last executing test programs: 3m19.453393904s ago: executing program 3 (id=1444): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 3m18.496543403s ago: executing program 3 (id=1449): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8001000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb91}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 3m17.983567283s ago: executing program 3 (id=1453): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, r0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) 3m17.357285497s ago: executing program 3 (id=1457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1a0c0, 0x0) 3m16.748940406s ago: executing program 3 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="0400010001"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 3m15.718606876s ago: executing program 3 (id=1466): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m13.646751783s ago: executing program 32 (id=1466): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.139504571s ago: executing program 4 (id=1640): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x8, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) 2m29.514301072s ago: executing program 4 (id=1644): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x109, 0x60004, 0xff7ffffc, 0x8aa, 0x1, 0x4, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port1\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x2, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) 2m28.923314616s ago: executing program 4 (id=1648): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m27.861608648s ago: executing program 4 (id=1655): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m27.063292027s ago: executing program 4 (id=1659): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0x7, 0xd615, 0x9, 0x3, 0xffffffff, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x11}}}, 0xfffffe3f) sendfile(r0, r1, 0x0, 0x7f07) 2m24.73340751s ago: executing program 4 (id=1669): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(r0, &(0x7f0000000300)='./cgroup\x00', 0x89801) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r1, 0x0, r2, 0x0, 0x46) 2m22.376188794s ago: executing program 33 (id=1669): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(r0, &(0x7f0000000300)='./cgroup\x00', 0x89801) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r1, 0x0, r2, 0x0, 0x46) 16.662549318s ago: executing program 6 (id=2189): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456c1c8c4a4fc84fea7cabb001968d0d3591bee2f2c93453aa0e750a0b57ffb2d9eeba407a2e8b16c7b6bbeb5ff7fd5fc6c95c4169ffd42357bc6dfbcb88ca559d001460faf3504f22c5853ffa0860ad22946569f51608372adbc094dafdd94e8cc7eeb17d679ca2466e36ae023e13fb304a68f95dc1c56fd365fcf5af0a961b9a7e79e615d6c7daa97af0dca88191b4547239725d1dec265fcced6f805f894c1abdf83b56759ee877f9f220c1ef112adae061e7b6ba836f436d4d3af", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x46, 0x0, 0x9}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(&(0x7f0000000140)='./file2\x00', 0x99) 13.881931564s ago: executing program 6 (id=2203): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc090000000000010902240001000090080904000009030003000921fdff080122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20011cc500"], 0x0}) 8.971053731s ago: executing program 6 (id=2226): r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x24, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x29, 0x0, @private, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 7.624160504s ago: executing program 0 (id=2232): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x3) 7.092072885s ago: executing program 6 (id=2234): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7) 6.78568389s ago: executing program 0 (id=2237): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) splice(r0, 0x0, r2, 0x0, 0x2, 0x6) 6.037077847s ago: executing program 2 (id=2240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0xfc20, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.511971895s ago: executing program 6 (id=2241): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 5.23225315s ago: executing program 5 (id=2242): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000f40)={[{@dioread_nolock}, {}, {@nombcache}, {@norecovery}, {@i_version}, {@orlov}, {@resgid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) lseek(r0, 0x595e, 0x3) 5.11174261s ago: executing program 0 (id=2243): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) 4.912146641s ago: executing program 1 (id=2244): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1}) ppoll(&(0x7f0000000340)=[{r1, 0x4000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) 4.75061555s ago: executing program 2 (id=2245): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000004a00)={'sit0\x00', 0x0}) 4.432681036s ago: executing program 6 (id=2246): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.311604965s ago: executing program 1 (id=2247): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00') 4.195834118s ago: executing program 5 (id=2248): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) 4.026268928s ago: executing program 2 (id=2249): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xa0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.857899973s ago: executing program 0 (id=2250): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) listen(r0, 0x210004) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 3.268867771s ago: executing program 5 (id=2251): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000011c0)={0x8000101c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) 3.116758155s ago: executing program 1 (id=2252): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 2.936740389s ago: executing program 2 (id=2253): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x19, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x85c6}}], 0x30}}], 0x2, 0x0) 2.731717342s ago: executing program 5 (id=2254): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8b, 0x0, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.556420224s ago: executing program 0 (id=2255): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0xa10480, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2.127833775s ago: executing program 1 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.030045955s ago: executing program 2 (id=2257): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x7, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.140385079s ago: executing program 5 (id=2258): r0 = syz_io_uring_setup(0x1ab7, &(0x7f0000000300)={0x0, 0xba50, 0x1000, 0x2, 0x152}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff80000000, 0x0, 0x0) 1.098668589s ago: executing program 2 (id=2259): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000180)={0x0, 0x0, 0x28, 0x8, 0x4d}) 1.053392059s ago: executing program 1 (id=2260): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 359.062619ms ago: executing program 1 (id=2261): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 235.746675ms ago: executing program 0 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdc05, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44894) 0s ago: executing program 5 (id=2263): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x1}, @acquire_done], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) kernel console output (not intermixed with test programs): USB disconnect, device number 9 [ 434.959359][ T8946] loop0: detected capacity change from 0 to 1024 [ 435.098591][ T8946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.209538][ T8953] EXT4-fs (loop0): shut down requested (1) [ 435.329455][ T8956] devpts: Bad value for 'max' [ 435.798739][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.481815][ T806] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 436.681366][ T806] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 436.736376][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.786978][ T806] usb 1-1: config 0 descriptor?? [ 436.831138][ T806] cp210x 1-1:0.0: cp210x converter detected [ 437.038480][ T8979] loop1: detected capacity change from 0 to 256 [ 437.093380][ T8979] exfat: Deprecated parameter 'utf8' [ 437.119846][ T8979] exfat: Deprecated parameter 'utf8' [ 437.166574][ T8979] exfat: Deprecated parameter 'utf8' [ 437.288969][ T8983] loop2: detected capacity change from 0 to 1024 [ 437.303351][ T806] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 437.355007][ T8979] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 437.384444][ T8983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.403022][ T806] usb 1-1: cp210x converter now attached to ttyUSB0 [ 437.563949][ T806] usb 1-1: USB disconnect, device number 6 [ 437.565936][ T8989] EXT4-fs (loop2): shut down requested (1) [ 437.687171][ T806] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 437.748972][ T806] cp210x 1-1:0.0: device disconnected [ 438.128902][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.492376][ T8999] syz.4.1219 (8999): attempted to duplicate a private mapping with mremap. This is not supported. [ 439.562020][ T9010] loop1: detected capacity change from 0 to 2048 [ 439.678274][ T9010] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.800765][ T5681] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 440.000376][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 440.052337][ T5681] usb 4-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 440.111076][ T5681] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.168559][ T5681] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.223926][ T5681] usb 4-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 440.305752][ T5681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 440.350619][ T5681] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 440.385642][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.445160][ T5681] usb 4-1: config 0 descriptor?? [ 441.009577][ T5681] wacom 0003:056A:010E.000B: unbalanced collection at end of report description [ 441.081318][ T5681] wacom 0003:056A:010E.000B: parse failed [ 441.122541][ T5681] wacom 0003:056A:010E.000B: probe with driver wacom failed with error -22 [ 441.200340][ T5681] usb 4-1: USB disconnect, device number 12 [ 441.837986][ T9048] loop1: detected capacity change from 0 to 1024 [ 441.911647][ T806] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 442.124104][ T806] usb 1-1: Using ep0 maxpacket: 8 [ 442.171218][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 442.212301][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.247709][ T806] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.274588][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 442.296503][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1241'. [ 442.305148][ T806] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 442.377222][ T806] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 442.427120][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.511388][ T806] usb 1-1: config 0 descriptor?? [ 442.614636][ T5594] Bluetooth: hci5: urb ffff88805c0f86c0 submission failed (90) [ 442.788279][ T806] usb 1-1: USB disconnect, device number 7 [ 443.100942][ T5681] kernel read not supported for file /vcs (pid: 5681 comm: kworker/0:4) [ 443.528425][ T9069] loop2: detected capacity change from 0 to 16 [ 444.582396][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.589023][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.858361][ T9086] loop1: detected capacity change from 0 to 128 [ 445.379314][ T9093] loop4: detected capacity change from 0 to 1024 [ 445.429956][ T9093] EXT4-fs: Ignoring removed bh option [ 445.511569][ T9093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.973863][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.222338][ T9103] loop2: detected capacity change from 0 to 1024 [ 446.247702][ T9107] loop3: detected capacity change from 0 to 256 [ 446.269647][ T9103] EXT4-fs: Ignoring removed bh option [ 446.382609][ T9103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.411650][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 446.682351][ T9107] FAT-fs (loop3): Directory bread(block 64) failed [ 446.718852][ T9107] FAT-fs (loop3): Directory bread(block 65) failed [ 446.768546][ T9107] FAT-fs (loop3): Directory bread(block 66) failed [ 446.807500][ T9107] FAT-fs (loop3): Directory bread(block 67) failed [ 446.820974][ T9107] FAT-fs (loop3): Directory bread(block 68) failed [ 446.859683][ T9107] FAT-fs (loop3): Directory bread(block 69) failed [ 446.882974][ T9107] FAT-fs (loop3): Directory bread(block 70) failed [ 446.897827][ T9107] FAT-fs (loop3): Directory bread(block 71) failed [ 446.941220][ T9107] FAT-fs (loop3): Directory bread(block 72) failed [ 447.073728][ T9107] FAT-fs (loop3): Directory bread(block 73) failed [ 447.082475][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.273149][ T806] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 447.291909][ T9119] loop0: detected capacity change from 0 to 1024 [ 447.398630][ T9119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.460662][ T806] usb 2-1: Using ep0 maxpacket: 16 [ 447.523925][ T806] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.593515][ T806] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.635984][ T806] usb 2-1: config 0 interface 0 has no altsetting 0 [ 447.664592][ T806] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 447.715810][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.765143][ T806] usb 2-1: config 0 descriptor?? [ 447.846023][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.093265][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.135681][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.822437][ T9137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.849579][ T9137] bridge0: port 3(bond1) entered blocking state [ 448.868373][ T9137] bridge0: port 3(bond1) entered disabled state [ 448.893102][ T9137] bond1: entered allmulticast mode [ 448.949218][ T9137] bond1: entered promiscuous mode [ 448.986186][ T9137] bridge0: port 3(bond1) entered blocking state [ 448.993329][ T9137] bridge0: port 3(bond1) entered forwarding state [ 449.009252][ T806] usb 2-1: USB disconnect, device number 9 [ 449.098008][ T34] bridge0: port 3(bond1) entered disabled state [ 449.612074][ T5594] Bluetooth: hci3: connection err: -111 [ 450.032860][ T9157] loop0: detected capacity change