last executing test programs: 11.378612415s ago: executing program 2 (id=2077): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 10.505706739s ago: executing program 2 (id=2081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x60, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x2a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [{0x18}]}}}}}}, 0x0) 9.448550492s ago: executing program 2 (id=2086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 8.702452588s ago: executing program 1 (id=2089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000380), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000100000000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) 8.653948374s ago: executing program 2 (id=2091): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000002580)=[{&(0x7f0000000100)="b45847", 0x3}], 0x1) 5.883141936s ago: executing program 1 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$vim2m(0x0, 0xd37, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 5.481765854s ago: executing program 2 (id=2101): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000001140)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) 4.696751062s ago: executing program 0 (id=2104): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "180922bfe1973504800000004adafe73"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004800) 4.406869402s ago: executing program 1 (id=2106): r0 = socket(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xb, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x2e, 0x44, 0x68, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64050102, @remote, {[@rr={0x7, 0x1b, 0x13, [@local, @multicast1, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @loopback]}]}}, @timestamp={0xd, 0x0, 0x0, 0xf8, 0x2, 0xb, 0x9, 0x2}}}}}, 0x0) 4.198805093s ago: executing program 4 (id=2107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x80000) shutdown(r1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffa, 0x2c, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x10, 0x801, 0x8}}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa"], 0xd0}}, 0x40) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) close(r4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0xffffffff, 0x100101) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xf, 0x2}, {0xfff2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000280)=""/6) 4.120816206s ago: executing program 0 (id=2108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="20000000210001"], 0x20}], 0x1}, 0x0) 3.730999825s ago: executing program 1 (id=2110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000380), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000100000000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) 3.649502003s ago: executing program 3 (id=2111): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r0, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) 3.583028415s ago: executing program 0 (id=2112): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0xfffffffffffffffc, {0x1, 0x0, 0x4}}, 0x2c) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x2}, 0xff}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 3.201758177s ago: executing program 4 (id=2113): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f000050f000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 3.100624492s ago: executing program 0 (id=2114): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 2.826220547s ago: executing program 3 (id=2115): unshare(0x6020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, 0x0, 0x0}, 0x20) 2.556038546s ago: executing program 4 (id=2116): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$vim2m(0x0, 0xd37, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 2.344926503s ago: executing program 3 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@setlink={0x3c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x1081, 0x80}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3000c054}, 0x20000000) 1.63244306s ago: executing program 0 (id=2118): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x3, 0xa}, {0xbd1, 0x0, 0x3, 0x4}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1.327433788s ago: executing program 4 (id=2119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x2}) 1.266641776s ago: executing program 3 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.23909208s ago: executing program 2 (id=2121): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000003c0)={0x1, 0x9, 0x2, &(0x7f0000000380)={0x1d, "a0acac257e64e799062c9e0aae58c4cf014534673bcd0f4ae614e1539402bb225c"}}) 773.934855ms ago: executing program 3 (id=2122): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000480)={[{@noswap}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 734.980645ms ago: executing program 0 (id=2123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x80000) shutdown(r1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffa, 0x2c, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x10, 0x801, 0x8}}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa"], 0xd0}}, 0x40) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) close(r4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0xffffffff, 0x100101) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xf, 0x2}, {0xfff2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000280)=""/6) 686.375396ms ago: executing program 1 (id=2124): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000001d40)={0xa, 0x4e1c, 0x10, @loopback, 0x6}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) 646.787619ms ago: executing program 4 (id=2125): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000980)=[{0x10, 0x29, 0x2}], 0x10}}], 0x1, 0x0) 162.446148ms ago: executing program 1 (id=2126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x80, 0x6071, 0x0, 0x8001, {[@md5sig={0x13, 0x12, "c64385d047cdec64401819d5615b270f"}, @mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0xfe, 0x0, 0x7}, @sack={0x5, 0x0, [0x9]}, @md5sig={0x13, 0xfffffffffffffdbc, "0d00000005dc00"}]}}}}}}}, 0x0) 114.075164ms ago: executing program 3 (id=2127): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @local}, {0x2, 0x4e20, 0x8}}}}}, 0x0) 0s ago: executing program 4 (id=2128): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 675][ T8837] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 495.922334][ T8837] syz.4.846: attempt to access beyond end of device [ 495.922334][ T8837] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 495.965538][ T8837] syz.4.846: attempt to access beyond end of device [ 495.965538][ T8837] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 496.508626][ T8841] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 496.938595][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 497.140852][ T8849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.852'. [ 501.729858][ T5155] vhci_hcd: vhci_device speed not set [ 503.359625][ T8873] loop0: detected capacity change from 0 to 4096 [ 505.954602][ T8896] loop0: detected capacity change from 0 to 2048 [ 506.155081][ T8896] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 508.588785][ T8914] loop0: detected capacity change from 0 to 4096 [ 508.855615][ T8918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 508.862421][ T8918] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 508.873413][ T8918] vhci_hcd vhci_hcd.0: Device attached [ 509.045715][ T8920] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 509.052616][ T8920] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 509.061159][ T8920] vhci_hcd vhci_hcd.0: Device attached [ 509.097824][ T5155] vhci_hcd: vhci_device speed not set [ 509.218089][ T5155] usb 37-1: new full-speed USB device number 17 using vhci_hcd [ 509.297926][ T8925] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 509.304925][ T8925] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 509.313905][ T8925] vhci_hcd vhci_hcd.0: Device attached [ 509.367510][ T8918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 509.380312][ T8918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 509.402050][ T8926] vhci_hcd: connection closed [ 509.402793][ T8922] vhci_hcd: connection closed [ 509.408437][ T8919] vhci_hcd: connection reset by peer [ 509.412256][ T36] vhci_hcd: stop threads [ 509.423694][ T36] vhci_hcd: release socket [ 509.428999][ T36] vhci_hcd: disconnect device [ 509.487581][ T36] vhci_hcd: stop threads [ 509.492571][ T36] vhci_hcd: release socket [ 509.499103][ T36] vhci_hcd: disconnect device [ 509.551527][ T36] vhci_hcd: stop threads [ 509.555996][ T36] vhci_hcd: release socket [ 509.564882][ T36] vhci_hcd: disconnect device [ 510.340043][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 511.413710][ T8953] loop2: detected capacity change from 0 to 128 [ 511.534719][ T8953] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 511.603413][ T8953] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 512.012674][ T5817] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.069381][ T30] audit: type=1326 audit(1754075335.086:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 512.175261][ T30] audit: type=1326 audit(1754075335.146:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 512.198412][ T30] audit: type=1326 audit(1754075335.156:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 512.220997][ T30] audit: type=1326 audit(1754075335.176:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 512.244266][ T30] audit: type=1326 audit(1754075335.176:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 512.900078][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 513.405921][ T8969] loop2: detected capacity change from 0 to 4096 [ 513.925999][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 514.298109][ T5155] vhci_hcd: vhci_device speed not set [ 516.098835][ T5155] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 516.294798][ T5155] usb 3-1: Using ep0 maxpacket: 16 [ 516.331985][ T5155] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 516.341382][ T5155] usb 3-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 516.353053][ T5155] usb 3-1: config 0 has no interface number 0 [ 516.359929][ T5155] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 516.372142][ T5155] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 516.383953][ T5155] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 516.395280][ T5155] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 29797, setting to 1024 [ 516.407179][ T5155] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 516.418382][ T5155] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 516.432172][ T5155] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 516.442223][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.708884][ T5155] usb 3-1: config 0 descriptor?? [ 516.716615][ T8998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.768782][ T8998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.824647][ T5155] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.161905][ T5436] usb 3-1: USB disconnect, device number 4 [ 517.387834][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.137980][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.909'. [ 521.450850][ T9024] loop4: detected capacity change from 0 to 4096 [ 521.978819][ T9024] ntfs3(loop4): Failed to read $UpCase (-4). [ 522.876548][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 522.942520][ T9043] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 522.952404][ T9043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 526.217641][ T9054] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 526.224452][ T9054] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 526.233218][ T9054] vhci_hcd vhci_hcd.0: Device attached [ 526.339209][ T9054] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 526.346280][ T9054] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 526.355146][ T9054] vhci_hcd vhci_hcd.0: Device attached [ 526.447944][ T5155] vhci_hcd: vhci_device speed not set [ 526.560543][ T9054] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 526.567357][ T9054] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 526.576332][ T9054] vhci_hcd vhci_hcd.0: Device attached [ 526.595103][ T5155] usb 41-1: new full-speed USB device number 11 using vhci_hcd [ 526.710491][ T9054] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 526.727891][ T9065] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 526.806154][ T9058] vhci_hcd: connection closed [ 526.806843][ T9055] vhci_hcd: connection reset by peer [ 526.819124][ T9062] vhci_hcd: connection closed [ 526.821919][ T36] vhci_hcd: stop threads [ 526.831589][ T36] vhci_hcd: release socket [ 526.836381][ T36] vhci_hcd: disconnect device [ 526.924513][ T36] vhci_hcd: stop threads [ 526.929214][ T36] vhci_hcd: release socket [ 526.933902][ T36] vhci_hcd: disconnect device [ 527.002691][ T36] vhci_hcd: stop threads [ 527.007153][ T36] vhci_hcd: release socket [ 527.012177][ T36] vhci_hcd: disconnect device [ 527.307986][ T9067] loop2: detected capacity change from 0 to 2048 [ 527.534279][ T9067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.774685][ T5155] vhci_hcd: vhci_device speed not set [ 532.127060][ T9115] loop2: detected capacity change from 0 to 164 [ 532.163586][ T9117] loop0: detected capacity change from 0 to 64 [ 532.295246][ T9115] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 533.241333][ T9132] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚ι+ÕuµJÙ­Vú?zlIèƒ [ 534.942623][ T30] audit: type=1326 audit(1754075357.956:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9153 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.028030][ T30] audit: type=1326 audit(1754075358.016:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9153 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.051221][ T30] audit: type=1326 audit(1754075358.036:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9153 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.073937][ T30] audit: type=1326 audit(1754075358.036:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9153 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.103556][ T30] audit: type=1326 audit(1754075358.036:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9153 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.638090][ T9164] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 535.645008][ T9164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 535.653336][ T9164] vhci_hcd vhci_hcd.0: Device attached [ 535.768010][ T9164] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 535.774907][ T9164] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 535.783732][ T9164] vhci_hcd vhci_hcd.0: Device attached [ 