscuous mode [ 2215.620918][ T3616] veth1_vlan: left promiscuous mode [ 2215.621140][ T3616] veth0_vlan: left promiscuous mode [ 2215.633776][T22960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2215.635999][T22960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2215.673774][T22960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2215.940780][T22960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2215.958617][T19272] hfsplus: b-tree write err: -5, ino 4 [ 2215.960678][T23296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2216.128715][T23298] loop2: detected capacity change from 0 to 64 [ 2216.216854][T23298] hfs: walked past end of dir [ 2216.726575][ T3616] team0 (unregistering): Port device team_slave_1 removed [ 2216.797161][ T3616] team0 (unregistering): Port device team_slave_0 removed [ 2217.237451][T23307] loop2: detected capacity change from 0 to 1024 [ 2217.313800][T23292] lo speed is unknown, defaulting to 1000 [ 2217.528170][T23310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7573'. [ 2217.976042][T23296] Bluetooth: hci0: command 0x0406 tx timeout [ 2218.077021][T22960] Bluetooth: hci3: command tx timeout [ 2218.253636][ T3616] IPVS: stop unused estimator thread 0... [ 2218.273151][T23317] loop1: detected capacity change from 0 to 256 [ 2218.750966][T23292] chnl_net:caif_netlink_parms(): no params data found [ 2219.333707][T23326] loop1: detected capacity change from 0 to 2048 [ 2219.403490][T23326] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2219.430987][T23326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2219.442441][T23332] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2220.148449][T22960] Bluetooth: hci3: command tx timeout [ 2220.166740][T23339] vivid-007: disconnect [ 2220.169966][T23337] vivid-007: reconnect [ 2220.400724][T23292] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.401231][T23292] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.401938][T23292] bridge_slave_0: entered allmulticast mode [ 2220.405045][T23292] bridge_slave_0: entered promiscuous mode [ 2220.453913][T23292] bridge0: port 2(bridge_slave_1) entered blocking state [ 2220.454421][T23292] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.455123][T23292] bridge_slave_1: entered allmulticast mode [ 2220.458216][T23292] bridge_slave_1: entered promiscuous mode [ 2220.696296][T23292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2220.754743][T23292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.895890][T23348] loop3: detected capacity change from 0 to 128 [ 2221.003224][T23292] team0: Port device team_slave_0 added [ 2221.037060][T23349] tipc: Invalid UDP bearer configuration [ 2221.037233][T23349] tipc: Enabling of bearer rejected, failed to enable media [ 2221.088095][T23292] team0: Port device team_slave_1 added [ 2221.155689][T23296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2221.162991][T23296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2221.166758][T23296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2221.229637][T23296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2221.252040][T23296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2221.278745][T23296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2221.280604][T23292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.280685][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.280834][T23292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.441233][T23292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.441319][T23292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.441471][T23292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.563926][T23350] lo speed is unknown, defaulting to 1000 [ 2222.220493][T23296] Bluetooth: hci3: command tx timeout [ 2222.225194][T23292] hsr_slave_0: entered promiscuous mode [ 2222.264471][T23292] hsr_slave_1: entered promiscuous mode [ 2222.293321][T23292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2222.293415][T23292] Cannot create hsr debugfs directory [ 2223.210882][T19421] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2223.414327][T23296] Bluetooth: hci5: command tx timeout [ 2223.424033][T19421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2223.424232][T19421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2223.424443][T19421] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 2223.424606][T19421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.429237][T19421] usb 4-1: config 0 descriptor?? [ 2223.616618][T23350] chnl_net:caif_netlink_parms(): no params data found [ 2223.994261][T19421] asus 0003:048D:CE50.002A: unknown main item tag 0xd [ 2224.022434][T19421] asus 0003:048D:CE50.002A: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input0 [ 2224.022637][T19421] asus 0003:048D:CE50.002A: Asus input not registered [ 2224.027278][T19421] asus 0003:048D:CE50.002A: probe with driver asus failed with error -12 [ 2224.194143][T19421] usb 4-1: USB disconnect, device number 91 [ 2224.290884][T23296] Bluetooth: hci3: command tx timeout [ 2225.045064][T23292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2225.077958][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7602'. [ 2225.078061][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7602'. [ 2225.104287][T23292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2225.376068][T23292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2225.403131][T23350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.403639][T23350] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.404397][T23350] bridge_slave_0: entered allmulticast mode [ 2225.407483][T23350] bridge_slave_0: entered promiscuous mode [ 2225.442001][T23292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2225.480663][T23350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.527850][T23296] Bluetooth: hci5: command tx timeout [ 2225.533996][T23350] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.710958][T19421] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2225.725375][T23350] bridge_slave_1: entered allmulticast mode [ 2226.001902][T19421] usb 3-1: Using ep0 maxpacket: 16 [ 2226.010955][T23350] bridge_slave_1: entered promiscuous mode [ 2226.047075][T19421] usb 3-1: config 0 interface 0 altsetting 63 has an invalid endpoint descriptor of length 3, skipping [ 2226.075367][T19421] usb 3-1: config 0 interface 0 altsetting 63 has an invalid descriptor for endpoint zero, skipping [ 2226.075547][T19421] usb 3-1: config 0 interface 0 altsetting 63 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2226.075719][T19421] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2226.254711][T19421] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= 2.86 [ 2226.254892][T19421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.255038][T19421] usb 3-1: Product: syz [ 2226.255148][T19421] usb 3-1: Manufacturer: syz [ 2226.255262][T19421] usb 3-1: SerialNumber: syz [ 2226.259591][T19421] usb 3-1: config 0 descriptor?? [ 2226.304987][T19421] empeg 3-1:0.0: empeg converter detected [ 2226.305154][T19421] usb 3-1: active config #0 != 1 ?? [ 2226.448157][T23350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2226.487178][T23350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2226.587485][ T5438] usb 3-1: USB disconnect, device number 109 [ 2226.649474][T23350] team0: Port device team_slave_0 added [ 2226.699971][T23350] team0: Port device team_slave_1 added [ 2226.883335][T23350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2226.883412][T23350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2226.883551][T23350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2226.892582][T23350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2226.892668][T23350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2226.892813][T23350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2227.325793][T23350] hsr_slave_0: entered promiscuous mode [ 2227.390514][T23350] hsr_slave_1: entered promiscuous mode [ 2227.416444][T23350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2227.416536][T23350] Cannot create hsr debugfs directory [ 2227.581520][T23296] Bluetooth: hci5: command tx timeout [ 2228.253449][T23414] loop1: detected capacity change from 0 to 1024 [ 2228.299261][T23292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2228.318921][T23414] hfsplus: failed to load root directory [ 2228.421466][T23350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.540673][ T29] audit: type=1326 audit(1724046484.993:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23411 comm="syz.1.