from 0 to 4096 [ 450.111877][ T9162] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.343666][ T9150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.388726][ T9150] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 450.463268][ T9150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.516440][ T9150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 450.587655][ T9150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.621927][ T9150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 450.692311][ T9150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.745336][ T9150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 450.815542][ T9150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.859921][ T9150] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 451.190956][ T806] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 451.393196][ T806] usb 5-1: Using ep0 maxpacket: 32 [ 451.431313][ T806] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 451.474188][ T806] usb 5-1: config 0 has no interface number 0 [ 451.509599][ T806] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 451.542488][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.580420][ T806] usb 5-1: Product: syz [ 451.599504][ T806] usb 5-1: Manufacturer: syz [ 451.604752][ T5594] Bluetooth: hci1: command 0x0406 tx timeout [ 451.632653][ T806] usb 5-1: SerialNumber: syz [ 451.654931][ T806] usb 5-1: config 0 descriptor?? [ 451.688744][ T806] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 451.993591][ T806] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 452.149876][ T806] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 452.307186][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 452.440858][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 452.453825][ T806] usb 5-1: USB disconnect, device number 7 [ 452.485686][ T5594] Bluetooth: hci0: command 0x0406 tx timeout [ 452.511084][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 452.544438][ T806] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 452.628218][ T806] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 452.647529][ T5594] Bluetooth: hci2: command 0x0401 tx timeout [ 452.695873][ T806] quatech2 5-1:0.51: device disconnected [ 452.720748][ T5594] Bluetooth: hci3: command 0x2016 tx timeout [ 452.893317][ T5594] Bluetooth: hci4: command 0x0406 tx timeout [ 453.680773][ T5594] Bluetooth: hci1: command 0x0406 tx timeout [ 453.773975][ T9196] loop1: detected capacity change from 0 to 256 [ 453.788839][ T9190] loop4: detected capacity change from 0 to 2048 [ 453.849292][ T9196] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 453.951198][ T9200] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 453.965982][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 453.966054][ T29] audit: type=1326 audit(1781108632.078:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.014243][ T29] audit: type=1326 audit(1781108632.098:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.059327][ T29] audit: type=1800 audit(1781108632.118:149): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file1" dev="loop1" ino=1048683 res=0 errno=0 [ 454.085799][ T29] audit: type=1800 audit(1781108632.118:150): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file1" dev="loop1" ino=1048683 res=0 errno=0 [ 454.117245][ T9201] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 454.168991][ T29] audit: type=1326 audit(1781108632.148:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.194568][ T9201] FAT-fs (loop1): Filesystem has been set read-only [ 454.201844][ T9201] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 454.210344][ T29] audit: type=1326 audit(1781108632.148:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.280522][ T29] audit: type=1326 audit(1781108632.158:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.405345][ T29] audit: type=1326 audit(1781108632.158:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.560613][ T5594] Bluetooth: hci0: command 0x0406 tx timeout [ 454.600937][ T29] audit: type=1326 audit(1781108632.158:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.720559][ T5594] Bluetooth: hci2: command 0x0401 tx timeout [ 454.723951][ T29] audit: type=1326 audit(1781108632.158:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1298" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790419ce59 code=0x7ffc0000 [ 454.815891][ T5594] Bluetooth: hci3: command 0x2016 tx timeout [ 454.962410][ T4878] Bluetooth: hci4: command 0x0406 tx timeout [ 455.834088][ T9209] loop2: detected capacity change from 0 to 4096 [ 456.448081][ T9222] loop0: detected capacity change from 0 to 1024 [ 460.633107][ T9263] loop3: detected capacity change from 0 to 1024 [ 460.750051][ T9263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.850036][ T9264] loop2: detected capacity change from 0 to 4096 [ 460.859171][ T9272] EXT4-fs (loop3): shut down requested (1) [ 461.199344][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.847607][ T9284] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 461.847607][ T9284] program syz.2.1334 not setting count and/or reply_len properly [ 463.284347][ T9297] loop4: detected capacity change from 0 to 4096 [ 463.379970][ T9298] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.986533][ T9316] loop1: detected capacity change from 0 to 512 [ 465.026620][ T9317] program syz.0.1348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.093534][ T9316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.213613][ T9316] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1347: corrupted in-inode xattr: invalid ea_ino [ 465.263280][ T9316] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.270298][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 465.286431][ C0] EXT4-fs (loop1): initial error at time 1781108643: ext4_iget_extra_inode:5128: inode 15 [ 465.296864][ C0] EXT4-fs (loop1): last error at time 1781108643: ext4_iget_extra_inode:5128: inode 15 [ 465.311501][ T9316] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1347: couldn't read orphan inode 15 (err -117) [ 465.326032][ T9316] loop1: lost filesystem error report for type 5 error -117 [ 465.356080][ T9316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.506257][ T9324] loop3: detected capacity change from 0 to 512 [ 465.558122][ T9324] EXT4-fs (loop3): Test dummy encryption mode enabled [ 465.620361][ T9324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 465.678985][ T9324] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1350: bad orphan inode 131083 [ 465.711003][ T9324] loop3: lost filesystem error report for type 5 error -117 [ 465.720020][ T9324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.767898][ T5582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.928044][ T9329] blk_print_req_error: 24 callbacks suppressed [ 465.928126][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.961665][ T9329] buffer_io_error: 23 callbacks suppressed [ 465.961740][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.067552][ T9332] block nbd0: NBD_DISCONNECT [ 466.109662][ T9332] block nbd0: Send disconnect failed -32 [ 466.154321][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.191238][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.325542][ T1557] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.339085][ T1557] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.347560][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.352456][ T9324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.414826][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.423601][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.434438][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.453342][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.494536][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.519523][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.542416][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.580051][ T9335] bond0: entered promiscuous mode [ 466.594145][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.629524][ T9335] bond_slave_0: entered promiscuous mode [ 466.652520][ T9335] bond_slave_1: entered promiscuous mode [ 466.659310][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.691988][ T9329] ldm_validate_partition_table(): Disk read failed. [ 466.713502][ T9340] loop4: detected capacity change from 0 to 256 [ 466.730688][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.750931][ T9335] batadv_slave_1: entered promiscuous mode [ 466.772098][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.785616][ T9335] batadv_slave_1: left promiscuous mode [ 466.811059][ T9329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.835220][ T9335] bond0: left promiscuous mode [ 466.838096][ T9340] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 466.851823][ T9335] bond_slave_0: left promiscuous mode [ 466.886143][ T9329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.896185][ T9335] bond_slave_1: left promiscuous mode [ 466.927959][ T9329] Dev nbd0: unable to read RDB block 0 [ 466.951335][ T9329] nbd0: unable to read partition table [ 467.121387][ T806] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 467.377795][ T806] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 467.410499][ T806] usb 4-1: config 1 has no interface number 0 [ 467.441974][ T9344] loop2: detected capacity change from 0 to 764 [ 467.449802][ T806] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 467.516276][ T806] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 467.570759][ T806] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.599590][ T9344] Symlink component flag not implemented [ 467.634129][ T9344] Symlink component flag not implemented (116) [ 467.658561][ T806] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 467.693201][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.719520][ T806] usb 4-1: Product: syz [ 467.765369][ T806] usb 4-1: Manufacturer: syz [ 467.803201][ T806] usb 4-1: SerialNumber: syz [ 467.876626][ T9342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 468.209645][ T9342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 468.406254][ T9357] program syz.1.1365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.754951][ T806] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 468.818125][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification bd! [ 468.857485][ T9360] netlink: 'syz.4.1366': attribute type 10 has an invalid length. [ 468.912862][ T806] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 468.976546][ T806] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 469.026816][ T806] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 469.034550][ T806] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 469.179976][ T806] usb 4-1: USB disconnect, device number 13 [ 469.248661][ T806] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 469.292423][ T9365] loop1: detected capacity change from 0 to 128 [ 469.445102][ T806] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 470.458503][ T9377] loop4: detected capacity change from 0 to 512 [ 470.521132][ T9377] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 470.646108][ T9377] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1373: invalid indirect mapped block 4294967295 (level 0) [ 470.752666][ T9377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 470.753930][ T9377] EXT4-fs (loop4): Remounting filesystem read-only [ 470.770198][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 470.776872][ C1] EXT4-fs (loop4): initial error at time 1781108648: ext4_free_branches:1023: inode 16 [ 470.783794][ T9377] EXT4-fs (loop4): 1 orphan inode deleted [ 470.786901][ C1] EXT4-fs (loop4): last error at time 1781108648: ext4_free_branches:1023: inode 16 [ 470.794789][ T9377] EXT4-fs (loop4): 1 truncate cleaned up [ 470.926406][ T9377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.384451][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.741591][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 471.845366][ T9396] loop0: detected capacity change from 0 to 256 [ 471.855986][ T9394] netlink: 'syz.4.1379': attribute type 2 has an invalid length. [ 472.689557][ T9409] loop1: detected capacity change from 0 to 512 [ 472.752399][ T9409] EXT4-fs (loop1): 1 truncate cleaned up [ 472.857175][ T9409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.066487][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 473.066559][ T29] audit: type=1800 audit(1781108651.208:191): pid=9409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1386" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 473.378083][ T9415] loop3: detected capacity change from 0 to 4096 [ 473.511433][ T9415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.544607][ T5582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.044031][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.422537][ T9427] block nbd0: shutting down sockets [ 478.591647][ T5681] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 478.811252][ T5681] usb 3-1: Using ep0 maxpacket: 32 [ 478.835250][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.872231][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.911574][ T5681] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 478.939761][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.040989][ T5681] usb 3-1: config 0 descriptor?? [ 479.631403][ T5681] koneplus 0003:1E7D:2D51.