last executing test programs: 3m46.930774355s ago: executing program 1 (id=422): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000140)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x4, 0x67b77bc, "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"}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 3m46.489526765s ago: executing program 1 (id=424): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x207fff) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30102, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002000)="f3", 0x1}], 0x1}, 0x8801) 3m45.352920636s ago: executing program 1 (id=436): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 3m44.148203239s ago: executing program 1 (id=444): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x927c408517621174) 3m43.672765315s ago: executing program 1 (id=449): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 3m43.276382101s ago: executing program 1 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 3m28.056129443s ago: executing program 32 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m30.642244367s ago: executing program 0 (id=932): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) pselect6(0x40, &(0x7f0000003800)={0x3, 0x6, 0x8, 0x1, 0x4, 0x1, 0x5, 0x7}, 0x0, &(0x7f0000003880)={0x9, 0x3, 0xfffffffffffffffe, 0x8, 0xfffffffffffffc00, 0x8000000000000000, 0x0, 0x5}, &(0x7f00000038c0)={0x0, 0x989680}, 0x0) 2m30.139764882s ago: executing program 0 (id=935): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0xa}) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 2m29.236722867s ago: executing program 0 (id=941): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m26.987365103s ago: executing program 0 (id=959): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000300)={[{@test_dummy_encryption_v1}, {@jqfmt_vfsv0}, {@abort}, {}, {@mblk_io_submit}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 2m26.191331308s ago: executing program 0 (id=964): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x600, 0x30, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{0x580, 0x1, [@m_skbmod={0x70, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x800, 0x9a85, 0x6, 0xd, 0x54}, 0xd}}]}, {0x21, 0x6, "90e3b7d8879cea2f8ba55766497a380a1c32c8afebdee9564440e8e978"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xa8, 0x6, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5eb6, 0xa, 0x20000000, 0x9, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x45, 0x6, "3ee43d0e72ad4c341ddf30e8d07bf7743e064dd3b377c84bc037d47680c356711aab96eaca0f6753a9bf31d09e7478547fd459b009f8176a1ad45212c79bbb621c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xc0, 0x6, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x89, 0x6, "28904742a2b51a4e6f2b55fffd22301d425f2d28ae347713f12d5e9d46744689d7244aa1e1798221c6fea6678406396010ad012306fa172e78b016517a3b33ff8e4dbceca5393ff2f20217e03bad25174cdcacbab222f6fae4694bb64a5e824a789a71325857cbaedaf53c78a8f319d1f4a5a6d3fcf76c109e802871bebdd8878f67e0d0fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x280, 0x2, 0x0, 0x0, {{0x7}, {0x220, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xdd, 0x6, {0x8, 'mangle\x00', 0x1, 0x400, "924afd90481778605e5f2eea7e9b5c04463edda7fc3d55507fbb202af5581a2a9b6cbf84937d5b5b99224943dc2bcf48307222234e206443e7b60f42e6cc29cfccde7cd129c30694675168d30e7790ec823422759d53bef4ccf18da882d3f69cc05e149fc53d0908571b014c83c03373f2b4f88514eaf1399749eb52929f6f95c22b4e5b966efcaf792ca542e97927db6a0bf58117bf49dc0f1029cd4677e30c199233c3e2d04dcd8c08cddd9bbdd3c088cc5a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x85, 0x6, {0x1, 'filter\x00', 0xa8, 0xa, "79bb29b7134cbd5ac13564109f8304db55b6d971f07f5bd31dfc7fa8028873d10b040681e0e655e8f6a79a16960d85d2f2121865b9263f9732ad28476130da57a32985e82fb8be0628683412cbd043119145a0ef05f5abd4132e52"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0x1, 'nat\x00', 0x4, 0xe8a, "b4b2f0c030d77f49da74c818059136acd6cf59d496bbc2e7029dd388fcc931f43e7a16858cbb5d"}}, @TCA_IPT_HOOK={0x8}]}, {0x39, 0x6, "e953316a0817b23401a80a38be5e445969116bb7d8a70a6ca771182dea4760bd84d166ef5161aa40d193cb19d0e4b1399cded9c961"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xe4, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x9, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x5, 0x10000000, 0x4, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x80000001, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x56, 0x6, "fc36f826477e680902707b500274a2f49e6484c516c92a312bf3f7e0fe9f13d1e603fa1fec7f14a3befd3b9bfd433fa9785c200feb22d8abb4fddd608fdcd2ed246c8853dfa66b7129ce9a97e141313bf529"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x40, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x6c, 0x1, [@m_ctinfo={0x68, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x39, 0x6, "007c0bda1c2d40b853b4df622006243a2aed0b14626178023dc917b115d50783414e65298a0e47c9b60dd59956e0a1beb0a05a6b64"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x600}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e8}, {&(0x7f0000000000)=""/108, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/52, 0x14}, {&(0x7f00000007c0)=""/152, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}, 0x400}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m25.107173843s ago: executing program 0 (id=971): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 2m23.186753978s ago: executing program 33 (id=971): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 4.831628942s ago: executing program 5 (id=2124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) 4.462979241s ago: executing program 5 (id=2128): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.067847165s ago: executing program 5 (id=2133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 3.626169968s ago: executing program 6 (id=2144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x8, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc9}}}, 0x6) 3.624887977s ago: executing program 5 (id=2136): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000004088eb0200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e090000080027000200000008002600a809"], 0x3c}}, 0x80) 3.333296131s ago: executing program 4 (id=2138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000000000008404"]) 3.266911473s ago: executing program 6 (id=2139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="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", 0x8b8}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) 3.063998146s ago: executing program 6 (id=2140): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="40111a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.054934379s ago: executing program 5 (id=2141): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0xfff, @private0, 0x9}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x1, @empty}}, 0x0, 0x9, 0x0, 0x0, 0xce024d}, 0x9c) 3.052689574s ago: executing program 2 (id=2142): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x7, 0x5, 0x7, 0xdedb, 0x15, "fd1500fdffffffff"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 2.83620484s ago: executing program 4 (id=2145): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.708460659s ago: executing program 5 (id=2146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff110701030009"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b01090224"], 0x0) 2.708106137s ago: executing program 2 (id=2147): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) pidfd_getfd(r1, r1, 0x0) 2.492401003s ago: executing program 2 (id=2149): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x98ae, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)='/', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 2.368939323s ago: executing program 4 (id=2150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.991734988s ago: executing program 2 (id=2161): creat(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) 1.972424027s ago: executing program 4 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_b, @random="c0695e6380a9", {0xb, 0x5}, @value=@ver_80211n={0x0, 0xd8c, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0xf, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xa54]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x48870) 1.667761106s ago: executing program 4 (id=2153): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0x2002, 0x3, 0x6, 0x800006, 0x6, 0x7, 0x3, 0x6, 0x0, 0x400040, 0x5, 0x1cac, 0x3ea, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a04, 0x7, 0x3, 0x6, 0x7ff, 0x7c, 0x1c, 0x7, 0xe, 0x80000b, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x5, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x2000000, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0xc, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x7ff, 0x8, 0x8, 0x4, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x4, 0xe8, 0x3, 0x9, 0x5, 0x6, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0xa, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x8, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xf714, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x6, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x3, 0x80, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x1, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0x2, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e2, 0xe, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1) 1.404675999s ago: executing program 3 (id=2155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008185}, 0x8040) 1.309052567s ago: executing program 4 (id=2156): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000fc0)={0x2c, 0x0, &(0x7f0000000e40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000006740)={0x2c, 0x0, &(0x7f0000006640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "a64403976014a33dd789ac1c6fae56ec86c5a7033edd4702f4e27c8ce08b6ee5570420f444958e184ceba5d5c079bc0a2e2da4e9c32d84ebbdb7"}}}, 0x0) 1.238754943s ago: executing program 3 (id=2157): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1}, 0xc) 1.048308394s ago: executing program 3 (id=2158): syz_open_dev$media(&(0x7f0000000000), 0x6, 0x2800) r0 = syz_io_uring_setup(0x1e1a, &(0x7f0000000440)={0x0, 0x430, 0x10100, 0x0, 0x83}, &(0x7f0000002000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r0, 0x100048ed, 0x0, 0x2, 0x0, 0x0) 976.933227ms ago: executing program 2 (id=2159): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000100)='./file0\x00', 0x1210082, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'cp932'}}, {@creator={'creator', 0x3d, "a4b5bda4"}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {@uid}, {@part={'part', 0x3d, 0xe78}}, {@umask}]}, 0x7, 0x324, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4c020, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/174, 0xae) 912.806242ms ago: executing program 6 (id=2160): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 656.622328ms ago: executing program 3 (id=2162): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') read$FUSE(r0, &(0x7f0000001c40)={0x2020}, 0x2020) 506.397889ms ago: executing program 2 (id=2163): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x1c, 0x4, &(0x7f0000000080)={0x15, "01b6cc4062f5092777b825cc74f0459622f737d09ff467e145fa3503c138b2c62c"}}) 481.556654ms ago: executing program 6 (id=2164): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r2, 0x2, 0x8, 0x0, 0x0}) 204.438272ms ago: executing program 6 (id=2165): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d3030303030303030303030303030303030302c6e6c733d64656661756c742c747970653df268d6512c756d61736b3d30303030303030303030303030303030303030363734352c000000000000"], 