last executing test programs: 1m46.51730216s ago: executing program 0 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r1, 0x5, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x8, 0x3, "0af32f05"}]}]}, 0x34}}, 0x0) 1m46.37971994s ago: executing program 0 (id=542): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ad8000/0x3000)=nil, 0x3000}, 0x3}) 1m45.741702523s ago: executing program 0 (id=546): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000cc0)={[{@nomblk_io_submit}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0xa}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@sysvgroups}, {@noauto_da_alloc}, {@debug}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0xb) lseek(r0, 0x0, 0x4) 1m44.368974575s ago: executing program 0 (id=554): syz_mount_image$exfat(0x0, &(0x7f0000000400)='./file0\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000400)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000dc0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x202000, 0x0) 1m43.160921978s ago: executing program 0 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f0000001640)=""/4082, 0xff2}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000280)=""/218, 0xda}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 1m42.670280535s ago: executing program 0 (id=566): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 1m41.751733863s ago: executing program 32 (id=566): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23.046918176s ago: executing program 2 (id=980): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000640)=0x3, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x4788}], 0x1}, 0x0) 22.88571743s ago: executing program 2 (id=982): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ALTPCM \'Line Capture'], 0xf7) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 22.465173726s ago: executing program 2 (id=987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ac0100001e00010026bd7000ffdbdf25e0000002000000000000000000000000000004d302003c00640101020000000000000000000000000900000005350000e40006"], 0x1ac}}, 0x0) 21.970095814s ago: executing program 2 (id=992): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x1000000) 21.301605622s ago: executing program 2 (id=996): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), &(0x7f0000000280)=0x8) 20.613482088s ago: executing program 2 (id=1002): syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@nojournal_checksum}, {@usrjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7d2, &(0x7f0000001940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5406, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 20.098335744s ago: executing program 33 (id=1002): syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@nojournal_checksum}, {@usrjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7d2, &(0x7f0000001940)="$eJzs3c9vG1kdAPDvOM7PFhIkJCinSAioVNUhJbQgIRHEASFRqRKcONBGjhuVOHEVO1UTRbQVQuKCBIgbXHqBA7C7l9Ve98dhL7v/x6pVdzettqs9rLwae5w4iZ112sTpj89Hmua9mTd+8533/OY1M7EDeGlNpv/kIk5FxF+TiPFsfRIRg41UPmK2We7x5kYxXZKo13/9UdIo82hzoxht+6ROZJlvRsTbf4o4k9tbb3VtfXGuXC6tZPmp2tL1qera+tlrS3MLpYXS8vnpmZlzF3544fzhxfrJ++sn7//tF997ZfazP37j1b+8k8RsnMy2tcdxWCZjMjsng+kp3OHnh13ZsXn9Dz0UausB+aM8GA4obZiBrFVOxXgM7Nc+o/08MgDgqNyKiHo3A123AADPtaR5/f9p5637TgGS7lMHAODZ1fo9wKPNjWJrOd7fSPTXg59FxEgz/tb9zeaWfHbPbqRxH3TsUbLjzkgSEROHUP9kRPzrjd/9L13iiO5DAnRy+05EXJmY3Dv+J3ueWTio73devdCemdy10fgH/fNmOv/5Uaf5X25r/hMd5j/DHd67T+LL3/+5e4dQTVfp/O8nbc+2PW6LPzMxkOW+0pjzDSZXr5VL6dj21Yg4HYPDaX56nzpOP/z84d6162Oxa/738d9//9+0/vTndrncvfzwzj3n52pzTx145sGdiG/lO8Wfjv/DjfZPusx/L/VYxy9//Od/dtuWxp/G21r2xn+06ncjvtux/ZOtMsm+zydONbrDVKtTdPDabIx1q38yv93+6ZLW3/q/QD+k7T+2f/wTSfvzmtWeX3rrabH37o6/1a1Qe//vHH/n/j+U/KaRHsrW3Zyr1VamI4aSX+1df2573yz/n8jKp/Gf/nbn939r/OvQ/3+bvv6VHk9E/v6H/3/y+I9WGv/8gdr/wIkYebw40K3+3tp/Zsc++45/Wa/r9QCf5twBAAAAAAAAAAAAAAAAAAAAAAAAQK9yEXEyklxhK53LFQrN7/D+eozlypVq7czVyuryfDS+K3siBnOtj7ocb/s81Ons8/Bb+XO78j+IiK9FxD+GRxv5QrFSnj/u4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgc6LL9/+nPhjeVXjgOI4QADgSIy7sAPCySfL54z4EAKDfRg5UevTIjgMA6J+DXf8BgBeB6z8AvHy6Xv+/8+96PWL3nwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQV26eDFd6p9ubhTT/PyNtdXFyo2z86XqYmFptVgoVlauFxYqlYVyqVCsLHV9odvNH+VK5fpMLK/enKqVqrWp6tr65aXK6nLt8rWluYXS5dJg3yIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN5V19YX58rl0sr+iXrTrZ4KS/SeWHy32Q7PyvG8OIk7fTmrcbvZfs9EyIeaiKHtUWL0eAYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOfAFwEAAP//+3Mm3w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5406, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 5.222250526s ago: executing program 1 (id=1069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x4000880) 4.325205346s ago: executing program 1 (id=1072): socket$caif_seqpacket(0x25, 0x5, 0x2) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 3.874412854s ago: executing program 3 (id=1075): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000ed9501000080ffffffff000000219b1922c3b54f025854cdc43ad091f4856d5abf29d42a0a67f9014fd9fadcbb05a14a401b74ad5e69", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x20}}], 0x1, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 3.591353072s ago: executing program 1 (id=1076): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5437, 0x0) 3.533669513s ago: executing program 4 (id=1077): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000440)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, "500000b74b958e56"}, 0x10}}, 0x0) 3.178839235s ago: executing program 3 (id=1078): r0 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 2.974609408s ago: executing program 4 (id=1080): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0xb, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2.720252146s ago: executing program 5 (id=1081): creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2.669138825s ago: executing program 4 (id=1082): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f0000001340)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383d24f535e5c1d308623ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1", 0xeb}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10) 2.470764886s ago: executing program 3 (id=1083): clock_adjtime(0x0, &(0x7f00000008c0)={0xf38, 0xc97b, 0x8100000000000000, 0x1000, 0x6, 0x9c22, 0x1, 0x9, 0x200, 0x8, 0x2, 0x4, 0x2713, 0x14db, 0x0, 0x3, 0x5, 0x8006, 0x2384, 0x3, 0x6, 0x259, 0x3, 0x6, 0x0, 0x200006}) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2}) 2.231943197s ago: executing program 5 (id=1084): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002280)=@delchain={0x638, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x600, 0x2, [@TCA_CGROUP_EMATCHES={0x5fc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x5f0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0xb}, {0x10000, 0x8001, 0x7, 0x4, 0xf}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x80, 0x7, 0x4}, {{0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x40c, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x5}, "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"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x7}, {0x0, 0x80, 0x0, 0xa5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x8}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x154, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x101, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x8}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6147b3a3d4"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xf}, {0x200}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}]}, 0x638}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x4f}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.056350346s ago: executing program 3 (id=1085): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x1f, 0x10, 0x70bd2c, 0x25dfdbfb, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$netlink(r0, &(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 2.016190629s ago: executing program 4 (id=1086): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x180000e, &(0x7f0000000080)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@acl}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000240)=@v2={0x2, @adiantum, 0x10, '\x00', @auto="867fdd27cf969205faab329d4d451ab6"}) 1.695300721s ago: executing program 5 (id=1087): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.645223692s ago: executing program 3 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1.114221938s ago: executing program 4 (id=1089): unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) 1.065516468s ago: executing program 1 (id=1090): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) dup3(r0, r1, 0x80000) 1.007433484s ago: executing program 5 (id=1091): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 853.722632ms ago: executing program 6 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x47c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x87, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x7, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0xfffffdde}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{}, {}, {}, {}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x47c}}, 0x0) 694.15183ms ago: executing program 5 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x301}, 0x14}}, 0x0) 419.237717ms ago: executing program 5 (id=1093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 369.125498ms ago: executing program 1 (id=1094): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "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"}, 0x5ad) 261.25677ms ago: executing program 3 (id=1095): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 128.777382ms ago: executing program 4 (id=1096): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x0, @broadcast}}]}, 0x10c) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) 24.837089ms ago: executing program 6 (id=1097): r0 = socket(0xa, 0x1, 0x0) close(r0) socket$pptp(0x18, 0x1, 0x2) getpeername$inet(r0, 0x0, 0x0) 0s ago: executing program 1 (id=1098): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x5, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) kernel console output (not intermixed with test programs): [ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.004612][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.060292][ T5797] veth1_macvtap: entered promiscuous mode [ 251.203021][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.215036][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.229887][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.306682][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.317451][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.327625][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.338428][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.354512][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.407503][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.418493][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.430355][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.441258][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.451406][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.462276][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.477094][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.495589][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.508565][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.524389][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.573642][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.582861][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.592144][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.601179][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.624814][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.635725][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.645890][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.657094][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.673300][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.739112][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.751452][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.765412][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.777250][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.787424][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.798346][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.813363][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.849243][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.859358][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.868515][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.877902][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.962895][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.972152][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.981169][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.990324][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.100044][ T5800] veth0_vlan: entered promiscuous mode [ 253.262124][ T5800] veth1_vlan: entered promiscuous mode [ 253.645659][ T5800] veth0_macvtap: entered promiscuous mode [ 253.753157][ T5800] veth1_macvtap: entered promiscuous mode [ 253.988045][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.002355][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.018558][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.029382][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.039467][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.050263][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.060336][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.071124][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.088618][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.301230][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.313936][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.324091][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.334852][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.345075][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.355839][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.365956][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.376747][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.393922][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.421364][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.433403][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.442947][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.452065][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.799380][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.808282][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.105631][ T3673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.115345][ T3673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.367072][ T3673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.375300][ T3673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.470043][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 258.489899][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.498303][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.715186][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.723468][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.826867][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.835283][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.915508][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.924477][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.224388][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.232648][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.505405][ T5978] loop1: detected capacity change from 0 to 16 [ 259.579486][ T5978] erofs: (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 259.592289][ T5978] erofs: (device loop1): mounted with root inode @ nid 36. [ 259.634403][ T5978] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 259.645959][ T5978] syz.1.2: attempt to access beyond end of device [ 259.645959][ T5978] loop1: rw=0, sector=131072, nr_sectors = 1 limit=16 [ 259.660382][ T5978] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 0 of nid 36 [ 261.028494][ T5996] block device autoloading is deprecated and will be removed. [ 261.452339][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.460485][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.708794][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.720882][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.964073][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 261.982793][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 262.393227][ T6017] sctp: [Deprecated]: syz.3.18 (pid 6017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.393227][ T6017] Use struct sctp_sack_info instead [ 262.709764][ T6019] loop4: detected capacity change from 0 to 1024 [ 262.776576][ T6019] hfsplus: invalid gid specified [ 262.781930][ T6019] hfsplus: unable to parse mount options [ 262.818614][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'. [ 262.828036][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 262.918688][ T6024] loop1: detected capacity change from 0 to 256 [ 263.018919][ T6024] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 264.001825][ T6040] warning: `syz.4.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 264.301363][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 264.381853][ T6048] vlan2: entered promiscuous mode [ 264.387143][ T6048] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 264.452776][ T6048] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 267.349194][ T6081] tap0: tun_chr_ioctl cmd 1074025677 [ 267.355299][ T6081] tap0: linktype set to 778 [ 267.598093][ T6072] loop2: detected capacity change from 0 to 4096 [ 267.926756][ T6072] NILFS (loop2): invalid segment: Checksum error in segment payload [ 267.935267][ T6072] NILFS (loop2): trying rollback from an earlier position [ 268.048049][ T6072] NILFS (loop2): recovery complete [ 268.363390][ T6088] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.221998][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 269.311244][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 269.331128][ T6104] netlink: 104 bytes leftover after parsing attributes in process `syz.1.58'. [ 269.340544][ T6104] netlink: 104 bytes leftover after parsing attributes in process `syz.1.58'. [ 269.692966][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 269.728733][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.739371][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.753725][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 269.763881][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 269.776080][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.024216][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.033869][ T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.042265][ T44] usb 1-1: Manufacturer: syz [ 270.126464][ T44] usb 1-1: config 0 descriptor?? [ 270.195507][ T6112] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 270.522529][ T6106] loop1: detected capacity change from 0 to 4096 [ 270.531162][ T6106] ======================================================= [ 270.531162][ T6106] WARNING: The mand mount option has been deprecated and [ 270.531162][ T6106] and is ignored by this kernel. Remove the mand [ 270.531162][ T6106] option from the mount to silence this warning. [ 270.531162][ T6106] ======================================================= [ 270.673137][ T6113] loop4: detected capacity change from 0 to 1024 [ 270.737781][ T44] rc_core: IR keymap rc-hauppauge not found [ 270.745829][ T44] Registered IR keymap rc-empty [ 270.751366][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.770357][ T6121] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.802166][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.831071][ T6113] hfsplus: extend alloc file! (8192,65536,366) [ 270.846646][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 270.906333][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 270.951339][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.993882][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.025768][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.066677][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.094668][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.190247][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.241096][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.263372][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.302265][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.322098][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 271.363286][ T44] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 271.371796][ T44] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 271.466262][ T44] usb 1-1: USB disconnect, device number 2 [ 272.826224][ T6143] loop2: detected capacity change from 0 to 1024 [ 273.025856][ T6143] hfsplus: bad catalog entry type [ 273.334264][ T6147] loop1: detected capacity change from 0 to 1024 [ 273.345530][ T2999] hfsplus: b-tree write err: -5, ino 4 [ 273.494451][ T6147] hfsplus: bad catalog entry type [ 273.506163][ T6151] loop3: detected capacity change from 0 to 512 [ 273.585776][ T6153] loop4: detected capacity change from 0 to 256 [ 273.729655][ T50] hfsplus: b-tree write err: -5, ino 4 [ 273.788712][ T6151] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 273.800964][ T6151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 273.849229][ T6153] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 273.902455][ T6151] System zones: 0-1, 15-15, 18-18, 34-34 [ 273.909802][ T6151] EXT4-fs (loop3): orphan cleanup on readonly fs [ 273.917218][ T6151] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 273.926952][ T6151] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 273.942301][ T6151] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 274.079176][ T6151] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.76: bg 0: block 40: padding at end of block bitmap is not set [ 274.160462][ T6151] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 274.225424][ T6151] EXT4-fs (loop3): 1 truncate cleaned up [ 274.233300][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.955462][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.091859][ T5857] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 275.278205][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 275.293238][ T6174] vlan2: entered promiscuous mode [ 275.298624][ T6174] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 275.313221][ T5857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.324614][ T5857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.412958][ T6174] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 275.619887][ T5857] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 275.630426][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.639199][ T5857] usb 1-1: Product: syz [ 275.648240][ T5857] usb 1-1: Manufacturer: syz [ 275.654725][ T5857] usb 1-1: SerialNumber: syz [ 275.883387][ T6179] netlink: 'syz.3.89': attribute type 33 has an invalid length. [ 275.891463][ T6179] netlink: 152 bytes leftover after parsing attributes in process `syz.3.89'. [ 275.960796][ T6179] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 276.007869][ T6181] loop1: detected capacity change from 0 to 164 [ 276.024229][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.041926][ T6179] team0: Port device batadv0 added [ 276.162213][ T6181] syz.1.90: attempt to access beyond end of device [ 276.162213][ T6181] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 276.176753][ T6181] syz.1.90: attempt to access beyond end of device [ 276.176753][ T6181] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 276.203079][ T29] audit: type=1800 audit(1729942764.671:2): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.90" name="file0" dev="loop1" ino=1862 res=0 errno=0 [ 276.443373][ T5857] hid (null): report_id 2668810406 is invalid [ 276.500117][ T5857] asus 0003:0B05:19B6.0001: report_id 2668810406 is invalid [ 276.508062][ T5857] asus 0003:0B05:19B6.0001: item 0 4 1 8 parsing failed [ 276.611975][ T5857] asus 0003:0B05:19B6.0001: Asus hid parse failed: -22 [ 276.619499][ T5857] asus 0003:0B05:19B6.0001: probe with driver asus failed with error -22 [ 276.737860][ T5880] usb 1-1: USB disconnect, device number 3 [ 277.141954][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 277.314148][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 277.354472][ T5855] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 277.364496][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.427285][ T5855] usb 4-1: config 0 descriptor?? [ 277.533882][ T5855] gspca_main: sq930x-2.14.0 probing 041e:403c [ 278.352304][ T5855] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 278.416829][ T5855] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 278.438957][ T6208] netlink: 48 bytes leftover after parsing attributes in process `syz.1.100'. [ 278.493279][ T5855] usb 4-1: USB disconnect, device number 2 [ 278.623040][ T6206] loop0: detected capacity change from 0 to 512 [ 278.681249][ T6206] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 278.690790][ T6206] EXT4-fs (loop0): orphan cleanup on readonly fs [ 278.821470][ T6206] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 278.830835][ T6206] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 278.841123][ T6206] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.101: Failed to acquire dquot type 1 [ 278.957245][ T6206] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.101: bg 0: block 40: padding at end of block bitmap is not set [ 279.152025][ T6206] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 279.246361][ T6206] EXT4-fs (loop0): 1 truncate cleaned up [ 279.293179][ T6206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.830993][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.291137][ T6227] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 280.684492][ T6233] loop1: detected capacity change from 0 to 1024 [ 280.995010][ T6233] hfsplus: bad catalog entry type [ 281.210312][ T6239] loop0: detected capacity change from 0 to 1764 [ 281.379593][ T6239] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 281.379920][ T34] hfsplus: b-tree write err: -5, ino 4 [ 281.389327][ T6239] ISOFS: unable to read i-node block [ 281.400525][ T6239] isofs_fill_super: get root inode failed [ 285.356480][ T6280] loop2: detected capacity change from 0 to 512 [ 285.530812][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.537750][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.062993][ T6280] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.130: corrupted in-inode xattr: invalid ea_ino [ 286.152864][ T6280] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.130: couldn't read orphan inode 15 (err -117) [ 286.344823][ T6280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.757425][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.880335][ T6312] Illegal XDP return value 2452369769 on prog (id 15) dev N/A, expect packet loss! [ 287.895725][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 288.081052][ T6315] loop4: detected capacity change from 0 to 47 [ 288.103266][ T5880] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=16.ba [ 288.112879][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.186799][ T5880] usb 2-1: config 0 descriptor?? [ 288.236566][ T5880] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 288.314343][ T29] audit: type=1800 audit(1729942776.771:3): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.146" name="bus" dev="loop4" ino=8 res=0 errno=0 [ 288.341204][ T29] audit: type=1800 audit(1729942776.801:4): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.146" name="bus" dev="loop4" ino=8 res=0 errno=0 [ 288.517806][ T5857] usb 2-1: USB disconnect, device number 2 [ 289.382362][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 289.818813][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 289.828301][ T6342] bond0: option ad_select: unable to set because the bond device is up [ 289.865554][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 291.653676][ T6349] loop2: detected capacity change from 0 to 2048 [ 291.935725][ T6361] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.292324][ T5880] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 292.519071][ T6364] loop3: detected capacity change from 0 to 1024 [ 292.537053][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 292.610147][ T6366] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 292.652103][ T6364] EXT4-fs: Ignoring removed oldalloc option [ 292.665571][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.678337][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.688716][ T5880] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 292.698255][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.709423][ T6364] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 292.836534][ T6366] Remounting filesystem read-only [ 292.920976][ T5880] usb 1-1: config 0 descriptor?? [ 292.951921][ T5880] hub 1-1:0.0: USB hub found [ 293.333577][ T5880] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 293.711297][ T5880] usbhid 1-1:0.0: can't add hid device: -71 [ 293.719409][ T5880] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 293.799429][ T5880] usb 1-1: USB disconnect, device number 4 [ 293.845986][ T6378] process 'syz.2.174' launched './file0' with NULL argv: empty string added [ 294.247156][ T6383] loop4: detected capacity change from 0 to 1024 [ 294.423913][ T6387] loop3: detected capacity change from 0 to 512 [ 294.461930][ T6387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 294.475436][ T6387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.500586][ T6383] hfsplus: request for non-existent node 2048 in B*Tree [ 294.508297][ T6383] hfsplus: request for non-existent node 2048 in B*Tree [ 294.557046][ T6390] hfsplus: request for non-existent node 2048 in B*Tree [ 294.565460][ T6390] hfsplus: request for non-existent node 2048 in B*Tree [ 294.741453][ T6387] EXT4-fs (loop3): 1 orphan inode deleted [ 294.747583][ T6387] EXT4-fs (loop3): 1 truncate cleaned up [ 294.755431][ T6387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.349633][ T6399] loop2: detected capacity change from 0 to 1024 [ 295.425903][ T6399] hfsplus: failed to load root directory [ 295.447316][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.762367][ T6405] netlink: 'syz.1.184': attribute type 11 has an invalid length. [ 295.770503][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.184'. [ 295.872022][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 296.171904][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 296.212293][ T5857] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 296.366692][ T6412] loop2: detected capacity change from 0 to 2048 [ 296.613995][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.625503][ T5880] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 296.638203][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.694318][ T6413] loop1: detected capacity change from 0 to 1024 [ 296.751487][ T5880] usb 5-1: config 0 descriptor?? [ 296.864263][ T6412] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 296.909482][ T6412] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 296.990567][ T6412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.163022][ T6420] random: crng reseeded on system resumption [ 297.371057][ T5857] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.382547][ T5857] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.392857][ T5857] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.402274][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.609769][ T6408] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.661794][ T5880] nintendo 0003:057E:200E.0002: unknown main item tag 0x0 [ 297.682836][ T5857] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.694335][ T5880] nintendo 0003:057E:200E.0002: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 297.762536][ T5880] nintendo 0003:057E:200E.0002: Failed charging grip handshake [ 297.770565][ T5880] nintendo 0003:057E:200E.0002: Failed to initialize controller; ret=-110 [ 297.802068][ T5880] nintendo 0003:057E:200E.0002: probe - fail = -110 [ 297.809586][ T5880] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -110 [ 297.923024][ T5880] usb 5-1: USB disconnect, device number 2 [ 298.185958][ T5857] usb 4-1: USB disconnect, device number 3 [ 298.246638][ T6428] loop2: detected capacity change from 0 to 256 [ 298.517519][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.746087][ T6428] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 299.471654][ T6439] VFS: could not find a valid V7 on nullb0. [ 299.484259][ T6439] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 299.735294][ T6444] loop3: detected capacity change from 0 to 1024 [ 300.082081][ T3673] hfsplus: b-tree write err: -5, ino 4 [ 300.962921][ T6461] netlink: 104 bytes leftover after parsing attributes in process `syz.1.205'. [ 302.807137][ T6485] block nbd4: not configured, cannot reconfigure [ 303.301083][ T6490] loop3: detected capacity change from 0 to 1024 [ 303.788496][ T34] hfsplus: b-tree write err: -5, ino 4 [ 303.801127][ T6500] Bluetooth: MGMT ver 1.23 [ 304.131275][ T6504] cgroup: Need name or subsystem set [ 304.256739][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 304.919121][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 305.497434][ T6521] loop4: detected capacity change from 0 to 1764 [ 305.529837][ T6521] iso9660: Bad value for 'gid' [ 305.535265][ T6521] iso9660: Bad value for 'gid' [ 306.011855][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 306.517930][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.529468][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.539717][ T5880] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 306.549141][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.630073][ T5880] usb 5-1: config 0 descriptor?? [ 307.132949][ T6546] loop1: detected capacity change from 0 to 128 [ 307.191260][ T5880] itetech 0003:06CB:73F5.0003: unknown main item tag 0x0 [ 307.199121][ T5880] itetech 0003:06CB:73F5.0003: unbalanced collection at end of report description [ 307.244674][ T6546] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 307.323067][ T6546] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 307.344710][ T5880] itetech 0003:06CB:73F5.0003: probe with driver itetech failed with error -22 [ 307.398025][ T6547] loop2: detected capacity change from 0 to 1024 [ 307.456623][ T5880] usb 5-1: USB disconnect, device number 3 [ 307.543562][ T6547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.803776][ T6546] sysv_count_free_inodes: unable to read inode table [ 308.006899][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.093954][ T5797] sysv_free_block: trying to free block not in datazone [ 308.136051][ T5797] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 308.692006][ T6566] loop0: detected capacity change from 0 to 64 [ 308.954423][ T6561] loop3: detected capacity change from 0 to 1024 [ 309.344248][ T6574] loop4: detected capacity change from 0 to 1024 [ 309.528306][ T6574] hfsplus: bad catalog entry type [ 309.572405][ T6572] loop1: detected capacity change from 0 to 512 [ 309.613366][ T34] hfsplus: b-tree write err: -5, ino 4 [ 309.619559][ T6572] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 309.627489][ T6572] UDF-fs: Scanning with blocksize 512 failed [ 309.688029][ T6572] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 309.695972][ T6572] UDF-fs: Scanning with blocksize 1024 failed [ 309.955958][ T6572] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 309.963861][ T6572] UDF-fs: Scanning with blocksize 2048 failed [ 310.318092][ T6572] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 310.718354][ T6572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.799683][ T29] audit: type=1800 audit(1729942799.281:5): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.255" name="file1" dev="loop1" ino=26 res=0 errno=0 [ 311.237433][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.347376][ T6592] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 312.632003][ T6609] loop1: detected capacity change from 0 to 128 [ 312.782297][ T6609] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 314.985508][ T5850] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 315.065806][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 315.237976][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 315.253163][ T5850] usb 1-1: Using ep0 maxpacket: 16 [ 315.272603][ T5880] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.283023][ T5880] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 315.294602][ T5880] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 315.308043][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.315117][ T5880] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 315.324552][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.328962][ T5850] usb 1-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 315.342496][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.350757][ T5850] usb 1-1: Product: syz [ 315.356749][ T5850] usb 1-1: Manufacturer: syz [ 315.362012][ T5850] usb 1-1: SerialNumber: syz [ 315.364188][ T6644] loop3: detected capacity change from 0 to 2048 [ 315.403085][ T5850] usb 1-1: config 0 descriptor?? [ 315.423224][ T6644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.459992][ T5850] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 315.484283][ T5880] usb 2-1: config 0 descriptor?? [ 315.666069][ T5850] pwc: Failed to set LED on/off time (-71) [ 315.692476][ T5850] pwc: send_video_command error -71 [ 315.698019][ T5850] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 315.706890][ T5850] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 315.884109][ T6638] loop2: detected capacity change from 0 to 4096 [ 315.904568][ T5850] usb 1-1: USB disconnect, device number 5 [ 316.352066][ T5880] corsair-psu 0003:1B1C:1C08.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1c08] on usb-dummy_hcd.1-1/input0 [ 316.694530][ T5880] corsair-psu 0003:1B1C:1C08.0004: unable to initialize device (-110) [ 316.754561][ T5880] corsair-psu 0003:1B1C:1C08.0004: probe with driver corsair-psu failed with error -110 [ 316.776576][ T6638] ntfs3(loop2): ino=22, The size of extended attributes must not exceed 64KiB [ 316.829398][ T5880] usb 2-1: USB disconnect, device number 3 [ 317.391728][ T29] audit: type=1326 audit(1729942805.851:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 317.413902][ T29] audit: type=1326 audit(1729942805.851:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 317.442075][ T29] audit: type=1326 audit(1729942805.851:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 317.465892][ T29] audit: type=1326 audit(1729942805.851:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 317.488112][ T29] audit: type=1326 audit(1729942805.851:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 318.208383][ T6663] loop4: detected capacity change from 0 to 512 [ 318.403570][ T6663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 318.822981][ T6678] loop1: detected capacity change from 0 to 1024 [ 319.020696][ T6685] Failed to get privilege flags for destination (handle=0x2:0x0) [ 319.202760][ T6678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.215533][ T6678] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.273769][ T6663] EXT4-fs (loop4): 1 orphan inode deleted [ 319.279881][ T6663] EXT4-fs (loop4): 1 truncate cleaned up [ 319.287880][ T6663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.661160][ T6663] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 319.732033][ T6663] EXT4-fs (loop4): Remounting filesystem read-only [ 319.750914][ T6663] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 319.762760][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.860750][ T6691] loop0: detected capacity change from 0 to 2048 [ 319.936108][ T6691] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 320.086540][ T6696] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.145840][ T6663] syz.4.294 (6663) used greatest stack depth: 4888 bytes left [ 320.323879][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.428135][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 320.539169][ T6703] netlink: 277 bytes leftover after parsing attributes in process `syz.2.313'. [ 320.548750][ T6703] netlink: 277 bytes leftover after parsing attributes in process `syz.2.313'. [ 320.559409][ T6704] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952 [ 320.571058][ T6704] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 320.726239][ T6691] syz.0.309 (6691) used greatest stack depth: 4328 bytes left [ 320.770306][ T6704] Remounting filesystem read-only [ 320.775259][ T6707] loop4: detected capacity change from 0 to 64 [ 320.775603][ T6704] NILFS (loop0): error -5 truncating bmap (ino=15) [ 321.042037][ T29] audit: type=1800 audit(1729942809.511:11): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.315" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 321.294297][ T5794] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 322.355927][ T6705] loop3: detected capacity change from 0 to 4096 [ 322.479197][ T6724] loop4: detected capacity change from 0 to 256 [ 322.514589][ T6726] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.800284][ T6737] loop4: detected capacity change from 0 to 2048 [ 324.090666][ T6737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.359621][ T6750] loop0: detected capacity change from 0 to 1024 [ 324.374963][ T6751] loop2: detected capacity change from 0 to 512 [ 324.643727][ T6750] syz.0.335: attempt to access beyond end of device [ 324.643727][ T6750] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 324.661459][ T6756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.339'. [ 324.727459][ T6750] syz.0.335: attempt to access beyond end of device [ 324.727459][ T6750] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 324.741204][ T6750] Buffer I/O error on dev loop0, logical block 2889, async page read [ 324.773545][ T6751] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.331: corrupted xattr block 95: invalid header [ 324.850367][ T6751] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.331: bg 0: block 7: invalid block bitmap [ 324.867220][ T6751] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 324.879485][ T6751] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.331: corrupted xattr block 95: invalid header [ 324.909516][ T6751] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 324.919897][ T6751] EXT4-fs (loop2): 1 orphan inode deleted [ 324.927720][ T6751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.963156][ T6750] syz.0.335: attempt to access beyond end of device [ 324.963156][ T6750] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 325.333327][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.943078][ T6766] loop0: detected capacity change from 0 to 128 [ 326.781150][ T29] audit: type=1800 audit(1729942815.251:12): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.343" name="file0" dev="loop0" ino=1048602 res=0 errno=0 [ 326.802144][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.852012][ T5880] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 326.859731][ T5880] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 326.931273][ T5880] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 327.304625][ T6789] netlink: 