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682179e79 code=0x7ffc0000 [ 2228.540903][ T29] audit: type=1326 audit(1724046485.013:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23411 comm="syz.1.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fa682179e79 code=0x7ffc0000 [ 2228.541126][ T29] audit: type=1326 audit(1724046485.013:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23411 comm="syz.1.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682179e79 code=0x7ffc0000 [ 2228.541345][ T29] audit: type=1326 audit(1724046485.033:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23411 comm="syz.1.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682179e79 code=0x7ffc0000 [ 2228.678854][T23350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.835871][T23292] 8021q: adding VLAN 0 to HW filter on device team0 [ 2228.929841][T23421] loop2: detected capacity change from 0 to 64 [ 2228.936133][T23350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.041794][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.042300][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.154309][T23350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.274924][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2229.275449][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2229.661636][T23296] Bluetooth: hci5: command tx timeout [ 2229.910653][T23350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2230.009492][T23350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2230.079019][T23350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2230.423143][T23350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2231.991924][T23447] Invalid architecture in ELF header: 0 [ 2232.104789][T23436] loop2: detected capacity change from 0 to 32768 [ 2232.855715][T23292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2233.004371][T23350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2233.211423][T23350] 8021q: adding VLAN 0 to HW filter on device team0 [ 2233.415261][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.415754][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2233.418768][T23292] veth0_vlan: entered promiscuous mode [ 2233.511784][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.512287][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2233.575564][T23292] veth1_vlan: entered promiscuous mode [ 2234.066963][T23292] veth0_macvtap: entered promiscuous mode [ 2234.152315][T23292] veth1_macvtap: entered promiscuous mode [ 2234.343055][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.343162][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.343231][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.343322][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.343397][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.343497][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.343571][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.343661][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.343734][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.343826][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.343902][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.343992][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.349456][T23292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2234.437460][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.437572][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.437641][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.437730][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.437800][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.437887][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.437956][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.438043][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.438112][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.438199][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.438270][T23292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.438357][T23292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.443836][T23292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2234.548579][T23292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2234.548812][T23292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2234.549027][T23292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2234.549242][T23292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2235.156171][T23472] loop3: detected capacity change from 0 to 512 [ 2235.327084][T23472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2236.137037][ T29] audit: type=1800 audit(1724046492.543:106): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7635" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 2236.593164][T20506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2236.857677][T23474] loop2: detected capacity change from 0 to 32768 [ 2236.863406][T23474] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7636 (23474) [ 2236.957255][T23474] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2236.957516][T23474] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 2236.959730][T23474] BTRFS info (device loop2): using free-space-tree [ 2237.042439][T23350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2237.354514][T23474] BTRFS info (device loop2): checking UUID tree [ 2237.629003][T20473] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2239.533813][T23350] veth0_vlan: entered promiscuous mode [ 2239.704921][T23350] veth1_vlan: entered promiscuous mode [ 2239.824010][T16536] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2240.021079][T16536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.021277][T16536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.021485][T16536] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 2240.021645][T16536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.031218][T16536] usb 2-1: config 0 descriptor?? [ 2240.101057][T23350] veth0_macvtap: entered promiscuous mode [ 2240.128316][T23350] veth1_macvtap: entered promiscuous mode [ 2240.377265][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.377374][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.377444][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.377530][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.377599][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.377684][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.377763][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.377853][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.377924][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.378012][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.378085][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.378175][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.378244][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.378334][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.384507][T23350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2240.496660][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2240.496769][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.496846][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2240.496938][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.497012][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2240.497099][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.497169][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2240.497260][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.497330][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2240.497420][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.497493][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2240.497583][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.497653][T23350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2240.497744][T23350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.503417][T23350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2240.523420][T23529] sctp: failed to load transform for md5: -4 [ 2240.536990][T23535] loop3: detected capacity change from 0 to 256 [ 2240.608096][T16536] wacom 0003:056A:00B0.002B: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 2240.637005][T23350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2240.637244][T23350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2240.637457][T23350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2240.637669][T23350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2240.676036][T16536] wacom 0003:056A:00B0.002B: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 2240.679262][T16536] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.002B/input/input43 [ 2240.926058][T16536] usb 2-1: USB disconnect, device number 115 [ 2241.693054][T14553] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2241.911943][T14553] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2241.912107][T14553] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.912241][T14553] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2241.912401][T14553] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2241.944496][T14553] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2241.944677][T14553] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2241.944814][T14553] usb 4-1: Product: syz [ 2241.944923][T14553] usb 4-1: Manufacturer: syz [ 2241.961705][T14553] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2242.282297][T14553] usb 4-1: USB disconnect, device number 92 [ 2242.695845][T16533] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2242.751739][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.751843][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.890515][T16533] usb 3-1: Using ep0 maxpacket: 16 [ 2242.902513][T16533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.902702][T16533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.902916][T16533] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 2242.903077][T16533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.946678][T16533] usb 3-1: config 0 descriptor?? [ 2242.986226][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.986327][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.547068][T16533] wacom 0003:056A:5000.002C: unknown main item tag 0x0 [ 2243.547271][T16533] wacom 0003:056A:5000.002C: unknown main item tag 0x0 [ 2243.547462][T16533] wacom 0003:056A:5000.002C: unknown main item tag 0x0 [ 2243.547634][T16533] wacom 0003:056A:5000.002C: unknown main item tag 0x0 [ 2243.547811][T16533] wacom 0003:056A:5000.002C: unknown main item tag 0x0 [ 2243.547985][T16533] wacom 0003:056A:5000.002C: unknown main item tag 0x0 [ 2243.590028][T16533] wacom 0003:056A:5000.002C: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.2-1/input0 [ 2243.751171][T16517] usb 3-1: USB disconnect, device number 110 [ 2244.903521][T23581] nbd: must specify at least one socket [ 2246.061938][T23575] loop3: detected capacity change from 0 to 32768 [ 2246.074458][T23575] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7656 (23575) [ 2246.152643][T23575] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 2246.152910][T23575] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 2246.153532][T23575] BTRFS error (device loop3): cannot disable free-space-tree [ 2246.155148][T23575] BTRFS error (device loop3): open_ctree failed [ 2246.649311][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2246.649587][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2247.055525][T23596] loop1: detected capacity change from 0 to 1024 [ 2247.205205][T23596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2247.752278][T17161] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /568/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 2247.755377][T17161] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 2247.784332][T17161] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /568/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 2247.795078][T17161] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 2248.438631][T17161] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /568/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 2248.462116][T17161] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 2248.470487][T17161] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /568/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 2248.484125][T17161] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 2248.493963][T17161] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /568/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 2248.497219][T17161] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 2248.804884][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7672'. [ 2249.396069][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2249.396175][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2249.719292][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2249.719405][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2250.177669][T23620] loop2: detected capacity change from 0 to 4096 [ 2250.221609][T23620] ntfs3: loop2: It is recommened to use chkdsk. [ 2250.235988][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 2250.236249][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 2250.236492][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 2250.236728][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 2250.236969][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 2250.237204][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 2250.237455][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 2250.237694][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 2250.237925][T23620] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 2250.668226][T23633] loop0: detected capacity change from 0 to 512 [ 2250.671062][T23633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2250.774606][T17161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2250.811434][T23633] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.7677: corrupted in-inode xattr: invalid ea_ino [ 2250.873389][T23633] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7677: couldn't read orphan inode 15 (err -117) [ 2250.884622][T23633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2251.072386][ T3616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.296975][ T3616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.473593][T23292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2251.498961][ T3616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.702953][ T3616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.953771][ T3616] batadv0: left allmulticast mode [ 2251.953908][ T3616] batadv0: left promiscuous mode [ 2251.954815][ T3616] bridge0: port 3(batadv0) entered disabled state [ 2251.963366][ T3616] bridge_slave_1: left allmulticast mode [ 2251.963475][ T3616] bridge_slave_1: left promiscuous mode [ 2251.964379][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.984672][ T3616] bridge_slave_0: left allmulticast mode [ 2251.984785][ T3616] bridge_slave_0: left promiscuous mode [ 2251.985643][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 2252.622578][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2252.674225][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2252.681562][ T3616] bond0 (unregistering): Released all slaves [ 2253.967368][ T3616] hsr_slave_0: left promiscuous mode [ 2254.008498][ T3616] hsr_slave_1: left promiscuous mode [ 2254.027054][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2254.027333][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2254.032439][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2254.032619][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2254.051096][T22960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2254.060529][T22960] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2254.069779][T22960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2254.112556][T22960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2254.121428][ T3616] veth1_macvtap: left promiscuous mode [ 2254.121582][ T3616] veth0_macvtap: left promiscuous mode [ 2254.121881][ T3616] veth1_vlan: left promiscuous mode [ 2254.122100][ T3616] veth0_vlan: left promiscuous mode [ 2254.128348][T22960] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2254.130683][T22960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2254.170484][ T5438] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2254.662931][ T5438] usb 3-1: Using ep0 maxpacket: 16 [ 2254.689462][T23659] loop3: detected capacity change from 0 to 512 [ 2254.731623][ T5438] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2254.731804][ T5438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.731949][ T5438] usb 3-1: Product: syz [ 2254.732065][ T5438] usb 3-1: Manufacturer: syz [ 2254.732176][ T5438] usb 3-1: SerialNumber: syz [ 2254.741405][ T5438] usb 3-1: config 0 descriptor?? [ 2254.747805][T23659] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2254.747923][T23659] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2254.756662][ T5438] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 2254.773426][T23659] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 2254.809197][T23659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 2254.809636][T23659] System zones: 0-2, 18-18, 34-34 [ 2254.835903][T23659] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 2254.838267][T23659] EXT4-fs (loop3): 1 truncate cleaned up [ 2254.839970][T23659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2255.188414][ T5438] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 2255.189033][ T5438] visor 3-1:0.0: probe with driver visor failed with error -5 [ 2255.288715][T20506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2255.307532][ T3616] team0 (unregistering): Port device team_slave_1 removed [ 2255.349663][ T3616] team0 (unregistering): Port device team_slave_0 removed [ 2255.451075][T19421] usb 3-1: USB disconnect, device number 111 [ 2255.829164][T23656] lo speed is unknown, defaulting to 1000 [ 2256.381986][T22960] Bluetooth: hci7: command tx timeout [ 2256.475947][ T3616] IPVS: stop unused estimator thread 0... [ 2257.791116][T23656] chnl_net:caif_netlink_parms(): no params data found [ 2258.083437][T23691] loop3: detected capacity change from 0 to 512 [ 2258.099717][T23691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2258.200173][T23691] EXT4-fs (loop3): 1 truncate cleaned up [ 2258.202365][T23691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2258.226755][T23694] CUSE: DEVNAME unspecified [ 2258.450593][T23296] Bluetooth: hci7: command tx timeout [ 2258.531844][T20506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2259.299526][T23656] bridge0: port 1(bridge_slave_0) entered blocking state [ 2259.300027][T23656] bridge0: port 1(bridge_slave_0) entered disabled state [ 2259.301023][T23656] bridge_slave_0: entered allmulticast mode [ 2259.315387][T23656] bridge_slave_0: entered promiscuous mode [ 2259.417315][T23656] bridge0: port 2(bridge_slave_1) entered blocking state [ 2259.417835][T23656] bridge0: port 2(bridge_slave_1) entered disabled state [ 2259.418617][T23656] bridge_slave_1: entered allmulticast mode [ 2259.424067][T23656] bridge_slave_1: entered promiscuous mode [ 2259.644496][T23656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2259.675584][T23656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2259.884742][T23656] team0: Port device team_slave_0 added [ 2259.910816][T23656] team0: Port device team_slave_1 added [ 2260.157310][T23656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2260.157392][T23656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2260.157544][T23656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2260.203570][T23656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2260.203655][T23656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2260.203796][T23656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2260.510769][T23656] hsr_slave_0: entered promiscuous mode [ 2260.549255][T23296] Bluetooth: hci7: command tx timeout [ 2260.549749][T23296] Bluetooth: hci3: Malformed Event: 0x13 [ 2260.572445][T23656] hsr_slave_1: entered promiscuous mode [ 2260.580632][T23656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2260.580717][T23656] Cannot create hsr debugfs directory [ 2261.587687][T23732] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:4096x2160 (0x38414262, 8, 0, 0, 0) [ 2261.889432][T16533] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2261.951644][T23656] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2261.987473][T23656] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2262.022760][T23656] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2262.044406][T23656] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2262.125540][T16533] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 2262.125696][T16533] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 2262.125832][T16533] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.125979][T16533] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2262.126224][T16533] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2262.126390][T16533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.137083][T16533] usb 1-1: config 0 descriptor?? [ 2262.144030][T16533] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2262.195696][T16533] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 2262.255526][T16536] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2262.371571][T19421] usb 1-1: USB disconnect, device number 98 [ 2262.506075][T16536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2262.506549][T16536] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 2262.506724][T16536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.513905][T16536] usb 4-1: config 0 descriptor?? [ 2262.626471][T22960] Bluetooth: hci7: command tx timeout [ 2262.853338][T23656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2262.946623][T23739] overlayfs: missing 'lowerdir' [ 2263.023334][T16536] hid-steam 0003:28DE:1205.002D: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 2263.041371][T23656] 8021q: adding VLAN 0 to HW filter on device team0 [ 2263.090762][T16536] hid-steam 0003:28DE:1205.002D: Steam Controller 'XXXXXXXXXX' connected [ 2263.105263][T16536] input: Steam Deck as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.002D/input/input49 [ 2263.120046][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.120610][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2263.171010][T16536] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.002D/input/input50 [ 2263.203214][T19272] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.203727][T19272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2263.312172][T16536] hid-steam 