last executing test programs: 10.430265982s ago: executing program 2 (id=505): r0 = syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x20, 0x16, 0x6, "9046691cfb71"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.681296435s ago: executing program 1 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x40000142) 8.686183873s ago: executing program 0 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x50}, 0x38) 8.579076409s ago: executing program 1 (id=512): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "1dc000965d5ed12a79d6735c9663ca2ce69080cd47cbdf3a1de3f0602cfbe71b", "af847c1c74e2b5ca7dc31cb29b38dae9", {"739ee16857b655955ebef3cae1d4e5f3", "51d2b3717c945e296ca34099cd504e04"}}}}}}}, 0x0) 7.67511643s ago: executing program 0 (id=513): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000003180)={[{@nodioread_nolock}, {@mblk_io_submit}]}, 0x1, 0x574, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.617461881s ago: executing program 1 (id=515): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000200)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101142, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x88040, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000740)={0x6, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESDEC=r0, @ANYBLOB="2c7569643d720b9f9a04b3b9ff8c8893b2b627f8062562d3ed3b9f", @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000780)=ANY=[@ANYBLOB="fb0000000000000001000000230000000100000003000000f9fffffffdffffff030000000000000000000000000000000d0000000e0000002e090000"]) 6.610755035s ago: executing program 3 (id=517): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 6.592143405s ago: executing program 4 (id=518): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000080), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 6.364460656s ago: executing program 2 (id=519): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x101, 0x1) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 5.762094217s ago: executing program 0 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) 5.413550406s ago: executing program 1 (id=521): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r3, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc0105303, &(0x7f0000000440)={0x0, 0x0, 0x9}) tkill(r2, 0x7) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0xfffb, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x300}]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "b3ed3f3eff5dc97c0e6617a580210ec9809bfa714677994cee3213c83202ca3f", "c36db0aa77ffea8b5303ccd0e06692e1", {"0ee9ef2f500c2a6b0d0400156feac886", "fa0e64385c7c64b5a387c641f2aafe69"}}}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e072401000000000905820910000000000725"], 0x0) 5.389295173s ago: executing program 4 (id=522): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000002040)="17276ba0cb6a", 0x6, 0x40804, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.313542438s ago: executing program 3 (id=523): r0 = socket(0x840000000002, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2c) open(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r5, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) timer_create(0x5, 0x0, 0xfffffffffffffffe) 5.310016146s ago: executing program 2 (id=524): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0xa}}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x558, &(0x7f0000000300)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZl3WZubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rb8QxutGcmYiJ/Tsbi7BMHTvWhskGS7PYJsC0jeZyPRTYGHI6RPOqB/7+vIqIBDKlE/MOQas0DWvf2fboPfmE8+HDtBmhj+0fXXhuJfc17owOryWN3Rtn97ngf6s/q+PXPO7ezLfr3OgTAlm7cjIjTo6Mbx78kH/+273QPxzxZh/EPds7dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1UvP0uZ2D25GvNZx/pus93/Sof+z5+N8j3UcS++83q1s6/Y/X42fI97o2P+PVrSSzdcnJ5vXw2Trqtjo71vHfu9W/263P+v/A5u3fzxpX6+tPX0dP+37N+1Wtt3rf0/yeTO9J993rVSvL05F7Ek+2bh/+tFjW/nW8Vn7TxzffPzrdP3vj4gvemz/raO3uh46CP0/91T9//SJex9/+WO3+nvr/7ebqRP5nl7Gv15P8FmeOwAAAAAAABg0hYg4FEmhuJ4uFIrFtfd3HI0DhXK1Vj95sbp0eS6an5Udj7FCa6X7cNv7Iaby98O28tNP5Gci4khEfDeyv5kvzlbLc7vdeAAAAAAAAAAAAAAAAAAAABgQByP2dfr8f+aPkd0+O+C585XfMLy6x39e0o9vegIGkv//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX50/dy7bGqsPr89m+bmry0sL1aun5tLaQrGyNFucrS5eKc5Xq/PltDhbrWz198rV6pWp6Vi6NllPa/XJ2vLKhUp16XL9wqVKaT69kI7tSKsAAAAAAAAAAAAAAAAAAADgxVJbXlkolcvpokQfEodiIE5jRxOjO1LXuGt1hxO7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCP/BQAA//+whjY9") pwritev2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7fff, 0x1, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x65, 0x3ff8000, 0x9) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x4, 0xffffffff, 0x1, "0062ba7d820000a75e0000000000fcff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x2) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 4.21957907s ago: executing program 4 (id=525): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "1dc000965d5ed12a79d6735c9663ca2ce69080cd47cbdf3a1de3f0602cfbe71b", "af847c1c74e2b5ca7dc31cb29b38dae9", {"739ee16857b655955ebef3cae1d4e5f3", "51d2b3717c945e296ca34099cd504e04"}}}}}}}, 0x0) 3.834827958s ago: executing program 0 (id=526): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3.750156495s ago: executing program 3 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x2c, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 2.991278811s ago: executing program 2 (id=528): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x800009, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="02030c65d66402000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.892401303s ago: executing program 4 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.574417467s ago: executing program 0 (id=530): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000003180)={[{@nodioread_nolock}, {@mblk_io_submit}]}, 0x1, 0x574, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.367871496s ago: executing program 3 (id=531): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 2.248270587s ago: executing program 1 (id=532): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000200)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101142, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x88040, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000740)={0x6, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESDEC=r0, @ANYBLOB="2c7569643d720b9f9a04b3b9ff8c8893b2b627f8062562d3ed3b9f", @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000780)=ANY=[@ANYBLOB="fb0000000000000001000000230000000100000003000000f9fffffffdffffff030000000000000000000000000000000d0000000e0000002e090000"]) 1.93425891s ago: executing program 4 (id=533): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 1.778100127s ago: executing program 2 (id=534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000080), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 1.338329961s ago: executing program 3 (id=535): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000002040)="17276ba0cb6a", 0x6, 0x40804, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000240)="8a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 605.808879ms ago: executing program 4 (id=536): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x11, 0x6ed, &(0x7f00000003c0)="$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") io_uring_setup(0x80e, &(0x7f0000000180)={0x0, 0xcba1, 0x1, 0x0, 0x2bf}) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 597.895587ms ago: executing program 0 (id=537): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)) 513.842355ms ago: executing program 2 (id=538): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001900)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 31.350856ms ago: executing program 1 (id=539): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "1dc000965d5ed12a79d6735c9663ca2ce69080cd47cbdf3a1de3f0602cfbe71b", "af847c1c74e2b5ca7dc31cb29b38dae9", {"739ee16857b655955ebef3cae1d4e5f3", "51d2b3717c945e296ca34099cd504e04"}}}}}}}, 0x0) 0s ago: executing program 3 (id=540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.47' (ED25519) to the list of known hosts. [ 211.716796][ T5772] cgroup: Unknown subsys name 'net' [ 211.868873][ T5772] cgroup: Unknown subsys name 'cpuset' [ 211.886026][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.715720][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.722696][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.764177][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 273.339909][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.348256][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.356375][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.375544][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.383682][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.392766][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.402665][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.413687][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.422746][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.431465][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.442594][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.459010][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.467685][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.480920][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.485926][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.494774][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.499303][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.511663][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.521255][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.536016][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.547560][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.579360][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.579483][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.604625][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.623322][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.971593][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 275.341903][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 275.553441][ T5797] Bluetooth: hci3: command tx timeout [ 275.617124][ T5797] Bluetooth: hci0: command tx timeout [ 275.622840][ T5797] Bluetooth: hci2: command tx timeout [ 275.700710][ T5797] Bluetooth: hci1: command tx timeout [ 275.706669][ T5799] Bluetooth: hci4: command tx timeout [ 275.911209][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 276.284196][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 276.539233][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 276.611211][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.619353][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.627413][ T5808] bridge_slave_0: entered allmulticast mode [ 276.641177][ T5808] bridge_slave_0: entered promiscuous mode [ 276.794587][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.802449][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.810654][ T5808] bridge_slave_1: entered allmulticast mode [ 276.821129][ T5808] bridge_slave_1: entered promiscuous mode [ 276.992340][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.004353][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.014751][ T5804] bridge_slave_0: entered allmulticast mode [ 277.026797][ T5804] bridge_slave_0: entered promiscuous mode [ 277.228790][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.268273][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.285394][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.293301][ T5804] bridge_slave_1: entered allmulticast mode [ 277.303508][ T5804] bridge_slave_1: entered promiscuous mode [ 277.462849][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.480694][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.488872][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.496839][ T5795] bridge_slave_0: entered allmulticast mode [ 277.507341][ T5795] bridge_slave_0: entered promiscuous mode [ 277.635861][ T5797] Bluetooth: hci3: command tx timeout [ 277.692599][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.700680][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.700951][ T5797] Bluetooth: hci2: command tx timeout [ 277.708934][ T5795] bridge_slave_1: entered allmulticast mode [ 277.713735][ T5797] Bluetooth: hci0: command tx timeout [ 277.723415][ T5795] bridge_slave_1: entered promiscuous mode [ 277.776511][ T5799] Bluetooth: hci1: command tx timeout [ 277.782912][ T5797] Bluetooth: hci4: command tx timeout [ 277.843685][ T5808] team0: Port device team_slave_0 added [ 