11 bytes leftover after parsing attributes in process `syz.0.352'. [ 329.259325][ T5850] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 329.267412][ T5850] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 329.332376][ T5850] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 329.515068][ T6821] loop1: detected capacity change from 0 to 64 [ 329.634843][ T6821] hfs: request for non-existent node 16777216 in B*Tree [ 329.642256][ T6821] hfs: request for non-existent node 16777216 in B*Tree [ 329.649676][ T6821] hfs: request for non-existent node 16777216 in B*Tree [ 329.657034][ T6821] hfs: request for non-existent node 16777216 in B*Tree [ 329.737608][ T6823] loop4: detected capacity change from 0 to 512 [ 330.060155][ T6830] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 330.067761][ T6830] macsec1: entered promiscuous mode [ 330.076233][ T6830] macsec1: entered allmulticast mode [ 330.081999][ T6830] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 330.160725][ T6830] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 330.171342][ T6830] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 330.281874][ T5850] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 330.689423][ T29] audit: type=1326 audit(1729942819.141:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.374" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x0 [ 330.880023][ T5850] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.891156][ T5850] usb 3-1: not running at top speed; connect to a high speed hub [ 330.904267][ T6842] loop0: detected capacity change from 0 to 256 [ 330.905147][ T5850] usb 3-1: config 1 interface 0 has no altsetting 0 [ 330.973412][ T5850] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.983271][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.991789][ T5850] usb 3-1: Product: syz [ 330.996201][ T5850] usb 3-1: Manufacturer: syz [ 331.001042][ T5850] usb 3-1: SerialNumber: syz [ 331.009725][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 331.127536][ T6829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 331.150279][ T6842] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 331.206026][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.216641][ T5880] usb 5-1: config 0 has no interfaces? [ 331.222517][ T5880] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 331.232070][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.329542][ T5880] usb 5-1: config 0 descriptor?? [ 331.459282][ T5850] usb 3-1: bad CDC descriptors [ 331.500731][ T5850] usb 3-1: USB disconnect, device number 2 [ 331.732254][ T44] usb 5-1: USB disconnect, device number 4 [ 332.155009][ T6853] netlink: 148 bytes leftover after parsing attributes in process `syz.0.378'. [ 333.380016][ T6865] loop1: detected capacity change from 0 to 128 [ 333.455847][ T6868] loop2: detected capacity change from 0 to 16 [ 333.524105][ T6868] erofs: (device loop2): mounted with root inode @ nid 36. [ 333.789235][ T6875] capability: warning: `syz.3.389' uses 32-bit capabilities (legacy support in use) [ 334.282610][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 334.502449][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 334.533931][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.544626][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.556014][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 334.566056][ T5880] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 334.576207][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.760675][ T6885] loop0: detected capacity change from 0 to 256 [ 334.784651][ T5880] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.794241][ T5880] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.803227][ T5880] usb 2-1: Manufacturer: syz [ 334.863873][ T5880] usb 2-1: config 0 descriptor?? [ 334.908158][ T6885] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011fbe, chksum : 0xeb6f636c, utbl_chksum : 0xe619d30d) [ 335.074565][ T6887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.395'. [ 335.159304][ T6885] exFAT-fs (loop0): hint_cluster is invalid (1), rewind to the first cluster [ 335.168768][ T6885] syz.0.394: attempt to access beyond end of device [ 335.168768][ T6885] loop0: rw=34817, sector=34359738488, nr_sectors = 8 limit=256 [ 335.183650][ T6885] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 335.194759][ T6885] exFAT-fs (loop0): Filesystem has been set read-only [ 335.201865][ T6885] exFAT-fs (loop0): error, failed to bmap (inode : ffff8881235f43f0 iblock : 16, err : -5) [ 335.246109][ T6885] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 335.514606][ T6896] loop3: detected capacity change from 0 to 256 [ 335.704136][ T5880] rc_core: IR keymap rc-hauppauge not found [ 335.710265][ T5880] Registered IR keymap rc-empty [ 335.716891][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 335.900097][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.114070][ T6907] loop4: detected capacity change from 0 to 256 [ 336.123058][ T6907] exfat: Deprecated parameter 'utf8' [ 336.128887][ T6907] exfat: Deprecated parameter 'utf8' [ 336.149768][ T5880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 336.169571][ T5880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 336.498677][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.595408][ T6907] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 336.641354][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.694264][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.745548][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.782767][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.808711][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'. [ 336.862083][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.932385][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 336.973452][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 337.015479][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 337.042078][ T5880] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 337.123267][ T5880] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 337.131854][ T5880] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 337.232191][ T5880] usb 2-1: USB disconnect, device number 4 [ 337.985187][ T6927] gretap0: entered promiscuous mode [ 338.117076][ T6927] erspan0: entered promiscuous mode [ 339.148412][ T6948] loop2: detected capacity change from 0 to 256 [ 339.304976][ T6948] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 339.316194][ T6948] FAT-fs (loop2): Filesystem has been set read-only [ 339.323269][ T6948] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 339.338311][ T6948] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 339.350534][ T29] audit: type=1800 audit(1729942827.841:14): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.418" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 339.786892][ T6948] syz.2.418 (6948) used greatest stack depth: 3960 bytes left [ 340.381258][ T6957] loop0: detected capacity change from 0 to 2048 [ 340.808170][ T6957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.308010][ T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 341.362244][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 341.374805][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 341.374805][ T11] [ 341.389201][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 341.396738][ T11] EXT4-fs (loop0): Free/Dirty block details [ 341.402947][ T11] EXT4-fs (loop0): free_blocks=2415919104 [ 341.408924][ T11] EXT4-fs (loop0): dirty_blocks=32 [ 341.414362][ T11] EXT4-fs (loop0): Block reservation details [ 341.420564][ T11] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 341.540657][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 344.791817][ T5850] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 345.032103][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 345.084724][ T5850] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.096592][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.107973][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 345.217733][ T5850] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 345.227485][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.235979][ T5850] usb 4-1: Product: syz [ 345.240382][ T5850] usb 4-1: Manufacturer: syz [ 345.245670][ T5850] usb 4-1: SerialNumber: syz [ 345.322889][ T5850] usb 4-1: config 0 descriptor?? [ 345.571991][ T5850] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x002f [ 345.793078][ T5850] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 345.801173][ T5850] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 345.813847][ T5850] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 346.045470][ T5850] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 346.054310][ T5850] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 346.122188][ T5850] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 346.133573][ T5850] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 346.205909][ T5850] usb 4-1: USB disconnect, device number 4 [ 346.245291][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 346.254570][ T7032] netlink: 80 bytes leftover after parsing attributes in process `syz.1.455'. [ 347.074121][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.080886][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.104576][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 347.235723][ T7042] veth0_macvtap: left promiscuous mode [ 348.002625][ T7055] netlink: 'syz.1.466': attribute type 4 has an invalid length. [ 348.039837][ T7054] loop2: detected capacity change from 0 to 1024 [ 348.189329][ T7054] hfsplus: request for non-existent node 3 in B*Tree [ 348.196419][ T7054] hfsplus: request for non-existent node 3 in B*Tree [ 349.733545][ T7079] netlink: 164 bytes leftover after parsing attributes in process `syz.3.476'. [ 350.245696][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 350.443609][ T7070] loop1: detected capacity change from 0 to 4096 [ 350.473521][ T7087] loop3: detected capacity change from 0 to 128 [ 350.484341][ T5880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 350.574640][ T7091] loop4: detected capacity change from 0 to 164 [ 350.857967][ T3880] kworker/u8:17: attempt to access beyond end of device [ 350.857967][ T3880] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 351.093148][ T5880] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 351.102633][ T5880] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 351.115241][ T5880] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 351.125418][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.270849][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.484'. [ 351.281239][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 351.350531][ T5880] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 351.581722][ T5880] gspca_sn9c2028: read1 error -32 [ 351.657030][ T5880] gspca_sn9c2028: read1 error -32 [ 352.003422][ T44] usb 1-1: USB disconnect, device number 6 [ 352.616463][ T7114] mmap: syz.1.491 (7114) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 353.471755][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 353.493152][ T7122] loop1: detected capacity change from 0 to 128 [ 353.530788][ T7120] loop3: detected capacity change from 0 to 512 [ 353.575590][ T7120] EXT4-fs: Ignoring removed oldalloc option [ 353.659570][ T5855] usb 5-1: New USB device found, idVendor=05ac, idProduct=1203, bcdDevice=7b.0c [ 353.672080][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.680336][ T5855] usb 5-1: Product: syz [ 353.685772][ T5855] usb 5-1: Manufacturer: syz [ 353.690610][ T5855] usb 5-1: SerialNumber: syz [ 353.824524][ T5855] apple-mfi-fastcharge 5-1: config 0 descriptor?? [ 353.873635][ T5855] usb-storage 5-1:0.0: USB Mass Storage device detected [ 353.910350][ T7120] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.495: Parent and EA inode have the same ino 15 [ 353.912587][ T5855] usb-storage 5-1:0.0: Quirks match for vid 05ac pid 1203: 10 [ 353.946788][ T7127] netlink: 'syz.0.497': attribute type 2 has an invalid length. [ 353.965971][ T7120] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.495: Parent and EA inode have the same ino 15 [ 354.023231][ T7120] EXT4-fs (loop3): 1 orphan inode deleted [ 354.032793][ T7120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.134855][ T5855] apple-mfi-fastcharge 5-1: USB disconnect, device number 5 [ 354.616677][ T50] kworker/u8:3: attempt to access beyond end of device [ 354.616677][ T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 354.828228][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.172697][ T7143] loop2: detected capacity change from 0 to 256 [ 355.827420][ T7152] loop4: detected capacity change from 0 to 1024 [ 355.961266][ T7147] loop0: detected capacity change from 0 to 2048 [ 356.163912][ T7147] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 356.182631][ T7157] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.242573][ T7147] Remounting filesystem read-only [ 356.335943][ T7156] loop1: detected capacity change from 0 to 2048 [ 356.940320][ T7163] loop4: detected capacity change from 0 to 128 [ 358.183995][ T2999] kworker/u8:9: attempt to access beyond end of device [ 358.183995][ T2999] loop4: rw=1, sector=145, nr_sectors = 328 limit=128 [ 359.306513][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 359.313039][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 359.319377][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 360.083117][ T7213] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 360.790558][ T7224] netlink: 136 bytes leftover after parsing attributes in process `syz.3.538'. [ 360.800305][ T7224] netlink: 89 bytes leftover after parsing attributes in process `syz.3.538'. [ 361.835890][ T7240] loop0: detected capacity change from 0 to 1024 [ 361.856503][ T7240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.319297][ T7240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 362.494414][ T7240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.036959][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.018584][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 364.766281][ T3446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.996648][ T3446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.397266][ T3446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.608829][ T3446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.092290][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.128182][ T3446] bridge_slave_1: left allmulticast mode [ 366.128819][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.134157][ T3446] bridge_slave_1: left promiscuous mode [ 366.147934][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.183898][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.191438][ T29] audit: type=1326 audit(1729942854.581:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 366.213924][ T29] audit: type=1326 audit(1729942854.581:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 366.245293][ T29] audit: type=1326 audit(1729942854.731:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 366.286882][ T3446] bridge_slave_0: left allmulticast mode [ 366.292976][ T3446] bridge_slave_0: left promiscuous mode [ 366.299585][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.374848][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.830788][ T5813] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 366.840462][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.190495][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.240896][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.283414][ T3446] bond0 (unregistering): Released all slaves [ 367.841984][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 368.025264][ T7309] loop4: detected capacity change from 0 to 128 [ 368.295549][ T7313] loop3: detected capacity change from 0 to 256 [ 368.630257][ T3446] hsr_slave_0: left promiscuous mode [ 368.655711][ T7314] loop2: detected capacity change from 0 to 1024 [ 368.672218][ T3446] hsr_slave_1: left promiscuous mode [ 368.704053][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.712075][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.791613][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.799316][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.882246][ T5799] Bluetooth: hci0: command tx timeout [ 368.974068][ T3446] veth1_macvtap: left promiscuous mode [ 368.979817][ T3446] veth0_macvtap: left promiscuous mode [ 368.985979][ T3446] veth1_vlan: left promiscuous mode [ 368.991664][ T3446] veth0_vlan: left promiscuous mode [ 369.722276][ T5880] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 370.046538][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 370.067041][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.078317][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.089815][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.099842][ T5880] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 370.109891][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.288347][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.297983][ T5880] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.306600][ T5880] usb 5-1: Manufacturer: syz [ 370.317057][ T5880] usb 5-1: config 0 descriptor?? [ 370.558420][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 370.624749][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 370.749241][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.875429][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.952682][ T5799] Bluetooth: hci0: command tx timeout [ 371.156784][ T5880] rc_core: IR keymap rc-hauppauge not found [ 371.163079][ T5880] Registered IR keymap rc-empty [ 371.168807][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.195748][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.397889][ T5880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 371.415298][ T5880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 371.709197][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.762013][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.823548][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.011264][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.102492][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.154840][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.272054][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.325906][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.352114][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.368480][ T7289] chnl_net:caif_netlink_parms(): no params data found [ 372.374076][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 372.458181][ T5880] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 372.466861][ T5880] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 372.645903][ T7357] loop2: detected capacity change from 0 to 512 [ 372.671381][ T7357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 372.734185][ T5880] usb 5-1: USB disconnect, device number 6 [ 372.780555][ T7357] EXT4-fs (loop2): 1 truncate cleaned up [ 372.789133][ T7357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.039551][ T5799] Bluetooth: hci0: command tx timeout [ 373.766526][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.152026][ T5799] Bluetooth: hci0: command tx timeout [ 375.181103][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.190822][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.198849][ T7289] bridge_slave_0: entered allmulticast mode [ 375.208171][ T7289] bridge_slave_0: entered promiscuous mode [ 375.297130][ T7400] loop3: detected capacity change from 0 to 256 [ 375.403709][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.411391][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.419326][ T7289] bridge_slave_1: entered allmulticast mode [ 375.428814][ T7289] bridge_slave_1: entered promiscuous mode [ 375.491935][ T29] audit: type=1800 audit(1729942863.961:18): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.604" name="file1" dev="loop3" ino=1048625 res=0 errno=0 [ 375.855311][ T7408] loop2: detected capacity change from 0 to 1024 [ 376.048741][ T7289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.104764][ T7289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.255030][ T7412] Bluetooth: MGMT ver 1.23 [ 376.309700][ T7289] team0: Port device team_slave_0 added [ 376.409141][ T7289] team0: Port device team_slave_1 added [ 376.475799][ T3673] hfsplus: b-tree write err: -5, ino 4 [ 377.637426][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.614'. [ 377.695439][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.702821][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.732428][ T7289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.954042][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.961203][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.987760][ T7289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.499382][ T7443] hsr0: entered promiscuous mode [ 378.609108][ T7445] binder: 7441:7445 ioctl c0306201 20000480 returned -22 [ 378.782482][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 378.796701][ T7448] sd 0:0:1:0: device reset [ 379.012868][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.024306][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.034581][ T5857] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 379.044188][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.096411][ T7289] hsr_slave_0: entered promiscuous mode [ 379.152300][ T7289] hsr_slave_1: entered promiscuous mode [ 379.182059][ T7289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.190070][ T7289] Cannot create hsr debugfs directory [ 379.210998][ T5857] usb 3-1: config 0 descriptor?? [ 379.767458][ T7458] loop1: detected capacity change from 0 to 1024 [ 379.820974][ T5857] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 379.864872][ T5857] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 380.298516][ T5857] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 380.594444][ T5857] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 380.666051][ T5857] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 380.716655][ T5857] usb 3-1: USB disconnect, device number 3 [ 381.400987][ T3446] hfsplus: b-tree write err: -5, ino 4 [ 381.476447][ T7289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 381.682922][ T7289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 381.935224][ T7289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.960018][ T7484] loop1: detected capacity change from 0 to 47 [ 382.558820][ T7289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.142053][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.365536][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.457052][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.464821][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.481203][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.489018][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.667371][ T7289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.678237][ T7289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.133307][ T7527] sd 0:0:1:0: device reset [ 385.864560][ T7540] loop2: detected capacity change from 0 to 512 [ 386.473722][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.512587][ T7540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.526101][ T7540] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.602466][ T1596] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 386.792029][ T1596] usb 5-1: Using ep0 maxpacket: 16 [ 386.805831][ T1596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.818700][ T1596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.829112][ T1596] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 386.838712][ T1596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.987719][ T1596] usb 5-1: config 0 descriptor?? [ 387.179235][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.473665][ T1596] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 387.648505][ T1596] playstation 0003:054C:05C4.0008: Invalid byte count transferred, expected 16 got 0 [ 387.659055][ T1596] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -22 [ 387.673544][ T1596] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4 [ 387.683791][ T1596] playstation 0003:054C:05C4.0008: Failed to create dualshock4. [ 387.692418][ T5855] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 387.707997][ T1596] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -22 [ 387.857753][ T1596] usb 5-1: USB disconnect, device number 7 [ 387.907160][ T5855] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 387.927846][ T5855] usb 2-1: config 246 has no interface number 0 [ 387.937457][ T5855] usb 2-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 387.949900][ T5855] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 387.960582][ T5855] usb 2-1: config 246 interface 166 has no altsetting 0 [ 388.220464][ T5855] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 388.230132][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.238710][ T5855] usb 2-1: Product: syz [ 388.243349][ T5855] usb 2-1: Manufacturer: syz [ 388.248210][ T5855] usb 2-1: SerialNumber: syz [ 389.083418][ T5855] usb 2-1: Limiting number of CPorts to U8_MAX [ 389.091967][ T5855] usb 2-1: Unknown endpoint type found, address 0x0b [ 389.103026][ T5855] usb 2-1: Unknown endpoint type found, address 0x8a [ 389.109956][ T5855] usb 2-1: Not enough endpoints found in device, aborting! [ 389.223580][ T7289] veth0_vlan: entered promiscuous mode [ 389.265419][ T7289] veth1_vlan: entered promiscuous mode [ 389.305308][ T7586] block nbd2: shutting down sockets [ 389.347919][ T44] usb 2-1: USB disconnect, device number 5 [ 389.414042][ T7289] veth0_macvtap: entered promiscuous mode [ 389.442794][ T7289] veth1_macvtap: entered promiscuous mode [ 389.497181][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.511702][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.524991][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.536477][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.546897][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.557767][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.573156][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.589551][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.663'. [ 389.640047][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.650937][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.661615][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.672378][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.682501][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.693300][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.703476][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.717950][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.734489][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.743296][ T1596] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 389.826589][ T7289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.835922][ T7289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.845631][ T7289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.855080][ T7289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.935221][ T1596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.946762][ T1596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.957128][ T1596] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 389.966697][ T1596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.173603][ T1596] usb 4-1: config 0 descriptor?? [ 390.815060][ T1596] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 390.993393][ T1596] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 391.214123][ T1596] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 391.274540][ T1596] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71 [ 391.372874][ T1596] usb 4-1: USB disconnect, device number 5 [ 392.632288][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 395.837167][ T7658] netlink: 'syz.4.680': attribute type 8 has an invalid length. [ 396.726991][ T7671] loop1: detected capacity change from 0 to 128 [ 396.842270][ T7671] CUSE: unknown device info "à40tCÓûwÃØ­¿VŸÎ‰ø÷×ûÿ`ÛýuH~ ï¾" [ 396.850343][ T7671] CUSE: unknown device info "Ð)œÊ‚iÛV¹˜ˆ´~®êÞµ~wz÷3÷_ûßÞ“ÓH4l©?DºíË5NVÑ¢¹~yøèÃÑýÂ3Ë¿jÖõ±-oÝ.