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 479.965431][ T806] usb 3-1: USB disconnect, device number 10 [ 480.630416][ T5681] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 480.662476][ T9510] fido_id[9510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 480.849460][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.896921][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.927163][ T5681] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 480.958509][ T9518] loop4: detected capacity change from 0 to 512 [ 480.976294][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.055626][ T5681] usb 2-1: config 0 descriptor?? [ 481.138405][ T9518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.212537][ T9518] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.618146][ T5681] waltop 0003:172F:0501.000E: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 481.762576][ T5681] usb 2-1: USB disconnect, device number 10 [ 481.816085][ T5590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.945243][ T9531] loop3: detected capacity change from 0 to 1024 [ 481.982410][ T9531] EXT4-fs: Ignoring removed nobh option [ 482.063006][ T9531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.186566][ T9531] EXT4-fs (loop3): shut down requested (2) [ 482.476301][ T9538] fido_id[9538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 482.672011][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.516012][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 483.894007][ T9560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 484.548765][ T9572] loop0: detected capacity change from 0 to 128 [ 484.617419][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 485.223658][ T9581] loop4: detected capacity change from 0 to 256 [ 485.985698][ T9586] loop1: detected capacity change from 0 to 512 [ 486.106244][ T9586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 486.124872][ T9586] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.290581][ T5681] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 486.436944][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.494669][ T5681] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 486.546965][ T5681] usb 1-1: config 0 has no interface number 0 [ 486.576265][ T5681] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 486.628961][ T5681] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 486.691568][ T5681] usb 1-1: config 0 interface 49 has no altsetting 0 [ 486.733253][ T5681] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 486.745546][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.772415][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.821020][ T5681] usb 1-1: Product: syz [ 486.845232][ T5681] usb 1-1: Manufacturer: syz [ 486.865256][ T5681] usb 1-1: SerialNumber: syz [ 486.899675][ T5681] usb 1-1: config 0 descriptor?? [ 487.059346][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.167206][ T5681] hub 1-1:0.49: bad descriptor, ignoring hub [ 487.205772][ T5681] hub 1-1:0.49: probe with driver hub failed with error -5 [ 487.228656][ T9601] tap0: tun_chr_ioctl cmd 1074025677 [ 487.244239][ T5681] f81232 1-1:0.49: f81534a converter detected [ 487.276883][ T5681] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 487.308917][ T5681] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 487.326492][ T9601] tap0: linktype set to 804 [ 487.366891][ T5582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 487.450230][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.556480][ T5681] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 487.964669][ T12] bridge_slave_1: left allmulticast mode [ 487.980610][ T12] bridge_slave_1: left promiscuous mode [ 488.004091][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.041288][ T12] bridge_slave_0: left allmulticast mode [ 488.052997][ T12] bridge_slave_0: left promiscuous mode [ 488.073285][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.332718][ T35] usb 1-1: USB disconnect, device number 8 [ 488.344746][ T35] f81232 1-1:0.49: device disconnected [ 488.750570][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.826881][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.879877][ T12] bond0 (unregistering): Released all slaves [ 489.312277][ T9615] loop1: detected capacity change from 0 to 256 [ 489.808042][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 489.823017][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 489.834883][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 489.869508][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 489.888613][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.411975][ T12] hsr_slave_0: left promiscuous mode [ 490.463318][ T12] hsr_slave_1: left promiscuous mode [ 490.479698][ T9631] loop4: detected capacity change from 0 to 24 [ 490.499631][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.535589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.594447][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.639849][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.797265][ T12] veth1_macvtap: left promiscuous mode [ 490.822036][ T12] veth0_macvtap: left promiscuous mode [ 490.845759][ T12] veth1_vlan: left promiscuous mode [ 490.875594][ T12] veth0_vlan: left promiscuous mode [ 492.080897][ T4878] Bluetooth: hci3: command tx timeout [ 492.362721][ T9660] netlink: 'syz.2.1485': attribute type 5 has an invalid length. [ 493.088872][ T12] team0 (unregistering): Port device team_slave_1 removed [ 493.165703][ T12] team0 (unregistering): Port device team_slave_0 removed [ 493.857714][ T9677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.912729][ T9677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.920448][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1488'. [ 493.937564][ T9677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.960850][ T9677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.979649][ T5233] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.981133][ T9677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.995805][ T9677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 494.019682][ T9677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 495.153866][ T9682] loop1: detected capacity change from 0 to 32768 [ 495.165427][ T9682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1492 (9682) [ 495.191305][ T9682] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.201944][ T9682] BTRFS info (device loop1): using sha256 checksum algorithm [ 495.365467][ T9682] BTRFS info (device loop1): setting nodatasum [ 495.372754][ T9682] BTRFS info (device loop1): enabling ssd optimizations [ 495.379872][ T9682] BTRFS info (device loop1): turning on async discard [ 495.390618][ T9682] BTRFS info (device loop1): enabling free space tree [ 495.525592][ T5582] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.698010][ T9712] loop0: detected capacity change from 0 to 1024 [ 495.753855][ T9712] EXT4-fs: Ignoring removed orlov option [ 495.774174][ T9712] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 495.840965][ T4878] Bluetooth: hci1: command 0x0406 tx timeout [ 495.904901][ T9712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.923770][ T4878] Bluetooth: hci0: command 0x0406 tx timeout [ 496.000748][ T4878] Bluetooth: hci3: command 0x040f tx timeout [ 496.009420][ T4878] Bluetooth: hci4: command 0x0406 tx timeout [ 496.015877][ T5594] Bluetooth: hci2: command 0x0401 tx timeout [ 496.215324][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.056723][ T5233] 8021q: adding VLAN 0 to HW filter on device eth2 [ 498.080930][ T5594] Bluetooth: hci3: command 0x040f tx timeout [ 498.288119][ T9743] loop0: detected capacity change from 0 to 1024 [ 499.231128][ T806] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 499.351445][ T35] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 499.423399][ T806] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 499.469956][ T806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 499.517817][ T806] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 499.531803][ T35] usb 1-1: Using ep0 maxpacket: 16 [ 499.557216][ T35] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 499.596262][ T806] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 499.616843][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 499.632337][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.661507][ T806] usb 2-1: Product: syz [ 499.675927][ T806] usb 2-1: Manufacturer: syz [ 499.694496][ T806] usb 2-1: SerialNumber: syz [ 499.704190][ T35] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 499.726803][ T806] usb 2-1: config 0 descriptor?? [ 499.732581][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.741589][ T35] usb 1-1: Product: syz [ 499.747662][ T9756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.764182][ T35] usb 1-1: Manufacturer: syz [ 499.784810][ T35] usb 1-1: SerialNumber: syz [ 499.822037][ T35] usb 1-1: config 0 descriptor?? [ 499.925917][ T35] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 499.978868][ T35] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 500.008072][ T9756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 500.163549][ T5594] Bluetooth: hci3: command 0x040f tx timeout [ 500.353751][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.391648][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.443690][ T9624] bridge_slave_0: entered allmulticast mode [ 500.476941][ T9624] bridge_slave_0: entered promiscuous mode [ 500.532914][ T35] em28xx 1-1:0.0: chip ID is em2874 [ 500.542619][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.575986][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.608526][ T9624] bridge_slave_1: entered allmulticast mode [ 500.642405][ T9770] loop4: detected capacity change from 0 to 4096 [ 500.663243][ T9624] bridge_slave_1: entered promiscuous mode [ 500.699718][ T806] usb 2-1: USB disconnect, device number 11 [ 500.746940][ T5681] usb 1-1: USB disconnect, device number 9 [ 500.778620][ T9777] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.832311][ T5681] em28xx 1-1:0.0: Disconnecting em28xx [ 500.913675][ T5681] em28xx 1-1:0.0: Freeing device [ 501.213559][ T6688] udevd[6688]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.301229][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.443956][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.992880][ T9624] team0: Port device team_slave_0 added [ 502.102205][ T9624] team0: Port device team_slave_1 added [ 502.240581][ T5594] Bluetooth: hci3: command 0x040f tx timeout [ 502.395247][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.424159][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.537532][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.612223][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.651232][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.720559][ T29] audit: type=1326 audit(1781108680.858:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 502.787418][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.840321][ T29] audit: type=1326 audit(1781108680.908:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 502.867804][ T29] audit: type=1326 audit(1781108680.928:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 502.899195][ T29] audit: type=1326 audit(1781108680.928:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 502.985180][ T29] audit: type=1326 audit(1781108680.958:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 503.124502][ T29] audit: type=1326 audit(1781108680.958:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 503.241957][ T29] audit: type=1326 audit(1781108680.978:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 503.285390][ T5233] 8021q: adding VLAN 0 to HW filter on device eth3 [ 503.388104][ T29] audit: type=1326 audit(1781108680.978:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 503.542876][ T29] audit: type=1326 audit(1781108681.028:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 503.633571][ T9624] hsr_slave_0: entered promiscuous mode [ 503.711069][ T9624] hsr_slave_1: entered promiscuous mode [ 503.719407][ T9624] debugfs: 'hsr0' already exists in 'hsr' [ 503.728028][ T29] audit: type=1326 audit(1781108681.028:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1520" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359a99ce59 code=0x7ffc0000 [ 503.777638][ T9624] Cannot create hsr debugfs directory [ 504.322053][ T5594] Bluetooth: hci3: command 0x040f tx timeout [ 504.763758][ T9821] loop0: detected capacity change from 0 to 512 [ 504.853342][ T9821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.962404][ T9821] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.191106][ T9819] loop2: detected capacity change from 0 to 4096 [ 505.378791][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.490730][ T9819] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 505.875631][ T9833] loop0: detected capacity change from 0 to 128 [ 505.978530][ T9833] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 506.001005][ T9833] hpfs: filesystem error: improperly stopped [ 506.017155][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.026285][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.063779][ T9833] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 506.089971][ T9624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.128960][ T9833] hpfs: You really don't want any checks? You are crazy... [ 506.183227][ T9833] hpfs: hpfs_map_sector(): read error [ 506.233960][ T9624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.253078][ T9833] hpfs: code page support is disabled [ 506.272843][ T9833] hpfs: hpfs_map_4sectors(): unaligned read [ 506.285359][ T9624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.298543][ T9833] hpfs: hpfs_map_4sectors(): unaligned read [ 506.354304][ T9833] hpfs: filesystem error: unable to find root dir [ 506.418387][ T9624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.472664][ T9624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.592011][ T9624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.633203][ T9624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 506.759734][ T9624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.178468][ T9858] Invalid ELF header len 7 [ 508.215625][ T9858] Invalid ELF header len 7 [ 508.330940][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 508.395062][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.448866][ T9862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'. [ 508.652444][ T9624] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.793231][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.800933][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.940267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.947904][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.115126][ T5681] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 510.330618][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 510.436174][ T5681] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 510.487109][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.537308][ T5681] usb 2-1: Product: syz [ 510.557111][ T5233] 8021q: adding VLAN 0 to HW filter on device eth4 [ 510.580550][ T5681] usb 2-1: Manufacturer: syz [ 510.602790][ T5681] usb 