last executing test programs: 6.825635469s ago: executing program 0 (id=1454): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b00)="1667dbca63e151d2a411020949b4d03863a664469252181d", 0x18}], 0x1}}], 0x1, 0x0) 5.616977423s ago: executing program 0 (id=1460): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x55}, 0x9c) 4.997895476s ago: executing program 3 (id=1464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300), &(0x7f00000003c0)=0x4) 4.640936558s ago: executing program 4 (id=1466): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0xb, 0x0, &(0x7f0000003140)) 4.63695802s ago: executing program 1 (id=1475): socket$unix(0x1, 0x2, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 4.320104765s ago: executing program 1 (id=1467): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x924, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040000) 4.27188741s ago: executing program 0 (id=1468): r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.191490269s ago: executing program 4 (id=1469): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x10) futex_waitv(&(0x7f0000000e00)=[{0x0, &(0x7f0000000c80)=0x7}], 0x1, 0x0, &(0x7f0000000ec0), 0xe489c0339f88a157) 3.924233041s ago: executing program 3 (id=1471): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x210008, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRES16, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303000003030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca711c31732d000000000000000000", @ANYRES32, @ANYBLOB="0265e4b63566648baa83ca01b927365a9ee1b6caf4acc11f6c33e95e1fd84b6f85503408bd89e455ed30b8abdeb1aac1cc1ee3cf0ecf14f88a2f50e088947e482c253e752b391c03f8ae61ff9606450ace5636d5444e3f27b4bfb7bf62e468d247268383b2b904c40c421f7c191f8736c828d89e7cde45ddc8f6c1fdd0452be67f6d47ef4214b358a9f9a4b9b09d86b60a10c57ac30cc84f04230e0d32842562ed4f2525"], 0xff, 0xc3c, &(0x7f0000001100)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 3.603170658s ago: executing program 1 (id=1472): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f000000d000/0x2000)=nil, &(0x7f000009c000/0x1000)=nil], &(0x7f0000000180), &(0x7f0000000380), 0x0) 3.550477901s ago: executing program 4 (id=1473): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.900295231s ago: executing program 3 (id=1474): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f00000002c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.895564997s ago: executing program 2 (id=1485): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160ae3650ab68675f80000000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48a80700000000000051", 0x47}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000407"], 0xd) 2.698984839s ago: executing program 2 (id=1476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x401, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 2.687667679s ago: executing program 4 (id=1477): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='.\x02\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', r0, &(0x7f0000000180)='.\x02\x00') unlink(&(0x7f00000006c0)='.\x02\x00') 2.430712472s ago: executing program 1 (id=1478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="df", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r1}, 0x0, 0x0, 0x0) 2.297164425s ago: executing program 3 (id=1479): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x2, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) 2.128312873s ago: executing program 2 (id=1480): setreuid(0xee01, 0x0) r0 = getuid() setreuid(0x0, r0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffb) 1.819552821s ago: executing program 3 (id=1481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x40}}, 0x0) 1.717273109s ago: executing program 1 (id=1482): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}}, 0x0) 1.518494315s ago: executing program 2 (id=1483): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800001dd8cf87b955c6b6679b78d4e7f6e1ff00000000656200186000"/41, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x20002, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.390925175s ago: executing program 0 (id=1484): r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 1.270132377s ago: executing program 4 (id=1486): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 923.640754ms ago: executing program 4 (id=1487): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0xfeb2736ab7a0e0fb, 0x35, 0xa8, 0x2a, 0x20, 0x19d2, 0x113, 0x7c57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0x87, 0x90}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x49, &(0x7f0000000a40)=ANY=[@ANYBLOB="050f"], 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0xc5, &(0x7f0000000500)=ANY=[@ANYBLOB="c50308baceff344fc9717ae9d6aed4a8b691b12bdfc6d2e5f82cd6d712afcc53d76286ba0063cb4ed009d654756082fadd8581e455adf7388198e3ab1387e3737f7a937bc6274fe817c4ec5bf88e53e5664c67756585ca8f6e0c1b78a49af1b1dfd40dbd0ceda0e0c1038d727d534cd53ce7c67ceea3e713aab8b3b63ce12a48c845951a422b69763b7e494eaf4fd06d706b2cabc05641c7800e35040041537b30d8f15051f8dc2e2c5aec1c68fed03462cabdf77f02a70161eff726b5db0ae362e83f92f1"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x63, &(0x7f0000000040)=@string={0x63, 0x3, "71f01f0cd196a5bf8f876c0b5740162ccede5ad8acc0f389591c977885c522d3d093a806031e8643642e3a7a3b0ffccd61f203afa1a73203c752c69474bb0f8c0f0a04ca0c6a4a9491853c5ea932aed21c66123dad2eb9ad8cca00000000000080"}}, {0x5, &(0x7f00000008c0)=@string={0x5, 0x3, "1a8120"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x50, &(0x7f0000000700)=@string={0x50, 0x3, "623cc7480ad51818224ec2cac6f0f6e3555732dd585fa1b4eadbf92e653e07586dd8715adb5544d1a87108b1d154f84d13785d852f242a10f23a8016d76ab410fb478ec943be9fe1931b62105b1b"}}, {0x34, &(0x7f0000000780)=@string={0x34, 0x3, "bd2335311ce48f22e67db97745148ed52bb90eae058aa76515a02f4689c1e0d69e2bede7f14003c9ea7adacfa25d5529a0cb"}}]}) 901.448169ms ago: executing program 2 (id=1488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000020000a00000000000000040004000800010001"], 0x24}}, 0x0) 892.434837ms ago: executing program 3 (id=1489): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) 799.331959ms ago: executing program 0 (id=1490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200000c0000000000feff00760000000f00000045000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, 0x0, 0x20) 758.692157ms ago: executing program 1 (id=1491): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) 129.23191ms ago: executing program 2 (id=1492): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 0s ago: executing program 0 (id=1493): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x108) ftruncate(r0, 0x2007ffb) kernel console output (not intermixed with test programs): 338.662954][ T6040] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 339.428814][ T6057] syz.2.287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 340.064310][ T6040] syz.1.280 (6040) used greatest stack depth: 4936 bytes left [ 340.315703][ T6066] overlayfs: failed to resolve './file0': -2 [ 340.887444][ T5236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 341.228828][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 341.289250][ T5236] usb 4-1: Using ep0 maxpacket: 8 [ 341.298488][ T5944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.334117][ T5236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.344829][ T5236] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 341.345523][ T5944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.359566][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.454112][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 341.505682][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.516385][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 341.526754][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.537026][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 341.567998][ T5236] usb 4-1: config 0 descriptor?? [ 341.572387][ T5944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.587248][ T6076] netlink: 56 bytes leftover after parsing attributes in process `syz.2.294'. [ 341.613189][ T5236] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 341.670039][ T5944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 341.729530][ T6076] netlink: 56 bytes leftover after parsing attributes in process `syz.2.294'. [ 341.757180][ T44] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 341.770263][ T44] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 341.779880][ T44] usb 2-1: Product: syz [ 341.784336][ T44] usb 2-1: Manufacturer: syz [ 341.789473][ T44] usb 2-1: SerialNumber: syz [ 341.921637][ T44] usb 2-1: config 0 descriptor?? [ 341.941860][ T44] usb 2-1: NFC: intf ffff888121c6fc00 id ffffffff91b29bd0 [ 342.059011][ T44] nfcmrvl 2-1:0.0: NFC: registered with nci successfully [ 342.327277][ T44] usb 2-1: USB disconnect, device number 4 [ 342.336089][ T44] usb 2-1: NFC: intf ffff888121c6fc00 [ 342.606902][ T5236] gspca_vc032x: reg_w err -71 [ 342.612316][ T5236] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 342.684035][ T5236] usb 4-1: USB disconnect, device number 5 [ 343.220865][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.308583][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 343.452211][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.544329][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.555912][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.566326][ T25] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 343.575927][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.595052][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.602901][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.628092][ T25] usb 1-1: config 0 descriptor?? [ 343.689590][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.697383][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.551305][ T25] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 344.922025][ T25] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 345.172909][ T6108] netlink: 'syz.2.302': attribute type 18 has an invalid length. [ 345.188782][ T25] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 345.208535][ T25] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 345.231763][ T25] usb 1-1: USB disconnect, device number 4 [ 345.626609][ T6113] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 346.186114][ T6120] loop2: detected capacity change from 0 to 256 [ 346.316882][ T6120] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 346.731269][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.867546][ T6130] loop3: detected capacity change from 0 to 4096 [ 349.182874][ T6130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.790636][ T6154] netlink: 64 bytes leftover after parsing attributes in process `syz.1.317'. [ 350.665490][ T5944] veth0_vlan: entered promiscuous mode [ 350.712173][ T5944] veth1_vlan: entered promiscuous mode [ 350.947753][ T5944] veth0_macvtap: entered promiscuous mode [ 350.975947][ T5944] veth1_macvtap: entered promiscuous mode [ 351.120505][ T5192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.144630][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.155480][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.165895][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.176680][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.192718][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.206264][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.216559][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.227464][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.243365][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.374893][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.386028][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.403007][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.414888][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.425118][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.436591][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.446899][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.457792][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.474234][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.774225][ T5944] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.783942][ T5944] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.793256][ T5944] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.808714][ T5944] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.172117][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.179248][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.602571][ T6188] capability: warning: `syz.0.326' uses deprecated v2 capabilities in a way that may be insecure [ 352.746079][ T6188] program syz.0.