áÖ]—" [ 396.862605][ T7671] CUSE: unknown device info "½ÍпûïM;W" [ 396.868661][ T7671] CUSE: unknown device info "@çiÝSÄz‚öz²" [ 396.880814][ T7671] CUSE: DEVNAME unspecified [ 397.183419][ T4644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.194398][ T4644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.219819][ T7674] netlink: 'syz.2.683': attribute type 15 has an invalid length. [ 397.546031][ T3673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.554216][ T3673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.951963][ T7691] loop2: detected capacity change from 0 to 1024 [ 399.413400][ T7697] loop3: detected capacity change from 0 to 64 [ 399.519894][ T7695] loop1: detected capacity change from 0 to 512 [ 399.606188][ T7695] EXT4-fs: inline encryption not supported [ 399.712269][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 399.789914][ T7695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.803960][ T7695] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.882295][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 399.903947][ T44] usb 6-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 399.914944][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 399.926920][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 399.938484][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 399.953425][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.073455][ T44] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 400.083036][ T44] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 400.091284][ T44] usb 6-1: Manufacturer: syz [ 400.120621][ T44] usb 6-1: config 0 descriptor?? [ 400.160895][ T7695] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.690: corrupted inode contents [ 400.251184][ T7689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 400.307708][ T7695] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.690: mark_inode_dirty error [ 400.336792][ T44] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 400.408223][ T7695] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.690: corrupted inode contents [ 400.505889][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 400.508031][ T7695] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.690: mark_inode_dirty error [ 400.732012][ T5880] usb 6-1: USB disconnect, device number 2 [ 400.759417][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.303396][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 403.525053][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 403.538273][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 403.549307][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 403.559577][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 403.778518][ T44] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 403.788284][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.796717][ T44] usb 5-1: Product: syz [ 403.801105][ T44] usb 5-1: Manufacturer: syz [ 403.806059][ T44] usb 5-1: SerialNumber: syz [ 403.893528][ T44] usb 5-1: config 0 descriptor?? [ 404.000181][ T44] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 404.492136][ T7766] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 404.616916][ T7768] loop2: detected capacity change from 0 to 128 [ 404.681911][ T44] scsi host1: usb-storage 5-1:0.0 [ 404.909437][ T5880] usb 5-1: USB disconnect, device number 8 [ 404.915838][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 404.915967][ T7768] FAT-fs (loop2): Filesystem has been set read-only [ 404.916157][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 404.916372][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 404.916528][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 404.960475][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 404.973023][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 404.983074][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 404.991957][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 405.000748][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 405.010789][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 405.019753][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 405.128917][ T7768] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 405.212292][ T29] audit: type=1800 audit(1729942893.621:19): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.714" name="file1" dev="loop2" ino=1048630 res=0 errno=0 [ 405.422882][ T5857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 405.592190][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 405.634480][ T5857] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.753750][ T5857] usb 2-1: string descriptor 0 read error: -22 [ 405.760554][ T5857] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.770854][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.937168][ T5857] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 406.272107][ T5857] usb 2-1: USB disconnect, device number 6 [ 407.393624][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.725'. [ 408.064959][ T7804] ax25_connect(): syz.2.729 uses autobind, please contact jreuter@yaina.de [ 408.164374][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.727'. [ 408.427031][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.434131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.107376][ T7820] netlink: 'syz.4.735': attribute type 5 has an invalid length. [ 409.198136][ T7818] loop2: detected capacity change from 0 to 2048 [ 409.240228][ T7818] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 409.435197][ T7830] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.540063][ T7826] bridge0: port 2(bridge_slave_1) entered listening state [ 413.054185][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 414.743368][ T7919] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 415.693925][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 416.648151][ T7961] netlink: 10 bytes leftover after parsing attributes in process `syz.2.785'. [ 416.783669][ T5880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 417.281741][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 417.314126][ T5880] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 417.322835][ T5880] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 417.331201][ T5880] usb 5-1: config 0 has no interface number 0 [ 417.337754][ T5880] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.349773][ T5880] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.366884][ T5880] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.477692][ T5880] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 417.487979][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 417.497603][ T5880] usb 5-1: Product: syz [ 417.535484][ T5880] usb 5-1: config 0 descriptor?? [ 417.610138][ T7975] loop3: detected capacity change from 0 to 2048 [ 417.693069][ T7975] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 417.761657][ T7982] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.915272][ T5857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 418.024943][ T1596] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 418.089728][ T5857] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.101162][ T5857] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 418.112100][ T5857] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 418.121421][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.156027][ T7979] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 418.186196][ T5857] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.212729][ T5880] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input8 [ 418.220978][ T7986] loop5: detected capacity change from 0 to 64 [ 418.229892][ T5880] input: failed to attach handler kbd to device input8, error: -5 [ 418.265984][ T1596] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 418.275637][ T1596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.332717][ T1596] usb 3-1: config 0 descriptor?? [ 418.470537][ T44] usb 5-1: USB disconnect, device number 9 [ 418.507240][ T5880] usb 2-1: USB disconnect, device number 7 [ 418.930439][ T1596] [drm:udl_init] *ERROR* Selecting channel failed [ 418.964806][ T1596] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 418.971896][ T1596] [drm] Initialized udl on minor 2 [ 418.985274][ T1596] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.994490][ T1596] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 419.047464][ T5880] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 419.058899][ T5880] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 419.067638][ T5880] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 419.075566][ T1596] usb 3-1: USB disconnect, device number 4 [ 419.419874][ T7995] netem: invalid attributes len -1 [ 419.425464][ T7995] netem: change failed [ 419.633506][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 419.663823][ T7998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.802'. [ 419.673764][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 419.893722][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 419.980593][ T8005] loop3: detected capacity change from 0 to 512 [ 420.016102][ T8007] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 420.044837][ T8005] ext4: Bad value for 'data_err' [ 420.104943][ T8007] team0: Port device netdevsim3 added [ 420.120834][ T8008] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 420.136581][ T8008] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 420.217938][ T8005] loop3: detected capacity change from 0 to 512 [ 420.262502][ T8008] team0: Port device netdevsim3 removed [ 420.345832][ T8005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.359297][ T8005] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.410336][ T8005] EXT4-fs: Ignoring sb option on remount [ 420.427397][ T8017] loop1: detected capacity change from 0 to 8 [ 420.491842][ T8005] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 420.543358][ T8017] SQUASHFS error: Unable to read inode 0x2000 [ 420.562081][ T1596] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 420.647970][ T8017] netlink: 192 bytes leftover after parsing attributes in process `syz.1.809'. [ 420.657337][ T8017] netlink: 56 bytes leftover after parsing attributes in process `syz.1.809'. [ 420.712542][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.786708][ T1596] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 420.796997][ T1596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.873938][ T1596] usb 6-1: config 0 descriptor?? [ 420.928973][ T1596] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 421.195099][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 421.548191][ T1596] gspca_cpia1: usb_control_msg 01, error -71 [ 421.554639][ T1596] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 421.623421][ T1596] usb 6-1: USB disconnect, device number 3 [ 421.944499][ T8043] loop2: detected capacity change from 0 to 256 [ 422.118795][ T8043] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5183de56, utbl_chksum : 0xe619d30d) [ 422.855179][ T8057] netlink: 80 bytes leftover after parsing attributes in process `syz.2.825'. [ 422.862089][ T8058] loop4: detected capacity change from 0 to 256 [ 422.913606][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 422.959251][ T8058] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 423.600700][ T8070] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 423.612466][ T8070] macsec1: entered promiscuous mode [ 423.643168][ T8070] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 423.703159][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 423.732145][ T1596] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 423.914114][ T44] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 423.927247][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.942146][ T1596] usb 2-1: Using ep0 maxpacket: 16 [ 423.959332][ T44] usb 4-1: config 0 descriptor?? [ 423.973613][ T1596] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 423.976551][ T44] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 423.983257][ T1596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.997976][ T1596] usb 2-1: Product: syz [ 424.002627][ T1596] usb 2-1: Manufacturer: syz [ 424.007493][ T1596] usb 2-1: SerialNumber: syz [ 424.157519][ T1596] r8152-cfgselector 2-1: Unknown version 0x0000 [ 424.164190][ T1596] r8152-cfgselector 2-1: config 0 descriptor?? [ 424.304763][ T44] gspca_sn9c2028: read1 error -32 [ 424.620328][ T8071] loop4: detected capacity change from 0 to 4096 [ 424.715081][ T44] gspca_sn9c2028: read1 error -71 [ 424.720568][ T44] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 424.791270][ T44] usb 4-1: USB disconnect, device number 6 [ 424.814878][ T8080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.850842][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 425.223852][ T1596] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 426.671969][ T1596] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 426.913925][ T1596] usb 3-1: Using ep0 maxpacket: 8 [ 427.009360][ T1596] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 427.019787][ T1596] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.372286][ T8117] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 427.387772][ T1596] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.401994][ T1596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.410268][ T1596] usb 3-1: Product: syz [ 427.416032][ T1596] usb 3-1: Manufacturer: syz [ 427.420869][ T1596] usb 3-1: SerialNumber: syz [ 427.449373][ T8096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 427.822730][ T1596] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 427.877469][ T1596] usb 3-1: USB disconnect, device number 5 [ 428.856240][ T8133] loop1: detected capacity change from 0 to 16 [ 428.871133][ T8133] erofs: (device loop1): mounted with root inode @ nid 36. [ 428.997553][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.865'. [ 428.997661][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.865'. [ 429.062382][ T8133] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 429.156318][ T8133] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 429.156483][ T8133] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 429.271994][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 430.069861][ T8145] loop1: detected capacity change from 0 to 4096 [ 430.274289][ T8145] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 430.451148][ T8145] ntfs3(loop1): Inode r=19 is not in use! [ 430.451383][ T8145] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 430.487912][ T8145] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 430.560299][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 430.639154][ T8145] ntfs3(loop1): ino=1d, "file1" attr_set_size [ 430.855071][ T8153] loop4: detected capacity change from 0 to 2048 [ 430.895681][ T8153] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 430.895774][ T8153] UDF-fs: Scanning with blocksize 512 failed [ 430.942739][ T8153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.995208][ T29] audit: type=1800 audit(1729942919.471:20): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.872" name="file2" dev="loop4" ino=819 