last executing test programs: 3.618341382s ago: executing program 3 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.774121378s ago: executing program 3 (id=795): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a5, 0x80, 0x800, 0x307}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) getpeername(r1, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.66680621s ago: executing program 1 (id=796): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004880)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x16, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2.66653336s ago: executing program 0 (id=797): openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) eventfd2(0x8, 0x80801) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0x277, &(0x7f00000001c0)="$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") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2.590693921s ago: executing program 0 (id=798): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbe5, &(0x7f0000001f40)="$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") rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x842053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) 2.528759522s ago: executing program 1 (id=799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000100000000000000000034000100ffffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 2.450676494s ago: executing program 3 (id=800): munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = userfaultfd(0x80001) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x240c0009}, 0x20000000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x0, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.402708995s ago: executing program 1 (id=802): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000580)={0x1d, r2, 0x3, {}, 0xff}, 0x18) sendmsg$inet(r0, &(0x7f0000001dc0)={&(0x7f00000005c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0x1) 2.253956777s ago: executing program 1 (id=804): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x43966, 0x3, 0x8000, 0x0, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) preadv2(r4, &(0x7f0000001140)=[{0x0}, {&(0x7f0000000e00)=""/158, 0x9e}, {&(0x7f0000000ec0)=""/185, 0xb9}, {&(0x7f0000000f80)=""/213, 0xd5}, {&(0x7f0000000c00)=""/100, 0x64}, {&(0x7f0000001080)=""/134, 0x86}], 0x6, 0x9, 0x5, 0x8) 1.835088425s ago: executing program 2 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.430744363s ago: executing program 0 (id=807): memfd_create(0x0, 0x2) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f00000001c0), 0x3, 0x6c1, &(0x7f0000000a00)="$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") listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) unshare(0x2a020400) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) fanotify_init(0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, r3, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x117) 1.400587054s ago: executing program 1 (id=809): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004880)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x16, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 1.266759096s ago: executing program 3 (id=810): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x79, r1}) 1.152586348s ago: executing program 1 (id=811): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x1, 0x2af5, 0x0, 0x0}], 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1.029243011s ago: executing program 4 (id=812): io_submit(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e061e"], 0x9) 1.029008701s ago: executing program 3 (id=813): socket$l2tp6(0xa, 0x2, 0x73) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) shutdown(r0, 0x2) 892.057293ms ago: executing program 0 (id=814): r0 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x40, 0x3, 0x3, "8afe8385d34e2c779d2139bf019eb452c58a948f13b54994bd48af4f2ddbc8f2", 0x35315241}) 891.311383ms ago: executing program 2 (id=815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x30}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 834.816505ms ago: executing program 4 (id=816): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000002100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 737.798676ms ago: executing program 2 (id=817): socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 722.700517ms ago: executing program 0 (id=818): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000004, 0x32, 0x0, 0xffffd000) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 666.655868ms ago: executing program 4 (id=819): socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 608.266909ms ago: executing program 0 (id=820): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x43966, 0x3, 0x8000, 0x0, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) preadv2(r4, &(0x7f0000001140)=[{0x0}, {&(0x7f0000000e00)=""/158, 0x9e}, {&(0x7f0000000ec0)=""/185, 0xb9}, {&(0x7f0000000f80)=""/213, 0xd5}, {&(0x7f0000000c00)=""/100, 0x64}, {&(0x7f0000001080)=""/134, 0x86}], 0x6, 0x9, 0x5, 0x8) 500.477441ms ago: executing program 4 (id=821): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004880)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x16, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 493.843881ms ago: executing program 2 (id=822): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2'}, 0x29) 330.892114ms ago: executing program 2 (id=823): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@timestamping={{0x10, 0x1, 0x25, 0x2}}], 0x10}}], 0x1, 0x0) 330.446734ms ago: executing program 4 (id=824): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000140), 0x6, 0x4cd, &(0x7f0000000c80)="$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") lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 102.768708ms ago: executing program 2 (id=825): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xafff87389631d415, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x21, 0x1) 102.248878ms ago: executing program 3 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 4 (id=827): bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.3.66'. [ 71.596538][ T4568] device veth1_to_bond entered promiscuous mode [ 71.786016][ T4574] device team_slave_0 entered promiscuous mode [ 71.792424][ T4574] device team_slave_1 entered promiscuous mode [ 71.801203][ T4572] device team_slave_0 left promiscuous mode [ 71.807145][ T4572] device team_slave_1 left promiscuous mode [ 72.934080][ T4589] loop4: detected capacity change from 0 to 512 [ 72.970802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.991346][ T4589] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 73.039944][ T4589] System zones: 0-7 [ 73.108609][ T4589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.125786][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 73.196105][ T4593] device vlan2 entered promiscuous mode [ 73.442354][ T27] audit: type=1326 audit(1757532683.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e6d8eba9 code=0x7ffc0000 [ 73.464633][ T4602] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 73.472239][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 73.478205][ T27] audit: type=1326 audit(1757532683.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55e6d8eba9 code=0x7ffc0000 [ 73.518771][ T27] audit: type=1326 audit(1757532683.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e6d8eba9 code=0x7ffc0000 [ 73.604864][ T4604] loop1: detected capacity change from 0 to 2048 [ 73.625010][ T27] audit: type=1326 audit(1757532683.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f55e6d8eba9 code=0x7ffc0000 [ 73.669888][ T4604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.680638][ T27] audit: type=1326 audit(1757532683.483:10): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e6d8eba9 code=0x7ffc0000 [ 73.713965][ T4608] device team_slave_0 entered promiscuous mode [ 73.720217][ T4608] device team_slave_1 entered promiscuous mode [ 73.734813][ T4606] loop4: detected capacity change from 0 to 4096 [ 73.758994][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 73.769433][ T4606] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 73.779216][ T27] audit: type=1326 audit(1757532683.483:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f55e6d8eba9 code=0x7ffc0000 [ 73.816602][ T4602] device veth3 entered promiscuous mode [ 73.825220][ T27] audit: type=1326 audit(1757532683.483:12): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e6d8eba9 code=0x7ffc0000 [ 73.858275][ T4607] device team_slave_0 left promiscuous mode [ 73.864301][ T4607] device team_slave_1 left promiscuous mode [ 73.903074][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 73.925896][ T4611] device macvlan1 entered promiscuous mode [ 73.969807][ T27] audit: type=1800 audit(1757532683.793:13): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.80" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 75.132405][ T4628] loop3: detected capacity change from 0 to 512 [ 75.205747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 75.217256][ T4628] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 75.248409][ T4628] System zones: 0-7 [ 75.328571][ T4628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.355336][ T4635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'. [ 75.523847][ T4268] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.574702][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 75.688010][ T4644] device team_slave_0 entered promiscuous mode [ 75.694269][ T4644] device team_slave_1 entered promiscuous mode [ 75.727088][ T4643] device team_slave_0 left promiscuous mode [ 75.733101][ T4643] device team_slave_1 left promiscuous mode [ 75.739068][ T4268] usb 5-1: Using ep0 maxpacket: 8 [ 75.755326][ T4268] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.772134][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 75.782545][ T4268] usb 5-1: config 4 interface 0 has no altsetting 0 [ 75.796044][ T4646] device veth1_virt_wifi entered promiscuous mode [ 75.802138][ T4268] usb 5-1: string descriptor 0 read error: -22 [ 75.808804][ T4268] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 75.855099][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.905217][ T4268] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 75.954388][ T4268] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 76.012636][ T4268] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 76.019813][ T4268] usb 5-1: media controller created [ 76.113195][ T4268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.232354][ T4656] loop1: detected capacity change from 0 to 2048 [ 76.253503][ T14] cfg80211: failed to load regulatory.db [ 76.352554][ T4651] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 76.373509][ T4656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.407360][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 76.453752][ T4268] zl10353_read_register: readreg error (reg=127, ret==0) [ 76.483019][ T27] audit: type=1800 audit(1757532686.523:14): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 76.499716][ T4268] usb 5-1: USB disconnect, device number 2 [ 77.085519][ T4651] device veth5 entered promiscuous mode [ 77.512715][ T4673] loop0: detected capacity change from 0 to 512 [ 77.661085][ T4673] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 77.669128][ T4673] System zones: 0-7 [ 77.719610][ T4673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 77.733187][ T4326] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.754934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.863194][ T4682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.107'. [ 77.879651][ T4682] device vlan2 entered promiscuous mode [ 77.885609][ T4682] device dummy0 entered promiscuous mode [ 77.894929][ T4681] device team_slave_0 entered promiscuous mode [ 77.901147][ T4681] device team_slave_1 entered promiscuous mode [ 77.930440][ T4677] device team_slave_0 left promiscuous mode [ 77.936377][ T4677] device team_slave_1 left promiscuous mode [ 77.950011][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.969989][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 77.978219][ T4326] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 77.993417][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.192530][ T4326] usb 4-1: config 0 descriptor?? [ 78.931025][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 78.949547][ T4696] device team_slave_0 entered promiscuous mode [ 78.955819][ T4696] device team_slave_1 entered promiscuous mode [ 78.968037][ T4696] device macvtap1 entered promiscuous mode [ 78.974059][ T4696] device team0 entered promiscuous mode [ 79.012318][ T4696] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 79.099311][ T4699] device team0 left promiscuous mode [ 79.121244][ T4699] device team_slave_0 left promiscuous mode [ 79.127246][ T4699] device team_slave_1 left promiscuous mode [ 79.266290][ T4326] holtek 0003:1241:5015.0001: unbalanced collection at end of report description [ 79.291193][ T4326] holtek 0003:1241:5015.0001: parse failed [ 79.307269][ T4326] holtek: probe of 0003:1241:5015.0001 failed with error -22 [ 79.397215][ T4698] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 79.415241][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 79.428819][ T4698] device veth3 entered promiscuous mode [ 79.467979][ T3044] usb 4-1: USB disconnect, device number 3 [ 79.474081][ T4378] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.509194][ T4712] loop0: detected capacity change from 0 to 2048 [ 79.559434][ T4712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.600321][ T27] audit: type=1800 audit(1757532689.633:15): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.120" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 79.680669][ T4378] usb 5-1: Using ep0 maxpacket: 8 [ 79.688207][ T4378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.706782][ T4378] usb 5-1: config 4 interface 0 has no altsetting 0 [ 79.753785][ T4378] usb 5-1: string descriptor 0 read error: -22 [ 79.760042][ T4378] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 79.790600][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.808492][ T4378] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 79.825593][ T4378] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 79.837664][ T4378] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 79.845118][ T4378] usb 5-1: media controller created [ 79.883701][ T4717] loop2: detected capacity change from 0 to 512 [ 79.900302][ T4717] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 79.908476][ T4717] System zones: 0-7 [ 79.921021][ T4717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.939236][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.994710][ T4721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 80.073498][ T4724] device team_slave_0 entered promiscuous mode [ 80.079988][ T4724] device team_slave_1 entered promiscuous mode [ 80.101163][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 80.122245][ T4722] device team_slave_0 left promiscuous mode [ 80.128218][ T4722] device team_slave_1 left promiscuous mode [ 80.415128][ T4378] zl10353_read_register: readreg error (reg=127, ret==0) [ 80.455313][ T4378] usb 5-1: USB disconnect, device number 3 [ 81.205491][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 81.215099][ T4742] device macvlan0 entered promiscuous