last executing test programs: 41.150404537s ago: executing program 2 (id=837): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x4002000}, 0x2008090) 40.99411432s ago: executing program 2 (id=840): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1b0000001d005f0214fffffffffffff8070000000d000000000006", 0x1b) 40.777257715s ago: executing program 2 (id=843): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') 40.712178636s ago: executing program 2 (id=844): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x840, &(0x7f0000000800)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@gid}, {@gid}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@keep_last_dots}]}, 0x1, 0x152c, &(0x7f0000001f80)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) 40.182094816s ago: executing program 2 (id=850): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) pipe2(0x0, 0x0) 39.732245034s ago: executing program 2 (id=857): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0203ff030c00000020000000fddbdf25010009000000000003000600000000000200000000000000000000000000000002000100000000000000fb0b00000000030005000000000002000000ac141daa0000000000000000010014"], 0x60}, 0x1, 0x7}, 0x0) 39.357326252s ago: executing program 32 (id=857): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0203ff030c00000020000000fddbdf25010009000000000003000600000000000200000000000000000000000000000002000100000000000000fb0b00000000030005000000000002000000ac141daa0000000000000000010014"], 0x60}, 0x1, 0x7}, 0x0) 2.211826137s ago: executing program 4 (id=1208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.089252949s ago: executing program 3 (id=1210): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x81, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1V+1nVVawSpIwA0Igoq0Ai7IDRIXXOQGCa0QirhZJECKQJUWgUSgabQSAmYFCysqYXRm3rHHbtK4+bLT/H5t/J8585w575n2OT4TzXsmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICIL/30saGDaatHAQA8SK+NvzF02O9/AHiknPL+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA20tRxFuR4r2xVpps3+8YONGcO3d+YnTs5qsNpkhRiaJdX/4ZOHjo8JEXX3p5uJsfv/699rl4ffzUsdrx+dmFxcbSUmO6NjHXPD0/3dj0M9zt+hvtbb8Atdk3z02fObNUO3Tg8LqHz1dv7Hxsd/Xo8LP7nu/WToyOjY331PT13/HWPyLdu6fiU2RHFPHlSPGt/d9J9YioxN33wm2OHffbYPSV/dfeiYnRsfaOzDTrc8vlg6mSq/oiqj0rjXR75AH04l0ZibhQ/ncqB7y33L3xhfpifWqmUTtZX1xuLjfn51KlM9pyf6pRieEUsRARrWKrB8920x9FvBopbnzYSlMRUXT74IXXxt8YOnzrFfse4CBvsflqEXE1HoKehW1qZxTx25Hi3cmhOJ37qt021yO+WOYrEW+VeSXFxXw/lQeI4Yjv+n0CD7W+KOJvIsV8aqXpbu+3zytPfLX2lbkz8z213fPKh/79wYPk3IRtbCCKmGqf8bfSnf9lFwAAAAAAAAAAAADwYBTxzUhxeXZPWojeOaXNubO1U/Wpmc6ngruf/a/ltVZWVlaqqZO1nEM5R3KezDmZcyHnhZwXc17KeTnnlZxXc17L2coZlbz9nLWcQzlHcp7MOZlzIeeFnBdzXsp5OeeVnFdzXsvZyhnmPQEAAAAAAAAAAAAAAAAAAHCPDUYRvxEp/v33v9b+Xulofy/9Z48OHz/xmd7vjH/mNs9T1h6IiG/G5r6Td0f+rvFUKf+59/sF3N5AFPH1/P1/v7zVgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALaFShTxK5HiG99rpUgRMRIxGZ28Vmz16AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0s5UxKuR4md/d2R1WV9EpPa/HXvKH0dipMj5RJmvxMjBdlZGjpU5EHFgC8YP3Lmlt995sz4z01h0ww033Fi9sdVHJgAAAAAAAAAAAAAAAAB4hKUi/j5S/OTvtVI1Is5Xb+x8bHf16PCz+54vomhfBCD11r8+fupY7fj87MJiY2mpMV2bmGuenp9ubHZzAyeac+fOT4yO3Zedua3B+zz+wYHj8wtvLzbP/sLyTR/fNXBsaml5sX765g/HYPRFDPUu2dse8MToWHvQM836XHvVVLnFAPsiapvdGR55u1IR/xsp3tv/7Xg8L8vX/+jv3Fvr/j/8xbV7P9y3Plf/d2wfPz57dPj4ruc2czttdqB7241XNsLYeM/ivjzKH+pZVs3j2vRzwyOq7P8XIsXP/1GRuj2U+/8HOveK1dr/+fpaTx3dkKu2qP+f6Fl2NB+1+vsiBpZnF/qfjhhYevud/c3Z+tnG2cbckUMvvzR85OUXj7zUvyNi4ExzpjG0dmvTrx0AAAAAAAAAAAAAAAAA3C/9qYgvRYpf+ru/XJ03nuf/faZzb23+X+/83z0bnqf3ugG3un3TuX63mdfXq9xmSkU8FSme/bNn2uNNscucd7hDu1IR3y/7afrL6Qt5We7/PLP/5v1/YUOu2qL5v4/3LLuQjxP/ESke/4Nn4gs9x4mNs3vLur+IFFM/8vlcFzvKuu7zdeZEdyYGl7VfixTvn1xf2503/cRa7cHN7hZspbL/ZyPFP/zW38aP5mXrr/9x8/7ftSFXbVH/P9m7TxGx9PY7b9ZnZhqLS5t+KeCRU/b/r0eKv/6Tb8dzednHXf+ne52fPc+tz8Fu0Rb1/1M9y6p5XD/2CV8LAAAAAAAAAAAAeFjsSkX8U6T48z/dl/bnZZv5/O/0hly1RZ//e7pn2fS6z//evxubfpEBAGCb6E9F/ESk+OPp66k7N/aW839fWZv/M7rxxL19Tv+D7Xn+n+hc/xPM/y+3mVIR/5fn9Q7dZl7vj0eKX/upfbku7S7rRrrDbf8ceG1+bv+xmZn50/Xl+tRMoza+UD/dKNfdGyn+9d8+n9ettOf5dudHd+YGr80J/p1I8XMfdGs7c4K7cymfXKs9WNbujxTff399bXfe1VNrtYfK2t+MFGP/ffPa3Wu1h8vaf4wU//lurVu7q6ztvp97eq32wOn5mY+8ZQMAAAAAAAAAAAAAAAAAAGDr9aciUqS48jOXVufGr7/+V/c6AOuv/7XR/fr+/+q92U0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCikKOK/IsV7Y610rSjvdwycaM6dOz8xOnbz1QZTpKhE0a4v/wwcPHT4yIsvvTzczY9f/177XLw+fupY7fj87MJiY2mpMV2bmGuenp9ubPoZ7nb9jfa2X4Da7Jvnps+cWaodOnB43cPnqzd2Pra7enT42X3Pd2snRsfGxntq+vrveOsfke7dU/EpsiOK+KtI8a3930n/XERU4u574TbHjvttMPrK/mvvxMToWHtHZpr1ueXywVTJVX0R1Z6VRro98gB68a6MRFyIiEo54L3l7o0v1BfrUzON2sn64nJzuTk/lyqd0Zb7U41KDKeIhYhoFVs9eLab/ijiSqS48WEr/UsRUXT74IXXxt8YOnzrFfse4CBvsflqEXE1HoKehW1qZxTxZKR4d3Io3i86fdVum+sRXyzzlYi3yryS4mK+n8oDxHDEd/0+gYdaXxRxMlLMp1a6XuTeb59Xnvhq7StzZ+Z7arvnlQ/9+4MHybkJ29hAFPFB+4y/lT7w+xwAAAAAAAAAAAAAtrkiXo0Ul2f3pPb80NU5pc25s7VT9amZzsf6u5/9r+W1VlZWVqqpk7WcQzlHcp7MOZlzIeeFnBdzXsp5OeeVnFdzXsvZyhmVvP2ctZxDOUdynsw5mXMh54WcF3Neynk555WcV3Ney9nKGT4nDQAAAAAAAAAAAAAAAADAfVKJIn41Unzje620UnS+X3YyOnnNPFf4VPv/AAAA//84/iOE") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) 2.012580861s ago: executing program 4 (id=1211): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@raw={0xfe, 0x5, "4e055a4ce4d8"}) 1.829486704s ago: executing program 4 (id=1214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000180)) 1.629600548s ago: executing program 4 (id=1216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xc0, 0x7ff00003}]}) fsopen(0x0, 0x0) 1.50899054s ago: executing program 3 (id=1218): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) 1.309806034s ago: executing program 4 (id=1221): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0) 1.247834706s ago: executing program 0 (id=1222): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) 1.223820766s ago: executing program 3 (id=1223): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1.204939497s ago: executing program 1 (id=1224): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80882, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x80503d0a, &(0x7f0000003ec0)={0x16}) 1.107242598s ago: executing program 4 (id=1225): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1.02857327s ago: executing program 0 (id=1226): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) 1.00223432s ago: executing program 1 (id=1227): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8915, 0x0) 994.847061ms ago: executing program 3 (id=1228): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_setup(0x2768, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc, 0x40000}) 837.938104ms ago: executing program 1 (id=1229): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000380)={0x80, 0x1e0, 0x80, 0x360, 0x7, 0xacc, 0x20, 0x2, {0x2, 0x9e59}, {0x6, 0x6}, {0x6, 0xffffae5d}, {0x80, 0x8001}, 0x3, 0x40, 0x1, 0x9, 0x1, 0x6, 0x81e0, 0x4, 0x7ff, 0x2, 0x1, 0x4, 0x0, 0x100, 0x3, 0x6}) 831.482594ms ago: executing program 0 (id=1230): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8880) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) 794.273204ms ago: executing program 3 (id=1231): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) 632.888258ms ago: executing program 1 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={r0, 0x0, 0x0}, 0x21) 615.913058ms ago: executing program 0 (id=1233): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) 499.49314ms ago: executing program 3 (id=1234): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) 428.782461ms ago: executing program 0 (id=1235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x88, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "062e346aa0f99857"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "03ef7506ecbef970"}, 0x3}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "82e11e0974088aea"}, 0x1}}, @CGW_SRC_IF={0x2b}, @CGW_FILTER={0xc}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8}}]}, 0x88}}, 0x0) 362.293773ms ago: executing program 1 (id=1236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xffffff6e, 0xa}}}]}]}, 0x8c}}, 0x0) 72.261588ms ago: executing program 0 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@smackfsdef={'smackfsdef', 0x3d, '&\\:'}}], 0x2f}) 0s ago: executing program 1 (id=1238): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x2, 0x1, 0x0, "eee98fb006178749cb4dfd9300009b6b7bd152f35ed730fc700000cb4f1891e2", 0x32314752}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. syzkaller login: [ 68.848555][ T5774] cgroup: Unknown subsys name 'net' [ 68.982716][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.661635][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.670943][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.694838][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.163434][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.175282][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.182918][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.204712][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.211883][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.215723][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.228052][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.228297][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.243631][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.252077][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.254307][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.260084][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.275939][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.283372][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.293702][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.302277][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.311036][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.317083][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.319829][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.326094][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.332936][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.339750][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.347288][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.362752][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.815968][ T5806] modprobe (5806) used greatest stack depth: 20784 bytes left [ 72.878538][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 72.896756][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 72.952112][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 73.033221][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 73.117776][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.125790][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.133148][ T5784] bridge_slave_0: entered allmulticast mode [ 73.140780][ T5784] bridge_slave_0: entered promiscuous mode [ 73.168580][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.175810][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.183055][ T5790] bridge_slave_0: entered allmulticast mode [ 73.190437][ T5790] bridge_slave_0: entered promiscuous mode [ 73.201736][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.209221][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.216568][ T5784] bridge_slave_1: entered allmulticast mode [ 73.223378][ T5784] bridge_slave_1: entered promiscuous mode [ 73.234361][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.241560][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.249127][ T5790] bridge_slave_1: entered allmulticast mode [ 73.255913][ T5790] bridge_slave_1: entered promiscuous mode [ 73.326932][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.334248][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.341906][ T5795] bridge_slave_0: entered allmulticast mode [ 73.349283][ T5795] bridge_slave_0: entered promiscuous mode [ 73.360506][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.383049][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.390921][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.398280][ T5795] bridge_slave_1: entered allmulticast mode [ 73.405672][ T5795] bridge_slave_1: entered promiscuous mode [ 73.414120][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.452520][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.490380][ T5784] team0: Port device team_slave_0 added [ 73.512648][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.550332][ T5784] team0: Port device team_slave_1 added [ 73.567907][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.575344][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.582639][ T5785] bridge_slave_0: entered allmulticast mode [ 73.589637][ T5785] bridge_slave_0: entered promiscuous mode [ 73.598446][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.606289][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.613594][ T5785] bridge_slave_1: entered allmulticast mode [ 73.621154][ T5785] bridge_slave_1: entered promiscuous mode [ 73.643197][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.682087][ T5790] team0: Port device team_slave_0 added [ 73.690868][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.701159][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.708349][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.735676][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.750260][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.757313][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.783281][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.810120][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.821101][ T5790] team0: Port device team_slave_1 added [ 73.853079][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.922020][ T5795] team0: Port device team_slave_0 added [ 73.931933][ T5795] team0: Port device team_slave_1 added [ 73.951382][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.958605][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.985085][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.998921][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.006246][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.032890][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.061292][ T5784] hsr_slave_0: entered promiscuous mode [ 74.068626][ T5784] hsr_slave_1: entered promiscuous mode [ 74.095292][ T5785] team0: Port device team_slave_0 added [ 74.133888][ T5785] team0: Port device team_slave_1 added [ 74.169672][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.177190][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.203602][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.216873][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.223845][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.249934][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.314364][ T5790] hsr_slave_0: entered promiscuous mode [ 74.321221][ T5790] hsr_slave_1: entered promiscuous mode [ 74.327898][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.337320][ T5790] Cannot create hsr debugfs directory [ 74.359767][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.366973][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.385595][ T5792] Bluetooth: hci0: command tx timeout [ 74.393299][ T5100] Bluetooth: hci1: command tx timeout [ 74.403177][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.417081][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.424097][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.450874][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.464803][ T5100] Bluetooth: hci3: command tx timeout [ 74.464822][ T5792] Bluetooth: hci2: command tx timeout [ 74.552144][ T5785] hsr_slave_0: entered promiscuous mode [ 74.558791][ T5785] hsr_slave_1: entered promiscuous mode [ 74.565141][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.572830][ T5785] Cannot create hsr debugfs directory [ 74.585599][ T5795] hsr_slave_0: entered promiscuous mode [ 74.592014][ T5795] hsr_slave_1: entered promiscuous mode [ 74.598725][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.606357][ T5795] Cannot create hsr debugfs directory [ 74.933458][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.956949][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.968029][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.985713][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.071653][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.090048][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.100714][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.112157][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.219795][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.233057][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.243148][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.253686][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.374067][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.388087][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.408129][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.429020][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.440853][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.476835][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.495305][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.521278][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.528745][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.546476][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.553609][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.621209][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.648493][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.655692][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.680491][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.708574][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.715864][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.750806][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.768588][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.775904][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.811211][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.818376][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.937738][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.019649][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.108810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.116055][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.134243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.141695][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.325900][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.436298][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.470921][ T5100] Bluetooth: hci0: command tx timeout [ 76.478858][ T5100] Bluetooth: hci1: command tx timeout [ 76.513845][ T5784] veth0_vlan: entered promiscuous mode [ 76.544899][ T5100] Bluetooth: hci2: command tx timeout [ 76.555773][ T5100] Bluetooth: hci3: command tx timeout [ 76.568221][ T5784] veth1_vlan: entered promiscuous mode [ 76.625829][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.643857][ T5790] veth0_vlan: entered promiscuous mode [ 76.679535][ T5790] veth1_vlan: entered promiscuous mode [ 76.721991][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.743855][ T5784] veth0_macvtap: entered promiscuous mode [ 76.757709][ T5784] veth1_macvtap: entered promiscuous mode [ 76.803401][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.818321][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.856304][ T5795] veth0_vlan: entered promiscuous mode [ 76.873721][ T5785] veth0_vlan: entered promiscuous mode [ 76.882799][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.892227][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.901641][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.911453][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.937009][ T5790] veth0_macvtap: entered promiscuous mode [ 76.957530][ T5795] veth1_vlan: entered promiscuous mode [ 76.965970][ T5785] veth1_vlan: entered promiscuous mode [ 76.977423][ T5790] veth1_macvtap: entered promiscuous mode [ 77.079144][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.090616][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.104199][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.118400][ T5795] veth0_macvtap: entered promiscuous mode [ 77.158214][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.169184][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.181568][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.193142][ T5795] veth1_macvtap: entered promiscuous mode [ 77.219189][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.228752][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.238095][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.247238][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.265495][ T5785] veth0_macvtap: entered promiscuous mode [ 77.272974][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.288620][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.309552][ T5785] veth1_macvtap: entered promiscuous mode [ 77.321811][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.333192][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.343850][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.355005][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.366927][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.413739][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.416235][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.433127][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.433574][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.454376][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.466112][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.477949][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.490989][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.502229][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.513523][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.524248][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.534277][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.545027][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.556750][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.576001][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.588065][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.597399][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.606837][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.621003][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.637201][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.647466][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.658126][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.668966][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.679458][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.692023][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.735595][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.743815][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.821956][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.837030][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849482][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.861472][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.928963][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.940468][ T5871] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5'. [ 77.953049][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.976727][ T5871] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5'. [ 78.100257][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.114667][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.194018][ T5876] syz.2.3[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.259839][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.276353][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.294060][ T5876] loop2: detected capacity change from 0 to 1764 [ 78.313420][ T5876] ======================================================= [ 78.313420][ T5876] WARNING: The mand mount option has been deprecated and [ 78.313420][ T5876] and is ignored by this kernel. Remove the mand [ 78.313420][ T5876] option from the mount to silence this warning. [ 78.313420][ T5876] ======================================================= [ 78.384221][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.409447][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.487087][ T5876] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 78.521241][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.529090][ T5880] loop3: detected capacity change from 0 to 64 [ 78.534788][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.548017][ T5100] Bluetooth: hci1: command tx timeout [ 78.548032][ T5792] Bluetooth: hci0: command tx timeout [ 78.626520][ T5100] Bluetooth: hci3: command tx timeout [ 78.626845][ T5792] Bluetooth: hci2: command tx timeout [ 79.058372][ T5888] loop1: detected capacity change from 0 to 2048 [ 79.153806][ T5888] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.172500][ T5894] tmpfs: Bad value for 'mpol' [ 79.962794][ T5885] loop0: detected capacity change from 0 to 32768 [ 80.049043][ T5885] [ 80.049043][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.049043][ T5885] [ 80.083817][ T5914] loop1: detected capacity change from 0 to 512 [ 80.143533][ T5914] EXT4-fs: Ignoring removed i_version option [ 80.186424][ T5914] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 80.190217][ T5885] [ 80.190217][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.190217][ T5885] [ 80.221561][ T5914] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 80.254241][ T5914] System zones: 1-12 [ 80.271259][ T5885] [ 80.271259][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.271259][ T5885] [ 80.297205][ T5914] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.304443][ T5914] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.21: invalid indirect mapped block 12 (level 1) [ 80.364750][ T5885] [ 80.364750][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.364750][ T5885] [ 80.398111][ T5924] loop3: detected capacity change from 0 to 1024 [ 80.445159][ T5885] [ 80.445159][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.445159][ T5885] [ 80.459841][ T5914] EXT4-fs (loop1): Remounting filesystem read-only [ 80.480951][ T5914] EXT4-fs (loop1): 1 truncate cleaned up [ 80.530957][ T5914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 80.553335][ T5885] [ 80.553335][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.553335][ T5885] [ 80.613804][ T113] [ 80.613804][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.613804][ T113] [ 80.631583][ T5792] Bluetooth: hci0: command tx timeout [ 80.631606][ T5100] Bluetooth: hci1: command tx timeout [ 80.705461][ T5100] Bluetooth: hci2: command tx timeout [ 80.708051][ T5792] Bluetooth: hci3: command tx timeout [ 80.734913][ T2894] [ 80.734913][ T2894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.734913][ T2894] [ 80.789568][ T2894] [ 80.789568][ T2894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.789568][ T2894] [ 80.813929][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 80.831369][ T112] [ 80.831369][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.831369][ T112] [ 80.860259][ T5795] [ 80.860259][ T5795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.860259][ T5795] [ 80.902536][ T5795] [ 80.902536][ T5795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.902536][ T5795] [ 81.012943][ T27] audit: type=1326 audit(1757465860.983:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa298eba9 code=0x7ffc0000 [ 81.065095][ T27] audit: type=1326 audit(1757465860.983:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa298eba9 code=0x7ffc0000 [ 81.118454][ T27] audit: type=1326 audit(1757465861.003:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f8aa298eba9 code=0x7ffc0000 [ 81.140486][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.182095][ T27] audit: type=1326 audit(1757465861.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa298eba9 code=0x7ffc0000 [ 81.204107][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.227598][ T27] audit: type=1326 audit(1757465861.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa298eba9 code=0x7ffc0000 [ 82.622614][ T5982] loop0: detected capacity change from 0 to 65 [ 82.673914][ T5982] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 83.066444][ T5792] Bluetooth: Wrong link type (-22) [ 83.287184][ T5969] loop1: detected capacity change from 0 to 32768 [ 83.331166][ T5969] (syz.1.46,5969,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.381572][ T5969] (syz.1.46,5969,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.457189][ T5969] JBD2: Ignoring recovery information on journal [ 83.580916][ T5969] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 83.732056][ T6007] tmpfs: Bad value for 'mpol' [ 83.854204][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 83.918863][ T55] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.145462][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 84.166052][ T55] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.204961][ T55] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.235023][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.242081][ T6019] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 84.260302][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.376483][ T55] hub 3-1:4.0: USB hub found [ 84.574762][ T55] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 84.780398][ T55] usbhid 3-1:4.0: can't add hid device: -71 [ 84.805334][ T55] usbhid: probe of 3-1:4.0 failed with error -71 [ 84.872158][ T55] usb 3-1: USB disconnect, device number 2 [ 84.883327][ T6038] netlink: 'syz.1.78': attribute type 2 has an invalid length. [ 84.916430][ T6038] netlink: 5356 bytes leftover after parsing attributes in process `syz.1.78'. [ 85.438765][ T6058] loop0: detected capacity change from 0 to 512 [ 85.549472][ T6058] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.87: iget: bad i_size value: 38620345925642 [ 85.623475][ T6058] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.87: couldn't read orphan inode 15 (err -117) [ 85.663738][ T6058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.741800][ T6070] x_tables: unsorted underflow at hook 4 [ 86.035643][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.084263][ T6080] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 86.095481][ T6080] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 86.107657][ T6082] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 86.134290][ T6082] netlink: 228 bytes leftover after parsing attributes in process `syz.3.98'. [ 86.258705][ T8] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 86.279896][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 86.306571][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 86.323191][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.340207][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.349150][ T6090] netlink: 'syz.3.101': attribute type 3 has an invalid length. [ 86.364807][ T6058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.393642][ T6062] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 86.397331][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 86.475454][ T8] usb 1-1: invalid MIDI in EP 0 [ 86.673622][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 86.684044][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.743305][ T8] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 86.792019][ T8] usb 1-1: USB disconnect, device number 2 [ 86.970248][ T6101] cgroup: Name too long [ 87.066527][ T9] cfg80211: failed to load regulatory.db [ 87.477409][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.615388][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 87.696437][ T6124] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 87.828486][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.121'. [ 87.844733][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.056954][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.075754][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 88.107447][ T5823] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 88.136829][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.168437][ T5823] usb 4-1: config 0 descriptor?? [ 88.385914][ T5823] ath6kl: Failed to submit usb control message: -71 [ 88.396042][ T5823] ath6kl: unable to send the bmi data to the device: -71 [ 88.403686][ T5823] ath6kl: Unable to send get target info: -71 [ 88.444727][ T5823] ath6kl: Failed to init ath6kl core: -71 [ 88.452557][ T5823] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 88.531407][ T5823] usb 4-1: USB disconnect, device number 2 [ 88.697122][ T6155] usb usb8: usbfs: process 6155 (syz.2.132) did not claim interface 0 before use [ 89.160569][ T6165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 89.400772][ T6149] loop1: detected capacity change from 0 to 32768 [ 89.426712][ T6149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.130 (6149) [ 89.476677][ T6149] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.493608][ T6149] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 89.524851][ T6149] BTRFS info (device loop1): using free space tree [ 89.653701][ T6190] loop0: detected capacity change from 0 to 8 [ 89.660081][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.685076][ T6149] BTRFS info (device loop1): enabling ssd optimizations [ 89.703006][ T6190] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 89.724638][ T6149] BTRFS info (device loop1): auto enabling async discard [ 89.752934][ T5878] udevd[5878]: incorrect cramfs checksum on /dev/loop0 [ 89.804908][ T6190] process 'syz.0.144' launched './file2' with NULL argv: empty string added [ 89.844455][ T5878] udevd[5878]: incorrect cramfs checksum on /dev/loop0 [ 89.867715][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 89.883983][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 89.884841][ T6190] cramfs: bad data blocksize 4293972856 [ 89.906328][ T9] usb 4-1: config 220 has no interface number 2 [ 89.912891][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 89.931980][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 89.939915][ T6190] cramfs: bad data blocksize 4293972856 [ 89.953430][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 89.971114][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 90.020217][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.045611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.046162][ T5785] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.065181][ T9] usb 4-1: Product: syz [ 90.069417][ T9] usb 4-1: Manufacturer: syz [ 90.100557][ T9] usb 4-1: SerialNumber: syz [ 90.276152][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'. [ 90.391464][ T9] usb 4-1: selecting invalid altsetting 0 [ 90.408868][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 90.440724][ T9] usb 4-1: No valid video chain found. [ 90.469555][ T9] usb 4-1: selecting invalid altsetting 0 [ 90.515449][ T9] usbtest: probe of 4-1:220.1 failed with error -22 [ 90.528680][ T9] usb 4-1: USB disconnect, device number 3 [ 90.783341][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.152'. [ 90.831910][ T6212] program syz.0.