0x3, 0x6b2, &(0x7f0000000280)="$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") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 204.157163ms ago: executing program 3 (id=2166): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 0s ago: executing program 3 (id=2167): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000380)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) kernel console output (not intermixed with test programs): ttached [ 327.177454][ T7921] ntfs3(loop2): ino=1e, "file1" mi_enum_attr [ 327.490048][ T24] usb 1-1: USB disconnect, device number 6 [ 327.499995][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 327.629896][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 327.883606][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 327.892901][ T7947] netlink: 'syz.2.804': attribute type 20 has an invalid length. [ 327.901035][ T7947] netlink: 'syz.2.804': attribute type 21 has an invalid length. [ 328.127072][ T5875] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 328.216490][ T7951] loop5: detected capacity change from 0 to 128 [ 328.286027][ T30] audit: type=1800 audit(1758501373.349:25): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.807" name="file2" dev="loop5" ino=1048626 res=0 errno=0 [ 328.289001][ T7951] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 328.315830][ T7951] FAT-fs (loop5): Filesystem has been set read-only [ 328.322883][ T7951] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 328.330983][ T7951] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 328.406352][ T7959] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 328.415402][ T7959] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 328.423667][ T7959] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 328.462432][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.497411][ T5875] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 328.505284][ T5875] usb 4-1: can't read configurations, error -71 [ 328.837778][ T7965] @: renamed from vlan0 (while UP) [ 329.937206][ T7984] loop5: detected capacity change from 0 to 128 [ 329.983034][ T30] audit: type=1800 audit(1758501375.039:26): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.831" name="file2" dev="loop5" ino=1048627 res=0 errno=0 [ 330.039320][ T7984] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 330.047704][ T7984] FAT-fs (loop5): Filesystem has been set read-only [ 330.054564][ T7984] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 330.063658][ T7984] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 330.208864][ T7984] bio_check_eod: 3276 callbacks suppressed [ 330.208940][ T7984] syz.5.831: attempt to access beyond end of device [ 330.208940][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.229957][ T7984] syz.5.831: attempt to access beyond end of device [ 330.229957][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.232978][ T7989] netlink: 'syz.0.823': attribute type 6 has an invalid length. [ 330.243720][ T7984] syz.5.831: attempt to access beyond end of device [ 330.243720][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.243951][ T7984] syz.5.831: attempt to access beyond end of device [ 330.243951][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.244170][ T7984] syz.5.831: attempt to access beyond end of device [ 330.244170][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.292396][ T7984] syz.5.831: attempt to access beyond end of device [ 330.292396][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.306503][ T7984] syz.5.831: attempt to access beyond end of device [ 330.306503][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.349565][ T7989] netlink: 'syz.0.823': attribute type 6 has an invalid length. [ 330.365140][ T7984] syz.5.831: attempt to access beyond end of device [ 330.365140][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.430098][ T7984] syz.5.831: attempt to access beyond end of device [ 330.430098][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 330.465216][ T7984] syz.5.831: attempt to access beyond end of device [ 330.465216][ T7984] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 331.067521][ T8002] loop0: detected capacity change from 0 to 256 [ 331.158993][ T8002] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 331.172557][ T8002] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 332.490378][ T8032] loop5: detected capacity change from 0 to 128 [ 332.570222][ T30] audit: type=1800 audit(1758501377.639:27): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.843" name="file2" dev="loop5" ino=1048630 res=0 errno=0 [ 332.600485][ T8032] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 332.608762][ T8032] FAT-fs (loop5): Filesystem has been set read-only [ 332.615629][ T8032] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 332.623818][ T8032] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 332.627680][ T8033] sctp: [Deprecated]: syz.2.844 (pid 8033) Use of int in max_burst socket option. [ 332.627680][ T8033] Use struct sctp_assoc_value instead [ 332.989257][ T8039] loop0: detected capacity change from 0 to 1024 [ 333.030147][ T8039] EXT4-fs: Ignoring removed orlov option [ 333.072271][ T8039] EXT4-fs (loop0): Test dummy encryption mode enabled [ 333.086411][ T8039] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 333.158463][ T8039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.822624][ T8039] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 334.025429][ T8061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 334.144439][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.957464][ T5875] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 335.051641][ T8083] loop2: detected capacity change from 0 to 128 [ 335.108909][ T30] audit: type=1800 