last executing test programs: 4m45.778471816s ago: executing program 0 (id=3426): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn=']) 4m45.310207085s ago: executing program 0 (id=3427): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003880)=[{0x0}, {&(0x7f0000002580)='U', 0x1}], 0x2}, 0x80) 4m44.637010872s ago: executing program 0 (id=3430): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) 4m44.077686308s ago: executing program 0 (id=3433): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x80, &(0x7f0000000000)={[{@nodecompose}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "d48258bc"}}, {@part={'part', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'cp775'}}]}, 0x5, 0x712, &(0x7f0000002100)="$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") mount$afs(0x0, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000900), 0x1, &(0x7f0000000080)={[{@dyn}]}) 4m43.087370562s ago: executing program 0 (id=3441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x14, 0x1, 0x5, 0x1, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) 4m42.279031483s ago: executing program 0 (id=3444): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x1, 0x2}) 4m39.624979277s ago: executing program 32 (id=3444): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x1, 0x2}) 5.306832607s ago: executing program 4 (id=4996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4.554591253s ago: executing program 4 (id=5004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x3ffffe, {0x0, 0x0, 0x0, 0x0, 0x2e503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c811}, 0x24004000) 4.411019598s ago: executing program 1 (id=5005): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'bond0\x00', @ifru_names='bond0\x00'}) 4.058313958s ago: executing program 5 (id=5006): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') write$khugepaged_scan(r0, &(0x7f0000000800), 0x8) 3.918626963s ago: executing program 2 (id=5007): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0}) 3.662859249s ago: executing program 1 (id=5008): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000c900000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.614558661s ago: executing program 3 (id=5009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) 3.381217909s ago: executing program 4 (id=5010): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x11, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) 3.292563832s ago: executing program 5 (id=5011): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="200000002a000b0000000000fbdbdf2507000000"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3.29232519s ago: executing program 2 (id=5012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) 2.926546065s ago: executing program 3 (id=5013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.875714222s ago: executing program 1 (id=5014): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="1800000040000511d25a35400c0002000200002037153e37", 0x18}], 0x1}, 0x10049014) 2.594833693s ago: executing program 5 (id=5015): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, 0x0) 2.555600313s ago: executing program 2 (id=5016): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x6, 0x9, 0x0, 'queue1\x00', 0x401}) 2.23405241s ago: executing program 3 (id=5017): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.007863642s ago: executing program 1 (id=5018): r0 = memfd_create(&(0x7f0000000f00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xddf\x96\x86\x1f=\xe0X\x9d\v\xa4?\xe3UG\xb6\x1c\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x0e\x00I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7\xa8\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 1 [ 1066.484938][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 1066.523922][T12640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1066.536430][T12640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1066.621372][T12640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1066.639258][T12640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.919705][T13249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3456'. [ 1068.720466][T13271] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1068.730519][T13271] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1068.739534][T13271] overlayfs: missing 'lowerdir' [ 1068.918659][T13245] chnl_net:caif_netlink_parms(): no params data found [ 1068.928587][T12640] Bluetooth: hci1: command tx timeout [ 1070.294232][T13299] batadv1: entered promiscuous mode [ 1070.700102][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.707734][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.715554][T13245] bridge_slave_0: entered allmulticast mode [ 1070.724991][T13245] bridge_slave_0: entered promiscuous mode [ 1070.919565][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.927207][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.935211][T13245] bridge_slave_1: entered allmulticast mode [ 1070.946638][T13245] bridge_slave_1: entered promiscuous mode [ 1071.152517][T12640] Bluetooth: hci1: command tx timeout [ 1071.294656][T13245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.341774][T13315] loop1: detected capacity change from 0 to 256 [ 1071.390794][T13245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.886156][T13245] team0: Port device team_slave_0 added [ 1072.055279][T13245] team0: Port device team_slave_1 added [ 1072.541014][T13245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.548394][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.575673][T13245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.734801][T13245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.745043][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.773856][T13245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.391519][T12640] Bluetooth: hci1: command tx timeout [ 1073.695659][T13245] hsr_slave_0: entered promiscuous mode [ 1073.705789][T13245] hsr_slave_1: entered promiscuous mode [ 1075.599538][T12640] Bluetooth: hci1: command tx timeout [ 1075.658070][T13245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1075.763674][T13245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1075.842781][T13245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1075.896205][T13377] netlink: 'syz.2.3499': attribute type 31 has an invalid length. [ 1075.946437][T13245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1076.565064][T13386] IPVS: length: 112 != 24 [ 1077.392433][T13245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.500449][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1077.510065][T13394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1077.562842][T13395] netlink: 'syz.1.3505': attribute type 4 has an invalid length. [ 1077.620419][T13245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.718458][ T3791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.725995][ T3791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.867821][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.875832][ T3791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.523015][T13406] loop1: detected capacity change from 0 to 164 [ 1079.021406][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1079.256243][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1079.302735][ T9] usb 2-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 1079.315837][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.435310][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1079.445342][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.453870][ T9] usb 2-1: Product: syz [ 1079.458305][ T9] usb 2-1: Manufacturer: syz [ 1079.463334][ T9] usb 2-1: SerialNumber: syz [ 1079.532646][T13419] loop2: detected capacity change from 0 to 736 [ 1079.888322][ T9] usb 2-1: 0:2 : does not exist [ 1079.970453][T13245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.972096][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1080.229570][ T9] usb 2-1: USB disconnect, device number 109 [ 1080.919133][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.816266][T13245] veth0_vlan: entered promiscuous mode [ 1082.944242][T13463] loop1: detected capacity change from 0 to 512 [ 1083.000743][T13245] veth1_vlan: entered promiscuous mode [ 1083.200608][T13463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.214407][T13463] ext4 filesystem being mounted at /694/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.309380][T13245] veth0_macvtap: entered promiscuous mode [ 1083.415433][T13245] veth1_macvtap: entered promiscuous mode [ 1083.604964][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.616267][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.628559][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.640715][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.650866][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.661640][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.671773][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.682488][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.701129][T13245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.737353][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1083.934272][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.977506][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.989815][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1084.021984][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.032957][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.043179][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.053931][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.064073][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.074923][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.085587][T13245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.097302][T13245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.113124][T13245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.163769][ T9] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1084.173881][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.182130][ T9] usb 5-1: Product: syz [ 1084.186778][ T9] usb 5-1: Manufacturer: syz [ 1084.191617][ T9] usb 5-1: SerialNumber: syz [ 1084.324924][T13245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.334451][T13245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.349432][T13245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.360099][T13245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.467554][ T9] usb 5-1: config 0 descriptor?? [ 1084.508761][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1084.635959][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1084.657325][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1084.666444][ T9] usb 5-1: media controller created [ 1084.854958][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1085.707099][ T9] DVB: Unable to find symbol tda10046_attach() [ 1085.713666][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1085.722504][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1085.958809][ T9] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1086.013757][ T9] usb 5-1: USB disconnect, device number 111 [ 1086.125638][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'. [ 1086.135076][T13500] netlink: 'syz.1.3537': attribute type 3 has an invalid length. [ 1086.451840][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1086.812703][T13509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1086.943241][T13511] netlink: 'syz.1.3541': attribute type 21 has an invalid length. [ 1086.951348][T13511] IPv6: NLM_F_CREATE should be specified when creating new route [ 1086.959727][T13511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1086.967249][T13511] IPv6: NLM_F_CREATE should be set when creating new route [ 1086.974899][T13511] IPv6: NLM_F_CREATE should be set when creating new route [ 1086.982329][T13511] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.410424][T13518] loop2: detected capacity change from 0 to 512 [ 1087.656223][T13518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.669700][T13518] ext4 filesystem being mounted at /740/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.865064][ T5847] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1088.086624][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1088.096861][ T5847] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1088.106845][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1088.117115][ T5847] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1088.127300][ T5847] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1088.136725][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.262877][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.357073][ T5847] usb 4-1: config 0 descriptor?? [ 1088.664421][ T5847] hdpvr 4-1:0.0: firmware version 0x12 dated [ 1088.871854][ T5847] hdpvr 4-1:0.0: device init failed [ 1088.880116][ T5847] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1088.976237][ T5847] usb 4-1: USB disconnect, device number 102 [ 1090.431521][T13566] loop4: detected capacity change from 0 to 512 [ 1090.655128][T13566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.668812][T13566] ext4 filesystem being mounted at /697/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.813249][ T3982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.821347][ T3982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.224460][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.254504][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.263421][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.077872][T13601] loop3: detected capacity change from 0 to 164 [ 1093.250332][T13604] cgroup: name respecified [ 1093.399950][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 1093.979033][T13615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1094.704332][T13627] netlink: 'syz.5.3579': attribute type 4 has an invalid length. [ 1094.712469][T13627] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3579'. [ 1095.114715][T13635] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3581'. [ 1095.410036][T13637] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3582'. [ 1096.043811][T13648] loop1: detected capacity change from 0 to 64 [ 1096.527333][T13657] loop4: detected capacity change from 0 to 1024 [ 1096.874139][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1096.883375][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1098.261246][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1099.817142][T13704] loop4: detected capacity change from 0 to 256 [ 1101.195375][ T5847] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1101.292967][T13728] loop5: detected capacity change from 0 to 16 [ 1101.368937][T13728] erofs (device loop5): mounted with root inode @ nid 36. [ 1101.485569][ T5847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1101.524641][ T5847] usb 5-1: config 1 has an invalid interface number: 217 but max is 1 [ 1101.537602][ T5847] usb 5-1: config 1 has no interface number 1 [ 1101.543961][ T5847] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1101.558885][ T5847] usb 5-1: too many endpoints for config 1 interface 217 altsetting 28: 212, using maximum allowed: 30 [ 1101.570507][ T5847] usb 5-1: config 1 interface 217 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 212 [ 1101.585077][ T5847] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1101.592482][ T5847] usb 5-1: config 1 interface 217 has no altsetting 0 [ 1101.895374][ T5847] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1101.907103][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.915946][ T5847] usb 5-1: Product: syz [ 1101.920601][ T5847] usb 5-1: Manufacturer: syz [ 1101.925436][ T5847] usb 5-1: SerialNumber: syz [ 1102.354820][ T5847] smsusb:smsusb_probe: board id=8, interface number 0 [ 1102.435524][ T5847] smsusb:smsusb_probe: board id=8, interface number 217 [ 1102.530567][ T5847] usb 5-1: USB disconnect, device number 112 [ 1104.533131][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1105.399354][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3640'. [ 1105.753443][T13788] netlink: 4276 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1106.116212][T13793] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3645'. [ 1106.278559][T13799] loop4: detected capacity change from 0 to 256 [ 1106.379618][T13799] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1106.741794][T13803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1106.980585][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1107.073490][T13811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1107.082836][T13811] netlink: 75 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1107.830340][T13822] openvswitch: netlink: IP tunnel dst address not specified [ 1107.893103][T13824] loop2: detected capacity change from 0 to 128 [ 1108.075073][T13824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1108.164462][T13824] ext4 filesystem being mounted at /765/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.296054][T13824] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.3656: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 1108.818124][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1109.027897][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3662'. [ 1109.669356][T13843] loop2: detected capacity change from 0 to 2048 [ 1109.947626][T13843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.041323][T13843] overlayfs: failed to resolve './bus': -2 [ 1110.292701][T13856] usb usb8: usbfs: process 13856 (syz.4.3670) did not claim interface 0 before use [ 1110.553849][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1110.863850][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1110.873359][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.882607][ T9] usb 4-1: Product: syz [ 1110.886976][ T9] usb 4-1: Manufacturer: syz [ 1110.892743][ T9] usb 4-1: SerialNumber: syz [ 1111.029025][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1111.153480][ T5848] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1111.889792][ T9] usb 4-1: USB disconnect, device number 103 [ 1111.926248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.294895][ T5848] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1112.302713][ T5848] ath9k_htc: Failed to initialize the device [ 1112.454955][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 1112.890562][T13885] openvswitch: netlink: IP tunnel dst address not specified [ 1113.511450][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1113.518115][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.524198][T13895] loop5: detected capacity change from 0 to 64 [ 1114.178417][T13905] No control pipe specified [ 1114.476527][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1114.663320][T13910] netlink: 'syz.5.3690': attribute type 1 has an invalid length. [ 1114.973645][ T9] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1115.187366][ T9] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1115.187507][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.187651][ T9] usb 5-1: Product: syz [ 1115.187837][ T9] usb 5-1: Manufacturer: syz [ 1115.187931][ T9] usb 5-1: SerialNumber: syz [ 1115.193541][ T9] usb 5-1: config 0 descriptor?? [ 1115.300141][ T9] usb 5-1: selecting invalid altsetting 3 [ 1115.329187][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 1115.338228][ T9] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1115.547194][ T9] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 1115.626376][ T9] usb 5-1: USB disconnect, device number 113 [ 1115.652963][ T6042] udevd[6042]: setting owner of /dev/bus/usb/005/113 to uid=0, gid=0 failed: No such file or directory [ 1115.988438][ T5847] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1116.242850][ T5847] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1116.253701][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.262491][ T5847] usb 4-1: Product: syz [ 1116.267015][ T5847] usb 4-1: Manufacturer: syz [ 1116.271812][ T5847] usb 4-1: SerialNumber: syz [ 1116.441353][ T5847] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1116.582630][ T5421] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1117.308912][ T5847] usb 4-1: USB disconnect, device number 104 [ 1117.444934][T13941] loop1: detected capacity change from 0 to 8 [ 1117.774761][ T5421] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1117.783829][ T5421] ath9k_htc: Failed to initialize the device [ 1117.810530][T13943] warning: `syz.5.3702' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1117.873142][ T5847] usb 4-1: ath9k_htc: USB layer deinitialized [ 1118.925836][T13959] loop3: detected capacity change from 0 to 1024 [ 1119.158416][T13959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.172987][T13959] ext4 filesystem being mounted at /752/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.363095][T13959] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1119.537833][T13959] EXT4-fs (loop3): Remounting filesystem read-only [ 1119.873859][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.878250][T13974] loop4: detected capacity change from 0 to 512 [ 1120.158958][T13974] EXT4-fs (loop4): 1 orphan inode deleted [ 1120.166986][T13974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.200446][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1120.210750][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 1120.308094][T13974] ext4 filesystem being mounted at /727/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1120.783680][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.131105][T13994] loop1: detected capacity change from 0 to 8 [ 1121.198580][T13994] process 'syz.1.3718' launched './file2' with NULL argv: empty string added [ 1121.249351][T13994] cramfs: Error -3 while decompressing! [ 1121.255161][T13994] cramfs: ffffffff952e15e8(26)->ffff888026809000(4096) [ 1121.262631][T13994] cramfs: Error -5 while decompressing! [ 1121.268402][T13994] cramfs: ffffffff952e1602(26)->ffff88805fb90000(4096) [ 1121.275755][T13994] cramfs: Error -3 while decompressing! [ 1121.282749][T13994] cramfs: ffffffff952e161c(16)->ffff888062b11000(4096) [ 1121.290037][T13994] cramfs: Error -3 while decompressing! [ 1121.296321][T13994] cramfs: ffffffff952e15e8(26)->ffff888026809000(4096) [ 1121.381580][T13997] loop2: detected capacity change from 0 to 256 [ 1123.382438][T14009] loop4: detected capacity change from 0 to 8192 [ 1123.735472][T14009] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1123.744741][T14009] FAT-fs (loop4): Filesystem has been set read-only [ 1123.755307][T14009] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1123.765857][T14009] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1124.047728][T14009] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1124.057901][T14009] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1124.106607][ T30] audit: type=1800 audit(1747241474.600:18): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3724" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 1124.984589][T14057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1126.319584][ T30] audit: type=1326 audit(1747241476.686:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.1.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1126.341998][ T30] audit: type=1326 audit(1747241476.695:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.1.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1126.506585][ T30] audit: type=1326 audit(1747241476.807:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.1.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1126.530353][ T30] audit: type=1326 audit(1747241476.807:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.1.