mode [ 81.524240][ T4747] loop3: detected capacity change from 0 to 2048 [ 81.547604][ T4747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.579698][ T4749] loop0: detected capacity change from 0 to 512 [ 81.611237][ T27] audit: type=1800 audit(1757532691.653:16): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 81.637949][ T4749] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 81.650064][ T4749] System zones: 0-7 [ 81.675006][ T4749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.702052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.720356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.798913][ T4756] loop4: detected capacity change from 0 to 1024 [ 81.814779][ T4744] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 81.828806][ T4756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.852381][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 81.876790][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 81.902854][ T4744] device veth5 entered promiscuous mode [ 81.934614][ T4756] netlink: 'syz.4.136': attribute type 14 has an invalid length. [ 81.987618][ T4759] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 82.039824][ T4761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.137'. [ 82.249506][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 82.296857][ T4765] device team_slave_0 entered promiscuous mode [ 82.303106][ T4765] device team_slave_1 entered promiscuous mode [ 82.348064][ T4764] device team_slave_0 left promiscuous mode [ 82.354059][ T4764] device team_slave_1 left promiscuous mode [ 82.446270][ T4773] loop2: detected capacity change from 0 to 256 [ 82.599190][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 82.604853][ T4773] FAT-fs (loop2): Directory bread(block 64) failed [ 82.620507][ T4775] device macsec0 entered promiscuous mode [ 82.706973][ T4773] FAT-fs (loop2): Directory bread(block 65) failed [ 82.933573][ T4773] FAT-fs (loop2): Directory bread(block 66) failed [ 83.165868][ T4773] FAT-fs (loop2): Directory bread(block 67) failed [ 83.180250][ T4778] device veth1_macvtap left promiscuous mode [ 83.184840][ T4773] FAT-fs (loop2): Directory bread(block 68) failed [ 83.197967][ T4773] FAT-fs (loop2): Directory bread(block 69) failed [ 83.224192][ T4773] FAT-fs (loop2): Directory bread(block 70) failed [ 83.259871][ T4773] FAT-fs (loop2): Directory bread(block 71) failed [ 83.277965][ T4773] FAT-fs (loop2): Directory bread(block 72) failed [ 83.305847][ T4773] FAT-fs (loop2): Directory bread(block 73) failed [ 83.357740][ T4787] loop4: detected capacity change from 0 to 512 [ 83.385097][ T4787] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 83.405054][ T4787] System zones: 0-7 [ 83.419681][ T4787] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.442807][ T4773] syz.2.143: attempt to access beyond end of device [ 83.442807][ T4773] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 83.451235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.589487][ T4792] loop3: detected capacity change from 0 to 2048 [ 83.600560][ T4378] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.670101][ T4792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.725288][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 83.760168][ T27] audit: type=1800 audit(1757532693.793:17): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.148" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 83.830536][ T4378] usb 1-1: Using ep0 maxpacket: 8 [ 83.838782][ T4378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.859618][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 83.873528][ T4378] usb 1-1: config 4 interface 0 has no altsetting 0 [ 83.905134][ T4378] usb 1-1: string descriptor 0 read error: -22 [ 83.905585][ T4796] device vlan2 entered promiscuous mode [ 83.914918][ T4378] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 83.948386][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.960630][ T4796] device dummy0 entered promiscuous mode [ 83.988975][ T4378] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 84.033445][ T4378] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 84.084571][ T4378] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 84.110861][ T4378] usb 1-1: media controller created [ 84.170911][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.195902][ T4804] device team_slave_0 entered promiscuous mode [ 84.202149][ T4804] device team_slave_1 entered promiscuous mode [ 84.268806][ T4803] device team_slave_0 left promiscuous mode [ 84.274814][ T4803] device team_slave_1 left promiscuous mode [ 84.407008][ T4810] loop3: detected capacity change from 0 to 736 [ 84.437668][ T4378] zl10353_read_register: readreg error (reg=127, ret==0) [ 84.546326][ T4378] usb 1-1: USB disconnect, device number 2 [ 84.560164][ T4814] loop4: detected capacity change from 0 to 2048 [ 84.686120][ T4814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.704163][ T4798] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 84.749863][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 84.804434][ T4821] loop3: detected capacity change from 0 to 1024 [ 84.818403][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 84.825555][ T4821] EXT4-fs: Ignoring removed orlov option [ 84.831428][ T4821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.867763][ T4819] loop1: detected capacity change from 0 to 1024 [ 84.876081][ T4821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.889131][ T4815] device veth7 entered promiscuous mode [ 85.219321][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 85.396232][ T4831] loop0: detected capacity change from 0 to 4096 [ 85.519258][ T4831] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 85.806070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.809989][ T4851] loop2: detected capacity change from 0 to 512 [ 85.983874][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 86.230440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.599791][ T4851] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 86.684130][ T4851] System zones: 0-7 [ 86.722110][ T4851] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.758872][ T4272] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 86.811005][ T4272] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 86.816664][ T4864] device team_slave_0 entered promiscuous mode [ 86.823674][ T4864] device team_slave_1 entered promiscuous mode [ 86.915136][ T4867] loop4: detected capacity change from 0 to 2048 [ 86.919286][ T4863] device team_slave_0 left promiscuous mode [ 86.927458][ T4863] device team_slave_1 left promiscuous mode [ 86.958378][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 87.105681][ T4867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.164736][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 87.226306][ T27] audit: type=1800 audit(1757532697.263:18): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 87.411156][ T4866] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 87.420869][ T4378] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.494581][ T4880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.588235][ T4866] device veth7 entered promiscuous mode [ 87.600507][ T4378] usb 2-1: Using ep0 maxpacket: 8 [ 87.624997][ T4378] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.644320][ T4378] usb 2-1: config 4 interface 0 has no altsetting 0 [ 87.651670][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 87.711978][ T4378] usb 2-1: string descriptor 0 read error: -22 [ 87.729186][ T4378] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 87.748596][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.797579][ T4378] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 87.823332][ T4378] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.995470][ T4378] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 88.003494][ T4378] usb 2-1: media controller created [ 88.019639][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.645734][ T4901] loop3: detected capacity change from 0 to 512 [ 88.646918][ T4378] usb 2-1: USB disconnect, device number 2 [ 88.790691][ T4901] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 88.798904][ T4901] System zones: 0-7 [ 88.815720][ T4901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.843651][ T4905] device team_slave_0 entered promiscuous mode [ 88.849886][ T4905] device team_slave_1 entered promiscuous mode [ 88.892966][ T4903] device team_slave_0 left promiscuous mode [ 88.898940][ T4903] device team_slave_1 left promiscuous mode [ 89.023633][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 89.063092][ T4911] device team_slave_0 entered promiscuous mode [ 89.064610][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 89.069287][ T4911] device team_slave_1 entered promiscuous mode [ 89.069400][ T4911] device macvtap1 entered promiscuous mode [ 89.100849][ T4911] device team0 entered promiscuous mode [ 89.107625][ T4911] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 89.146892][ T4914] device team0 left promiscuous mode [ 89.184696][ T4914] device team_slave_0 left promiscuous mode [ 89.190715][ T4914] device team_slave_1 left promiscuous mode [ 89.334783][ T4920] loop1: detected capacity change from 0 to 2048 [ 89.369245][ T4920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.425105][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 89.434500][ T27] audit: type=1800 audit(1757532699.473:19): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.195" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 89.468940][ T4923] device vlan2 entered promiscuous mode [ 89.505719][ T4923] device dummy0 entered promiscuous mode [ 89.979164][ T4925] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 90.704380][ T4940] device veth7 entered promiscuous mode [ 90.817012][ T4944] loop3: detected capacity change from 0 to 512 [ 90.844584][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.871708][ T4946] device team_slave_0 entered promiscuous mode [ 90.877939][ T4946] device team_slave_1 entered promiscuous mode [ 90.938360][ T4944] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 90.949479][ T4945] device team_slave_0 left promiscuous mode [ 90.955460][ T4945] device team_slave_1 left promiscuous mode [ 90.979228][ T4944] System zones: 0-7 [ 91.000051][ T4944] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.030532][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 91.043983][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.063897][ T7] usb 1-1: config 4 interface 0 has no altsetting 0 [ 91.095816][ T7] usb 1-1: string descriptor 0 read error: -22 [ 91.131681][ T7] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 91.159446][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.186871][ T7] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 91.199012][ T7] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 91.209957][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 91.217387][ T7] usb 1-1: media controller created [ 91.234607][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 91.258182][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.275257][ T4957] device team_slave_0 entered promiscuous mode [ 91.281489][ T4957] device team_slave_1 entered promiscuous mode [ 91.299599][ T4957] device macvtap2 entered promiscuous mode [ 91.307116][ T4957] device team0 entered promiscuous mode [ 91.337015][ T4957] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 91.354925][ T4959] device team0 left promiscuous mode [ 91.390859][ T4959] device team_slave_0 left promiscuous mode [ 91.396830][ T4959] device team_slave_1 left promiscuous mode [ 91.428239][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 91.615172][ T22] usb 1-1: USB disconnect, device number 3 [ 91.627061][ T4964] loop1: detected capacity change from 0 to 2048 [ 91.639536][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 91.666951][ T4964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.723613][ T27] audit: type=1800 audit(1757532701.763:20): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.212" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 92.946140][ T4991] loop4: detected capacity change from 0 to 512 [ 93.015359][ T4991] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 93.041674][ T4993] device team_slave_0 entered promiscuous mode [ 93.047988][ T4993] device team_slave_1 entered promiscuous mode [ 93.053952][ T4991] System zones: 0-7 [ 93.058797][ T4991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.138702][ T4992] device team_slave_0 left promiscuous mode [ 93.144934][ T4992] device team_slave_1 left promiscuous mode [ 93.215116][ T4981] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 93.278343][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 93.292375][ T5001] device team_slave_0 entered promiscuous mode [ 93.298622][ T5001] device team_slave_1 entered promiscuous mode [ 93.305468][ T5001] device macvtap1 entered promiscuous mode [ 93.311374][ T5001] device team0 entered promiscuous mode [ 93.318200][ T5001] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 93.319610][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 93.339593][ T4997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.359627][ T5003] device team0 left promiscuous mode [ 93.378125][ T5003] device team_slave_0 left promiscuous mode [ 93.384174][ T5003] device team_slave_1 left promiscuous mode [ 93.468105][ T5004] device veth9 entered promiscuous mode [ 93.492944][ T5010] loop1: detected capacity change from 0 to 2048 [ 93.580355][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 93.650636][ T5010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.770777][ T27] audit: type=1800 audit(1757532703.813:21): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 93.950495][ T4327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.150508][ T4327] usb 4-1: Using ep0 maxpacket: 8 [ 94.158723][ T4327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.183966][ T4327] usb 4-1: config 4 interface 0 has no altsetting 0 [ 94.204061][ T4327] usb 4-1: string descriptor 0 read error: -22 [ 94.228121][ T4327] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 94.260169][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.289522][ T4327] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 94.314770][ T4327] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 94.329089][ T4327] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 94.338844][ T4327] usb 4-1: media controller created [ 94.367355][ T4327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.465381][ T5031] loop4: detected capacity change from 0 to 512 [ 94.502251][ T5031] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 94.538110][ T5031] System zones: 0-7 [ 94.552100][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.575830][ T5034] device team_slave_0 entered promiscuous mode [ 94.582098][ T5034] device team_slave_1 entered promiscuous mode [ 94.600277][ T5033] device team_slave_0 left promiscuous mode [ 94.606323][ T5033] device team_slave_1 left promiscuous mode [ 94.693811][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 94.701889][ T4327] usb 4-1: USB disconnect, device number 4 [ 94.739281][ T5043] device team_slave_0 entered promiscuous mode [ 94.745569][ T5043] device team_slave_1 entered promiscuous mode [ 94.783510][ T5043] device macvtap1 