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.015342][ T6217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.155'. [ 91.035370][ T6217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.155'. [ 91.869415][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 91.911380][ T6248] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.173388][ T6258] loop0: detected capacity change from 0 to 256 [ 92.286667][ T6258] FAT-fs (loop0): Directory bread(block 64) failed [ 92.293655][ T6258] FAT-fs (loop0): Directory bread(block 65) failed [ 92.322157][ T6258] FAT-fs (loop0): Directory bread(block 66) failed [ 92.351264][ T6258] FAT-fs (loop0): Directory bread(block 67) failed [ 92.368821][ T6258] FAT-fs (loop0): Directory bread(block 68) failed [ 92.384869][ T6258] FAT-fs (loop0): Directory bread(block 69) failed [ 92.414789][ T6258] FAT-fs (loop0): Directory bread(block 70) failed [ 92.421401][ T6258] FAT-fs (loop0): Directory bread(block 71) failed [ 92.462882][ T6258] FAT-fs (loop0): Directory bread(block 72) failed [ 92.500462][ T6258] FAT-fs (loop0): Directory bread(block 73) failed [ 92.830094][ T6274] loop3: detected capacity change from 0 to 1035 [ 92.875985][ T6274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.910940][ T6274] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.990051][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.235088][ T6288] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073072017407) [ 93.253544][ T6288] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 93.289273][ T6291] comedi comedi0: dt2817: I/O port conflict (0xee,5) [ 93.754766][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 93.963908][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.012775][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 94.024756][ T9] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 94.049611][ T9] usb 4-1: Product: syz [ 94.062734][ T9] usb 4-1: Manufacturer: syz [ 94.067840][ T9] usb 4-1: SerialNumber: syz [ 94.082723][ T9] usb 4-1: config 0 descriptor?? [ 94.116756][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 94.311878][ T6327] program syz.0.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.594740][ T9] usb 4-1: USB disconnect, device number 4 [ 94.602101][ T6336] capability: warning: `syz.1.214' uses deprecated v2 capabilities in a way that may be insecure [ 95.272137][ T6358] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 95.325414][ T6360] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.552692][ T6369] loop2: detected capacity change from 0 to 512 [ 95.575858][ T6369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.644314][ T6369] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 95.688492][ T6369] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 95.726129][ T6369] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.764157][ T6369] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 95.802545][ T6369] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.853606][ T6369] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 95.891920][ T6369] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.228: bg 0: block 40: padding at end of block bitmap is not set [ 95.903602][ T6377] usb usb8: check_ctrlrecip: process 6377 (syz.1.232) requesting ep 01 but needs 81 [ 95.921064][ T6377] usb usb8: usbfs: process 6377 (syz.1.232) did not claim interface 0 before use [ 95.961658][ T6369] EXT4-fs (loop2): Remounting filesystem read-only [ 95.974760][ T6369] EXT4-fs (loop2): 1 truncate cleaned up [ 95.996163][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.171468][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.625127][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.815117][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 96.837053][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 96.863054][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.888970][ T6405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.910696][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.969995][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.032239][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.053901][ T6411] cgroup: none used incorrectly [ 97.071209][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.086591][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.621433][ T966] usb 2-1: USB disconnect, device number 2 [ 97.818986][ T6435] tmpfs: Bad value for 'mpol' [ 98.373876][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 98.398466][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'. [ 98.452371][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 98.498860][ T6460] netlink: 2 bytes leftover after parsing attributes in process `syz.0.268'. [ 98.544351][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'. [ 98.792578][ T6466] loop1: detected capacity change from 0 to 4096 [ 98.827221][ T6466] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 99.010057][ T6466] ntfs: volume version 3.1. [ 99.498837][ T6492] loop3: detected capacity change from 0 to 1024 [ 99.630026][ T6496] usb usb9: usbfs: process 6496 (syz.1.285) did not claim interface 6 before use [ 99.788968][ T59] hfsplus: b-tree write err: -5, ino 4 [ 99.874356][ T6502] netlink: 'syz.0.290': attribute type 21 has an invalid length. [ 99.924304][ T6502] netlink: 164 bytes leftover after parsing attributes in process `syz.0.290'. [ 100.891339][ T6541] netlink: 'syz.1.309': attribute type 2 has an invalid length. [ 100.911613][ T6544] netlink: 'syz.3.311': attribute type 75 has an invalid length. [ 101.060881][ T27] audit: type=1326 audit(1757465881.023:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.2.312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f013938eba9 code=0x0 [ 101.319524][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 102.005183][ T6580] netlink: 'syz.1.329': attribute type 21 has an invalid length. [ 102.023319][ T6580] netlink: 'syz.1.329': attribute type 20 has an invalid length. [ 102.047224][ T6580] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.284205][ T6588] : entered promiscuous mode [ 102.410404][ T6590] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.764790][ T6602] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.062435][ T6614] loop0: detected capacity change from 0 to 256 [ 103.133628][ T6614] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 103.901246][ T6640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.120784][ T6648] afs: Bad value for 'source' [ 104.360578][ T6658] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 104.556398][ T6662] loop3: detected capacity change from 0 to 256 [ 104.733065][ T6662] FAT-fs (loop3): Directory bread(block 64) failed [ 104.784840][ T6662] FAT-fs (loop3): Directory bread(block 65) failed [ 104.791565][ T6662] FAT-fs (loop3): Directory bread(block 66) failed [ 104.814796][ T6662] FAT-fs (loop3): Directory bread(block 67) failed [ 104.854119][ T6662] FAT-fs (loop3): Directory bread(block 68) failed [ 104.870813][ T6670] loop0: detected capacity change from 0 to 1024 [ 104.877448][ T6662] FAT-fs (loop3): Directory bread(block 69) failed [ 104.884225][ T6662] FAT-fs (loop3): Directory bread(block 70) failed [ 104.894370][ T6662] FAT-fs (loop3): Directory bread(block 71) failed [ 104.902343][ T6662] FAT-fs (loop3): Directory bread(block 72) failed [ 104.909319][ T6662] FAT-fs (loop3): Directory bread(block 73) failed [ 104.953266][ T6670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.976514][ T6676] warning: `syz.2.376' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.992202][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 105.140331][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.547392][ T6691] netlink: 'syz.3.380': attribute type 15 has an invalid length. [ 105.684949][ T6695] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.385'. [ 106.517925][ T6720] loop2: detected capacity change from 0 to 512 [ 106.551682][ T6720] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.612633][ T6720] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.689513][ T6720] EXT4-fs (loop2): 1 truncate cleaned up [ 106.702215][ T6697] loop1: detected capacity change from 0 to 32768 [ 106.716168][ T6720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.827489][ T6729] loop0: detected capacity change from 0 to 8 [ 106.845784][ T6720] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:298: inode #15: comm syz.2.397: verity file has no extents [ 106.954975][ T6720] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 107.017287][ T6729] SQUASHFS error: Unable to read directory block [1d0:0] [ 107.082686][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.442783][ T6742] Cannot find add_set index 0 as target [ 107.564873][ T6746] x_tables: unsorted underflow at hook 2 [ 108.271425][ T6774] loop3: detected capacity change from 0 to 512 [ 108.346269][ T6774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.485004][ T6774] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.707003][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.267979][ T6812] loop0: detected capacity change from 0 to 64 [ 109.401220][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 109.455152][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 109.481833][ T6818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.607034][ T6820] netlink: 164 bytes leftover after parsing attributes in process `syz.0.444'. [ 109.771616][ T6827] cgroup: release_agent respecified [ 109.826684][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 110.400441][ T6850] mmap: syz.2.460 (6850): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 110.605563][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.462'. [ 111.290524][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 111.290627][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.294083][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 111.317264][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 111.317293][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.317341][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 111.319088][ T6881] vhci_hcd: connection closed [ 111.319198][ T6879] vhci_hcd: connection closed [ 111.326045][ T59] vhci_hcd: stop threads [ 111.326880][ T59] vhci_hcd: release socket [ 111.326924][ T59] vhci_hcd: disconnect device [ 111.331654][ T59] vhci_hcd: stop threads [ 111.331665][ T59] vhci_hcd: release socket [ 111.331685][ T59] vhci_hcd: disconnect device [ 111.954786][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 111.990027][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 112.027065][ T6900] netlink: 'syz.1.481': attribute type 8 has an invalid length. [ 112.058969][ T6900] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 112.233728][ T6906] loop2: detected capacity change from 0 to 736 [ 112.753813][ T6918] xt_cgroup: xt_cgroup: no path or classid specified [ 112.972838][ T6928] loop3: detected capacity change from 0 to 1024 [ 113.030645][ T6929] loop1: detected capacity change from 0 to 1764 [ 113.033702][ T6928] hfsplus: bad catalog entry used to create inode [ 113.226053][ T42] hfsplus: b-tree write err: -5, ino 4 [ 113.664959][ T5836] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 113.877974][ T5836] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 113.892398][ T5836] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 113.922572][ T5836] usb 3-1: config 0 has no interface number 1 [ 113.932622][ T5836] usb 3-1: config 0 has no interface number 2 [ 113.948314][ T5836] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 113.960305][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.978525][ T5836] usb 3-1: config 0 descriptor?? [ 114.208468][ T5836] qcserial 3-1:0.3: Qualcomm USB modem converter detected [ 114.495414][ T23] usb 3-1: USB disconnect, device number 3 [ 114.513426][ T23] qcserial 3-1:0.3: device disconnected [ 114.575378][ T6980] loop0: detected capacity change from 0 to 128 [ 114.794817][ T6984] netlink: 72 bytes leftover after parsing attributes in process `syz.1.522'. [ 114.816333][ T6984] netlink: 72 bytes leftover after parsing attributes in process `syz.1.522'. [ 115.384119][ T27] audit: type=1326 audit(1757465895.353:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 115.485623][ T27] audit: type=1326 audit(1757465895.353:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 115.558824][ T27] audit: type=1326 audit(1757465895.363:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 115.617173][ T27] audit: type=1326 audit(1757465895.