0003:28DE:1205.002E: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 2263.379666][T16536] usb 4-1: USB disconnect, device number 93 [ 2263.644067][T16536] hid-steam 0003:28DE:1205.002D: Steam Controller 'XXXXXXXXXX' disconnected [ 2265.055700][T23656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2265.467825][T23656] veth0_vlan: entered promiscuous mode [ 2265.530093][T23656] veth1_vlan: entered promiscuous mode [ 2265.799466][T23656] veth0_macvtap: entered promiscuous mode [ 2265.836301][T23656] veth1_macvtap: entered promiscuous mode [ 2265.970620][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.970726][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.970798][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.970886][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.970960][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.971051][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.971134][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.971224][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.971299][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.971389][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.971460][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.971551][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.971624][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.971722][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.977533][T23656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2266.088944][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.089051][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.089127][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.089213][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.089284][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.089373][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.089442][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.089530][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.089600][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.089690][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.089763][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.089854][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.089927][T23656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.090017][T23656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.095654][T23656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2266.144134][T23656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.144371][T23656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.144584][T23656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.144798][T23656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.664278][T23773] loop3: detected capacity change from 0 to 512 [ 2266.693199][T23773] EXT4-fs: Ignoring removed mblk_io_submit option [ 2266.695211][T23773] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2266.723117][T23773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 2266.723670][T23773] System zones: 1-12 [ 2266.752188][T23773] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.7732: corrupted in-inode xattr: e_value size too large [ 2266.753521][T23773] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7732: couldn't read orphan inode 15 (err -117) [ 2266.756294][T23773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2267.132993][T20506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2267.479191][T23784] loop0: detected capacity change from 0 to 256 [ 2267.589649][T23784] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 2268.300680][T19421] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2268.480698][T19421] usb 1-1: Using ep0 maxpacket: 8 [ 2268.498991][T19421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2268.499191][T19421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2268.499342][T19421] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2268.499661][T19421] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 2268.499821][T19421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.513521][T19421] usb 1-1: config 0 descriptor?? [ 2269.025955][T19421] apple 0003:05AC:0274.002F: item fetching failed at offset 6/70 [ 2269.072095][T19421] apple 0003:05AC:0274.002F: parse failed [ 2269.072596][T19421] apple 0003:05AC:0274.002F: probe with driver apple failed with error -22 [ 2269.211767][T23794] loop3: detected capacity change from 0 to 4096 [ 2269.226519][T23794] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 2269.308615][T16518] usb 1-1: USB disconnect, device number 99 [ 2269.392504][T23296] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2269.395278][T23296] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2269.398589][T23296] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2269.421357][T23296] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2269.461230][T23296] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2269.479661][T23794] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 2269.485952][T23296] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2269.654659][T23805] futex_wake_op: syz.4.7741 tries to shift op by 32; fix this program [ 2269.798969][T23802] lo speed is unknown, defaulting to 1000 [ 2270.498524][T23811] loop0: detected capacity change from 0 to 256 [ 2270.512027][T23296] Bluetooth: hci2: failed to read key size for handle 201 [ 2270.512163][T23296] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 2270.657485][T23811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2271.174535][T23819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7745'. [ 2271.294443][T23802] chnl_net:caif_netlink_parms(): no params data found [ 2271.580457][T23296] Bluetooth: hci8: command tx timeout [ 2271.871682][T23827] netlink: 'syz.0.7749': attribute type 1 has an invalid length. [ 2272.581909][T23825] loop3: detected capacity change from 0 to 4096 [ 2272.692290][T23838] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2272.730156][T23802] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.731952][T23802] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.732783][T23802] bridge_slave_0: entered allmulticast mode [ 2272.736010][T23802] bridge_slave_0: entered promiscuous mode [ 2272.762485][T23802] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.763001][T23802] bridge0: port 2(bridge_slave_1) entered disabled state [ 2272.763825][T23802] bridge_slave_1: entered allmulticast mode [ 2272.767302][T23802] bridge_slave_1: entered promiscuous mode [ 2273.021440][T23802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2273.139825][T23802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2273.274084][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.274190][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.457595][T23802] team0: Port device team_slave_0 added [ 2273.469148][T23802] team0: Port device team_slave_1 added [ 2273.663577][T23296] Bluetooth: hci8: command tx timeout [ 2273.764300][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.764410][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.820607][T23802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2273.820690][T23802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2273.820844][T23802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2273.827328][T23802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2273.827411][T23802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2273.827564][T23802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2273.963464][T16533] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2274.013496][T23802] hsr_slave_0: entered promiscuous mode [ 2274.036496][T23802] hsr_slave_1: entered promiscuous mode [ 2274.039876][T23802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2274.039964][T23802] Cannot create hsr debugfs directory [ 