entered promiscuous mode [ 94.797368][ T5043] device team0 entered promiscuous mode [ 94.807275][ T5043] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 94.856242][ T5045] device team0 left promiscuous mode [ 94.863593][ T5045] device team_slave_0 left promiscuous mode [ 94.869582][ T5045] device team_slave_1 left promiscuous mode [ 94.878209][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 94.920276][ T5046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 95.287989][ T5056] loop1: detected capacity change from 0 to 2048 [ 95.364995][ T5056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.403674][ T27] audit: type=1800 audit(1757532705.443:22): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.245" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 95.505615][ T5049] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 95.600592][ T5066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.619803][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 95.754611][ T5049] device veth9 entered promiscuous mode [ 95.776695][ T5074] device team_slave_0 entered promiscuous mode [ 95.782979][ T5074] device team_slave_1 entered promiscuous mode [ 95.841364][ T5073] device team_slave_0 left promiscuous mode [ 95.847353][ T5073] device team_slave_1 left promiscuous mode [ 96.126684][ T5080] loop1: detected capacity change from 0 to 512 [ 96.161943][ T5082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.254'. [ 96.251427][ T5080] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 96.273513][ T5080] System zones: 0-7 [ 96.277943][ T5080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.406383][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 96.454388][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 96.474550][ T5091] device team_slave_0 entered promiscuous mode [ 96.480858][ T5091] device team_slave_1 entered promiscuous mode [ 96.506970][ T5091] device macvtap2 entered promiscuous mode [ 96.520102][ T5091] device team0 entered promiscuous mode [ 96.533066][ T5091] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 96.559357][ T5092] device team0 left promiscuous mode [ 96.570794][ T5092] device team_slave_0 left promiscuous mode [ 96.576810][ T5092] device team_slave_1 left promiscuous mode [ 96.811596][ T5104] device team_slave_0 entered promiscuous mode [ 96.817855][ T5104] device team_slave_1 entered promiscuous mode [ 96.835267][ T5103] device team_slave_0 left promiscuous mode [ 96.841296][ T5103] device team_slave_1 left promiscuous mode [ 96.865449][ T5105] loop3: detected capacity change from 0 to 2048 [ 96.919643][ T5105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.968100][ T27] audit: type=1800 audit(1757532707.003:23): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.262" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 97.226269][ T5116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'. [ 97.396901][ T5118] loop1: detected capacity change from 0 to 512 [ 97.450752][ T5107] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 97.468106][ T5118] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 97.525721][ T5118] System zones: 0-7 [ 97.534184][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.574180][ T5121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.662395][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 97.720740][ T5127] device team_slave_0 entered promiscuous mode [ 97.727018][ T5127] device team_slave_1 entered promiscuous mode [ 97.745847][ T5127] device macvtap1 entered promiscuous mode [ 97.752107][ T5127] device team0 entered promiscuous mode [ 97.760334][ T5127] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 97.768317][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 97.793539][ T5107] device veth3 entered promiscuous mode [ 97.813281][ T5130] device team0 left promiscuous mode [ 97.819053][ T5130] device team_slave_0 left promiscuous mode [ 97.820350][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 97.825202][ T5130] device team_slave_1 left promiscuous mode [ 98.158677][ T5140] device team_slave_0 entered promiscuous mode [ 98.165023][ T5140] device team_slave_1 entered promiscuous mode [ 98.229179][ T5138] device team_slave_0 left promiscuous mode [ 98.235318][ T5138] device team_slave_1 left promiscuous mode [ 98.484884][ T5149] netlink: 68 bytes leftover after parsing attributes in process `syz.4.281'. [ 98.583584][ T5155] autofs4:pid:5155:autofs_fill_super: called with bogus options [ 98.613850][ T5152] loop3: detected capacity change from 0 to 2048 [ 98.633427][ T5152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.677449][ T27] audit: type=1800 audit(1757532708.713:24): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 98.773709][ T5157] loop4: detected capacity change from 0 to 512 [ 98.816433][ T5157] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 98.840585][ T5157] System zones: 0-7 [ 98.845567][ T5157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 98.861007][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 99.000819][ T5161] device team_slave_0 entered promiscuous mode [ 99.007124][ T5161] device team_slave_1 entered promiscuous mode [ 99.040618][ T5161] device macvtap3 entered promiscuous mode [ 99.102265][ T5161] device team0 entered promiscuous mode [ 99.131391][ T5161] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 99.149924][ T5163] device team0 left promiscuous mode [ 99.157608][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 99.164900][ T5163] device team_slave_0 left promiscuous mode [ 99.170940][ T5163] device team_slave_1 left promiscuous mode [ 99.549844][ T5179] netlink: 68 bytes leftover after parsing attributes in process `syz.0.293'. [ 99.645179][ T5182] autofs4:pid:5182:autofs_fill_super: called with bogus options [ 99.656818][ T5168] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 99.748318][ T5168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.759037][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 99.779764][ T5168] device veth9 entered promiscuous mode [ 100.065076][ T5195] loop2: detected capacity change from 0 to 2048 [ 100.092748][ T5195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.104985][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 100.134202][ T5199] device team_slave_0 entered promiscuous mode [ 100.140516][ T5199] device team_slave_1 entered promiscuous mode [ 100.167213][ T5199] device macvtap2 entered promiscuous mode [ 100.176769][ T5199] device team0 entered promiscuous mode [ 100.179487][ T27] audit: type=1800 audit(1757532710.213:25): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.298" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 100.208929][ T5199] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 100.219733][ T5201] device team0 left promiscuous mode [ 100.233325][ T5201] device team_slave_0 left promiscuous mode [ 100.239369][ T5201] device team_slave_1 left promiscuous mode [ 100.575419][ T5212] autofs4:pid:5212:autofs_fill_super: called with bogus options [ 100.625650][ T5213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.305'. [ 100.879071][ T5218] loop3: detected capacity change from 0 to 4096 [ 101.039051][ T5228] capability: warning: `syz.0.314' uses deprecated v2 capabilities in a way that may be insecure [ 101.058350][ T5228] loop0: detected capacity change from 0 to 512 [ 101.122390][ T5220] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 101.147060][ T5228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.176408][ T5228] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.192636][ T5229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.402510][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 101.403363][ T5235] device team_slave_0 entered promiscuous mode [ 101.414539][ T5235] device team_slave_1 entered promiscuous mode [ 101.475169][ T5238] loop4: detected capacity change from 0 to 2048 [ 101.490910][ T5235] device macvtap2 entered promiscuous mode [ 101.496762][ T5235] device team0 entered promiscuous mode [ 101.514644][ T5238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.546884][ T5235] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 101.572691][ T27] audit: type=1800 audit(1757532711.613:26): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.316" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 101.593130][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.602557][ T5239] device team0 left promiscuous mode [ 101.608249][ T5239] device team_slave_0 left promiscuous mode [ 101.614256][ T5239] device team_slave_1 left promiscuous mode [ 101.891741][ T5250] autofs4:pid:5250:autofs_fill_super: called with bogus options [ 102.050034][ T5256] __nla_validate_parse: 2 callbacks suppressed [ 102.050050][ T5256] netlink: 68 bytes leftover after parsing attributes in process `syz.0.323'. [ 102.230063][ T5263] loop2: detected capacity change from 0 to 256 [ 102.271680][ T5263] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 102.503846][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 102.525029][ T5269] device team_slave_0 entered promiscuous mode [ 102.531306][ T5269] device team_slave_1 entered promiscuous mode [ 102.537934][ T5269] device macvtap3 entered promiscuous mode [ 102.546314][ T5269] device team0 entered promiscuous mode [ 102.553767][ T5269] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 102.570885][ T5272] device team0 left promiscuous mode [ 102.576550][ T5272] device team_slave_0 left promiscuous mode [ 102.582524][ T5272] device team_slave_1 left promiscuous mode [ 102.597004][ T5261] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 102.627011][ T5261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.644858][ T5261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 102.807936][ T5282] autofs4:pid:5282:autofs_fill_super: called with bogus options [ 102.966516][ T5287] netlink: 68 bytes leftover after parsing attributes in process `syz.4.336'. [ 103.146810][ T5296] loop3: detected capacity change from 0 to 512 [ 103.148788][ T5294] loop4: detected capacity change from 0 to 2048 [ 103.164188][ T5296] EXT4-fs: Ignoring removed bh option [ 103.176936][ T5296] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 103.207352][ T5296] EXT4-fs (loop3): 1 truncate cleaned up [ 103.213392][ T5296] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.255992][ T5294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.279198][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 103.362693][ T27] audit: type=1800 audit(1757532713.403:27): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.339" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 103.487345][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 103.530355][ T5303] device team_slave_0 entered promiscuous mode [ 103.536631][ T5303] device team_slave_1 entered promiscuous mode [ 103.567793][ T5303] device macvtap4 entered promiscuous mode [ 103.578421][ T5303] device team0 entered promiscuous mode [ 103.586800][ T5303] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 103.614433][ T5308] device team0 left promiscuous mode [ 103.649978][ T5308] device team_slave_0 left promiscuous mode [ 103.656045][ T5308] device team_slave_1 left promiscuous mode [ 103.701469][ T5310] autofs4:pid:5310:autofs_fill_super: called with bogus options [ 103.942233][ T5318] netlink: 68 bytes leftover after parsing attributes in process `syz.0.349'. [ 104.019336][ T5307] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 104.081558][ T5307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.089663][ T5307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 104.329187][ T5331] loop2: detected capacity change from 0 to 4096 [ 104.336815][ T5331] ntfs3: Unknown parameter 'nocase' [ 104.374817][ T5333] loop0: detected capacity change from 0 to 64 [ 104.465303][ T5333] Trying to free block not in datazone [ 104.611546][ T5336] loop2: detected capacity change from 0 to 4096 [ 104.676483][ T5339] loop4: detected capacity change from 0 to 2048 [ 104.679984][ T5341] autofs4:pid:5341:autofs_fill_super: called with bogus options [ 104.735060][ T5339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.791486][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 104.821754][ T27] audit: type=1800 audit(1757532714.863:28): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.357" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 104.874992][ T5343] device team_slave_0 entered promiscuous mode [ 104.881256][ T5343] device team_slave_1 entered promiscuous mode [ 104.938555][ T5343] device macvtap3 entered promiscuous mode [ 104.961140][ T5343] device team0 entered promiscuous mode [ 104.987568][ T5343] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 105.051000][ T5344] device team0 left promiscuous mode [ 105.056728][ T5344] device team_slave_0 left promiscuous mode [ 105.062767][ T5344] device team_slave_1 left promiscuous mode [ 105.095646][ T5346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 105.578394][ T5362] syz.2.367 uses obsolete (PF_INET,SOCK_PACKET) [ 105.647179][ T5356] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 105.679969][ T5356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.689595][ T5356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 105.737587][ T5368] autofs4:pid:5368:autofs_fill_super: called with bogus options [ 105.790560][ T4378] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.882902][ T5372] loop2: detected capacity change from 0 to 256 [ 105.916903][ T5372] FAT-fs (loop2): Directory bread(block 64) failed [ 105.928714][ T5372] FAT-fs (loop2): Directory bread(block 65) failed [ 105.936301][ T5372] FAT-fs (loop2): Directory bread(block 66) failed [ 105.949467][ T5372] FAT-fs (loop2): Directory bread(block 67) failed [ 105.956786][ T5372] FAT-fs (loop2): Directory bread(block 68) failed [ 105.974597][ T5372] FAT-fs (loop2): Directory bread(block 69) failed [ 105.982630][ T4378] usb 4-1: Using ep0 maxpacket: 8 [ 105.998481][ T5372] FAT-fs (loop2): Directory bread(block 70) failed [ 106.006853][ T4378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.019686][ T5372] FAT-fs (loop2): Directory bread(block 71) failed [ 106.033055][ T5372] FAT-fs (loop2): Directory bread(block 72) failed [ 106.039673][ T5372] FAT-fs (loop2): Directory bread(block 73) failed [ 106.043321][ T4378] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 106.065788][ T4378] usb 4-1: can't read configurations, error -71 [ 106.088587][ T5372] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 106.097739][ T5372] FAT-fs (loop2): Filesystem has been set read-only [ 106.266474][ T5381] loop1: detected capacity change from 0 to 2048 [ 106.292952][ T5381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.354302][ T27] audit: type=1800 audit(1757532716.393:29): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.376" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 106.426732][ T5384] device team_slave_0 entered promiscuous mode [ 106.433004][ T5384] device team_slave_1 entered promiscuous mode [ 106.439928][ T5384] device macvtap2 entered promiscuous mode [ 106.446166][ T5384] device team0 entered promiscuous mode [ 106.454167][ T5384] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 106.471758][ T5387] device team0 left promiscuous mode [ 106.495384][ T5387] device team_slave_0 left promiscuous mode [ 106.501410][ T5387] device team_slave_1 left promiscuous mode [ 106.763730][ T5395] autofs4:pid:5395:autofs_fill_super: called with bogus options [ 107.192230][ T5400] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 107.234717][ T5400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.245028][ T5400] __nla_validate_parse: 3 callbacks suppressed [ 107.245042][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 107.270529][ T7] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 107.367461][ T5417] loop1: detected capacity change from 0 to 2048 [ 107.399036][ T5417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.460343][ T27] audit: type=1800 audit(1757532717.493:30): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.391" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 107.487479][ T7] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.498954][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.514316][ T7] usb 5-1: config 0 descriptor?? [ 107.607239][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 107.643297][ T5421] device team_slave_0 entered promiscuous mode [ 107.649546][ T5421] device team_slave_1 entered promiscuous mode [ 107.661708][ T5421] device macvtap4 entered promiscuous mode [ 107.667562][ T5421] device team0 entered promiscuous mode [ 107.677218][ T5421] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 107.688936][ T5422] device team0 left promiscuous mode [ 107.694920][ T5422] device team_slave_0 left promiscuous mode [ 107.700937][ T5422] device team_slave_1 left promiscuous mode [ 107.722236][ T4378] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.925608][ T4378] usb 1-1: Using ep0 maxpacket: 8 [ 107.954146][ T4378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.974242][ T4378] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 107.984024][ T4378] usb 1-1: can't read configurations, error -71 [ 107.998783][ T5432] autofs4:pid:5432:autofs_fill_super: called with bogus options [ 108.153810][ T5437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.400'. [ 108.163002][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 108.512939][ T5443] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 108.539481][ T5443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.549379][ T5443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'. [ 108.717494][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 108.737383][ T5452] device team_slave_0 entered promiscuous mode [ 108.743638][ T5452] device team_slave_1 entered promiscuous mode [ 108.752894][ T5452] device macvtap4 entered promiscuous mode [ 108.759241][ T5452] device team0 entered promiscuous mode [ 108.766604][ T5452] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 108.776070][ T5455] device team0 left promiscuous mode [ 108.781992][ T5455] device team_slave_0 left promiscuous mode [ 108.787981][ T5455] device team_slave_1 left promiscuous mode [ 108.889492][ T5459] autofs4:pid:5459:autofs_fill_super: called with bogus options [ 108.990068][ T5464] loop0: detected capacity change from 0 to 256 [ 109.026688][ T5464] FAT-fs (loop0): Directory bread(block 64) failed [ 109.034061][ T5464] FAT-fs (loop0): Directory bread(block 65) failed [ 109.049336][ T5464] FAT-fs (loop0): Directory bread(block 66) failed [ 109.056731][ T5464] FAT-fs (loop0): Directory bread(block 67) failed [ 109.064237][ T5464] FAT-fs (loop0): Directory bread(block 68) failed [ 109.071268][ T5464] FAT-fs (loop0): Directory bread(block 69) failed [ 109.077949][ T5464] FAT-fs (loop0): Directory bread(block 70) failed [ 109.093736][ T5464] FAT-fs (loop0): Directory bread(block 71) failed [ 109.105942][ T5464] FAT-fs (loop0): Directory bread(block 72) failed [ 109.116523][ T5464] FAT-fs (loop0): Directory bread(block 73) failed [ 109.154132][ T5469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'. [ 109.163641][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 109.383941][ T7] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.414350][ T7] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 109.438602][ T7] asix: probe of 5-1:0.0 failed with error -71 [ 109.460187][ T7] usb 5-1: USB disconnect, device number 4 [ 109.596269][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 109.609464][ T5481] device team_slave_0 entered promiscuous mode [ 109.615767][ T5481] device team_slave_1 entered promiscuous mode [ 109.623005][ T5481] device macvtap5 entered promiscuous mode [ 109.628899][ T5481] device team0 entered promiscuous mode [ 109.636907][ T5481] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 109.644117][ T126] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.664061][ T5484] device team0 left promiscuous mode [ 109.670030][ T5484] device team_slave_0 left promiscuous mode [ 109.676041][ T5484] device team_slave_1 left promiscuous mode [ 109.709698][ T5477] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 109.740356][ T5477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.779638][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 109.830531][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 109.841265][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.862877][ T126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 109.870726][ T126] usb 1-1: can't read configurations, error -71 [ 109.880927][ T5494] autofs4:pid:5494:autofs_fill_super: called with bogus options [ 110.396213][ T5516] device team_slave_0 entered promiscuous mode [ 110.402438][ T5516] device team_slave_1 entered promiscuous mode [ 110.409289][ T5516] device macvtap5 entered promiscuous mode [ 110.415422][ T5516] device team0 entered promiscuous mode [ 110.422452][ T5516] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 110.448272][ T5516] device team0 left promiscuous mode [ 110.455089][ T5516] device team_slave_0 left promiscuous mode [ 110.461195][ T5516] device team_slave_1 left promiscuous mode [ 110.583950][ T5521] loop3: detected capacity change from 0 to 256 [ 110.602875][ T5521] exfat: Deprecated parameter 'namecase' [ 110.607430][ T5522] autofs4:pid:5522:autofs_fill_super: called with bogus options [ 110.643525][ T5521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 111.206952][ T5526] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 111.267070][ T5526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 111.329928][ T5549] device team_slave_0 entered promiscuous mode [ 111.336190][ T5549] device team_slave_1 entered promiscuous mode [ 111.340587][ T126] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.342855][ T5549] device macvtap5 entered promiscuous mode [ 111.355865][ T5549] device team0 entered promiscuous mode [ 111.362925][ T5549] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 111.373574][ T5552] device team0 left promiscuous mode [ 111.381230][ T5552] device team_slave_0 left promiscuous mode [ 111.387203][ T5552] device team_slave_1 left promiscuous mode [ 111.550654][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 111.560201][ T5556] autofs4:pid:5556:autofs_fill_super: called with bogus options [ 111.577680][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.604113][ T126] usb 5-1: config 4 interface 0 has no altsetting 0 [ 111.637369][ T126] usb 5-1: string descriptor 0 read error: -22 [ 111.647221][ T126] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 111.663747][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.699954][ T126] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 111.737443][ T126] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.750137][ T126] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 111.766559][ T126] usb 5-1: media controller created [ 111.792901][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.974001][ T5573] loop2: detected capacity change from 0 to 512 [ 111.997791][ T5573] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.456: casefold flag without casefold feature [ 112.013423][ T5573] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.456: couldn't read orphan inode 15 (err -117) [ 112.026101][ T5573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.082326][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 112.116779][ T126] usb 5-1: USB disconnect, device number 5 [ 112.229462][ T5581] device team_slave_0 entered promiscuous mode [ 112.235731][ T5581] device team_slave_1 entered promiscuous mode [ 112.256620][ T5581] device macvtap6 entered promiscuous mode [ 112.262800][ T5581] device team0 entered promiscuous mode [ 112.269899][ T5581] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 112.281816][ T5584] device team0 left promiscuous mode [ 112.287572][ T5584] device team_slave_0 left promiscuous mode [ 112.289058][ T5583] loop2: detected capacity change from 0 to 256 [ 112.293628][ T5584] device team_slave_1 left promiscuous mode [ 112.305370][ T5583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 112.325714][ T5583] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 112.535230][ T5590] autofs4:pid:5590:autofs_fill_super: called with bogus options [ 112.682674][ T5592] __nla_validate_parse: 10 callbacks suppressed [ 112.682690][ T5592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'. [ 112.853076][ T5599] loop4: detected capacity change from 0 to 2048 [ 112.897550][ T5599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.910934][ T5586] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 112.914143][ T5599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.467'. [ 112.948167][ T5586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.957703][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 112.966768][ T5586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 113.295932][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 113.446728][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 113.477157][ T5621] device team_slave_0 entered promiscuous mode [ 113.483428][ T5621] device team_slave_1 entered promiscuous mode [ 113.490112][ T5621] device macvtap6 entered promiscuous mode [ 113.496804][ T5621] device team0 entered promiscuous mode [ 113.506280][ T5621] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 113.521314][ T5626] device team0 left promiscuous mode [ 113.527856][ T5626] device team_slave_0 left promiscuous mode [ 113.533908][ T5626] device team_slave_1 left promiscuous mode [ 113.695448][ T5633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.479'. [ 113.890713][ T4378] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.953508][ T5645] loop4: detected capacity change from 0 to 128 [ 114.080702][ T4378] usb 2-1: Using ep0 maxpacket: 8 [ 114.088546][ T4378] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.110650][ T4378] usb 2-1: config 4 interface 0 has no altsetting 0 [ 114.126590][ T4378] usb 2-1: string descriptor 0 read error: -22 [ 114.137415][ T4378] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 114.155489][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.192462][ T4378] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 114.222088][ T4378] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.240779][ T4378] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 114.255681][ T4378] usb 2-1: media controller created [ 114.287316][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.586181][ T5650] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 114.623735][ T4378] usb 2-1: USB disconnect, device number 3 [ 114.694329][ T5655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.702650][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 114.716407][ T5659] device team_slave_0 entered promiscuous mode [ 114.722687][ T5659] device team_slave_1 entered promiscuous mode [ 114.729207][ T5659] device macvtap7 entered promiscuous mode [ 114.735090][ T5659] device team0 entered promiscuous mode [ 114.747184][ T5659] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 114.755014][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 114.763984][ T5661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 114.782175][ T5661] device veth11 entered promiscuous mode [ 114.790096][ T5663] device team0 left promiscuous mode [ 114.809905][ T5663] device team_slave_0 left promiscuous mode [ 114.815943][ T5663] device team_slave_1 left promiscuous mode [ 115.061935][ T5671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.245464][ T5679] loop1: detected capacity change from 0 to 1024 [ 115.258063][ T5679] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 115.268260][ T5679] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.285415][ T5679] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #3: block 3: comm syz.1.496: lblock 3 mapped to illegal pblock 3 (length 1) [ 115.303978][ T5679] Quota error (device loop1): write_blk: dquota write failed [ 115.312205][ T5679] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 115.322354][ T5679] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 115.332491][ T5679] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.496: Failed to acquire dquot type 0 [ 115.345559][ T5679] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 3: comm syz.1.496: lblock 3 mapped to illegal pblock 3 (length 1) [ 115.359723][ T5679] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 115.369707][ T5679] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.496: Failed to acquire dquot type 0 [ 115.382196][ T5679] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.496: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.398588][ T5679] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 3: comm syz.1.496: lblock 3 mapped to illegal pblock 3 (length 1) [ 115.400486][ T4327] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.421712][ T5679] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 115.432079][ T5679] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.496: Failed to acquire dquot type 0 [ 115.446461][ T5679] EXT4-fs (loop1): 1 orphan inode deleted [ 115.458002][ T5679] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.524978][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 115.614810][ T4327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.626775][ T4327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.636818][ T4327] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 115.647119][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.676975][ T4327] usb 5-1: config 0 descriptor?? [ 115.749602][ T5691] device team_slave_0 entered promiscuous mode [ 115.755955][ T5691] device team_slave_1 entered promiscuous mode [ 115.762755][ T5691] device macvtap7 entered promiscuous mode [ 115.768583][ T5691] device team0 entered promiscuous mode [ 115.776249][ T5691] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 115.792409][ T5691] device team0 left promiscuous mode [ 115.798081][ T5691] device team_slave_0 left promiscuous mode [ 115.804095][ T5691] device team_slave_1 left promiscuous mode [ 116.097678][ T4327] hid-led 0003:04D8:F372.0002: item fetching failed at offset 0/3 [ 116.127777][ T4327] hid-led: probe of 0003:04D8:F372.0002 failed with error -22 [ 116.235059][ T5695] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 116.263821][ T5695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.304801][ T7] usb 5-1: USB disconnect, device number 6 [ 116.314088][ T5695] device veth3 entered promiscuous mode [ 116.399977][ T5709] loop3: detected capacity change from 0 to 1024 [ 