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.023367][ T6191] loop3: detected capacity change from 0 to 1024 [ 353.300069][ T6196] loop0: detected capacity change from 0 to 164 [ 353.411070][ T6191] hfsplus: extend alloc file! (8192,65536,366) [ 354.295043][ T6207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.331'. [ 354.860213][ T6216] loop2: detected capacity change from 0 to 128 [ 355.215172][ T6216] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.336237][ T6216] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.600780][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 355.608643][ T6227] loop3: detected capacity change from 0 to 64 [ 355.787370][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 355.824920][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.835322][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 355.844889][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.996208][ T25] usb 2-1: config 0 descriptor?? [ 356.109628][ T5179] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.484620][ T25] logitech 0003:046D:C295.0006: item fetching failed at offset 0/3 [ 356.573637][ T25] logitech 0003:046D:C295.0006: parse failed [ 356.580607][ T25] logitech 0003:046D:C295.0006: probe with driver logitech failed with error -22 [ 356.746631][ T25] usb 2-1: USB disconnect, device number 5 [ 358.020970][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 358.206742][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 358.237158][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.249173][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.265866][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.276261][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.290005][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.299517][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.655733][ T8] usb 1-1: GET_CAPABILITIES returned 64 [ 358.668744][ T8] usbtmc 1-1:16.0: can't read capabilities [ 358.933723][ T5236] usb 1-1: USB disconnect, device number 5 [ 359.724244][ T6270] loop3: detected capacity change from 0 to 512 [ 359.859645][ T6270] EXT4-fs: Ignoring removed nobh option [ 360.086692][ T6270] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 360.151811][ T6270] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 360.181494][ T6270] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #13: comm syz.3.347: casefold flag without casefold feature [ 360.255128][ T6270] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.347: couldn't read orphan inode 13 (err -117) [ 360.325891][ T6270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.440732][ T6274] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 360.450833][ T6274] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 360.460320][ T6274] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 360.469699][ T6274] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 360.487948][ T6274] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 360.828485][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.836601][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.133850][ T5192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.320969][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.332890][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.605874][ T6291] loop2: detected capacity change from 0 to 512 [ 361.680759][ T6291] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 361.689295][ T6291] UDF-fs: Scanning with blocksize 512 failed [ 361.759696][ T6291] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 361.767388][ T6291] UDF-fs: Scanning with blocksize 1024 failed [ 362.178661][ T6291] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 362.186478][ T6291] UDF-fs: Scanning with blocksize 2048 failed [ 362.399361][ T6291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 362.639665][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'. [ 363.407306][ T6291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.240123][ T6325] IPv6: Can't replace route, no match found [ 365.814145][ T5238] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 366.091956][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.103458][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.104715][ T6345] loop1: detected capacity change from 0 to 8 [ 366.114231][ T5238] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 366.114414][ T5238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.252676][ T5238] usb 1-1: config 0 descriptor?? [ 366.626950][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 366.658308][ C1] hrtimer: interrupt took 175338 ns [ 367.007464][ T5238] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 367.014969][ T5238] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 367.022702][ T5238] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 367.030547][ T5238] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 367.037657][ T5238] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0 [ 367.119316][ T5238] lua 0003:1E7D:2C2E.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 367.138642][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 367.326360][ T5236] usb 1-1: USB disconnect, device number 6 [ 367.602494][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.098813][ T6359] loop3: detected capacity change from 0 to 256 [ 368.107819][ T25] usb 5-1: config 11 has an invalid interface number: 181 but max is 1 [ 368.116556][ T25] usb 5-1: config 11 has an invalid interface number: 2 but max is 1 [ 368.125500][ T25] usb 5-1: config 11 has no interface number 0 [ 368.132049][ T25] usb 5-1: config 11 has no interface number 1 [ 368.138687][ T25] usb 5-1: config 11 interface 181 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 368.151064][ T25] usb 5-1: config 11 interface 181 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 368.842730][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 369.293264][ T25] usb 5-1: string descriptor 0 read error: -71 [ 369.300556][ T25] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=da.27 [ 369.314454][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.453655][ T25] usb 5-1: can't set config #11, error -71 [ 369.466504][ T25] usb 5-1: USB disconnect, device number 3 [ 369.584567][ T5178] Bluetooth: hci4: command 0x0405 tx timeout [ 369.631350][ T6378] loop4: detected capacity change from 0 to 128 [ 369.635208][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 369.644577][ T5182] Bluetooth: hci0: command 0x0406 tx timeout [ 369.982403][ T6380] sctp: [Deprecated]: syz.2.385 (pid 6380) Use of int in maxseg socket option. [ 369.982403][ T6380] Use struct sctp_assoc_value instead [ 371.908003][ T6404] program syz.0.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.242301][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 372.711450][ T6412] loop4: detected capacity change from 0 to 1024 [ 373.341930][ T29] audit: type=1800 audit(1727252276.894:2): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.399" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 373.927237][ T2978] hfsplus: b-tree write err: -5, ino 4 [ 374.260179][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 374.678631][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 375.176971][ T8] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 375.188021][ T8] usb 2-1: config 0 has no interface number 0 [ 375.195498][ T8] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.210324][ T8] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 375.222563][ T8] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 375.234524][ T8] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 375.248383][ T8] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 375.263360][ T8] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.360866][ T8] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 375.373507][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.382155][ T8] usb 2-1: Product: syz [ 375.386629][ T8] usb 2-1: Manufacturer: syz [ 375.391806][ T8] usb 2-1: SerialNumber: syz [ 375.421181][ T8] usb 2-1: config 0 descriptor?? [ 375.429925][ T6425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.489226][ T6425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.943050][ T8] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 376.182803][ T8] etas_es58x 2-1:0.219: could not parse product info: '놹' [ 376.425483][ T44] usb 2-1: USB disconnect, device number 6 [ 376.433945][ T44] etas_es58x 2-1:0.219: Disconnecting syz syz [ 377.326965][ T6450] loop4: detected capacity change from 0 to 256 [ 377.948919][ T29] audit: type=1326 audit(1727252281.624:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 377.971339][ T29] audit: type=1326 audit(1727252281.624:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 378.469887][ T6465] loop3: detected capacity change from 0 to 1024 [ 378.624184][ T29] audit: type=1326 audit(1727252281.814:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 378.651237][ T29] audit: type=1326 audit(1727252281.814:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 378.675246][ T29] audit: type=1326 audit(1727252281.814:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 379.508412][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 379.512292][ T2978] hfsplus: b-tree write err: -5, ino 4 [ 379.743191][ T6481] netlink: 'syz.4.431': attribute type 3 has an invalid length. [ 379.979079][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 380.033721][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.045243][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.057086][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.076378][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.088655][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.314745][ T44] usb 2-1: config 0 descriptor?? [ 380.844080][ T44] microsoft 0003:045E:07DA.0008: report is too long [ 380.851383][ T44] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 380.916505][ T44] microsoft 0003:045E:07DA.0008: parse failed [ 380.923772][ T44] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 381.110334][ T44] usb 2-1: USB disconnect, device number 7 [ 381.313517][ T6487] loop3: detected capacity change from 0 to 2048 [ 381.569650][ T6494] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.160383][ T6498] capability: warning: `syz.4.437' uses 32-bit capabilities (legacy support in use) [ 382.268577][ T5236] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 383.070604][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.082427][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.095990][ T5236] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 383.107346][ T5236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.160453][ T5236] usb 1-1: config 0 descriptor?? [ 383.672372][ T5236] holtek 0003:1241:5015.0009: collection stack underflow [ 383.680029][ T5236] holtek 0003:1241:5015.0009: item 0 4 0 12 parsing failed [ 383.695835][ T5236] holtek 0003:1241:5015.0009: parse failed [ 383.705379][ T5236] holtek 0003:1241:5015.0009: probe with driver holtek failed with error -22 [ 383.924609][ T44] usb 1-1: USB disconnect, device number 7 [ 385.678956][ T5236] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 385.717023][ T6515] loop0: detected capacity change from 0 to 512 [ 386.150609][ T5236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.165154][ T5236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.175450][ T5236] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 386.185144][ T5236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.254715][ T5236] usb 5-1: config 0 descriptor?? [ 386.838739][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.857390][ T6515] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.087663][ T5236] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 387.095524][ T5236] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 387.103261][ T5236] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x7 [ 387.114164][ T5236] mcp2221 0003:04D8:00DD.000A: item fetching failed at offset 4/5 [ 387.228055][ T6514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.363876][ T5236] mcp2221 0003:04D8:00DD.000A: can't parse reports [ 387.374690][ T5236] mcp2221 0003:04D8:00DD.000A: probe with driver mcp2221 failed with error -22 [ 387.516077][ T5236] usb 5-1: USB disconnect, device number 4 [ 388.137897][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.748872][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 388.942202][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 388.985220][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 388.994570][ T25] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 389.005198][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.066070][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.080798][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.090774][ T25] usb 5-1: Product: syz [ 389.095410][ T25] usb 5-1: Manufacturer: syz [ 389.100506][ T25] usb 5-1: SerialNumber: syz [ 389.134165][ T6505] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 389.186562][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.196859][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.228074][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.236234][ T6505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.245360][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.253409][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.294103][ T6505] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 389.844923][ T25] usb 5-1: 0:2 : does not exist [ 390.291974][ T25] usb 5-1: USB disconnect, device number 5 [ 390.494610][ T5339] udevd[5339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.985565][ T5236] kernel write not supported for file /cpu/0/msr (pid: 5236 comm: kworker/0:5) [ 394.329046][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 394.636312][ T8] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 394.645809][ T8] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 394.658744][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 394.668289][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.748410][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 395.309604][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 395.355613][ T8] gspca_sn9c2028: read1 error -32 [ 395.392567][ T8] gspca_sn9c2028: read1 error -32 [ 395.650270][ T8] usb 5-1: USB disconnect, device number 6 [ 395.961519][ T6599] netlink: 'syz.1.481': attribute type 6 has an invalid length. [ 396.715064][ T6602] netlink: 136 bytes leftover after parsing attributes in process `syz.3.483'. [ 396.717223][ T6603] loop1: detected capacity change from 0 to 128 [ 396.728017][ T6602] netlink: 89 bytes leftover after parsing attributes in process `syz.3.483'. [ 396.978520][ T6606] loop3: detected capacity change from 0 to 256 [ 399.052404][ T29] audit: type=1326 audit(1727252302.784:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.4.490" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0 [ 399.137690][ T29] audit: type=1326 audit(1727252302.854:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.4.490" exe="/root/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf7f31579 