535.785799][ T9170] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 535.796230][ T9170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 535.805481][ T9170] vhci_hcd vhci_hcd.0: Device attached [ 535.877959][ T11] vhci_hcd: vhci_device speed not set [ 535.916461][ T9164] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 535.923369][ T9164] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 535.932437][ T9164] vhci_hcd vhci_hcd.0: Device attached [ 535.958360][ T11] usb 33-1: new full-speed USB device number 15 using vhci_hcd [ 536.004241][ T9176] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 536.011158][ T9176] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 536.019579][ T9176] vhci_hcd vhci_hcd.0: Device attached [ 536.028085][ T9170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.097838][ T9164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.123363][ T9176] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.362189][ T9180] vhci_hcd: connection closed [ 536.362859][ T9178] vhci_hcd: connection closed [ 536.375979][ T3829] vhci_hcd: stop threads [ 536.385627][ T3829] vhci_hcd: release socket [ 536.391179][ T3829] vhci_hcd: disconnect device [ 536.411517][ T9168] vhci_hcd: connection reset by peer [ 536.418748][ T9171] vhci_hcd: connection closed [ 536.419312][ T9172] vhci_hcd: connection closed [ 536.478737][ T3829] vhci_hcd: stop threads [ 536.491403][ T3829] vhci_hcd: release socket [ 536.496038][ T3829] vhci_hcd: disconnect device [ 536.545789][ T3829] vhci_hcd: stop threads [ 536.551118][ T3829] vhci_hcd: release socket [ 536.555926][ T3829] vhci_hcd: disconnect device [ 536.569668][ T3829] vhci_hcd: stop threads [ 536.574335][ T3829] vhci_hcd: release socket [ 536.579550][ T3829] vhci_hcd: disconnect device [ 536.605717][ T3829] vhci_hcd: stop threads [ 536.611125][ T3829] vhci_hcd: release socket [ 536.615824][ T3829] vhci_hcd: disconnect device [ 536.976208][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.983508][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.517640][ T9202] loop0: detected capacity change from 0 to 128 [ 537.604802][ T9202] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 537.689064][ T9202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.663217][ T9211] loop2: detected capacity change from 0 to 4096 [ 541.108493][ T11] vhci_hcd: vhci_device speed not set [ 541.434451][ T9257] loop4: detected capacity change from 0 to 256 [ 541.550353][ T9257] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 541.564464][ T9257] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 542.538321][ T5155] usb usb34-port1: attempt power cycle [ 543.212555][ T5155] usb usb34-port1: unable to enumerate USB device [ 544.208030][ T9292] ieee802154 phy0 wpan0: encryption failed: -22 [ 544.962775][ T9303] loop4: detected capacity change from 0 to 512 [ 545.214158][ T9303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 545.228013][ T9303] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.362969][ T9303] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 545.374915][ T9303] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 545.385520][ T9303] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1018: Failed to acquire dquot type 0 [ 545.730172][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 546.261227][ T9313] loop2: detected capacity change from 0 to 4096 [ 547.184323][ T9329] IPVS: stopping backup sync thread 9331 ... [ 547.236523][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 547.389511][ T9333] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 547.396408][ T9333] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 547.405053][ T9333] vhci_hcd vhci_hcd.0: Device attached [ 547.460256][ T9337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 547.512630][ T9333] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 547.519607][ T9333] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 547.528249][ T9333] vhci_hcd vhci_hcd.0: Device attached [ 547.605996][ T9337] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 547.613188][ T9337] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 547.622117][ T9337] vhci_hcd vhci_hcd.0: Device attached [ 547.638097][ T5155] vhci_hcd: vhci_device speed not set [ 547.714101][ T9333] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 547.721019][ T9333] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 547.729659][ T9333] vhci_hcd vhci_hcd.0: Device attached [ 547.735923][ T5155] usb 33-1: new full-speed USB device number 16 using vhci_hcd [ 547.824998][ T9333] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 547.872973][ T9333] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 547.933495][ T9333] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 548.124942][ T9342] vhci_hcd: connection closed [ 548.125543][ T9340] vhci_hcd: connection closed [ 548.135910][ T4400] vhci_hcd: stop threads [ 548.145564][ T4400] vhci_hcd: release socket [ 548.150732][ T4400] vhci_hcd: disconnect device [ 548.178633][ T9338] vhci_hcd: connection closed [ 548.179235][ T9334] vhci_hcd: connection reset by peer [ 548.227986][ T4400] vhci_hcd: stop threads [ 548.232649][ T4400] vhci_hcd: release socket [ 548.238318][ T4400] vhci_hcd: disconnect device [ 548.258684][ T4400] vhci_hcd: stop threads [ 548.263392][ T4400] vhci_hcd: release socket [ 548.268598][ T4400] vhci_hcd: disconnect device [ 548.327128][ T4400] vhci_hcd: stop threads [ 548.331971][ T4400] vhci_hcd: release socket [ 548.336681][ T4400] vhci_hcd: disconnect device [ 548.919258][ T9353] loop2: detected capacity change from 0 to 256 [ 549.777637][ T9363] veth0_macvtap: left promiscuous mode [ 549.784358][ T9363] macvtap0: entered allmulticast mode [ 550.598831][ T5860] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 550.804957][ T5860] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 550.814957][ T5860] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.827754][ T5860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 550.836990][ T5860] usb 5-1: config 1 has no interface number 0 [ 550.844260][ T5860] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 550.856198][ T5860] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 551.009228][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 551.080742][ T5860] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.090730][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.099439][ T5860] usb 5-1: Product: syz [ 551.103836][ T5860] usb 5-1: Manufacturer: syz [ 551.108770][ T5860] usb 5-1: SerialNumber: syz [ 551.829145][ T11] usb 5-1: USB disconnect, device number 8 [ 552.868959][ T5155] vhci_hcd: vhci_device speed not set [ 553.594793][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'. [ 554.315223][ T24] usb usb34-port1: attempt power cycle [ 555.043028][ T24] usb usb34-port1: unable to enumerate USB device [ 555.066532][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 556.009058][ T9433] IPVS: stopping backup sync thread 9434 ... [ 556.013894][ T9434] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 556.078993][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 556.938562][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1076'. [ 557.849545][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 559.459874][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 559.681673][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.693753][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 559.704313][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 559.715657][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.725286][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.870607][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.391685][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.455653][ T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 560.530122][ T24] usb 1-1: USB disconnect, device number 7 [ 560.706470][ T9483] loop2: detected capacity change from 0 to 1024 [ 560.907794][ T9483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.049206][ T9492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1096'. [ 561.414416][ T9496] loop0: detected capacity change from 0 to 8 [ 561.516252][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.526910][ T9496] SQUASHFS error: Failed to read block 0x63a: -5 [ 561.534734][ T9496] SQUASHFS error: Unable to read metadata cache entry [638] [ 561.542990][ T9496] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 562.822331][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 563.093661][ T9504] loop4: detected capacity change from 0 to 4096 [ 564.973406][ T9530] loop4: detected capacity change from 0 to 16 [ 565.064313][ T9530] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 565.076805][ T9530] erofs (device loop4): mounted with root inode @ nid 36. [ 565.129286][ T9524] loop0: detected capacity change from 0 to 4096 [ 565.232356][ T9530] erofs (device loop4): read error -117 @ 0 of nid 36 [ 566.538004][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 566.633549][ T9543] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 567.558019][ T11] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 567.758386][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 567.813684][ T11] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 567.823423][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.832089][ T11] usb 3-1: Product: syz [ 567.836712][ T11] usb 3-1: Manufacturer: syz [ 567.843495][ T11] usb 3-1: SerialNumber: syz [ 567.886374][ T9550] loop4: detected capacity change from 0 to 4096 [ 567.901785][ T11] usb 3-1: config 0 descriptor?? [ 567.943113][ T11] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 567.999752][ T9558] netlink: 'syz.1.1126': attribute type 10 has an invalid length. [ 568.008436][ T9558] macvtap0: entered promiscuous mode [ 568.021669][ T9558] batman_adv: batadv0: Adding interface: macvtap0 [ 568.028868][ T9558] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.056988][ T9558] batman_adv: batadv0: Interface activated: macvtap0 [ 568.462807][ T11] gspca_m5602: Failed to find a sensor [ 568.468949][ T11] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 568.483303][ T9561] loop0: detected capacity change from 0 to 128 [ 568.530390][ T11] usb 3-1: USB disconnect, device number 5 [ 568.903310][ T9567] syz.0.1127: attempt to access beyond end of device [ 568.903310][ T9567] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 568.998291][ T9567] syz.0.1127: attempt to access beyond end of device [ 568.998291][ T9567] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 569.093666][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.093666][ T9567] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 569.108066][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.108066][ T9567] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 569.122333][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.122333][ T9567] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 569.136661][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.136661][ T9567] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 569.150899][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.150899][ T9567] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 569.165178][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.165178][ T9567] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 569.266137][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.266137][ T9567] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 569.330220][ T9567] syz.0.1127: attempt to access beyond end of device [ 569.330220][ T9567] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 569.613545][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1131'. [ 571.329541][ T9590] loop4: detected capacity change from 0 to 2048 [ 571.538901][ T9590] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.205610][ T9594] loop0: detected capacity change from 0 to 4096 [ 572.386814][ T9599] loop2: detected capacity change from 0 to 4096 [ 572.433555][ T9605] loop4: detected capacity change from 0 to 128 [ 573.531544][ T9616] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 573.542244][ T9617] IPVS: stopping backup sync thread 9616 ... [ 574.374586][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1152'. [ 574.619382][ T9631] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.069998][ T9649] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 576.070659][ T9648] IPVS: stopping backup sync thread 9649 ... [ 576.490127][ T9646] loop2: detected capacity change from 0 to 4096 [ 576.661076][ T9654] loop0: detected capacity change from 0 to 128 [ 577.118330][ T9657] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.268025][ T9672] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.313460][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1172'. [ 579.269693][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'. [ 579.279101][ T9687] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 579.454698][ T9684] loop4: detected capacity change from 0 to 4096 [ 580.399088][ T9692] loop2: detected capacity change from 0 to 4096 [ 581.746833][ T9711] loop4: detected capacity change from 0 to 256 [ 582.069317][ T9711] FAT-fs (loop4): Directory bread(block 64) failed [ 582.077119][ T9711] FAT-fs (loop4): Directory bread(block 65) failed [ 582.085380][ T9711] FAT-fs (loop4): Directory bread(block 66) failed [ 582.092423][ T9711] FAT-fs (loop4): Directory bread(block 67) failed [ 582.100106][ T9711] FAT-fs (loop4): Directory bread(block 68) failed [ 582.107827][ T9711] FAT-fs (loop4): Directory bread(block 69) failed [ 582.114770][ T9711] FAT-fs (loop4): Directory bread(block 70) failed [ 582.122771][ T9711] FAT-fs (loop4): Directory bread(block 71) failed [ 582.129988][ T9711] FAT-fs (loop4): Directory bread(block 72) failed [ 582.136790][ T9711] FAT-fs (loop4): Directory bread(block 73) failed [ 582.174001][ T9716] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 582.448293][ T9719] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 582.466105][ T9719] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 582.517743][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1189'. [ 582.526953][ T9717] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 582.729635][ T9716] macvlan2: entered promiscuous mode [ 582.735198][ T9716] macvlan2: entered allmulticast mode [ 582.744401][ T9716] bond3: entered promiscuous mode [ 582.753262][ T9716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.821114][ T9716] bond3: left promiscuous mode [ 583.169595][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1193'. [ 583.650688][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1195'. [ 583.660731][ T9736] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 583.681031][ T9729] loop4: detected capacity change from 0 to 4096 [ 584.454013][ T9746] loop2: detected capacity change from 0 to 128 [ 585.980207][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 587.352441][ T9787] loop2: detected capacity change from 0 to 512 [ 587.551522][ T9787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.553670][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1216'. [ 587.566010][ T9787] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 588.008485][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.253506][ T9808] loop0: detected capacity change from 0 to 1024 [ 589.549999][ T9808] hfsplus: bad catalog entry type [ 589.577777][ T9810] loop4: detected capacity change from 0 to 2048 [ 589.711972][ T9814] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 589.916859][ T4309] hfsplus: b-tree write err: -5, ino 4 [ 590.261362][ T9818] loop0: detected capacity change from 0 to 64 [ 590.508314][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 590.518086][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 593.859697][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 595.172142][ T30] audit: type=1326 audit(1754075418.196:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 595.195656][ T30] audit: type=1326 audit(1754075418.196:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 595.237631][ T30] audit: type=1326 audit(1754075418.256:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 595.260732][ T30] audit: type=1326 audit(1754075418.256:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 595.910937][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 598.279303][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 598.326541][ T9901] loop0: detected capacity change from 0 to 4096 [ 598.413338][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.420381][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.598403][ T9908] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.800710][ T9911] loop4: detected capacity change from 0 to 512 [ 599.048569][ T9911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.062138][ T9911] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.239594][ T9911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1262: bg 0: block 64: padding at end of block bitmap is not set [ 599.870353][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.168286][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 600.399908][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.412749][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.426860][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 600.436400][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.591201][ T24] usb 3-1: config 0 descriptor?? [ 601.135146][ T24] wacom 0003:056A:0217.0004: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 601.298160][ T24] usb 3-1: USB disconnect, device number 6 [ 601.496781][ T9938] loop0: detected capacity change from 0 to 128 [ 602.739010][ T9948] loop4: detected capacity change from 0 to 4096 [ 602.776736][ T9948] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 602.851961][ T11] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 603.053022][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 603.064712][ T11] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 603.075540][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.147061][ T9948] ntfs3(loop4): ino=19, mi_enum_attr [ 603.151938][ T11] usb 3-1: config 0 descriptor?? [ 603.154202][ T9948] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 603.169952][ T9950] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.263967][ T9948] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 603.679203][ T11] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 603.688362][ T11] elan 0003:04F3:0755.0005: item fetching failed at offset 3/5 [ 603.733039][ T11] elan 0003:04F3:0755.0005: Hid Parse failed [ 603.741355][ T11] elan 0003:04F3:0755.0005: probe with driver elan failed with error -22 [ 603.828059][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 603.872635][ T11] usb 3-1: USB disconnect, device number 7 [ 604.592855][ T5810] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 605.229448][ T5810] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 605.640696][ T9983] loop2: detected capacity change from 0 to 128 [ 606.702472][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1298'. [ 606.857401][ T9991] loop0: detected capacity change from 0 to 4096 [ 607.751746][T10007] loop4: detected capacity change from 0 to 2048 [ 607.911376][T10007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.022189][T10007] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.1301: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 608.565832][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.563859][T10040] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 610.581755][T10040] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 610.818226][T10037] macvlan2: entered promiscuous mode [ 610.823773][T10037] macvlan2: entered allmulticast mode [ 610.832922][T10037] bond4: entered promiscuous mode [ 610.841777][T10037] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 611.011326][T10037] bond4: left promiscuous mode [ 611.667087][T10058] loop4: detected capacity change from 0 to 128 [ 612.238916][T10061] IPVS: stopping backup sync thread 10065 ... [ 612.244912][T10065] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 612.311552][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 613.020759][T10071] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 613.027565][T10071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 613.036075][T10071] vhci_hcd vhci_hcd.0: Device attached [ 613.086323][T10079] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 613.093310][T10079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 613.102292][T10079] vhci_hcd vhci_hcd.0: Device attached [ 613.238601][ T24] vhci_hcd: vhci_device speed not set [ 613.306866][T10071] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 613.329913][ T24] usb 37-1: new full-speed USB device number 18 using vhci_hcd [ 613.333551][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 613.443665][T10079] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 613.450929][T10079] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 613.460430][T10079] vhci_hcd vhci_hcd.0: Device attached [ 613.576192][T10083] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 613.594454][T10083] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 613.628735][T10071] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 613.635616][T10071] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 613.645247][T10071] vhci_hcd vhci_hcd.0: Device attached [ 613.706239][T10088] macvlan2: entered promiscuous mode [ 613.711890][T10088] macvlan2: entered allmulticast mode [ 613.721342][T10088] bond4: entered promiscuous mode [ 613.729964][T10088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 613.785897][T10079] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 613.817568][T10088] bond4: left promiscuous mode [ 613.817664][T10071] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18) [ 613.829273][T10071] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 613.840002][T10071] vhci_hcd vhci_hcd.0: Device attached [ 613.929336][T10079] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.003689][T10079] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.269035][T10092] vhci_hcd: connection closed [ 614.271837][ T3682] vhci_hcd: stop threads [ 614.279257][T10080] vhci_hcd: connection closed [ 614.281616][ T3682] vhci_hcd: release socket [ 614.281965][T10089] vhci_hcd: connection closed [ 614.286558][ T3682] vhci_hcd: disconnect device [ 614.302405][T10085] vhci_hcd: connection closed [ 614.302945][T10076] vhci_hcd: connection reset by peer [ 614.388800][ T3682] vhci_hcd: stop threads [ 614.393264][ T3682] vhci_hcd: release socket [ 614.398404][ T3682] vhci_hcd: disconnect device [ 614.409232][ T3682] vhci_hcd: stop threads [ 614.413776][ T3682] vhci_hcd: release socket [ 614.418701][ T3682] vhci_hcd: disconnect device [ 614.428519][ T3682] vhci_hcd: stop threads [ 614.432968][ T3682] vhci_hcd: release socket [ 614.440692][ T3682] vhci_hcd: disconnect device [ 614.480334][ T3682] vhci_hcd: stop threads [ 614.484925][ T3682] vhci_hcd: release socket [ 614.490073][ T3682] vhci_hcd: disconnect device [ 616.031076][T10119] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 616.042807][T10118] IPVS: stopping backup sync thread 10119 ... [ 616.119564][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 616.858069][T10124] loop4: detected capacity change from 0 to 64 [ 616.935273][T10125] tipc: MTU too low for tipc bearer [ 616.941988][T10124] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 617.794388][T10136] loop0: detected capacity change from 0 to 64 [ 618.477689][ T24] vhci_hcd: vhci_device speed not set [ 619.084941][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 619.667924][T10161] loop0: detected capacity change from 0 to 22 [ 619.728509][T10161] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 619.820108][ T5155] usb usb38-port1: attempt power cycle [ 620.116515][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 620.473273][ T5155] usb usb38-port1: unable to enumerate USB device [ 621.958566][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1363'. [ 622.300202][T10184] loop4: detected capacity change from 0 to 4096 [ 622.689691][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 623.508763][T10201] ALSA: mixer_oss: invalid OSS volume '' [ 624.288476][T10208] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 624.295373][T10208] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 624.304595][T10208] vhci_hcd vhci_hcd.0: Device attached [ 624.399670][T10215] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 624.406558][T10215] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 624.415235][T10215] vhci_hcd vhci_hcd.0: Device attached [ 624.493744][T10208] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.511821][ T5436] vhci_hcd: vhci_device speed not set [ 624.590369][T10208] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 624.597254][T10208] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 624.605783][T10208] vhci_hcd vhci_hcd.0: Device attached [ 624.611978][ T5436] usb 33-1: new full-speed USB device number 17 using vhci_hcd [ 624.688562][T10215] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 624.695634][T10215] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 624.704372][T10215] vhci_hcd vhci_hcd.0: Device attached [ 624.783770][T10215] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.839909][T10215] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.911523][T10226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.918062][T10208] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 624.926721][T10208] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 624.935177][T10208] vhci_hcd vhci_hcd.0: Device attached [ 625.106017][T10233] IPVS: stopping backup sync thread 10234 ... [ 625.141805][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 625.223209][T10224] vhci_hcd: connection closed [ 625.224019][T10222] vhci_hcd: connection closed [ 625.228719][T10220] vhci_hcd: connection closed [ 625.235088][ T36] vhci_hcd: stop threads [ 625.245220][ T36] vhci_hcd: release socket [ 625.250260][ T36] vhci_hcd: disconnect device [ 625.276258][T10216] vhci_hcd: connection closed [ 625.277752][T10209] vhci_hcd: connection reset by peer [ 625.298191][ T36] vhci_hcd: stop threads [ 625.302737][ T36] vhci_hcd: release socket [ 625.307713][ T36] vhci_hcd: disconnect device [ 625.324653][ T36] vhci_hcd: stop threads [ 625.331071][ T36] vhci_hcd: release socket [ 625.335889][ T36] vhci_hcd: disconnect device [ 625.341779][ T36] vhci_hcd: stop threads [ 625.346223][ T36] vhci_hcd: release socket [ 625.353274][ T36] vhci_hcd: disconnect device [ 625.377750][ T36] vhci_hcd: stop threads [ 625.382367][ T36] vhci_hcd: release socket [ 625.387041][ T36] vhci_hcd: disconnect device [ 626.289958][T10240] loop2: detected capacity change from 0 to 4096 [ 626.955920][T10255] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 627.189547][T10258] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 627.216102][T10258] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 628.093106][T10270] IPVS: stopping backup sync thread 10273 ... [ 628.169601][T10272] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 628.176531][T10272] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 628.185966][T10272] vhci_hcd vhci_hcd.0: Device attached [ 628.242447][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 628.285824][T10277] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 628.292776][T10277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 628.297059][T10272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 628.301490][T10277] vhci_hcd vhci_hcd.0: Device attached [ 628.385971][T10272] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 628.392874][T10272] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 628.401517][T10272] vhci_hcd vhci_hcd.0: Device attached [ 628.410375][ T24] vhci_hcd: vhci_device speed not set [ 628.487645][ T24] usb 41-1: new full-speed USB device number 12 using vhci_hcd [ 628.517971][T10272] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 628.524874][T10272] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 628.533404][T10272] vhci_hcd vhci_hcd.0: Device attached [ 628.557781][T10277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 628.564764][T10277] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 628.574673][T10277] vhci_hcd vhci_hcd.0: Device attached [ 628.677973][T10272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 628.728981][T10272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 628.760078][T10272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 628.963410][T10284] vhci_hcd: connection closed [ 628.964724][ T4400] vhci_hcd: stop threads [ 628.974462][ T4400] vhci_hcd: release socket [ 628.979872][ T4400] vhci_hcd: disconnect device [ 628.993927][T10278] vhci_hcd: connection closed [ 628.994613][T10274] vhci_hcd: connection reset by peer [ 629.008049][T10280] vhci_hcd: connection closed [ 629.008610][T10282] vhci_hcd: connection closed [ 629.020853][ T4400] vhci_hcd: stop threads [ 629.031155][ T4400] vhci_hcd: release socket [ 629.035945][ T4400] vhci_hcd: disconnect device [ 629.106093][ T4400] vhci_hcd: stop threads [ 629.111788][ T4400] vhci_hcd: release socket [ 629.116525][ T4400] vhci_hcd: disconnect device [ 629.188199][ T4400] vhci_hcd: stop threads [ 629.192671][ T4400] vhci_hcd: release socket [ 629.197978][ T4400] vhci_hcd: disconnect device [ 629.238076][ T4400] vhci_hcd: stop threads [ 629.245445][ T4400] vhci_hcd: release socket [ 629.251126][ T4400] vhci_hcd: disconnect device [ 629.759196][ T5436] vhci_hcd: vhci_device speed not set [ 631.042820][T10316] IPVS: stopping backup sync thread 10320 ... [ 631.121824][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'. [ 631.131787][ T5155] usb usb34-port1: attempt power cycle [ 631.778261][ T5155] usb usb34-port1: unable to enumerate USB device [ 631.778575][T10331] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 631.791803][T10331] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 631.800382][T10331] vhci_hcd vhci_hcd.0: Device attached [ 631.856836][T10331] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 631.863746][T10331] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 631.872528][T10331] vhci_hcd vhci_hcd.0: Device attached [ 631.902488][T10331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 631.956426][T10331] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 631.963506][T10331] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 631.972629][T10331] vhci_hcd vhci_hcd.0: Device attached [ 632.045368][T10340] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 632.052443][T10340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 632.062016][T10340] vhci_hcd vhci_hcd.0: Device attached [ 632.140164][T10340] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.158132][T10331] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 632.165025][T10331] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 632.173551][T10331] vhci_hcd vhci_hcd.0: Device attached [ 632.382203][T10340] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.445933][T10331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.899430][T10345] vhci_hcd: connection closed [ 632.900906][ T3737] vhci_hcd: stop threads [ 632.910923][ T3737] vhci_hcd: release socket [ 632.915629][ T3737] vhci_hcd: disconnect device [ 632.933392][T10335] vhci_hcd: connection closed [ 632.934003][T10337] vhci_hcd: connection closed [ 632.942308][T10341] vhci_hcd: connection closed [ 632.948605][T10333] vhci_hcd: connection closed [ 632.961255][ T3737] vhci_hcd: stop threads [ 632.971636][ T3737] vhci_hcd: release socket [ 632.976317][ T3737] vhci_hcd: disconnect device [ 632.992467][ T3737] vhci_hcd: stop threads [ 632.997353][ T3737] vhci_hcd: release socket [ 633.002036][ T3737] vhci_hcd: disconnect device [ 633.029085][ T3737] vhci_hcd: stop threads [ 633.033684][ T3737] vhci_hcd: release socket [ 633.038652][ T3737] vhci_hcd: disconnect device [ 633.064635][ T3737] vhci_hcd: stop threads [ 633.069753][ T3737] vhci_hcd: release socket [ 633.075269][ T3737] vhci_hcd: disconnect device [ 633.128083][ T5436] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 633.297493][ T5436] usb 1-1: Using ep0 maxpacket: 32 [ 633.320404][ T5436] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 633.329650][ T5436] usb 1-1: config 0 has no interface number 0 [ 633.373313][ T5436] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 633.384002][ T5436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.392733][ T5436] usb 1-1: Product: syz [ 633.397139][ T5436] usb 1-1: Manufacturer: syz [ 633.402408][ T5436] usb 1-1: SerialNumber: syz [ 633.501015][ T5436] usb 1-1: config 0 descriptor?? [ 633.519740][ T5436] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 633.582341][ T24] vhci_hcd: vhci_device speed not set [ 633.791870][ T5436] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 633.844483][ T5436] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 634.108566][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 634.178867][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 634.201239][ T5868] usb 1-1: USB disconnect, device number 8 [ 634.228880][ T5868] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 634.350723][ T5868] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 634.365107][ T5868] quatech2 1-1:0.51: device disconnected [ 634.948649][ T5860] usb usb42-port1: attempt power cycle [ 635.654898][ T5860] usb usb42-port1: unable to enumerate USB device [ 635.699373][T10379] loop2: detected capacity change from 0 to 4096 [ 636.298485][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 636.635102][T10399] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 636.641911][T10399] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 636.650326][T10399] vhci_hcd vhci_hcd.0: Device attached [ 636.728827][T10403] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 636.735716][T10403] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 636.744464][T10403] vhci_hcd vhci_hcd.0: Device attached [ 636.848504][ T30] audit: type=1326 audit(1754075459.836:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 636.875264][ T30] audit: type=1326 audit(1754075459.846:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 636.898926][ T30] audit: type=1326 audit(1754075459.846:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 636.927837][ T5868] vhci_hcd: vhci_device speed not set [ 636.936143][T10399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 637.015551][ T5868] usb 41-1: new full-speed USB device number 13 using vhci_hcd [ 637.052578][T10399] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 637.059479][T10399] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 637.069082][T10399] vhci_hcd vhci_hcd.0: Device attached [ 637.127973][T10403] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 637.134883][T10403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 637.143877][T10403] vhci_hcd vhci_hcd.0: Device attached [ 637.196034][T10411] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 637.203124][T10411] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 637.211752][T10411] vhci_hcd vhci_hcd.0: Device attached [ 637.230802][T10399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 637.365479][T10419] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 637.420648][T10399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 637.612976][T10409] vhci_hcd: connection closed [ 637.613619][T10407] vhci_hcd: connection closed [ 637.613656][T10404] vhci_hcd: connection closed [ 637.625282][T10413] vhci_hcd: connection closed [ 637.630918][ T4309] vhci_hcd: stop threads [ 637.640850][ T4309] vhci_hcd: release socket [ 637.642081][T10400] vhci_hcd: connection reset by peer [ 637.645604][ T4309] vhci_hcd: disconnect device [ 637.700539][ T4309] vhci_hcd: stop threads [ 637.705013][ T4309] vhci_hcd: release socket [ 637.713991][ T4309] vhci_hcd: disconnect device [ 637.753404][ T4309] vhci_hcd: stop threads [ 637.758039][ T4309] vhci_hcd: release socket [ 637.762716][ T4309] vhci_hcd: disconnect device [ 637.821212][ T4309] vhci_hcd: stop threads [ 637.825676][ T4309] vhci_hcd: release socket [ 637.831826][ T4309] vhci_hcd: disconnect device [ 637.869742][ T4309] vhci_hcd: stop threads [ 637.874431][ T4309] vhci_hcd: release socket [ 637.879885][ T4309] vhci_hcd: disconnect device [ 638.303190][T10425] loop2: detected capacity change from 0 to 4096 [ 640.150006][T10441] loop4: detected capacity change from 0 to 4096 [ 642.168189][ T5868] vhci_hcd: vhci_device speed not set [ 643.432841][T10471] loop2: detected capacity change from 0 to 4096 [ 643.920507][T10475] loop4: detected capacity change from 0 to 4096 [ 643.997774][T10475] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 644.063832][ T5860] usb usb42-port1: attempt power cycle [ 644.402762][T10475] ntfs3(loop4): ino=19, mi_enum_attr [ 644.408674][T10475] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 644.808371][ T5860] usb usb42-port1: unable to enumerate USB device [ 645.503756][ T5860] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 645.777790][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 645.791034][ T5860] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 645.815365][ T5860] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 645.825000][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.834153][ T5860] usb 1-1: Product: syz [ 645.838660][ T5860] usb 1-1: Manufacturer: syz [ 645.843527][ T5860] usb 1-1: SerialNumber: syz [ 645.900943][ T5860] usb 1-1: config 0 descriptor?? [ 645.946041][ T5860] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 645.954764][ T5860] usb 1-1: setting power ON [ 645.962519][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 646.024944][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 646.074421][ T5860] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 646.085139][ T5860] usb 1-1: media controller created [ 646.179658][T10492] dvb-usb: bulk message failed: -22 (3/0) [ 646.185979][T10492] dvb-usb: bulk message failed: -22 (37/0) [ 646.198208][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.522304][ T5860] usb 1-1: selecting invalid altsetting 6 [ 646.528974][ T5860] usb 1-1: digital interface selection failed (-22) [ 646.535909][ T5860] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 646.595455][ T5860] usb 1-1: setting power OFF [ 646.600779][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 646.606962][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 646.616776][ T5860] (NULL device *): no alternate interface [ 647.374218][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 647.459516][ T5860] usb 1-1: USB disconnect, device number 9 [ 648.531318][T10524] loop4: detected capacity change from 0 to 4096 [ 648.534373][T10528] loop2: detected capacity change from 0 to 256 [ 648.994136][T10528] FAT-fs (loop2): Directory bread(block 64) failed [ 649.001112][T10528] FAT-fs (loop2): Directory bread(block 65) failed [ 649.008301][T10528] FAT-fs (loop2): Directory bread(block 66) failed [ 649.015171][T10528] FAT-fs (loop2): Directory bread(block 67) failed [ 649.022377][T10528] FAT-fs (loop2): Directory bread(block 68) failed [ 649.029490][T10528] FAT-fs (loop2): Directory bread(block 69) failed [ 649.036514][T10528] FAT-fs (loop2): Directory bread(block 70) failed [ 649.043643][T10528] FAT-fs (loop2): Directory bread(block 71) failed [ 649.051680][T10528] FAT-fs (loop2): Directory bread(block 72) failed [ 649.058667][T10528] FAT-fs (loop2): Directory bread(block 73) failed [ 649.355809][T10532] loop0: detected capacity change from 0 to 1024 [ 649.453624][T10532] EXT4-fs: Ignoring removed orlov option [ 649.594047][T10532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.711940][ T30] audit: type=1800 audit(1754075472.716:490): pid=10532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1490" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 650.285979][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.427543][ T5860] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 650.507580][ T5868] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 650.642554][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 650.654139][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.664695][ T5860] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 650.674113][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.698303][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 650.713552][ T5860] usb 3-1: config 0 descriptor?? [ 650.768264][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.780761][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.793542][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 650.807074][ T5868] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 650.816581][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.927457][ T5868] usb 5-1: config 0 descriptor?? [ 650.981756][T10548] use of bytesused == 0 is deprecated and will be removed in the future, [ 650.992444][T10548] use the actual size instead. [ 651.071469][T10552] netlink: 'syz.3.1498': attribute type 29 has an invalid length. [ 651.090068][T10552] netlink: 'syz.3.1498': attribute type 29 has an invalid length. [ 651.226917][ T5860] konepure 0003:1E7D:2DBE.0006: unbalanced collection at end of report description [ 651.281094][ T5860] konepure 0003:1E7D:2DBE.0006: parse failed [ 651.288203][ T5860] konepure 0003:1E7D:2DBE.0006: probe with driver konepure failed with error -22 [ 651.456892][ T5868] microsoft 0003:045E:07DA.0007: reserved main item tag 0xe [ 651.464983][ T5868] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 651.483871][ T5868] microsoft 0003:045E:07DA.0007: global environment stack underflow [ 651.487001][ T5860] usb 3-1: USB disconnect, device number 8 [ 651.494333][ T5868] microsoft 0003:045E:07DA.0007: item 0 4 1 11 parsing failed [ 651.715587][ T5868] microsoft 0003:045E:07DA.0007: parse failed [ 651.722915][ T5868] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 651.759392][ T5868] usb 5-1: USB disconnect, device number 9 [ 652.421851][ T5868] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 652.674480][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 652.689845][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.700124][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 652.713607][ T5868] usb 1-1: New USB device found, idVendor=046d, idProduct=e104, bcdDevice= 0.00 [ 652.723443][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.897700][ T5868] usb 1-1: config 0 descriptor?? [ 653.353449][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 653.409640][ T5868] hid-generic 0003:046D:E104.0008: unbalanced collection at end of report description [ 653.427137][ T5868] hid-generic 0003:046D:E104.0008: probe with driver hid-generic failed with error -22 [ 653.670394][ T5860] usb 1-1: USB disconnect, device number 10 [ 653.990317][T10581] trusted_key: encrypted_key: hex blob is missing [ 654.558448][T10587] loop2: detected capacity change from 0 to 1024 [ 654.790774][T10587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.919038][T10587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1515: bg 0: block 494: padding at end of block bitmap is not set [ 654.949939][T10587] EXT4-fs (loop2): Remounting filesystem read-only [ 654.973044][T10587] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 655.184253][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.224418][T10599] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 655.273239][T10593] loop0: detected capacity change from 0 to 4096 [ 655.360714][T10599] macvlan2: entered promiscuous mode [ 655.366265][T10599] macvlan2: entered allmulticast mode [ 655.376988][T10599] bond5: entered promiscuous mode [ 655.385503][T10599] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 655.420825][T10599] bond5: left promiscuous mode [ 655.616112][T10601] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 656.742298][T10616] loop4: detected capacity change from 0 to 256 [ 656.792822][T10616] exfat: Deprecated parameter 'utf8' [ 656.799600][T10616] exfat: Deprecated parameter 'namecase' [ 656.959443][T10616] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 657.588536][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 658.005063][T10634] loop4: detected capacity change from 0 to 512 [ 658.019491][T10634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 658.078954][T10634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.092495][T10634] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.143424][T10634] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 658.656756][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.780920][T10642] IPVS: Error joining to the multicast group [ 659.083372][T10645] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 659.397591][ T5868] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 659.626881][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.637794][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 659.646997][ T5868] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 659.656596][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.826419][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'. [ 659.831558][ T5868] usb 3-1: config 0 descriptor?? [ 659.892376][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.899927][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.985659][ T5868] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 659.992802][ T5868] dvb-usb: bulk message failed: -22 (3/0) [ 660.110680][ T5868] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 660.161361][T10648] dvb-usb: bulk message failed: -22 (2/0) [ 660.177790][ T5868] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 660.185394][ T5868] usb 3-1: media controller created [ 660.254817][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.308547][ T5868] dvb-usb: bulk message failed: -22 (6/0) [ 660.316278][ T5868] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 660.402816][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 660.460380][ T5868] dvb-usb: schedule remote query interval to 150 msecs. [ 660.468283][ T5868] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 660.553589][ T5868] usb 3-1: USB disconnect, device number 9 [ 660.744311][ T5868] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 661.930162][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 662.550757][T10681] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 662.561401][T10681] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 663.539773][T10692] loop0: detected capacity change from 0 to 1024 [ 663.611063][T10692] EXT4-fs: Ignoring removed bh option [ 663.682315][T10697] loop4: detected capacity change from 0 to 256 [ 663.782523][T10692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.956679][T10692] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 663.996646][T10697] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 664.028403][T10692] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 664.253854][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 664.598173][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.595420][T10738] loop0: detected capacity change from 0 to 256 [ 666.723954][T10738] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 667.166192][T10744] netlink: 'syz.2.1575': attribute type 2 has an invalid length. [ 667.793160][T10754] loop2: detected capacity change from 0 to 8 [ 668.519560][ T5860] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 668.773963][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.784789][ T5860] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 668.798566][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.879099][ T5860] usb 1-1: config 0 descriptor?? [ 669.018510][T10771] loop2: detected capacity change from 0 to 64 [ 669.408833][ T5860] itetech 0003:258A:6A88.0009: unknown main item tag 0x0 [ 669.416268][ T5860] itetech 0003:258A:6A88.0009: unknown main item tag 0x0 [ 669.425106][ T5860] itetech 0003:258A:6A88.0009: unknown main item tag 0x0 [ 669.500609][ T5860] itetech 0003:258A:6A88.0009: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 669.609816][ T5860] usb 1-1: USB disconnect, device number 11 [ 670.080184][T10777] fido_id[10777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 670.824514][T10792] loop4: detected capacity change from 0 to 128 [ 670.930975][T10791] Driver unsupported XDP return value 0 on prog (id 150) dev N/A, expect packet loss! [ 671.536224][T10798] bio_check_eod: 301 callbacks suppressed [ 671.536313][T10798] syz.4.1595: attempt to access beyond end of device [ 671.536313][T10798] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 671.627852][T10798] syz.4.1595: attempt to access beyond end of device [ 671.627852][T10798] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 671.798269][T10798] syz.4.1595: attempt to access beyond end of device [ 671.798269][T10798] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 671.889913][T10798] syz.4.1595: attempt to access beyond end of device [ 671.889913][T10798] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 671.904140][T10798] syz.4.1595: attempt to access beyond end of device [ 671.904140][T10798] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 671.918553][T10798] syz.4.1595: attempt to access beyond end of device [ 671.918553][T10798] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 671.933360][T10798] syz.4.1595: attempt to access beyond end of device [ 671.933360][T10798] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 671.947716][T10798] syz.4.1595: attempt to access beyond end of device [ 671.947716][T10798] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 671.961833][T10798] syz.4.1595: attempt to access beyond end of device [ 671.961833][T10798] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 671.976098][T10798] syz.4.1595: attempt to access beyond end of device [ 671.976098][T10798] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 672.053137][T10803] ufs: You didn't specify the type of your ufs filesystem [ 672.053137][T10803] [ 672.053137][T10803] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 672.053137][T10803] [ 672.053137][T10803] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 672.085447][T10803] ufs: ufstype=old is supported read-only [ 672.751157][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 673.912804][T10820] loop4: detected capacity change from 0 to 2048 [ 674.099666][T10820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 675.573563][T10842] loop0: detected capacity change from 0 to 128 [ 676.549675][T10846] bio_check_eod: 159 callbacks suppressed [ 676.549765][T10846] syz.0.1614: attempt to access beyond end of device [ 676.549765][T10846] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 676.648115][T10846] syz.0.1614: attempt to access beyond end of device [ 676.648115][T10846] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 676.714908][T10846] syz.0.1614: attempt to access beyond end of device [ 676.714908][T10846] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 677.575510][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1622'. [ 680.849771][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 682.867731][ T5860] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 683.075309][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.087434][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.097859][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.111357][ T5860] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.120934][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.144020][ T5860] usb 3-1: config 0 descriptor?? [ 683.687449][ T5860] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 683.845678][ T5860] usb 3-1: USB disconnect, device number 10 [ 684.534849][T10935] fido_id[10935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 684.615301][ T5436] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 684.837868][ T5436] usb 5-1: Using ep0 maxpacket: 32 [ 684.892801][ T5436] usb 5-1: config 0 interface 0 has no altsetting 0 [ 684.960098][ T5436] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 684.969792][ T5436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.978289][ T5436] usb 5-1: Product: syz [ 684.982687][ T5436] usb 5-1: Manufacturer: syz [ 684.988780][ T5436] usb 5-1: SerialNumber: syz [ 685.075736][ T5436] usb 5-1: config 0 descriptor?? [ 685.668379][ T5436] gs_usb 5-1:0.0: Configuring for 228 interfaces [ 685.675107][ T5436] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 685.683588][ T5436] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 685.908377][ T5436] usb 5-1: USB disconnect, device number 10 [ 686.270373][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1665'. [ 687.286496][T10976] overlayfs: conflicting options: nfs_export=on,index=off [ 688.827928][ T5860] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 689.021409][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.033228][ T5860] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 689.043199][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.091819][ T5860] usb 1-1: config 0 descriptor?? [ 689.612180][ T5860] smartjoyplus 0003:6666:8804.000B: item fetching failed at offset 2/5 [ 689.643188][ T5860] smartjoyplus 0003:6666:8804.000B: parse failed [ 689.651393][ T5860] smartjoyplus 0003:6666:8804.000B: probe with driver smartjoyplus failed with error -22 [ 689.699256][T11007] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 689.711278][T11008] IPVS: stopping backup sync thread 11007 ... [ 689.757771][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 689.813825][ T5436] usb 1-1: USB disconnect, device number 12 [ 690.491218][T11015] loop2: detected capacity change from 0 to 1024 [ 690.614993][T11015] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 690.660402][ T5436] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 690.688000][T11015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.701164][T11015] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.849224][ T5436] usb 5-1: Using ep0 maxpacket: 8 [ 690.898802][ T5436] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 690.908573][ T5436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.916816][ T5436] usb 5-1: Product: syz [ 690.921584][ T5436] usb 5-1: Manufacturer: syz [ 690.926530][ T5436] usb 5-1: SerialNumber: syz [ 690.978426][ T5436] usb 5-1: config 0 descriptor?? [ 691.059098][ T5436] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 691.068086][ T5436] usb 5-1: setting power ON [ 691.072804][ T5436] dvb-usb: bulk message failed: -22 (2/0) [ 691.168302][ T5436] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 691.252653][T11013] dvb-usb: bulk message failed: -22 (3/0) [ 691.259089][T11013] dvb-usb: bulk message failed: -22 (4/0) [ 691.265177][T11013] cxusb: i2c read failed [ 691.272075][ T5436] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 691.280948][ T5436] usb 5-1: media controller created [ 691.411954][ T5436] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 691.434035][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.553915][ T5436] usb 5-1: selecting invalid altsetting 6 [ 691.560272][ T5436] usb 5-1: digital interface selection failed (-22) [ 691.567429][ T5436] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 691.839827][ T5436] usb 5-1: setting power OFF [ 691.844681][ T5436] dvb-usb: bulk message failed: -22 (2/0) [ 691.856606][ T5436] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 691.870217][ T5436] (NULL device *): no alternate interface [ 692.057805][ T5868] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 692.298130][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.310591][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.321164][ T5868] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 692.330969][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.440812][ T5436] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 692.475856][ T5868] usb 1-1: config 0 descriptor?? [ 692.563531][ T5436] usb 5-1: USB disconnect, device number 11 [ 692.948166][ T5436] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 693.008368][ T5868] razer 0003:1532:010E.000C: unknown main item tag 0x3 [ 693.156871][ T5436] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.165606][ T5436] usb 5-1: config 0 has no interface number 0 [ 693.172704][ T5436] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 693.183309][ T5436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.244100][ T5868] razer 0003:1532:010E.000C: failed to enable macro keys: -71 [ 693.288582][ T5868] razer 0003:1532:010E.000C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 693.351042][ T5436] usb 5-1: config 0 descriptor?? [ 693.391221][ T5436] usb 5-1: selecting invalid altsetting 1 [ 693.397999][ T5436] dvb_ttusb_budget: ttusb_init_controller: error [ 693.404548][ T5436] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 693.429388][ T5868] usb 1-1: USB disconnect, device number 13 [ 693.956291][T11050] xt_limit: Overflow, try lower: 604147548/4200216962 [ 694.089290][ T5436] DVB: Unable to find symbol cx22700_attach() [ 694.228593][T11046] fido_id[11046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 694.455981][T11054] loop0: detected capacity change from 0 to 128 [ 694.535279][ T5436] DVB: Unable to find symbol tda10046_attach() [ 694.542541][ T5436] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 694.644354][ T5436] usb 5-1: USB disconnect, device number 12 [ 694.968793][T11058] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 695.325807][T11064] syz.0.1698: attempt to access beyond end of device [ 695.325807][T11064] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 695.458671][T11064] syz.0.1698: attempt to access beyond end of device [ 695.458671][T11064] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 695.473168][T11064] syz.0.1698: attempt to access beyond end of device [ 695.473168][T11064] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 695.487884][T11064] syz.0.1698: attempt to access beyond end of device [ 695.487884][T11064] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 695.501999][T11064] syz.0.1698: attempt to access beyond end of device [ 695.501999][T11064] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 695.516454][T11064] syz.0.1698: attempt to access beyond end of device [ 695.516454][T11064] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 695.531179][T11064] syz.0.1698: attempt to access beyond end of device [ 695.531179][T11064] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 695.546744][T11064] syz.0.1698: attempt to access beyond end of