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1126.553811][ T30] audit: type=1326 audit(1747241476.807:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.1.3745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1126.997315][T14084] loop3: detected capacity change from 0 to 1764 [ 1127.836759][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1127.846776][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1127.889218][T14098] loop4: detected capacity change from 0 to 2048 [ 1128.189113][T14098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.830282][T14112] netlink: 'syz.1.3759': attribute type 13 has an invalid length. [ 1129.160281][T14118] IPv6: NLM_F_CREATE should be specified when creating new route [ 1130.487779][T14140] loop5: detected capacity change from 0 to 256 [ 1130.684809][T14140] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010228, chksum : 0x13849709, utbl_chksum : 0xe619d30d) [ 1131.079879][T14148] netlink: 'syz.4.3772': attribute type 32 has an invalid length. [ 1131.093079][T14148] netlink: 'syz.4.3772': attribute type 32 has an invalid length. [ 1133.415653][T14179] tmpfs: Bad value for 'mpol' [ 1133.472328][T14183] syz.3.3784 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1134.402828][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3792'. [ 1134.429715][T14197] gre1: entered allmulticast mode [ 1137.062002][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3809'. [ 1138.303735][T14252] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1138.324992][T14252] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1138.931869][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1139.182893][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.195937][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1139.287090][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1139.299530][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1139.308816][ T9] usb 6-1: SerialNumber: syz [ 1139.666442][ T9] usb 6-1: 0:2 : does not exist [ 1139.673625][ T9] usb 6-1: unit 5: unexpected type 0x03 [ 1139.915166][ T9] usb 6-1: USB disconnect, device number 2 [ 1140.365413][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1140.566037][T14277] loop2: detected capacity change from 0 to 2048 [ 1140.575651][T14281] loop1: detected capacity change from 0 to 64 [ 1140.745056][T14283] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1140.850455][T14277] NILFS (loop2): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 1141.277079][ T5421] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1141.603689][ T5421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1141.613852][ T5421] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1141.623803][ T5421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1141.634227][ T5421] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1141.645373][ T5421] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1141.655115][ T5421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.863565][ T5421] usb 6-1: config 0 descriptor?? [ 1142.180722][ T5421] hdpvr 6-1:0.0: firmware version 0x8 dated [ 1142.415910][ T5421] hdpvr 6-1:0.0: device init failed [ 1142.421621][ T5421] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1142.481040][ T5421] usb 6-1: USB disconnect, device number 3 [ 1142.609343][T14306] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1142.666205][T14305] loop1: detected capacity change from 0 to 256 [ 1143.402801][T14305] FAT-fs (loop1): Directory bread(block 64) failed [ 1143.410528][T14305] FAT-fs (loop1): Directory bread(block 65) failed [ 1143.417415][T14305] FAT-fs (loop1): Directory bread(block 66) failed [ 1143.424489][T14305] FAT-fs (loop1): Directory bread(block 67) failed [ 1143.431529][T14305] FAT-fs (loop1): Directory bread(block 68) failed [ 1143.438301][T14305] FAT-fs (loop1): Directory bread(block 69) failed [ 1143.445385][T14305] FAT-fs (loop1): Directory bread(block 70) failed [ 1143.452163][T14305] FAT-fs (loop1): Directory bread(block 71) failed [ 1143.465470][T14305] FAT-fs (loop1): Directory bread(block 72) failed [ 1143.472241][T14305] FAT-fs (loop1): Directory bread(block 73) failed [ 1145.377424][T14340] loop5: detected capacity change from 0 to 256 [ 1145.421712][T14340] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1145.437602][T14340] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1145.545944][T14340] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1145.710868][T14346] loop3: detected capacity change from 0 to 128 [ 1145.770179][T14347] loop2: detected capacity change from 0 to 512 [ 1145.782280][T14346] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1145.949192][T14347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1146.058912][T14347] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1146.213289][T14347] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3849: bg 0: block 248: padding at end of block bitmap is not set [ 1146.329781][T14347] Quota error (device loop2): write_blk: dquota write failed [ 1146.337865][T14347] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1146.349105][T14347] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3849: Failed to acquire dquot type 1 [ 1146.479538][T14347] EXT4-fs (loop2): 1 truncate cleaned up [ 1146.535761][T14347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1146.714602][T14347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1146.762958][T14347] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.3849: Abort forced by user [ 1146.864656][T14361] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1146.875775][T14347] EXT4-fs (loop2): Remounting filesystem read-only [ 1146.882610][T14347] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1147.271980][T14347] syz.2.3849 (14347) used greatest stack depth: 3360 bytes left [ 1147.357629][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.635440][T14369] qnx6: unable to read the first superblock [ 1147.763820][T14367] loop5: detected capacity change from 0 to 1024 [ 1147.821639][T14371] loop4: detected capacity change from 0 to 512 [ 1147.905663][T14371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1148.026715][T14371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.040232][T14371] ext4 filesystem being mounted at /757/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.296869][T14371] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:335: inode #15: comm syz.4.3858: verity file corrupted; can't find descriptor [ 1148.378972][T14371] EXT4-fs (loop4): Remounting filesystem read-only [ 1148.390616][T14371] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 1148.467335][T14382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1148.902036][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.882815][T14399] xt_TCPMSS: Only works on TCP SYN packets [ 1150.636658][T14409] loop5: detected capacity change from 0 to 1024 [ 1150.850485][T14409] hfsplus: keylen 65060 too large [ 1151.365716][T14420] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3874'. [ 1151.366137][T14420] net veth1_virt_wifi 70: renamed from virt_wifi0 [ 1151.387098][T14420] net veth1_virt_wifi 70: entered allmulticast mode [ 1151.392728][T14420] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 1152.831819][T14433] hsr0: entered promiscuous mode [ 1152.864342][T14435] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1152.876719][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1152.886804][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1152.896021][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1152.924762][T14433] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 1153.652537][T14446] netlink: 'syz.4.3885': attribute type 32 has an invalid length. [ 1153.660621][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1153.670542][T14446] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1154.271571][ T5421] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1154.506804][ T5421] usb 3-1: Using ep0 maxpacket: 16 [ 1154.561490][ T5421] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1154.627054][ T5421] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1154.636889][ T5421] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1154.645341][ T5421] usb 3-1: Product: syz [ 1154.650017][ T5421] usb 3-1: Manufacturer: syz [ 1154.654859][ T5421] usb 3-1: SerialNumber: syz [ 1154.751245][ T5421] usb 3-1: config 0 descriptor?? [ 1154.893525][T14466] QAT: failed to copy from user cfg_data. [ 1155.091361][ T5421] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1155.203106][ T5421] usb 3-1: USB disconnect, device number 97 [ 1155.507282][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1156.337162][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 1156.346571][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 1157.535392][T14501] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 1157.716091][T14498] loop2: detected capacity change from 0 to 2048 [ 1157.773911][T14504] overlayfs: conflicting options: userxattr,metacopy=on [ 1157.838373][T14498] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1157.990090][T14498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1158.570755][T14515] netlink: 'syz.4.3909': attribute type 2 has an invalid length. [ 1159.372132][T14528] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1160.302341][T14541] netlink: 'syz.4.3919': attribute type 10 has an invalid length. [ 1160.310503][T14541] macvtap0: entered promiscuous mode [ 1160.328293][T14541] batman_adv: batadv0: Adding interface: macvtap0 [ 1160.335245][T14541] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.361391][T14541] batman_adv: batadv0: Interface activated: macvtap0 [ 1162.573589][T14574] syz.5.3931: attempt to access beyond end of device [ 1162.573589][T14574] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1165.045094][T14606] loop2: detected capacity change from 0 to 2048 [ 1165.123285][T14608] veth3: entered promiscuous mode [ 1165.166432][T14606] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1165.315149][T14614] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1166.518809][T14627] loop2: detected capacity change from 0 to 128 [ 1166.610085][T14627] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1166.631422][T14627] FAT-fs (loop2): Directory bread(block 148) failed [ 1166.638397][T14627] FAT-fs (loop2): Directory bread(block 149) failed [ 1166.645658][T14627] FAT-fs (loop2): Directory bread(block 150) failed [ 1166.657154][T14627] FAT-fs (loop2): Directory bread(block 151) failed [ 1166.667280][T14627] FAT-fs (loop2): Directory bread(block 152) failed [ 1166.675161][T14627] FAT-fs (loop2): Directory bread(block 153) failed [ 1166.682031][T14627] FAT-fs (loop2): Directory bread(block 154) failed [ 1166.689267][T14627] FAT-fs (loop2): Directory bread(block 155) failed [ 1166.879487][T14627] FAT-fs (loop2): Directory bread(block 148) failed [ 1166.890978][T14627] FAT-fs (loop2): Directory bread(block 149) failed [ 1167.178934][ T3585] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1167.434174][ T5421] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1167.715430][ T5421] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1167.727643][ T5421] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1167.739150][ T5421] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1167.750777][ T5421] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1167.764046][ T5421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.891648][T14635] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1168.361878][ T5421] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1168.373474][ T5421] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input37 [ 1168.620427][ T5421] usb 2-1: USB disconnect, device number 110 [ 1168.620662][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1173.849791][T14724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3990'. [ 1176.535617][T14758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4006'. [ 1177.020780][T14760] loop5: detected capacity change from 0 to 1764 [ 1177.232813][T14760] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1177.938100][T14776] loop2: detected capacity change from 0 to 16 [ 1177.999795][T14776] erofs (device loop2): mounted with root inode @ nid 36. [ 1178.021375][T14772] loop1: detected capacity change from 0 to 2048 [ 1178.077451][T14772] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1178.218127][T14781] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1178.294192][T14780] veth3: entered promiscuous mode [ 1179.200333][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.207688][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.713750][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4037'. [ 1180.068560][T14803] loop1: detected capacity change from 0 to 256 [ 1180.716050][T14811] loop4: detected capacity change from 0 to 128 [ 1180.850191][T14811] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1180.904814][T14811] FAT-fs (loop4): Directory bread(block 148) failed [ 1180.911780][T14811] FAT-fs (loop4): Directory bread(block 149) failed [ 1180.919058][T14811] FAT-fs (loop4): Directory bread(block 150) failed [ 1180.926207][T14811] FAT-fs (loop4): Directory bread(block 151) failed [ 1180.933116][T14811] FAT-fs (loop4): Directory bread(block 152) failed [ 1180.940192][T14811] FAT-fs (loop4): Directory bread(block 153) failed [ 1180.948523][T14811] FAT-fs (loop4): Directory bread(block 154) failed [ 1180.955626][T14811] FAT-fs (loop4): Directory bread(block 155) failed [ 1180.989064][T14813] overlayfs: conflicting options: metacopy=off,verity=require [ 1181.030959][T14811] FAT-fs (loop4): Directory bread(block 148) failed [ 1181.037953][T14811] FAT-fs (loop4): Directory bread(block 149) failed [ 1181.235492][T14818] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.4038'. [ 1181.300205][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1181.953980][T14819] loop5: detected capacity change from 0 to 4096 [ 1182.020278][T14819] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1182.339129][T14819] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1182.459538][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 