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 115.640422][ T7015] block device autoloading is deprecated and will be removed. [ 115.663352][ T7015] syz.0.535: attempt to access beyond end of device [ 115.663352][ T7015] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 115.684897][ T27] audit: type=1326 audit(1757465895.363:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 115.707183][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.804720][ T966] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.978043][ T7027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.986951][ T966] usb 3-1: Using ep0 maxpacket: 8 [ 116.001567][ T966] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.020793][ T966] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.058355][ T966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.083965][ T966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.094846][ T5836] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.134855][ T966] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.152152][ T966] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.175451][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.287934][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 116.319621][ T5836] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 116.333570][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.364141][ T5836] usb 4-1: config 0 has no interface number 0 [ 116.380428][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 116.390871][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.402896][ T5836] usb 4-1: Product: syz [ 116.414634][ T5836] usb 4-1: Manufacturer: syz [ 116.419293][ T5836] usb 4-1: SerialNumber: syz [ 116.437531][ T5836] usb 4-1: config 0 descriptor?? [ 116.682895][ T5836] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 116.693513][ T5823] usb 3-1: USB disconnect, device number 4 [ 116.707937][ T5836] usb 4-1: No valid video chain found. [ 116.913281][ T8] usb 4-1: USB disconnect, device number 5 [ 117.304644][ T7035] comedi comedi3: reset error (fatal) [ 117.400281][ T7043] syz.1.548 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.570667][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 117.616064][ T7047] netlink: 'syz.2.550': attribute type 2 has an invalid length. [ 118.005013][ T7063] netlink: 22756 bytes leftover after parsing attributes in process `syz.1.559'. [ 118.354085][ T7075] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 118.394676][ T7075] netlink: 'syz.1.565': attribute type 3 has an invalid length. [ 118.429844][ T7075] netlink: 224 bytes leftover after parsing attributes in process `syz.1.565'. [ 118.508226][ T7073] loop3: detected capacity change from 0 to 4096 [ 118.589260][ T7073] ntfs: volume version 3.1. [ 118.704322][ T27] audit: type=1326 audit(1757465898.673:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 118.769735][ T27] audit: type=1326 audit(1757465898.673:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 118.840070][ T27] audit: type=1326 audit(1757465898.683:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 118.952433][ T27] audit: type=1326 audit(1757465898.683:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 119.059870][ T27] audit: type=1326 audit(1757465898.683:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 119.892655][ T7122] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 119.905651][ T7122] netlink: 723 bytes leftover after parsing attributes in process `syz.3.588'. [ 120.241296][ T7104] loop2: detected capacity change from 0 to 32768 [ 120.522016][ T7134] loop3: detected capacity change from 0 to 4096 [ 120.522344][ T7138] loop0: detected capacity change from 0 to 512 [ 120.541060][ T7134] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 120.623775][ T7134] ntfs: volume version 3.1. [ 120.634232][ T7138] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 120.656475][ T7138] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.950535][ T59] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 121.162694][ T7152] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 121.213475][ T7156] loop1: detected capacity change from 0 to 128 [ 121.452758][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.607'. [ 121.498841][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.608'. [ 121.514473][ T7164] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 121.533262][ T7164] netlink: 216 bytes leftover after parsing attributes in process `syz.0.609'. [ 121.577565][ T7163] veth2: entered promiscuous mode [ 121.582680][ T7163] veth2: entered allmulticast mode [ 122.140103][ T7184] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 122.183760][ T7182] loop3: detected capacity change from 0 to 4096 [ 122.229330][ T7182] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 122.239588][ T7189] loop2: detected capacity change from 0 to 256 [ 122.302258][ T7189] FAT-fs (loop2): Directory bread(block 64) failed [ 122.354751][ T7189] FAT-fs (loop2): Directory bread(block 65) failed [ 122.365209][ T7189] FAT-fs (loop2): Directory bread(block 66) failed [ 122.376670][ T7189] FAT-fs (loop2): Directory bread(block 67) failed [ 122.388864][ T7189] FAT-fs (loop2): Directory bread(block 68) failed [ 122.404133][ T7182] ntfs3: loop3: MFT: r=18, expect seq=1 instead of 0! [ 122.424816][ T7189] FAT-fs (loop2): Directory bread(block 69) failed [ 122.428980][ T7182] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 122.431502][ T7189] FAT-fs (loop2): Directory bread(block 70) failed [ 122.473448][ T7189] FAT-fs (loop2): Directory bread(block 71) failed [ 122.484359][ T7182] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 122.504721][ T7189] FAT-fs (loop2): Directory bread(block 72) failed [ 122.544694][ T7189] FAT-fs (loop2): Directory bread(block 73) failed [ 123.522611][ T7222] loop1: detected capacity change from 0 to 512 [ 123.561609][ T7222] EXT4-fs: Ignoring removed nobh option [ 123.676214][ T7230] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 123.679976][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.707439][ T7222] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.713157][ T7230] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms [ 123.756483][ T7222] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.637: corrupted xattr block 33: bad e_name length [ 123.843112][ T7222] EXT4-fs error (device loop1): ext4_get_inode_usage:901: inode #15: comm syz.1.637: corrupted xattr block 33: bad e_name length [ 124.174185][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.267378][ T7248] bond2 (unregistering): Released all slaves [ 124.459861][ T7253] netlink: 148 bytes leftover after parsing attributes in process `syz.1.649'. [ 124.482160][ T7257] loop2: detected capacity change from 0 to 1024 [ 124.509570][ T7253] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 124.890472][ T7261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.131644][ T7276] loop2: detected capacity change from 0 to 256 [ 125.193376][ T7276] FAT-fs (loop2): Directory bread(block 64) failed [ 125.232383][ T7276] FAT-fs (loop2): Directory bread(block 65) failed [ 125.250745][ T7276] FAT-fs (loop2): Directory bread(block 66) failed [ 125.282585][ T7276] FAT-fs (loop2): Directory bread(block 67) failed [ 125.303420][ T7276] FAT-fs (loop2): Directory bread(block 68) failed [ 125.325343][ T7276] FAT-fs (loop2): Directory bread(block 69) failed [ 125.352354][ T7276] FAT-fs (loop2): Directory bread(block 70) failed [ 125.372631][ T7276] FAT-fs (loop2): Directory bread(block 71) failed [ 125.398815][ T7276] FAT-fs (loop2): Directory bread(block 72) failed [ 125.416942][ T7276] FAT-fs (loop2): Directory bread(block 73) failed [ 126.225831][ T5836] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.390111][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'. [ 126.407631][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'. [ 126.442944][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 126.455789][ T5836] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 126.471439][ T5836] usb 4-1: config 0 has an invalid interface number: 150 but max is 64 [ 126.490416][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.521161][ T5836] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 126.552607][ T5836] usb 4-1: config 0 has no interface number 0 [ 126.580961][ T5836] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.612001][ T5836] usb 4-1: config 0 interface 150 has no altsetting 0 [ 126.630050][ T5836] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 126.644638][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.666025][ T5836] usb 4-1: config 0 descriptor?? [ 126.807131][ T7329] Cannot find del_set index 6 as target [ 127.205342][ T5836] usb 4-1: USB disconnect, device number 6 [ 127.339814][ T27] audit: type=1326 audit(1757465907.313:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 127.414933][ T27] audit: type=1326 audit(1757465907.313:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 127.467916][ T27] audit: type=1326 audit(1757465907.343:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 127.490769][ T27] audit: type=1326 audit(1757465907.343:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 127.513943][ T27] audit: type=1326 audit(1757465907.343:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 127.640992][ T7349] loop0: detected capacity change from 0 to 512 [ 127.696224][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.701405][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 127.731610][ T7349] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.838442][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.118741][ T7367] snd_dummy snd_dummy.0: control 2:8:3:syz1:4 is already present [ 128.488273][ T7370] loop3: detected capacity change from 0 to 4096 [ 128.538249][ T7370] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.550789][ T7376] syz.1.708: attempt to access beyond end of device [ 128.550789][ T7376] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 128.652789][ T7370] ntfs: volume version 3.1. [ 129.037115][ T7351] loop2: detected capacity change from 0 to 40427 [ 129.085110][ T7351] F2FS-fs (loop2): build