audit(1758501380.169:28): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.864" name="file2" dev="loop2" ino=1048631 res=0 errno=0 [ 335.161877][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 335.171185][ T8083] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 335.181263][ T8083] FAT-fs (loop2): Filesystem has been set read-only [ 335.189108][ T8083] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 335.197260][ T8083] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 335.218159][ T5875] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 335.229453][ T5875] usb 1-1: config 0 has no interface number 0 [ 335.235713][ T5875] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.248195][ T5875] usb 1-1: config 0 interface 85 has no altsetting 0 [ 335.272787][ T8083] bio_check_eod: 3100 callbacks suppressed [ 335.272857][ T8083] syz.2.864: attempt to access beyond end of device [ 335.272857][ T8083] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.295063][ T8083] syz.2.864: attempt to access beyond end of device [ 335.295063][ T8083] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.311264][ T8083] syz.2.864: attempt to access beyond end of device [ 335.311264][ T8083] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.332395][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 335.342528][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.350766][ T5875] usb 1-1: Product: syz [ 335.355081][ T5875] usb 1-1: Manufacturer: syz [ 335.358371][ T8085] syz.2.864: attempt to access beyond end of device [ 335.358371][ T8085] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 335.359875][ T5875] usb 1-1: SerialNumber: syz [ 335.373868][ T8085] syz.2.864: attempt to access beyond end of device [ 335.373868][ T8085] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.391602][ T8085] syz.2.864: attempt to access beyond end of device [ 335.391602][ T8085] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.426232][ T8083] syz.2.864: attempt to access beyond end of device [ 335.426232][ T8083] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.493458][ T5875] usb 1-1: config 0 descriptor?? [ 335.494304][ T8085] syz.2.864: attempt to access beyond end of device [ 335.494304][ T8085] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.512321][ T8085] syz.2.864: attempt to access beyond end of device [ 335.512321][ T8085] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.565386][ T8083] syz.2.864: attempt to access beyond end of device [ 335.565386][ T8083] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 335.819285][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 336.119250][ T5875] appletouch 1-1:0.85: Geyser mode initialized. [ 336.128815][ T5875] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input17 [ 336.330422][ T5875] usb 1-1: USB disconnect, device number 7 [ 336.362502][ T5875] appletouch 1-1:0.85: input: appletouch disconnected [ 336.648711][ T8107] loop2: detected capacity change from 0 to 64 [ 336.671583][ T8107] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 337.598667][ T8123] pim6reg: tun_chr_ioctl cmd 2147767507 [ 338.275573][ T8143] netlink: 'syz.0.892': attribute type 2 has an invalid length. [ 338.387957][ T8144] loop3: detected capacity change from 0 to 128 [ 338.494935][ T8144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.515247][ T8144] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.711799][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'. [ 338.839290][ T5829] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.043884][ T8181] loop0: detected capacity change from 0 to 256 [ 340.058034][ T8181] exfat: Deprecated parameter 'utf8' [ 340.063657][ T8181] exfat: Deprecated parameter 'utf8' [ 340.136636][ T8181] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d) [ 340.681637][ T8193] loop5: detected capacity change from 0 to 164 [ 340.720397][ T8193] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.793650][ T8193] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.835099][ T8193] rock: directory entry would overflow storage [ 340.841727][ T8193] rock: sig=0x4f50, size=4, remaining=3 [ 340.848191][ T8193] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 341.175284][ T8203] loop0: detected capacity change from 0 to 128 [ 341.248149][ T8203] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 341.291696][ T8203] hpfs: filesystem error: improperly stopped [ 341.298286][ T8203] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 341.306292][ T8203] hpfs: You really don't want any checks? You are crazy... [ 341.340529][ T8208] netlink: 'syz.4.921': attribute type 3 has an invalid length. [ 341.348777][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 341.383014][ T8203] hpfs: hpfs_map_sector(): read error [ 341.388789][ T8203] hpfs: code page support is disabled [ 341.412265][ T8203] hpfs: hpfs_map_4sectors(): unaligned read [ 341.445202][ T8203] hpfs: hpfs_map_4sectors(): unaligned read [ 341.451430][ T8203] hpfs: filesystem error: unable to find root dir [ 341.569876][ T8203] hpfs: hpfs_map_4sectors(): unaligned read [ 343.064410][ T8227] loop2: detected capacity change from 0 to 32768 [ 343.083152][ T8235] program syz.0.935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.129384][ T8227] JBD2: Ignoring recovery information on journal [ 343.230388][ T8237] macsec1: entered promiscuous mode [ 343.236649][ T8237] macsec1: entered allmulticast mode [ 343.242280][ T8237] veth1_macvtap: entered allmulticast mode [ 343.263026][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 343.289201][ T8227] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 343.337552][ C1] sd 0:0:1:0: [sda] tag#7900 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 343.348466][ C1] sd 0:0:1:0: [sda] tag#7900 CDB: Write(6) 0a 00 00 00 00 00 [ 343.450773][ T8244] netlink: 