2-1: SerialNumber: syz [ 510.677562][ T5681] usb 2-1: config 0 descriptor?? [ 510.786305][ T5681] gspca_main: se401-2.14.0 probing 047d:5003 [ 511.018218][ T9889] loop2: detected capacity change from 0 to 1024 [ 511.101315][ T9889] EXT4-fs: Ignoring removed mblk_io_submit option [ 511.168755][ T5681] gspca_se401: ExtraFeatures: 100 [ 511.203957][ T5681] gspca_se401: Too many frame sizes [ 511.224329][ T9889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 511.392120][ T5681] usb 2-1: USB disconnect, device number 12 [ 511.413566][ T9895] loop0: detected capacity change from 0 to 1024 [ 511.630535][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.437395][ T9919] loop0: detected capacity change from 0 to 512 [ 513.536101][ T9919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 513.596185][ T9919] EXT4-fs (loop0): 1 orphan inode deleted [ 513.623370][ T9919] EXT4-fs (loop0): 1 truncate cleaned up [ 513.632939][ T9919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.781423][ T9919] EXT4-fs (loop0): shut down requested (1) [ 514.177631][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.541258][ T1113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 514.548145][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.830612][ T806] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 515.038254][ T806] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.082718][ T806] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.127740][ T806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 515.169554][ T806] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 515.213968][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.264163][ T806] usb 1-1: config 0 descriptor?? [ 515.812035][ T806] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 515.844149][ T806] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 515.889615][ T806] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 515.971491][ T806] hid-steam 0003:28DE:1102.000F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 515.988852][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 516.089724][ T806] usb 1-1: USB disconnect, device number 10 [ 516.644332][ T9969] Falling back ldisc for ptm0. [ 516.905229][ T9966] fido_id[9966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 517.363187][ T9624] veth0_vlan: entered promiscuous mode [ 517.548110][ T9624] veth1_vlan: entered promiscuous mode [ 518.088719][ T9624] veth0_macvtap: entered promiscuous mode [ 518.141932][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 518.144191][ T9624] veth1_macvtap: entered promiscuous mode [ 518.367831][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.598494][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.713852][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.760462][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.839204][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.881937][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.441712][T10012] loop4: detected capacity change from 0 to 256 [ 519.485000][T10012] exfat: Deprecated parameter 'namecase' [ 519.619555][T10012] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 522.564703][T10065] loop1: detected capacity change from 0 to 64 [ 523.482607][T10075] bond2: Unable to set down delay as MII monitoring is disabled [ 523.495986][T10075] bond2 (unregistering): Released all slaves [ 525.038458][T10085] loop0: detected capacity change from 0 to 40427 [ 525.061849][T10085] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 525.069839][T10085] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 525.139149][T10085] F2FS-fs (loop0): invalid crc value [ 525.472346][T10085] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 525.513344][T10085] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 525.523761][T10085] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 525.805619][T10102] loop1: detected capacity change from 0 to 512 [ 525.873327][T10102] EXT4-fs: Ignoring removed i_version option [ 525.898555][T10102] EXT4-fs: Ignoring removed bh option [ 526.093412][T10102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.165275][T10102] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.609017][T10115] netem: change failed [ 526.863684][ T5582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.326965][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.409530][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.769286][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.818746][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.203650][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 528.273249][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 529.133842][T10131] loop2: detected capacity change from 0 to 4096 [ 530.855394][T10156] ipip0: entered promiscuous mode [ 530.903397][T10156] ipip0: entered allmulticast mode [ 530.994841][T10160] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1633'. [ 531.565265][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 531.614297][T10167] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1636'. [ 533.271871][T10196] dummy0: entered allmulticast mode [ 533.372658][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1647'. [ 533.516123][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 535.089386][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1657'. [ 536.139391][T10239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1662'. [ 536.205287][T10239] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1662'. [ 536.227462][T10243] loop0: detected capacity change from 0 to 64 [ 536.265165][T10239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1662'. [ 536.421070][T10241] loop2: detected capacity change from 0 to 2048 [ 536.576345][T10241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.455177][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.773398][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.044738][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.097688][T10261] loop0: detected capacity change from 0 to 128 [ 538.404354][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.046489][ T56] bridge_slave_1: left allmulticast mode [ 539.074845][ T56] bridge_slave_1: left promiscuous mode [ 539.094038][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.142641][ T56] bridge_slave_0: left allmulticast mode [ 539.158103][ T56] bridge_slave_0: left promiscuous mode [ 539.187208][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.879188][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.981142][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.070782][ T56] bond0 (unregistering): Released all slaves [ 540.099204][ T806] kernel write not supported for file /video36 (pid: 806 comm: kworker/1:2) [ 541.028791][ T4878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.043576][ T4878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.068852][ T4878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.102316][ T4878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.117089][ T4878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.317677][T10294] vlan2: entered promiscuous mode [ 541.360985][T10294] syz_tun: entered promiscuous mode [ 541.632157][ T11] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 541.705147][ T56] hsr_slave_0: left promiscuous mode [ 541.742655][ T56] hsr_slave_1: left promiscuous mode [ 541.782129][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.828367][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.846529][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 541.866184][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.872782][ T11] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 541.888524][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.936495][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 541.957082][ T56] batman_adv: batadv0: Interface deactivated: dummy0 [ 541.988645][ T11] usb 1-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 541.994253][ T56] batman_adv: batadv0: Removing interface: dummy0 [ 542.030334][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.076589][ T11] usb 1-1: config 0 descriptor?? [ 542.149917][ T56] veth1_macvtap: left promiscuous mode [ 542.168188][ T56] veth0_macvtap: left promiscuous mode [ 542.190923][ T56] veth1_vlan: left promiscuous mode [ 542.213470][ T56] veth0_vlan: left promiscuous mode [ 542.248978][T10311] loop1: detected capacity change from 0 to 1024 [ 542.392839][ T5681] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 542.618379][ T5681] usb 3-1: config 0 has no interfaces? [ 542.650911][ T5681] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.699818][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.738951][ T5681] usb 3-1: config 0 descriptor?? [ 542.844551][ T9759] usb 1-1: USB disconnect, device number 11 [ 543.031503][ T35] usb 3-1: USB disconnect, device number 11 [ 543.200854][ T5594] Bluetooth: hci2: command tx timeout [ 544.203837][ T56] team0 (unregistering): Port device team_slave_1 removed [ 544.307676][ T56] team0 (unregistering): Port device team_slave_0 removed [ 545.026794][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1686'. [ 545.280783][ T5594] Bluetooth: hci2: command tx timeout [ 545.570965][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 545.879803][T10345] loop2: detected capacity change from 0 to 1024 [ 545.963210][ T35] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 546.203704][ T35] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 546.255352][ T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.313060][ T35] usb 2-1: config 0 descriptor?? [ 546.361052][ T35] cp210x 2-1:0.0: cp210x converter detected [ 546.613776][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1700'. [ 546.863438][ T35] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 546.968277][ T35] usb 2-1: cp210x converter now attached to ttyUSB0 [ 547.135260][ T35] usb 2-1: USB disconnect, device number 13 [ 547.197609][ T35] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 547.288704][ T35] cp210x 2-1:0.0: device disconnected [ 547.360699][ T5594] Bluetooth: hci2: command tx timeout [ 549.308055][T10397] loop5: detected capacity change from 0 to 1024 [ 549.440922][ T5594] Bluetooth: hci2: command tx timeout [ 550.671261][ T5233] 8021q: adding VLAN 0 to HW filter on device eth5 [ 550.711338][T10418] loop5: detected capacity change from 0 to 512 [ 550.929122][T10418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 551.026419][T10418] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.052278][T10413] loop2: detected capacity change from 0 to 8192 [ 551.373281][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.410070][T10429] loop1: detected capacity change from 0 to 64 [ 551.417003][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.465650][T10293] bridge_slave_0: entered allmulticast mode [ 551.515456][T10293] bridge_slave_0: entered promiscuous mode [ 551.598920][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.662683][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.701572][T10293] bridge_slave_1: entered allmulticast mode [ 551.767753][T10293] bridge_slave_1: entered promiscuous mode [ 552.236004][ T9624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 552.277568][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.377479][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.853880][T10293] team0: Port device team_slave_0 added [ 552.893367][T10293] team0: Port device team_slave_1 added [ 553.379654][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.428755][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.547031][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.638821][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.692199][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.842081][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.019531][T10461] loop0: detected capacity change from 0 to 512 [ 554.264210][T10461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 554.301662][T10461] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.564615][T10293] hsr_slave_0: entered promiscuous mode [ 554.651789][T10293] hsr_slave_1: entered promiscuous mode [ 554.798641][T10470] usb usb9: usbfs: process 10470 (syz.5.1735) did not claim interface 37 before use [ 555.526138][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 555.651251][ T5681] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 555.849476][ T5681] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 555.897320][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 555.933891][ T5681] usb 3-1: Product: syz [ 555.944564][T10483] loop0: detected capacity change from 0 to 64 [ 555.953615][ T5681] usb 3-1: SerialNumber: syz [ 555.996161][ T5681] usb 3-1: config 0 descriptor?? [ 556.283290][ T5681] hso 3-1:0.0: Failed to find BULK eps [ 556.442045][ T5233] 8021q: adding VLAN 0 to HW filter on device eth6 [ 556.479752][ T5681] usb 3-1: USB disconnect, device number 12 [ 556.935131][T10489] loop0: detected capacity change from 0 to 1024 [ 556.937481][T10293] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 556.946352][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1744'. [ 556.986347][T10489] EXT4-fs: Ignoring removed bh option [ 557.026900][T10293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.095629][T10489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.179022][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 557.179096][ T29] audit: type=1800 audit(1781108735.318:211): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1743" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 557.225439][T10491] ip6gre1: entered promiscuous mode [ 557.264457][T10491] ip6gre1: entered allmulticast mode [ 557.325452][T10293] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 557.426476][T10293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.496031][T10293] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 557.534637][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.618611][T10293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.697844][T10293] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 557.792945][T10500] loop2: detected capacity change from 0 to 256 [ 557.813861][T10293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.859974][T10500] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 