fault injection attr: rate: 4, type: 0x7ffff [ 129.093851][ T7351] F2FS-fs (loop2): Image doesn't support compression [ 129.129615][ T7351] F2FS-fs (loop2): Image doesn't support compression [ 129.151352][ T7388] loop1: detected capacity change from 0 to 256 [ 129.164965][ T7390] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 129.175462][ T7351] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 129.218455][ T7351] F2FS-fs (loop2): invalid crc value [ 129.228678][ T7351] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 129.306393][ T7351] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 129.362976][ T7351] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.493448][ T7351] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 129.535594][ T7351] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 129.568112][ T7351] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 129.688345][ T7351] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.754655][ T27] audit: type=1326 audit(1757465909.723:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 129.765238][ T7351] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_node_page+0x17b/0xf40 [ 129.835318][ T27] audit: type=1326 audit(1757465909.723:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 129.855139][ T7401] loop1: detected capacity change from 0 to 4096 [ 129.914626][ T27] audit: type=1326 audit(1757465909.753:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 129.954320][ T27] audit: type=1326 audit(1757465909.753:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7db8eba9 code=0x7ffc0000 [ 130.048766][ T5790] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 130.102389][ T7401] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 130.148197][ T7401] ntfs3: loop1: Failed to load $Extend (-22). [ 130.180450][ T7401] ntfs3: loop1: Failed to initialize $Extend. [ 131.582621][ T7456] loop0: detected capacity change from 0 to 1024 [ 131.689408][ T7456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.777106][ T7456] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz.0.746: directory missing '.' [ 131.966804][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.204935][ T7480] netlink: 'syz.2.757': attribute type 13 has an invalid length. [ 132.849795][ T7505] binder: 7504:7505 ioctl 40046205 0 returned -22 [ 133.111354][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.119011][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160893][ T7514] vlan1: entered allmulticast mode [ 133.171485][ T7514] veth0_vlan: entered allmulticast mode [ 133.212887][ T7519] bridge0: port 3(netdevsim0) entered blocking state [ 133.244862][ T7519] bridge0: port 3(netdevsim0) entered disabled state [ 133.281500][ T7517] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 134.608941][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 134.635719][ T7566] loop2: detected capacity change from 0 to 2048 [ 134.690815][ T7566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.966383][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.272929][ T7589] loop1: detected capacity change from 0 to 2048 [ 135.354692][ T7589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.168385][ T7623] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 136.463737][ T7631] loop1: detected capacity change from 0 to 4096 [ 136.527393][ T7631] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 136.710855][ T7631] ntfs3: loop1: Failed to load $Extend (-22). [ 136.736067][ T7631] ntfs3: loop1: Failed to initialize $Extend. [ 136.935247][ T5836] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.981516][ T7648] netlink: 72 bytes leftover after parsing attributes in process `syz.0.838'. [ 136.999711][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 137.018228][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 137.137410][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 137.170305][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 137.210953][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 137.229124][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 137.250341][ T5836] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 137.262491][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.299563][ T5836] usb 4-1: Product: syz [ 137.314042][ T5836] usb 4-1: Manufacturer: syz [ 137.324660][ T5836] usb 4-1: SerialNumber: syz [ 137.338143][ T5836] usb 4-1: config 0 descriptor?? [ 137.352160][ T5836] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 137.424154][ T7663] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 137.463885][ T7664] loop2: detected capacity change from 0 to 256 [ 137.492894][ T7664] exfat: Deprecated parameter 'namecase' [ 137.582961][ T7664] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 137.664965][ T5836] scsi host1: usb-storage 4-1:0.0 [ 137.695249][ T5836] usb 4-1: USB disconnect, device number 7 [ 137.741857][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 138.237119][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.332728][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.427036][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.471605][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.492434][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.506745][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 138.516102][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.540883][ T7677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.562690][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 138.619717][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.758957][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 138.791501][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.939915][ T5836] usb 2-1: USB disconnect, device number 3 [ 139.496673][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.511139][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.523202][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.535435][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.544326][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.552495][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.163953][ T7722] loop3: detected capacity change from 0 to 2048 [ 140.244464][ T7722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.880808][ T7744] .: renamed from bond0 (while UP) [ 141.073288][ T7726] loop0: detected capacity change from 0 to 32768 [ 141.160899][ T7751] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 141.181163][ T7726] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 141.181163][ T7726] [ 141.221514][ T7726] ERROR: (device loop0): remounting filesystem as read-only [ 141.244358][ T7726] jfs_create: dtInsert returned -EIO [ 141.274710][ T7726] ERROR: (device loop0): jfs_create: [ 141.274710][ T7726] [ 141.389220][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 141.675426][ T5100] Bluetooth: hci2: command tx timeout [ 142.123403][ T7776] netlink: 180 bytes leftover after parsing attributes in process `syz.1.889'. [ 142.374873][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.382517][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.432141][ T7700] bridge_slave_0: entered allmulticast mode [ 142.469035][ T7700] bridge_slave_0: entered promiscuous mode [ 142.520087][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.546559][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.553860][ T7700] bridge_slave_1: entered allmulticast mode [ 142.600456][ T7700] bridge_slave_1: entered promiscuous mode [ 142.731137][ T12] hsr_slave_0: left promiscuous mode [ 142.749555][ T12] hsr_slave_1: left promiscuous mode [ 142.756447][ T7797] loop0: detected capacity change from 0 to 256 [ 142.763899][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.803541][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.818358][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.859049][ T7797] FAT-fs (loop0): Directory bread(block 64) failed [ 142.866225][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.894818][ T7797] FAT-fs (loop0): Directory bread(block 65) failed [ 142.901552][ T7797] FAT-fs (loop0): Directory bread(block 66) failed [ 142.913556][ T12] bridge_slave_1: left allmulticast mode [ 142.930132][ T12] bridge_slave_1: left promiscuous mode [ 142.952752][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.964129][ T7797] FAT-fs (loop0): Directory bread(block 67) failed [ 142.967157][ T7801] loop1: detected capacity change from 0 to 8 [ 143.002308][ T7797] FAT-fs (loop0): Directory bread(block 68) failed [ 143.022585][ T7797] FAT-fs (loop0): Directory bread(block 69) failed [ 143.032120][ T7797] FAT-fs (loop0): Directory bread(block 70) failed [ 143.039998][ T12] bridge_slave_0: left allmulticast mode [ 143.046227][ T12] bridge_slave_0: left promiscuous mode [ 143.052551][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.088705][ T7797] FAT-fs (loop0): Directory bread(block 71) failed [ 143.111670][ T7797] FAT-fs (loop0): Directory bread(block 72) failed [ 143.124861][ T7797] FAT-fs (loop0): Directory bread(block 73) failed [ 143.211454][ T7779] loop3: detected capacity change from 0 to 32768 [ 143.293974][ T12] veth1_macvtap: left promiscuous mode [ 143.296186][ T7779] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 143.301311][ T12] veth0_macvtap: left promiscuous mode [ 143.315759][ T12] veth1_vlan: left promiscuous mode [ 143.321370][ T12] veth0_vlan: left promiscuous mode [ 143.484982][ T7779] (syz.3.890,7779,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 143.498191][ T7779] (syz.3.890,7779,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 143.517341][ T7779] (syz.3.890,7779,0):ocfs2_symlink:2068 ERROR: status = -117 [ 143.664437][ T5784] (syz-executor,5784,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 143.754699][ T5100] Bluetooth: hci2: command tx timeout [ 143.813494][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 144.377121][ T12] bond1 (unregistering): Released all slaves [ 145.004853][ T7816] loop0: detected capacity change from 0 to 32768 [ 145.029493][ T7816] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.903 (7816) [ 145.086401][ T7816] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.107412][ T7816] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 145.117309][ T7816] BTRFS info (device loop0): using free space tree [ 145.289545][ T7816] BTRFS info (device loop0): enabling ssd optimizations [ 145.329735][ T7816] BTRFS info (device loop0): auto enabling async discard [ 145.383091][ T7824] loop3: detected capacity change from 0 to 32768 [ 145.488698][ T7824] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.643045][ T7824] XFS (loop3): Ending clean mount [ 145.682207][ T5795] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.694181][ T7824] XFS (loop3): Quotacheck needed: Please wait. [ 145.829132][ T5100] Bluetooth: hci2: command tx timeout [ 145.875171][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.971694][ T7824] XFS (loop3): Quotacheck: Done. [ 146.097958][ T7850] loop0: detected capacity change from 0 to 512 [ 146.156625][ T7850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 146.176304][ T12] team0 (unregistering): Port device team_slave_0 removed [ 146.205032][ T7850] System zones: 1-12 [ 146.231337][ T7850] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.908: invalid block [ 146.260087][ T7850] EXT4-fs (loop0): Remounting filesystem read-only [ 146.260669][ T5784] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.271803][ T7850] EXT4-fs (loop0): 1 truncate cleaned up [ 146.283314][ T7850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.389620][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.393155][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.583906][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.060187][ T7854] loop0: detected capacity change from 0 to 32768 [ 147.441518][ T12] bond0 (unregistering): Released all slaves [ 147.578378][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.607050][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.754375][ T7700] team0: Port device team_slave_0 added [ 147.795051][ T7700] team0: Port device team_slave_1 added [ 147.904920][ T5100] Bluetooth: hci2: command tx timeout [ 147.949135][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.962562][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.998781][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.047159][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.054174][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.164548][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.449588][ T7700] hsr_slave_0: entered promiscuous mode [ 148.564045][ T7700] hsr_slave_1: entered promiscuous mode [ 148.572595][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.597087][ T7700] Cannot create hsr debugfs directory [ 148.613161][ T7885] sctp: [Deprecated]: syz.0.919 (pid 7885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.613161][ T7885] Use struct sctp_sack_info instead [ 149.125609][ T7904] capability: warning: `syz.0.925' uses 32-bit capabilities (legacy support in use) [ 149.542615][ T7915] loop1: detected capacity change from 0 to 128 [ 149.651702][ T7700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.719372][ T7700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.828204][ T7700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.888170][ T7700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.236283][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.303400][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.374141][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.381881][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.435911][ T2879] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.443161][ T2879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.191362][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 151.229113][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.238458][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.950'. [ 151.307264][ T7980] wg1 speed is unknown, defaulting to 1000 [ 151.313660][ T7980] wg1 speed is unknown, defaulting to 1000 [ 151.365771][ T7980] wg1 speed is unknown, defaulting to 1000 [ 151.416823][ T7980] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.479785][ T7980] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 151.609463][ T7980] wg1 speed is unknown, defaulting to 1000 [ 151.639605][ T7980] wg1 speed is unknown, defaulting to 1000 [ 151.657524][ T7980] wg1 speed is unknown, defaulting to 1000 [ 151.687042][ T7980] wg1 speed is unknown, defaulting to 1000 [ 151.734256][ T5823] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.816579][ T7996] netlink: 996 bytes leftover after parsing attributes in process `syz.3.956'. [ 151.929208][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 151.947459][ T5823] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.980376][ T5823] usb 2-1: config 179 has no interface number 0 [ 152.000420][ T5823] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 152.035312][ T5823] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 152.064349][ T5823] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.097316][ T5823] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.121621][ T5823] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.132944][ T7700] veth0_vlan: entered promiscuous mode [ 152.173636][ T5823] usb 2-1: config 179 interface 65 has no altsetting 0 [ 152.183779][ T5823] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 152.205171][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.217952][ T7700] veth1_vlan: entered promiscuous mode [ 152.263655][ T5823] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 152.362351][ T7700] veth0_macvtap: entered promiscuous mode [ 152.434310][ T7700] veth1_macvtap: entered promiscuous mode [ 152.513513][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.553037][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.573341][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.612909][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.644805][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.674631][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.707149][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.774282][ T5881] usb 2-1: USB disconnect, device number 4 [ 152.774285][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.784305][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.816500][ T5881] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 152.840609][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.864311][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.898240][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.911198][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.941016][ T8017] loop3: detected capacity change from 0 to 4096 [ 152.947579][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.949149][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.023582][ T8017] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 153.027509][ T7700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.056269][ T7700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.098443][ T7700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.108681][ T7700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.130293][ T8017] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 153.147719][ T8017] ntfs3: loop3: Failed to load $Extend (-22). [ 153.153870][ T8017] ntfs3: loop3: Failed to initialize $Extend. [ 153.359194][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.392742][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.482265][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.524254][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.872303][ T8032] loop1: detected capacity change from 0 to 4096 [ 153.900426][ T8032] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 153.980881][ T8041] loop0: detected capacity change from 0 to 8 [ 153.997896][ T8043] tc_dump_action: action bad kind [ 154.097664][ T8032] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 154.548594][ T8049] loop3: detected capacity change from 0 to 4096 [ 154.796435][ T8049] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 155.146281][ T5784] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 155.680268][ T8093] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 156.081315][ T8106] loop4: detected capacity change from 0 to 1024 [ 156.144385][ T8110] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.579738][ T8125] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 156.604721][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 157.148990][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 157.194138][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1011'. [ 157.209396][ T8151] loop0: detected capacity change from 0 to 128 [ 157.396976][ T8151] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 157.434670][ T8151] FAT-fs (loop0): Filesystem has been set read-only [ 157.458704][ T8158] loop3: detected capacity change from 0 to 512 [ 157.520822][ T8158] EXT4-fs: Ignoring removed i_version option [ 157.541972][ T8158] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.605615][ T8158] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1015: inode #13: comm syz.3.1015: iget: illegal inode # [ 157.653699][ T8158] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1015: couldn't read orphan inode 13 (err -117) [ 157.733890][ T8166] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1017'. [ 157.757708][ T8158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.780259][ T8166] openvswitch: netlink: Message has 13056 unknown bytes. [ 157.909766][ T8158] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.1015: resize_inode disabled but reserved GDT blocks non-zero [ 158.103597][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.754408][ T8197] loop4: detected capacity change from 0 to 4096 [ 158.899746][ T8209] loop1: detected capacity change from 0 to 128 [ 158.931340][ T8197] ntfs: volume version 3.1. [ 159.074663][ T966] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.317474][ T966] usb 1-1: config 0 has no interfaces? [ 159.344748][ T966] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 159.359132][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.404744][ T966] usb 1-1: Product: syz [ 159.415837][ T966] usb 1-1: Manufacturer: syz [ 159.433456][ T8216] tmpfs: User quota inode hardlimit too large. [ 159.451012][ T966] usb 1-1: SerialNumber: syz [ 159.487516][ T966] r8152-cfgselector 1-1: config 0 descriptor?? [ 159.736128][ T966] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 159.943427][ T23] usb 1-1: USB disconnect, device number 3 [ 160.020426][ T8199] loop3: detected capacity change from 0 to 32768 [ 160.132766][ T8199] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 160.132766][ T8199] [ 160.186988][ T8199] ERROR: (device loop3): remounting filesystem as read-only [ 160.212546][ T8199] ERROR: (device loop3): jfs_unlink: [ 160.212546][ T8199] [ 160.231077][ T8233] loop4: detected capacity change from 0 to 24 [ 160.255826][ T8233] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 160.341262][ T8233] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 160.367862][ T5784] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 160.367862][ T5784] [ 160.457243][ T8233] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 160.873233][ T8224] loop1: detected capacity change from 0 to 32768 [ 161.000620][ T8224] jfs_mkdir: dtInsert returned -EIO [ 161.020612][ T8224] ERROR: (device loop1): jfs_mkdir: [ 161.020612][ T8224] [ 161.082318][ T8224] ERROR: (device loop1): remounting filesystem as read-only [ 161.574918][ T8257] netlink: 'syz.3.1050': attribute type 3 has an invalid length. [ 161.659455][ T8260] xt_cgroup: invalid path, errno=-2 [ 161.940342][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 162.007473][ T8271] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.024650][ T8271] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.054723][ T8271] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.083935][ T8271] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.157518][ T8276] loop3: detected capacity change from 0 to 256 [ 162.221384][ T8276] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 162.448732][ T8281] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 162.497782][ T8281] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1059'. [ 162.629106][ T8288] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1062'. Stopping sshd: [ 163.288461][ T8310] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1071'. stopped /usr/sbin/sshd (pid 5552) OK Stopping crond: [ 163.872875][ T8320] loop4: detected capacity change from 0 to 4096 stopped /usr/sbin/crond (pid 5531) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5449) [ 164.903317][ T8353] bridge1: entered allmulticast mode [ 165.291434][ T8364] loop0: detected capacity change from 0 to 2048 [ 165.324272][ T8364] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 Stopping network: [ 165.461911][ T8364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.853489][ T8381] xt_l2tp: v2 sid > 0xffff: 262144 [ 166.224045][ T8390] loop4: detected capacity change from 0 to 2048 [ 166.413523][ T8402] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 166.433214][ T8403] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.479359][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1104'. [ 166.637491][ T8405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.686598][ T8390] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 166.764245][ T8390] Remounting filesystem read-only [ 166.785056][ T8390] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 166.801780][ T8390] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 166.838816][ T8411] loop1: detected capacity change from 0 to 256 [ 166.856634][ T8390] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 166.894675][ T8390] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 166.926903][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 166.926920][ T27] audit: type=1800 audit(1757465946.903:32): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1100" name="file2" dev="loop4" ino=16 res=0 errno=0 OK [ 167.148004][ T8390] syz.4.1100 (8390) used greatest stack depth: 18120 bytes left Stopping iptables: [ 167.245232][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. OK [ 167.678095][ T8432] loop1: detected capacity change from 0 to 128 Stopping system message bus: [ 167.735908][ T8432] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.789261][ T8432] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.071779][ T2879] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.187885][ T8445] loop4: detected capacity change from 0 to 2048 [ 168.360020][ T8445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.503035][ T7700] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.541155][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 168.588239][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 168.828082][ T8467] loop4: detected capacity change from 0 to 256 done [ 169.555987][ T8485] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 170.132888][ T8503] kAFS: No cell specified [ 170.140160][ T8505] xt_connbytes: Forcing CT accounting to be enabled [ 170.304134][ T8466] loop3: detected capacity change from 0 to 32768 [ 170.979636][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 171.164252][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.195146][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 154, setting to 64 Stopping klogd: [ 171.223142][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 171.245090][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.271100][ T8] usb 5-1: config 0 descriptor?? [ 171.280858][ T8520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.325575][ T8] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 171.355449][ T8] usb 5-1: No valid video chain found. OK [ 171.591292][ T5881] usb 5-1: USB disconnect, device number 2 [ 171.660496][ T27] audit: type=1326 audit(1757465951.633:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 Stopping acpid: [ 171.734585][ T27] audit: type=1326 audit(1757465951.633:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 171.787713][ T27] audit: type=1326 audit(1757465951.683:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 171.845284][ T27] audit: type=1326 audit(1757465951.683:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 171.879270][ T27] audit: type=1326 audit(1757465951.683:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f758eba9 code=0x7ffc0000 [ 172.022575][ T8527] loop1: detected capacity change from 0 to 40427 [ 172.032644][ T8527] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 172.039933][ T8527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 172.049481][ T8527] F2FS-fs (loop1): heap/no_heap options were deprecated [ 172.059203][ T8527] F2FS-fs (loop1): invalid crc value [ 172.081783][ T8527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.163418][ T8527] F2FS-fs (loop1): Start checkpoint disabled! [ 172.204036][ T8527] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 172.213379][ T8527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 172.224784][ T5823] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.325103][ T8556] loop4: detected capacity change from 0 to 256 [ 172.351832][ T8556] FAT-fs (loop4): Directory bread(block 64) failed [ 172.358790][ T8556] FAT-fs (loop4): Directory bread(block 65) failed [ 172.371308][ T8556] FAT-fs (loop4): Directory bread(block 66) failed [ 172.382256][ T8556] FAT-fs (loop4): Directory bread(block 67) failed [ 172.389970][ T8556] FAT-fs (loop4): Directory bread(block 68) failed [ 172.402853][ T8556] FAT-fs (loop4): Directory bread(block 69) failed [ 172.409686][ T8556] FAT-fs (loop4): Directory bread(block 70) failed [ 172.422561][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 172.429807][ T8556] FAT-fs (loop4): Directory bread(block 71) failed [ 172.443805][ T5823] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 172.453589][ T8556] FAT-fs (loop4): Directory bread(block 72) failed [ 172.466322][ T5823] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 172.478115][ T8556] FAT-fs (loop4): Directory bread(block 73) failed [ 172.485641][ T5823] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 172.504712][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 172.514428][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 172.526458][ T59] kworker/u4:4: attempt to access beyond end of device [ 172.526458][ T59] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.543544][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.556684][ T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.570212][ T5823] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 172.604674][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.612830][ T5823] usb 4-1: Product: syz [ 172.649926][ T5823] usb 4-1: Manufacturer: syz [ 172.664673][ T5823] usb 4-1: SerialNumber: syz [ 172.681241][ T5823] usb 4-1: config 0 descriptor?? [ 172.707901][ T5823] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 172.734921][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 172.742725][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 172.781698][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 172.819190][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 172.834015][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 172.855600][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 172.863399][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 172.910023][ T5823] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 172.929940][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 172.954808][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 172.972811][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 172.987341][ T5823] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 OK [ 173.031353][ T5823] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 173.068609][ T5823] usb 4-1: USB disconnect, device number 8 [ 173.103435][ T5823] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 173.169204][ T5823] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 Stopping syslogd: [ 173.205026][ T5823] keyspan 4-1:0.0: device disconnected [ 173.334991][ T8576] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 173.363140][ T8576] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. stopped /sbin/syslogd (pid 5137) OK [ 174.026429][ T8607] loop1: detected capacity change from 0 to 16 [ 174.037256][ T8607] MTD: Attempt to mount non-MTD device "/dev/loop1" umount: can't remount debugfs read-only [ 174.070643][ T8607] cramfs: empty filesystem [ 174.744046][ T8597] loop0: detected capacity change from 0 to 32768 [ 174.790448][ T8597] (syz.0.1178,8597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.840002][ T8597] (syz.0.1178,8597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.933280][ T8597] JBD2: Ignoring recovery information on journal [ 175.079139][ T8597] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 175.309967][ T8643] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1199'. [ 175.499503][ T5795] ocfs2: Unmounting device (7,0) on (node local) [ 175.559092][ T8649] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1202'. [ 175.569142][ T8651] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 175.584870][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1202'. [ 175.604650][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 176.108221][ T8663] loop3: detected capacity change from 0 to 2048 [ 176.206798][ T8663] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 176.238619][ T8663] UDF-fs: Scanning with blocksize 512 failed [ 176.304114][ T8663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.750401][ T8715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1235'. [ 177.804935][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 177.835062][ T8713] loop3: detected capacity change from 0 to 8192 [ 177.881309][ T8713] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only [ 177.954665][ T8713] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal umount: can't re[ 177.964354][ T8713] REISERFS (device loop3): using ordered data mode mount /dev/root [ 177.972156][ T8713] reiserfs: using flush barriers read-only [ 177.984590][ T8713] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 The system is going down NOW! [ 178.034752][ T8713] REISERFS warning (device loop3): journal-2004 journal_init: Journal cnode memory allocation failed (73728 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 178.055384][ C1] vkms_vblank_simulate: vblank timer overrun Sent SIGTERM to all processes Connection to 10.128.0.195 closed by remote host. [ 179.148414][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.210571][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting syst[ 179.326041][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 em poweroff [ 179.411733][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.306355][ T59] hsr_slave_0: left promiscuous mode [ 180.312230][ T59] hsr_slave_1: left promiscuous mode [ 180.318272][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.325832][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.333585][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.341392][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.349938][ T59] bridge_slave_1: left allmulticast mode [ 180.356076][ T59] bridge_slave_1: left promiscuous mode [ 180.361771][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.373550][ T59] bridge_slave_0: left allmulticast mode [ 180.379687][ T59] bridge_slave_0: left promiscuous mode [ 180.388624][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.413612][ T59] veth1_macvtap: left promiscuous mode [ 180.419227][ T59] veth0_macvtap: left promiscuous mode [ 180.426288][ T59] veth1_vlan: left promiscuous mode [ 180.431515][ T59] veth0_vlan: left promiscuous mode [ 180.695074][ T59] bond3 (unregistering): Released all slaves [ 180.821024][ T59] bond2 (unregistering): Released all slaves [ 180.846542][ T59] bond1 (unregistering): Released all slaves [ 181.271814][ T59] team0 (unregistering): Port device team_slave_1 removed [ 181.314234][ T59] team0 (unregistering): Port device team_slave_0 removed [ 181.362225][ T59] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.380722][ T8724] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 181.401471][ T8724] ACPI: PM: Preparing to enter system sleep state S5 [ 181.418273][ T8724] kvm: exiting hardware virtualization [ 181.424284][ T8724] reboot: Power down serialport: VM disconnected.