1183.297275][T14840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1183.309475][T14840] netlink: 75 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1183.925632][T14851] loop3: detected capacity change from 0 to 128 [ 1183.968779][T14851] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1184.056550][T14851] FAT-fs (loop3): Directory bread(block 148) failed [ 1184.063468][T14851] FAT-fs (loop3): Directory bread(block 149) failed [ 1184.073505][T14851] FAT-fs (loop3): Directory bread(block 150) failed [ 1184.081332][T14851] FAT-fs (loop3): Directory bread(block 151) failed [ 1184.086495][T14855] openvswitch: netlink: IP tunnel dst address not specified [ 1184.088211][T14851] FAT-fs (loop3): Directory bread(block 152) failed [ 1184.088338][T14851] FAT-fs (loop3): Directory bread(block 153) failed [ 1184.109362][T14851] FAT-fs (loop3): Directory bread(block 154) failed [ 1184.116257][T14851] FAT-fs (loop3): Directory bread(block 155) failed [ 1184.233093][T14848] loop5: detected capacity change from 0 to 2048 [ 1184.337556][T14851] FAT-fs (loop3): Directory bread(block 148) failed [ 1184.344789][T14851] FAT-fs (loop3): Directory bread(block 149) failed [ 1184.401396][T14848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1184.542678][T14848] overlayfs: failed to resolve './bus': -2 [ 1184.783825][ T3982] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1186.365386][ T5847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1186.413024][T14882] No control pipe specified [ 1186.580472][T14883] openvswitch: netlink: IP tunnel dst address not specified [ 1186.655879][ T5847] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1186.665616][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.673976][ T5847] usb 6-1: Product: syz [ 1186.678718][ T5847] usb 6-1: Manufacturer: syz [ 1186.683568][ T5847] usb 6-1: SerialNumber: syz [ 1186.715342][ T5847] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1186.772211][T14885] loop4: detected capacity change from 0 to 64 [ 1186.831294][ T5421] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1187.243252][T14888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4071'. [ 1187.433225][ T9] usb 6-1: USB disconnect, device number 4 [ 1187.481804][ C1] vkms_vblank_simulate: vblank timer overrun [ 1187.557015][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.557015][ T3982] loop4: rw=1, sector=417, nr_sectors = 1 limit=64 [ 1187.571102][ T3982] Buffer I/O error on dev loop4, logical block 417, lost async page write [ 1187.584413][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.584413][ T3982] loop4: rw=1, sector=420, nr_sectors = 1 limit=64 [ 1187.598223][ T3982] Buffer I/O error on dev loop4, logical block 420, lost async page write [ 1187.607155][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.607155][ T3982] loop4: rw=1, sector=421, nr_sectors = 1 limit=64 [ 1187.622532][ T3982] Buffer I/O error on dev loop4, logical block 421, lost async page write [ 1187.631785][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.631785][ T3982] loop4: rw=1, sector=422, nr_sectors = 1 limit=64 [ 1187.645524][ T3982] Buffer I/O error on dev loop4, logical block 422, lost async page write [ 1187.654555][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.654555][ T3982] loop4: rw=1, sector=423, nr_sectors = 1 limit=64 [ 1187.668525][ T3982] Buffer I/O error on dev loop4, logical block 423, lost async page write [ 1187.677418][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.677418][ T3982] loop4: rw=1, sector=424, nr_sectors = 1 limit=64 [ 1187.693868][ T3982] Buffer I/O error on dev loop4, logical block 424, lost async page write [ 1187.703476][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.703476][ T3982] loop4: rw=1, sector=425, nr_sectors = 1 limit=64 [ 1187.717149][ T3982] Buffer I/O error on dev loop4, logical block 425, lost async page write [ 1187.726032][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.726032][ T3982] loop4: rw=1, sector=426, nr_sectors = 1 limit=64 [ 1187.743846][ T3982] Buffer I/O error on dev loop4, logical block 426, lost async page write [ 1187.752767][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.752767][ T3982] loop4: rw=1, sector=427, nr_sectors = 8 limit=64 [ 1187.767726][ T3982] kworker/u8:22: attempt to access beyond end of device [ 1187.767726][ T3982] loop4: rw=1, sector=435, nr_sectors = 1 limit=64 [ 1187.781589][ T3982] Buffer I/O error on dev loop4, logical block 435, lost async page write [ 1187.790630][ T3982] Buffer I/O error on dev loop4, logical block 436, lost async page write [ 1187.990456][ T5421] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1187.998285][ T5421] ath9k_htc: Failed to initialize the device [ 1188.029028][T14891] loop1: detected capacity change from 0 to 2048 [ 1188.060310][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 1188.191451][T14891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1188.356168][T14891] overlayfs: failed to resolve './bus': -2 [ 1188.820375][T14903] loop4: detected capacity change from 0 to 64 [ 1189.722462][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4084'. [ 1189.831521][T14917] loop3: detected capacity change from 0 to 256 [ 1190.737356][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1190.975101][T14933] loop4: detected capacity change from 0 to 64 [ 1191.015868][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1191.028375][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.039211][ T9] usb 3-1: Product: syz [ 1191.043636][ T9] usb 3-1: Manufacturer: syz [ 1191.048676][ T9] usb 3-1: SerialNumber: syz [ 1191.154363][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1191.282674][ T5848] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1191.302379][T14936] overlayfs: conflicting options: metacopy=off,verity=require [ 1191.965447][ T5421] usb 3-1: USB disconnect, device number 98 [ 1192.435224][ T5848] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1192.444362][ T5848] ath9k_htc: Failed to initialize the device [ 1192.525114][ T5421] usb 3-1: ath9k_htc: USB layer deinitialized [ 1192.857537][T14948] loop1: detected capacity change from 0 to 256 [ 1193.560170][T14957] kernel profiling enabled (shift: 17) [ 1194.377352][T14973] loop5: detected capacity change from 0 to 64 [ 1194.414388][T14972] ------------[ cut here ]------------ [ 1194.420229][T14972] Please remove unsupported % in format string [ 1194.430646][T14972] WARNING: CPU: 1 PID: 14972 at lib/vsprintf.c:2702 format_decode+0xebb/0x1160 [ 1194.440055][T14972] Modules linked in: [ 1194.444264][T14972] CPU: 1 UID: 0 PID: 14972 Comm: syz.1.4113 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1194.456969][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1194.467506][T14972] RIP: 0010:format_decode+0xebb/0x1160 [ 1194.473406][T14972] Code: 00 00 89 b9 68 09 00 00 48 c7 81 80 0c 00 00 00 00 00 00 85 c0 0f 85 a2 02 00 00 48 c7 c7 5e 33 e5 91 89 de e8 c6 46 76 f0 90 <0f> 0b 90 90 e9 2b fd ff ff 44 89 e7 e8 14 3e e8 f1 45 85 ff 0f 89 [ 1194.493562][T14972] RSP: 0018:ffff88811b12b5c8 EFLAGS: 00010287 [ 1194.499956][T14972] RAX: ffffffff81207f35 RBX: 0000000000000000 RCX: 0000000000080000 [ 1194.508362][T14972] RDX: ffffc9000982c000 RSI: 00000000000011ce RDI: 00000000000011cf [ 1194.516760][T14972] RBP: ffff88811b12b688 R08: ffffea000000000f R09: 0000000000000000 [ 1194.525126][T14972] R10: ffff888237b48028 R11: ffff88823f2709e8 R12: ffffffff911d8890 [ 1194.533560][T14972] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88811b12b93c [ 1194.541754][T14972] FS: 0000000000000000(0000) GS:ffff8881aabc5000(0063) knlGS:00000000f510eb40 [ 1194.551209][T14972] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1194.558132][T14972] CR2: 00000000f7416188 CR3: 0000000131918000 CR4: 00000000003526f0 [ 1194.566624][T14972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1194.575040][T14972] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1194.583287][T14972] Call Trace: [ 1194.587004][T14972] [ 1194.590163][T14972] ? kmsan_get_metadata+0x105/0x1b0 [ 1194.595755][T14972] bstr_printf+0x198/0x1870 [ 1194.600712][T14972] bpf_trace_printk+0x18a/0x3d0 [ 1194.605873][T14972] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1194.612118][T14972] ___bpf_prog_run+0x1294/0xeba0 [ 1194.617380][T14972] __bpf_prog_run32+0xc2/0xf0 [ 1194.622439][T14972] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1194.628737][T14972] ? kmsan_get_metadata+0x105/0x1b0 [ 1194.634283][T14972] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1194.640558][T14972] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1194.646254][T14972] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1194.652076][T14972] bpf_test_run+0x547/0xd20 [ 1194.656902][T14972] ? kmsan_get_metadata+0x105/0x1b0 [ 1194.662648][T14972] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1194.669279][T14972] ? kmsan_get_metadata+0x105/0x1b0 [ 1194.674974][T14972] ? bpf_test_run+0x39e/0xd20 [ 1194.680044][T14972] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1194.686356][T14972] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1194.692205][T14972] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1194.698575][T14972] bpf_prog_test_run+0x5b7/0xa30 [ 1194.704028][T14972] __sys_bpf+0x6ca/0xe60 [ 1194.708629][T14972] __ia32_sys_bpf+0xa4/0xf0 [ 1194.713451][T14972] ia32_sys_call+0x2544/0x42c0 [ 1194.718681][T14972] __do_fast_syscall_32+0xb0/0x110 [ 1194.724151][T14972] do_fast_syscall_32+0x38/0x80 [ 1194.729512][T14972] do_SYSENTER_32+0x1f/0x30 [ 1194.734293][T14972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1194.741058][T14972] RIP: 0023:0xf711e539 [ 1194.745362][T14972] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1194.765386][T14972] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1194.774388][T14972] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 1194.782713][T14972] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 1194.791025][T14972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1194.799225][T14972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1194.807616][T14972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1194.816017][T14972] [ 1194.819238][T14972] ---[ end trace 0000000000000000 ]--- [ 1195.302696][ T5848] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1195.630414][ T5848] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1195.643245][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.651644][ T5848] usb 5-1: Product: syz [ 1195.656236][ T5848] usb 5-1: Manufacturer: syz [ 1195.661062][ T5848] usb 5-1: SerialNumber: syz [ 1195.828632][ T5848] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1195.967256][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1196.573601][ T5847] usb 5-1: USB disconnect, device number 114 [ 1196.598283][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1196.780076][T14983] loop3: detected capacity change from 0 to 4096 [ 1196.840842][T14983] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 1197.141417][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1197.150192][ T9] ath9k_htc: Failed to initialize the device [ 1197.243451][ T5847] usb 5-1: ath9k_htc: USB layer deinitialized [ 1197.336757][T14995] loop2: detected capacity change from 0 to 64 [ 1197.343902][T14983] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 1197.819075][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 1199.447881][T15024] loop2: detected capacity change from 0 to 1764 [ 1199.819297][ T30] audit: type=1326 audit(1747241545.438:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1199.947664][ T30] audit: type=1326 audit(1747241545.503:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1199.970078][ T30] audit: type=1326 audit(1747241545.503:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1199.993724][ T30] audit: type=1326 audit(1747241545.503:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1201.167611][ T30] audit: type=1326 audit(1747241546.719:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15051 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1201.278334][ T30] audit: type=1326 audit(1747241546.785:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15051 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1201.300903][ T30] audit: type=1326 audit(1747241546.785:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15051 comm="syz.5.4153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1201.817481][T15058] loop4: detected capacity change from 0 to 1764 [ 1202.725684][ T30] audit: type=1326 