device [ 695.546744][T11064] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 695.561272][T11064] syz.0.1698: attempt to access beyond end of device [ 695.561272][T11064] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 695.575525][T11064] syz.0.1698: attempt to access beyond end of device [ 695.575525][T11064] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 696.099408][T11065] loop2: detected capacity change from 0 to 4096 [ 696.193851][T11065] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 696.223671][T11065] ntfs3(loop2): It is recommened to use chkdsk. [ 696.578686][T11065] ntfs3(loop2): ino=1b, "file0" ntfs_readdir [ 697.469058][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 698.512961][T11103] loop4: detected capacity change from 0 to 128 [ 698.745888][T11106] loop0: detected capacity change from 0 to 64 [ 698.809895][T11108] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 699.031311][T11108] macvlan2: entered promiscuous mode [ 699.036891][T11108] macvlan2: entered allmulticast mode [ 699.157124][T11108] bond5: entered promiscuous mode [ 699.165853][T11108] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 699.317889][T11108] bond5: left promiscuous mode [ 700.186737][T11121] tipc: Enabling of bearer rejected, failed to enable media [ 700.224407][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 700.943093][ T30] audit: type=1800 audit(1754075523.956:491): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1726" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 701.023586][T11130] loop0: detected capacity change from 0 to 16 [ 701.081694][T11130] erofs (device loop0): mounted with root inode @ nid 36. [ 701.197824][T11130] erofs (device loop0): readahead error at folio 6 @ nid 36 [ 701.206376][T11130] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 701.214886][T11130] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 701.222723][T11130] erofs (device loop0): readahead error at folio 0 @ nid 36 [ 701.230955][T11130] bio_check_eod: 374 callbacks suppressed [ 701.231043][T11130] syz.0.1727: attempt to access beyond end of device [ 701.231043][T11130] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 701.251712][T11130] syz.0.1727: attempt to access beyond end of device [ 701.251712][T11130] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 701.266525][T11130] syz.0.1727: attempt to access beyond end of device [ 701.266525][T11130] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 701.281994][T11130] syz.0.1727: attempt to access beyond end of device [ 701.281994][T11130] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 701.296727][T11130] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 701.304647][T11130] syz.0.1727: attempt to access beyond end of device [ 701.304647][T11130] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 701.318624][T11130] erofs (device loop0): read error -5 @ 0 of nid 36 [ 701.325507][T11130] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 701.517515][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 702.328345][T11144] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 702.504112][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 702.587424][T11144] macvlan2: entered promiscuous mode [ 702.592975][T11144] macvlan2: entered allmulticast mode [ 702.604232][T11144] bond5: entered promiscuous mode [ 702.612795][T11144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 702.693832][T11144] bond5: left promiscuous mode [ 703.045956][T11157] loop0: detected capacity change from 0 to 512 [ 703.170641][T11157] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1736: invalid indirect mapped block 4294967295 (level 1) [ 703.209449][T11157] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1736: invalid indirect mapped block 4294967295 (level 1) [ 703.256673][T11157] EXT4-fs (loop0): 2 truncates cleaned up [ 703.265941][T11157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.617733][ T30] audit: type=1326 audit(1754075526.626:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 703.641873][ T30] audit: type=1326 audit(1754075526.626:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 703.665047][ T30] audit: type=1326 audit(1754075526.666:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 703.687932][ T30] audit: type=1326 audit(1754075526.666:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 703.711121][ T30] audit: type=1326 audit(1754075526.666:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 703.721935][T11162] loop4: detected capacity change from 0 to 512 [ 703.735054][ T30] audit: type=1326 audit(1754075526.686:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 703.763826][ T30] audit: type=1326 audit(1754075526.736:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 703.942234][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.119050][T11162] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1738: corrupted inode contents [ 704.178646][T11162] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1738: mark_inode_dirty error [ 704.259818][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1742'. [ 704.271026][T11162] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1738: corrupted inode contents [ 704.324942][T11162] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1738: mark_inode_dirty error [ 704.390178][T11162] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1738: corrupted inode contents [ 704.410611][T11162] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 704.421268][T11162] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1738: corrupted inode contents [ 704.457745][T11162] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1738: mark_inode_dirty error [ 704.472050][T11162] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 704.533863][T11162] EXT4-fs (loop4): 1 truncate cleaned up [ 704.542404][T11162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.556486][T11162] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.571875][ T4309] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 704.582686][ T4309] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 704.926862][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.411403][T11184] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1746'. [ 705.421239][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 707.441085][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 708.580560][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1757'. [ 709.452429][T11214] loop4: detected capacity change from 0 to 1024 [ 709.628682][ T30] audit: type=1326 audit(1754075532.646:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.2.1758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 709.754075][T11219] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1761'. [ 709.814880][T11218] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1761'. [ 710.321895][ T30] audit: type=1326 audit(1754075533.316:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.345053][ T30] audit: type=1326 audit(1754075533.356:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.531597][ T30] audit: type=1326 audit(1754075533.406:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.556163][ T30] audit: type=1326 audit(1754075533.416:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.581644][ T30] audit: type=1326 audit(1754075533.416:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.605098][ T30] audit: type=1326 audit(1754075533.476:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.607535][ T5436] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 710.629502][ T30] audit: type=1326 audit(2000000000.000:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.658671][ T30] audit: type=1326 audit(2000000000.000:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 710.930818][ T5436] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.939853][ T5436] usb 3-1: config 0 has no interface number 0 [ 710.946244][ T5436] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 710.956084][ T5436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.019769][ T5436] usb 3-1: config 0 descriptor?? [ 711.057839][ T5436] usb 3-1: selecting invalid altsetting 1 [ 711.064567][ T5436] dvb_ttusb_budget: ttusb_init_controller: error [ 711.072896][ T5436] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 711.624862][ T5436] DVB: Unable to find symbol cx22700_attach() [ 711.643689][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'. [ 711.828622][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'. [ 712.071709][ T5436] DVB: Unable to find symbol tda10046_attach() [ 712.078497][ T5436] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 712.158149][ T5436] usb 3-1: USB disconnect, device number 11 [ 712.427792][ T5868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 712.496286][T11250] loop2: detected capacity change from 0 to 128 [ 712.670361][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.681997][ T5868] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 712.691763][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.781065][ T5868] usb 5-1: config 0 descriptor?? [ 712.856294][ T5868] usb 5-1: bad CDC descriptors [ 713.083987][ T5868] usb 5-1: USB disconnect, device number 13 [ 713.344985][T11259] loop0: detected capacity change from 0 to 128 [ 713.500150][T11260] loop2: detected capacity change from 0 to 1024 [ 713.550713][T11260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 713.754396][T11260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.288233][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.364165][T11273] vxcan0: tx address claim with dest, not broadcast [ 714.792963][T11275] netlink: 'syz.2.1785': attribute type 1 has an invalid length. [ 714.955842][T11275] macvlan2: entered promiscuous mode [ 714.961702][T11275] macvlan2: entered allmulticast mode [ 714.972063][T11275] bond6: entered promiscuous mode [ 714.980718][T11275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 715.040107][T11275] bond6: left promiscuous mode [ 715.099428][T11280] loop0: detected capacity change from 0 to 256 [ 717.078480][T11303] loop2: detected capacity change from 0 to 512 [ 717.183423][T11303] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 717.288910][T11303] EXT4-fs (loop2): 1 truncate cleaned up [ 717.297934][T11303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.418402][T11310] loop4: detected capacity change from 0 to 128 [ 717.485603][T11310] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 717.488530][T11312] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 717.610537][T11316] loop0: detected capacity change from 0 to 512 [ 717.624739][T11310] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 717.769969][T11312] macvlan2: entered promiscuous mode [ 717.775595][T11312] macvlan2: entered allmulticast mode [ 717.786268][T11312] bond6: entered promiscuous mode [ 717.795185][T11312] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 717.910604][T11316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.924076][T11316] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.963908][T11312] bond6: left promiscuous mode [ 717.986381][ T5822] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 718.020767][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.463153][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.856021][T11341] loop2: detected capacity change from 0 to 128 [ 719.954309][T11341] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 720.062193][T11341] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 720.226880][T11346] loop0: detected capacity change from 0 to 512 [ 720.270251][T11341] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz.2.1810: No space for directory leaf checksum. Please run e2fsck -D. [ 720.287399][T11341] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #11: comm syz.2.1810: checksumming directory block 0 [ 720.366085][T11346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.539062][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.804830][ T5817] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 720.960140][T11359] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 721.248938][T11363] macvlan2: entered promiscuous mode [ 721.254486][T11363] macvlan2: entered allmulticast mode [ 721.265097][T11363] bond8: entered promiscuous mode [ 721.281808][T11363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 721.329890][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.336855][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.465722][T11363] bond8: left promiscuous mode [ 721.796100][T11367] bridge_slave_0: left allmulticast mode [ 721.802409][T11367] bridge_slave_0: left promiscuous mode [ 721.809577][T11367] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.922536][T11367] bridge_slave_1: left allmulticast mode [ 721.928833][T11367] bridge_slave_1: left promiscuous mode [ 721.935879][T11367] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.049657][T11367] bond0: (slave bond_slave_0): Releasing backup interface [ 722.190756][T11367] bond0: (slave bond_slave_1): Releasing backup interface [ 722.270548][T11367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.278566][T11367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.453367][T11376] loop0: detected capacity change from 0 to 128 [ 722.485179][T11367] bond2: (slave gretap1): Releasing active interface [ 722.612399][T11376] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 722.640702][T11376] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 723.290953][ T5806] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 724.318678][T11400] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 724.338409][T11390] loop0: detected capacity change from 0 to 4096 [ 724.494553][T11404] macvlan2: entered promiscuous mode [ 724.500304][T11404] macvlan2: entered allmulticast mode [ 724.506948][T11390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.511250][T11404] bond7: entered promiscuous mode [ 724.533601][T11404] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 724.575716][T11404] bond7: left promiscuous mode [ 724.584067][T11390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1829: corrupted inode contents [ 724.662126][T11390] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.1829: mark_inode_dirty error [ 724.722087][T11390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1829: corrupted inode contents [ 724.767924][T11390] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.1829: mark_inode_dirty error [ 724.833642][T11390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1829: corrupted inode contents [ 724.895561][T11390] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.1829: mark_inode_dirty error [ 