116.400519][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.621274][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 116.634367][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.649523][ T126] usb 1-1: config 4 interface 0 has no altsetting 0 [ 116.665931][ T126] usb 1-1: string descriptor 0 read error: -22 [ 116.676498][ T126] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 116.685770][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.709856][ T126] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 116.744192][ T126] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.749057][ T5718] loop2: detected capacity change from 0 to 512 [ 116.755515][ T126] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 116.768985][ T5718] EXT4-fs: Ignoring removed orlov option [ 116.775876][ T5718] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 116.783861][ T126] usb 1-1: media controller created [ 116.792730][ T5718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 116.804359][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.826420][ T5718] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.513: corrupted in-inode xattr [ 116.846266][ T5718] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.513: couldn't read orphan inode 15 (err -117) [ 116.866807][ T5718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.994046][ T5726] device team_slave_0 entered promiscuous mode [ 117.000331][ T5726] device team_slave_1 entered promiscuous mode [ 117.007140][ T5726] device macvtap3 entered promiscuous mode [ 117.009626][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 117.013139][ T5726] device team0 entered promiscuous mode [ 117.014301][ T5726] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 117.066536][ T5726] device team0 left promiscuous mode [ 117.085823][ T5726] device team_slave_0 left promiscuous mode [ 117.091877][ T5726] device team_slave_1 left promiscuous mode [ 117.127452][ T126] usb 1-1: USB disconnect, device number 8 [ 117.594549][ T5742] netlink: 'syz.4.522': attribute type 1 has an invalid length. [ 117.694571][ T5744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.714575][ T5742] __nla_validate_parse: 6 callbacks suppressed [ 117.714590][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 117.730160][ T5742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.522'. [ 117.752553][ T5742] device veth13 entered promiscuous mode [ 117.942774][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 117.961009][ T5757] device team_slave_0 entered promiscuous mode [ 117.967281][ T5757] device team_slave_1 entered promiscuous mode [ 117.975679][ T5757] device macvtap3 entered promiscuous mode [ 117.981930][ T5757] device team0 entered promiscuous mode [ 117.992093][ T5757] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 118.002951][ T5760] device team0 left promiscuous mode [ 118.025668][ T5760] device team_slave_0 left promiscuous mode [ 118.031735][ T5760] device team_slave_1 left promiscuous mode [ 118.109575][ T5762] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 118.116584][ T5762] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.139988][ T5762] vhci_hcd vhci_hcd.0: Device attached [ 118.160106][ T5763] vhci_hcd: connection closed [ 118.164178][ T4859] vhci_hcd: stop threads [ 118.181489][ T5766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.530'. [ 118.195851][ T4859] vhci_hcd: release socket [ 118.200339][ T4859] vhci_hcd: disconnect device [ 118.464308][ T5783] loop3: detected capacity change from 0 to 128 [ 118.637813][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.811733][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.827968][ T5794] device team_slave_0 entered promiscuous mode [ 118.834276][ T5794] device team_slave_1 entered promiscuous mode [ 118.840686][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 118.846282][ T5794] device macvtap4 entered promiscuous mode [ 118.852660][ T5794] device team0 entered promiscuous mode [ 118.859753][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.870074][ T5794] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 118.878215][ T26] usb 2-1: config 4 interface 0 has no altsetting 0 [ 118.887525][ T5795] device team0 left promiscuous mode [ 118.898268][ T5795] device team_slave_0 left promiscuous mode [ 118.904310][ T5795] device team_slave_1 left promiscuous mode [ 118.917846][ T26] usb 2-1: string descriptor 0 read error: -22 [ 118.928355][ T26] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 118.931201][ T5790] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 118.945212][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.985767][ T26] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 119.008329][ T5796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 119.017608][ T26] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.022422][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 119.038164][ T26] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 119.054230][ T5790] device veth11 entered promiscuous mode [ 119.058654][ T26] usb 2-1: media controller created [ 119.120931][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.230986][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 119.400364][ T5811] loop0: detected capacity change from 0 to 1764 [ 119.401414][ T26] usb 2-1: USB disconnect, device number 4 [ 119.451643][ T126] kernel write not supported for file /media2 (pid: 126 comm: kworker/0:2) [ 119.573486][ T5815] autofs4:pid:5815:autofs_fill_super: called with bogus options [ 119.798043][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 119.821861][ T5825] device team_slave_0 entered promiscuous mode [ 119.828201][ T5825] device team_slave_1 entered promiscuous mode [ 119.844940][ T5825] device macvtap6 entered promiscuous mode [ 119.857187][ T5825] device team0 entered promiscuous mode [ 119.878064][ T5825] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 119.888666][ T5829] device team0 left promiscuous mode [ 119.894817][ T5829] device team_slave_0 left promiscuous mode [ 119.900868][ T5829] device team_slave_1 left promiscuous mode [ 120.061494][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 120.296539][ T5828] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 120.356005][ T5842] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.363941][ T5844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.376089][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 120.436327][ T5828] device veth15 entered promiscuous mode [ 120.577402][ T5852] autofs4:pid:5852:autofs_fill_super: called with bogus options [ 120.855198][ T5864] device team_slave_0 entered promiscuous mode [ 120.861472][ T5864] device team_slave_1 entered promiscuous mode [ 120.888868][ T5864] device macvtap4 entered promiscuous mode [ 120.899998][ T5864] device team0 entered promiscuous mode [ 120.921531][ T5864] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 120.950277][ T5865] device team0 left promiscuous mode [ 120.956589][ T5865] device team_slave_0 left promiscuous mode [ 120.962613][ T5865] device team_slave_1 left promiscuous mode [ 121.080615][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.290946][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 121.308273][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.342835][ T26] usb 1-1: config 4 interface 0 has no altsetting 0 [ 121.390197][ T26] usb 1-1: string descriptor 0 read error: -22 [ 121.407220][ T26] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 121.428411][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.456765][ T26] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 121.479318][ T26] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.481503][ T5879] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 121.515479][ T26] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 121.550931][ T26] usb 1-1: media controller created [ 121.561127][ T5879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.579893][ T5879] device veth11 entered promiscuous mode [ 121.597291][ T5888] autofs4:pid:5888:autofs_fill_super: called with bogus options [ 121.623125][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.892034][ T26] usb 1-1: USB disconnect, device number 9 [ 122.204549][ T5908] device team_slave_0 entered promiscuous mode [ 122.210835][ T5908] device team_slave_1 entered promiscuous mode [ 122.222850][ T5908] device macvtap8 entered promiscuous mode [ 122.228692][ T5908] device team0 entered promiscuous mode [ 122.281459][ T5908] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 122.293157][ T5911] device team0 left promiscuous mode [ 122.306062][ T5911] device team_slave_0 left promiscuous mode [ 122.312091][ T5911] device team_slave_1 left promiscuous mode [ 122.317998][ T5914] loop4: detected capacity change from 0 to 256 [ 122.359367][ T5914] FAT-fs (loop4): Directory bread(block 64) failed [ 122.377823][ T5914] FAT-fs (loop4): Directory bread(block 65) failed [ 122.403391][ T5914] FAT-fs (loop4): Directory bread(block 66) failed [ 122.412181][ T5914] FAT-fs (loop4): Directory bread(block 67) failed [ 122.418805][ T5914] FAT-fs (loop4): Directory bread(block 68) failed [ 122.425809][ T5914] FAT-fs (loop4): Directory bread(block 69) failed [ 122.433448][ T5914] FAT-fs (loop4): Directory bread(block 70) failed [ 122.440190][ T5914] FAT-fs (loop4): Directory bread(block 71) failed [ 122.447377][ T5914] FAT-fs (loop4): Directory bread(block 72) failed [ 122.454337][ T5914] FAT-fs (loop4): Directory bread(block 73) failed [ 122.570582][ T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.774319][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 122.783095][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.803042][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.821976][ T26] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 122.838896][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.857557][ T26] usb 4-1: config 0 descriptor?? [ 123.014721][ T5924] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 123.070066][ T5924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 123.078956][ T5924] __nla_validate_parse: 5 callbacks suppressed [ 123.078972][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 123.110190][ T5924] device veth17 entered promiscuous mode [ 123.266227][ T5937] process 'syz.1.599' launched '/dev/fd/4' with NULL argv: empty string added [ 123.277567][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.330502][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.346100][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.363846][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.390625][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.408867][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.416476][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.430500][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.446146][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.456134][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.484026][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.511789][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.524770][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 123.531041][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.548907][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.555928][ T5943] device team_slave_0 entered promiscuous mode [ 123.562564][ T5943] device team_slave_1 entered promiscuous mode [ 123.562944][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.589810][ T5943] device macvtap9 entered promiscuous mode [ 123.593233][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.604380][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.606621][ T5943] device team0 entered promiscuous mode [ 123.616044][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.626639][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.628428][ T5943] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 123.634688][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.652797][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.660229][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.667959][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.675465][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.682923][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.690336][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.707465][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.715000][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.728113][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.735862][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.743682][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.751348][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.758769][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.766517][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.774443][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.782463][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.789890][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.797616][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.807306][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.807403][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.827472][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.836410][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.848724][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.856501][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.868985][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.877141][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.890061][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.897838][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.913329][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.923830][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.932192][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.939606][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.950175][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.958401][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.968727][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.976935][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.986780][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 123.994912][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.000499][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 124.005973][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.010367][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.016752][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.024814][ T7] usb 5-1: config 4 interface 0 has no altsetting 0 [ 124.037936][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.042251][ T7] usb 5-1: string descriptor 0 read error: -22 [ 124.045924][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.052407][ T7] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 124.059792][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.068709][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.087284][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.096000][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.106900][ T7] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 124.107201][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.118495][ T7] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.128038][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.133629][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 124.140238][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.147942][ T7] usb 5-1: media controller created [ 124.163805][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.174269][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.174288][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.190229][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.198096][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.205644][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.213231][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.221583][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.229008][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.236520][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.243972][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.252465][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.259894][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.267986][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.276496][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.283983][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.291458][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.298871][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.309805][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.317732][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.326663][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.334155][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.341617][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.349051][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.356512][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.363947][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.372119][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.379524][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.387339][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.394814][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.402256][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.409655][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.417117][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.425049][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.432524][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.439931][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.447377][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.454803][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.462266][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.469675][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.477257][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.484947][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.492428][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.499834][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.507274][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.514688][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.522150][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.538257][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.538366][ T7] usb 5-1: USB disconnect, device number 7 [ 124.545889][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.564474][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.572317][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.579818][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.587673][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.595267][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.602756][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.610168][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.617607][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.625080][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.633233][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.640696][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.648095][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.655547][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.663021][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.670497][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.677894][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.685360][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.692808][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.700221][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.707697][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.715224][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.722821][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.730868][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.738280][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.745741][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.753200][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.760663][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.768065][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.775509][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.782938][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.790479][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.797879][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.805332][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.812885][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.820286][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.827733][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.835920][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.843406][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.850869][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.858272][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.865721][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.873163][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.880624][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.888018][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.897720][ T26] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 124.913423][ T26] hid-generic 0003:0458:5012.0003: hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 124.933146][ T5946] device team0 left promiscuous mode [ 124.939704][ T5946] device team_slave_0 left promiscuous mode [ 124.945747][ T5946] device team_slave_1 left promiscuous mode [ 125.103259][ T5960] fuse: Bad value for 'fd' [ 125.310627][ T26] usb 4-1: USB disconnect, device number 7 [ 125.632566][ T5972] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 125.658449][ T5972] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.667327][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 125.687515][ T5972] device veth13 entered promiscuous mode [ 126.026076][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 126.041967][ T5988] device team_slave_0 entered promiscuous mode [ 126.048267][ T5988] device team_slave_1 entered promiscuous mode [ 126.060829][ T5988] device macvtap8 entered promiscuous mode [ 126.067903][ T5988] device team0 entered promiscuous mode [ 126.075204][ T5988] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 126.156337][ T5988] device team0 left promiscuous mode [ 126.169586][ T5988] device team_slave_0 left promiscuous mode [ 126.175812][ T5988] device team_slave_1 left promiscuous mode [ 126.377583][ T6000] kernel read not supported for file /GPL (pid: 6000 comm: syz.2.624) [ 126.400561][ T27] audit: type=1800 audit(1757532736.433:31): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.624" name="GPL" dev="mqueue" ino=42169 res=0 errno=0 [ 126.420712][ T4378] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.434784][ T6002] fuse: Bad value for 'fd' [ 126.610545][ T4378] usb 1-1: Using ep0 maxpacket: 8 [ 126.617999][ T4378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.642000][ T4378] usb 1-1: config 4 interface 0 has no altsetting 0 [ 126.661906][ T4378] usb 1-1: string descriptor 0 read error: -22 [ 126.674441][ T4378] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 126.694122][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.717938][ T4378] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 126.744324][ T4378] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.773619][ T4378] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 126.785309][ T6005] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 126.790568][ T4378] usb 1-1: media controller created [ 126.814839][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.842139][ T6005] 8021q: adding VLAN 0 to HW filter on device bond7 [ 126.852932][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 126.876406][ T6005] device veth19 entered promiscuous mode [ 127.110745][ T26] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 127.146212][ T4378] usb 1-1: USB disconnect, device number 10 [ 127.235310][ T6025] loop1: detected capacity change from 0 to 8 [ 127.314792][ T26] usb 3-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xCB, skipping [ 127.416896][ T26] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 127.430527][ T26] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 127.439529][ T26] usb 3-1: Manufacturer: syz [ 127.447444][ T26] usb 3-1: SerialNumber: syz [ 127.477233][ T6011] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.705613][ T26] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 127.714190][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 127.743318][ T26] usb 3-1: USB disconnect, device number 2 [ 127.779202][ T6031] device team_slave_0 entered promiscuous mode [ 127.785507][ T6031] device team_slave_1 entered promiscuous mode [ 127.798739][ T6031] device macvtap10 entered promiscuous mode [ 127.805556][ T6031] device team0 entered promiscuous mode [ 127.814987][ T6031] 8021q: adding VLAN 0 to HW filter on device macvtap10 [ 127.827328][ T6033] device team0 left promiscuous mode [ 127.834445][ T6033] device team_slave_0 left promiscuous mode [ 127.840473][ T6033] device team_slave_1 left promiscuous mode [ 128.048716][ T6045] fuse: Bad value for 'fd' [ 128.382601][ T6043] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 128.416424][ T6043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.432096][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 128.449418][ T6043] device veth5 entered promiscuous mode [ 128.829237][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 128.854201][ T6067] device team_slave_0 entered promiscuous mode [ 128.860502][ T6067] device team_slave_1 entered promiscuous mode [ 128.884781][ T6067] device macvtap11 entered promiscuous mode [ 128.894413][ T6067] device team0 entered promiscuous mode [ 128.903498][ T6067] 8021q: adding VLAN 0 to HW filter on device macvtap11 [ 128.922046][ T6068] device team0 left promiscuous mode [ 128.928368][ T6068] device team_slave_0 left promiscuous mode [ 128.934418][ T6068] device team_slave_1 left promiscuous mode [ 129.050826][ T4378] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.265150][ T4378] usb 4-1: Using ep0 maxpacket: 8 [ 129.295047][ T4378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.314656][ T4378] usb 4-1: config 4 interface 0 has no altsetting 0 [ 129.340768][ T4378] usb 4-1: string descriptor 0 read error: -22 [ 129.364371][ T4378] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 129.383744][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.430453][ T4378] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 129.471836][ T4378] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.483379][ T4378] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 129.500603][ T4378] usb 4-1: media controller created [ 129.527282][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.591795][ T6086] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 129.621482][ T6086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.631084][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 129.657508][ T6086] device veth13 entered promiscuous mode [ 129.765011][ T6099] loop2: detected capacity change from 0 to 2048 [ 129.792195][ T6099] NILFS (loop2): invalid segment: Magic number mismatch [ 129.799556][ T6099] NILFS (loop2): trying rollback from an earlier position [ 129.826598][ T6099] NILFS (loop2): recovery complete [ 129.857290][ T4378] usb 4-1: USB disconnect, device number 8 [ 129.882562][ T6100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.923403][ T22] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 130.112355][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.145468][ T22] usb 5-1: config 0 has no interfaces? [ 130.151469][ T22] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.176414][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.198122][ T22] usb 5-1: config 0 descriptor?? [ 130.291905][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 130.339512][ T6109] device team_slave_0 entered promiscuous mode [ 130.345804][ T6109] device team_slave_1 entered promiscuous mode [ 130.352822][ T6109] device macvtap5 entered promiscuous mode [ 130.358709][ T6109] device team0 entered promiscuous mode [ 130.388072][ T6109] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 130.414360][ T4378] usb 5-1: USB disconnect, device number 8 [ 130.414385][ T6114] device team0 left promiscuous mode [ 130.414710][ T6114] device team_slave_0 left promiscuous mode [ 130.431785][ T6114] device team_slave_1 left promiscuous mode [ 130.568898][ T6122] netlink: 68 bytes leftover after parsing attributes in process `syz.3.672'. [ 130.661228][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.766918][ T6124] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 130.790222][ T6124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 130.800330][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 130.817211][ T6124] device veth15 entered promiscuous mode [ 130.890591][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 130.909501][ T22] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 130.918860][ T22] usb 2-1: config 0 has no interface number 0 [ 130.940204][ T22] usb 2-1: config 0 interface 12 has no altsetting 0 [ 130.958972][ T22] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 130.968282][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.977063][ T22] usb 2-1: Product: syz [ 130.982194][ T22] usb 2-1: Manufacturer: syz [ 130.987122][ T22] usb 2-1: SerialNumber: syz [ 130.994229][ T22] usb 2-1: config 0 descriptor?? [ 131.480596][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.537532][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 131.559653][ T6151] device team_slave_0 entered promiscuous mode [ 131.566283][ T6151] device team_slave_1 entered promiscuous mode [ 131.572986][ T6151] device macvtap9 entered promiscuous mode [ 131.578840][ T6151] device team0 entered promiscuous mode [ 131.586092][ T6151] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 131.596724][ T6152] device team0 left promiscuous mode [ 131.602558][ T6152] device team_slave_0 left promiscuous mode [ 131.608544][ T6152] device team_slave_1 left promiscuous mode [ 131.680569][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 131.705505][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.724420][ T7] usb 1-1: config 4 interface 0 has no altsetting 0 [ 131.743212][ T7] usb 1-1: string descriptor 