code=0x0 [ 399.350294][ T2978] tipc: Subscription rejected, illegal request [ 399.776376][ T6628] loop2: detected capacity change from 0 to 512 [ 400.034173][ T6628] EXT4-fs (loop2): 1 orphan inode deleted [ 400.041916][ T6628] EXT4-fs (loop2): 1 truncate cleaned up [ 400.049840][ T6628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.221285][ T6632] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 400.473822][ T6632] EXT4-fs (loop2): Remounting filesystem read-only [ 400.613851][ T6636] loop0: detected capacity change from 0 to 128 [ 401.521713][ T6641] loop0: detected capacity change from 0 to 256 [ 401.894241][ T6617] coredump: 72(syz.4.490): interrupted: fatal signal pending [ 401.902349][ T6617] coredump: 72(syz.4.490): Error writing out the process memory [ 401.910904][ T6617] coredump: 72(syz.4.490): written to core: VMAs: 29, size 99389440; core: 18419326 bytes, pos 18804736 [ 402.297662][ T29] audit: type=1800 audit(1727252306.014:10): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=1048614 res=0 errno=0 [ 402.352710][ T5179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.664978][ T6652] loop4: detected capacity change from 0 to 16 [ 402.932337][ T6652] erofs: (device loop4): mounted with root inode @ nid 36. [ 403.538507][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 403.724744][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 403.772008][ T8] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 403.783790][ T8] usb 2-1: config 0 has no interface number 0 [ 403.790374][ T8] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 403.801181][ T8] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 403.814715][ T8] usb 2-1: config 0 interface 126 has no altsetting 0 [ 404.086308][ T8] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 404.099466][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.107813][ T8] usb 2-1: Product: syz [ 404.112574][ T8] usb 2-1: Manufacturer: syz [ 404.117489][ T8] usb 2-1: SerialNumber: syz [ 404.190798][ T8] usb 2-1: config 0 descriptor?? [ 404.204405][ T6656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.278854][ T6656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.311971][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 404.603325][ T6666] syz.0.509 (6666) used greatest stack depth: 4456 bytes left [ 404.754703][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 404.867311][ T25] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 404.877005][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.885863][ T25] usb 5-1: Product: syz [ 404.890619][ T25] usb 5-1: Manufacturer: syz [ 404.895506][ T25] usb 5-1: SerialNumber: syz [ 405.402787][ T8] ir_usb 2-1:0.126: IR Dongle converter detected [ 405.738747][ T8] usb 2-1: IRDA class descriptor not found, device not bound [ 405.954550][ T25] usb 5-1: config 0 descriptor?? [ 406.010552][ T44] usb 2-1: USB disconnect, device number 8 [ 406.323812][ T6680] mmap: syz.2.517 (6680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 406.631104][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 406.640262][ T25] gspca_vc032x: reg_r err -71 [ 406.645211][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.651057][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.656592][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.664621][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.672162][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.677683][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.685199][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.699421][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.704974][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.714504][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.721811][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.727324][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.733404][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.739110][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.744624][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.750408][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.755937][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.761627][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.767134][ T25] gspca_vc032x: Unknown sensor... [ 406.772802][ T25] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 407.181700][ T25] usb 5-1: USB disconnect, device number 7 [ 409.936472][ T6724] loop2: detected capacity change from 0 to 256 [ 410.799984][ T6730] netlink: 5 bytes leftover after parsing attributes in process `syz.4.536'. [ 411.819462][ T6739] bond0: option min_links: invalid value (18446744073709551615) [ 411.827584][ T6739] bond0: option min_links: allowed values 0 - 2147483647 [ 412.715109][ T6749] loop4: detected capacity change from 0 to 256 [ 412.791099][ T6749] exfat: Deprecated parameter 'utf8' [ 412.796982][ T6749] exfat: Deprecated parameter 'namecase' [ 412.806325][ T6749] exfat: Deprecated parameter 'utf8' [ 413.126530][ T6749] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 413.399198][ T6749] syz.4.547: attempt to access beyond end of device [ 413.399198][ T6749] loop4: rw=524288, sector=34359738488, nr_sectors = 1 limit=256 [ 413.414539][ T6749] syz.4.547: attempt to access beyond end of device [ 413.414539][ T6749] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 413.459141][ T29] audit: type=1800 audit(1727252317.164:11): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.547" name="file1" dev="loop4" ino=1048615 res=0 errno=0 [ 413.574634][ T6749] syz.4.547: attempt to access beyond end of device [ 413.574634][ T6749] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 413.619395][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.626268][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.774230][ T6785] loop2: detected capacity change from 0 to 512 [ 415.818950][ T6785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 415.893337][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.563'. [ 415.992925][ T6785] EXT4-fs (loop2): 1 truncate cleaned up [ 416.637057][ T6796] loop3: detected capacity change from 0 to 512 [ 416.639481][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.678494][ T6796] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 416.679196][ T6785] fscrypt (loop2, inode 18): Unsupported encryption flags (0x08) [ 416.779707][ T6792] loop4: detected capacity change from 0 to 1024 [ 416.895959][ T5179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.919631][ T6796] EXT4-fs (loop3): 1 truncate cleaned up [ 416.933297][ T6796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.262451][ T6792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.580615][ T6814] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 417.652059][ T6810] loop2: detected capacity change from 0 to 4096 [ 417.876511][ T5192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.262842][ T5944] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 418.321167][ T5944] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 418.995244][ T5944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.998604][ T3983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.294464][ T3983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.346226][ T6820] loop3: detected capacity change from 0 to 256 [ 419.355088][ T6812] loop1: detected capacity change from 0 to 4096 [ 419.437256][ T6812] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 419.500164][ T3983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.728494][ T3983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.421056][ T3983] bridge_slave_1: left allmulticast mode [ 420.427107][ T3983] bridge_slave_1: left promiscuous mode [ 420.437198][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.545039][ T3983] bridge_slave_0: left allmulticast mode [ 420.554258][ T3983] bridge_slave_0: left promiscuous mode [ 420.561257][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.322407][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.385531][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.422841][ T3983] bond0 (unregistering): Released all slaves [ 422.460678][ T3983] hsr_slave_0: left promiscuous mode [ 422.474625][ T3983] hsr_slave_1: left promiscuous mode [ 422.575036][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.582977][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.638248][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.646113][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.859656][ T3983] veth1_macvtap: left promiscuous mode [ 422.869419][ T3983] veth0_macvtap: left promiscuous mode [ 422.875392][ T3983] veth1_vlan: left promiscuous mode [ 422.881160][ T3983] veth0_vlan: left promiscuous mode [ 423.192188][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.202302][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.215106][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.288537][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 423.412370][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.548541][ T5185] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 423.561415][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.495954][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.510248][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.521573][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.00 [ 424.531115][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.544993][ T25] usb 2-1: config 0 descriptor?? [ 424.727361][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 424.801230][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 425.185007][ T25] wacom 0003:056A:0097.000B: unknown main item tag 0x0 [ 425.273618][ T25] wacom 0003:056A:0097.000B: hidraw0: USB HID v0.00 Device [HID 056a:0097] on usb-dummy_hcd.1-1/input0 [ 425.350186][ T25] usb 2-1: USB disconnect, device number 9 [ 425.770544][ T4554] Bluetooth: hci2: command tx timeout [ 425.993009][ T6865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.594'. [ 427.580920][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 427.871600][ T5185] Bluetooth: hci2: command tx timeout [ 427.919503][ T6886] loop0: detected capacity change from 0 to 512 [ 427.931248][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 428.018872][ T6886] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 428.243782][ T6886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 428.287796][ T6886] System zones: 1-12 [ 428.403501][ T6886] EXT4-fs (loop0): 1 truncate cleaned up [ 428.412182][ T6886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.881049][ T29] audit: type=1800 audit(1727252332.524:12): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.599" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 428.929392][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 429.958476][ T5185] Bluetooth: hci2: command tx timeout [ 429.986064][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.994183][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.002352][ T6845] bridge_slave_0: entered allmulticast mode [ 430.012230][ T6845] bridge_slave_0: entered promiscuous mode [ 430.235313][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.248819][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.256670][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.267955][ T6845] bridge_slave_1: entered allmulticast mode [ 430.277621][ T6845] bridge_slave_1: entered promiscuous mode [ 430.642312][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.022988][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.285854][ T6928] overlayfs: workdir and upperdir must be separate subtrees [ 431.632546][ T6935] loop1: detected capacity change from 0 to 128 [ 431.935313][ T6935] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.964178][ T6845] team0: Port device team_slave_0 added [ 431.985101][ T5185] Bluetooth: hci2: command tx timeout [ 432.024959][ T6935] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 432.057248][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.107203][ T6845] team0: Port device team_slave_1 added [ 432.600915][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.611867][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.641631][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.729534][ T5187] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.830502][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.837740][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.864017][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.874189][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.961109][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 433.594749][ T6845] hsr_slave_0: entered promiscuous mode [ 433.708723][ T6845] hsr_slave_1: entered promiscuous mode [ 434.103278][ T6941] loop0: detected capacity change from 0 to 4096 [ 434.305516][ T6941] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 434.957086][ T6960] netlink: 164 bytes leftover after parsing attributes in process `syz.1.624'. [ 435.953971][ T6970] loop0: detected capacity change from 0 to 256 [ 436.313232][ T6970] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 437.146069][ T6845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.446420][ T6988] loop0: detected capacity change from 0 to 8 [ 437.459401][ T6845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.520071][ T6845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.558705][ T6988] SQUASHFS error: Failed to read block 0x63a: -5 [ 437.565414][ T6988] SQUASHFS error: Unable to read metadata cache entry [638] [ 437.576249][ T6988] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 437.774048][ T6845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.585144][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.859242][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.910386][ T7013] loop0: detected capacity