557.958566][T10503] loop1: detected capacity change from 0 to 128 [ 558.033316][T10503] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 558.077775][T10503] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 558.586960][ T5582] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 558.955584][T10293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.095319][T10516] loop0: detected capacity change from 0 to 2048 [ 559.235499][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.265174][T10516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.432656][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.440321][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.668890][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.676504][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.773373][T10526] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1755'. [ 559.984432][T10529] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 562.136783][T10558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.168114][T10558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.216621][T10558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 562.284112][T10558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 562.336510][T10558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 562.379324][T10558] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 562.448058][T10558] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 562.466963][ T5233] 8021q: adding VLAN 0 to HW filter on device eth7 [ 562.847803][ T9759] kernel write not supported for file /amidi2 (pid: 9759 comm: kworker/1:0) [ 564.081699][ T5594] Bluetooth: hci1: command 0x0406 tx timeout [ 564.244211][ T5594] Bluetooth: hci4: command 0x0406 tx timeout [ 564.245013][ T4878] Bluetooth: hci0: command 0x0406 tx timeout [ 564.321360][ T4878] Bluetooth: hci3: command 0x040f tx timeout [ 564.401975][ T4878] Bluetooth: hci2: command 0x0c1a tx timeout [ 564.895496][T10600] loop1: detected capacity change from 0 to 8 [ 565.312252][T10293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.644072][T10609] loop0: detected capacity change from 0 to 8 [ 566.483044][ T4878] Bluetooth: hci2: command 0x0c1a tx timeout [ 567.147756][T10630] loop5: detected capacity change from 0 to 256 [ 567.166523][T10622] loop1: detected capacity change from 0 to 4096 [ 567.205743][T10630] exfat: Deprecated parameter 'utf8' [ 567.244749][T10630] exfat: Deprecated parameter 'namecase' [ 567.251821][T10622] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 567.291743][T10630] exfat: Deprecated parameter 'namecase' [ 567.320876][T10630] exfat: Deprecated parameter 'utf8' [ 567.326935][T10632] netem: change failed [ 567.449050][T10630] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 567.462967][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.469554][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.547694][T10630] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 567.627383][T10622] ntfs3(loop1): ino=1a, mi_enum_attr [ 567.674925][T10622] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 567.717087][ T29] audit: type=1800 audit(1781108745.848:212): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1787" name="file1" dev="loop5" ino=1048740 res=0 errno=0 [ 567.952941][T10622] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 568.018196][T10637] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 568.226464][ T5233] 8021q: adding VLAN 0 to HW filter on device eth8 [ 568.560709][ T4878] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.693543][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1791'. [ 568.896549][T10293] veth0_vlan: entered promiscuous mode [ 569.076270][T10293] veth1_vlan: entered promiscuous mode [ 569.109142][T10652] overlayfs: failed to clone lowerpath [ 569.642124][T10293] veth0_macvtap: entered promiscuous mode [ 569.757269][T10293] veth1_macvtap: entered promiscuous mode [ 570.108347][T10293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.355116][T10293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.597661][ T14] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.664325][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.699250][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.777630][ T14] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.133196][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'. [ 571.405999][T10671] loop0: detected capacity change from 0 to 32768 [ 571.429029][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 571.455586][T10671] (syz.0.1801,10671,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 571.476669][T10671] (syz.0.1801,10671,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 571.517549][T10671] (syz.0.1801,10671,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 571.539127][T10676] loop5: detected capacity change from 0 to 1024 [ 571.589923][T10671] JBD2: Ignoring recovery information on journal [ 571.731954][T10671] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 571.890623][T10671] (syz.0.1801,10671,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 571.904772][T10671] (syz.0.1801,10671,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 571.922024][T10671] (syz.0.1801,10671,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 571.932805][T10671] (syz.0.1801,10671,1):ocfs2_quota_read:201 ERROR: status = -5 [ 571.940717][T10671] Quota error (device loop0): find_next_id: Can't read quota tree block 5 [ 571.949678][T10671] (syz.0.1801,10671,1):ocfs2_get_next_id:935 ERROR: status = -5 [ 572.165290][ T5583] ocfs2: Unmounting device (7,0) on (node local) [ 572.558926][ T6252] udevd[6252]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 572.682425][ T6252] udevd[6252]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 574.443234][T10717] bpf: Bad value for 'uid' [ 575.831463][ T806] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 576.074981][ T806] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 576.112441][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.159908][ T806] usb 1-1: Product: syz [ 576.182523][ T806] usb 1-1: Manufacturer: syz [ 576.213124][ T806] usb 1-1: SerialNumber: syz [ 576.264821][ T806] usb 1-1: config 0 descriptor?? [ 576.319436][ T806] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 012 [ 576.425040][T10743] loop2: detected capacity change from 0 to 512 [ 576.545880][T10743] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1824'. [ 576.597323][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.784895][ T806] (null): failure reading functionality [ 576.827406][T10746] loop5: detected capacity change from 0 to 2048 [ 576.879329][ T806] i2c i2c-1: connected i2c-tiny-usb device [ 576.924507][T10746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.039218][ T806] usb 1-1: USB disconnect, device number 12 [ 577.959537][T10759] loop2: detected capacity change from 0 to 128 [ 578.124814][ T29] audit: type=1800 audit(1781108756.268:213): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1830" name="file1" dev="loop2" ino=1048741 res=0 errno=0 [ 579.149342][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.192393][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.597836][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.622353][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.161498][T10789] netlink: 'syz.0.1841': attribute type 29 has an invalid length. [ 580.222790][T10789] netlink: 'syz.0.1841': attribute type 29 has an invalid length. [ 580.268696][T10789] netlink: 'syz.0.1841': attribute type 29 has an invalid length. [ 580.745220][T10795] loop6: detected capacity change from 0 to 2048 [ 580.823841][T10795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.639796][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 582.857988][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 582.925998][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 583.009566][ T11] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 583.038696][ T11] usb 7-1: can't read configurations, error -71 [ 584.050293][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1862'. [ 584.094604][T10851] netem: incorrect gi model size [ 584.127027][T10851] netem: change failed [ 585.718031][T10877] loop5: detected capacity change from 0 to 512 [ 585.740496][ T11] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 585.817103][T10877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec19c, mo2=0002] [ 585.843597][T10877] System zones: 1-12 [ 585.885145][T10868] IPVS: persistence engine module ip_vs_pe_• not found [ 585.923818][T10877] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1873: corrupted in-inode xattr: e_value size too large [ 585.981130][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 585.989248][T10877] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 585.990219][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 586.006502][ C1] EXT4-fs (loop5): initial error at time 1781108764: ext4_iget_extra_inode:5128: inode 15 [ 586.016742][ C1] EXT4-fs (loop5): last error at time 1781108764: ext4_iget_extra_inode:5128: inode 15 [ 586.037694][T10877] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1873: couldn't read orphan inode 15 (err -117) [ 586.065938][T10877] loop5: lost filesystem error report for type 5 error -117 [ 586.078397][T10877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.100863][ T11] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 586.155984][ T11] usb 3-1: config 0 has no interface number 0 [ 586.195575][ T11] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 586.257943][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.287368][ T11] usb 3-1: Product: syz [ 586.297106][ T11] usb 3-1: Manufacturer: syz [ 586.314165][ T11] usb 3-1: SerialNumber: syz [ 586.380045][ T11] usb 3-1: config 0 descriptor?? [ 586.441629][ T11] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 586.709782][ T11] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 586.796044][ T9624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.853755][ T11] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 587.109003][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 587.110666][ T806] usb 3-1: USB disconnect, device number 13 [ 587.258925][ T806] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 587.358892][ T806] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 587.437084][ T806] quatech2 3-1:0.51: device disconnected [ 587.562064][T10895] cgroup: fork rejected by pids controller in /syz1 [ 588.197805][ T806] IPVS: starting estimator thread 0... [ 588.254360][T10904] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 588.325512][T10907] IPVS: using max 240 ests per chain, 12000 per kthread [ 588.549660][ T29] audit: type=1326 audit(1781108766.688:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 588.699871][ T29] audit: type=1326 audit(1781108766.688:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 588.866685][ T29] audit: type=1326 audit(1781108766.748:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 589.028384][ T29] audit: type=1326 audit(1781108766.748:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 589.193042][ T29] audit: type=1326 audit(1781108766.768:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 589.213712][T10922] loop6: detected capacity change from 0 to 128 [ 589.321657][ T29] audit: type=1326 audit(1781108766.768:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 589.361584][T10923] loop5: detected capacity change from 0 to 512 [ 589.468513][ T29] audit: type=1326 audit(1781108766.778:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 589.542539][T10923] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1887: inode has both inline data and extents flags [ 589.645686][T10923] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.649480][T10923] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1887: couldn't read orphan inode 15 (err -117) [ 589.659154][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 589.659243][ C1] EXT4-fs (loop5): initial error at time 1781108767: ext4_orphan_get:1397: inode 15 [ 589.659390][ C1] EXT4-fs (loop5): last error at time 1781108767: ext4_orphan_get:1397: inode 15 [ 589.739884][ T29] audit: type=1326 audit(1781108766.788:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 589.781242][T10923] loop5: lost filesystem error report for type 5 error -117 [ 589.786760][T10923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.888316][ T29] audit: type=1326 audit(1781108766.778:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 590.023890][ T29] audit: type=1326 audit(1781108766.848:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.2.