277.864064][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.033865][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.047169][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.054916][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.065483][ T5796] bridge_slave_0: entered allmulticast mode [ 278.075837][ T5796] bridge_slave_0: entered promiscuous mode [ 278.105486][ T5808] team0: Port device team_slave_1 added [ 278.116586][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.124440][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.132315][ T5796] bridge_slave_1: entered allmulticast mode [ 278.142684][ T5796] bridge_slave_1: entered promiscuous mode [ 278.180465][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.327425][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.600425][ T5795] team0: Port device team_slave_0 added [ 278.615867][ T5804] team0: Port device team_slave_0 added [ 278.640073][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.653229][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.660926][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.687677][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.745831][ T5795] team0: Port device team_slave_1 added [ 278.754438][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.762498][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.770521][ T5794] bridge_slave_0: entered allmulticast mode [ 278.780660][ T5794] bridge_slave_0: entered promiscuous mode [ 278.802847][ T5804] team0: Port device team_slave_1 added [ 278.811314][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.819610][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.827570][ T5794] bridge_slave_1: entered allmulticast mode [ 278.837619][ T5794] bridge_slave_1: entered promiscuous mode [ 278.859678][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.917205][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.924531][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.951666][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.261444][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.268819][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.296569][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.360156][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.372436][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.380050][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.406993][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.445954][ T5796] team0: Port device team_slave_0 added [ 279.506639][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.513832][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.541526][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.564655][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.578128][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.585354][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.612919][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.633691][ T5796] team0: Port device team_slave_1 added [ 279.706602][ T5799] Bluetooth: hci3: command tx timeout [ 279.779578][ T5799] Bluetooth: hci0: command tx timeout [ 279.785304][ T5799] Bluetooth: hci2: command tx timeout [ 279.863359][ T5808] hsr_slave_0: entered promiscuous mode [ 279.866343][ T5799] Bluetooth: hci1: command tx timeout [ 279.874201][ T5808] hsr_slave_1: entered promiscuous mode [ 279.874718][ T5799] Bluetooth: hci4: command tx timeout [ 280.000200][ T5794] team0: Port device team_slave_0 added [ 280.053737][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.061150][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.088048][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.108540][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.115776][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.144047][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.174217][ T5804] hsr_slave_0: entered promiscuous mode [ 280.185106][ T5804] hsr_slave_1: entered promiscuous mode [ 280.194675][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.202583][ T5804] Cannot create hsr debugfs directory [ 280.218366][ T5794] team0: Port device team_slave_1 added [ 280.487898][ T5795] hsr_slave_0: entered promiscuous mode [ 280.498310][ T5795] hsr_slave_1: entered promiscuous mode [ 280.507813][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.515744][ T5795] Cannot create hsr debugfs directory [ 280.599375][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.606844][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.633408][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.873240][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.881653][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.908663][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.025073][ T5796] hsr_slave_0: entered promiscuous mode [ 281.036003][ T5796] hsr_slave_1: entered promiscuous mode [ 281.044661][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.052645][ T5796] Cannot create hsr debugfs directory [ 281.506001][ T5794] hsr_slave_0: entered promiscuous mode [ 281.515490][ T5794] hsr_slave_1: entered promiscuous mode [ 281.524428][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.532434][ T5794] Cannot create hsr debugfs directory [ 281.780012][ T5797] Bluetooth: hci3: command tx timeout [ 281.860661][ T5797] Bluetooth: hci2: command tx timeout [ 281.873950][ T5799] Bluetooth: hci0: command tx timeout [ 281.936587][ T5797] Bluetooth: hci4: command tx timeout [ 281.942545][ T5799] Bluetooth: hci1: command tx timeout [ 282.489126][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.655927][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.677961][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.759694][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.005368][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.110826][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.163118][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.234328][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.329413][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.465754][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.598923][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.623276][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.676253][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.704391][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.812032][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.863892][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.909918][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.989896][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.028302][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.127405][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.792857][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.933780][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.961824][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.115510][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.133143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.141227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.272006][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.279969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.297387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.305090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.539003][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.546900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.640991][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.866033][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.126968][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.168558][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.237160][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.266960][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.274630][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.451708][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.459476][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.476944][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.484607][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.502210][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.510116][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.592402][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.833210][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.841096][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.975420][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.131327][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.142335][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.218714][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.226509][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.480261][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.491261][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.349460][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.528897][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.030553][ T5808] veth0_vlan: entered promiscuous mode [ 289.135151][ T5808] veth1_vlan: entered promiscuous mode [ 289.275571][ T5795] veth0_vlan: entered promiscuous mode [ 289.435841][ T5795] veth1_vlan: entered promiscuous mode [ 289.543888][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.678071][ T5808] veth0_macvtap: entered promiscuous mode [ 289.803071][ T5808] veth1_macvtap: entered promiscuous mode [ 289.855794][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.988883][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.093269][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.113372][ T5795] veth0_macvtap: entered promiscuous mode [ 290.177329][ T5795] veth1_macvtap: entered promiscuous mode [ 290.251513][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.323743][ T5796] veth0_vlan: entered promiscuous mode [ 290.402744][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.456595][ T5796] veth1_vlan: entered promiscuous mode [ 290.479559][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.488984][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.499639][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.508978][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.584260][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.685610][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.695578][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.705008][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.714460][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.119875][ T5804] veth0_vlan: entered promiscuous mode [ 291.173722][ T5796] veth0_macvtap: entered promiscuous mode [ 291.174568][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.187116][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.296196][ T5796] veth1_macvtap: entered promiscuous mode [ 291.383944][ T5804] veth1_vlan: entered promiscuous mode [ 291.550638][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.665656][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.815635][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.828437][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.838170][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.847438][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.994272][ T5804] veth0_macvtap: entered promiscuous mode [ 292.106811][ T5804] veth1_macvtap: entered promiscuous mode [ 292.438502][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.540825][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.650485][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.661632][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.674000][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.683292][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.356289][ T5794] veth0_vlan: entered promiscuous mode [ 293.475401][ T5794] veth1_vlan: entered promiscuous mode [ 294.029674][ T5794] veth0_macvtap: entered promiscuous mode [ 294.143247][ T5794] veth1_macvtap: entered promiscuous mode [ 294.448529][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.597220][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.720357][ T5794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.729661][ T5794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.739108][ T5794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.748444][ T5794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.368423][ T4939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.377635][ T4939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.671900][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.680353][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.974342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.982738][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.997954][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.006294][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.230209][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.239717][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.382036][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.390644][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.452598][ T5795] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 301.348865][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.357032][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.697438][ T5984] syzkaller0: entered promiscuous mode [ 301.703362][ T5984] syzkaller0: entered allmulticast mode [ 301.857785][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 301.932492][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.944911][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.186659][ T5990] loop3: detected capacity change from 0 to 128 [ 302.252059][ T5990] ======================================================= [ 302.252059][ T5990] WARNING: The mand mount option has been deprecated and [ 302.252059][ T5990] and is ignored by this kernel. Remove the mand [ 302.252059][ T5990] option from the mount to silence this warning. [ 302.252059][ T5990] ======================================================= [ 303.525365][ T4939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.533936][ T4939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.021663][ T3846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.030284][ T3846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.081083][ T5994] loop1: detected capacity change from 0 to 2048 [ 304.244020][ T5994] loop1: p1 < > p3 [ 304.248569][ T5994] loop1: partition table partially beyond EOD, truncated [ 304.360366][ T5994] loop1: p3 start 4278190081 is beyond EOD, truncated [ 304.874728][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 305.717681][ T6003] loop0: detected capacity change from 0 to 2048 [ 306.068690][ T6003] loop0: p1 < > p3 [ 306.073086][ T6003] loop0: partition table partially beyond EOD, truncated [ 306.087685][ T6009] loop3: detected capacity change from 0 to 2048 [ 306.231099][ T6009] udf: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 306.287866][ T6003] loop0: p3 start 4278190081 is beyond EOD, truncated [ 306.512142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 306.871238][ T6007] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3582714311 (14330857244 ns) > initial count (11004525532 ns). Using initial count to start timer. [ 308.064941][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 308.426896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 308.997174][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 309.199927][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 311.034050][ T6027] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 311.391666][ T6029] loop2: detected capacity change from 0 to 256 [ 311.516932][ T6029] exfat: Bad value for 'uid' [ 311.521919][ T6029] exfat: Bad value for 'uid' [ 313.652261][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 313.762811][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 313.899907][ T6040] loop3: detected capacity change from 0 to 256 [ 314.157854][ T6040] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 314.398859][ T6040] loop3: Can't mount, would change RO state [ 314.568132][ T30] audit: type=1326 audit(1749744577.237:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.590576][ T30] audit: type=1326 audit(1749744577.247:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.615506][ T30] audit: type=1326 audit(1749744577.257:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.640395][ T30] audit: type=1326 audit(1749744577.257:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.664406][ T30] audit: type=1326 audit(1749744577.257:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.686843][ T30] audit: type=1326 audit(1749744577.257:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.709263][ T30] audit: type=1326 audit(1749744577.257:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.731641][ T30] audit: type=1326 audit(1749744577.307:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.757545][ T30] audit: type=1326 audit(1749744577.307:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 314.780871][ T30] audit: type=1326 audit(1749744577.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 315.276723][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 315.447121][ T1900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 315.509826][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.519615][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.572230][ T24] usb 1-1: config 0 descriptor?? [ 315.642891][ T6053] loop4: detected capacity change from 0 to 2048 [ 315.648990][ T24] cp210x 1-1:0.0: cp210x converter detected [ 315.727114][ T1900] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.737985][ T1900] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.745306][ T1900] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 315.755196][ T1900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.789898][ T6055] loop1: detected capacity change from 0 to 1024 [ 315.878105][ T6053] loop4: p2 < > p3 < p5 > p4 [ 315.883653][ T6053] loop4: partition table partially beyond EOD, truncated [ 315.892523][ T6053] loop4: p2 start 4278190080 is beyond EOD, truncated [ 315.953500][ T1900] usb 3-1: config 0 descriptor?? [ 316.062987][ T6053] loop4: p4 size 8192 extends beyond EOD, truncated [ 316.074238][ T6057] loop3: detected capacity change from 0 to 1024 [ 316.178639][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 316.253031][ T6055] hfsplus: xattr searching failed [ 316.284601][ T6053] loop4: p5 size 8192 extends beyond EOD, truncated [ 316.314638][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 316.524325][ T9] usb 1-1: USB disconnect, device number 2 [ 316.617004][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 316.754544][ T9] cp210x 1-1:0.0: device disconnected [ 316.945434][ T1900] usb 3-1: USB disconnect, device number 2 [ 317.096391][ T6048] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 317.179333][ T57] hfsplus: b-tree write err: -5, ino 4 [ 318.852939][ T6071] loop2: detected capacity change from 0 to 2048 [ 318.996629][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 319.033601][ T6071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.240174][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 319.255671][ T9] usb 2-1: config 179 has no interface number 0 [ 319.264901][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 319.276789][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 319.288298][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 319.305414][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 319.320664][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 319.334518][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 319.350924][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.666581][ T6073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.697632][ T6073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.738689][ T6067] loop3: detected capacity change from 0 to 8192 [ 320.254786][ T1900] usb 2-1: USB disconnect, device number 2 [ 320.256342][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 320.273803][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 321.013134][ T6080] loop4: detected capacity change from 0 to 2048 [ 321.248718][ T6080] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 321.257422][ T6080] UDF-fs: Scanning with blocksize 512 failed [ 321.513008][ T6080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.026942][ T6082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.033184][ T6082] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 322.084724][ T6088] loop3: detected capacity change from 0 to 2048 [ 322.118367][ T6082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.124730][ T6082] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 322.180028][ T6082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.186499][ T6082] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 322.262184][ T6088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.311818][ T6082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.326036][ T6082] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 323.751817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 324.097756][ T6109] loop4: detected capacity change from 0 to 256 [ 324.149457][ T6109] exfat: Bad value for 'uid' [ 324.154375][ T6109] exfat: Bad value for 'uid' [ 324.163848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 324.489052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 324.568425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 325.214995][ T6115] loop3: detected capacity change from 0 to 1024 [ 325.295003][ T6115] hfsplus: Unknown parameter '/dev/ptmx' [ 325.807484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.010141][ T6130] loop3: detected capacity change from 0 to 1024 [ 327.353301][ T6130] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 327.360326][ T6130] hfsplus: xattr searching failed [ 327.375354][ T6135] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 327.382271][ T6135] hfsplus: xattr searching failed [ 327.520785][ T6130] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 327.527971][ T6130] hfsplus: xattr searching failed [ 327.645604][ T6130] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 327.655997][ T6130] hfsplus: xattr searching failed [ 327.663377][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 327.663460][ T30] audit: type=1800 audit(1749744590.347:20): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.50" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 328.228288][ T3846] hfsplus: b-tree write err: -5, ino 4 [ 329.095945][ T6149] loop3: detected capacity change from 0 to 256 [ 329.165883][ T6149] exfat: Bad value for 'uid' [ 329.171085][ T6149] exfat: Bad value for 'uid' [ 329.702022][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 331.211447][ T6164] fuse: root generation should be zero [ 331.651115][ T6174] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 333.113159][ T6188] loop3: detected capacity change from 0 to 256 [ 333.219361][ T6188] exfat: Bad value for 'uid' [ 333.224375][ T6188] exfat: Bad value for 'uid' [ 333.792503][ T6194] loop0: detected capacity change from 0 to 128 [ 334.061318][ T30] audit: type=1800 audit(1749744596.737:21): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.76" name="file2" dev="loop0" ino=1048600 res=0 errno=0 [ 334.169762][ T6194] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 334.178463][ T6194] FAT-fs (loop0): Filesystem has been set read-only [ 334.217148][ T6194] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 334.247359][ T6194] syz.0.76: attempt to access beyond end of device [ 334.247359][ T6194] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 336.044854][ T6216] fuse: Bad value for 'user_id' [ 336.051056][ T6216] fuse: Bad value for 'user_id' [ 336.843752][ T6223] capability: warning: `syz.3.89' uses deprecated v2 capabilities in a way that may be insecure [ 337.187553][ T6226] loop1: detected capacity change from 0 to 1024 [ 337.597862][ T6226] hfsplus: xattr searching failed [ 337.612739][ T30] audit: type=1800 audit(1749744600.287:22): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="memory.events" dev="loop1" ino=2 res=0 errno=0 [ 337.896716][ T1900] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 338.079995][ T6233] loop4: detected capacity change from 0 to 256 [ 338.144877][ T1900] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 338.154003][ T1900] usb 3-1: config 0 has no interface number 0 [ 338.171123][ T6233] vfat: Bad value for 'fmask' [ 338.237543][ T1900] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 338.247413][ T1900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.255877][ T1900] usb 3-1: Product: syz [ 338.260559][ T1900] usb 3-1: Manufacturer: syz [ 338.265463][ T1900] usb 3-1: SerialNumber: syz [ 338.394249][ T1900] usb 3-1: config 0 descriptor?? [ 338.887183][ T1900] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 338.897901][ T1900] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 338.913469][ T1900] asix 3-1:0.251: probe with driver asix failed with error -5 [ 340.290426][ T6245] fuse: Bad value for 'user_id' [ 340.295760][ T6245] fuse: Bad value for 'user_id' [ 340.565698][ T6249] loop0: detected capacity change from 0 to 256 [ 340.637091][ T30] audit: type=1326 