change from 0 to 1024 [ 440.026009][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.034077][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.135289][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.143212][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.765768][ T4084] hfsplus: b-tree write err: -5, ino 4 [ 441.519862][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 442.130301][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.666301][ T7034] loop2: detected capacity change from 0 to 1024 [ 443.405926][ T7034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.672200][ T7034] overlay: Unknown parameter ' [ 443.672200][ T7034] time [ 443.672200][ T7034] string [ 443.672200][ T7034] statistic [ 443.672200][ T7034] state [ 443.672200][ T7034] realm [ 443.672200][ T7034] rateest [ 443.672200][ T7034] quota [ 443.672200][ T7034] pkttype [ 443.672200][ T7034] physdev [ 443.672200][ T7034] cgroup [ 443.672200][ T7034] cgroup [ 443.672200][ T7034] cgroup [ 443.672200][ T7034] owner [ 443.672200][ T7034] nfacct [ 443.672200][ T7034] nfacct [ 443.672200][ T7034] mac [ 443.672200][ T7034] limit [ 443.672200][ T7034] ipvs [ 443.672200][ T7034] helper [ 443.672200][ T7034] devgroup [ 443.672200][ T7034] cpu [ 443.672200][ T7034] conntrack [ 443.672200][ T7034] conntrack [ 443.672200][ T7034] conntrack [ 443.672200][ T7034] connlimit [ 443.672200][ T7034] connlabel [ 443.672200][ T7034] connbytes [ 443.672200][ T7034] comment [ 443.672200][ T7034] cluster [ 443.672200][ T7034] bpf [ 443.672200][ T7034] bpf [ 443.672200][ T7034] addrtype [ 443.672200][ T7034] connmark [ 443.672200][ T7034] mark [ 443.672200][ T7034] rpfilter [ 443.672200][ T7034] ah [ 443.672200][ T7034] tcpmss [ 443.672200][ T7034] socket [ 443.672200][ T7034] socket [ 443.672200][ T7034] socket [ 443.672200][ T7034] socket [ 443.672200][ T7034] sctp [ 443.672200][ T7034] recent [ 443.672200][ T7034] recent [ 443.672200][ T7034] policy [ 443.672200][ T7034] osf [ 443.672200][ T7034] multiport [ 443.672200][ T7034] length [ 443.672200][ T7034] l2tp [ 443.672200][ T7034] iprange [ 443.672200][ T7034] ipcomp [ 443.672200][ T7034] ttl [ 443.672200][ T7034] hashlimit [ 443.672200][ T7034] hashlimit [ 443.672200][ T7034] hashlimit [ 443.672200][ T7034] esp [ 443.672200][ T7034] ecn [ 443.672200][ T7034] tos [ 443.672200][ T7034] dscp [ 443.672200][ T7034] dccp [ 443.672200][ T7034] addrtype [ 443.672200][ T7034] set [ 443.672200][ T7034] set [ 443.672200][ T7034] set [ 443.672200][ T7034] set [ 443.672200][ T7034] set [ 443.672200][ T7034] icmp [ 444.293605][ T6845] veth0_vlan: entered promiscuous mode [ 444.477475][ T6845] veth1_vlan: entered promiscuous mode [ 444.725685][ T5179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.967329][ T6845] veth0_macvtap: entered promiscuous mode [ 445.091652][ T6845] veth1_macvtap: entered promiscuous mode [ 445.373464][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.384551][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.398431][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.410245][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.422123][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.436063][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.446304][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.457342][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.473536][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.851609][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.862704][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.877404][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.888451][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.901646][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.919905][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.933762][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.947810][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.966704][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.391672][ T6845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.401461][ T6845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.410815][ T6845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.423688][ T6845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.893346][ T7077] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 446.900225][ T7077] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 446.908601][ T7077] vhci_hcd vhci_hcd.0: Device attached [ 446.980570][ T7078] vhci_hcd: connection closed [ 446.996077][ T7088] loop2: detected capacity change from 0 to 128 [ 447.040438][ T4294] vhci_hcd: stop threads [ 447.044950][ T4294] vhci_hcd: release socket [ 447.049842][ T4294] vhci_hcd: disconnect device [ 447.899364][ T7100] loop3: detected capacity change from 0 to 256 [ 448.424161][ T7100] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xb0200e68, utbl_chksum : 0xe619d30d) [ 448.506749][ T7100] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00) [ 448.518328][ T7100] exFAT-fs (loop3): failed to initialize root inode [ 448.540766][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 451.836196][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 452.110469][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 452.120360][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.211478][ T8] usb 2-1: config 0 descriptor?? [ 452.736876][ T7156] loop0: detected capacity change from 0 to 16 [ 452.777841][ T8] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 452.800733][ T7156] erofs: (device loop0): mounted with root inode @ nid 36. [ 452.989774][ T8] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 453.049857][ T8] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 453.271304][ T1776] usb 2-1: USB disconnect, device number 10 [ 453.352570][ T5236] IPVS: starting estimator thread 0... [ 453.458659][ T7161] IPVS: using max 192 ests per chain, 9600 per kthread [ 454.460295][ T3983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.468555][ T3983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.581150][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.589597][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.617500][ T7183] rtc_cmos 00:00: Alarms can be up to one day in the future [ 456.310108][ T1776] rtc_cmos 00:00: Alarms can be up to one day in the future [ 456.317993][ T1776] rtc_cmos 00:00: Alarms can be up to one day in the future [ 456.326103][ T1776] rtc_cmos 00:00: Alarms can be up to one day in the future [ 456.335370][ T1776] rtc_cmos 00:00: Alarms can be up to one day in the future [ 456.343434][ T1776] rtc rtc0: __rtc_set_alarm: err=-22 [ 458.236054][ T7215] vivid-000: disconnect [ 458.289690][ T7214] vivid-000: reconnect [ 459.779428][ T7234] netlink: 48 bytes leftover after parsing attributes in process `syz.4.715'. [ 459.789096][ T7234] veth0_to_bond: entered allmulticast mode [ 461.409056][ T7256] pimreg: entered allmulticast mode [ 461.492341][ T7259] loop3: detected capacity change from 0 to 128 [ 461.533462][ T7242] loop2: detected capacity change from 0 to 4096 [ 461.569490][ T7242] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 461.627822][ T7242] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 461.755386][ T7262] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.361197][ T7265] overlay: Unknown parameter 'fsuuid' [ 463.692680][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 465.841917][ T7288] loop2: detected capacity change from 0 to 4096 [ 465.959283][ T1776] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 466.406045][ T1776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 4 [ 466.417729][ T1776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25944, setting to 1023 [ 466.429818][ T1776] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 466.439506][ T1776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.594260][ T1776] usb 4-1: config 0 descriptor?? [ 466.843559][ T1776] ath6kl: Failed to submit usb control message: -71 [ 466.850778][ T1776] ath6kl: unable to send the bmi data to the device: -71 [ 466.859186][ T1776] ath6kl: Unable to send get target info: -71 [ 466.939674][ T1776] ath6kl: Failed to init ath6kl core: -71 [ 466.952410][ T1776] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 467.058676][ T1776] usb 4-1: USB disconnect, device number 6 [ 469.179326][ T7351] netlink: 14 bytes leftover after parsing attributes in process `syz.4.750'. [ 469.535540][ T7353] loop4: detected capacity change from 0 to 8 [ 469.650074][ T7353] cramfs: Error -5 while decompressing! [ 469.659105][ T7353] cramfs: ffffffff9465f2b2(26)->ffff888128982000(4096) [ 469.672658][ T7353] cramfs: Error -3 while decompressing! [ 469.680302][ T7353] cramfs: ffffffff9465f2cc(16)->ffff88811ec85000(4096) [ 469.749822][ T7353] cramfs: Error -5 while decompressing! [ 469.755752][ T7353] cramfs: ffffffff9465f2b2(26)->ffff888128982000(4096) [ 469.772874][ T29] audit: type=1800 audit(1727252373.504:13): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.751" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 469.859173][ T5236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 470.025109][ T7360] loop3: detected capacity change from 0 to 1024 [ 470.064089][ T5236] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 470.155490][ T5236] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.166217][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.180738][ T5236] usb 2-1: SerialNumber: syz [ 470.565094][ T3983] hfsplus: b-tree write err: -5, ino 4 [ 470.675909][ T7362] netlink: 'syz.2.755': attribute type 5 has an invalid length. [ 471.021197][ T7365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.757'. [ 471.137184][ T7367] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 471.214716][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 471.363096][ T5236] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 471.748595][ T5236] usb 2-1: USB disconnect, device number 11 [ 472.084652][ T29] audit: type=1326 audit(1727252375.684:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 472.107676][ T29] audit: type=1326 audit(1727252375.694:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 472.134312][ T29] audit: type=1326 audit(1727252375.694:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 472.158424][ T29] audit: type=1326 audit(1727252375.694:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 472.180968][ T29] audit: type=1326 audit(1727252375.694:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 472.204054][ T29] audit: type=1326 audit(1727252375.704:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 472.375325][ T29] audit: type=1326 audit(1727252376.104:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 472.401521][ T29] audit: type=1326 audit(1727252376.104:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 473.125460][ T7388] loop0: detected capacity change from 0 to 512 [ 473.176545][ T7391] netlink: 148 bytes leftover after parsing attributes in process `syz.2.766'. [ 473.371437][ T7394] hsr0: entered promiscuous mode [ 473.388593][ T7388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.402140][ T7388] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.540419][ T7398] netlink: 'syz.4.770': attribute type 9 has an invalid length. [ 474.506354][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.039233][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.046085][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.239594][ T7419] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 475.254288][ T7419] overlayfs: workdir and upperdir must be separate subtrees [ 476.390943][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 476.853565][ T7424] loop2: detected capacity change from 0 to 2048 [ 476.899503][ T7424] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 477.976434][ T7455] loop0: detected capacity change from 0 to 64 [ 478.729330][ T7463] loop4: detected capacity change from 0 to 256 [ 478.758007][ T7459] loop2: detected capacity change from 0 to 1024 [ 479.155309][ T7462] loop1: detected capacity change from 0 to 2048 [ 479.487905][ T7462] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 479.510536][ T2978] hfsplus: b-tree write err: -5, ino 4 [ 479.631364][ T7462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.788515][ T7483] loop0: detected capacity change from 0 to 512 [ 480.811371][ T7483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 480.920938][ T7483] EXT4-fs (loop0): 1 orphan inode deleted [ 480.932459][ T7483] EXT4-fs (loop0): 1 truncate cleaned up [ 480.942081][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.986755][ T7483] EXT4-fs error (device loop0): empty_inline_dir:1850: inode #12: block 7: comm syz.0.807: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 481.009531][ T7483] EXT4-fs (loop0): Remounting filesystem read-only [ 481.011255][ T29] audit: type=1326 audit(1727252384.744:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.016324][ T7483] EXT4-fs warning (device loop0): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 481.043277][ T29] audit: type=1326 audit(1727252384.744:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.160846][ T29] audit: type=1326 audit(1727252384.854:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.308394][ T29] audit: type=1326 audit(1727252384.934:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.330909][ T29] audit: type=1326 audit(1727252384.934:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.359625][ T29] audit: type=1326 audit(1727252384.944:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.382257][ T29] audit: type=1326 audit(1727252384.944:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.404626][ T29] audit: type=1326 audit(1727252384.954:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.428552][ T29] audit: type=1326 audit(1727252384.974:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.451678][ T29] audit: type=1326 