res=0 errno=0 [ 432.021686][ T8171] loop2: detected capacity change from 0 to 64 [ 432.137073][ T8171] hfs: request for non-existent node 1573 in B*Tree [ 432.144044][ T8171] hfs: request for non-existent node 1573 in B*Tree [ 432.181328][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.885'. [ 432.395662][ T4644] hfs: request for non-existent node 1573 in B*Tree [ 432.403436][ T4644] hfs: request for non-existent node 1573 in B*Tree [ 433.078437][ T8198] loop3: detected capacity change from 0 to 64 [ 433.749462][ T8204] loop1: detected capacity change from 0 to 512 [ 434.192583][ T8220] loop2: detected capacity change from 0 to 64 [ 434.728420][ T8229] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 434.761378][ T8231] loop5: detected capacity change from 0 to 8 [ 435.157656][ T8239] loop2: detected capacity change from 0 to 164 [ 435.461744][ T29] audit: type=1326 audit(1729942923.921:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.917" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 435.737350][ T8251] loop2: detected capacity change from 0 to 128 [ 435.933272][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 436.018437][ T5795] sysv_free_block: flc_count > flc_size [ 436.026021][ T5795] sysv_free_block: flc_count > flc_size [ 436.038446][ T5795] sysv_free_block: flc_count > flc_size [ 436.044359][ T5795] sysv_free_block: flc_count > flc_size [ 436.057358][ T5795] sysv_free_block: flc_count > flc_size [ 436.063311][ T5795] sysv_free_block: flc_count > flc_size [ 436.084812][ T5795] sysv_free_block: flc_count > flc_size [ 436.090541][ T5795] sysv_free_block: flc_count > flc_size [ 436.110967][ T5795] sysv_free_block: flc_count > flc_size [ 436.120051][ T5795] sysv_free_block: flc_count > flc_size [ 436.182327][ T5795] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 436.265001][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 437.007951][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 437.723521][ T44] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 437.871880][ T5857] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 437.912094][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 437.927873][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.938517][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 437.948189][ T44] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 437.958539][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.051579][ T44] usb 5-1: config 0 descriptor?? [ 438.079545][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 438.109193][ T5857] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.117591][ T5857] usb 6-1: config 0 has no interface number 0 [ 438.124118][ T5857] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.135360][ T5857] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.148078][ T5857] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 438.158441][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.180935][ T8287] loop2: detected capacity change from 0 to 2048 [ 438.219958][ T8287] hpfs: Bad version 183,140. Mount readonly to go around [ 438.227514][ T8287] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 438.278302][ T5857] usb 6-1: config 0 descriptor?? [ 438.686941][ T44] cougar 0003:060B:500A.000A: unexpected long global item [ 438.699184][ T44] cougar 0003:060B:500A.000A: parse failed [ 438.705774][ T44] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 438.969997][ T44] usb 5-1: USB disconnect, device number 10 [ 439.152459][ T5857] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0094.000B/input/input11 [ 439.316453][ T5857] uclogic 0003:28BD:0094.000B: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input1 [ 439.338840][ T8305] vivid-002: disconnect [ 439.346413][ T8304] vivid-002: reconnect [ 439.457285][ T5857] usb 6-1: USB disconnect, device number 4 [ 439.657621][ T29] audit: type=1326 audit(1729942928.131:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.942" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x0 [ 440.253204][ T1596] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 440.432145][ T1596] usb 3-1: Using ep0 maxpacket: 16 [ 440.457946][ T1596] usb 3-1: config 0 has no interfaces? [ 440.487753][ T1596] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 440.497319][ T1596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.510215][ T1596] usb 3-1: Product: syz [ 440.516019][ T1596] usb 3-1: Manufacturer: syz [ 440.520879][ T1596] usb 3-1: SerialNumber: syz [ 440.545900][ T1596] usb 3-1: config 0 descriptor?? [ 440.884718][ T1596] usb 3-1: USB disconnect, device number 6 [ 441.231728][ T5855] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 441.252090][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.957'. [ 441.261638][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.957'. [ 441.407274][ T8330] loop1: detected capacity change from 0 to 4096 [ 441.439164][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.450790][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.461275][ T5855] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 441.470770][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.593887][ T5855] usb 4-1: config 0 descriptor?? [ 441.609990][ T8339] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.967117][ T8343] sp0: Synchronizing with TNC [ 442.110790][ T5855] pantherlord 0003:0F30:0111.000C: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.3-1/input0 [ 442.125095][ T5855] pantherlord 0003:0F30:0111.000C: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 442.311855][ T5855] usb 4-1: USB disconnect, device number 7 [ 442.730442][ T8353] syz.5.964: attempt to access beyond end of device [ 442.730442][ T8353] loop5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 442.744337][ T8353] XFS (loop5): SB validate failed with error -5. [ 442.775961][ T26] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 442.920907][ T29] audit: type=1326 audit(1729942931.401:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.967" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 442.984090][ T29] audit: type=1800 audit(1729942931.451:24): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.966" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 443.362342][ T29] audit: type=1326 audit(1729942931.831:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 443.389272][ T29] audit: type=1326 audit(1729942931.831:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 443.518097][ T29] audit: type=1326 audit(1729942931.921:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 443.541054][ T29] audit: type=1326 audit(1729942931.921:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 443.563702][ T29] audit: type=1326 audit(1729942931.931:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 443.590016][ T29] audit: type=1326 audit(1729942931.931:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 443.613503][ T29] audit: type=1326 audit(1729942931.931:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 444.213931][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 444.914734][ T8397] input: syz0 as /devices/virtual/input/input12 [ 445.157778][ T8406] netlink: 136 bytes leftover after parsing attributes in process `syz.2.987'. [ 445.599721][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.990'. [ 445.609304][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.990'. [ 445.616893][ T8418] loop2: detected capacity change from 0 to 16 [ 445.683192][ T8418] erofs: (device loop2): mounted with root inode @ nid 36. [ 445.937824][ T8422] block device autoloading is deprecated and will be removed. [ 445.948267][ T8422] syz.4.993: attempt to access beyond end of device [ 445.948267][ T8422] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 446.191843][ T8427] loop1: detected capacity change from 0 to 2048 [ 446.356074][ T8432] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.608058][ T8432] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 446.620234][ T8432] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 446.676953][ T3880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.764854][ T8432] Remounting filesystem read-only [ 446.885109][ T5797] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 447.128485][ T3880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.299662][ T3880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.746320][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.758365][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.797392][ T8445] binder: 8444:8445 unknown command 0 [ 447.803198][ T8445] binder: 8444:8445 ioctl c0306201 200001c0 returned -22 [ 447.837480][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.918582][ T3880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.941824][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.958333][ T5813] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 447.969280][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.028718][ T8453] loop4: detected capacity change from 0 to 64 [ 448.486686][ T8459] loop3: detected capacity change from 0 to 256 [ 448.563505][ T8458] netlink: 'syz.5.1010': attribute type 12 has an invalid length. [ 448.571956][ T8458] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1010'. [ 448.667612][ T3880] bridge_slave_1: left allmulticast mode [ 448.673904][ T3880] bridge_slave_1: left promiscuous mode [ 448.680687][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.729777][ T8459] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 448.769689][ T3880] bridge_slave_0: left allmulticast mode [ 448.775758][ T3880] bridge_slave_0: left promiscuous mode [ 448.782620][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.129432][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 449.397924][ T3880] erspan0 (unregistering): left promiscuous mode [ 449.536199][ T3880] gretap0 (unregistering): left promiscuous mode [ 449.638312][ T8471] loop1: detected capacity change from 0 to 256 [ 449.815130][ T8471] MINIX-fs: mounting file system with errors, running fsck is recommended [ 449.913364][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.935459][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.952811][ T3880] bond0 (unregistering): Released all slaves [ 450.013717][ T8471] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 450.068105][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 450.108791][ T8471] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 450.235102][ T5813] Bluetooth: hci1: command tx timeout [ 450.548369][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'. [ 450.589353][ T8478] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1019'. [ 450.599095][ T8478] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1019'. [ 450.996758][ T3880] hsr_slave_0: left promiscuous mode [ 451.032993][ T3880] hsr_slave_1: left promiscuous mode [ 451.092074][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.099749][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.154916][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.162773][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.349329][ T3880] veth1_macvtap: left promiscuous mode [ 451.359538][ T3880] veth0_macvtap: left promiscuous mode [ 451.365697][ T3880] veth1_vlan: left promiscuous mode [ 451.371248][ T3880] veth0_vlan: left promiscuous mode [ 451.599726][ T8485] /dev/sg0: Can't lookup blockdev [ 451.672138][ T8487] loop5: detected capacity change from 0 to 1024 [ 452.247458][ T3880] team0 (unregistering): Port device team_slave_1 removed [ 452.312733][ T5813] Bluetooth: hci1: command tx timeout [ 452.337485][ T3880] team0 (unregistering): Port device team_slave_0 removed [ 452.462225][ T8487] EXT4-fs: Ignoring removed orlov option [ 452.487423][ T8487] EXT4-fs (loop5): Test dummy encryption mode enabled [ 452.532132][ T8487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.639170][ T8490] bridge0: port 3(syz_tun) entered blocking state [ 452.646460][ T8490] bridge0: port 3(syz_tun) entered disabled state [ 452.653742][ T8490] syz_tun: entered allmulticast mode [ 452.662162][ T8490] syz_tun: entered promiscuous mode [ 452.669914][ T8490] bridge0: port 3(syz_tun) entered blocking state [ 452.677079][ T8490] bridge0: port 3(syz_tun) entered forwarding state [ 452.690097][ T8498] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1026'. [ 452.699568][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 453.146021][ T8487] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 453.193991][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.207382][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.215391][ T8440] bridge_slave_0: entered allmulticast mode [ 453.224342][ T8440] bridge_slave_0: entered promiscuous mode [ 453.344965][ T8487] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 453.358446][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.366357][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.374278][ T8440] bridge_slave_1: entered allmulticast mode [ 453.383352][ T8440] bridge_slave_1: entered promiscuous mode [ 453.620270][ T8516] loop3: detected capacity change from 0 to 512 [ 453.767633][ T7289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.785590][ T8516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 453.888265][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 453.888350][ T29] audit: type=1800 audit(1729942942.371:34): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1028" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 453.890140][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.940240][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.105437][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.164492][ T8519] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.173699][ T8519] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.182968][ T8519] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.192174][ T8519] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.201275][ T8519] vxlan0: entered promiscuous mode [ 454.206817][ T8519] vxlan0: entered allmulticast mode [ 454.252643][ T8519] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.262386][ T8519] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.271843][ T8519] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.281097][ T8519] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.395329][ T8529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 454.398998][ T8440] team0: Port device team_slave_0 added [ 454.405781][ T8526] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 454.416163][ T8526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 454.424332][ T8526] vhci_hcd vhci_hcd.0: Device attached [ 454.424572][ T8440] team0: Port device team_slave_1 added [ 454.447104][ T5813] Bluetooth: hci1: command tx timeout [ 454.515998][ T8529] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 454.522805][ T8529] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 454.533064][ T8529] vhci_hcd vhci_hcd.0: Device attached [ 454.577303][ T8526] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(5) [ 454.584117][ T8526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 454.592383][ T8526] vhci_hcd vhci_hcd.0: Device attached [ 454.618545][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.627004][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.657741][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.688393][ T8530] vhci_hcd: connection closed [ 454.689028][ T8527] vhci_hcd: connection closed [ 454.702693][ T3446] vhci_hcd: stop threads [ 454.711816][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.715601][ T3446] vhci_hcd: release socket [ 454.720970][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.725871][ T3446] vhci_hcd: disconnect device [ 454.756550][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.789843][ T8532] vhci_hcd: connection closed [ 454.809732][ T3446] vhci_hcd: stop threads [ 454.815066][ T1596] vhci_hcd: vhci_device speed not set [ 454.829984][ T3446] vhci_hcd: release socket [ 454.834727][ T3446] vhci_hcd: disconnect device [ 454.874280][ T3446] vhci_hcd: stop threads [ 454.878758][ T3446] vhci_hcd: release socket [ 454.883727][ T3446] vhci_hcd: disconnect device [ 454.895062][ T1596] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 454.903188][ T1596] usb 39-1: enqueue for inactive port 0 [ 454.992530][ T1596] vhci_hcd: vhci_device speed not set [ 455.149994][ T8440] hsr_slave_0: entered promiscuous mode [ 455.168733][ T8440] hsr_slave_1: entered promiscuous mode [ 455.623094][ T8546] loop5: detected capacity change from 0 to 8 [ 456.136992][ T8440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 456.191125][ T8440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 456.267219][ T8440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 456.330510][ T8440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 456.479836][ T5813] Bluetooth: hci1: command tx timeout [ 456.870630][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.931940][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.959701][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.967504][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.094608][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.102416][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.262200][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 457.371194][ T8440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.479805][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.492448][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.504843][ T5855] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 457.518752][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.623926][ T5855] usb 2-1: config 0 descriptor?? [ 457.811857][ T8574] sp0: Synchronizing with TNC [ 458.003068][ T8576] loop3: detected capacity change from 0 to 512 [ 458.031271][ T8576] EXT4-fs: Ignoring removed oldalloc option [ 458.237231][ T5855] itetech 0003:06CB:73F5.000D: unknown main item tag 0x0 [ 458.246178][ T5855] itetech 0003:06CB:73F5.000D: unknown main item tag 0x0 [ 458.255858][ T5855] itetech 0003:06CB:73F5.000D: unknown main item tag 0x0 [ 458.360025][ T5855] itetech 0003:06CB:73F5.000D: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.1-1/input0 [ 458.363294][ T8576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9842e02d, mo2=0002] [ 458.380235][ T5855] usb 2-1: USB disconnect, device number 9 [ 458.513052][ T8576] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1048: invalid indirect mapped block 1 (level 1) [ 458.535846][ T8584] loop4: detected capacity change from 0 to 1024 [ 458.545341][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 458.581271][ T8576] EXT4-fs (loop3): Remounting filesystem read-only [ 458.600871][ T8576] EXT4-fs (loop3): 1 truncate cleaned up [ 458.609267][ T8576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.630101][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.660214][ T8584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.724429][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 458.740359][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.751930][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.762102][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 458.776162][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 458.785641][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.824026][ T44] usb 6-1: config 0 descriptor?? [ 459.173621][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.522014][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.529468][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.537127][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.545938][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.558245][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.567896][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.575778][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.583697][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.591110][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.599216][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.606795][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x1 [ 459.614372][ T44] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 459.621918][ T44] logitech 0003:046D:C29C.000E: item fetching failed at offset 14/133 [ 459.635091][ T44] logitech 0003:046D:C29C.000E: parse failed [ 459.641858][ T44] logitech 0003:046D:C29C.000E: probe with driver logitech failed with error -22 [ 459.716645][ T8596] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1056'. [ 459.738563][ T5855] usb 6-1: USB disconnect, device number 5 [ 460.112064][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 460.379476][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 460.819834][ T8440] veth0_vlan: entered promiscuous mode [ 460.854890][ T8440] veth1_vlan: entered promiscuous mode [ 460.964792][ T8440] veth0_macvtap: entered promiscuous mode [ 461.003386][ T8440] veth1_macvtap: entered promiscuous mode [ 461.172188][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.183019][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.198734][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.210752][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.220884][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.231642][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.246426][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.330335][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.341975][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.352285][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.363235][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.373452][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.384383][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.399270][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.411170][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.426556][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.477480][ T8440] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.487122][ T8440] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.504392][ T8440] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.513746][ T8440] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.803279][ T8622] loop3: detected capacity change from 0 to 16 [ 461.873059][ T8622] erofs: (device loop3): mounted with root inode @ nid 36. [ 462.434074][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 463.665512][ T8648] netlink: 'syz.4.1074': attribute type 9 has an invalid length. [ 465.666313][ T8682] loop4: detected capacity change from 0 to 512 [ 465.699613][ T8682] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 465.758924][ T8682] EXT4-fs (loop4): 1 truncate cleaned up [ 465.766732][ T8682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.971061][ T8682] fscrypt (loop4, inode 18): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 466.088751][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.097027][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.128026][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.136259][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.160432][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 466.433306][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.840815][ T5813] Bluetooth: hci4: command 0x0405 tx timeout [ 466.870186][ T8695] netlink: 'syz.6.1012': attribute type 7 has an invalid length. [ 466.879545][ T8695] netlink: 15 bytes leftover after parsing attributes in process `syz.6.1012'. [ 466.889000][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1012'. [ 466.898515][ T8695] netlink: 872 bytes leftover after parsing attributes in process `syz.6.1012'. [ 466.910110][ T8695] netlink: 'syz.6.1012': attribute type 7 has an invalid length. [ 466.918962][ T8695] netlink: 15 bytes leftover after parsing attributes in process `syz.6.1012'. [ 467.426087][ T3446] ===================================================== [ 467.437410][ T3446] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 [ 467.447108][ T3446] n_tty_receive_buf_closing+0x539/0xb40 [ 467.453083][ T3446] n_tty_receive_buf_common+0x196b/0x2490 [ 467.459064][ T3446] n_tty_receive_buf2+0x4c/0x60 [ 467.464490][ T3446] tty_ldisc_receive_buf+0xd0/0x290 [ 467.469908][ T3446] tty_port_default_receive_buf+0xdf/0x190 [ 467.476063][ T3446] flush_to_ldisc+0x473/0xdb0 [ 467.481342][ T3446] process_scheduled_works+0xae0/0x1c40 [ 467.487182][ T3446] worker_thread+0xea7/0x14f0 [ 467.492520][ T3446] kthread+0x3e2/0x540 [ 467.496810][ T3446] ret_from_fork+0x6d/0x90 [ 467.501526][ T3446] ret_from_fork_asm+0x1a/0x30 [ 467.506507][ T3446] [ 467.508948][ T3446] Uninit was created at: [ 467.513656][ T3446] __kmalloc_noprof+0x661/0xf30 [ 467.518757][ T3446] __tty_buffer_request_room+0x36e/0x6d0 [ 467.526074][ T3446] __tty_insert_flip_string_flags+0x140/0x570 [ 467.532609][ T3446] uart_insert_char+0x39e/0xa10 [ 467.539685][ T3446] serial8250_read_char+0x1a7/0x5d0 [ 467.545745][ T3446] serial8250_handle_irq+0x970/0x1130 [ 467.551358][ T3446] serial8250_default_handle_irq+0x120/0x2b0 [ 467.557652][ T3446] serial8250_interrupt+0xc5/0x360 [ 467.563206][ T3446] __handle_irq_event_percpu+0x118/0xca0 [ 467.569078][ T3446] handle_irq_event+0xef/0x2c0 [ 467.574117][ T3446] handle_edge_irq+0x340/0xfb0 [ 467.579098][ T3446] __common_interrupt+0x97/0x1f0 [ 467.584794][ T3446] common_interrupt+0x92/0xb0 [ 467.589655][ T3446] asm_common_interrupt+0x2b/0x40 [ 467.594958][ T3446] [ 467.597434][ T3446] CPU: 1 UID: 0 PID: 3446 Comm: kworker/u8:11 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 467.608788][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.619446][ T3446] Workqueue: events_unbound flush_to_ldisc [ 467.625635][ T3446] ===================================================== [ 467.632810][ T3446] Disabling lock debugging due to kernel taint [ 467.641310][ T3446] Kernel panic - not syncing: kmsan.panic set ... [ 467.648114][ T3446] CPU: 1 UID: 0 PID: 3446 Comm: kworker/u8:11 Tainted: G B 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 467.660809][ T3446] Tainted: [B]=BAD_PAGE [ 467.665103][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.675346][ T3446] Workqueue: events_unbound flush_to_ldisc [ 467.681394][ T3446] Call Trace: [ 467.684824][ T3446] [ 467.687877][ T3446] dump_stack_lvl+0x216/0x2d0 [ 467.692798][ T3446] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 467.698816][ T3446] dump_stack+0x1e/0x30 [ 467.703200][ T3446] panic+0x4e2/0xcf0 [ 467.707320][ T3446] ? kmsan_get_metadata+0xf1/0x1c0 [ 467.712641][ T3446] kmsan_report+0x2c7/0x2d0 [ 467.717339][ T3446] ? __msan_warning+0x95/0x120 [ 467.722334][ T3446] ? n_tty_receive_buf_closing+0x539/0xb40 [ 467.728400][ T3446] ? n_tty_receive_buf_common+0x196b/0x2490 [ 467.734549][ T3446] ? n_tty_receive_buf2+0x4c/0x60 [ 467.739828][ T3446] ? tty_ldisc_receive_buf+0xd0/0x290 [ 467.745450][ T3446] ? tty_port_default_receive_buf+0xdf/0x190 [ 467.751672][ T3446] ? flush_to_ldisc+0x473/0xdb0 [ 467.756762][ T3446] ? process_scheduled_works+0xae0/0x1c40 [ 467.762742][ T3446] ? worker_thread+0xea7/0x14f0 [ 467.767814][ T3446] ? kthread+0x3e2/0x540 [ 467.772288][ T3446] ? ret_from_fork+0x6d/0x90 [ 467.777141][ T3446] ? ret_from_fork_asm+0x1a/0x30 [ 467.782301][ T3446] ? __update_load_avg_cfs_rq+0x121/0x10e0 [ 467.788348][ T3446] ? __update_load_avg_se+0x179/0x11a0 [ 467.794025][ T3446] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 467.800007][ T3446] ? kmsan_get_metadata+0x13e/0x1c0 [ 467.805368][ T3446] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 467.811353][ T3446] ? kmsan_get_metadata+0x13e/0x1c0 [ 467.816703][ T3446] ? kmsan_get_metadata+0x13e/0x1c0 [ 467.822064][ T3446] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 467.828070][ T3446] ? kmsan_get_metadata+0x13e/0x1c0 [ 467.833462][ T3446] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 467.839437][ T3446] __msan_warning+0x95/0x120 [ 467.844249][ T3446] n_tty_receive_buf_closing+0x539/0xb40 [ 467.850145][ T3446] n_tty_receive_buf_common+0x196b/0x2490 [ 467.856104][ T3446] ? finish_task_switch+0x1c8/0x8f0 [ 467.861557][ T3446] n_tty_receive_buf2+0x4c/0x60 [ 467.866604][ T3446] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 467.872377][ T3446] tty_ldisc_receive_buf+0xd0/0x290 [ 467.877819][ T3446] tty_port_default_receive_buf+0xdf/0x190 [ 467.883881][ T3446] flush_to_ldisc+0x473/0xdb0 [ 467.888791][ T3446] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 467.895455][ T3446] ? __pfx_flush_to_ldisc+0x10/0x10 [ 467.900860][ T3446] process_scheduled_works+0xae0/0x1c40 [ 467.906663][ T3446] worker_thread+0xea7/0x14f0 [ 467.911588][ T3446] kthread+0x3e2/0x540 [ 467.915902][ T3446] ? __pfx_worker_thread+0x10/0x10 [ 467.921246][ T3446] ? __pfx_kthread+0x10/0x10 [ 467.926081][ T3446] ret_from_fork+0x6d/0x90 [ 467.930684][ T3446] ? __pfx_kthread+0x10/0x10 [ 467.935519][ T3446] ret_from_fork_asm+0x1a/0x30 [ 467.940510][ T3446] [ 467.945285][ T3446] Kernel Offset: disabled [ 467.949699][ T3446] Rebooting in 86400 seconds..