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865579ce59 code=0x7ffc0000 [ 590.457924][ T9624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.603019][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.910747][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.034254][T10938] loop5: detected capacity change from 0 to 64 [ 591.093824][T10938] minix: block size(59136) > page size(4096) not supported by filesystem [ 591.169448][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.382208][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.832990][ T34] bridge_slave_1: left allmulticast mode [ 591.855737][ T34] bridge_slave_1: left promiscuous mode [ 591.885829][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.927036][ T34] bridge_slave_0: left allmulticast mode [ 591.933150][ T34] bridge_slave_0: left promiscuous mode [ 591.960260][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.516416][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.585803][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.645471][ T34] bond0 (unregistering): Released all slaves [ 592.941719][ T4900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 593.140848][ T4900] usb 7-1: Using ep0 maxpacket: 16 [ 593.183307][ T4900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 593.253427][ T4900] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 593.304693][ T4900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.347949][ T4900] usb 7-1: Product: syz [ 593.381744][ T4900] usb 7-1: Manufacturer: syz [ 593.405221][ T4900] usb 7-1: SerialNumber: syz [ 593.424723][ T4900] usb 7-1: config 0 descriptor?? [ 593.475314][ T4900] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 593.537092][ T4900] usb 7-1: Detected FT232R [ 593.727115][ T4900] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 593.919714][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 593.931374][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 593.951832][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 593.986536][ T4900] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 594.015410][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.031704][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.128709][ T34] hsr_slave_0: left promiscuous mode [ 594.182017][ T35] usb 7-1: USB disconnect, device number 4 [ 594.190586][ T34] hsr_slave_1: left promiscuous mode [ 594.237784][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.277750][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.292695][ T35] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 594.357889][ T35] ftdi_sio 7-1:0.0: device disconnected [ 594.366268][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.403119][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.579250][ T34] veth1_macvtap: left promiscuous mode [ 594.632196][ T34] veth0_macvtap: left promiscuous mode [ 594.649209][ T34] veth1_vlan: left promiscuous mode [ 594.669344][ T34] veth0_vlan: left promiscuous mode [ 595.436341][T10986] loop5: detected capacity change from 0 to 128 [ 595.605923][T10986] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 595.632757][T10988] loop2: detected capacity change from 0 to 256 [ 595.678099][T10988] exfat: Bad value for 'uid' [ 595.685764][T10988] exfat: Bad value for 'uid' [ 595.706694][T10986] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.162061][ T5594] Bluetooth: hci1: command tx timeout [ 596.224695][ T9624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.696891][T10997] loop2: detected capacity change from 0 to 2048 [ 596.784134][T10997] NILFS (loop2): invalid segment: Magic number mismatch [ 596.824934][T10997] NILFS (loop2): trying rollback from an earlier position [ 596.914883][T10997] NILFS (loop2): recovery complete [ 596.922311][ T34] team0 (unregistering): Port device team_slave_1 removed [ 596.943376][T11001] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.024550][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 597.024624][ T29] audit: type=1800 audit(1781108775.168:287): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1909" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 597.053147][T10997] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 597.134226][ T34] team0 (unregistering): Port device team_slave_0 removed [ 597.221977][T11003] vcan0: tx address claim with dlc 0 [ 598.241987][ T5594] Bluetooth: hci1: command tx timeout [ 598.692735][T11020] loop0: detected capacity change from 0 to 512 [ 598.750011][T11020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 598.842366][T11020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 598.848933][ T34] IPVS: stop unused estimator thread 0... [ 598.881554][T11020] System zones: 1-12 [ 598.973224][T11020] EXT4-fs (loop0): 1 truncate cleaned up [ 599.042760][T11020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.529330][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.233454][ T35] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 600.321311][ T5594] Bluetooth: hci1: command tx timeout [ 600.433552][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 600.465459][T11047] loop6: detected capacity change from 0 to 1024 [ 600.486841][ T35] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 600.531728][ T35] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.604365][ T35] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.663454][T11047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.697620][ T35] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.771551][ T35] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.803556][T11047] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #11: comm syz.6.1924: directory missing '..' [ 600.847562][ T35] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.884788][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.192266][T10293] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.362838][T11061] loop5: detected capacity change from 0 to 524287936 [ 601.407453][ T5686] usb 1-1: USB disconnect, device number 13 [ 601.614789][T11065] loop2: detected capacity change from 0 to 256 [ 601.627869][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1928'. [ 601.645028][T11065] exfat: Deprecated parameter 'utf8' [ 601.652746][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1928'. [ 601.701733][T11065] exfat: Deprecated parameter 'utf8' [ 601.716247][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1928'. [ 601.828012][T11065] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 602.401457][ T5594] Bluetooth: hci1: command tx timeout [ 602.659986][T11075] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1931'. [ 603.419212][T11077] loop0: detected capacity change from 0 to 4096 [ 603.609917][T11088] program syz.5.1936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.044387][T11108] loop0: detected capacity change from 0 to 8 [ 605.170942][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.655864][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.681789][T10961] bridge_slave_0: entered allmulticast mode [ 605.691260][T10961] bridge_slave_0: entered promiscuous mode [ 605.774535][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.877894][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.917841][T10961] bridge_slave_1: entered allmulticast mode [ 605.967451][T10961] bridge_slave_1: entered promiscuous mode [ 606.095065][T11121] loop5: detected capacity change from 0 to 128 [ 606.418213][T10961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.528168][T10961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.929626][T10961] team0: Port device team_slave_0 added [ 607.003786][T10961] team0: Port device team_slave_1 added [ 607.383104][T10961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.412025][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.549932][T10961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.599473][T10961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.621535][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.638944][ T1113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 607.713732][T10961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.448700][T10961] hsr_slave_0: entered promiscuous mode [ 608.510994][T10961] hsr_slave_1: entered promiscuous mode [ 608.555347][T10961] debugfs: 'hsr0' already exists in 'hsr' [ 608.581923][T10961] Cannot create hsr debugfs directory [ 608.593538][T11158] loop9: detected capacity change from 0 to 7 [ 608.619257][ C0] blk_print_req_error: 6 callbacks suppressed [ 608.619330][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.635321][ C0] buffer_io_error: 6 callbacks suppressed [ 608.635398][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.653787][T11149] loop2: detected capacity change from 0 to 4096 [ 608.676648][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.686227][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.706760][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.716320][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.727962][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.737590][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.751753][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.761368][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.774160][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.783714][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.798698][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.808359][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.828256][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.837971][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.853376][T11158] ldm_validate_partition_table(): Disk read failed. [ 608.876694][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.886340][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.898278][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.907860][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 608.918705][T11162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1959'. [ 608.944604][T11158] Dev loop9: unable to read RDB block 0 [ 608.979911][T11158] loop9: unable to read partition table [ 608.995567][T11158] loop9: partition table beyond EOD, truncated [ 609.019772][T11158] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 609.663058][ T5233] 8021q: adding VLAN 0 to HW filter on device eth9 [ 609.752989][T11166] loop0: detected capacity change from 0 to 128 [ 610.260079][T11175] C: renamed from batadv_slave_0 (while UP) [ 610.429321][T11175] netlink: 'syz.2.1964': attribute type 8 has an invalid length. [ 610.491167][T11175] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 612.111463][T10961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 612.255923][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.308808][T10961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 612.414310][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.464753][T10961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.578502][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.621201][T10961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.693615][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.978055][T11210] loop6: detected capacity change from 0 to 128 [ 613.016405][T11208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'. [ 613.262615][T11204] loop2: detected capacity change from 0 to 4096 [ 613.332579][T11204] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 614.365605][T10961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.703101][ T35] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 614.715527][T10961] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.860849][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.868448][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.933118][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.989149][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.029066][ T35] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 615.088648][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.115235][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.123262][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.152468][ T35] usb 1-1: config 0 descriptor?? [ 615.555034][T11238] loop5: detected capacity change from 0 to 128 [ 615.640548][ T35] hid-thrustmaster 0003:044F:B65D.0011: nested delimiters [ 615.679998][ T35] hid-thrustmaster 0003:044F:B65D.0011: item 0 2 2 10 parsing failed [ 615.747809][ T35] hid-thrustmaster 0003:044F:B65D.0011: parse failed with error -22 [ 615.812641][ T35] hid-thrustmaster 0003:044F:B65D.0011: probe with driver hid-thrustmaster failed with error -22 [ 615.906321][ T35] usb 1-1: USB disconnect, device number 14 [ 616.031032][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1988'. [ 616.991256][T11250] erspan0: entered promiscuous mode [ 617.466754][T11258] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1993'. [ 617.479127][T11258] ip6gretap0: entered promiscuous mode [ 617.504965][T11258] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1993'. [ 618.184858][T11267] loop2: detected capacity change from 0 to 1024 [ 618.347868][T11267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.356638][T11269] loop5: detected capacity change from 0 to 1024 [ 618.443989][T11267] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.636454][T11267] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1996: bg 0: block 112: padding at end of block bitmap is not set [ 618.705204][T11267] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4099 with max blocks 1 with error 28 [ 618.798606][T11267] EXT4-fs (loop2): This should not happen!! Data will be lost [ 618.798606][T11267] [ 618.832127][T11267] EXT4-fs (loop2): Total free blocks count 0 [ 618.926916][T11267] EXT4-fs (loop2): Free/Dirty block details [ 618.961068][T11267] EXT4-fs (loop2): free_blocks=0 [ 619.016573][T11267] EXT4-fs (loop2): dirty_blocks=16 [ 619.054463][T11267] EXT4-fs (loop2): Block reservation details [ 619.108377][T11267] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 619.515546][ T5592] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 619.555428][T11289] loop5: detected capacity change from 0 to 2048 [ 619.599349][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 619.659713][T11289] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 619.713661][T11289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.739382][T11307] loop5: detected capacity change from 0 to 512 [ 620.840597][T11307] EXT4-fs (loop5): Test dummy encryption mode enabled [ 620.898896][T10961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.912431][T11307] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 620.919886][T11310] fuse: Bad value for 'fd' [ 620.994507][T11307] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 621.064879][T11307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.144450][T11307] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 621.574911][ T9624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.686988][T11318] loop2: detected capacity change from 0 to 64 [ 622.179895][T10961] veth0_vlan: entered promiscuous mode [ 622.219224][T11323] tun0: tun_chr_ioctl cmd 1074025677 [ 622.231606][T11325] loop5: detected capacity change from 0 to 2048 [ 622.303684][T11323] tun0: linktype set to 8 [ 622.384272][T11325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.769210][T10961] veth1_vlan: entered promiscuous mode [ 623.407866][T10961] veth0_macvtap: entered promiscuous mode [ 623.556805][T10961] veth1_macvtap: entered promiscuous mode [ 623.661902][T11336] loop0: detected capacity change from 0 to 2048 [ 623.789124][T11336] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 623.827513][T11336] UDF-fs: Scanning with blocksize 512 failed [ 623.947420][T10961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.001940][T11336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.156906][T10961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.380053][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.389400][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.432593][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.480356][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.711967][T11366] loop2: detected capacity change from 0 to 256 [ 627.625525][T11384] loop5: detected capacity change from 0 to 4096 [ 627.776204][T11394] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 628.555311][T11404] loop2: detected capacity change from 0 to 64 [ 628.915582][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.922617][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.801237][ T806] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 629.990825][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 629.991014][ T5686] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 630.025006][ T806] usb 3-1: config 0 has no interfaces? [ 630.054798][ T806] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 630.079981][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.097688][ T806] usb 3-1: Product: syz [ 630.115313][ T806] usb 3-1: Manufacturer: syz [ 630.130787][ T806] usb 3-1: SerialNumber: syz [ 630.165645][ T806] usb 3-1: config 0 descriptor?? [ 630.209642][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.268423][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.300903][ T5686] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 630.318987][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.380482][ T5686] usb 1-1: config 0 descriptor?? [ 630.434102][ T806] usb 3-1: USB disconnect, device number 14 [ 630.891725][ T5686] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 630.925297][ T5686] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 630.958532][ T5686] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 631.003014][ T5686] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 631.022221][ T5686] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 631.050710][ T5686] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 631.072268][ T5686] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 631.125280][ T5686] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 631.223177][ T5686] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00 [ 631.391143][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.444497][ T5686] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 631.471411][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.575089][ T5686] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 631.729293][ T5686] usb 1-1: USB disconnect, device number 15 [ 631.777838][T11438] loop2: detected capacity change from 0 to 64 [ 631.833973][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.851113][ T4900] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 631.874522][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.949622][T11432] fido_id[11432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 632.085295][ T4900] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 632.151335][ T4900] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 632.206775][ T4900] usb 6-1: config 150 has no interface number 0 [ 632.230033][ T4900] usb 6-1: config 150 interface 204 has no altsetting 0 [ 632.287692][ T4900] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 632.339110][ T4900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.374787][ T4900] usb 6-1: Product: syz [ 632.405306][ T4900] usb 6-1: Manufacturer: syz [ 632.422792][ T4900] usb 6-1: SerialNumber: syz [ 632.472393][T11440] netlink: 'syz.2.2047': attribute type 12 has an invalid length. [ 632.533138][T11440] netlink: 'syz.2.2047': attribute type 29 has an invalid length. [ 632.558850][T11440] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2047'. [ 632.594947][T11440] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 632.639972][T11440] netlink: 'syz.2.2047': attribute type 2 has an invalid length. [ 632.688011][T11440] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2047'. [ 632.738183][ T4900] xr_serial 6-1:150.204: skipping garbage [ 632.756535][ T4900] xr_serial 6-1:150.204: xr_serial converter detected [ 633.070919][T11431] loop6: detected capacity change from 0 to 4096 [ 633.186690][T11431] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 633.328401][ T4900] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 633.344320][ T4900] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 633.469744][ T4900] usb 6-1: USB disconnect, device number 2 [ 633.523771][ T4900] xr_serial 6-1:150.204: device disconnected [ 633.659933][ T5842] udevd[5842]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory [ 634.070192][T11431] ntfs3(loop6): Failed to read $UpCase (-4). [ 634.704080][T11464] loop2: detected capacity change from 0 to 512 [ 634.711296][T11466] program syz.1.2057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.839515][T11464] EXT4-fs (loop2): 1 orphan inode deleted [ 634.871962][ T14] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 634.899923][T11464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.940527][T11464] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.974377][ T14] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 635.089267][T11464] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 635.128814][T11472] EXT4-fs error (device loop2): ext4_get_parent:1836: inode #14: comm syz.2.2055: iget: bogus i_mode (0) [ 635.628359][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.646038][ T806] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 635.860785][ T806] usb 1-1: Using ep0 maxpacket: 32 [ 635.878400][ T806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 635.936853][ T806] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 635.976578][ T806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 636.018064][ T806] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 636.028955][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.049161][ T806] usb 1-1: Product: syz [ 636.087824][ T806] usb 1-1: Manufacturer: syz [ 636.115941][ T806] usb 1-1: SerialNumber: syz [ 636.162386][ T806] usb 1-1: config 0 descriptor?? [ 636.643429][ T806] gs_usb 1-1:0.0: Configuring for 112 interfaces [ 637.053575][ T806] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 637.112146][ T806] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 637.172724][ T806] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 637.253604][ T806] usb 1-1: USB disconnect, device number 16 [ 637.588035][T11499] loop2: detected capacity change from 0 to 16 [ 638.297142][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 638.314882][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'. [ 638.424539][T11511] loop6: detected capacity change from 0 to 128 [ 638.754642][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 638.967049][T11513] loop5: detected capacity change from 0 to 2048 [ 639.077099][T11513] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 639.168723][T11513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 640.581859][T11531] loop2: detected capacity change from 0 to 4096 [ 640.682015][T11531] ntfs3(loop2): ino=3, mi_enum_attr [ 641.097863][T11531] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 641.480822][T11545] loop1: detected capacity change from 0 to 512 [ 641.574776][T11545] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 641.605598][T11545] EXT4-fs (loop1): orphan cleanup on readonly fs [ 641.692681][T11545] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 641.761510][T11545] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 641.802776][T11545] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2089: bg 0: block 40: padding at end of block bitmap is not set [ 641.876330][T11545] loop1: lost filesystem error report for type 5 error -117 [ 641.879426][T11545] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 641.887236][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 641.887330][ C1] EXT4-fs (loop1): initial error at time 1781108820: ext4_validate_block_bitmap:441 [ 641.887452][ C1] EXT4-fs (loop1): last error at time 1781108820: ext4_validate_block_bitmap:441 [ 642.081147][T11545] loop1: lost filesystem error report for type 5 error -117 [ 642.083611][T11545] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.2089: data will be lost [ 642.163914][T11545] EXT4-fs (loop1): 1 truncate cleaned up [ 642.193310][T11545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 642.316011][T11545] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.2089: bad symlink. [ 642.769331][T10961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.305050][T11560] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 644.191153][T11567] loop2: detected capacity change from 0 to 4096 [ 644.355489][T11571] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 644.466490][ T29] audit: type=1800 audit(1781108822.608:288): pid=11567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2097" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 644.676085][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'. [ 645.330379][T11583] loop1: detected capacity change from 0 to 16 [ 645.358281][T11583] erofs (device loop1): mounted with root inode @ nid 36. [ 645.380313][T11585] loop5: detected capacity change from 0 to 16 [ 645.433445][T11585] erofs (device loop5): mounted with root inode @ nid 36. [ 645.470599][ T4900] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 645.646500][ T4900] usb 1-1: Using ep0 maxpacket: 32 [ 645.688541][ T4900] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 645.715134][ T4900] usb 1-1: config 0 has no interface number 0 [ 645.742004][ T4900] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.800450][ T4900] usb 1-1: config 0 interface 85 has no altsetting 0 [ 645.845656][ T4900] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 645.872135][ T4900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.900523][ T4900] usb 1-1: Product: syz [ 645.928491][ T4900] usb 1-1: Manufacturer: syz [ 645.944588][ T4900] usb 1-1: SerialNumber: syz [ 645.978483][ T4900] usb 1-1: config 0 descriptor?? [ 646.568565][T11595] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.578294][T11595] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.626691][ T4900] appletouch 1-1:0.85: Geyser mode initialized. [ 646.684203][ T4900] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input17 [ 646.931082][ T4900] usb 1-1: USB disconnect, device number 17 [ 647.117223][ T4900] appletouch 1-1:0.85: input: appletouch disconnected [ 647.651939][T11608] loop2: detected capacity change from 0 to 512 [ 647.728372][T11608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 647.847931][T11608] EXT4-fs (loop2): 1 truncate cleaned up [ 647.908410][T11608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.244085][T11614] macvlan2: entered promiscuous mode [ 648.256289][T11616] loop0: detected capacity change from 0 to 512 [ 648.283862][T11614] bridge0: entered promiscuous mode [ 648.305629][T11616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 648.411560][T11616] EXT4-fs (loop0): 1 truncate cleaned up [ 648.434041][T11616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.596177][T11616] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.2120: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 648.687327][T11616] EXT4-fs (loop0): Remounting filesystem read-only [ 648.712793][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.130024][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.166254][T11625] input: syz0 as /devices/virtual/input/input18 [ 649.729647][T11633] loop5: detected capacity change from 0 to 512 [ 649.770472][T11633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 649.880969][T11633] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.2127: invalid block [ 649.997283][T11633] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 650.000364][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 650.016866][ C1] EXT4-fs (loop5): initial error at time 1781108828: ext4_get_branch:178: inode 13: block 1024 [ 650.027675][ C1] EXT4-fs (loop5): last error at time 1781108828: ext4_get_branch:178: inode 13: block 1024 [ 650.053307][T11633] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2127: invalid indirect mapped block 1024 (level 0) [ 650.183342][T11633] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 650.186757][T11633] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2127: bg 0: block 35: padding at end of block bitmap is not set [ 650.313455][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2128'. [ 650.352094][T11633] loop5: lost filesystem error report for type 5 error -117 [ 650.354094][T11637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2128'. [ 650.371640][T11633] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 650.432165][T11633] loop5: lost filesystem error report for type 5 error -117 [ 650.440648][T11633] EXT4-fs (loop5): 1 truncate cleaned up [ 650.532590][T11633] EXT4-fs (loop5): mounted filesystem 0000b300-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.558658][T11630] loop0: detected capacity change from 0 to 8192 [ 651.231052][ T9624] EXT4-fs (loop5): unmounting filesystem 0000b300-0000-0000-0000-000000000000. [ 651.836509][T11647] loop2: detected capacity change from 0 to 128 [ 651.992516][T11646] loop5: detected capacity change from 0 to 2048 [ 652.156276][T11646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.252875][T11646] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.854945][ T9624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.196408][T11658] loop2: detected capacity change from 0 to 8 [ 653.219585][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'. [ 653.357702][T11662] program syz.1.2139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.211963][T11670] sctp: [Deprecated]: syz.2.2141 (pid 11670) Use of int in max_burst socket option. [ 654.211963][T11670] Use struct sctp_assoc_value instead [ 654.495050][T11674] loop0: detected capacity change from 0 to 256 [ 654.671553][T11674] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 654.887737][T11680] loop5: detected capacity change from 0 to 128 [ 654.899939][T11678] sch_fq: defrate 8 ignored. [ 654.910535][T11681] loop1: detected capacity change from 0 to 128 [ 654.962374][T11680] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 655.030489][T11680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.211375][ T29] audit: type=1800 