audit(1727252384.974:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 481.574897][ T7484] loop1: detected capacity change from 0 to 2048 [ 481.716254][ T7492] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.769560][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.126335][ T7509] loop0: detected capacity change from 0 to 2048 [ 483.355278][ T7509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.368576][ T7509] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.633690][ T7520] loop4: detected capacity change from 0 to 512 [ 483.878766][ T7520] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 483.886987][ T7520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 483.949364][ T7520] EXT4-fs (loop4): orphan cleanup on readonly fs [ 483.980481][ T7520] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 483.993396][ T7520] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 484.084305][ T7520] EXT4-fs (loop4): 1 truncate cleaned up [ 484.092517][ T7520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 484.259245][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.856513][ T7528] tap0: tun_chr_ioctl cmd 1074812118 [ 485.256312][ T7520] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 485.711067][ T6845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.445444][ T7547] loop3: detected capacity change from 0 to 1024 [ 486.525955][ T7547] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 486.537755][ T7547] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 486.548235][ T7547] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 486.563948][ T7547] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 486.574566][ T7547] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 486.983118][ T7551] bridge0: port 3(vlan2) entered blocking state [ 486.990385][ T7551] bridge0: port 3(vlan2) entered disabled state [ 486.997613][ T7551] vlan2: entered allmulticast mode [ 487.079828][ T7551] vlan2: left allmulticast mode [ 487.617993][ T7557] block nbd3: shutting down sockets [ 488.351284][ T7566] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 488.366181][ T7566] overlayfs: workdir and upperdir must be separate subtrees [ 488.736709][ T7572] loop2: detected capacity change from 0 to 64 [ 490.931455][ T7599] cgroup: fork rejected by pids controller in /syz3 [ 491.702600][ T7608] loop1: detected capacity change from 0 to 1024 [ 492.083309][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 492.083395][ T29] audit: type=1326 audit(1727252395.784:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7611 comm="syz.2.863" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x0 [ 492.325681][ T4084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.519984][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 492.590429][ T4084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.840983][ T4084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.989548][ T4084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.377439][ T4084] bridge_slave_1: left allmulticast mode [ 493.383571][ T4084] bridge_slave_1: left promiscuous mode [ 493.390709][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.492670][ T4084] bridge_slave_0: left allmulticast mode [ 493.499212][ T4084] bridge_slave_0: left promiscuous mode [ 493.505996][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.225083][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.261055][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.280119][ T4084] bond0 (unregistering): Released all slaves [ 495.178840][ T4084] hsr_slave_0: left promiscuous mode [ 495.219153][ T4084] hsr_slave_1: left promiscuous mode [ 495.287079][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.295180][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.357716][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.371453][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.505842][ T4084] veth1_macvtap: left promiscuous mode [ 495.511813][ T4084] veth0_macvtap: left promiscuous mode [ 495.517826][ T4084] veth1_vlan: left promiscuous mode [ 495.523748][ T4084] veth0_vlan: left promiscuous mode [ 495.603502][ T7633] loop1: detected capacity change from 0 to 64 [ 496.017606][ T4554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 496.040228][ T4554] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 496.067816][ T4554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 496.115371][ T4554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 496.133017][ T4554] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 496.176561][ T4554] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.242272][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 497.276216][ T4084] team0 (unregistering): Port device team_slave_0 removed [ 498.198672][ T4084] IPVS: stop unused estimator thread 0... [ 498.541828][ T5185] Bluetooth: hci4: command tx timeout [ 498.837146][ T7635] chnl_net:caif_netlink_parms(): no params data found [ 499.495615][ T7676] loop1: detected capacity change from 0 to 1024 [ 499.872001][ T7676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.890073][ T7676] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.350906][ T5187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.635163][ T5185] Bluetooth: hci4: command tx timeout [ 501.327309][ T7693] macvlan2: entered promiscuous mode [ 501.334515][ T7693] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 501.351192][ T7693] team0: Port device macvlan2 added [ 501.363874][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.372648][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.380905][ T7635] bridge_slave_0: entered allmulticast mode [ 501.390672][ T7635] bridge_slave_0: entered promiscuous mode [ 501.431449][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.439677][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.447655][ T7635] bridge_slave_1: entered allmulticast mode [ 501.457770][ T7635] bridge_slave_1: entered promiscuous mode [ 501.763634][ T7700] loop0: detected capacity change from 0 to 1024 [ 502.001994][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 502.082620][ T7704] loop2: detected capacity change from 0 to 128 [ 502.165089][ T7635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.187148][ T7700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.200433][ T7700] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.349074][ T7704] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 502.374576][ T7635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.427508][ T7704] sysv_free_block: trying to free block not in datazone [ 502.463460][ T7704] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 502.698673][ T5185] Bluetooth: hci4: command tx timeout [ 502.723931][ T7635] team0: Port device team_slave_0 added [ 502.769651][ T7635] team0: Port device team_slave_1 added [ 502.875123][ T7713] loop1: detected capacity change from 0 to 1024 [ 503.049194][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.183516][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.190843][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.217493][ T7635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.256160][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.263564][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.290960][ T7635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.614155][ T3983] hfsplus: b-tree write err: -5, ino 4 [ 504.204942][ T7730] loop1: detected capacity change from 0 to 256 [ 504.279964][ T7730] exfat: Deprecated parameter 'utf8' [ 504.285742][ T7730] exfat: Deprecated parameter 'utf8' [ 504.291748][ T7730] exfat: Deprecated parameter 'utf8' [ 504.788524][ T5185] Bluetooth: hci4: command tx timeout [ 504.851487][ T7635] hsr_slave_0: entered promiscuous mode [ 504.894187][ T7635] hsr_slave_1: entered promiscuous mode [ 504.959284][ T7635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.967264][ T7635] Cannot create hsr debugfs directory [ 504.975645][ T7730] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 506.616124][ T5236] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 506.898951][ T5236] usb 2-1: Using ep0 maxpacket: 16 [ 506.951099][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.962612][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.972976][ T5236] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 506.982452][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.076967][ T5236] usb 2-1: config 0 descriptor?? [ 507.783820][ T5236] razer 0003:1532:011B.000C: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 508.029182][ T25] usb 2-1: USB disconnect, device number 12 [ 508.237741][ T7635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.364410][ T7635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.500264][ T7635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.560077][ T7635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.748788][ T5274] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 508.799025][ T1776] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 508.946099][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 508.989160][ T1776] usb 3-1: Using ep0 maxpacket: 16 [ 509.028415][ T5274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.029443][ T1776] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 509.038858][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.049428][ T1776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.060531][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 509.070974][ T1776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 101, changing to 10 [ 509.080239][ T5274] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 509.096126][ T1776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24675, setting to 1024 [ 509.105454][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.131221][ T1776] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.400875][ T5274] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 509.410483][ T5274] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 509.419894][ T5274] usb 5-1: Manufacturer: syz [ 509.433219][ T1776] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 509.443266][ T1776] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 509.451830][ T1776] usb 3-1: Manufacturer: syz [ 509.511269][ T5274] usb 5-1: config 0 descriptor?? [ 509.560534][ T1776] usb 3-1: config 0 descriptor?? [ 509.590907][ T1776] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 509.605620][ T1776] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 509.619484][ T1776] usbhid 3-1:0.0: can't add hid device: -22 [ 509.626205][ T1776] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 509.795953][ T7783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.915'. [ 509.958066][ T1776] usb 3-1: USB disconnect, device number 3 [ 510.075652][ T7635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.252437][ T7635] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.379298][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.387165][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.404544][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.412387][ T3983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.461652][ T5274] rc_core: IR keymap rc-hauppauge not found [ 510.467915][ T5274] Registered IR keymap rc-empty [ 510.473789][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.575191][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.634525][ T7635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.646249][ T7635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.648496][ T5274] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 510.672005][ T5274] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 510.992985][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.129680][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.168718][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 511.251745][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.332232][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.425881][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.479240][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.509783][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.535230][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.570061][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.599995][ T5274] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.666549][ T5274] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 511.675375][ T5274] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 511.781931][ T5274] usb 5-1: USB disconnect, device number 8 [ 512.811434][ T7816] netlink: 'syz.2.925': attribute type 16 has an invalid length. [ 512.819838][ T7816] netlink: 'syz.2.925': attribute type 3 has an invalid length. [ 512.827950][ T7816] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 512.836476][ T7816] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 512.844564][ T7816] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 512.852667][ T7816] netlink: 64006 bytes leftover after parsing attributes in process `syz.2.925'. [ 512.861523][ T7635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.249276][ T7635] veth0_vlan: entered promiscuous mode [ 513.295506][ T7635] veth1_vlan: entered promiscuous mode [ 513.441092][ T7635] veth0_macvtap: entered promiscuous mode [ 513.467459][ T7635] veth1_macvtap: entered promiscuous mode [ 513.657735][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.668747][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.679010][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.689839][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.705871][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.718416][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.728714][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.741212][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.757463][ T7635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.916287][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.927420][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.938982][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.950079][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.960366][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.971278][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.981558][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.992425][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.013135][ T7635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.094281][ T7827] netlink: 72 bytes leftover after parsing attributes in process `syz.0.929'. [ 514.109907][ T7827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.929'. [ 514.120997][ T7827] netem: change failed [ 514.233659][ T7635] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.243091][ T7635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.252389][ T7635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.261640][ T7635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.022018][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 515.251861][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.932'. [ 515.545614][ T7851] loop4: detected capacity change from 0 to 256 [ 516.024774][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.034191][ T7851] FAT-fs (loop4): Filesystem has been set read-only [ 516.041573][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.057465][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.073400][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.086867][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.096180][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.106082][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.115486][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.124698][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.134064][ T7851] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 516.241075][ T7851] syz.4.934 (7851) used greatest stack depth: 3960 bytes left [ 516.248284][ T29] audit: type=1800 audit(1727252419.974:35): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.934" name="file1" dev="loop4" ino=1048628 res=0 errno=0 [ 516.261771][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.330856][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.426378][ T1776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.499080][ T1776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.603898][ T1776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.650213][ T1776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.070185][ T7867] loop0: detected capacity change from 0 to 1024 [ 517.309492][ T1776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.835649][ T7902] loop1: detected capacity change from 0 to 4096 [ 521.629833][ T4084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.637959][ T4084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.934676][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.943109][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.282284][ T7947] loop4: detected capacity change from 0 to 8 [ 522.308808][ T5274] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 522.356638][ T7947] Filesystem uses "unknown" compression. This is not supported [ 522.408613][ T5185] Bluetooth: hci2: Malformed Event: 0x2f [ 522.529529][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 522.552930][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.564562][ T5274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.578455][ T5274] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 522.587827][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.693543][ T5274] usb 1-1: config 0 descriptor?? [ 523.060171][ T7956] loop4: detected capacity change from 0 to 256 [ 523.223456][ T5274] microsoft 0003:045E:07DA.000D: unknown main item tag 0x4 [ 523.281828][ T5274] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input14 [ 523.460165][ T5274] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 523.748553][ T7956] FAT-fs (loop4): Directory bread(block 64) failed [ 523.755667][ T7956] FAT-fs (loop4): Directory bread(block 65) failed [ 523.762865][ T7956] FAT-fs (loop4): Directory bread(block 66) failed [ 523.770061][ T7956] FAT-fs (loop4): Directory bread(block 67) failed [ 523.777024][ T7956] FAT-fs (loop4): Directory bread(block 68) failed [ 523.784089][ T7956] FAT-fs (loop4): Directory bread(block 69) failed [ 523.791338][ T7956] FAT-fs (loop4): Directory bread(block 70) failed [ 523.798541][ T7956] FAT-fs (loop4): Directory bread(block 71) failed [ 523.805592][ T7956] FAT-fs (loop4): Directory bread(block 72) failed [ 523.813305][ T7956] FAT-fs (loop4): Directory bread(block 73) failed [ 523.912088][ T1776] usb 1-1: USB disconnect, device number 8 [ 525.280859][ T7977] loop0: detected capacity change from 0 to 1024 [ 525.588977][ T7977] hfsplus: bad catalog entry type [ 525.710559][ T7983] loop2: detected capacity change from 0 to 64 [ 525.824666][ T29] audit: type=1804 audit(1727252429.554:36): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.973" name="/newroot/211/file0/file1" dev="loop2" ino=5 res=1 errno=0 [ 526.060053][ T4084] hfsplus: b-tree write err: -5, ino 4 [ 526.810958][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 530.227076][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'. [ 530.658866][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 530.670389][ T8063] syz.2.1009 uses obsolete (PF_INET,SOCK_PACKET) [ 530.837641][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 530.837840][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.895613][ T25] usb 5-1: config 0 descriptor?? [ 530.941681][ T25] cp210x 5-1:0.0: cp210x converter detected [ 531.118643][ T8065] loop1: detected capacity change from 0 to 512 [ 531.184463][ T8065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.369057][ T25] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 531.370617][ T25] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 531.370914][ T25] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 531.375644][ T25] usb 5-1: cp210x converter now attached to ttyUSB0 [ 531.390257][ T25] usb 5-1: USB disconnect, device number 9 [ 531.398377][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 531.399549][ T25] cp210x 5-1:0.0: device disconnected [ 531.751282][ T5187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.156419][ T5236] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 532.274154][ T8075] loop1: detected capacity change from 0 to 256 [ 532.285029][ T8075] vfat: Unknown parameter 'shortnnonumtail' [ 532.316986][ T8075] loop1: detected capacity change from 0 to 256 [ 532.325731][ T8075] exfat: Deprecated parameter 'utf8' [ 532.336839][ T8075] exfat: Unexpected value for 'utf8' [ 532.458660][ T5236] usb 4-1: Using ep0 maxpacket: 16 [ 532.473115][ T5236] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 532.481945][ T5236] usb 4-1: config 0 has no interface number 0 [ 532.488454][ T5236] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 532.499238][ T5236] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 532.626246][ T5236] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 532.636035][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.648912][ T5236] usb 4-1: Product: syz [ 532.653373][ T5236] usb 4-1: Manufacturer: syz [ 532.660199][ T5236] usb 4-1: SerialNumber: syz [ 532.780064][ T5236] usb 4-1: config 0 descriptor?? [ 532.788566][ T8071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.805315][ T8071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.105930][ T8071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.116115][ T8071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.918841][ T5236] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 533.930226][ T5236] asix 4-1:0.251: probe with driver asix failed with error -524 [ 534.161712][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1026'. [ 534.171374][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1026'. [ 534.203224][ T25] usb 4-1: USB disconnect, device number 7 [ 534.382828][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 534.770097][ T29] audit: type=1326 audit(1727252438.494:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.4.1032" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 534.814681][ T8112] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 535.463892][ T8117] can: request_module (can-proto-0) failed. [ 535.587734][ T8124] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 535.596266][ T8124] team0: Device ipvlan2 failed to register rx_handler [ 535.662173][ T8126] loop3: detected capacity change from 0 to 256 [ 535.749061][ T1776] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 535.873930][ T8126] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 535.923261][ T1776] usb 1-1: Using ep0 maxpacket: 32 [ 535.950112][ T1776] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.962375][ T1776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 535.974505][ T1776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.986408][ T1776] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 535.995947][ T1776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.054624][ T8126] exFAT-fs (loop3): abnormal access to deleted source dentry [ 536.160800][ T1776] usb 1-1: config 0 descriptor?? [ 536.170845][ T8116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 536.191452][ T1776] hub 1-1:0.0: USB hub found [ 536.499742][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.506884][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.600375][ T1776] hub 1-1:0.0: 1 port detected [ 536.648586][ T8135] program syz.3.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.823434][ T8140] loop2: detected capacity change from 0 to 128 [ 536.857796][ T8137] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 536.881556][ T1776] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 536.890058][ T1776] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 536.904011][ C1] sd 0:0:1:0: [sda] tag#6232 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 536.915291][ C1] sd 0:0:1:0: [sda] tag#6232 CDB: Read(6) 08 00 00 00 00 00 [ 536.944718][ T8140] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 537.006751][ T1776] usbhid 1-1:0.0: can't add hid device: -71 [ 537.016422][ T1776] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 537.086187][ T8140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.109096][ T1776] usb 1-1: USB disconnect, device number 9 [ 538.147260][ T8157] ax25_connect(): syz.0.1050 uses autobind, please contact jreuter@yaina.de [ 538.195721][ T8159] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1054'. [ 538.662274][ T8167] netlink: 'syz.2.1057': attribute type 64 has an invalid length. [ 539.989137][ T8188] netlink: 'syz.0.1067': attribute type 2 has an invalid length. [ 541.358037][ T8201] loop4: detected capacity change from 0 to 2048 [ 541.458924][ T8211] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 542.113009][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 542.129626][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 542.155307][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'. [ 542.296290][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.309832][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.320761][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 542.330319][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.430659][ T25] usb 1-1: config 0 descriptor?? [ 542.527104][ T8223] loop1: detected capacity change from 0 to 512 [ 542.763845][ T8223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.967507][ T25] wacom 0003:056A:0315.000E: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 543.079047][ T25] wacom 0003:056A:0315.000E: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.0-1/input0 [ 543.107450][ T25] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0315.000E/input/input15 [ 543.284615][ T25] usb 1-1: USB disconnect, device number 10 [ 543.566880][ T5187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.110714][ T5274] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 544.485800][ T5274] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.495514][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.550245][ T5274] usb 5-1: config 0 descriptor?? [ 544.587579][ T5274] cp210x 5-1:0.0: cp210x converter detected [ 544.672745][ T8253] loop1: detected capacity change from 0 to 2048 [ 544.949928][ T8253] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 545.074464][ T8253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.089177][ T8262] loop3: detected capacity change from 0 to 256 [ 545.196907][ T5274] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 545.354471][ T5274] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 545.396173][ T5274] usb 5-1: cp210x converter now attached to ttyUSB0 [ 545.568433][ T25] usb 5-1: USB disconnect, device number 10 [ 545.627238][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 545.640061][ T25] cp210x 5-1:0.0: device disconnected [ 546.217465][ T8274] ALSA: mixer_oss: invalid OSS volume '}8z00000' [ 546.489809][ T8280] loop0: detected capacity change from 0 to 256 [ 546.534996][ T8282] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1108'. [ 547.146281][ T8280] FAT-fs (loop0): Directory bread(block 64) failed [ 547.153849][ T8280] FAT-fs (loop0): Directory bread(block 65) failed [ 547.161258][ T8280] FAT-fs (loop0): Directory bread(block 66) failed [ 547.168266][ T8280] FAT-fs (loop0): Directory bread(block 67) failed [ 547.175290][ T8280] FAT-fs (loop0): Directory bread(block 68) failed [ 547.189858][ T8280] FAT-fs (loop0): Directory bread(block 69) failed [ 547.197047][ T8280] FAT-fs (loop0): Directory bread(block 70) failed [ 547.204023][ T8280] FAT-fs (loop0): Directory bread(block 71) failed [ 547.211363][ T8280] FAT-fs (loop0): Directory bread(block 72) failed [ 