724.941219][T11390] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1829: corrupted inode contents [ 725.048353][T11390] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.1829: mark_inode_dirty error [ 725.117594][T11390] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 725.505135][T11390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.230761][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 726.241507][T11427] netlink: 'syz.2.1844': attribute type 5 has an invalid length. [ 727.212450][T11444] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 727.335306][T11448] macvlan2: entered promiscuous mode [ 727.341217][T11448] macvlan2: entered allmulticast mode [ 727.352529][T11448] bond9: entered promiscuous mode [ 727.361134][T11448] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 727.456363][T11448] bond9: left promiscuous mode [ 727.705828][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1853'. [ 729.996724][T11486] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 730.260113][T11490] macvlan2: entered promiscuous mode [ 730.265837][T11490] macvlan2: entered allmulticast mode [ 730.276311][T11490] bond8: entered promiscuous mode [ 730.284810][T11490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 730.497402][T11490] bond8: left promiscuous mode [ 730.755865][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'. [ 731.457673][ T5860] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 731.688420][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 731.742854][ T5860] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 731.752093][ T5860] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.763629][ T5860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.850306][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 731.959770][ T5860] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.969449][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.977862][ T5860] usb 5-1: Product: syz [ 731.982257][ T5860] usb 5-1: Manufacturer: syz [ 731.986998][ T5860] usb 5-1: SerialNumber: syz [ 732.579689][ T5860] usb 5-1: 0:2 : does not exist [ 733.148639][ T5860] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 734.050367][ T5860] usb 5-1: USB disconnect, device number 14 [ 735.009684][T11537] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 735.064343][T11538] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 735.274008][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.739016][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 736.492670][T11538] macvlan2: entered promiscuous mode [ 736.499167][T11538] macvlan2: entered allmulticast mode [ 736.510228][T11538] bond6: entered promiscuous mode [ 736.518999][T11538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 736.653464][T11538] bond6: left promiscuous mode [ 737.338106][ T5868] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 737.364843][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 737.569488][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 737.629200][ T5868] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 737.639103][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.691682][ T5868] usb 3-1: config 0 descriptor?? [ 737.966964][ T5868] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 738.005410][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 738.068665][ T5868] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 738.076253][ T5868] usb 3-1: media controller created [ 738.271994][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 738.691015][ T5868] az6027: usb out operation failed. (-71) [ 738.719140][ T5868] az6027: usb out operation failed. (-71) [ 738.725101][ T5868] stb0899_attach: Driver disabled by Kconfig [ 738.731962][ T5868] az6027: no front-end attached [ 738.731962][ T5868] [ 738.821396][ T5868] az6027: usb out operation failed. (-71) [ 738.829367][ T5868] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 738.840801][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 738.957078][ T5868] dvb-usb: schedule remote query interval to 400 msecs. [ 738.964815][ T5868] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 739.063664][ T5868] usb 3-1: USB disconnect, device number 12 [ 739.394458][T11585] loop2: detected capacity change from 0 to 16 [ 739.493571][ T5868] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 739.578341][T11585] erofs (device loop2): mounted with root inode @ nid 36. [ 739.748917][T11587] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 739.875483][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 739.926900][T11589] netlink: 'syz.3.1901': attribute type 12 has an invalid length. [ 740.096058][T11587] macvlan2: entered promiscuous mode [ 740.101829][T11587] macvlan2: entered allmulticast mode [ 740.114945][T11587] bond9: entered promiscuous mode [ 740.123891][T11587] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 740.215102][T11587] bond9: left promiscuous mode [ 740.377426][ C1] hrtimer: interrupt took 294489 ns [ 741.627863][ T5868] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 741.863168][ T5868] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 741.872555][ T5868] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 741.882021][ T5868] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 741.892793][ T5868] usb 1-1: config 220 has no interface number 2 [ 741.899659][ T5868] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 741.916436][ T5868] usb 1-1: config 220 interface 0 has no altsetting 0 [ 741.924460][ T5868] usb 1-1: config 220 interface 76 has no altsetting 0 [ 741.924693][T11620] loop4: detected capacity change from 0 to 512 [ 741.931919][ T5868] usb 1-1: config 220 interface 1 has no altsetting 0 [ 742.029176][ T5868] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 742.039314][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.047893][ T5868] usb 1-1: Product: syz [ 742.052301][ T5868] usb 1-1: Manufacturer: syz [ 742.057124][ T5868] usb 1-1: SerialNumber: syz [ 742.129612][T11620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.143297][T11620] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.315424][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.437824][ T5868] usb 1-1: selecting invalid altsetting 0 [ 742.444445][ T5868] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 742.451564][ T5868] usb 1-1: No valid video chain found. [ 742.505243][ T5868] usb 1-1: selecting invalid altsetting 0 [ 742.511954][ T5868] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 742.593810][ T5868] usb 1-1: USB disconnect, device number 14 [ 742.853735][T11631] loop4: detected capacity change from 0 to 1024 [ 742.889018][T11634] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 743.146332][ T30] audit: type=1800 audit(2000000032.660:508): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1916" name="file1" dev="loop4" ino=3 res=0 errno=0 [ 743.349756][T11634] macvlan2: entered promiscuous mode [ 743.355333][T11634] macvlan2: entered allmulticast mode [ 743.366971][T11634] bond4: entered promiscuous mode [ 743.375660][T11634] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 743.483757][T11634] bond4: left promiscuous mode [ 743.614030][ T3682] hfsplus: bad catalog file entry [ 743.644920][ T3682] hfsplus: b-tree write err: -5, ino 3 [ 744.054517][T11647] loop6: detected capacity change from 0 to 63 [ 744.121201][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.129732][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.138383][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.146710][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.155089][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.163438][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.172939][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.182038][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.190278][T11647] ldm_validate_partition_table(): Disk read failed. [ 744.197675][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.205825][T11647] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.214493][T11647] Dev loop6: unable to read RDB block 0 [ 744.221129][T11647] loop6: unable to read partition table [ 744.324925][T11647] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 746.102852][T11681] netlink: 'syz.2.1936': attribute type 1 has an invalid length. [ 746.244443][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1936'. [ 746.307594][ T5868] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 746.419465][T11681] macvlan2: entered promiscuous mode [ 746.425036][T11681] macvlan2: entered allmulticast mode [ 746.436338][T11681] bond7: entered promiscuous mode [ 746.444884][T11681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 746.480578][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 746.492755][T11681] bond7: left promiscuous mode [ 746.527895][ T5868] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 746.536828][ T5868] usb 1-1: config 0 has no interface number 0 [ 746.594316][ T5868] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 746.605914][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.614895][ T5868] usb 1-1: Product: syz [ 746.619515][ T5868] usb 1-1: Manufacturer: syz [ 746.624347][ T5868] usb 1-1: SerialNumber: syz [ 746.656833][ T5868] usb 1-1: config 0 descriptor?? [ 746.675712][ T5868] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 746.685129][ T5868] usb 1-1: selecting invalid altsetting 1 [ 746.691701][ T5868] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 746.803339][ T5868] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 746.815893][ T5868] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 746.824745][ T5868] usb 1-1: media controller created [ 746.970797][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 747.507650][ T5860] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 747.687856][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 747.714037][ T5860] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 747.723031][ T5860] usb 3-1: config 0 has no interface number 0 [ 747.729894][ T5860] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.741217][ T5860] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.752003][ T5860] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 747.762226][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.902814][ T5860] usb 3-1: config 0 descriptor?? [ 748.086151][T11680] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 748.124498][ T5868] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 748.132117][ T5868] zl10353_read_register: readreg error (reg=127, ret==-32) [ 748.590081][ T5860] uclogic 0003:28BD:0071.000D: pen parameters not found [ 748.598342][ T5860] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 748.640212][ T5868] usb 1-1: USB disconnect, device number 15 [ 748.693556][ T5860] usb 3-1: USB disconnect, device number 13 [ 748.859130][T11702] loop4: detected capacity change from 0 to 512 [ 749.029231][T11702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.042643][T11702] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.641169][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.348656][T11729] netlink: 'syz.1.1953': attribute type 83 has an invalid length. [ 750.488981][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 750.729415][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 751.342697][T11746] netlink: 'syz.4.1961': attribute type 1 has an invalid length. [ 751.411651][T11749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 751.568750][T11750] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 751.733248][T11749] macvlan2: entered promiscuous mode [ 751.739060][T11749] macvlan2: entered allmulticast mode [ 751.749805][T11749] bond7: entered promiscuous mode [ 751.759162][T11749] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 751.813184][T11749] bond7: left promiscuous mode [ 751.934963][T11750] macvlan2: entered promiscuous mode [ 751.943156][T11750] macvlan2: entered allmulticast mode [ 751.954089][T11750] bond10: entered promiscuous mode [ 751.963472][T11750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 752.008122][T11750] bond10: left promiscuous mode [ 752.039775][ T5868] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 752.227655][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 752.281250][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.292719][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.307117][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 752.323883][ T5868] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 752.333358][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.519738][ T5868] usb 3-1: config 0 descriptor?? [ 753.069947][ T5868] ryos 0003:1E7D:31CE.000E: bogus close delimiter [ 753.076658][ T5868] ryos 0003:1E7D:31CE.000E: item 0 4 2 10 parsing failed [ 753.142584][ T5868] ryos 0003:1E7D:31CE.000E: parse failed [ 753.148997][ T5868] ryos 0003:1E7D:31CE.000E: probe with driver ryos failed with error -22 [ 753.239933][ T5868] usb 3-1: USB disconnect, device number 14 [ 753.871819][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1974'. [ 753.900514][T11783] loop2: detected capacity change from 0 to 7 [ 753.928924][T11783] Dev loop2: unable to read RDB block 7 [ 753.934848][T11783] loop2: AHDI p1 p2 p3 [ 753.939583][T11783] loop2: partition table partially beyond EOD, truncated [ 753.948858][T11783] loop2: p1 start 1601398130 is beyond EOD, truncated [ 753.955911][T11783] loop2: p2 start 1702059890 is beyond EOD, truncated [ 754.638076][T11794] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 755.074806][T11799] macvlan2: entered promiscuous mode [ 755.080654][T11799] macvlan2: entered allmulticast mode [ 755.091084][T11799] bond5: entered promiscuous mode [ 755.099542][T11799] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 755.282245][T11799] bond5: left promiscuous mode [ 755.667542][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 756.877090][T11829] overlay: ./file0 is not a directory [ 756.978735][ T5155] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 757.171066][ T5155] usb 5-1: Using ep0 maxpacket: 32 [ 757.205538][ T5155] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.216551][ T5155] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 757.226983][ T5155] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 757.240893][ T5155] usb 5-1: config 0 interface 0 has no altsetting 0 [ 757.247957][ T5155] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 757.257551][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.275843][ T5155] usb 5-1: config 0 descriptor?? [ 757.712362][ T5155] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 757.720896][ T5155] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 