2274.146667][T16533] usb 4-1: Using ep0 maxpacket: 8 [ 2274.228394][T16533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2274.228589][T16533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2274.228802][T16533] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 2274.228968][T16533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2274.235535][T16533] usb 4-1: config 0 descriptor?? [ 2274.535984][T23296] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2274.536163][T23296] Bluetooth: hci2: Injecting HCI hardware error event [ 2274.536719][T23296] Bluetooth: hci2: hardware error 0x00 [ 2274.836400][T16533] aquacomputer_d5next 0003:0C70:F014.0030: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 2274.977841][T16533] usb 4-1: USB disconnect, device number 94 [ 2275.036899][T23802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.259960][T23802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.446699][T23802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.536139][T23802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.730956][T22960] Bluetooth: hci8: command tx timeout [ 2275.969758][T23802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2276.081381][T23802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2276.141727][T23802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2276.170761][T23865] loop0: detected capacity change from 0 to 64 [ 2276.231957][T23802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2276.480143][T23869] loop1: detected capacity change from 0 to 1024 [ 2276.579235][T23869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2276.579697][T23869] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2276.623012][T23866] loop3: detected capacity change from 0 to 2048 [ 2276.636169][T23296] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2276.803237][T23866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2277.046597][ T29] audit: type=1800 audit(1724046533.513:107): pid=23869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7762" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2277.053901][T23866] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2277.792879][T23802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2277.848983][T23296] Bluetooth: hci8: command tx timeout [ 2277.891468][T23656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2278.311418][T23874] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 192: padding at end of block bitmap is not set [ 2278.380174][T23802] 8021q: adding VLAN 0 to HW filter on device team0 [ 2279.045199][T20506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2279.160172][T19273] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.160768][T19273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.250029][T19273] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.250669][T19273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.716332][T16536] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2280.930746][T16536] usb 1-1: Using ep0 maxpacket: 16 [ 2280.937565][T16536] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 2280.937722][T16536] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2280.937862][T16536] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2280.937999][T16536] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2280.938146][T16536] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2280.938294][T16536] usb 1-1: config 0 has no interface number 0 [ 2280.938426][T16536] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2280.938608][T16536] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2280.938760][T16536] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2280.938918][T16536] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2280.939103][T16536] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2280.939240][T16536] usb 1-1: config 0 interface 125 has no altsetting 2 [ 2280.963043][T16536] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2280.963224][T16536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.963353][T16536] usb 1-1: Product: syz [ 2280.963447][T16536] usb 1-1: Manufacturer: syz [ 2280.963540][T16536] usb 1-1: SerialNumber: syz [ 2280.993538][T16536] usb 1-1: config 0 descriptor?? [ 2281.025553][T16536] usb 1-1: selecting invalid altsetting 2 [ 2281.580305][ C1] usb 1-1: async_complete: urb error -71 [ 2281.580839][ C1] usb 1-1: async_complete: urb error -71 [ 2281.581343][ C1] usb 1-1: async_complete: urb error -71 [ 2281.610723][T16536] get_1284_register: usb error -71 [ 2281.611175][T16536] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 2281.655647][T16536] usb 1-1: USB disconnect, device number 100 [ 2281.680108][T23802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2282.196060][T23802] veth0_vlan: entered promiscuous mode [ 2282.473246][T23802] veth1_vlan: entered promiscuous mode [ 2282.655411][ T59] bridge_slave_1: left allmulticast mode [ 2282.655525][ T59] bridge_slave_1: left promiscuous mode [ 2282.656424][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.671537][ T59] bridge_slave_0: left allmulticast mode [ 2282.671982][ T59] bridge_slave_0: left promiscuous mode [ 2282.672825][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.340682][T16533] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2283.451710][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2283.493778][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2283.527359][ T59] bond0 (unregistering): Released all slaves [ 2283.610647][T16533] usb 1-1: Using ep0 maxpacket: 32 [ 2283.633377][T16533] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 2283.633531][T16533] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2283.633670][T16533] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2283.633818][T16533] usb 1-1: config 1 has no interface number 0 [ 2283.633953][T16533] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2283.634134][T16533] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2283.634374][T16533] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2283.634537][T16533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.658634][T16533] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 2283.936157][T23802] veth0_macvtap: entered promiscuous mode [ 2284.010822][T23802] veth1_macvtap: entered promiscuous mode [ 2284.287474][T16533] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 2284.288878][ C1] ===================================================== [ 2284.289572][ C1] BUG: KMSAN: uninit-value in line6_midibuf_read+0x76b/0x1050 [ 2284.289715][ C1] line6_midibuf_read+0x76b/0x1050 [ 2284.289848][ C1] line6_data_received+0x503/0xa80 [ 2284.289968][ C1] __usb_hcd_giveback_urb+0x572/0x840 [ 2284.290186][ C1] usb_hcd_giveback_urb+0x157/0x720 [ 2284.290297][ C1] dummy_timer+0xd3f/0x6aa0 [ 2284.290467][ C1] __hrtimer_run_queues+0x564/0xe40 [ 2284.290646][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 2284.290773][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 2284.290946][ C1] sysvec_apic_timer_interrupt+0x40/0x90 [ 2284.291132][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2284.291324][ C1] kmsan_get_shadow_origin_ptr+0x86/0xb0 [ 2284.291465][ C1] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 2284.291597][ C1] queued_spin_lock_slowpath+0x3c/0xa70 [ 2284.291733][ C1] _raw_spin_lock+0x54/0x60 [ 2284.291851][ C1] mac80211_hwsim_tx_frame_no_nl+0xc29/0x2130 [ 2284.291994][ C1] mac80211_hwsim_tx_frame+0x2d8/0x380 [ 2284.292109][ C1] __mac80211_hwsim_beacon_tx+0x540/0x600 [ 2284.292238][ C1] mac80211_hwsim_beacon_tx+0x70e/0xc40 [ 2284.292361][ C1] __iterate_interfaces+0x447/0x690 [ 2284.292557][ C1] ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 2284.292709][ C1] mac80211_hwsim_beacon+0x11c/0x300 [ 2284.292865][ C1] __hrtimer_run_queues+0x564/0xe40 [ 2284.292990][ C1] hrtimer_run_softirq+0x18f/0x750 [ 2284.293116][ C1] handle_softirqs+0x1ce/0x800 [ 2284.293274][ C1] __irq_exit_rcu+0x68/0x120 [ 2284.293393][ C1] irq_exit_rcu+0x12/0x20 [ 2284.293512][ C1] sysvec_apic_timer_interrupt+0x83/0x90 [ 2284.293631][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2284.293772][ C1] vprintk_store+0x12be/0x13f0 [ 2284.293884][ C1] vprintk_emit+0x1e4/0xbc0 [ 2284.293976][ C1] dev_vprintk_emit+0x470/0x580 [ 2284.294112][ C1] dev_printk_emit+0x15d/0x190 [ 2284.294225][ C1] __dev_printk+0x2b2/0x320 [ 2284.294431][ C1] _dev_info+0x18a/0x1a0 [ 2284.294531][ C1] line6_probe+0xfda/0x1120 [ 2284.294637][ C1] pod_probe+0x79/0x90 [ 2284.294761][ C1] usb_probe_interface+0xd6f/0x1350 [ 2284.294933][ C1] really_probe+0x4db/0xd90 [ 2284.295091][ C1] __driver_probe_device+0x2ab/0x5d0 [ 2284.295242][ C1] driver_probe_device+0x72/0x890 [ 2284.295376][ C1] __device_attach_driver+0x568/0x9e0 [ 2284.295506][ C1] bus_for_each_drv+0x403/0x620 [ 2284.295619][ C1] __device_attach+0x3c1/0x650 [ 2284.295752][ C1] device_initial_probe+0x32/0x40 [ 2284.295889][ C1] bus_probe_device+0x3dc/0x5c0 [ 2284.295999][ C1] device_add+0x13aa/0x1ba0 [ 2284.296125][ C1] usb_set_configuration+0x31c9/0x38d0 [ 2284.296239][ C1] usb_generic_driver_probe+0x109/0x2a0 [ 2284.296415][ C1] usb_probe_device+0x3a7/0x690 [ 2284.296520][ C1] really_probe+0x4db/0xd90 [ 2284.296660][ C1] __driver_probe_device+0x2ab/0x5d0 [ 2284.296803][ C1] driver_probe_device+0x72/0x890 [ 2284.296949][ C1] __device_attach_driver+0x568/0x9e0 [ 2284.297099][ C1] bus_for_each_drv+0x403/0x620 [ 2284.297214][ C1] __device_attach+0x3c1/0x650 [ 2284.297349][ C1] device_initial_probe+0x32/0x40 [ 2284.297489][ C1] bus_probe_device+0x3dc/0x5c0 [ 2284.297602][ C1] device_add+0x13aa/0x1ba0 [ 2284.297726][ C1] usb_new_device+0x15f4/0x2470 [ 2284.297861][ C1] hub_event+0x4ffb/0x72d0 [ 2284.297951][ C1] process_scheduled_works+0xae0/0x1c40 [ 2284.298077][ C1] worker_thread+0xea5/0x1520 [ 2284.298220][ C1] kthread+0x3dd/0x540 [ 2284.298350][ C1] [ 2284.298374][ C1] Uninit was created at: [ 2284.298553][ C1] __kmalloc_noprof+0x661/0xf30 [ 2284.298667][ C1] line6_midibuf_init+0x43/0x180 [ 2284.298792][ C1] line6_init_midi+0x3e7/0x670 [ 2284.298909][ C1] line6_init_cap_control+0x54e/0x770 [ 2284.299027][ C1] line6_probe+0xeae/0x1120 [ 2284.299132][ C1] pod_probe+0x79/0x90 [ 2284.299263][ C1] usb_probe_interface+0xd6f/0x1350 [ 2284.299377][ C1] really_probe+0x4db/0xd90 [ 2284.299516][ C1] __driver_probe_device+0x2ab/0x5d0 [ 2284.299659][ C1] driver_probe_device+0x72/0x890 [ 2284.299806][ C1] __device_attach_driver+0x568/0x9e0 [ 2284.299954][ C1] bus_for_each_drv+0x403/0x620 [ 2284.300068][ C1] __device_attach+0x3c1/0x650 [ 2284.300205][ C1] device_initial_probe+0x32/0x40 [ 2284.300330][ C1] bus_probe_device+0x3dc/0x5c0 [ 2284.300437][ C1] device_add+0x13aa/0x1ba0 [ 2284.300553][ C1] usb_set_configuration+0x31c9/0x38d0 [ 2284.300652][ C1] usb_generic_driver_probe+0x109/0x2a0 [ 2284.300797][ C1] usb_probe_device+0x3a7/0x690 [ 2284.300901][ C1] really_probe+0x4db/0xd90 [ 2284.301041][ C1] __driver_probe_device+0x2ab/0x5d0 [ 2284.301185][ C1] driver_probe_device+0x72/0x890 [ 2284.301334][ C1] __device_attach_driver+0x568/0x9e0 [ 2284.301484][ C1] bus_for_each_drv+0x403/0x620 [ 2284.301598][ C1] __device_attach+0x3c1/0x650 [ 2284.301732][ C1] device_initial_probe+0x32/0x40 [ 2284.301870][ C1] bus_probe_device+0x3dc/0x5c0 [ 2284.301982][ C1] device_add+0x13aa/0x1ba0 [ 2284.302108][ C1] usb_new_device+0x15f4/0x2470 [ 2284.302246][ C1] hub_event+0x4ffb/0x72d0 [ 2284.302338][ C1] process_scheduled_works+0xae0/0x1c40 [ 2284.302464][ C1] worker_thread+0xea5/0x1520 [ 2284.302585][ C1] kthread+0x3dd/0x540 [ 2284.302711][ C1] ret_from_fork+0x6d/0x90 [ 2284.302810][ C1] ret_from_fork_asm+0x1a/0x30 [ 2284.302969][ C1] [ 2284.302999][ C1] CPU: 1 UID: 0 PID: 16533 Comm: kworker/1:11 Not tainted 6.11.0-rc4-syzkaller #0 [ 2284.303115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2284.303197][ C1] Workqueue: usb_hub_wq hub_event [ 2284.303290][ C1] ===================================================== [ 2284.303324][ C1] Disabling lock debugging due to kernel taint [ 2284.303364][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 2284.303425][ C1] CPU: 1 UID: 0 PID: 16533 Comm: kworker/1:11 Tainted: G B 6.11.0-rc4-syzkaller #0 [ 2284.303562][ C1] Tainted: [B]=BAD_PAGE [ 2284.303609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2284.303683][ C1] Workqueue: usb_hub_wq hub_event [ 2284.303773][ C1] Call Trace: [ 2284.303813][ C1] [ 2284.303850][ C1] dump_stack_lvl+0x216/0x2d0 [ 2284.303985][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.304141][ C1] dump_stack+0x1e/0x30 [ 2284.304266][ C1] panic+0x4e2/0xcd0 [ 2284.304406][ C1] ? kmsan_get_metadata+0x51/0x1c0 [ 2284.304565][ C1] kmsan_report+0x2c7/0x2d0 [ 2284.304703][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.304860][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.304998][ C1] ? __msan_warning+0x95/0x120 [ 2284.305120][ C1] ? line6_midibuf_read+0x76b/0x1050 [ 2284.305258][ C1] ? line6_data_received+0x503/0xa80 [ 2284.305384][ C1] ? __usb_hcd_giveback_urb+0x572/0x840 [ 2284.305509][ C1] ? usb_hcd_giveback_urb+0x157/0x720 [ 2284.305627][ C1] ? dummy_timer+0xd3f/0x6aa0 [ 2284.305732][ C1] ? __hrtimer_run_queues+0x564/0xe40 [ 2284.305871][ C1] ? hrtimer_interrupt+0x3ab/0x1490 [ 2284.306000][ C1] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 2284.306148][ C1] ? sysvec_apic_timer_interrupt+0x40/0x90 [ 2284.306283][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2284.306435][ C1] ? kmsan_get_shadow_origin_ptr+0x86/0xb0 [ 2284.306582][ C1] ? __msan_metadata_ptr_for_load_4+0x24/0x40 [ 2284.306718][ C1] ? queued_spin_lock_slowpath+0x3c/0xa70 [ 2284.306845][ C1] ? _raw_spin_lock+0x54/0x60 [ 2284.306938][ C1] ? mac80211_hwsim_tx_frame_no_nl+0xc29/0x2130 [ 2284.307059][ C1] ? mac80211_hwsim_tx_frame+0x2d8/0x380 [ 2284.307171][ C1] ? __mac80211_hwsim_beacon_tx+0x540/0x600 [ 2284.307299][ C1] ? mac80211_hwsim_beacon_tx+0x70e/0xc40 [ 2284.307422][ C1] ? __iterate_interfaces+0x447/0x690 [ 2284.307550][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 2284.307707][ C1] ? mac80211_hwsim_beacon+0x11c/0x300 [ 2284.307857][ C1] ? __hrtimer_run_queues+0x564/0xe40 [ 2284.307982][ C1] ? hrtimer_run_softirq+0x18f/0x750 [ 2284.308121][ C1] ? handle_softirqs+0x1ce/0x800 [ 2284.308257][ C1] ? __irq_exit_rcu+0x68/0x120 [ 2284.308384][ C1] ? irq_exit_rcu+0x12/0x20 [ 2284.308509][ C1] ? sysvec_apic_timer_interrupt+0x83/0x90 [ 2284.308637][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2284.308786][ C1] ? vprintk_store+0x12be/0x13f0 [ 2284.308893][ C1] ? vprintk_emit+0x1e4/0xbc0 [ 2284.308992][ C1] ? dev_vprintk_emit+0x470/0x580 [ 2284.309108][ C1] ? dev_printk_emit+0x15d/0x190 [ 2284.309228][ C1] ? __dev_printk+0x2b2/0x320 [ 2284.309377][ C1] ? _dev_info+0x18a/0x1a0 [ 2284.309482][ C1] ? line6_probe+0xfda/0x1120 [ 2284.309594][ C1] ? pod_probe+0x79/0x90 [ 2284.309723][ C1] ? usb_probe_interface+0xd6f/0x1350 [ 2284.309842][ C1] ? really_probe+0x4db/0xd90 [ 2284.309988][ C1] ? __driver_probe_device+0x2ab/0x5d0 [ 2284.310137][ C1] ? driver_probe_device+0x72/0x890 [ 2284.310282][ C1] ? __device_attach_driver+0x568/0x9e0 [ 2284.310431][ C1] ? bus_for_each_drv+0x403/0x620 [ 2284.310547][ C1] ? __device_attach+0x3c1/0x650 [ 2284.310688][ C1] ? device_initial_probe+0x32/0x40 [ 2284.310830][ C1] ? bus_probe_device+0x3dc/0x5c0 [ 2284.310943][ C1] ? device_add+0x13aa/0x1ba0 [ 2284.311072][ C1] ? usb_set_configuration+0x31c9/0x38d0 [ 2284.311182][ C1] ? usb_generic_driver_probe+0x109/0x2a0 [ 2284.311335][ C1] ? usb_probe_device+0x3a7/0x690 [ 2284.311445][ C1] ? really_probe+0x4db/0xd90 [ 2284.311586][ C1] ? __driver_probe_device+0x2ab/0x5d0 [ 2284.311732][ C1] ? driver_probe_device+0x72/0x890 [ 2284.311901][ C1] ? __device_attach_driver+0x568/0x9e0 [ 2284.312056][ C1] ? bus_for_each_drv+0x403/0x620 [ 2284.312174][ C1] ? __device_attach+0x3c1/0x650 [ 2284.312318][ C1] ? device_initial_probe+0x32/0x40 [ 2284.312464][ C1] ? bus_probe_device+0x3dc/0x5c0 [ 2284.312580][ C1] ? device_add+0x13aa/0x1ba0 [ 2284.312709][ C1] ? usb_new_device+0x15f4/0x2470 [ 2284.312851][ C1] ? hub_event+0x4ffb/0x72d0 [ 2284.312947][ C1] ? process_scheduled_works+0xae0/0x1c40 [ 2284.313079][ C1] ? worker_thread+0xea5/0x1520 [ 2284.313220][ C1] ? kthread+0x3dd/0x540 [ 2284.313359][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.313515][ C1] __msan_warning+0x95/0x120 [ 2284.313640][ C1] line6_midibuf_read+0x76b/0x1050 [ 2284.313800][ C1] line6_data_received+0x503/0xa80 [ 2284.313940][ C1] ? __pfx_line6_data_received+0x10/0x10 [ 2284.314071][ C1] __usb_hcd_giveback_urb+0x572/0x840 [ 2284.314207][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.314356][ C1] usb_hcd_giveback_urb+0x157/0x720 [ 2284.314488][ C1] dummy_timer+0xd3f/0x6aa0 [ 2284.314614][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.314757][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.314952][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 2284.315037][ C1] __hrtimer_run_queues+0x564/0xe40 [ 2284.315174][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 2284.315333][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 2284.315469][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 2284.315600][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 2284.315752][ C1] sysvec_apic_timer_interrupt+0x40/0x90 [ 2284.315881][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2284.316028][ C1] RIP: 0010:kmsan_get_shadow_origin_ptr+0x86/0xb0 [ 2284.316188][ C1] Code: 00 83 3d 0c 0d 93 0f 00 75 3d 48 c7 c0 00 00 3b 94 48 c7 c3 00 10 3b 94 45 84 f6 48 0f 45 d8 48 89 da 48 89 d8 5b 41 5e 41 5f <5d> c3 cc cc cc cc 90 0f 0b 90 c6 05 d6 0c 93 0f 00 83 3d d2 0c 93 [ 2284.316303][ C1] RSP: 0018:ffff88813fd05858 EFLAGS: 00000282 [ 2284.316391][ C1] RAX: ffff888237a74770 RBX: 0000000000000282 RCX: 000000022446d770 [ 2284.316467][ C1] RDX: ffff88822446d770 RSI: ffff88813fff9020 RDI: ffffffff9447b770 [ 2284.316553][ C1] RBP: ffff88813fd05858 R08: ffffea000000000f R09: 0000000000000000 [ 2284.316631][ C1] R10: ffff888237a74770 R11: ffffffff814620d0 R12: ffffffff9447b770 [ 2284.316718][ C1] R13: ffff88813fda1b40 R14: 0000000000000001 R15: 0000000000000001 [ 2284.316796][ C1] ? __pfx_read_tsc+0x10/0x10 [ 2284.316959][ C1] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 2284.317097][ C1] queued_spin_lock_slowpath+0x3c/0xa70 [ 2284.317237][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2284.317374][ C1] _raw_spin_lock+0x54/0x60 [ 2284.317472][ C1] mac80211_hwsim_tx_frame_no_nl+0xc29/0x2130 [ 2284.317626][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.317769][ C1] mac80211_hwsim_tx_frame+0x2d8/0x380 [ 2284.317899][ C1] __mac80211_hwsim_beacon_tx+0x540/0x600 [ 2284.318040][ C1] mac80211_hwsim_beacon_tx+0x70e/0xc40 [ 2284.318187][ C1] __iterate_interfaces+0x447/0x690 [ 2284.318331][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2284.318473][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2284.318603][ C1] ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 2284.318767][ C1] mac80211_hwsim_beacon+0x11c/0x300 [ 2284.318934][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2284.319089][ C1] __hrtimer_run_queues+0x564/0xe40 [ 2284.319260][ C1] hrtimer_run_softirq+0x18f/0x750 [ 2284.319415][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.319566][ C1] ? __pfx_hrtimer_run_softirq+0x10/0x10 [ 2284.319715][ C1] handle_softirqs+0x1ce/0x800 [ 2284.319875][ C1] __irq_exit_rcu+0x68/0x120 [ 2284.320013][ C1] irq_exit_rcu+0x12/0x20 [ 2284.320142][ C1] sysvec_apic_timer_interrupt+0x83/0x90 [ 2284.320269][ C1] [ 2284.320302][ C1] [ 2284.320339][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2284.320485][ C1] RIP: 0010:vprintk_store+0x12be/0x13f0 [ 2284.320602][ C1] Code: 48 25 00 02 00 00 74 09 f7 d3 44 89 f8 21 d8 74 3f 4d 85 ff 8b 1c 24 75 07 e8 3e 3c 31 00 eb 06 e8 37 3c 31 00 fb 8b 4c 24 10 <48> 8b 44 24 08 41 89 9d 20 03 00 00 41 89 8d a8 0f 00 00 48 8d 65 [ 2284.320711][ C1] RSP: 0018:ffff888036c06680 EFLAGS: 00000283 [ 2284.320795][ C1] RAX: ffffffff818265f9 RBX: 0000000000000000 RCX: 0000000000000000 [ 2284.320869][ C1] RDX: ffffc90006a3d000 RSI: 000000000001bd5d RDI: 000000000001bd5e [ 2284.320947][ C1] RBP: ffff888036c067c0 R08: ffffffff818265d1 R09: 0000000000000000 [ 2284.321028][ C1] R10: ffff88823f1ba218 R11: 0000000000000004 R12: 0000000000000000 [ 2284.321101][ C1] R13: ffff888086644cc0 R14: 0000000000000000 R15: 0000000000000200 [ 2284.321183][ C1] ? vprintk_store+0x1291/0x13f0 [ 2284.321291][ C1] ? vprintk_store+0x12b9/0x13f0 [ 2284.321445][ C1] vprintk_emit+0x1e4/0xbc0 [ 2284.321547][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.321698][ C1] dev_vprintk_emit+0x470/0x580 [ 2284.321840][ C1] dev_printk_emit+0x15d/0x190 [ 2284.321976][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.322129][ C1] __dev_printk+0x2b2/0x320 [ 2284.322297][ C1] _dev_info+0x18a/0x1a0 [ 2284.322423][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.322572][ C1] line6_probe+0xfda/0x1120 [ 2284.322674][ C1] ? __pfx_pod_init+0x10/0x10 [ 2284.322832][ C1] pod_probe+0x79/0x90 [ 2284.322959][ C1] ? __pfx_pod_probe+0x10/0x10 [ 2284.323095][ C1] usb_probe_interface+0xd6f/0x1350 [ 2284.323254][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 2284.323376][ C1] really_probe+0x4db/0xd90 [ 2284.323530][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.323684][ C1] __driver_probe_device+0x2ab/0x5d0 [ 2284.323835][ C1] driver_probe_device+0x72/0x890 [ 2284.323988][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.324130][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.324292][ C1] __device_attach_driver+0x568/0x9e0 [ 2284.324462][ C1] bus_for_each_drv+0x403/0x620 [ 2284.324575][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 2284.324744][ C1] __device_attach+0x3c1/0x650 [ 2284.324898][ C1] device_initial_probe+0x32/0x40 [ 2284.325043][ C1] bus_probe_device+0x3dc/0x5c0 [ 2284.325170][ C1] device_add+0x13aa/0x1ba0 [ 2284.325327][ C1] usb_set_configuration+0x31c9/0x38d0 [ 2284.325449][ C1] ? usb_set_configuration+0x8b1/0x38d0 [ 2284.325600][ C1] usb_generic_driver_probe+0x109/0x2a0 [ 2284.325752][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.325904][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 2284.326062][ C1] usb_probe_device+0x3a7/0x690 [ 2284.326182][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 2284.326291][ C1] really_probe+0x4db/0xd90 [ 2284.326415][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.326545][ C1] __driver_probe_device+0x2ab/0x5d0 [ 2284.326707][ C1] driver_probe_device+0x72/0x890 [ 2284.326858][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2284.326994][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2284.327147][ C1] __device_attach_driver+0x568/0x9e0 [ 2284.327324][ C1] bus_for_each_drv+0x403/0x620 [ 2284.327441][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 2284.327607][ C1] __device_attach+0x3c1/0x650 [ 2284.327743][ C1] device_initial_probe+0x32/0x40 [ 2284.327872][ C1] bus_probe_device+0x3dc/0x5c0 [ 2284.327993][ C1] device_add+0x13aa/0x1ba0 [ 2284.328130][ C1] usb_new_device+0x15f4/0x2470 [ 2284.328288][ C1] hub_event+0x4ffb/0x72d0 [ 2284.328459][ C1] ? __pfx_hub_event+0x10/0x10 [ 2284.328556][ C1] process_scheduled_works+0xae0/0x1c40 [ 2284.328724][ C1] worker_thread+0xea5/0x1520 [ 2284.328872][ C1] kthread+0x3dd/0x540 [ 2284.329013][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2284.329151][ C1] ? __pfx_kthread+0x10/0x10 [ 2284.329301][ C1] ret_from_fork+0x6d/0x90 [ 2284.329402][ C1] ? __pfx_kthread+0x10/0x10 [ 2284.329540][ C1] ret_from_fork_asm+0x1a/0x30 [ 2284.329696][ C1] [ 2284.330045][ C1] Kernel Offset: disabled