audit(1747241548.169:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.5.4160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1202.830450][ T30] audit: type=1326 audit(1747241548.197:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.5.4160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1202.853782][ T30] audit: type=1326 audit(1747241548.197:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.5.4160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1203.436150][T15078] loop3: detected capacity change from 0 to 512 [ 1203.534067][T15078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1203.687533][T15078] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1203.846172][T15078] EXT4-fs (loop3): 1 truncate cleaned up [ 1203.899823][T15078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.253293][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.629496][T15094] loop1: detected capacity change from 0 to 2048 [ 1204.817067][T15094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1205.375639][T15107] netlink: 'syz.3.4178': attribute type 32 has an invalid length. [ 1205.384025][T15107] netlink: 'syz.3.4178': attribute type 32 has an invalid length. [ 1205.998413][T15116] netlink: 'syz.3.4182': attribute type 13 has an invalid length. [ 1208.599126][T15152] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4202'. [ 1208.623294][T15152] gre1: entered allmulticast mode [ 1209.921634][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1210.727301][T15178] loop4: detected capacity change from 0 to 2048 [ 1210.772501][T15183] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1210.825180][T15178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1210.842422][T15183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1211.052369][T15185] tmpfs: Bad value for 'mpol' [ 1213.913933][T15222] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1215.006542][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1215.006614][ T30] audit: type=1326 audit(1747241559.628:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.2.4240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1215.035671][ T30] audit: type=1326 audit(1747241559.628:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.2.4240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1215.110005][ T30] audit: type=1326 audit(1747241559.749:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.2.4240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1215.133345][ T30] audit: type=1326 audit(1747241559.749:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.2.4240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1215.155736][ T30] audit: type=1326 audit(1747241559.759:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.2.4240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1217.611761][ T30] audit: type=1326 audit(1747241562.097:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.1.4258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1217.635806][ T30] audit: type=1326 audit(1747241562.097:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.1.4258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1218.301659][T15283] loop1: detected capacity change from 0 to 256 [ 1218.326637][T15282] loop5: detected capacity change from 0 to 128 [ 1218.412011][T15282] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1219.076276][T15289] loop3: detected capacity change from 0 to 512 [ 1219.151641][T15289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1219.256287][T15295] xt_TCPMSS: Only works on TCP SYN packets [ 1219.274864][T15289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.288473][T15289] ext4 filesystem being mounted at /876/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.419085][T15289] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.4267: verity file corrupted; can't find descriptor [ 1219.473564][ T5848] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1219.491748][T15289] EXT4-fs (loop3): Remounting filesystem read-only [ 1219.498967][T15289] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 1219.657110][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 1219.718088][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1219.777040][ T5848] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1219.786607][ T5848] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1219.795321][ T5848] usb 2-1: Product: syz [ 1219.799714][ T5848] usb 2-1: Manufacturer: syz [ 1219.805675][ T5848] usb 2-1: SerialNumber: syz [ 1219.908515][ T5848] usb 2-1: config 0 descriptor?? [ 1219.931639][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.278843][ T5848] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1220.332735][ T5848] usb 2-1: USB disconnect, device number 111 [ 1220.603836][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1221.604806][T15320] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1221.614404][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1221.628175][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1221.638736][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1221.713658][T15324] loop5: detected capacity change from 0 to 256 [ 1221.990845][T15328] netlink: 'syz.1.4285': attribute type 32 has an invalid length. [ 1222.004091][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4285'. [ 1222.014247][T15328] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1222.308064][T15333] hsr0: entered promiscuous mode [ 1222.360903][T15333] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 1222.944629][T15339] hsr0: entered promiscuous mode [ 1223.011482][T15339] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 1223.374826][T15345] loop5: detected capacity change from 0 to 64 [ 1224.411039][T15359] loop4: detected capacity change from 0 to 256 [ 1225.212629][T15368] netlink: 'syz.2.4302': attribute type 32 has an invalid length. [ 1225.221003][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4302'. [ 1225.237077][T15368] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1225.659240][T15377] @: renamed from veth0_vlan (while UP) [ 1226.419341][T15386] cgroup: release_agent respecified [ 1226.957833][T15394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4314'. [ 1227.513763][T15402] QAT: failed to copy from user cfg_data. [ 1228.220260][T15410] loop2: detected capacity change from 0 to 1024 [ 1228.530755][T15414] gtp0: entered promiscuous mode [ 1228.535984][T15414] gtp0: entered allmulticast mode [ 1228.622943][T15416] tmpfs: Bad value for 'mpol' [ 1229.659774][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4332'. [ 1230.243322][T15432] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1230.881378][ T5848] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1231.083967][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 1231.132069][ T5848] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1231.140749][ T5848] usb 4-1: config 0 has no interface number 0 [ 1231.244765][ T5848] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1231.256762][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.266013][ T5848] usb 4-1: Product: syz [ 1231.270409][ T5848] usb 4-1: Manufacturer: syz [ 1231.277420][ T5848] usb 4-1: SerialNumber: syz [ 1231.351882][ T5848] usb 4-1: config 0 descriptor?? [ 1231.376137][T15443] loop4: detected capacity change from 0 to 64 [ 1231.632707][ T5848] radio-si470x 4-1:0.35: this is not a si470x device. [ 1231.852017][ T5848] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1231.899613][ T5848] usb 4-1: USB disconnect, device number 105 [ 1232.255164][T15447] loop1: detected capacity change from 0 to 4096 [ 1232.780301][T15456] loop5: detected capacity change from 0 to 64 [ 1232.931326][T15456] hfs: keylen 1794 too large [ 1237.820015][T15516] loop3: detected capacity change from 0 to 8 [ 1237.909159][T15517] xt_hashlimit: max too large, truncated to 1048576 [ 1237.996433][T15516] SQUASHFS error: Failed to read block 0x738: -5 [ 1237.996527][T15516] SQUASHFS error: Unable to read metadata cache entry [736] [ 1238.987240][T15530] @: renamed from veth0_vlan (while UP) [ 1239.473950][T15537] loop4: detected capacity change from 0 to 64 [ 1239.655984][T15537] hfs: keylen 1794 too large [ 1239.946275][T15540] loop2: detected capacity change from 0 to 2048 [ 1240.109944][T15540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1240.248930][T15546] loop1: detected capacity change from 0 to 8 [ 1240.328031][T15546] SQUASHFS error: Failed to read block 0x738: -5 [ 1240.334913][T15546] SQUASHFS error: Unable to read metadata cache entry [736] [ 1241.613288][T15564] loop5: detected capacity change from 0 to 64 [ 1241.877583][ T30] audit: type=1800 audit(1747241584.781:42): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4399" name="bus" dev="loop5" ino=21 res=0 errno=0 [ 1243.084005][T15581] loop2: detected capacity change from 0 to 8 [ 1243.131162][T15574] loop3: detected capacity change from 0 to 2048 [ 1243.204132][T15581] SQUASHFS error: Failed to read block 0x738: -5 [ 1243.204238][T15581] SQUASHFS error: Unable to read metadata cache entry [736] [ 1243.235295][T15574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1243.572376][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4409'. [ 1244.891044][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.899334][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.056767][ T5847] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1245.270168][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 1245.325258][ T5847] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1245.338346][ T5847] usb 5-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1245.350255][ T5847] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1245.360662][ T5847] usb 5-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1245.561802][ T5847] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1245.572031][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.582440][ T5847] usb 5-1: Product: syz [ 1245.586865][ T5847] usb 5-1: Manufacturer: syz [ 1245.592046][ T5847] usb 5-1: SerialNumber: syz [ 1245.733792][ T5847] hso 5-1:6.0: Can't find BULK OUT endpoint [ 1246.013512][ T5847] usb 5-1: USB disconnect, device number 115 [ 1247.757374][ T30] audit: type=1326 audit(1747241590.299:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.4435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1247.899950][ T30] audit: type=1326 audit(1747241590.374:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.4435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1247.922705][ T30] audit: type=1326 audit(1747241590.374:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.4435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1247.945941][ T30] audit: type=1326 audit(1747241590.374:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.4435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1252.658054][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1252.658153][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1252.660492][T15707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.141030][ T30] audit: type=1326 audit(1747241595.332:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1253.141243][ T30] audit: type=1326 audit(1747241595.332:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1253.195582][ T30] audit: type=1326 audit(1747241595.369:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1253.195803][ T30] audit: type=1326 audit(1747241595.369:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1253.196005][ T30] audit: type=1326 audit(1747241595.369:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1253.358073][T15715] loop5: detected capacity change from 0 to 512 [ 1253.675110][T15715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1253.675535][T15715] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.011064][T15725] bio_check_eod: 8 callbacks suppressed [ 1254.011140][T15725] syz.4.4476: attempt to access beyond end of device [ 1254.011140][T15725] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1254.081719][T13245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.201786][ T5848] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1254.410583][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 1254.451373][ T5848] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1254.464516][ T5848] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1254.477376][ T5848] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1254.487433][ T5848] usb 4-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1254.622654][ T5848] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1254.632176][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.641119][ T5848] usb 