757.729458][ T5155] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 757.737809][ T5155] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 757.746034][ T5155] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 757.782358][T11834] vlan2: entered promiscuous mode [ 757.787972][T11834] macvlan1: entered promiscuous mode [ 757.895073][ T5155] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 757.910405][ T5155] hid-thrustmaster 0003:044F:B65D.000F: Unexpected non-int endpoint [ 757.928980][ C1] hid-thrustmaster 0003:044F:B65D.000F: URB to get model id failed with error -71 [ 758.051886][ T30] audit: type=1326 audit(2000000047.580:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.0.1998" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 758.059847][ T5155] usb 5-1: USB disconnect, device number 15 [ 758.754975][T11841] fido_id[11841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 758.848926][ T5810] block nbd0: Receive control failed (result -32) [ 759.436737][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2003'. [ 760.742511][T11871] netlink: 'syz.0.2010': attribute type 29 has an invalid length. [ 760.761154][T11871] netlink: 'syz.0.2010': attribute type 29 has an invalid length. [ 760.805293][T11871] netlink: 'syz.0.2010': attribute type 29 has an invalid length. [ 762.135935][T11882] loop2: detected capacity change from 0 to 4096 [ 762.289692][ T5155] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 762.340861][T11882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.465457][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 762.513393][ T5155] usb 1-1: config 0 interface 0 has no altsetting 0 [ 762.607579][ T5155] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 762.617587][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.625949][ T5155] usb 1-1: Product: syz [ 762.631980][ T5155] usb 1-1: Manufacturer: syz [ 762.636814][ T5155] usb 1-1: SerialNumber: syz [ 762.743784][ T5155] usb 1-1: config 0 descriptor?? [ 763.108312][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.247933][ T5155] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 763.464413][ T5155] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 763.473946][ T5155] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 763.697988][ T5868] usb 1-1: USB disconnect, device number 16 [ 764.141157][ T5155] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 764.349054][ T5155] usb 5-1: Using ep0 maxpacket: 32 [ 764.429062][ T5155] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 764.438678][ T5155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.447025][ T5155] usb 5-1: Product: syz [ 764.452349][ T5155] usb 5-1: Manufacturer: syz [ 764.457447][ T5155] usb 5-1: SerialNumber: syz [ 764.590886][ T5155] usb 5-1: config 0 descriptor?? [ 764.653937][ T5155] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 765.508171][ T5155] gspca_ov534_9: reg_w failed -71 [ 765.807701][ T5155] gspca_ov534_9: Unknown sensor 0000 [ 765.808092][ T5155] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 765.925846][ T5155] usb 5-1: USB disconnect, device number 16 [ 767.859463][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 768.969375][T11966] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2047'. [ 769.210471][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'. [ 769.834861][T11976] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 770.011579][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 770.050825][T11976] macvlan2: entered promiscuous mode [ 770.056557][T11976] macvlan2: entered allmulticast mode [ 770.068228][T11976] bond8: entered promiscuous mode [ 770.076480][T11976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 770.247750][T11976] bond8: left promiscuous mode [ 771.318733][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 772.731331][T12015] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 773.166524][T12015] macvlan2: entered promiscuous mode [ 773.172417][T12015] macvlan2: entered allmulticast mode [ 773.183026][T12015] bond11: entered promiscuous mode [ 773.191919][T12015] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 773.259128][T12015] bond11: left promiscuous mode [ 775.231935][ T30] audit: type=1326 audit(2000000064.760:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 775.255166][ T30] audit: type=1326 audit(2000000064.760:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 775.277976][ T30] audit: type=1326 audit(2000000064.800:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 775.300594][ T30] audit: type=1326 audit(2000000064.800:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 775.360064][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 775.399069][ T30] audit: type=1326 audit(2000000064.890:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 776.124782][T12057] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 776.439537][T12059] macvlan2: entered promiscuous mode [ 776.445260][T12059] macvlan2: entered allmulticast mode [ 776.455935][T12059] bond11: entered promiscuous mode [ 776.464739][T12059] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 776.613289][T12059] bond11: left promiscuous mode [ 776.917407][T12068] loop4: detected capacity change from 0 to 64 [ 777.510225][T12072] batman_adv: batadv0: Interface deactivated: macvtap0 [ 777.517846][T12072] batman_adv: batadv0: Removing interface: macvtap0 [ 777.838709][ T5868] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 778.020328][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 778.068675][ T5868] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 778.079526][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 778.091612][ T5868] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 778.103412][ T5868] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 778.117040][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 778.197637][ T5868] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 778.207834][ T5868] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 778.216530][ T5868] usb 3-1: Product: syz [ 778.221120][ T5868] usb 3-1: Manufacturer: syz [ 778.225982][ T5868] usb 3-1: SerialNumber: syz [ 778.272820][ T5868] usb 3-1: config 0 descriptor?? [ 778.301974][ T5868] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 778.451890][ T5868] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 779.165431][ T5868] usb 3-1: USB disconnect, device number 15 [ 779.218899][ T5868] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 779.695198][T12095] geneve2: entered promiscuous mode [ 779.701470][T12095] geneve2: entered allmulticast mode [ 780.108032][T12099] netlink: 'syz.0.2099': attribute type 1 has an invalid length. [ 780.211928][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 780.222411][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 780.232252][T12101] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 780.467989][T12099] macvlan2: entered promiscuous mode [ 780.473543][T12099] macvlan2: entered allmulticast mode [ 780.484408][T12099] bond12: entered promiscuous mode [ 780.492979][T12099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 780.555757][T12099] bond12: left promiscuous mode [ 780.769497][T12105] macvlan2: entered promiscuous mode [ 780.775133][T12105] macvlan2: entered allmulticast mode [ 780.785754][T12105] bond12: entered promiscuous mode [ 780.794411][T12105] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 780.917596][T12105] bond12: left promiscuous mode [ 781.153614][T12111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2103'. [ 782.731471][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.738601][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.975656][T12137] netlink: 'syz.0.2114': attribute type 1 has an invalid length. [ 783.111728][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 783.123096][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 783.326962][T12137] macvlan2: entered promiscuous mode [ 783.332652][T12137] macvlan2: entered allmulticast mode [ 783.343214][T12137] bond13: entered promiscuous mode [ 783.351736][T12137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 783.422534][T12137] bond13: left promiscuous mode [ 783.550488][T12143] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 783.855369][T12143] macvlan2: entered promiscuous mode [ 783.861065][T12143] macvlan2: entered allmulticast mode [ 783.871431][T12143] bond9: entered promiscuous mode [ 783.879959][T12143] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 783.950062][T12143] bond9: left promiscuous mode [ 785.009432][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 785.221476][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 785.234811][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 785.245077][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.332190][ T24] usb 3-1: config 0 descriptor?? [ 785.635331][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 785.684845][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.730323][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 785.738108][ T24] usb 3-1: media controller created [ 785.832174][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.865508][T12158] ===================================================== [ 785.873166][T12158] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 785.880800][T12158] _copy_to_user+0xcc/0x120 [ 785.885767][T12158] i2cdev_ioctl_smbus+0x586/0x660 [ 785.891473][T12158] compat_i2cdev_ioctl+0x48f/0xb40 [ 785.896848][T12158] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 785.902981][T12158] ia32_sys_call+0x2d5f/0x4310 [ 785.908256][T12158] __do_fast_syscall_32+0xb0/0x150 [ 785.913672][T12158] do_fast_syscall_32+0x38/0x80 [ 785.919130][T12158] do_SYSENTER_32+0x1f/0x30 [ 785.923890][T12158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.930742][T12158] [ 785.933175][T12158] Uninit was stored to memory at: [ 785.938653][T12158] __i2c_smbus_xfer+0x2561/0x2f60 [ 785.943870][T12158] i2c_smbus_xfer+0x31d/0x4d0 [ 785.949001][T12158] i2cdev_ioctl_smbus+0x4a1/0x660 [ 785.954880][T12158] compat_i2cdev_ioctl+0x48f/0xb40 [ 785.960382][T12158] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 785.966234][T12158] ia32_sys_call+0x2d5f/0x4310 [ 785.971488][T12158] __do_fast_syscall_32+0xb0/0x150 [ 785.976961][T12158] do_fast_syscall_32+0x38/0x80 [ 785.983202][T12158] do_SYSENTER_32+0x1f/0x30 [ 785.988088][T12158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.994849][T12158] [ 785.997540][T12158] Local variable msgbuf1.i created at: [ 786.003201][T12158] __i2c_smbus_xfer+0x86a/0x2f60 [ 786.008946][T12158] i2c_smbus_xfer+0x31d/0x4d0 [ 786.013824][T12158] [ 786.016354][T12158] Byte 0 of 1 is uninitialized [ 786.021661][T12158] Memory access of size 1 starts at ffff88805fcebc86 [ 786.028706][T12158] Data copied to user address 0000000080000380 [ 786.035002][T12158] [ 786.036056][T12175] netlink: 'syz.4.2128': attribute type 1 has an invalid length. [ 786.037991][T12158] CPU: 0 UID: 0 PID: 12158 Comm: syz.2.2121 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 786.058297][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.069194][T12158] ===================================================== [ 786.076275][T12158] Disabling lock debugging due to kernel taint [ 786.082809][T12158] Kernel panic - not syncing: kmsan.panic set ... [ 786.089436][T12158] CPU: 0 UID: 0 PID: 12158 Comm: syz.2.2121 Tainted: G B 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 786.103159][T12158] Tainted: [B]=BAD_PAGE [ 786.107446][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.117844][T12158] Call Trace: [ 786.121265][T12158] [ 786.124315][T12158] __dump_stack+0x26/0x30 [ 786.129048][T12158] dump_stack_lvl+0x53/0x270 [ 786.133877][T12158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 786.139935][T12158] dump_stack+0x1e/0x25 [ 786.144394][T12158] vpanic+0x361/0xbc0 [ 786.148612][T12158] panic+0x15d/0x160 [ 786.152777][T12158] kmsan_report+0x31c/0x320 [ 786.157504][T12158] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 786.164123][T12158] ? kmsan_internal_check_memory+0x1e1/0x230 [ 786.170333][T12158] ? kmsan_copy_to_user+0xf1/0x190 [ 786.175685][T12158] ? _copy_to_user+0xcc/0x120 [ 786.180609][T12158] ? i2cdev_ioctl_smbus+0x586/0x660 [ 786.186220][T12158] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 786.191846][T12158] ? __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 786.197829][T12158] ? ia32_sys_call+0x2d5f/0x4310 [ 786.202986][T12158] ? __do_fast_syscall_32+0xb0/0x150 [ 786.208551][T12158] ? do_fast_syscall_32+0x38/0x80 [ 786.213867][T12158] ? do_SYSENTER_32+0x1f/0x30 [ 786.218812][T12158] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 786.225683][T12158] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 786.231375][T12158] ? __i2c_transfer+0x11cd/0x3110 [ 786.236775][T12158] ? kmsan_get_metadata+0xfb/0x160 [ 786.242142][T12158] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 786.248797][T12158] ? kmsan_get_metadata+0xfb/0x160 [ 786.254152][T12158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 786.260212][T12158] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 786.265639][T12158] ? kmsan_get_metadata+0xfb/0x160 [ 786.270997][T12158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 786.277068][T12158] kmsan_internal_check_memory+0x1e1/0x230 [ 786.283132][T12158] kmsan_copy_to_user+0xf1/0x190 [ 786.288418][T12158] _copy_to_user+0xcc/0x120 [ 786.293267][T12158] i2cdev_ioctl_smbus+0x586/0x660 [ 786.298658][T12158] compat_i2cdev_ioctl+0x48f/0xb40 [ 786.304071][T12158] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 786.310058][T12158] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 786.315887][T12158] ? kmsan_get_metadata+0xfb/0x160 [ 786.321240][T12158] ? kmsan_get_metadata+0xfb/0x160 [ 786.326618][T12158] ia32_sys_call+0x2d5f/0x4310 [ 786.331621][T12158] __do_fast_syscall_32+0xb0/0x150 [ 786.337068][T12158] do_fast_syscall_32+0x38/0x80 [ 786.342225][T12158] do_SYSENTER_32+0x1f/0x30 [ 786.347012][T12158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 786.353596][T12158] RIP: 0023:0xf7fe3539 [ 786.357832][T12158] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 786.378226][T12158] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 786.387038][T12158] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 786.395317][T12158] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 786.403467][T12158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 786.411704][T12158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 786.420122][T12158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 786.428318][T12158] [ 786.431931][T12158] Kernel Offset: disabled [ 786.436350][T12158] Rebooting in 86400 seconds..