audit(1749744603.317:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.101" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 340.639356][ T6249] exfat: Bad value for 'uid' [ 340.671932][ T6249] exfat: Bad value for 'uid' [ 340.825052][ T1900] usb 3-1: USB disconnect, device number 3 [ 341.964539][ T6260] loop1: detected capacity change from 0 to 1024 [ 342.022937][ T6262] loop0: detected capacity change from 0 to 256 [ 342.135562][ T6262] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.146982][ T6262] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 342.190604][ T6260] hfsplus: xattr searching failed [ 342.215408][ T30] audit: type=1800 audit(1749744604.887:24): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="memory.events" dev="loop1" ino=2 res=0 errno=0 [ 342.357472][ T6262] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x062de574, utbl_chksum : 0xe619d30d) [ 342.504131][ T6264] loop3: detected capacity change from 0 to 1024 [ 342.715287][ T6264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.859548][ T6264] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+¼“ív3­c‚/fê•0x0000000000000005 [ 343.499485][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.248328][ T6280] fuse: Bad value for 'user_id' [ 344.253615][ T6280] fuse: Bad value for 'user_id' [ 344.596746][ T1900] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 344.664188][ T6286] loop0: detected capacity change from 0 to 256 [ 344.730574][ T6286] exfat: Bad value for 'uid' [ 344.735486][ T6286] exfat: Bad value for 'uid' [ 344.852315][ T1900] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 344.861232][ T1900] usb 5-1: config 0 has no interface number 0 [ 344.952775][ T1900] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 344.964026][ T1900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.972736][ T1900] usb 5-1: Product: syz [ 344.977451][ T1900] usb 5-1: Manufacturer: syz [ 344.982351][ T1900] usb 5-1: SerialNumber: syz [ 345.189577][ T1900] usb 5-1: config 0 descriptor?? [ 345.687855][ T1900] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 345.698636][ T1900] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 345.709809][ T1900] asix 5-1:0.251: probe with driver asix failed with error -5 [ 346.227242][ T6296] loop0: detected capacity change from 0 to 8 [ 346.273589][ T6296] SQUASHFS error: lzo decompression failed, data probably corrupt [ 346.285779][ T6296] SQUASHFS error: Failed to read block 0x91: -5 [ 346.293693][ T6296] SQUASHFS error: Unable to read metadata cache entry [8f] [ 346.301306][ T6296] SQUASHFS error: Unable to read inode 0x11f [ 346.398611][ T6296] loop0: detected capacity change from 0 to 256 [ 346.518604][ T6300] loop3: detected capacity change from 0 to 1024 [ 346.543393][ T6296] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 346.945410][ T6300] hfsplus: xattr searching failed [ 346.955259][ T30] audit: type=1800 audit(1749744609.637:25): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.122" name="memory.events" dev="loop3" ino=2 res=0 errno=0 [ 347.271787][ T6304] loop1: detected capacity change from 0 to 16 [ 347.371179][ T6304] erofs (device loop1): mounted with root inode @ nid 36. [ 347.525556][ T5797] erofs (device loop1): failed to decompress -13 in[56, 0] out[9000] [ 347.625345][ T6304] erofs (device loop1): failed to decompress -13 in[56, 4040] out[8192] [ 347.634333][ T6304] erofs (device loop1): read error -117 @ 0 of nid 89 [ 347.663645][ T30] audit: type=1800 audit(1749744610.337:26): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 347.728162][ T1900] usb 5-1: USB disconnect, device number 2 [ 348.902752][ T6316] fuse: Bad value for 'fd' [ 349.294466][ T6319] loop4: detected capacity change from 0 to 256 [ 349.360677][ T6319] exfat: Bad value for 'uid' [ 349.365691][ T6319] exfat: Bad value for 'uid' [ 350.436776][ T30] audit: type=1326 audit(1749744613.107:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 350.459358][ T30] audit: type=1326 audit(1749744613.147:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 350.571890][ T30] audit: type=1326 audit(1749744613.257:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 350.597619][ T30] audit: type=1326 audit(1749744613.257:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 350.621227][ T1900] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 350.817044][ T1900] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.829051][ T1900] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.910354][ T1900] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 350.920296][ T1900] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 350.929611][ T1900] usb 3-1: Product: syz [ 350.934086][ T1900] usb 3-1: Manufacturer: syz [ 351.101323][ T1900] hub 3-1:4.0: USB hub found [ 351.298803][ T6330] loop0: detected capacity change from 0 to 1024 [ 351.411903][ T1900] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 351.516475][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 351.549367][ T1900] usb 3-1: USB disconnect, device number 4 [ 351.632245][ T6330] hfsplus: xattr searching failed [ 351.642185][ T30] audit: type=1800 audit(1749744614.327:31): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="memory.events" dev="loop0" ino=2 res=0 errno=0 [ 351.754517][ T24] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 351.763820][ T24] usb 2-1: config 0 has no interface number 0 [ 351.855710][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 351.866374][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.874770][ T24] usb 2-1: Product: syz [ 351.879848][ T24] usb 2-1: Manufacturer: syz [ 351.884744][ T24] usb 2-1: SerialNumber: syz [ 351.930862][ T24] usb 2-1: config 0 descriptor?? [ 352.392050][ T6337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.610303][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.617408][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.687097][ T24] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 352.699395][ T24] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 352.713211][ T24] asix 2-1:0.251: probe with driver asix failed with error -32 [ 352.841151][ T24] usb 2-1: USB disconnect, device number 3 [ 353.360730][ T6343] fuse: Bad value for 'fd' [ 354.207123][ T6353] loop1: detected capacity change from 0 to 256 [ 354.379464][ T6353] exfat: Bad value for 'uid' [ 354.384373][ T6353] exfat: Bad value for 'uid' [ 356.080781][ T6369] loop2: detected capacity change from 0 to 1024 [ 356.395033][ T6369] hfsplus: xattr searching failed [ 356.407378][ T30] audit: type=1800 audit(1749744619.097:32): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.149" name="memory.events" dev="loop2" ino=2 res=0 errno=0 [ 357.710257][ T6386] fuse: Bad value for 'fd' [ 357.787415][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 358.014658][ T24] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 358.023778][ T24] usb 1-1: config 0 has no interface number 0 [ 358.090302][ T24] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 358.100858][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.109411][ T24] usb 1-1: Product: syz [ 358.113888][ T24] usb 1-1: Manufacturer: syz [ 358.118918][ T24] usb 1-1: SerialNumber: syz [ 358.220427][ T24] usb 1-1: config 0 descriptor?? [ 358.236681][ T1900] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 358.532754][ T1900] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 358.542927][ T1900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.551667][ T1900] usb 4-1: Product: syz [ 358.556338][ T1900] usb 4-1: Manufacturer: syz [ 358.561217][ T1900] usb 4-1: SerialNumber: syz [ 358.641628][ T1900] usb 4-1: config 0 descriptor?? [ 358.697530][ T1900] ch341 4-1:0.0: ch341-uart converter detected [ 358.963468][ T24] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 358.978434][ T24] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 359.001853][ T24] asix 1-1:0.251: probe with driver asix failed with error -32 [ 359.194062][ T24] usb 1-1: USB disconnect, device number 3 [ 359.246803][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 359.466992][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 359.503673][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 359.513196][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 359.524051][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.638380][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.648095][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.656691][ T9] usb 2-1: Product: syz [ 359.661208][ T9] usb 2-1: Manufacturer: syz [ 359.666543][ T9] usb 2-1: SerialNumber: syz [ 359.844394][ T1900] usb 4-1: failed to send control message: -71 [ 359.851881][ T1900] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 360.015118][ T1900] usb 4-1: USB disconnect, device number 2 [ 360.028261][ T1900] ch341 4-1:0.0: device disconnected [ 360.190358][ T9] usb 2-1: 0:2 : does not exist [ 360.735939][ T6400] loop0: detected capacity change from 0 to 256 [ 360.824063][ T6400] exfat: Bad value for 'uid' [ 360.829404][ T6400] exfat: Bad value for 'uid' [ 361.681832][ T6407] loop3: detected capacity change from 0 to 1024 [ 361.710147][ T6407] EXT4-fs: Ignoring removed orlov option [ 361.717514][ T6407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.971708][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.984499][ T5857] usb 2-1: USB disconnect, device number 4 [ 362.261092][ T6414] process 'syz.3.162' launched './file0/file0' with NULL argv: empty string added [ 362.861060][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.160424][ T6422] loop4: detected capacity change from 0 to 1024 [ 363.542426][ T6422] hfsplus: xattr searching failed [ 363.573231][ T30] audit: type=1800 audit(1749744626.237:33): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.167" name="memory.events" dev="loop4" ino=2 res=0 errno=0 [ 364.003575][ T6428] fuse: Bad value for 'fd' [ 364.356538][ T1900] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 364.612406][ T1900] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 364.621163][ T1900] usb 1-1: config 0 has no interface number 0 [ 364.746601][ T1900] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 364.756245][ T1900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.764569][ T1900] usb 1-1: Product: syz [ 364.769252][ T1900] usb 1-1: Manufacturer: syz [ 364.774146][ T1900] usb 1-1: SerialNumber: syz [ 364.917650][ T1900] usb 1-1: config 0 descriptor?? [ 365.419465][ T6434] loop3: detected capacity change from 0 to 2048 [ 365.557655][ T5857] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 365.605147][ T6434] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 365.633226][ T1900] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 365.644206][ T1900] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 365.657787][ T1900] asix 1-1:0.251: probe with driver asix failed with error -32 [ 365.825448][ T5857] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 365.842107][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.853213][ T5857] usb 5-1: Product: syz [ 365.857821][ T5857] usb 5-1: Manufacturer: syz [ 365.862715][ T5857] usb 5-1: SerialNumber: syz [ 365.875395][ T1900] usb 1-1: USB disconnect, device number 4 [ 365.989754][ T5857] usb 5-1: config 0 descriptor?? [ 366.061974][ T5857] ch341 5-1:0.0: ch341-uart converter detected [ 366.817435][ T1900] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 367.005550][ T5857] usb 5-1: failed to send control message: -71 [ 367.012493][ T5857] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 367.014647][ T6443] loop3: detected capacity change from 0 to 256 [ 367.042043][ T1900] usb 3-1: Using ep0 maxpacket: 16 [ 367.089406][ T1900] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 367.098921][ T1900] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 367.109822][ T1900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.150811][ T5857] usb 5-1: USB disconnect, device number 3 [ 367.160531][ T5857] ch341 5-1:0.0: device disconnected [ 367.161516][ T6443] exfat: Bad value for 'uid' [ 367.175001][ T6443] exfat: Bad value for 'uid' [ 367.244976][ T1900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.254666][ T1900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.263204][ T1900] usb 3-1: Product: syz [ 367.270800][ T1900] usb 3-1: Manufacturer: syz [ 367.275736][ T1900] usb 3-1: SerialNumber: syz [ 367.834037][ T1900] usb 3-1: 0:2 : does not exist [ 369.120248][ T6461] fuse: Bad value for 'fd' [ 369.525901][ T6467] loop3: detected capacity change from 0 to 128 [ 369.721565][ T6464] loop4: detected capacity change from 0 to 1024 [ 370.050628][ T1900] usb 3-1: USB disconnect, device number 5 [ 