0 read error: -22 [ 131.749492][ T7] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 131.766414][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.790215][ T7] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 131.790612][ T6156] netlink: 68 bytes leftover after parsing attributes in process `syz.3.686'. [ 131.807950][ T7] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.818829][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 131.826594][ T7] usb 1-1: media controller created [ 131.845981][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.197074][ T7] usb 1-1: USB disconnect, device number 11 [ 132.228533][ T6158] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 132.242092][ T22] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 132.249645][ T22] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 132.266022][ T22] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 132.274555][ T22] f81534: probe of 2-1:0.12 failed with error -71 [ 132.304969][ T22] usb 2-1: USB disconnect, device number 5 [ 132.326008][ T6158] 8021q: adding VLAN 0 to HW filter on device bond6 [ 132.334940][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 132.573265][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.579595][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.602965][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 132.617912][ T6179] device team_slave_0 entered promiscuous mode [ 132.624232][ T6179] device team_slave_1 entered promiscuous mode [ 132.631004][ T6179] device macvtap10 entered promiscuous mode [ 132.637037][ T6179] device team0 entered promiscuous mode [ 132.644717][ T6179] 8021q: adding VLAN 0 to HW filter on device macvtap10 [ 132.679819][ T6180] device team0 left promiscuous mode [ 132.685872][ T6180] device team_slave_0 left promiscuous mode [ 132.692129][ T6180] device team_slave_1 left promiscuous mode [ 133.039297][ T6191] loop1: detected capacity change from 0 to 512 [ 133.052984][ T6191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.072901][ T6191] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 133.085960][ T6191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 133.096906][ T6191] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.103825][ T6191] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 133.113670][ T6191] EXT4-fs warning (device loop1): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 133.134000][ T6191] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 133.145468][ T6191] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.702: bg 0: block 40: padding at end of block bitmap is not set [ 133.168438][ T6191] EXT4-fs (loop1): Remounting filesystem read-only [ 133.175832][ T6191] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 133.190013][ T6191] EXT4-fs (loop1): Remounting filesystem read-only [ 133.198192][ T6191] EXT4-fs (loop1): 1 truncate cleaned up [ 133.210698][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.293451][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 133.320718][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.510484][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 133.517629][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.545898][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.580304][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.605336][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.620210][ T14] usb 1-1: config 0 descriptor?? [ 133.660139][ T6206] __nla_validate_parse: 1 callbacks suppressed [ 133.660154][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 133.685180][ T6206] device team_slave_0 entered promiscuous mode [ 133.691522][ T6206] device team_slave_1 entered promiscuous mode [ 133.698238][ T6206] device macvtap5 entered promiscuous mode [ 133.705137][ T6206] device team0 entered promiscuous mode [ 133.713906][ T6206] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 133.732688][ T6209] device team0 left promiscuous mode [ 133.745297][ T6209] device team_slave_0 left promiscuous mode [ 133.751384][ T6209] device team_slave_1 left promiscuous mode [ 133.841073][ T6190] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 133.914151][ T6190] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 133.952182][ T6190] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 134.026269][ T6217] device gretap1 entered promiscuous mode [ 134.036543][ T6217] bond6: (slave gretap1): making interface the new active one [ 134.045839][ T6217] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 134.058425][ T6204] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 134.087373][ T6220] netlink: 68 bytes leftover after parsing attributes in process `syz.3.713'. [ 134.101028][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.105440][ T6190] device macvlan2 entered promiscuous mode [ 134.115066][ T6190] device bond6 entered promiscuous mode [ 134.123841][ T6190] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.135135][ T6190] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 134.149075][ T6190] device bond6 left promiscuous mode [ 134.171544][ T6219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.179074][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 134.223339][ T126] usb 1-1: USB disconnect, device number 12 [ 134.300559][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 134.307785][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.327444][ T26] usb 3-1: config 4 interface 0 has no altsetting 0 [ 134.338726][ T26] usb 3-1: string descriptor 0 read error: -22 [ 134.345411][ T26] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 134.356445][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.398300][ T26] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 134.410312][ T26] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.421416][ T26] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 134.428918][ T26] usb 3-1: media controller created [ 134.446247][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.930306][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 134.948127][ T6240] device team_slave_0 entered promiscuous mode [ 134.954443][ T6240] device team_slave_1 entered promiscuous mode [ 134.966830][ T6240] device macvtap7 entered promiscuous mode [ 134.974730][ T6240] device team0 entered promiscuous mode [ 134.995810][ T6240] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 135.015464][ T6243] device team0 left promiscuous mode [ 135.031041][ T6243] device team_slave_0 left promiscuous mode [ 135.037184][ T6243] device team_slave_1 left promiscuous mode [ 135.155877][ T6247] netlink: 68 bytes leftover after parsing attributes in process `syz.3.725'. [ 135.219862][ T6251] loop0: detected capacity change from 0 to 512 [ 135.272113][ T6251] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.306757][ T6251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.366509][ T6251] EXT4-fs (loop0): 1 truncate cleaned up [ 135.380664][ T6251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.464388][ T6251] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:300: inode #15: comm syz.0.726: verity file has no extents [ 135.525515][ T6251] EXT4-fs (loop0): Remounting filesystem read-only [ 135.538374][ T6251] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 135.568490][ T6255] netlink: 'syz.4.727': attribute type 1 has an invalid length. [ 135.615878][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 135.673786][ T6260] 8021q: adding VLAN 0 to HW filter on device bond8 [ 135.698225][ T26] usb 3-1: USB disconnect, device number 3 [ 135.776017][ T6267] fuse: Bad value for 'fd' [ 135.778309][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 135.835002][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.040509][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 136.052157][ T126] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 136.065025][ T126] usb 2-1: config 0 has no interface number 0 [ 136.071810][ T126] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 136.105236][ T126] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 136.114716][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.125695][ T126] usb 2-1: Product: syz [ 136.129910][ T126] usb 2-1: Manufacturer: syz [ 136.135080][ T126] usb 2-1: SerialNumber: syz [ 136.143756][ T126] usb 2-1: config 0 descriptor?? [ 136.253210][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 136.266156][ T6278] device team_slave_0 entered promiscuous mode [ 136.272413][ T6278] device team_slave_1 entered promiscuous mode [ 136.279075][ T6278] device macvtap6 entered promiscuous mode [ 136.285132][ T6278] device team0 entered promiscuous mode [ 136.292524][ T6278] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 136.304552][ T6278] device team0 left promiscuous mode [ 136.310325][ T6278] device team_slave_0 left promiscuous mode [ 136.316360][ T6278] device team_slave_1 left promiscuous mode [ 136.429846][ T6280] netlink: 68 bytes leftover after parsing attributes in process `syz.2.739'. [ 136.465255][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.617418][ T6289] loop0: detected capacity change from 0 to 256 [ 136.665608][ T6289] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 136.671029][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 136.701061][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 136.730879][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.759919][ T126] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input5 [ 136.775879][ T14] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 136.798836][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.813341][ T14] usb 4-1: config 0 descriptor?? [ 136.967405][ T22] usb 2-1: USB disconnect, device number 6 [ 137.089175][ T6301] fuse: Bad value for 'fd' [ 137.227500][ T6297] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 137.251951][ T14] playstation 0003:054C:0DF2.0004: item fetching failed at offset 1/5 [ 137.265028][ T14] playstation 0003:054C:0DF2.0004: Parse failed [ 137.274041][ T6297] 8021q: adding VLAN 0 to HW filter on device bond9 [ 137.280809][ T14] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 137.291086][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.455191][ T26] usb 4-1: USB disconnect, device number 9 [ 137.470711][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 137.478219][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.514692][ T126] usb 3-1: config 4 interface 0 has no altsetting 0 [ 137.545121][ T126] usb 3-1: string descriptor 0 read error: -22 [ 137.562457][ T126] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 137.576705][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 137.587114][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.600201][ T6306] device team_slave_0 entered promiscuous mode [ 137.606518][ T6306] device team_slave_1 entered promiscuous mode [ 137.617796][ T126] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 137.619180][ T6310] loop1: detected capacity change from 0 to 512 [ 137.635526][ T126] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.638277][ T6306] device macvtap6 entered promiscuous mode [ 137.656309][ T126] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 137.658048][ T6310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.674355][ T6306] device team0 entered promiscuous mode [ 137.682558][ T6306] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 137.717293][ T126] usb 3-1: media controller created [ 137.731955][ T6310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.741697][ T6310] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.766021][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.795202][ T6311] device team0 left promiscuous mode [ 137.801064][ T6311] device team_slave_0 left promiscuous mode [ 137.807094][ T6311] device team_slave_1 left promiscuous mode [ 137.825402][ T6315] netlink: 68 bytes leftover after parsing attributes in process `syz.0.752'. [ 137.918014][ T6316] EXT4-fs (loop1): shut down requested (1) [ 138.092177][ T4282] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 138.100995][ T4282] Bluetooth: hci0: Injecting HCI hardware error event [ 138.110348][ T4282] Bluetooth: hci0: hardware error 0x00 [ 138.129112][ T6326] loop0: detected capacity change from 0 to 1024 [ 138.455241][ T6335] fuse: Bad value for 'fd' [ 138.685652][ T6336] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 138.719138][ T6336] 8021q: adding VLAN 0 to HW filter on device bond7 [ 138.887621][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 138.894729][ T126] usb 3-1: USB disconnect, device number 4 [ 138.955064][ T6341] device team_slave_0 entered promiscuous mode [ 138.961390][ T6341] device team_slave_1 entered promiscuous mode [ 139.008189][ T6341] device macvtap8 entered promiscuous mode [ 139.023951][ T6341] device team0 entered promiscuous mode [ 139.031754][ T6341] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 139.041486][ T6342] device team0 left promiscuous mode [ 139.047242][ T6342] device team_slave_0 left promiscuous mode [ 139.053280][ T6342] device team_slave_1 left promiscuous mode [ 139.119534][ T6348] netlink: 68 bytes leftover after parsing attributes in process `syz.4.765'. [ 139.480606][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.670469][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 139.677694][ T14] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.695410][ T14] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.714160][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.733287][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.753098][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.773954][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.803392][ T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.819687][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.843382][ T14] usb 4-1: config 0 descriptor?? [ 139.876575][ T6371] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 139.910857][ T6371] 8021q: adding VLAN 0 to HW filter on device bond10 [ 140.070058][ T14] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.097783][ T6377] netlink: 68 bytes leftover after parsing attributes in process `syz.4.777'. [ 140.113749][ T14] usb 4-1: USB disconnect, device number 10 [ 140.132599][ T14] usblp0: removed [ 140.170758][ T4282] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.193306][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 140.207214][ T6381] device team_slave_0 entered promiscuous mode [ 140.213561][ T6381] device team_slave_1 entered promiscuous mode [ 140.219824][ T6381] device macvtap7 entered promiscuous mode [ 140.225700][ T6381] device team0 entered promiscuous mode [ 140.232837][ T6381] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 140.243936][ T6381] device team0 left promiscuous mode [ 140.249496][ T6381] device team_slave_0 left promiscuous mode [ 140.255485][ T6381] device team_slave_1 left promiscuous mode [ 140.386370][ T6383] loop4: detected capacity change from 0 to 4096 [ 140.408050][ T6383] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 140.417415][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.463134][ T6383] ntfs3: loop4: ino=1b, "file0" directory corrupted [ 140.610618][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 