4-1: Product: syz [ 1254.645598][ T5848] usb 4-1: Manufacturer: syz [ 1254.650444][ T5848] usb 4-1: SerialNumber: syz [ 1254.712337][ T5848] hso 4-1:6.0: Can't find BULK OUT endpoint [ 1255.095282][ T5847] usb 4-1: USB disconnect, device number 106 [ 1256.329606][T15749] Cannot find map_set index 65533 as target [ 1257.935903][T15773] dlm: no locking on control device [ 1259.500628][T15796] loop4: detected capacity change from 0 to 256 [ 1259.881433][T15802] Cannot find add_set index 2 as target [ 1259.887145][T15796] FAT-fs (loop4): Directory bread(block 64) failed [ 1259.887291][T15796] FAT-fs (loop4): Directory bread(block 65) failed [ 1259.887560][T15796] FAT-fs (loop4): Directory bread(block 66) failed [ 1259.887682][T15796] FAT-fs (loop4): Directory bread(block 67) failed [ 1259.887981][T15796] FAT-fs (loop4): Directory bread(block 68) failed [ 1259.916617][T15803] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1259.921723][T15796] FAT-fs (loop4): Directory bread(block 69) failed [ 1259.943108][T15796] FAT-fs (loop4): Directory bread(block 70) failed [ 1259.951399][T15796] FAT-fs (loop4): Directory bread(block 71) failed [ 1259.958329][T15796] FAT-fs (loop4): Directory bread(block 72) failed [ 1259.965383][T15796] FAT-fs (loop4): Directory bread(block 73) failed [ 1260.559872][T15807] dlm: no locking on control device [ 1260.682635][T15812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1265.183470][T15877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4550'. [ 1265.205381][T15880] loop5: detected capacity change from 0 to 16 [ 1265.264945][T15880] erofs (device loop5): mounted with root inode @ nid 36. [ 1266.023945][T15892] loop5: detected capacity change from 0 to 128 [ 1266.681440][T15900] ptrace attach of "./syz-executor exec"[5798] was attempted by ""[15900] [ 1267.196291][T15907] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1267.513023][T15913] loop3: detected capacity change from 0 to 16 [ 1267.584956][T15913] erofs (device loop3): mounted with root inode @ nid 36. [ 1268.797378][T15933] ptrace attach of "./syz-executor exec"[5802] was attempted by ""[15933] [ 1269.909749][T15952] loop2: detected capacity change from 0 to 16 [ 1269.965303][T15952] erofs (device loop2): mounted with root inode @ nid 36. [ 1270.693476][T15961] xt_hashlimit: invalid interval [ 1270.995344][T15967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1271.479652][ T30] audit: type=1326 audit(1747241612.487:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.2.4595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1271.503041][ T30] audit: type=1326 audit(1747241612.487:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.2.4595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1271.567791][ T30] audit: type=1326 audit(1747241612.553:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.2.4595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1271.580688][T15971] loop4: detected capacity change from 0 to 2048 [ 1271.591865][ T30] audit: type=1326 audit(1747241612.553:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.2.4595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1271.620153][ T30] audit: type=1326 audit(1747241612.562:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.2.4595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1271.644901][T15977] sctp: [Deprecated]: syz.3.4597 (pid 15977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1271.644901][T15977] Use struct sctp_sack_info instead [ 1271.810754][T15971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.936434][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.596472][T15990] loop4: detected capacity change from 0 to 256 [ 1272.840504][T15990] FAT-fs (loop4): Directory bread(block 64) failed [ 1272.847513][T15990] FAT-fs (loop4): Directory bread(block 65) failed [ 1272.857554][T15990] FAT-fs (loop4): Directory bread(block 66) failed [ 1272.865692][T15990] FAT-fs (loop4): Directory bread(block 67) failed [ 1272.872592][T15990] FAT-fs (loop4): Directory bread(block 68) failed [ 1272.879548][T15990] FAT-fs (loop4): Directory bread(block 69) failed [ 1272.886633][T15990] FAT-fs (loop4): Directory bread(block 70) failed [ 1272.893380][T15990] FAT-fs (loop4): Directory bread(block 71) failed [ 1272.901556][T15990] FAT-fs (loop4): Directory bread(block 72) failed [ 1272.908843][T15990] FAT-fs (loop4): Directory bread(block 73) failed [ 1274.353362][T16017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.361835][T16017] batadv_slave_0: entered promiscuous mode [ 1274.367900][T16017] batadv_slave_0: entered allmulticast mode [ 1275.280474][T16029] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1275.419703][T16028] dvmrp0: entered allmulticast mode [ 1275.514585][T16032] loop5: detected capacity change from 0 to 256 [ 1275.861424][T16032] FAT-fs (loop5): Directory bread(block 64) failed [ 1275.868561][T16032] FAT-fs (loop5): Directory bread(block 65) failed [ 1275.875485][T16032] FAT-fs (loop5): Directory bread(block 66) failed [ 1275.882542][T16032] FAT-fs (loop5): Directory bread(block 67) failed [ 1275.889653][T16032] FAT-fs (loop5): Directory bread(block 68) failed [ 1275.896414][T16032] FAT-fs (loop5): Directory bread(block 69) failed [ 1275.903700][T16032] FAT-fs (loop5): Directory bread(block 70) failed [ 1275.910613][T16032] FAT-fs (loop5): Directory bread(block 71) failed [ 1275.922144][T16032] FAT-fs (loop5): Directory bread(block 72) failed [ 1275.928914][T16032] FAT-fs (loop5): Directory bread(block 73) failed [ 1276.188277][T16041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1277.661124][ T30] audit: type=1326 audit(1747241618.259:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1277.818757][ T30] audit: type=1326 audit(1747241618.324:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1277.842815][ T30] audit: type=1326 audit(1747241618.324:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1277.865945][ T30] audit: type=1326 audit(1747241618.324:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1278.681946][ T5421] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1278.898981][ T5421] usb 2-1: Using ep0 maxpacket: 32 [ 1278.979496][ T5421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1279.031193][ T5421] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 1279.039623][ T5421] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1279.049054][ T5421] usb 2-1: config 7 has an invalid descriptor of length 206, skipping remainder of the config [ 1279.059748][ T5421] usb 2-1: config 7 has no interface number 0 [ 1279.066290][ T5421] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 1279.078235][ T5421] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 1279.088597][ T5421] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1279.104297][ T5421] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1279.118858][ T5421] usb 2-1: config 7 interface 128 has no altsetting 0 [ 1279.363646][ T5421] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1279.373303][ T5421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.381527][ T5421] usb 2-1: Product: syz [ 1279.386178][ T5421] usb 2-1: Manufacturer: syz [ 1279.390995][ T5421] usb 2-1: SerialNumber: syz [ 1279.474062][T16085] loop5: detected capacity change from 0 to 512 [ 1279.493933][T16072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1279.657851][T16085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.671763][T16085] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.823826][ T5421] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1279.831145][ T5421] usb 2-1: MIDIStreaming interface descriptor not found [ 1280.062137][ T5421] usb 2-1: USB disconnect, device number 112 [ 1280.180475][T13245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.399639][T16098] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4652'. [ 1280.643277][T16102] dvmrp0: entered allmulticast mode [ 1280.813975][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.125384][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4663'. [ 1284.485228][T16156] loop2: detected capacity change from 0 to 512 [ 1284.624370][T16156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.637923][T16156] ext4 filesystem being mounted at /961/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.133403][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.941123][T16170] loop5: detected capacity change from 0 to 4096 [ 1286.021671][T16170] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1286.140821][T16181] loop4: detected capacity change from 0 to 8 [ 1286.312535][T16181] SQUASHFS error: Unable to read inode 0xa7 [ 1286.526520][T16170] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1286.832230][ T3652] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1286.889087][T13245] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1286.896036][T13245] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1286.903426][T13245] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1286.978524][ T1813] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1287.541504][T16199] Scaler: ================= START STATUS ================= [ 1287.549235][T16199] Scaler: ================== END STATUS ================== [ 1288.281110][T16200] loop2: detected capacity change from 0 to 4096 [ 1288.401370][T16200] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1288.546159][T16200] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1288.789264][T16200] ntfs3(loop2): Failed to load $Extend (-22). [ 1288.798700][T16200] ntfs3(loop2): Failed to initialize $Extend. [ 1288.909908][T16217] loop3: detected capacity change from 0 to 8 [ 1289.022185][T16217] SQUASHFS error: Unable to read inode 0xa7 [ 1290.169341][T16232] loop1: detected capacity change from 0 to 256 [ 1290.208982][T16232] exfat: Deprecated parameter 'namecase' [ 1290.388813][T16236] netlink: 'syz.4.4719': attribute type 2 has an invalid length. [ 1290.420825][T16232] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1291.640068][T16253] loop5: detected capacity change from 0 to 8 [ 1291.797983][T16253] SQUASHFS error: Unable to read inode 0xa7 [ 1292.389922][T16264] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1292.396726][T16264] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1292.404954][T16264] vhci_hcd vhci_hcd.0: Device attached [ 1292.533475][ T30] audit: type=1326 audit(1747241632.168:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1292.640627][ T5421] vhci_hcd: vhci_device speed not set [ 1292.654712][ T30] audit: type=1326 audit(1747241632.215:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1292.680540][ T30] audit: type=1326 audit(1747241632.233:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1292.761992][ T5421] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1292.770616][ T5847] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1293.004091][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 1293.005227][T16275] loop2: detected capacity change from 0 to 16 [ 1293.052859][ T5847] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1293.066961][ T5847] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1293.070687][T16275] erofs (device loop2): mounted with root inode @ nid 36. [ 1293.078827][ T5847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1293.078977][ T5847] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1293.201939][ T5847] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1293.211574][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.224169][ T5847] usb 6-1: Product: syz [ 1293.230075][ T5847] usb 6-1: Manufacturer: syz [ 1293.234939][ T5847] usb 6-1: SerialNumber: syz [ 1293.269082][ T5847] usb 6-1: config 0 descriptor?? [ 1293.360328][T16275] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1293.453486][T16275] erofs (device loop2): failed to decompress -46 in[60, 4036] out[1851] [ 1293.462166][T16275] erofs (device loop2): read error -117 @ 43 of nid 36 [ 1293.501652][T16266] vhci_hcd: connection reset by peer [ 1293.538265][ T1784] vhci_hcd: stop threads [ 1293.546850][ T1784] vhci_hcd: release socket [ 1293.553370][ T1784] vhci_hcd: disconnect device [ 1293.613900][ T5847] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38 [ 1293.720336][ T5847] imon:send_packet: packet tx failed (-71) [ 1293.754641][ T5847] imon 6-1:0.0: panel buttons/knobs setup failed [ 1294.333418][ T5847] rc_core: IR keymap rc-imon-pad not found [ 1294.340796][ T5847] Registered IR keymap rc-empty [ 1294.347916][ T5847] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1294.360366][ T5847] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1294.458546][T16284] mmap: syz.3.4742 (16284): VmData 175788032 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 1294.558828][ T5847] imon:send_packet: packet tx failed (-71) [ 1294.588032][ T5847] imon 6-1:0.0: remote input dev register failed [ 1294.596942][ T5847] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1294.770455][ T5847] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1294.777288][ T5847] imon:imon_probe: failed to initialize context! [ 1294.784045][ T5847] imon 6-1:0.0: unable to register, err -19 [ 1294.876278][ T5847] usb 6-1: USB disconnect, device number 5 [ 1295.451649][T16296] Scaler: ================= START STATUS ================= [ 1295.459294][T16296] Scaler: ================== END STATUS ================== [ 1295.532504][T16299] loop2: detected capacity change from 0 to 64 [ 1296.110244][T16306] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 1296.118496][T16306] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4751'. [ 1297.476739][T16330] netlink: 'syz.1.4762': attribute type 2 has an invalid length. [ 1298.233818][ T5421] vhci_hcd: vhci_device speed not set [ 1300.291233][T16368] netlink: 'syz.2.4778': attribute type 10 has an invalid length. [ 1300.300303][T16368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1300.315047][T16368] batman_adv: batadv0: Adding interface: vlan0 [ 1300.321592][T16368] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.349787][T16366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1300.362379][T16368] batman_adv: batadv0: Interface activated: vlan0 [ 1301.510740][T16381] netlink: 'syz.5.4796': attribute type 2 has an invalid length. [ 1302.048945][T16388] loop1: detected capacity change from 0 to 64 [ 1304.034716][T16417] Unsupported ieee802154 address type: 0 [ 1304.416304][T16424] loop5: detected capacity change from 0 to 16 [ 1304.504157][T16424] erofs (device loop5): mounted with root inode @ nid 36. [ 1304.614293][T16424] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1304.693061][T16424] erofs (device loop5): failed to decompress -46 in[60, 4036] out[1851] [ 1304.701944][T16424] erofs (device loop5): read error -117 @ 43 of nid 36 [ 1304.981991][T16430] loop3: detected capacity change from 0 to 512 [ 1305.094692][T16430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1305.108298][T16430] ext4 filesystem being mounted at /987/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1305.674598][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.687772][ T5421] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1306.955823][ T5421] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1306.965900][ T5421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.974153][ T5421] usb 5-1: Product: syz [ 1306.978781][ T5421] usb 5-1: Manufacturer: syz [ 1306.983619][ T5421] usb 5-1: SerialNumber: syz [ 1307.123352][ T5421] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1307.262387][ T5847] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1307.520988][T16463] loop5: detected capacity change from 0 to 256 [ 1307.543950][T16463] exfat: Deprecated parameter 'namecase' [ 1307.615725][ C1] usb 5-1: ath: unknown panic pattern! [ 1307.635056][T16465] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1307.641886][T16465] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1307.650577][T16465] vhci_hcd vhci_hcd.0: Device attached [ 1307.867190][T16459] loop3: detected capacity change from 0 to 4096 [ 1307.920115][ T5848] vhci_hcd: vhci_device speed not set [ 1307.930529][ T5421] usb 5-1: USB disconnect, device number 116 [ 1307.950662][T16463] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1307.965684][T16459] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1308.081593][ T5848] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1308.136299][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1308.195074][T16459] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1308.316058][T16459] ntfs3(loop3): Failed to load $Extend (-22). [ 1308.327189][T16459] ntfs3(loop3): Failed to initialize $Extend. [ 1308.337836][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1308.376870][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1308.388359][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1308.400335][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1308.406627][ T5847] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1308.411487][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1308.419462][ T5847] ath9k_htc: Failed to initialize the device [ 1308.605731][ T5421] usb 5-1: ath9k_htc: USB layer deinitialized [ 1308.731130][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1308.744029][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.752515][ T9] usb 3-1: Product: syz [ 1308.756931][ T9] usb 3-1: Manufacturer: syz [ 1308.765213][ T9] usb 3-1: SerialNumber: syz [ 1308.915961][ T9] usb 3-1: config 0 descriptor?? [ 1309.052123][ T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 1309.337099][T16466] vhci_hcd: connection reset by peer [ 1309.344734][ T4275] vhci_hcd: stop threads [ 1309.349431][ T4275] vhci_hcd: release socket [ 1309.355070][ T4275] vhci_hcd: disconnect device [ 1309.431779][ T9] imon:send_packet: packet tx failed (-71) [ 1309.457285][ T9] imon 3-1:0.0: panel buttons/knobs setup failed [ 1310.110793][ T9] rc_core: IR keymap rc-imon-pad not found [ 1310.118062][ T9] Registered IR keymap rc-empty [ 1310.127264][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1310.138417][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1310.305672][ T9] imon:send_packet: packet tx failed (-71) [ 1310.335800][ T9] imon 3-1:0.0: remote input dev register failed [ 1310.345258][ T9] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1310.560043][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.566954][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.627683][ T9] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1310.634592][ T9] imon:imon_probe: failed to initialize context! [ 1310.641203][ T9] imon 3-1:0.0: unable to register, err -19 [ 1310.654723][ T9] usb 3-1: USB disconnect, device number 99 [ 1312.429496][T16511] netlink: 'syz.1.4844': attribute type 10 has an invalid length. [ 1312.437595][T16511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4844'. [ 1312.452122][T16511] batman_adv: batadv0: Adding interface: vlan0 [ 1312.458514][T16511] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.489520][T16511] batman_adv: batadv0: Interface activated: vlan0 [ 1312.559488][T16514] Unsupported ieee802154 address type: 0 [ 1312.626837][T16506] loop5: detected capacity change from 0 to 4096 [ 1312.776250][T16506] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1312.938591][T16506] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1313.221477][T16506] ntfs3(loop5): Failed to load $Extend (-22). [ 1313.227865][T16506] ntfs3(loop5): Failed to initialize $Extend. [ 1313.305981][T16521] netlink: 'syz.4.4849': attribute type 5 has an invalid length. [ 1313.330335][T16521] ip6erspan1: entered promiscuous mode [ 1313.492225][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1313.551212][ T5848] vhci_hcd: vhci_device speed not set [ 1313.979496][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4852'. [ 1314.219172][T16528] XFS (nullb0): Invalid superblock magic number [ 1314.363798][T16537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1315.152020][T16547] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1315.570004][T16554] loop1: detected capacity change from 0 to 128 [ 1315.618752][T16554] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1315.732185][T16554] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1315.837169][T16557] loop2: detected capacity change from 0 to 1024 [ 1315.914954][T16557] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1315.926568][T16557] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1316.002234][T16557] EXT4-fs (loop2): invalid journal inode [ 1316.008202][T16557] EXT4-fs (loop2): can't get journal size [ 1316.027121][T16557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1316.168512][T16557] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #12: comm syz.2.4865: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1316.643063][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.644311][T16580] loop4: detected capacity change from 0 to 512 [ 1317.707746][T16583] loop5: detected capacity change from 0 to 512 [ 1317.789494][T16580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.802753][T16580] ext4 filesystem being mounted at /970/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.908194][T16583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.921439][T16583] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.353896][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.386182][T13245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.557324][T16609] netlink: 'syz.5.4888': attribute type 5 has an invalid length. [ 1319.581264][T16609] ip6erspan0: entered promiscuous mode [ 1319.741779][T16611] netlink: 'syz.4.4889': attribute type 21 has an invalid length. [ 1319.750257][T16611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4889'. [ 1319.761029][T16611] netlink: 'syz.4.4889': attribute type 1 has an invalid length. [ 1319.897693][T16615] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1320.365268][T16619] netlink: 'syz.5.4893': attribute type 28 has an invalid length. [ 1320.970528][ T5847] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1321.208477][ T5847] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1321.218829][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.227331][ T5847] usb 4-1: Product: syz [ 1321.231774][ T5847] usb 4-1: Manufacturer: syz [ 1321.236621][ T5847] usb 4-1: SerialNumber: syz [ 1321.311842][ T5847] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1321.436134][ T5421] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1321.877393][ C1] usb 4-1: ath: unknown panic pattern! [ 1322.159244][ T5848] usb 4-1: USB disconnect, device number 107 [ 1322.179305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.240879][T16642] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1322.278606][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1322.612831][ T5421] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1322.620843][ T5421] ath9k_htc: Failed to initialize the device [ 1322.679995][ T5848] usb 4-1: ath9k_htc: USB layer deinitialized [ 1322.994702][ T5847] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1323.198496][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 1323.221973][ T5847] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1323.269436][ T5847] usb 6-1: config 2 has an invalid interface number: 179 but max is 0 [ 1323.278041][ T5847] usb 6-1: config 2 has no interface number 0 [ 1323.284762][ T5847] usb 6-1: config 2 interface 179 has no altsetting 0 [ 1323.351024][ T5847] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b5.a8 [ 1323.361484][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.376284][ T5847] usb 6-1: Product: syz [ 1323.380693][ T5847] usb 6-1: Manufacturer: syz [ 1323.386189][ T5847] usb 6-1: SerialNumber: syz [ 1323.580078][T16655] XFS (nullb0): Invalid superblock magic number [ 1323.664702][ T5421] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1323.734778][ T5847] cypress_cy7c63 6-1:2.179: Cypress CY7C63xxx device now attached [ 1323.783405][ T5847] usb 6-1: USB disconnect, device number 6 [ 1323.791285][ T5847] cypress_cy7c63 6-1:2.179: Cypress CY7C63xxx device now disconnected [ 1323.896357][ T5421] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.907194][ T5421] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1323.917696][ T5421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.048156][ T5421] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1324.356764][T16669] loop2: detected capacity change from 0 to 128 [ 1324.389878][T16669] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1324.461874][T16669] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1325.167392][ T5421] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1325.396421][ T5421] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1325.411456][ T5421] stv0680 4-1:4.0: last error: 80, command = 0xfb [ 1325.493247][ T5421] usb 4-1: USB disconnect, device number 108 [ 1325.548255][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4919'. [ 1325.899401][ T5847] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1326.141273][ T5847] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1326.150853][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.159312][ T5847] usb 6-1: Product: syz [ 1326.167611][ T5847] usb 6-1: Manufacturer: syz [ 1326.172425][ T5847] usb 6-1: SerialNumber: syz [ 1326.218162][T16693] loop2: detected capacity change from 0 to 256 [ 1326.308590][ T5847] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1326.425550][ T2078] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1326.776876][ C1] usb 6-1: ath: unknown panic pattern! [ 1327.049831][ T9] usb 6-1: USB disconnect, device number 7 [ 1327.075572][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1327.502779][T16701] netlink: 'syz.2.4930': attribute type 21 has an invalid length. [ 1327.576891][ T2078] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1327.584835][ T2078] ath9k_htc: Failed to initialize the device [ 1327.701383][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 1328.390494][T16710] tmpfs: Bad value for 'mpol' [ 1328.432783][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1328.699737][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1328.804489][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1328.830866][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.40 [ 1328.841506][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.850172][ T9] usb 2-1: Product: syz [ 1328.854568][ T9] usb 2-1: Manufacturer: syz [ 1328.859419][ T9] usb 2-1: SerialNumber: syz [ 1329.138991][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'. [ 1329.471637][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 1329.478346][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1329.602878][ T9] usb 2-1: USB disconnect, device number 113 [ 1329.935269][T16731] loop4: detected capacity change from 0 to 256 [ 1329.990893][T16731] exfat: Deprecated parameter 'utf8' [ 1330.002416][T16731] exfat: Deprecated parameter 'namecase' [ 1330.229380][T16731] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1330.679763][T16736] loop3: detected capacity change from 0 to 512 [ 1330.882330][T16736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1330.896394][T16736] ext4 filesystem being mounted at /1012/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.392297][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.647279][T16747] loop4: detected capacity change from 0 to 4096 [ 1332.126995][ T5847] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1332.335908][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 1332.398835][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1332.484623][ T5847] usb 3-1: config 2 has an invalid interface number: 179 but max is 0 [ 1332.493127][ T5847] usb 3-1: config 2 has no interface number 0 [ 1332.500340][ T5847] usb 3-1: config 2 interface 179 has no altsetting 0 [ 1332.619203][ T5847] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b5.a8 [ 1332.632958][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.642824][ T5847] usb 3-1: Product: syz [ 1332.647674][ T5847] usb 3-1: Manufacturer: syz [ 1332.652561][ T5847] usb 3-1: SerialNumber: syz [ 1333.019103][ T5847] cypress_cy7c63 3-1:2.179: Cypress CY7C63xxx device now attached [ 1333.056391][ T5847] usb 3-1: USB disconnect, device number 100 [ 1333.068602][ T5847] cypress_cy7c63 3-1:2.179: Cypress CY7C63xxx device now disconnected [ 1333.410692][T16770] loop3: detected capacity change from 0 to 256 [ 1333.443056][T16770] exfat: Deprecated parameter 'utf8' [ 1333.449730][T16770] exfat: Deprecated parameter 'namecase' [ 1333.598557][T16770] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1333.619136][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4963'. [ 1333.851550][T16775] loop4: detected capacity change from 0 to 512 [ 1333.862023][T16775] EXT4-fs: Ignoring removed i_version option [ 1333.964646][T16775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.571150][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.631968][T16786] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 1336.068812][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1336.303947][T16808] loop1: detected capacity change from 0 to 256 [ 1336.405677][T16808] exfat: Deprecated parameter 'utf8' [ 1336.412295][T16808] exfat: Deprecated parameter 'namecase' [ 1336.584235][T16808] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1337.731769][T16829] afs: Unknown parameter 'dont_measure' [ 1337.813511][T16830] bridge3: entered promiscuous mode [ 1340.327591][T16872] afs: Unknown parameter 'dont_measure' [ 1340.354879][T16875] bond0: Error: Cannot enslave bond to itself. [ 1340.461893][T16876] bridge1: entered promiscuous mode [ 1341.473928][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5011'. [ 1343.149091][T16915] bridge2: entered promiscuous mode [ 1343.525555][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5023'. [ 1344.589486][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1344.610536][T16936] loop4: detected capacity change from 0 to 1024 [ 1344.649076][T16939] loop1: detected capacity change from 0 to 1024 [ 1344.853069][T16939] ===================================================== [ 1344.860522][T16939] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0 [ 1344.868477][T16939] hfsplus_rename_cat+0x1173/0x17e0 [ 1344.873967][T16939] hfsplus_rename+0x1fc/0x2f0 [ 1344.879208][T16939] vfs_rename+0x1e87/0x2460 [ 1344.888201][T16939] do_renameat2+0x175e/0x1d70 [ 1344.893089][T16939] __ia32_sys_rename+0xd7/0x140 [ 1344.899694][T16939] ia32_sys_call+0x3d36/0x42c0 [ 1344.904647][T16939] __do_fast_syscall_32+0xb0/0x110 [ 1344.910131][T16939] do_fast_syscall_32+0x38/0x80 [ 1344.915197][T16939] do_SYSENTER_32+0x1f/0x30 [ 1344.920240][T16939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.926785][T16939] [ 1344.929425][T16939] Uninit was stored to memory at: [ 1344.935662][T16939] hfsplus_rename_cat+0x10a9/0x17e0 [ 1344.942149][T16939] hfsplus_rename+0x1fc/0x2f0 [ 1344.947066][T16939] vfs_rename+0x1e87/0x2460 [ 1344.952221][T16939] do_renameat2+0x175e/0x1d70 [ 1344.957124][T16939] __ia32_sys_rename+0xd7/0x140 [ 1344.962403][T16939] ia32_sys_call+0x3d36/0x42c0 [ 1344.967331][T16939] __do_fast_syscall_32+0xb0/0x110 [ 1344.972854][T16939] do_fast_syscall_32+0x38/0x80 [ 1344.977907][T16939] do_SYSENTER_32+0x1f/0x30 [ 1344.982765][T16939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.989332][T16939] [ 1344.991972][T16939] Uninit was stored to memory at: [ 1345.001575][T16939] hfsplus_create_cat+0x18fb/0x1910 [ 1345.008414][T16939] hfsplus_fill_super+0x212e/0x2740 [ 1345.014020][T16939] get_tree_bdev_flags+0x6e3/0x920 [ 1345.019355][T16939] get_tree_bdev+0x38/0x50 [ 1345.024190][T16939] hfsplus_get_tree+0x35/0x40 [ 1345.029109][T16939] vfs_get_tree+0xb0/0x5c0 [ 1345.033734][T16939] do_new_mount+0x73c/0x1620 [ 1345.038874][T16939] path_mount+0x6db/0x1e90 [ 1345.044443][T16939] __se_sys_mount+0x6eb/0x7d0 [ 1345.049793][T16939] __ia32_sys_mount+0xe2/0x150 [ 1345.054771][T16939] ia32_sys_call+0x2733/0x42c0 [ 1345.059882][T16939] __do_fast_syscall_32+0xb0/0x110 [ 1345.065404][T16939] do_fast_syscall_32+0x38/0x80 [ 1345.070701][T16939] do_SYSENTER_32+0x1f/0x30 [ 1345.075450][T16939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.082123][T16939] [ 1345.084560][T16939] Uninit was created at: [ 1345.089218][T16939] __alloc_frozen_pages_noprof+0x689/0xf00 [ 1345.095241][T16939] alloc_pages_mpol+0x328/0x860 [ 1345.100835][T16939] alloc_frozen_pages_noprof+0xf7/0x200 [ 1345.110713][T16939] allocate_slab+0x24d/0x1210 [ 1345.115584][T16939] ___slab_alloc+0xfec/0x3480 [ 1345.121911][T16939] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 1345.127953][T16939] hfsplus_alloc_inode+0x5a/0xd0 [ 1345.133417][T16939] alloc_inode+0x87/0x4a0 [ 1345.137925][T16939] iget_locked+0x239/0x12d0 [ 1345.142750][T16939] hfsplus_iget+0x5c/0xb80 [ 1345.147341][T16939] hfsplus_btree_open+0x132/0x1c90 [ 1345.153631][T16939] hfsplus_fill_super+0x1161/0x2740 [ 1345.159034][T16939] get_tree_bdev_flags+0x6e3/0x920 [ 1345.164940][T16939] get_tree_bdev+0x38/0x50 [ 1345.169553][T16939] hfsplus_get_tree+0x35/0x40 [ 1345.174635][T16939] vfs_get_tree+0xb0/0x5c0 [ 1345.179266][T16939] do_new_mount+0x73c/0x1620 [ 1345.184282][T16939] path_mount+0x6db/0x1e90 [ 1345.188891][T16939] __se_sys_mount+0x6eb/0x7d0 [ 1345.193762][T16939] __ia32_sys_mount+0xe2/0x150 [ 1345.199123][T16939] ia32_sys_call+0x2733/0x42c0 [ 1345.204086][T16939] __do_fast_syscall_32+0xb0/0x110 [ 1345.209655][T16939] do_fast_syscall_32+0x38/0x80 [ 1345.219148][T16939] do_SYSENTER_32+0x1f/0x30 [ 1345.223857][T16939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.231921][T16939] [ 1345.234404][T16939] CPU: 1 UID: 0 PID: 16939 Comm: syz.1.5027 Tainted: G W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1345.248544][T16939] Tainted: [W]=WARN [ 1345.252467][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1345.263709][T16939] ===================================================== [ 1345.271163][T16939] Disabling lock debugging due to kernel taint [ 1345.277451][T16939] Kernel panic - not syncing: kmsan.panic set ... [ 1345.284055][T16939] CPU: 1 UID: 0 PID: 16939 Comm: syz.1.5027 Tainted: G B W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1345.298049][T16939] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1345.303202][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1345.313407][T16939] Call Trace: [ 1345.316805][T16939] [ 1345.319850][T16939] __dump_stack+0x26/0x30 [ 1345.324395][T16939] dump_stack_lvl+0x53/0x270 [ 1345.329234][T16939] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1345.335283][T16939] dump_stack+0x1e/0x25 [ 1345.339678][T16939] panic+0x4bd/0xd50 [ 1345.343824][T16939] kmsan_report+0x29d/0x2a0 [ 1345.348545][T16939] ? __msan_warning+0x96/0x120 [ 1345.353491][T16939] ? hfsplus_rename_cat+0x1173/0x17e0 [ 1345.359095][T16939] ? hfsplus_rename+0x1fc/0x2f0 [ 1345.364192][T16939] ? vfs_rename+0x1e87/0x2460 [ 1345.369122][T16939] ? do_renameat2+0x175e/0x1d70 [ 1345.374158][T16939] ? __ia32_sys_rename+0xd7/0x140 [ 1345.379435][T16939] ? ia32_sys_call+0x3d36/0x42c0 [ 1345.384604][T16939] ? __do_fast_syscall_32+0xb0/0x110 [ 1345.390158][T16939] ? do_fast_syscall_32+0x38/0x80 [ 1345.395419][T16939] ? do_SYSENTER_32+0x1f/0x30 [ 1345.400328][T16939] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.407068][T16939] ? kmsan_get_metadata+0x105/0x1b0 [ 1345.412500][T16939] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1345.418558][T16939] ? hfsplus_bnode_dump+0x50a/0x560 [ 1345.423952][T16939] ? kmsan_get_metadata+0x105/0x1b0 [ 1345.429372][T16939] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1345.435447][T16939] ? hfsplus_brec_remove+0x92f/0xa60 [ 1345.440975][T16939] ? kmsan_get_metadata+0x105/0x1b0 [ 1345.446445][T16939] __msan_warning+0x96/0x120 [ 1345.451272][T16939] hfsplus_rename_cat+0x1173/0x17e0 [ 1345.456760][T16939] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.463492][T16939] ? kfree+0x151/0xea0 [ 1345.467788][T16939] ? filter_irq_stacks+0x49/0x190 [ 1345.473017][T16939] ? stack_depot_save_flags+0x35/0x7c0 [ 1345.478718][T16939] ? kmsan_get_metadata+0x105/0x1b0 [ 1345.484125][T16939] ? kmsan_get_metadata+0x105/0x1b0 [ 1345.489614][T16939] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1345.496186][T16939] ? kmsan_get_metadata+0x105/0x1b0 [ 1345.501612][T16939] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1345.507628][T16939] ? kmsan_get_metadata+0x105/0x1b0 [ 1345.513038][T16939] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1345.519082][T16939] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1345.525642][T16939] hfsplus_rename+0x1fc/0x2f0 [ 1345.530570][T16939] ? __pfx_hfsplus_rename+0x10/0x10 [ 1345.536050][T16939] vfs_rename+0x1e87/0x2460 [ 1345.540829][T16939] do_renameat2+0x175e/0x1d70 [ 1345.545807][T16939] __ia32_sys_rename+0xd7/0x140 [ 1345.550875][T16939] ia32_sys_call+0x3d36/0x42c0 [ 1345.555847][T16939] __do_fast_syscall_32+0xb0/0x110 [ 1345.561238][T16939] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1345.567195][T16939] do_fast_syscall_32+0x38/0x80 [ 1345.572289][T16939] do_SYSENTER_32+0x1f/0x30 [ 1345.577019][T16939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.583596][T16939] RIP: 0023:0xf711e539 [ 1345.587805][T16939] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1345.607619][T16939] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 1345.616232][T16939] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000780 [ 1345.624385][T16939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1345.632524][T16939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.640642][T16939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1345.648760][T16939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.656907][T16939] [ 1345.660216][T16939] Kernel Offset: disabled [ 1345.664621][T16939] Rebooting in 86400 seconds..