audit(1781108833.348:289): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2145" name="file2" dev="loop5" ino=105 res=0 errno=0 [ 655.593961][T11686] loop0: detected capacity change from 0 to 1024 [ 656.803706][T11692] loop5: detected capacity change from 0 to 32768 [ 656.839976][T11692] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 657.202616][T11692] XFS (loop5): Ending clean mount [ 657.218850][T11692] XFS (loop5): Quotacheck needed: Please wait. [ 657.318340][T11692] XFS (loop5): Quotacheck: Done. [ 657.438718][ T9624] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 657.864137][T11713] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 657.931045][T11711] xt_hashlimit: size too large, truncated to 1048576 [ 659.247592][T11726] loop9: detected capacity change from 0 to 3 [ 659.312241][T11726] Dev loop9: unable to read RDB block 3 [ 659.341098][T11726] loop9: unable to read partition table [ 659.375012][T11726] loop9: partition table beyond EOD, truncated [ 659.399920][T11726] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 661.761512][T11736] syz.1.2166 (11736): drop_caches: 2 [ 662.876771][T11748] loop6: detected capacity change from 0 to 4096 [ 662.899794][T11760] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2177'. [ 663.895550][T11748] ntfs3(loop6): ino=19, mi_enum_attr [ 663.958691][T11748] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 664.159697][T11768] loop1: detected capacity change from 0 to 2048 [ 664.282918][T11768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.974597][T11788] loop0: detected capacity change from 0 to 512 [ 667.036736][T11799] loop6: detected capacity change from 0 to 128 [ 667.284517][T11805] program syz.0.2199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.043780][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2202'. [ 669.341056][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 669.356380][T11834] netlink: 'syz.0.2210': attribute type 11 has an invalid length. [ 669.390792][T11834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2210'. [ 669.590422][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.632286][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.696206][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.759450][ T35] usb 7-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 669.784311][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 669.807227][ T806] kernel write not supported for file [eventfd] (pid: 806 comm: kworker/1:2) [ 669.820552][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.900607][ T35] usb 7-1: config 0 descriptor?? [ 670.673222][T11848] loop1: detected capacity change from 0 to 128 [ 670.743686][ T35] playstation 0003:054C:09CC.0013: unknown main item tag 0x0 [ 670.783984][T11848] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 670.797079][ T35] playstation 0003:054C:09CC.0013: unknown main item tag 0x0 [ 670.851029][ T35] playstation 0003:054C:09CC.0013: unknown main item tag 0x0 [ 670.878808][T11848] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 670.939056][ T35] playstation 0003:054C:09CC.0013: unknown main item tag 0x0 [ 670.981274][ T35] playstation 0003:054C:09CC.0013: unknown main item tag 0x0 [ 671.025631][ T35] playstation 0003:054C:09CC.0013: unknown main item tag 0x0 [ 671.127122][ T35] playstation 0003:054C:09CC.0013: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.6-1/input0 [ 671.257941][ T35] playstation 0003:054C:09CC.0013: Invalid byte count transferred, expected 16 got 0 [ 671.308396][ T35] playstation 0003:054C:09CC.0013: Failed to retrieve DualShock4 pairing info: -22 [ 671.362705][ T35] playstation 0003:054C:09CC.0013: Failed to get MAC address from DualShock4 [ 671.423032][ T35] playstation 0003:054C:09CC.0013: Failed to create dualshock4. [ 671.495611][ T35] playstation 0003:054C:09CC.0013: probe with driver playstation failed with error -22 [ 671.544451][T10961] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 671.588850][ T806] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 671.597579][ T35] usb 7-1: USB disconnect, device number 5 [ 671.802960][ T806] usb 1-1: Using ep0 maxpacket: 8 [ 671.852995][ T806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 671.873465][T11854] fido_id[11854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 671.903814][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.015668][ T806] pvrusb2: Hardware description: Terratec Grabster AV400 [ 672.067302][ T806] pvrusb2: ********** [ 672.096422][ T806] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 672.165903][ T806] pvrusb2: Important functionality might not be entirely working. [ 672.216828][ T806] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 672.277569][ T806] pvrusb2: ********** [ 672.315419][ T2356] pvrusb2: Invalid write control endpoint [ 672.458085][T11866] loop2: detected capacity change from 0 to 128 [ 672.592676][T11855] pvrusb2: Invalid write control endpoint [ 672.655025][ T806] usb 1-1: USB disconnect, device number 18 [ 672.789120][ T2356] pvrusb2: Invalid write control endpoint [ 672.820307][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 672.857094][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 672.889471][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 672.926008][ T2356] pvrusb2: Device being rendered inoperable [ 672.943791][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 672.973656][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 673.027236][ T2356] pvrusb2: Attached sub-driver cx25840 [ 673.081586][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 673.160687][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 673.367238][ T4900] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 673.541145][ T4900] usb 2-1: Using ep0 maxpacket: 32 [ 673.569258][T11872] loop2: detected capacity change from 0 to 1024 [ 673.607889][ T4900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 673.650622][ T4900] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 673.682616][ T4900] usb 2-1: can't read configurations, error -71 [ 673.699656][T11872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 673.776834][T11872] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.247499][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 677.213810][T11916] loop5: detected capacity change from 0 to 1024 [ 677.274841][T11916] EXT4-fs: Ignoring removed i_version option [ 677.332369][T11916] EXT4-fs: Ignoring removed orlov option [ 677.404098][T11916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.847889][ T9624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.322200][T11929] loop1: detected capacity change from 0 to 512 [ 678.344018][T11930] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 678.392587][T11930] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 678.493573][T11929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.561374][T11929] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.923112][T10961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.043590][ T4900] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 679.283039][ T4900] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 679.319933][ T4900] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 679.358917][ T4900] usb 7-1: config 0 has no interface number 0 [ 679.410831][ T4900] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 679.524047][ T4900] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 679.579834][ T4900] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 679.655739][ T4900] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 679.717947][ T4900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.832391][ T4900] usb 7-1: config 0 descriptor?? [ 679.874716][T11938] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 680.139732][T11948] loop0: detected capacity change from 0 to 512 [ 680.369773][T11948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.968772][T11948] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: comm syz.0.2255: Directory block failed checksum [ 680.983388][ T4900] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input19 [ 681.232090][ C0] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 681.252410][ T4900] usb 7-1: USB disconnect, device number 6 [ 681.878614][ T5583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.080976][ T7985] ===================================================== [ 682.088259][ T7985] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xd32/0xc780 [ 682.096946][ T7985] n_tty_receive_buf_standard+0xd32/0xc780 [ 682.103011][ T7985] n_tty_receive_buf_common+0x1a63/0x25a0 [ 682.108895][ T7985] n_tty_receive_buf2+0x4c/0x60 [ 682.114011][ T7985] tty_ldisc_receive_buf+0xc6/0x2c0 [ 682.119387][ T7985] tty_port_default_receive_buf+0xd7/0x1a0 [ 682.125578][ T7985] flush_to_ldisc+0x43e/0xe40 [ 682.130964][ T7985] process_scheduled_works+0xb65/0x1e40 [ 682.136724][ T7985] worker_thread+0xee4/0x1590 [ 682.142173][ T7985] kthread+0x53a/0x5f0 [ 682.146412][ T7985] ret_from_fork+0x20f/0x8d0 [ 682.151340][ T7985] ret_from_fork_asm+0x1a/0x30 [ 682.156286][ T7985] [ 682.158680][ T7985] Uninit was stored to memory at: [ 682.164100][ T7985] n_tty_receive_buf_standard+0xd2b/0xc780 [ 682.172343][ T7985] n_tty_receive_buf_common+0x1a63/0x25a0 [ 682.178232][ T7985] n_tty_receive_buf2+0x4c/0x60 [ 682.183404][ T7985] tty_ldisc_receive_buf+0xc6/0x2c0 [ 682.188784][ T7985] tty_port_default_receive_buf+0xd7/0x1a0 [ 682.194901][ T7985] flush_to_ldisc+0x43e/0xe40 [ 682.199753][ T7985] process_scheduled_works+0xb65/0x1e40 [ 682.205604][ T7985] worker_thread+0xee4/0x1590 [ 682.210507][ T7985] kthread+0x53a/0x5f0 [ 682.214746][ T7985] ret_from_fork+0x20f/0x8d0 [ 682.219475][ T7985] ret_from_fork_asm+0x1a/0x30 [ 682.224545][ T7985] [ 682.226932][ T7985] Uninit was created at: [ 682.231429][ T7985] __kmalloc_noprof+0x482/0x1660 [ 682.236504][ T7985] __tty_buffer_request_room+0x3d4/0x7a0 [ 682.242632][ T7985] __tty_insert_flip_string_flags+0x157/0x6e0 [ 682.248889][ T7985] uart_insert_char+0x368/0x930 [ 682.254072][ T7985] serial8250_read_char+0x1ba/0x670 [ 682.259448][ T7985] serial8250_handle_irq_locked+0x6d4/0xa40 [ 682.265671][ T7985] serial8250_handle_irq+0x189/0x710 [ 682.272893][ T7985] serial8250_default_handle_irq+0x116/0x350 [ 682.279068][ T7985] serial8250_interrupt+0xcb/0x3f0 [ 682.284924][ T7985] __handle_irq_event_percpu+0x118/0xf30 [ 682.290860][ T7985] handle_irq_event+0xe0/0x2a0 [ 682.295782][ T7985] handle_edge_irq+0x2a9/0xaf0 [ 682.300981][ T7985] __common_interrupt+0x9d/0x180 [ 682.306058][ T7985] common_interrupt+0x94/0xb0 [ 682.311135][ T7985] asm_common_interrupt+0x2b/0x40 [ 682.316305][ T7985] [ 682.318747][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 682.330275][ T7985] Tainted: [L]=SOFTLOCKUP [ 682.334680][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.344980][ T7985] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 682.351251][ T7985] ===================================================== [ 682.358242][ T7985] Disabling lock debugging due to kernel taint [ 682.411860][T11960] loop2: detected capacity change from 0 to 4096 [ 682.429612][ T7985] Kernel panic - not syncing: kmsan.panic set ... [ 682.436166][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: kworker/u8:11 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 682.447478][ T7985] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 682.453113][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.463305][ T7985] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 682.469530][ T7985] Call Trace: [ 682.472896][ T7985] [ 682.475908][ T7985] __dump_stack+0x26/0x30 [ 682.480399][ T7985] dump_stack_lvl+0x50/0x1c0 [ 682.485155][ T7985] ? dump_stack+0x12/0x25 [ 682.489647][ T7985] dump_stack+0x1e/0x25 [ 682.493949][ T7985] vpanic+0x7b4/0x1430 [ 682.498216][ T7985] panic+0x15d/0x160 [ 682.502324][ T7985] kmsan_report+0x31a/0x320 [ 682.507018][ T7985] ? __msan_warning+0x1b/0x30 [ 682.511858][ T7985] ? n_tty_receive_buf_standard+0xd32/0xc780 [ 682.518013][ T7985] ? n_tty_receive_buf_common+0x1a63/0x25a0 [ 682.524072][ T7985] ? n_tty_receive_buf2+0x4c/0x60 [ 682.529258][ T7985] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 682.534821][ T7985] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 682.541012][ T7985] ? flush_to_ldisc+0x43e/0xe40 [ 682.546050][ T7985] ? process_scheduled_works+0xb65/0x1e40 [ 682.551956][ T7985] ? worker_thread+0xee4/0x1590 [ 682.556982][ T7985] ? kthread+0x53a/0x5f0 [ 682.561429][ T7985] ? ret_from_fork+0x20f/0x8d0 [ 682.566355][ T7985] ? ret_from_fork_asm+0x1a/0x30 [ 682.571472][ T7985] ? ret_from_fork_asm+0x1a/0x30 [ 682.576582][ T7985] ? rpm_suspend+0xa4/0x2630 [ 682.581466][ T7985] ? kmsan_get_metadata+0xf1/0x160 [ 682.586782][ T7985] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 682.593306][ T7985] ? kmsan_get_metadata+0xf1/0x160 [ 682.598615][ T7985] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 682.604612][ T7985] ? ktime_get_mono_fast_ns+0x55b/0x5a0 [ 682.610335][ T7985] ? kmsan_get_metadata+0xf1/0x160 [ 682.615631][ T7985] ? kmsan_get_metadata+0xf1/0x160 [ 682.620929][ T7985] __msan_warning+0x1b/0x30 [ 682.625591][ T7985] n_tty_receive_buf_standard+0xd32/0xc780 [ 682.631598][ T7985] ? kmsan_get_metadata+0xf1/0x160 [ 682.636906][ T7985] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 682.643497][ T7985] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 682.649773][ T7985] n_tty_receive_buf_common+0x1a63/0x25a0 [ 682.655753][ T7985] n_tty_receive_buf2+0x4c/0x60 [ 682.660754][ T7985] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 682.666449][ T7985] tty_ldisc_receive_buf+0xc6/0x2c0 [ 682.671841][ T7985] tty_port_default_receive_buf+0xd7/0x1a0 [ 682.677929][ T7985] flush_to_ldisc+0x43e/0xe40 [ 682.682798][ T7985] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 682.689425][ T7985] ? __pfx_flush_to_ldisc+0x10/0x10 [ 682.694811][ T7985] process_scheduled_works+0xb65/0x1e40 [ 682.700581][ T7985] worker_thread+0xee4/0x1590 [ 682.705455][ T7985] kthread+0x53a/0x5f0 [ 682.709710][ T7985] ? __pfx_worker_thread+0x10/0x10 [ 682.714987][ T7985] ? __pfx_kthread+0x10/0x10 [ 682.719739][ T7985] ret_from_fork+0x20f/0x8d0 [ 682.724465][ T7985] ? __switch_to+0x573/0x7a0 [ 682.729223][ T7985] ? __pfx_kthread+0x10/0x10 [ 682.733986][ T7985] ret_from_fork_asm+0x1a/0x30 [ 682.738940][ T7985] [ 682.742519][ T7985] Kernel Offset: disabled [ 682.746892][ T7985] Rebooting in 86400 seconds..