547.218340][ T8280] FAT-fs (loop0): Directory bread(block 73) failed [ 547.641288][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 547.924569][ T8297] loop0: detected capacity change from 0 to 8 [ 548.130515][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 548.349465][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 548.608414][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1121'. [ 548.749224][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1118'. [ 548.788904][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 549.198775][ T8321] loop4: detected capacity change from 0 to 512 [ 549.265164][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 549.351362][ T8323] bond1: entered promiscuous mode [ 549.778505][ T8329] loop4: detected capacity change from 0 to 512 [ 550.224154][ T8329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.237858][ T8329] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.366008][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 550.487252][ T8329] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz.4.1131: path /97/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 550.518362][ T8329] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 13: comm syz.4.1131: path /97/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 550.602701][ T8329] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 14: comm syz.4.1131: path /97/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 550.626759][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 550.637200][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 550.667748][ T8329] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 15: comm syz.4.1131: path /97/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 550.725964][ T25] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 550.735688][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.744201][ T25] usb 1-1: Product: syz [ 550.748906][ T25] usb 1-1: Manufacturer: syz [ 550.753781][ T25] usb 1-1: SerialNumber: syz [ 550.774472][ T25] usb 1-1: config 0 descriptor?? [ 550.800114][ T8313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 550.808102][ T8313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.218913][ T6845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.251761][ T8313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.310098][ T8313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 552.067691][ T8349] loop1: detected capacity change from 0 to 256 [ 552.555900][ T25] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 552.854539][ T25] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 552.890714][ T25] usb 1-1: USB disconnect, device number 11 [ 553.559282][ T5236] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 553.804905][ T5236] usb 3-1: Using ep0 maxpacket: 8 [ 553.840527][ T5236] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 553.850249][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.887418][ T5236] usb 3-1: config 0 descriptor?? [ 553.913694][ T5236] pvrusb2: Hardware description: Terratec Grabster AV400 [ 553.921151][ T5236] pvrusb2: ********** [ 553.925349][ T5236] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 553.942591][ T5236] pvrusb2: Important functionality might not be entirely working. [ 553.952747][ T5236] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 553.964425][ T5236] pvrusb2: ********** [ 554.034114][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 554.170525][ T5236] usb 3-1: USB disconnect, device number 4 [ 554.177608][ T5236] pvrusb2: Device being rendered inoperable [ 554.596583][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 554.606685][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.631060][ T25] usb 1-1: config 0 descriptor?? [ 555.027847][ T25] [drm] vendor descriptor length:c3 data:c3 00 b7 aa f9 11 f3 d6 00 27 99 [ 555.037145][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 555.234108][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 555.279985][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 555.310336][ T25] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 555.317562][ T25] [drm] Initialized udl on minor 2 [ 555.377016][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 555.388801][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 555.402049][ T1776] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 555.424185][ T1776] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 555.433011][ T1776] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 555.470085][ T25] usb 1-1: USB disconnect, device number 12 [ 558.332386][ T8430] loop1: detected capacity change from 0 to 2048 [ 558.676160][ T8430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.209222][ T5187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.353897][ T8451] netlink: 'syz.4.1179': attribute type 29 has an invalid length. [ 559.378411][ T8454] netlink: 'syz.4.1179': attribute type 29 has an invalid length. [ 559.406626][ T8451] netlink: 'syz.4.1179': attribute type 29 has an invalid length. [ 560.194804][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 560.207763][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'. [ 560.527219][ T8474] loop2: detected capacity change from 0 to 1024 [ 560.552519][ T8474] hfsplus: invalid gid specified [ 560.557829][ T8474] hfsplus: unable to parse mount options [ 561.024809][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 561.891568][ T8494] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 562.185033][ T8503] loop0: detected capacity change from 0 to 16 [ 562.209982][ T8503] erofs: (device loop0): mounted with root inode @ nid 36. [ 562.237553][ T8503] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 562.278636][ T8503] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 562.290413][ T8503] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 562.314761][ T8505] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 562.324923][ T8505] syz.0.1202: attempt to access beyond end of device [ 562.324923][ T8505] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 562.343907][ T8505] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 0 of nid 36 [ 562.354487][ T8505] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 562.598548][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 563.939614][ T8515] loop3: detected capacity change from 0 to 4096 [ 564.116826][ T8515] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 564.163248][ T8515] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 564.188951][ T5274] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 564.311387][ T8515] ntfs3: loop3: Failed to load $Extend (-22). [ 564.317917][ T8515] ntfs3: loop3: Failed to initialize $Extend. [ 564.386950][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 564.411479][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.422885][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.433334][ T5274] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 564.442859][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.531486][ T5274] usb 5-1: config 0 descriptor?? [ 565.047529][ T5274] hid (null): bogus close delimiter [ 565.053201][ T5274] hid (null): unknown global tag 0xe [ 565.059151][ T5274] hid (null): unknown global tag 0xd [ 565.270012][ T5274] usb 5-1: string descriptor 0 read error: -71 [ 565.321099][ T5274] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 565.329768][ T5274] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -32 [ 565.411317][ T5274] usb 5-1: USB disconnect, device number 11 [ 565.875044][ T8537] loop3: detected capacity change from 0 to 2048 [ 565.943339][ T8537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.323222][ T8548] loop1: detected capacity change from 0 to 512 [ 566.336871][ T8548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.669700][ T8548] EXT4-fs (loop1): Test dummy encryption mode enabled [ 566.669815][ T8548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 566.679737][ T8548] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 566.679874][ T8548] EXT4-fs (loop1): group descriptors corrupted! [ 567.460747][ T8562] kernel read not supported for file /$] (pid: 8562 comm: syz.4.1229) [ 567.478504][ T29] audit: type=1800 audit(1727252471.204:38): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1229" name="$]" dev="mqueue" ino=19540 res=0 errno=0 [ 568.739573][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 569.703451][ T8601] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 570.406073][ T8614] loop0: detected capacity change from 0 to 64 [ 571.949651][ T8635] netlink: 'syz.2.1264': attribute type 49 has an invalid length. [ 572.230791][ T8640] loop4: detected capacity change from 0 to 1024 [ 572.285789][ T8640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.738514][ T8653] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.1265: attempt to clear invalid blocks 1886221359 len 1 [ 573.141815][ T6845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.540907][ T8666] loop2: detected capacity change from 0 to 256 [ 573.778851][ T29] audit: type=1326 audit(1727252477.504:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.1278" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x0 [ 573.836205][ T8671] loop4: detected capacity change from 0 to 1024 [ 575.102734][ T8695] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 575.280296][ T8700] loop4: detected capacity change from 0 to 256 [ 577.517626][ T8734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1308'. [ 577.787823][ T8743] loop1: detected capacity change from 0 to 512 [ 578.425129][ T8756] cifs: Unknown parameter 'mode' [ 578.581659][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.596990][ T8743] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 579.272275][ T5187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.459141][ T5274] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 579.571567][ T8774] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 579.579861][ T8774] netlink: 'syz.3.1325': attribute type 3 has an invalid length. [ 579.587994][ T8774] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1325'. [ 579.597723][ T8774] NCSI netlink: No device for ifindex 813332851 [ 579.676253][ T5274] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 579.686195][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.766834][ T5274] usb 5-1: config 0 descriptor?? [ 579.809314][ T5274] cp210x 5-1:0.0: cp210x converter detected [ 580.249671][ T5236] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 580.332105][ T5274] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 580.400825][ T5274] usb 5-1: cp210x converter now attached to ttyUSB0 [ 580.670989][ T5236] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 580.675196][ T1776] usb 5-1: USB disconnect, device number 12 [ 580.680423][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.710871][ T5236] usb 2-1: config 0 descriptor?? [ 580.743091][ T5236] cp210x 2-1:0.0: cp210x converter detected [ 580.801751][ T1776] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 580.864314][ T1776] cp210x 5-1:0.0: device disconnected [ 581.163239][ T5236] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 581.186445][ T5236] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 581.194799][ T5236] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 581.260936][ T5236] usb 2-1: cp210x converter now attached to ttyUSB0 [ 581.322373][ T5236] usb 2-1: USB disconnect, device number 13 [ 581.385948][ T5236] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 581.397414][ T5236] cp210x 2-1:0.0: device disconnected [ 581.837589][ T8794] netlink: 'syz.0.1332': attribute type 12 has an invalid length. [ 581.846032][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1332'. [ 582.148392][ T8802] loop2: detected capacity change from 0 to 64 [ 582.243942][ T8802] minix_free_block (loop2:21): bit already cleared [ 583.173313][ T8818] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 583.179453][ T8819] ax25_connect(): syz.4.1340 uses autobind, please contact jreuter@yaina.de [ 583.182255][ T8818] team0: Device ipvlan2 failed to register rx_handler [ 583.407829][ T8814] loop4: detected capacity change from 0 to 2048 [ 583.500483][ T8814] loop4: p4 < > [ 583.606977][ T8825] loop0: detected capacity change from 0 to 128 [ 583.958457][ T1776] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 584.128594][ T1776] usb 2-1: Using ep0 maxpacket: 32 [ 584.164382][ T1776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 584.212390][ T1776] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 584.222318][ T1776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.230877][ T1776] usb 2-1: Product: syz [ 584.235329][ T1776] usb 2-1: Manufacturer: syz [ 584.240440][ T1776] usb 2-1: SerialNumber: syz [ 584.342181][ T1776] usb 2-1: config 0 descriptor?? [ 584.598718][ T1776] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 584.670755][ T1776] usb 2-1: USB disconnect, device number 14 [ 585.107081][ T8832] loop0: detected capacity change from 0 to 4096 [ 585.126749][ T8832] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 585.364906][ T8843] loop3: detected capacity change from 0 to 1024 [ 585.539127][ T8832] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 585.821242][ T8849] ax25_connect(): syz.2.1356 uses autobind, please contact jreuter@yaina.de [ 586.164492][ T8853] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 587.174446][ T8872] loop3: detected capacity change from 0 to 128 [ 587.234539][ T8872] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 587.330089][ T8872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.698375][ T5274] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 587.902229][ T5274] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.910869][ T5274] usb 5-1: config 0 has no interface number 0 [ 587.917278][ T5274] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.928890][ T5274] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.943534][ T5274] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.958579][ T5274] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 587.968009][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.065282][ T5274] usb 5-1: config 0 descriptor?? [ 588.483523][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1374'. [ 588.544042][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.559730][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.567601][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.579282][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.587154][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.595444][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.603457][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.611442][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.619501][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.627442][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.635605][ T5274] holtek_mouse 0003:04D9:A0C2.0010: unknown main item tag 0x0 [ 588.643589][ T5274] holtek_mouse 0003:04D9:A0C2.0010: item fetching failed at offset 14/41 [ 588.665446][ T5274] holtek_mouse 0003:04D9:A0C2.0010: hid parse failed: -22 [ 588.675137][ T5274] holtek_mouse 0003:04D9:A0C2.0010: probe with driver holtek_mouse failed with error -22 [ 588.783952][ T5274] usb 5-1: USB disconnect, device number 13 [ 589.763928][ T8901] loop0: detected capacity change from 0 to 256 [ 590.152216][ T8901] FAT-fs (loop0): Directory bread(block 64) failed [ 590.159224][ T8901] FAT-fs (loop0): Directory bread(block 65) failed [ 590.166215][ T8901] FAT-fs (loop0): Directory bread(block 66) failed [ 590.173285][ T8901] FAT-fs (loop0): Directory bread(block 67) failed [ 590.180794][ T8901] FAT-fs (loop0): Directory bread(block 68) failed [ 590.193617][ T8901] FAT-fs (loop0): Directory bread(block 69) failed [ 590.205493][ T8901] FAT-fs (loop0): Directory bread(block 70) failed [ 590.215512][ T8901] FAT-fs (loop0): Directory bread(block 71) failed [ 590.223307][ T8901] FAT-fs (loop0): Directory bread(block 72) failed [ 590.230318][ T8901] FAT-fs (loop0): Directory bread(block 73) failed [ 591.276695][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1390'. [ 592.158882][ T8937] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1394'. [ 592.168610][ T8937] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1394'. [ 595.058422][ T1776] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 595.266205][ T1776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.277903][ T1776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.288647][ T1776] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 595.298275][ T1776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.377060][ T1776] usb 1-1: config 0 descriptor?? [ 596.283945][ T1776] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 596.291434][ T1776] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 596.299100][ T1776] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 596.306250][ T1776] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 596.409369][ T1776] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 596.578887][ T1776] arvo 0003:1E7D:30D4.0011: couldn't init struct arvo_device [ 596.586890][ T1776] arvo 0003:1E7D:30D4.0011: couldn't install keyboard [ 596.622476][ T1776] arvo 0003:1E7D:30D4.0011: probe with driver arvo failed with error -71 [ 596.757692][ T1776] usb 1-1: USB disconnect, device number 13 [ 597.822814][ T9023] loop4: detected capacity change from 0 to 512 [ 597.920527][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.960402][ T9023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.108627][ T9023] fs-verity (loop4, inode 13): Unknown hash algorithm number: 0 [ 598.369172][ T6845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.565160][ T9033] loop1: detected capacity change from 0 to 512 [ 598.748970][ T9033] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1433: bad orphan inode 15 [ 598.767179][ T9033] ext4_test_bit(bit=14, block=18) = 1 [ 598.774164][ T9033] is_bad_inode(inode)=0 [ 598.778907][ T9033] NEXT_ORPHAN(inode)=1023 [ 598.783566][ T9033] max_ino=32 [ 598.792631][ T9033] i_nlink=0 [ 599.032145][ T9033] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2976: inode #15: comm syz.1.1433: corrupted xattr block 19: e_value size too large [ 599.327362][ T9033] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 599.339266][ T9033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.352209][ T9033] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.366823][ T9041] loop3: detected capacity change from 0 to 1024 [ 599.554125][ T9033] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #12: comm syz.1.1433: Directory hole found for htree leaf block 0 [ 599.648872][ T9054] EXT4-fs error (device loop1): ext4_empty_dir:3090: inode #12: comm syz.1.1433: Directory hole found for htree leaf block 0 [ 600.063205][ T1076] hfsplus: b-tree write err: -5, ino 4 [ 600.144516][ T5187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.371843][ T9061] loop0: detected capacity change from 0 to 512 [ 600.395207][ T9058] loop2: detected capacity change from 0 to 4096 [ 600.435956][ T9058] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 600.611215][ T9061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.678460][ T9058] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 600.702442][ T9058] ntfs3: loop2: Failed to load $Extend (-22). [ 600.709353][ T9058] ntfs3: loop2: Failed to initialize $Extend. [ 600.791950][ T9061] fs-verity (loop0, inode 13): Unknown hash algorithm number: 0 [ 601.309352][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.457729][ T1776] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 601.638399][ T1776] usb 5-1: Using ep0 maxpacket: 16 [ 601.720516][ T1776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.732906][ T1776] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 601.746602][ T1776] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 601.756583][ T1776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.782544][ T1776] usb 5-1: config 0 descriptor?? [ 601.844840][ T9080] loop2: detected capacity change from 0 to 16 [ 601.973111][ T9080] erofs: (device loop2): mounted with root inode @ nid 36. [ 602.217509][ T1776] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 602.310522][ T9086] loop3: detected capacity change from 0 to 128 [ 602.361454][ T1776] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0012/input/input19 [ 602.495367][ T1776] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 602.522886][ T9089] loop1: detected capacity change from 0 to 8 [ 602.607741][ T1776] usb 5-1: USB disconnect, device number 14 [ 603.166469][ T4084] kworker/u8:17: attempt to access beyond end of device [ 603.166469][ T4084] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 603.344729][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 603.784160][ T9105] loop2: detected capacity change from 0 to 512 [ 603.891424][ T9105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.892678][ T9107] sctp: [Deprecated]: syz.3.1464 (pid 9107) Use of int in maxseg socket option. [ 603.892678][ T9107] Use struct sctp_assoc_value instead [ 604.061615][ T9105] fs-verity (loop2, inode 13): Unknown hash algorithm number: 0 [ 604.200926][ T5179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.280614][ T29] audit: type=1326 audit(1727252507.974:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.303550][ T29] audit: type=1326 audit(1727252507.984:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.330664][ T29] audit: type=1326 audit(1727252507.984:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.354560][ T29] audit: type=1326 audit(1727252507.984:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.377052][ T29] audit: type=1326 audit(1727252507.984:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.399738][ T29] audit: type=1326 audit(1727252507.994:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.427782][ T29] audit: type=1326 audit(1727252507.994:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.450391][ T29] audit: type=1326 audit(1727252507.994:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.475072][ T29] audit: type=1326 audit(1727252507.994:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 604.984003][ T9118] loop3: detected capacity change from 0 to 2048 [ 606.016671][ T9132] loop4: detected capacity change from 0 to 2048 [ 606.175893][ T9132] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 606.184084][ T9132] UDF-fs: Scanning with blocksize 512 failed [ 606.311563][ T9132] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 606.354580][ T9132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.471006][ T25] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 607.668020][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 607.771871][ T25] usb 5-1: New USB device found, idVendor=19d2, idProduct=0113, bcdDevice=7c.57 [ 607.781728][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.790314][ T25] usb 5-1: Manufacturer: 먈ᅫ伴燉껖꣔醶⮱웟⳸ퟖ꼒双拗몆挀介৐哖恵廒藝굕㣷颁ꯣ蜓珣穿箓⟆쐗寬軸䱦畧蕥迊౮砛骤뇱퓟봍ρ犍卽핌糆ꏮᏧ뢪뚳䠪䗈᪕⭂癩縻义侯淐歰ꬬ囀읁຀е䄀筓僱⻜娬ᳬ﹨㓐쩢ɿƧ⛷鈿 [ 607.824276][ T25] usb 5-1: SerialNumber: ట雑뾥螏୬䁗Ⱆ사觳᱙碗얅팢鏐ڨḃ䎆⹤稺༻췼꼃ꞡ̲勇铆뭴谏ਏ쨄樌鑊薑帼㊩튮昜㴒⺭궹쪌 [ 608.079917][ T25] usb 5-1: config 0 descriptor?? [ 608.123628][ T4294] ===================================================== [ 608.131369][ T4294] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 608.139962][ T4294] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 608.145873][ T4294] tty_port_default_lookahead_buf+0x144/0x210 [ 608.152491][ T4294] flush_to_ldisc+0x8ec/0xdb0 [ 608.157398][ T4294] process_scheduled_works+0xae0/0x1c40 [ 608.163354][ T4294] worker_thread+0xea7/0x14f0 [ 608.168436][ T4294] kthread+0x3e2/0x540 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 608.172789][ T4294] ret_from_fork+0x6d/0x90 [ 608.177436][ T4294] ret_from_fork_asm+0x1a/0x30 [ 608.182900][ T4294] [ 608.185348][ T4294] Uninit was created at: [ 608.190019][ T4294] __kmalloc_noprof+0x661/0xf30 [ 608.195122][ T4294] __tty_buffer_request_room+0x36e/0x6d0 [ 608.201108][ T4294] __tty_insert_flip_string_flags+0x140/0x570 [ 608.207467][ T4294] uart_insert_char+0x39e/0xa10 [ 608.217912][ T4294] serial8250_read_char+0x1a7/0x5d0 [ 608.225966][ T4294] serial8250_handle_irq+0x970/0x1130 [ 608.231821][ T4294] serial8250_default_handle_irq+0x120/0x2b0 [ 608.238207][ T4294] serial8250_interrupt+0xc5/0x360 [ 608.243576][ T4294] __handle_irq_event_percpu+0x118/0xca0 [ 608.250031][ T4294] handle_irq_event+0xef/0x2c0 [ 608.255136][ T4294] handle_edge_irq+0x340/0xfb0 [ 608.260280][ T4294] __common_interrupt+0x97/0x1f0 [ 608.265514][ T4294] common_interrupt+0x92/0xb0 [ 608.270562][ T4294] asm_common_interrupt+0x2b/0x40 [ 608.275899][ T4294] [ 608.278947][ T4294] CPU: 1 UID: 0 PID: 4294 Comm: kworker/u8:21 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 608.289906][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 608.300325][ T4294] Workqueue: events_unbound flush_to_ldisc [ 608.306388][ T4294] ===================================================== [ 608.318399][ T4294] Disabling lock debugging due to kernel taint [ 608.326372][ T4294] Kernel panic - not syncing: kmsan.panic set ... [ 608.332954][ T4294] CPU: 1 UID: 0 PID: 4294 Comm: kworker/u8:21 Tainted: G B 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 608.345259][ T4294] Tainted: [B]=BAD_PAGE [ 608.349532][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 608.359800][ T4294] Workqueue: events_unbound flush_to_ldisc [ 608.365931][ T4294] Call Trace: [ 608.369426][ T4294] [ 608.372496][ T4294] dump_stack_lvl+0x216/0x2d0 [ 608.377422][ T4294] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 608.383582][ T4294] dump_stack+0x1e/0x30 [ 608.387906][ T4294] panic+0x4e2/0xcf0 [ 608.392043][ T4294] ? kmsan_get_metadata+0xd1/0x1c0 [ 608.397497][ T4294] kmsan_report+0x2c7/0x2d0 [ 608.402246][ T4294] ? up_read+0x74/0x1e0 [ 608.406601][ T4294] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 608.412671][ T4294] ? __msan_warning+0x95/0x120 [ 608.417685][ T4294] ? n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 608.423744][ T4294] ? tty_port_default_lookahead_buf+0x144/0x210 [ 608.430215][ T4294] ? flush_to_ldisc+0x8ec/0xdb0 [ 608.435255][ T4294] ? process_scheduled_works+0xae0/0x1c40 [ 608.441198][ T4294] ? worker_thread+0xea7/0x14f0 [ 608.446266][ T4294] ? kthread+0x3e2/0x540 [ 608.450733][ T4294] ? ret_from_fork+0x6d/0x90 [ 608.455511][ T4294] ? ret_from_fork_asm+0x1a/0x30 [ 608.460673][ T4294] ? kmsan_get_metadata+0x13e/0x1c0 [ 608.466146][ T4294] ? check_preempt_wakeup_fair+0x1171/0x16b0 [ 608.472373][ T4294] ? kmsan_get_metadata+0x13e/0x1c0 [ 608.477986][ T4294] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 608.484070][ T4294] ? kmsan_get_metadata+0x13e/0x1c0 [ 608.489506][ T4294] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 608.495566][ T4294] __msan_warning+0x95/0x120 [ 608.500389][ T4294] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 608.506262][ T4294] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 608.512738][ T4294] tty_port_default_lookahead_buf+0x144/0x210 [ 608.519045][ T4294] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 608.525896][ T4294] flush_to_ldisc+0x8ec/0xdb0 [ 608.530779][ T4294] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 608.537605][ T4294] ? __pfx_flush_to_ldisc+0x10/0x10 [ 608.543012][ T4294] process_scheduled_works+0xae0/0x1c40 [ 608.548832][ T4294] worker_thread+0xea7/0x14f0 [ 608.553753][ T4294] kthread+0x3e2/0x540 [ 608.558055][ T4294] ? __pfx_worker_thread+0x10/0x10 [ 608.563409][ T4294] ? __pfx_kthread+0x10/0x10 [ 608.568228][ T4294] ret_from_fork+0x6d/0x90 [ 608.572834][ T4294] ? __pfx_kthread+0x10/0x10 [ 608.577656][ T4294] ret_from_fork_asm+0x1a/0x30 [ 608.582667][ T4294] [ 608.586069][ T4294] Kernel Offset: disabled [ 608.590483][ T4294] Rebooting in 86400 seconds..