140.618587][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.625062][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.631168][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.653892][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 140.660634][ T4378] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.670361][ T26] usb 3-1: New USB device found, idVendor=1f6b, idProduct=0101, bcdDevice= 0.40 [ 140.679742][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.689902][ T26] usb 3-1: Product: syz [ 140.694822][ T26] usb 3-1: Manufacturer: syz [ 140.699852][ T26] usb 3-1: SerialNumber: syz [ 140.820558][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 140.832490][ T14] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 140.841961][ T14] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 140.850641][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 140.859781][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.860461][ T4378] usb 1-1: Using ep0 maxpacket: 16 [ 140.869519][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.884832][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.897893][ T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 140.907971][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.936238][ T14] usb 4-1: config 0 descriptor?? [ 140.945517][ T4378] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 140.950622][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.959568][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.970806][ T4378] usb 1-1: Product: syz [ 140.975021][ T4378] usb 1-1: Manufacturer: syz [ 140.979852][ T4378] usb 1-1: SerialNumber: syz [ 140.992883][ T4378] usb 1-1: config 0 descriptor?? [ 141.014033][ T1042] block nbd2: Attempted send on invalid socket [ 141.020812][ T1042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 141.151637][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 141.162471][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.172379][ T7] usb 5-1: config 4 interface 0 has no altsetting 0 [ 141.183339][ T7] usb 5-1: string descriptor 0 read error: -22 [ 141.189903][ T6379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.196350][ T6379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.204512][ T7] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 141.209357][ T6385] loop0: detected capacity change from 0 to 64 [ 141.213674][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.219435][ T7] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 141.241743][ T7] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.254869][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 141.262342][ T7] usb 5-1: media controller created [ 141.299062][ T4378] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -71 [ 141.306562][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.332555][ T4378] usb 1-1: USB disconnect, device number 13 [ 141.348190][ T14] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.387338][ T14] usb 4-1: USB disconnect, device number 11 [ 141.395530][ T14] usblp0: removed [ 141.406916][ T6379] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 141.415169][ T6379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.421751][ T6379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.436947][ T6379] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 141.444550][ T6379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.450932][ T6379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.482399][ T6379] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 141.491861][ T6379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.497869][ T6379] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.532627][ T6379] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 141.555835][ T26] usb 3-1: 0:66 : does not exist [ 141.564656][ T26] usb 3-1: unit 4 not found! [ 141.668104][ T26] usb 3-1: USB disconnect, device number 5 [ 141.916148][ T6400] loop1: detected capacity change from 0 to 4096 [ 141.942436][ T6400] ntfs3: Unknown parameter './file0' [ 142.241932][ T6409] netlink: 68 bytes leftover after parsing attributes in process `syz.2.790'. [ 142.415694][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 142.452620][ T6411] device team_slave_0 entered promiscuous mode [ 142.458884][ T6411] device team_slave_1 entered promiscuous mode [ 142.484449][ T6411] device macvtap12 entered promiscuous mode [ 142.494906][ T6411] device team0 entered promiscuous mode [ 142.511550][ T6411] 8021q: adding VLAN 0 to HW filter on device macvtap12 [ 142.521828][ T6414] device team0 left promiscuous mode [ 142.527572][ T6414] device team_slave_0 left promiscuous mode [ 142.533601][ T6414] device team_slave_1 left promiscuous mode [ 142.546636][ T6404] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 142.576326][ T7] usb 5-1: USB disconnect, device number 9 [ 142.646351][ T6415] 8021q: adding VLAN 0 to HW filter on device bond7 [ 142.885265][ T6426] loop0: detected capacity change from 0 to 128 [ 143.130755][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.201338][ T6433] loop0: detected capacity change from 0 to 4096 [ 143.283982][ T6433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.318270][ T6443] netlink: set zone limit has 8 unknown bytes [ 143.383006][ T6445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.803'. [ 143.391733][ T6433] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.0.798: bad entry in directory: inode out of bounds - offset=12, inode=256, rec_len=12, size=4096 fake=1 [ 143.450750][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.460066][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.508816][ T6433] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 143.526219][ T6433] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.798: Deleting old file: nlink 4, error=-117 [ 143.530628][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.583791][ T6433] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.798: corrupted inode contents [ 143.601771][ T6433] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #15: comm syz.0.798: mark_inode_dirty error [ 143.647768][ T6433] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.798: corrupted inode contents [ 143.664532][ T6433] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.798: mark_inode_dirty error [ 143.698792][ T6433] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.798: corrupted inode contents [ 143.770705][ T6433] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.798: mark_inode_dirty error [ 143.819490][ T6433] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.798: corrupted inode contents [ 143.877874][ T6433] EXT4-fs error (device loop0): ext4_truncate:4312: inode #15: comm syz.0.798: mark_inode_dirty error [ 143.978523][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 144.002998][ T6455] device macvtap8 entered promiscuous mode [ 144.089844][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 144.184881][ T6454] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 144.329569][ T6460] loop4: detected capacity change from 0 to 64 [ 144.354487][ T6454] 8021q: adding VLAN 0 to HW filter on device bond8 [ 144.399094][ T6460] hfs: get root inode failed [ 144.414320][ T6464] loop0: detected capacity change from 0 to 1024 [ 144.653365][ T9] hfsplus: b-tree write err: -5, ino 4 [ 144.740530][ T126] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.913181][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 144.930717][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 144.938505][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.938721][ T6481] device macvtap9 entered promiscuous mode [ 144.978370][ T6484] netlink: 68 bytes leftover after parsing attributes in process `syz.2.817'. [ 144.987938][ T126] usb 2-1: config 4 interface 0 has no altsetting 0 [ 145.014992][ T126] usb 2-1: string descriptor 0 read error: -22 [ 145.030595][ T126] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 145.039713][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.097699][ T126] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 145.143136][ T126] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.155538][ T126] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 145.170551][ T126] usb 2-1: media controller created [ 145.192845][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.217863][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 145.266170][ T6495] loop4: detected capacity change from 0 to 512 [ 145.329553][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.824: iget: bad i_size value: 38620345925642 [ 145.353705][ T6468] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 145.365409][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.824: couldn't read orphan inode 15 (err -117) [ 145.424796][ T6495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.540746][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 145.546896][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 145.579767][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 145.585733][ T126] usb 2-1: USB disconnect, device number 7 [ 145.594183][ T6502] [ 145.596542][ T6502] ====================================================== [ 145.603566][ T6502] WARNING: possible circular locking dependency detected [ 145.610604][ T6502] syzkaller #0 Not tainted [ 145.615024][ T6502] ------------------------------------------------------ [ 145.622052][ T6502] syz.2.825/6502 is trying to acquire lock: [ 145.627992][ T6502] ffff88802382c1b0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 145.639548][ T6502] [ 145.639548][ T6502] but task is already holding lock: [ 145.646928][ T6502] ffff88807c4488d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 145.656973][ T6502] [ 145.656973][ T6502] which lock already depends on the new lock. [ 145.656973][ T6502] [ 145.667392][ T6502] [ 145.667392][ T6502] the existing dependency chain (in reverse order) is: [ 145.676421][ T6502] [ 145.676421][ T6502] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 145.684034][ T6502] down_read_killable+0x4c/0x340 [ 145.689506][ T6502] mmap_read_lock_killable+0x1d/0x60 [ 145.695327][ T6502] lock_mm_and_find_vma+0x2b1/0x2f0 [ 145.701046][ T6502] do_user_addr_fault+0x2db/0xb10 [ 145.706593][ T6502] exc_page_fault+0x60/0x100 [ 145.711793][ T6502] asm_exc_page_fault+0x22/0x30 [ 145.717176][ T6502] fault_in_readable+0x13e/0x1f0 [ 145.722663][ T6502] fault_in_iov_iter_readable+0xbb/0x2e0 [ 145.728820][ T6502] generic_perform_write+0x1d2/0x560 [ 145.734625][ T6502] __generic_file_write_iter+0x172/0x430 [ 145.740777][ T6502] generic_file_write_iter+0xab/0x2e0 [ 145.746664][ T6502] vfs_write+0x44c/0x960 [ 145.751426][ T6502] ksys_write+0x143/0x240 [ 145.756273][ T6502] do_syscall_64+0x4c/0xa0 [ 145.761201][ T6502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.767630][ T6502] [ 145.767630][ T6502] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 145.776321][ T6502] __lock_acquire+0x2cf8/0x7c50 [ 145.781696][ T6502] lock_acquire+0x1b4/0x490 [ 145.786713][ T6502] down_write+0x36/0x60 [ 145.791380][ T6502] process_measurement+0x33c/0x1a10 [ 145.797099][ T6502] ima_file_mmap+0x104/0x150 [ 145.802208][ T6502] __se_sys_remap_file_pages+0x53e/0x770 [ 145.808436][ T6502] do_syscall_64+0x4c/0xa0 [ 145.813381][ T6502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.819903][ T6502] [ 145.819903][ T6502] other info that might help us debug this: [ 145.819903][ T6502] [ 145.830222][ T6502] Possible unsafe locking scenario: [ 145.830222][ T6502] [ 145.837670][ T6502] CPU0 CPU1 [ 145.843026][ T6502] ---- ---- [ 145.848382][ T6502] lock(&mm->mmap_lock); [ 145.852704][ T6502] lock(&sb->s_type->i_mutex_key#12); [ 145.860680][ T6502] lock(&mm->mmap_lock); [ 145.867530][ T6502] lock(&sb->s_type->i_mutex_key#12); [ 145.872992][ T6502] [ 145.872992][ T6502] *** DEADLOCK *** [ 145.872992][ T6502] [ 145.881129][ T6502] 1 lock held by syz.2.825/6502: [ 145.886050][ T6502] #0: ffff88807c4488d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 145.896519][ T6502] [ 145.896519][ T6502] stack backtrace: [ 145.902412][ T6502] CPU: 1 PID: 6502 Comm: syz.2.825 Not tainted syzkaller #0 [ 145.909721][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.919783][ T6502] Call Trace: [ 145.923057][ T6502] [ 145.925999][ T6502] dump_stack_lvl+0x168/0x22e [ 145.930669][ T6502] ? load_image+0x3b0/0x3b0 [ 145.935166][ T6502] ? show_regs_print_info+0x12/0x12 [ 145.940355][ T6502] ? print_circular_bug+0x12b/0x1a0 [ 145.945553][ T6502] check_noncircular+0x274/0x310 [ 145.950511][ T6502] ? add_chain_block+0x940/0x940 [ 145.955450][ T6502] ? lockdep_lock+0xdc/0x1e0 [ 145.960056][ T6502] ? _find_first_zero_bit+0xcf/0x100 [ 145.965341][ T6502] __lock_acquire+0x2cf8/0x7c50 [ 145.970196][ T6502] ? ima_match_policy+0x104/0x2100 [ 145.975307][ T6502] ? verify_lock_unused+0x140/0x140 [ 145.980502][ T6502] ? ima_match_policy+0x207a/0x2100 [ 145.985700][ T6502] ? __schedule+0x10ba/0x40b0 [ 145.990377][ T6502] lock_acquire+0x1b4/0x490 [ 145.994877][ T6502] ? process_measurement+0x33c/0x1a10 [ 146.000252][ T6502] ? __might_sleep+0xd0/0xd0 [ 146.004839][ T6502] ? __schedule+0x10f4/0x40b0 [ 146.009519][ T6502] ? read_lock_is_recursive+0x10/0x10 [ 146.014889][ T6502] ? ima_get_action+0x71/0xa0 [ 146.019656][ T6502] down_write+0x36/0x60 [ 146.023805][ T6502] ? process_measurement+0x33c/0x1a10 [ 146.029204][ T6502] process_measurement+0x33c/0x1a10 [ 146.034421][ T6502] ? ima_file_mmap+0x150/0x150 [ 146.039188][ T6502] ? aa_file_perm+0x117/0xec0 [ 146.043870][ T6502] ? mtree_load+0xeb/0xa40 [ 146.048304][ T6502] ? mtree_load+0x90a/0xa40 [ 146.052826][ T6502] ? aa_get_current_label+0x110/0x1d0 [ 146.058203][ T6502] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 146.064367][ T6502] ima_file_mmap+0x104/0x150 [ 146.068955][ T6502] ? ima_file_free+0x3e0/0x3e0 [ 146.073712][ T6502] ? common_file_perm+0x171/0x1c0 [ 146.078735][ T6502] ? bpf_lsm_mmap_file+0x5/0x10 [ 146.083580][ T6502] ? security_mmap_file+0x11b/0x180 [ 146.088774][ T6502] __se_sys_remap_file_pages+0x53e/0x770 [ 146.094403][ T6502] ? __se_sys_futex+0x14a/0x440 [ 146.099252][ T6502] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 146.104973][ T6502] ? lock_chain_count+0x20/0x20 [ 146.109856][ T6502] ? lockdep_hardirqs_on+0x94/0x140 [ 146.115065][ T6502] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 146.120778][ T6502] do_syscall_64+0x4c/0xa0 [ 146.125187][ T6502] ? clear_bhb_loop+0x60/0xb0 [ 146.129858][ T6502] ? clear_bhb_loop+0x60/0xb0 [ 146.134527][ T6502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.140420][ T6502] RIP: 0033:0x7f55e6d8eba9 [ 146.144833][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.164452][ T6502] RSP: 002b:00007f55e7d0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 146.172869][ T6502] RAX: ffffffffffffffda RBX: 00007f55e6fd5fa0 RCX: 00007f55e6d8eba9 [ 146.180829][ T6502] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 000020000013e000 [ 146.188786][ T6502] RBP: 00007f55e6e11e19 R08: 0000000000000001 R09: 0000000000000000 [ 146.196747][ T6502] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 146.204704][ T6502] R13: 00007f55e6fd6038 R14: 00007f55e6fd5fa0 R15: 00007fff904b7e28 [ 146.212670][ T6502] [ 146.216624][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 146.310236][ T6503] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 146.336366][ T6503] 8021q: adding VLAN 0 to HW filter on device bond8