370.105167][ T6464] hfsplus: xattr searching failed [ 370.142007][ T30] audit: type=1800 audit(1749744632.807:34): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.183" name="memory.events" dev="loop4" ino=2 res=0 errno=0 [ 371.678073][ T6487] loop1: detected capacity change from 0 to 256 [ 371.770810][ T6487] exfat: Bad value for 'uid' [ 371.779296][ T6487] exfat: Bad value for 'uid' [ 373.377280][ T1900] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 373.613171][ T1900] usb 5-1: Using ep0 maxpacket: 16 [ 373.671455][ T1900] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 373.680895][ T1900] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 373.692056][ T1900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.789445][ T1900] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.799552][ T1900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.808113][ T1900] usb 5-1: Product: syz [ 373.812570][ T1900] usb 5-1: Manufacturer: syz [ 373.817561][ T1900] usb 5-1: SerialNumber: syz [ 373.851220][ T6508] loop1: detected capacity change from 0 to 1024 [ 374.209417][ T6508] hfsplus: xattr searching failed [ 374.228442][ T30] audit: type=1800 audit(1749744636.897:35): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.200" name="memory.events" dev="loop1" ino=2 res=0 errno=0 [ 374.554413][ T1900] usb 5-1: 0:2 : does not exist [ 376.493239][ T1900] usb 5-1: USB disconnect, device number 4 [ 376.613868][ T6529] loop0: detected capacity change from 0 to 256 [ 376.707531][ T6529] exfat: Bad value for 'uid' [ 376.712570][ T6529] exfat: Bad value for 'uid' [ 378.018537][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 378.108247][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 378.305922][ T6548] loop1: detected capacity change from 0 to 1024 [ 378.453701][ T5857] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 378.647925][ T6548] hfsplus: xattr searching failed [ 378.666874][ T30] audit: type=1800 audit(1749744641.337:36): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.215" name="memory.events" dev="loop1" ino=2 res=0 errno=0 [ 378.709884][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 378.787274][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.798790][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.809324][ T5857] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 378.819121][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.939692][ T5857] usb 3-1: config 0 descriptor?? [ 379.055879][ T5857] hub 3-1:0.0: USB hub found [ 379.272232][ T5857] hub 3-1:0.0: 1 port detected [ 379.447775][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 379.730416][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 379.740997][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.749656][ T9] usb 4-1: Product: syz [ 379.754308][ T9] usb 4-1: Manufacturer: syz [ 379.766486][ T9] usb 4-1: SerialNumber: syz [ 379.907039][ T5857] hub 3-1:0.0: activate --> -90 [ 379.936865][ T9] usb 4-1: config 0 descriptor?? [ 380.018271][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 380.325603][ T1900] usb 3-1: USB disconnect, device number 6 [ 380.857127][ T9] usb 4-1: failed to send control message: -71 [ 380.864030][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 380.954106][ T9] usb 4-1: USB disconnect, device number 3 [ 380.964771][ T9] ch341 4-1:0.0: device disconnected [ 382.522093][ T6583] loop0: detected capacity change from 0 to 1024 [ 382.616486][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 382.887237][ T9] usb 5-1: config 2 has an invalid interface number: 177 but max is 1 [ 382.895879][ T9] usb 5-1: config 2 has an invalid interface number: 177 but max is 1 [ 382.904681][ T9] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 382.914192][ T9] usb 5-1: config 2 has no interface number 0 [ 382.927811][ T9] usb 5-1: config 2 interface 177 has no altsetting 1 [ 383.016524][ T6583] hfsplus: xattr searching failed [ 383.045098][ T30] audit: type=1800 audit(1749744645.707:37): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.229" name="memory.events" dev="loop0" ino=2 res=0 errno=0 [ 383.127250][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 383.137123][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.152328][ T9] usb 5-1: Product: syz [ 383.159097][ T9] usb 5-1: Manufacturer: syz [ 383.164206][ T9] usb 5-1: SerialNumber: syz [ 383.936382][ T6581] loop4: detected capacity change from 0 to 1024 [ 384.234312][ T6581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.405697][ T9] usb 5-1: selecting invalid altsetting 1 [ 384.412216][ T9] sierra 5-1:2.177: Sierra USB modem converter detected [ 384.558465][ T9] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 384.638838][ T9] usb 5-1: USB disconnect, device number 5 [ 384.718656][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 384.730781][ T9] sierra 5-1:2.177: device disconnected [ 386.682000][ T6617] loop3: detected capacity change from 0 to 128 [ 387.512703][ T6623] loop2: detected capacity change from 0 to 8 [ 388.050324][ T6625] loop3: detected capacity change from 0 to 1024 [ 388.503128][ T6625] hfsplus: xattr searching failed [ 388.536291][ T30] audit: type=1800 audit(1749744651.197:38): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.245" name="memory.events" dev="loop3" ino=2 res=0 errno=0 [ 391.984934][ T6663] loop3: detected capacity change from 0 to 256 [ 392.405836][ T6663] loop3: detected capacity change from 0 to 512 [ 392.425268][ T6663] ext3: Unknown parameter 'smackfsroot' [ 395.741782][ T6704] loop1: detected capacity change from 0 to 256 [ 396.012795][ T6704] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 396.026969][ T6704] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 396.141572][ T6699] loop0: detected capacity change from 0 to 2048 [ 396.267599][ T6704] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 396.292135][ T30] audit: type=1800 audit(1749744658.977:39): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.276" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 396.376794][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 396.407012][ T6699] loop0: p1 < > p3 [ 396.411190][ T6699] loop0: partition table partially beyond EOD, truncated [ 396.475713][ T6699] loop0: p3 start 4278190081 is beyond EOD, truncated [ 396.616484][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 396.705847][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.717866][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.728312][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 396.738563][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.828696][ T9] usb 3-1: config 0 descriptor?? [ 396.849049][ T9] hub 3-1:0.0: USB hub found [ 396.927740][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 397.113410][ T9] hub 3-1:0.0: 1 port detected [ 397.606632][ T9] usb 3-1: USB disconnect, device number 7 [ 399.817424][ T6739] loop1: detected capacity change from 0 to 1764 [ 400.079291][ T6731] loop4: detected capacity change from 0 to 8192 [ 401.029866][ T6751] loop1: detected capacity change from 0 to 8 [ 401.159556][ T6751] SQUASHFS error: zlib decompression failed, data probably corrupt [ 401.176618][ T6751] SQUASHFS error: Failed to read block 0x9b: -5 [ 401.183150][ T6751] SQUASHFS error: Unable to read metadata cache entry [99] [ 401.193271][ T6751] SQUASHFS error: Unable to read inode 0x127 [ 403.665881][ T6771] loop1: detected capacity change from 0 to 4096 [ 403.886985][ T6782] loop2: detected capacity change from 0 to 2048 [ 403.964375][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.158026][ T6782] loop2: p2 < > p3 < p5 > p4 [ 404.163099][ T6782] loop2: partition table partially beyond EOD, truncated [ 404.171972][ T6782] loop2: p2 start 4278190080 is beyond EOD, truncated [ 404.207046][ T30] audit: type=1800 audit(1749744666.887:40): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.302" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 404.310896][ T6782] loop2: p4 size 8192 extends beyond EOD, truncated [ 404.408398][ T6782] loop2: p5 size 8192 extends beyond EOD, truncated [ 406.027532][ T6794] loop2: detected capacity change from 0 to 1024 [ 406.087028][ T6794] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.353285][ T6794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.593084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 407.269572][ T3846] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 407.288606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 407.307538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 407.360000][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.406829][ T3846] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 144 with error 28 [ 407.422976][ T3846] EXT4-fs (loop2): This should not happen!! Data will be lost [ 407.422976][ T3846] [ 407.434273][ T3846] EXT4-fs (loop2): Total free blocks count 0 [ 407.440806][ T3846] EXT4-fs (loop2): Free/Dirty block details [ 407.447111][ T3846] EXT4-fs (loop2): free_blocks=68451041280 [ 407.453413][ T3846] EXT4-fs (loop2): dirty_blocks=160 [ 407.459215][ T3846] EXT4-fs (loop2): Block reservation details [ 407.465673][ T3846] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 407.759792][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.110194][ T6813] loop0: detected capacity change from 0 to 8 [ 409.706416][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 409.920811][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 409.983742][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.995634][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.006371][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 410.015866][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.119085][ T24] usb 1-1: config 0 descriptor?? [ 410.191531][ T24] hub 1-1:0.0: USB hub found [ 410.354824][ T24] hub 1-1:0.0: 1 port detected [ 410.545984][ T24] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 410.553160][ T24] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 410.668012][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 410.674884][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 410.775492][ T24] usb 1-1: USB disconnect, device number 5 [ 411.081718][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 411.218833][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 411.885816][ T6836] loop2: detected capacity change from 0 to 1024 [ 412.168998][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.181931][ T6836] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.405124][ T30] audit: type=1800 audit(1749744675.077:41): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.324" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 412.821989][ T6842] loop0: detected capacity change from 0 to 2048 [ 412.927619][ T6842] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 413.010610][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.107354][ T6842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.057871][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.067254][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.431191][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 414.669169][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 414.705520][ T9] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 414.714531][ T9] usb 2-1: config 0 has no interface number 0 [ 414.797731][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=f7.98 [ 414.807653][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.815993][ T9] usb 2-1: Product: syz [ 414.820753][ T9] usb 2-1: Manufacturer: syz [ 414.825682][ T9] usb 2-1: SerialNumber: syz [ 414.945228][ T9] usb 2-1: config 0 descriptor?? [ 415.020283][ T9] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 415.220473][ T2331] pvrusb2: Invalid write control endpoint [ 415.251170][ T9] usb 2-1: USB disconnect, device number 5 [ 415.278811][ T2331] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 415.289660][ T2331] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 416.038910][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 416.257639][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 416.303855][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 416.313428][ T24] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 416.327328][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.516773][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.529957][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.539541][ T24] usb 3-1: Product: syz [ 416.544029][ T24] usb 3-1: Manufacturer: syz [ 416.549021][ T24] usb 3-1: SerialNumber: syz [ 417.258094][ T24] usb 3-1: 0:2 : does not exist [ 418.856782][ T5857] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 419.075883][ T5857] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 419.092785][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.173532][ T6889] loop1: detected capacity change from 0 to 2048 [ 419.205004][ T5857] usb 5-1: config 0 descriptor?? [ 419.217542][ T24] usb 3-1: USB disconnect, device number 8 [ 419.335146][ T6889] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 419.524290][ T6889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.486433][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 420.686977][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 420.747231][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.748111][ T6897] loop0: detected capacity change from 0 to 512 [ 420.759119][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.775536][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.785151][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.913791][ T24] usb 4-1: config 0 descriptor?? [ 420.935439][ T24] hub 4-1:0.0: USB hub found [ 420.978129][ T6897] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.347: bad orphan inode 11 [ 421.094579][ T6897] ext4_test_bit(bit=10, block=4) = 1 [ 421.100846][ T6897] is_bad_inode(inode)=0 [ 421.105970][ T6897] NEXT_ORPHAN(inode)=2080374784 [ 421.112516][ T6897] max_ino=32 [ 421.115975][ T6897] i_nlink=0 [ 421.120235][ T6897] EXT4-fs (loop0): 1 truncate cleaned up [ 421.133553][ T6897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.196623][ T5857] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.207359][ T5857] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 421.219926][ T5857] asix 5-1:0.0: probe with driver asix failed with error -71 [ 421.297848][ T24] hub 4-1:0.0: 1 port detected [ 421.494321][ T5857] usb 5-1: USB disconnect, device number 6 [ 421.954642][ T24] hub 4-1:0.0: activate --> -90 [ 422.187203][ T24] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 422.196609][ T1900] usb 4-1: USB disconnect, device number 4 [ 422.829816][ T6913] loop4: detected capacity change from 0 to 256 [ 423.024804][ T6913] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xdfd03b2c, utbl_chksum : 0xe619d30d) [ 423.056553][ T6901] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 424.776963][ T6930] netlink: 44 bytes leftover after parsing attributes in process `syz.3.357'. [ 424.945545][ T6897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.268141][ T6933] loop2: detected capacity change from 0 to 512 [ 426.235727][ T6933] EXT4-fs (loop2): Test dummy encryption mode enabled [ 426.243830][ T6933] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 426.260802][ T6933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 426.272535][ T6933] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 426.904135][ T6946] loop3: detected capacity change from 0 to 2048 [ 426.998519][ T5857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 427.000521][ T6946] loop3: p1 < > p3 [ 427.049894][ T6946] loop3: p3 size 134217728 extends beyond EOD, truncated [ 427.107675][ T1900] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 427.230014][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 427.263851][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.282078][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.294716][ T5857] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 427.304797][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.354359][ T1900] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 427.364354][ T1900] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 427.375077][ T1900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.451543][ T5857] usb 1-1: config 0 descriptor?? [ 427.452426][ T1900] usb 4-1: config 0 descriptor?? [ 427.644638][ T5857] hub 1-1:0.0: USB hub found [ 427.794148][ T5857] hub 1-1:0.0: 1 port detected [ 428.017562][ T1900] usb 4-1: USB disconnect, device number 5 [ 428.740818][ T1900] usb 1-1: USB disconnect, device number 6 [ 429.757043][ T5857] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 429.976717][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 430.034652][ T5857] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.051998][ T5857] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 430.161101][ T5857] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.170936][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 430.179646][ T5857] usb 5-1: SerialNumber: syz [ 430.488626][ T5857] usb 5-1: USB disconnect, device number 7 [ 431.446935][ T5857] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 431.656787][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 431.714210][ T5857] usb 1-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 431.725200][ T5857] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.825091][ T5857] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.832556][ T6991] loop4: detected capacity change from 0 to 512 [ 431.834662][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.852886][ T5857] usb 1-1: Product: syz [ 431.857483][ T5857] usb 1-1: Manufacturer: syz [ 431.862453][ T5857] usb 1-1: SerialNumber: syz [ 431.927047][ T6991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 432.147622][ T6991] EXT4-fs (loop4): 1 orphan inode deleted [ 432.153861][ T6991] EXT4-fs (loop4): 1 truncate cleaned up [ 432.162647][ T6991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.466988][ T6995] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 432.590546][ T5857] usb 1-1: 0:2 : does not exist [ 432.814086][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.634317][ T1900] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 433.845164][ T1900] usb 5-1: Using ep0 maxpacket: 32 [ 433.892038][ T1900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.903929][ T1900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.914529][ T1900] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.924309][ T1900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.066977][ T1900] usb 5-1: config 0 descriptor?? [ 434.098470][ T1900] hub 5-1:0.0: USB hub found [ 434.197943][ T5857] usb 1-1: USB disconnect, device number 7 [ 434.400842][ T1900] hub 5-1:0.0: 1 port detected [ 435.028126][ T7022] loop0: detected capacity change from 0 to 512 [ 435.245053][ T24] usb 5-1: USB disconnect, device number 8 [ 435.272885][ T7018] loop2: detected capacity change from 0 to 256 [ 435.296878][ T7022] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.391: bg 0: block 16: invalid block bitmap [ 435.325782][ T7022] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 435.393145][ T7022] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.391: invalid indirect mapped block 5 (level 0) [ 435.425039][ T7022] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.391: invalid indirect mapped block 4294967295 (level 1) [ 435.457835][ T7022] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.391: invalid indirect mapped block 4294967295 (level 2) [ 435.527899][ T7022] EXT4-fs (loop0): 1 truncate cleaned up [ 435.536678][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.335818][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.405332][ T7032] warning: `syz.3.395' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 437.228767][ T7042] raw_sendmsg: syz.0.397 forgot to set AF_INET. Fix it! [ 438.137767][ T5857] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 438.376557][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 438.403563][ T5857] usb 5-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 438.414463][ T5857] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.504061][ T5857] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.514133][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.522969][ T5857] usb 5-1: Product: syz [ 438.527548][ T5857] usb 5-1: Manufacturer: syz [ 438.532521][ T5857] usb 5-1: SerialNumber: syz [ 438.996556][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 439.135923][ T5857] usb 5-1: 0:2 : does not exist [ 439.213894][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 439.269438][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.281152][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.291781][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.301632][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.540352][ T5878] usb 4-1: config 0 descriptor?? [ 439.587191][ T5878] hub 4-1:0.0: USB hub found [ 439.587261][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 439.818556][ T5878] hub 4-1:0.0: 1 port detected [ 439.929943][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 439.968380][ T7066] loop1: detected capacity change from 0 to 1024 [ 440.012403][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.023484][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.155376][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.165136][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 440.174593][ T24] usb 3-1: SerialNumber: syz [ 440.597597][ T7066] hfsplus: xattr searching failed [ 440.606783][ T7071] hfsplus: xattr searching failed [ 440.643804][ T30] audit: type=1800 audit(1749744703.287:42): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.409" name="memory.events" dev="loop1" ino=2 res=0 errno=0 [ 440.739414][ T7064] loop2: detected capacity change from 0 to 128 [ 440.788460][ T1900] usb 4-1: USB disconnect, device number 6 [ 440.813265][ T7064] vfat: Unknown parameter '' [ 441.346966][ T3906] hfsplus: bad catalog file entry [ 441.353201][ T3906] hfsplus: b-tree write err: -5, ino 3 [ 441.572917][ T1900] usb 5-1: USB disconnect, device number 9 [ 442.727650][ T24] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 442.740537][ T24] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 442.748929][ T24] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 442.858832][ T7086] loop4: detected capacity change from 0 to 1024 [ 442.971662][ T24] usb 3-1: USB disconnect, device number 9 [ 443.420979][ T7092] loop2: detected capacity change from 0 to 128 [ 443.648069][ T7092] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.730268][ T7092] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.383180][ T5795] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.068654][ T5878] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 445.238016][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 445.316753][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 445.347076][ T5878] usb 4-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 445.358096][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.471971][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.485815][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.494417][ T5878] usb 4-1: Product: syz [ 445.496635][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 445.498985][ T5878] usb 4-1: Manufacturer: syz [ 445.515378][ T5878] usb 4-1: SerialNumber: syz [ 445.596652][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.611186][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.623314][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 445.632865][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.849902][ T24] usb 1-1: config 0 descriptor?? [ 445.891940][ T24] hub 1-1:0.0: USB hub found [ 446.055615][ T7103] loop1: detected capacity change from 0 to 8192 [ 446.187123][ T24] hub 1-1:0.0: 1 port detected [ 446.316845][ T5878] usb 4-1: 0:2 : does not exist [ 447.068850][ T1900] usb 1-1: USB disconnect, device number 8 [ 448.258778][ T1900] usb 4-1: USB disconnect, device number 7 [ 448.761587][ T7129] loop3: detected capacity change from 0 to 256 [ 448.871867][ T7129] exFAT-fs (loop3): bogus fat length [ 448.877774][ T7129] exFAT-fs (loop3): failed to read boot sector [ 448.887727][ T7129] exFAT-fs (loop3): failed to recognize exfat type [ 448.990645][ T5878] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 449.256649][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 449.275673][ T5878] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 449.284785][ T5878] usb 5-1: config 0 has no interface number 0 [ 449.381500][ T5878] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 449.391746][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.407115][ T5878] usb 5-1: Product: syz [ 449.411695][ T5878] usb 5-1: Manufacturer: syz [ 449.419256][ T5878] usb 5-1: SerialNumber: syz [ 449.510352][ T7132] loop1: detected capacity change from 0 to 2048 [ 449.611751][ T5878] usb 5-1: config 0 descriptor?? [ 449.646281][ T5878] smsc95xx v2.0.0 [ 449.729888][ T7067] loop1: p1 < > p3 [ 449.781907][ T7067] loop1: p3 size 134217728 extends beyond EOD, truncated [ 450.014429][ T7132] loop1: p1 < > p3 [ 450.075460][ T5878] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 450.077494][ T7132] loop1: p3 size 134217728 extends beyond EOD, [ 450.086920][ T5878] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.103762][ T7132] truncated [ 450.340552][ T5878] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 450.353717][ T5878] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 450.823483][ T6061] udevd[6061]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 450.862617][ T7141] loop3: detected capacity change from 0 to 128 [ 450.868857][ T7067] udevd[7067]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 450.964733][ T7133] loop1: detected capacity change from 0 to 2048 [ 451.217774][ T7132] netlink: 'syz.1.433': attribute type 5 has an invalid length. [ 451.405949][ T6061] udevd[6061]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 451.479555][ T7067] udevd[7067]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 451.997095][ T7146] loop0: detected capacity change from 0 to 512 [ 452.098710][ T1900] usb 5-1: USB disconnect, device number 10 [ 452.234647][ T7146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.248433][ T7146] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.256771][ T5878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 452.428697][ T30] audit: type=1800 audit(1749744715.117:43): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.439" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 452.450735][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 452.512063][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.524222][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.534828][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.544636][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.648013][ T5857] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 452.763061][ T5878] usb 4-1: config 0 descriptor?? [ 452.825141][ T5878] hub 4-1:0.0: USB hub found [ 452.867687][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 452.905699][ T5857] usb 3-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 452.916996][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.077547][ T5857] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.097490][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.106725][ T5857] usb 3-1: Product: syz [ 453.111732][ T5857] usb 3-1: Manufacturer: syz [ 453.117108][ T5857] usb 3-1: SerialNumber: syz [ 453.205298][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.205488][ T5878] hub 4-1:0.0: 1 port detected [ 453.813021][ T5857] usb 3-1: 0:2 : does not exist [ 453.938762][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 454.017186][ T1900] usb 4-1: USB disconnect, device number 8 [ 454.395347][ T7166] loop4: detected capacity change from 0 to 128 [ 454.433141][ T7166] EXT4-fs: Ignoring removed nobh option [ 454.587143][ T7166] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.707159][ T7166] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 455.731222][ T5794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.739941][ T5857] usb 3-1: USB disconnect, device number 10 [ 455.796710][ T7180] loop0: detected capacity change from 0 to 256 [ 456.097284][ T7180] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 456.309924][ T7180] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 456.517611][ T30] audit: type=1326 audit(1749744719.187:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.4.452" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae539 code=0x0 [ 456.698907][ T7188] loop4: detected capacity change from 0 to 512 [ 456.737692][ T7188] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 456.784078][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 456.806640][ T7188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 456.827113][ T7187] loop3: detected capacity change from 0 to 512 [ 456.844791][ T7188] System zones: 1-12 [ 456.857594][ T7188] EXT4-fs (loop4): orphan cleanup on readonly fs [ 456.865017][ T7188] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.452: invalid indirect mapped block 12 (level 1) [ 456.908614][ T7188] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.452: invalid indirect mapped block 2 (level 2) [ 457.029788][ T7188] EXT4-fs (loop4): 1 truncate cleaned up [ 457.039291][ T7188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 457.053730][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 457.070027][ T7187] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.454: bad orphan inode 11 [ 457.150900][ T5878] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 457.151673][ T7187] ext4_test_bit(bit=10, block=4) = 1 [ 457.159709][ T5878] usb 3-1: config 0 has no interface number 0 [ 457.173477][ T7187] is_bad_inode(inode)=0 [ 457.182452][ T7187] NEXT_ORPHAN(inode)=2080374784 [ 457.188937][ T7187] max_ino=32 [ 457.192479][ T7187] i_nlink=0 [ 457.196445][ T7187] EXT4-fs (loop3): 1 truncate cleaned up [ 457.205097][ T7187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.237803][ T7188] cgroup: Unknown subsys name 'cpuset' [ 457.297442][ T5878] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 457.307046][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.315487][ T5878] usb 3-1: Product: syz [ 457.320367][ T5878] usb 3-1: Manufacturer: syz [ 457.325266][ T5878] usb 3-1: SerialNumber: syz [ 457.338230][ T7188] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 5: comm syz.4.452: lblock 0 mapped to illegal pblock 5 (length 1) [ 457.406506][ T7188] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.452: error -117 reading directory block [ 457.457117][ T5878] usb 3-1: config 0 descriptor?? [ 457.507626][ T5878] smsc95xx v2.0.0 [ 457.930939][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 457.954414][ T7193] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 457.972607][ T5878] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 457.984339][ T5878] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 458.224074][ T5878] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 458.236902][ T5878] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 458.846368][ T5878] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 458.996817][ T5878] usb 5-1: device descriptor read/64, error -71 [ 459.276781][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 459.356913][ T5857] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 459.437567][ T5878] usb 5-1: device descriptor read/64, error -71 [ 459.540271][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 459.554872][ T5878] usb usb5-port1: attempt power cycle [ 459.596764][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.608484][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.618935][ T5857] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 459.625558][ T1900] usb 3-1: USB disconnect, device number 11 [ 459.628560][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.769106][ T5857] usb 1-1: config 0 descriptor?? [ 459.791678][ T5857] hub 1-1:0.0: USB hub found [ 460.006620][ T5878] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 460.029439][ T5857] hub 1-1:0.0: 1 port detected [ 460.055883][ T5878] usb 5-1: device descriptor read/8, error -71 [ 460.338049][ T5878] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 460.402024][ T5878] usb 5-1: device descriptor read/8, error -71 [ 460.538800][ T5878] usb usb5-port1: unable to enumerate USB device [ 460.814944][ T7187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.993694][ T5857] usb 1-1: USB disconnect, device number 9 [ 461.325604][ T7208] capability: warning: `syz.3.462' uses 32-bit capabilities (legacy support in use) [ 462.526747][ T1900] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 462.716806][ T1900] usb 5-1: Using ep0 maxpacket: 16 [ 462.726547][ T5878] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 462.772123][ T1900] usb 5-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 462.784037][ T1900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.901515][ T1900] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.914388][ T1900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.923919][ T1900] usb 5-1: Product: syz [ 462.929714][ T1900] usb 5-1: Manufacturer: syz [ 462.934833][ T1900] usb 5-1: SerialNumber: syz [ 462.978606][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.990834][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.001228][ T5878] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 463.017977][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.145936][ T5878] usb 1-1: config 0 descriptor?? [ 463.676735][ T7225] loop2: detected capacity change from 0 to 1024 [ 463.697641][ T1900] usb 5-1: 0:2 : does not exist [ 463.748475][ T5878] nintendo 0003:057E:200E.0003: unknown main item tag 0x4 [ 463.757183][ T5878] nintendo 0003:057E:200E.0003: item fetching failed at offset 6/7 [ 463.779926][ T5878] nintendo 0003:057E:200E.0003: HID parse failed [ 463.847929][ T5878] nintendo 0003:057E:200E.0003: probe - fail = -22 [ 463.855412][ T5878] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -22 [ 463.919260][ T7225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.077537][ T5878] usb 1-1: USB disconnect, device number 10 [ 464.600998][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.439619][ T7240] loop2: detected capacity change from 0 to 512 [ 465.488571][ T1900] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 465.536383][ T5878] usb 5-1: USB disconnect, device number 15 [ 465.611725][ T7240] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.472: bad orphan inode 11 [ 465.698510][ T7240] ext4_test_bit(bit=10, block=4) = 1 [ 465.704231][ T7240] is_bad_inode(inode)=0 [ 465.709307][ T7240] NEXT_ORPHAN(inode)=2080374784 [ 465.714416][ T7240] max_ino=32 [ 465.718701][ T7240] i_nlink=0 [ 465.722477][ T7240] EXT4-fs (loop2): 1 truncate cleaned up [ 465.731209][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.745487][ T1900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.756467][ T1900] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 465.766264][ T1900] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.779388][ T1900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.910342][ T1900] usb 4-1: config 0 descriptor?? [ 466.294167][ T7246] Bluetooth: MGMT ver 1.23 [ 466.399520][ T7240] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.439925][ T1900] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 466.663113][ T1900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.674011][ T1900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.752997][ T1900] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.762715][ T1900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.771370][ T1900] usb 1-1: SerialNumber: syz [ 467.157880][ T1900] usb 1-1: 0:2 : does not exist [ 467.163426][ T1900] usb 1-1: unit 5 not found! [ 467.278253][ T1900] usb 1-1: USB disconnect, device number 11 [ 467.427382][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 467.554049][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.596848][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 467.648008][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.659921][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.670338][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.680075][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.815924][ T24] usb 3-1: config 0 descriptor?? [ 467.858082][ T24] hub 3-1:0.0: USB hub found [ 468.127754][ T24] hub 3-1:0.0: 1 port detected [ 468.389561][ T7257] loop4: detected capacity change from 0 to 1024 [ 468.470152][ T7257] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.614031][ T7257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.655931][ T24] usb 4-1: USB disconnect, device number 9 [ 468.815487][ T1900] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 468.823729][ T5878] usb 3-1: USB disconnect, device number 12 [ 469.328248][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.291217][ T5878] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 470.432995][ T7277] loop2: detected capacity change from 0 to 512 [ 470.546764][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 470.622550][ T5878] usb 5-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 470.633330][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.672311][ T7277] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.487: bad orphan inode 11 [ 470.736833][ T7277] ext4_test_bit(bit=10, block=4) = 1 [ 470.742457][ T7277] is_bad_inode(inode)=0 [ 470.747353][ T7277] NEXT_ORPHAN(inode)=2080374784 [ 470.752462][ T7277] max_ino=32 [ 470.755914][ T7277] i_nlink=0 [ 470.761203][ T7277] EXT4-fs (loop2): 1 truncate cleaned up [ 470.770830][ T7277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.798810][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.811448][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.820370][ T5878] usb 5-1: Product: syz [ 470.824841][ T5878] usb 5-1: Manufacturer: syz [ 470.830024][ T5878] usb 5-1: SerialNumber: syz [ 470.967755][ T7281] loop0: detected capacity change from 0 to 512 [ 471.099223][ T7281] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 471.148583][ T7281] EXT4-fs (loop0): 1 truncate cleaned up [ 471.157599][ T7281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.293698][ T7277] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.319998][ T5878] usb 5-1: 0:2 : does not exist [ 471.339620][ T7281] syz.0.489 (pid 7281) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 471.961886][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.292180][ T5878] usb 5-1: USB disconnect, device number 16 [ 473.313965][ T7295] loop0: detected capacity change from 0 to 1024 [ 473.958549][ T14] hfsplus: b-tree write err: -5, ino 4 [ 474.134840][ T7301] loop3: detected capacity change from 0 to 1024 [ 474.206880][ T7301] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.466920][ T7301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.512077][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.519138][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.535390][ T14] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 475.556476][ T2331] pvrusb2: request_firmware fatal error with code=-110 [ 475.564433][ T2331] pvrusb2: Failure uploading firmware1 [ 475.570293][ T2331] pvrusb2: Device initialization was not successful. [ 475.577776][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 475.588654][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 475.626736][ T9] pvrusb2: Device being rendered inoperable [ 475.679359][ T14] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 304 with error 28 [ 475.692550][ T14] EXT4-fs (loop3): This should not happen!! Data will be lost [ 475.692550][ T14] [ 475.702703][ T14] EXT4-fs (loop3): Total free blocks count 0 [ 475.716431][ T14] EXT4-fs (loop3): Free/Dirty block details [ 475.725694][ T14] EXT4-fs (loop3): free_blocks=68451041280 [ 475.732145][ T14] EXT4-fs (loop3): dirty_blocks=320 [ 475.737735][ T14] EXT4-fs (loop3): Block reservation details [ 475.744204][ T14] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 475.956538][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.866380][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 477.070598][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 477.154103][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 477.164831][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.259415][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.269186][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.278143][ T9] usb 3-1: Product: syz [ 477.282623][ T9] usb 3-1: Manufacturer: syz [ 477.287639][ T9] usb 3-1: SerialNumber: syz [ 477.932286][ T7333] loop4: detected capacity change from 0 to 1024 [ 477.936908][ T9] usb 3-1: 0:2 : does not exist [ 477.988582][ T7333] EXT4-fs: Ignoring removed oldalloc option [ 478.075782][ T7333] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 478.220951][ T7333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.914970][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.380797][ T7347] loop0: detected capacity change from 0 to 1024 [ 479.433920][ T7347] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.595420][ T7347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.740240][ T7353] loop1: detected capacity change from 0 to 1024 [ 480.038484][ T9] usb 3-1: USB disconnect, device number 13 [ 480.253810][ T7353] hfsplus: xattr searching failed [ 480.289279][ T30] audit: type=1800 audit(1749744742.957:45): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="loop1" ino=2 res=0 errno=0 [ 480.788407][ T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 480.833825][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 480.847076][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 480.847076][ T12] [ 480.857320][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 480.863589][ T12] EXT4-fs (loop0): Free/Dirty block details [ 480.870654][ T12] EXT4-fs (loop0): free_blocks=68451041280 [ 480.876932][ T12] EXT4-fs (loop0): dirty_blocks=240 [ 480.882423][ T12] EXT4-fs (loop0): Block reservation details [ 480.889046][ T12] EXT4-fs (loop0): i_reserved_data_blocks=15 [ 481.175160][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.657406][ T7368] loop3: detected capacity change from 0 to 128 [ 481.774680][ T7368] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 481.801035][ T7368] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 482.241022][ T7378] loop2: detected capacity change from 0 to 1024 [ 482.395459][ T7378] EXT4-fs: Ignoring removed oldalloc option [ 482.457419][ T7378] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 482.596772][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 482.688853][ T7378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.780820][ T5796] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 482.796602][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 482.838891][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 482.850361][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 482.860887][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.969659][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.988294][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.997248][ T9] usb 2-1: Product: syz [ 483.001703][ T9] usb 2-1: Manufacturer: syz [ 483.006700][ T9] usb 2-1: SerialNumber: syz [ 483.250024][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 483.258647][ T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 483.561966][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.634785][ T9] usb 2-1: USB disconnect, device number 6 [ 484.251088][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.752033][ T7397] loop0: detected capacity change from 0 to 1024 [ 484.859772][ T7397] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.931966][ T7401] loop1: detected capacity change from 0 to 1024 [ 485.021745][ T7397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.135884][ T7406] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 485.217528][ T7401] hfsplus: xattr searching failed [ 485.249817][ T30] audit: type=1800 audit(1749744747.907:46): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.532" name="memory.events" dev="loop1" ino=2 res=0 errno=0 [ 485.680656][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.721288][ T7417] loop4: detected capacity change from 0 to 1024 [ 487.117034][ T7417] ===================================================== [ 487.124624][ T7417] BUG: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 487.134350][ T7417] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 487.141113][ T7417] __hfsplus_brec_find+0x271/0x840 [ 487.146776][ T7417] hfsplus_brec_find+0x4df/0x9f0 [ 487.152209][ T7417] hfsplus_delete_all_attrs+0x255/0x420 [ 487.158508][ T7417] hfsplus_delete_cat+0x1302/0x13d0 [ 487.163979][ T7417] hfsplus_unlink+0x526/0xd70 [ 487.169135][ T7417] vfs_unlink+0x616/0xab0 [ 487.171803][ T7420] loop2: detected capacity change from 0 to 2048 [ 487.173675][ T7417] do_unlinkat+0x6e6/0xe50 [ 487.189566][ T7417] __ia32_sys_unlinkat+0x1a5/0x210 [ 487.195001][ T7417] ia32_sys_call+0x3d22/0x42c0 [ 487.200514][ T7417] __do_fast_syscall_32+0xb0/0x150 [ 487.205888][ T7417] do_fast_syscall_32+0x38/0x80 [ 487.211346][ T7417] do_SYSENTER_32+0x1f/0x30 [ 487.216490][ T7417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.223139][ T7417] [ 487.225614][ T7417] Uninit was created at: [ 487.230446][ T7417] __kmalloc_noprof+0x95f/0x1310 [ 487.235626][ T7417] hfsplus_find_init+0x90/0x1d0 [ 487.241034][ T7417] hfsplus_delete_all_attrs+0xc0/0x420 [ 487.246991][ T7417] hfsplus_delete_cat+0x1302/0x13d0 [ 487.252472][ T7417] hfsplus_unlink+0x526/0xd70 [ 487.257709][ T7417] vfs_unlink+0x616/0xab0 [ 487.262306][ T7417] do_unlinkat+0x6e6/0xe50 [ 487.267194][ T7417] __ia32_sys_unlinkat+0x1a5/0x210 [ 487.272595][ T7417] ia32_sys_call+0x3d22/0x42c0 [ 487.278008][ T7417] __do_fast_syscall_32+0xb0/0x150 [ 487.287146][ T7417] do_fast_syscall_32+0x38/0x80 [ 487.292334][ T7417] do_SYSENTER_32+0x1f/0x30 [ 487.299074][ T7417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.305734][ T7417] [ 487.308590][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.4.536 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(undef) [ 487.315655][ T7420] EXT4-fs: Ignoring removed mblk_io_submit option [ 487.321171][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.321252][ T7417] ===================================================== [ 487.321295][ T7417] Disabling lock debugging due to kernel taint [ 487.321345][ T7417] Kernel panic - not syncing: kmsan.panic set ... [ 487.321429][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.4.536 Tainted: G B 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(undef) [ 487.321600][ T7417] Tainted: [B]=BAD_PAGE [ 487.321646][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.321717][ T7417] Call Trace: [ 487.321762][ T7417] [ 487.321805][ T7417] __dump_stack+0x26/0x30 [ 487.321964][ T7417] dump_stack_lvl+0x53/0x270 [ 487.322127][ T7417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 487.322326][ T7417] dump_stack+0x1e/0x25 [ 487.322469][ T7417] panic+0x4bd/0xd50 [ 487.322682][ T7417] kmsan_report+0x31c/0x320 [ 487.322857][ T7417] ? __msan_warning+0x1b/0x30 [ 487.323007][ T7417] ? hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 487.323191][ T7417] ? __hfsplus_brec_find+0x271/0x840 [ 487.323360][ T7417] ? hfsplus_brec_find+0x4df/0x9f0 [ 487.323527][ T7417] ? hfsplus_delete_all_attrs+0x255/0x420 [ 487.323717][ T7417] ? hfsplus_delete_cat+0x1302/0x13d0 [ 487.323858][ T7417] ? hfsplus_unlink+0x526/0xd70 [ 487.323994][ T7417] ? vfs_unlink+0x616/0xab0 [ 487.324148][ T7417] ? do_unlinkat+0x6e6/0xe50 [ 487.324296][ T7417] ? __ia32_sys_unlinkat+0x1a5/0x210 [ 487.324456][ T7417] ? ia32_sys_call+0x3d22/0x42c0 [ 487.324570][ T7417] ? __do_fast_syscall_32+0xb0/0x150 [ 487.324697][ T7417] ? do_fast_syscall_32+0x38/0x80 [ 487.324817][ T7417] ? do_SYSENTER_32+0x1f/0x30 [ 487.324933][ T7417] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.325102][ T7417] ? kmsan_get_metadata+0xfb/0x160 [ 487.325282][ T7417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 487.325472][ T7417] ? kmsan_get_metadata+0xfb/0x160 [ 487.325652][ T7417] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 487.325849][ T7417] ? kmsan_get_metadata+0xfb/0x160 [ 487.326034][ T7417] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 487.326226][ T7417] ? kmsan_get_metadata+0xfb/0x160 [ 487.326416][ T7417] __msan_warning+0x1b/0x30 [ 487.326571][ T7417] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 487.326775][ T7417] __hfsplus_brec_find+0x271/0x840 [ 487.326948][ T7417] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 487.327163][ T7417] hfsplus_brec_find+0x4df/0x9f0 [ 487.327332][ T7417] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 487.327563][ T7417] hfsplus_delete_all_attrs+0x255/0x420 [ 487.327786][ T7417] hfsplus_delete_cat+0x1302/0x13d0 [ 487.583775][ T7417] hfsplus_unlink+0x526/0xd70 [ 487.588847][ T7417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 487.595098][ T7417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 487.601214][ T7417] ? __pfx_hfsplus_unlink+0x10/0x10 [ 487.606749][ T7417] vfs_unlink+0x616/0xab0 [ 487.611458][ T7417] do_unlinkat+0x6e6/0xe50 [ 487.616184][ T7417] __ia32_sys_unlinkat+0x1a5/0x210 [ 487.621584][ T7417] ia32_sys_call+0x3d22/0x42c0 [ 487.626571][ T7417] __do_fast_syscall_32+0xb0/0x150 [ 487.631921][ T7417] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 487.637957][ T7417] do_fast_syscall_32+0x38/0x80 [ 487.643137][ T7417] do_SYSENTER_32+0x1f/0x30 [ 487.647915][ T7417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.654528][ T7417] RIP: 0023:0xf70ae539 [ 487.658780][ T7417] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 487.678651][ T7417] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 000000000000012d [ 487.687489][ T7417] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 487.695664][ T7417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.703829][ T7417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.711991][ T7417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 487.720177][ T7417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.728466][ T7417] [ 487.732016][ T7417] Kernel Offset: disabled [ 487.736453][ T7417] Rebooting in 86400 seconds..