'syz.4.937': attribute type 3 has an invalid length. [ 343.452316][ T5821] ocfs2: Unmounting device (7,2) on (node local) [ 343.458712][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 343.980048][ T5875] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 344.197080][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 344.248044][ T5875] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 344.257495][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.297769][ T5875] usb 1-1: config 0 descriptor?? [ 344.328620][ T5875] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 344.770318][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 345.189074][ T5875] gspca_nw80x: reg_r err -71 [ 345.194067][ T5875] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 345.235722][ T5875] usb 1-1: USB disconnect, device number 8 [ 345.497845][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 345.503100][ T8278] loop5: detected capacity change from 0 to 512 [ 345.544776][ T8278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.557774][ T8278] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.697220][ T24] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 345.697280][ T7329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.715203][ T24] usb 5-1: config 0 has no interface number 0 [ 345.721562][ T24] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 345.733039][ T24] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 345.746977][ T24] usb 5-1: config 0 interface 255 has no altsetting 0 [ 345.753977][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 345.763403][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.911450][ T24] usb 5-1: config 0 descriptor?? [ 345.939770][ T24] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 346.024542][ T8291] loop0: detected capacity change from 0 to 512 [ 346.041894][ T8291] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.097596][ T8291] EXT4-fs (loop0): Test dummy encryption mode enabled [ 346.130444][ T24] usb 5-1: USB disconnect, device number 6 [ 346.154492][ T8291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 346.161373][ T8291] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 346.174545][ T8291] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 346.243843][ T8291] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.959: attempt to clear invalid blocks 2 len 1 [ 346.260099][ T8294] loop2: detected capacity change from 0 to 2048 [ 346.287921][ T8291] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.959: invalid indirect mapped block 1819239214 (level 0) [ 346.326530][ T8297] loop5: detected capacity change from 0 to 2048 [ 346.336418][ T8291] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.959: invalid indirect mapped block 1819239214 (level 1) [ 346.359303][ T8294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.373253][ T8291] EXT4-fs (loop0): 1 truncate cleaned up [ 346.381680][ T8291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.413021][ T8297] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 346.478462][ T8297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.633151][ T5814] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 346.746459][ T2974] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 346.779723][ T2974] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 346.792385][ T2974] EXT4-fs (loop2): This should not happen!! Data will be lost [ 346.792385][ T2974] [ 346.806027][ T2974] EXT4-fs (loop2): Total free blocks count 0 [ 346.813355][ T2974] EXT4-fs (loop2): Free/Dirty block details [ 346.819500][ T2974] EXT4-fs (loop2): free_blocks=66060288 [ 346.825195][ T2974] EXT4-fs (loop2): dirty_blocks=16 [ 346.830630][ T2974] EXT4-fs (loop2): Block reservation details [ 346.836878][ T2974] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 346.847916][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.254640][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.379285][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.385971][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.692628][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.905172][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.484543][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.822292][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.013743][ T57] bridge_slave_1: left allmulticast mode [ 349.019956][ T57] bridge_slave_1: left promiscuous mode [ 349.026414][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.043411][ T57] bridge_slave_0: left allmulticast mode [ 349.054575][ T57] bridge_slave_0: left promiscuous mode [ 349.061245][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.462905][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.484765][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.507491][ T57] bond0 (unregistering): Released all slaves [ 349.977726][ T57] hsr_slave_0: left promiscuous mode [ 350.008540][ T8329] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 350.015727][ T57] hsr_slave_1: left promiscuous mode [ 350.024530][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.032324][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.099442][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.107239][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.169978][ T57] veth1_macvtap: left promiscuous mode [ 350.180623][ T57] veth0_macvtap: left promiscuous mode [ 350.186473][ T57] veth1_vlan: left promiscuous mode [ 350.192175][ T57] veth0_vlan: left promiscuous mode [ 350.593084][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.637618][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.646680][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.672726][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.684735][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.943579][ T57] team0 (unregistering): Port device team_slave_1 removed [ 351.017691][ T57] team0 (unregistering): Port device team_slave_0 removed [ 351.176437][ T8338] kvm: user requested TSC rate below hardware speed [ 351.369607][ T8329] team0: Port device dummy0 added [ 352.047575][ T8349] tap0: tun_chr_ioctl cmd 1074025673 [ 352.198344][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 352.355974][ T8356] Failed to get privilege flags for destination (handle=0x2:0x4) [ 352.552717][ T8358] loop3: detected capacity change from 0 to 512 [ 352.765483][ T8358] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.987: casefold flag without casefold feature [ 352.787447][ T5818] Bluetooth: hci0: command tx timeout [ 352.845637][ T8358] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.987: couldn't read orphan inode 15 (err -117) [ 352.864578][ T5875] kernel write not supported for file /sequencer2 (pid: 5875 comm: kworker/0:4) [ 352.977706][ T8358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.123590][ T8358] fscrypt (loop3, inode 18): Unsupported encryption flags (0x18) [ 353.244774][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.991'. [ 353.385889][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.395875][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.403595][ T8334] bridge_slave_0: entered allmulticast mode [ 353.412683][ T8334] bridge_slave_0: entered promiscuous mode [ 353.434621][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.445701][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.458207][ T8334] bridge_slave_1: entered allmulticast mode [ 353.467528][ T8334] bridge_slave_1: entered promiscuous mode [ 353.637307][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.671139][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.703506][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.018929][ T8334] team0: Port device team_slave_0 added [ 354.069301][ T8334] team0: Port device team_slave_1 added [ 354.208707][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.219444][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.247482][ T8334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.325766][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.333030][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.359405][ T8334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.731363][ T8334] hsr_slave_0: entered promiscuous mode [ 354.741086][ T8334] hsr_slave_1: entered promiscuous mode [ 354.798668][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1002'. [ 354.879637][ T5818] Bluetooth: hci0: command tx timeout [ 355.056213][ T8402] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 355.069007][ T8402] syz_tun: entered promiscuous mode [ 355.104267][ T8402] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 355.356197][ T8404] loop5: detected capacity change from 0 to 8 [ 355.440542][ T8404] SQUASHFS error: Failed to read block 0x4de: -5 [ 355.448113][ T8404] SQUASHFS error: Failed to read block 0x4de: -5 [ 355.473704][ T30] audit: type=1800 audit(1758501400.519:29): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1006" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 355.820898][ T8334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 355.885332][ T8334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 355.953393][ T8334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 356.029062][ T8334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 356.662497][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.843015][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.913487][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.921121][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.956237][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 356.958003][ T5822] Bluetooth: hci0: command tx timeout [ 356.997510][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.004948][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.428569][ T8450] loop5: detected capacity change from 0 to 256 [ 358.481168][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.493404][ T8450] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.927234][ T8460] netem: change failed [ 359.018506][ T5822] Bluetooth: hci0: command tx timeout [ 359.606148][ T8470] loop2: detected capacity change from 0 to 256 [ 360.242658][ T8334] veth0_vlan: entered promiscuous mode [ 360.338520][ T8334] veth1_vlan: entered promiscuous mode [ 360.741188][ T8334] veth0_macvtap: entered promiscuous mode [ 360.788880][ T8334] veth1_macvtap: entered promiscuous mode [ 360.901962][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.982598][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.073035][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.123122][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.163240][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.207096][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.657192][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 361.819405][ T8514] sctp: [Deprecated]: syz.4.1051 (pid 8514) Use of int in max_burst socket option deprecated. [ 361.819405][ T8514] Use struct sctp_assoc_value instead [ 361.992413][ T8517] loop3: detected capacity change from 0 to 512 [ 362.087701][ T8517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 362.187779][ T8517] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1049: casefold flag without casefold feature [ 362.319401][ T8517] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1049: couldn't read orphan inode 15 (err -117) [ 362.364722][ T8517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.488796][ T8530] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 362.496576][ T8530] ALSA: mixer_oss: invalid OSS volume 'Â' [ 362.608004][ T8517] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #2: comm syz.3.1049: directory missing '.' [ 363.240851][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.824844][ T8572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1069'. [ 365.327706][ T8581] Bluetooth: MGMT ver 1.23 [ 366.192906][ T3986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.201125][ T3986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.427384][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.435380][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.689070][ T8607] loop5: detected capacity change from 0 to 1024 [ 366.826662][ T8610] loop3: detected capacity change from 0 to 16 [ 367.112923][ T8610] loop3: detected capacity change from 0 to 1024 [ 367.137711][ T3986] hfsplus: b-tree write err: -5, ino 4 [ 367.297934][ T8622] loop6: detected capacity change from 0 to 256 [ 367.409816][ T30] audit: type=1800 audit(2000000009.059:30): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1087" name="file1" dev="loop6" ino=1048637 res=0 errno=0 [ 367.458877][ T8622] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 367.469440][ T8622] FAT-fs (loop6): Filesystem has been set read-only [ 367.487834][ T30] audit: type=1800 audit(2000000009.089:31): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1087" name="file1" dev="loop6" ino=1048637 res=0 errno=0 [ 367.575183][ T14] hfsplus: b-tree write err: -5, ino 4 [ 368.235300][ T8639] rtc_cmos 00:00: Alarms can be up to one day in the future [ 368.246987][ T8638] rtc_cmos 00:00: Alarms can be up to one day in the future [ 368.307101][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 368.470107][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 368.508153][ T11] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.516451][ T11] usb 6-1: config 0 has no interface number 0 [ 368.563095][ T11] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 368.573414][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.582724][ T11] usb 6-1: Product: syz [ 368.587527][ T11] usb 6-1: Manufacturer: syz [ 368.592290][ T11] usb 6-1: SerialNumber: syz [ 368.639027][ T11] usb 6-1: config 0 descriptor?? [ 368.667876][ T8647] vlan0: entered promiscuous mode [ 368.673089][ T8647] veth1_virt_wifi: entered promiscuous mode [ 368.692899][ T11] quatech2 6-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 368.867727][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 368.873014][ T11] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 368.875407][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 368.894839][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 368.903529][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 368.911401][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 368.959886][ T11] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 369.070152][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 2 [ 369.315476][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 369.330596][ T11] usb 6-1: USB disconnect, device number 4 [ 369.371282][ T11] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 369.428957][ T11] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 369.441790][ T11] quatech2 6-1:0.1: device disconnected [ 370.096397][ T8672] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 370.102931][ T8672] pim6reg0: linktype set to 270 [ 370.530027][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1116'. [ 371.820823][ T8714] loop3: detected capacity change from 0 to 256 [ 371.947878][ T8714] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 372.269015][ T8714] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 372.277813][ T8714] exFAT-fs (loop3): Filesystem has been set read-only [ 372.361186][ T8728] loop5: detected capacity change from 0 to 128 [ 372.561996][ T8730] loop2: detected capacity change from 0 to 1024 [ 372.631386][ T8730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.936631][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.407102][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 373.826445][ T8759] loop2: detected capacity change from 0 to 64 [ 373.852844][ T30] audit: type=1326 audit(2000000015.489:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 373.874448][ T8759] MINIX-fs: mounting file system with errors, running fsck is recommended [ 373.874849][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.974682][ T30] audit: type=1326 audit(2000000015.549:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 373.997395][ T30] audit: type=1326 audit(2000000015.549:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 374.020406][ T30] audit: type=1326 audit(2000000015.549:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 374.042388][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.052283][ T30] audit: type=1326 audit(2000000015.549:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 374.074270][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.080909][ T30] audit: type=1326 audit(2000000015.549:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 374.103126][ T30] audit: type=1326 audit(2000000015.549:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 374.125102][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.670895][ T30] audit: type=1326 audit(2000000016.309:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.6.1154" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 374.692394][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.790233][ T8797] netlink: 'syz.6.1166': attribute type 49 has an invalid length. [ 376.238134][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.247861][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.147978][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 377.190375][ T8827] netlink: 'syz.4.1181': attribute type 10 has an invalid length. [ 377.214158][ T8827] team0: Cannot enslave team device to itself [ 377.330384][ T42] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.338950][ T42] usb 6-1: config 0 has no interface number 0 [ 377.345209][ T42] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.356493][ T42] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.366547][ T42] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.379825][ T42] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 377.390089][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.403877][ T42] usb 6-1: config 0 descriptor?? [ 377.820543][ T8833] syz_tun: left promiscuous mode [ 377.832950][ T8833] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 378.118372][ T42] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.000C/input/input18 [ 378.205556][ T42] uclogic 0003:28BD:0042.000C: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 378.235940][ T42] usb 6-1: USB disconnect, device number 5 [ 378.791116][ T8850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1189'. [ 378.801079][ T8850] netem: change failed [ 378.997388][ T30] audit: type=1326 audit(2000000020.639:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.019916][ T30] audit: type=1326 audit(2000000020.639:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.109398][ T30] audit: type=1326 audit(2000000020.759:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.132696][ T30] audit: type=1326 audit(2000000020.759:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.139796][ T8858] syz.4.1196 uses obsolete (PF_INET,SOCK_PACKET) [ 379.157342][ T30] audit: type=1326 audit(2000000020.759:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.235946][ T8860] loop2: detected capacity change from 0 to 256 [ 379.242889][ T30] audit: type=1326 audit(2000000020.849:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.267823][ T30] audit: type=1326 audit(2000000020.849:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.291610][ T30] audit: type=1326 audit(2000000020.849:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.313874][ T30] audit: type=1326 audit(2000000020.869:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.337074][ T30] audit: type=1326 audit(2000000020.869:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 379.414652][ T8860] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010272, chksum : 0x693c94a4, utbl_chksum : 0xe619d30d) [ 379.428638][ T8860] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 379.809938][ T8868] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1201'. [ 379.975875][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 380.848867][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1212'. [ 380.888318][ T8891] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1212'. [ 381.622075][ T8904] loop2: detected capacity change from 0 to 256 [ 381.668664][ T8904] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.113102][ T8914] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 383.425824][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1237'. [ 383.471115][ T8949] loop3: detected capacity change from 0 to 512 [ 383.498372][ T8949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.627124][ T8949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 383.641087][ T8949] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.772123][ T8949] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1236: Failed to acquire dquot type 0 [ 383.927712][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 383.998685][ T8959] netlink: 'syz.6.1242': attribute type 21 has an invalid length. [ 384.054230][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 384.114090][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 384.132643][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.145185][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.155560][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 384.164896][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.276985][ T11] usb 3-1: config 0 descriptor?? [ 384.289907][ T11] hub 3-1:0.0: USB hub found [ 384.353779][ T8963] team0: No ports can be present during mode change [ 384.405604][ T8965] loop6: detected capacity change from 0 to 8 [ 384.428423][ T8965] squashfs: Unknown parameter 'xœìU?kAÿ½Ý¹Û;½" 6¶&&·±–ú<.k ÙóOöDï8ÈY¥Q[?@ÀÒ/`#X‹…ˆ`£…‚«ˆœ¼™7›½Û5Þ [ 384.428423][ T8965] !Íü`y¿yóþ;y»7“»I' [ 384.543390][ T11] hub 3-1:0.0: 2 ports detected [ 384.751460][ T11] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 384.759575][ T11] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 384.832187][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 384.839333][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 384.905409][ T11] usb 3-1: USB disconnect, device number 9 [ 385.160305][ T8979] tun0: tun_chr_ioctl cmd 2147767506 [ 385.233903][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.100122][ T8992] loop6: detected capacity change from 0 to 4096 [ 386.150933][ T8998] hugetlbfs: syz.4.1261 (8998): Using mlock ulimits for SHM_HUGETLB is obsolete [ 386.431040][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 386.431117][ T30] audit: type=1800 audit(2000000028.069:51): pid=8992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1258" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 386.662161][ T9007] loop5: detected capacity change from 0 to 512 [ 386.682472][ T9007] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 386.757083][ T11] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 386.914369][ T9011] loop6: detected capacity change from 0 to 136 [ 387.022467][ T11] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 387.035096][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.047023][ T11] usb 4-1: Product: syz [ 387.051353][ T11] usb 4-1: Manufacturer: syz [ 387.056104][ T11] usb 4-1: SerialNumber: syz [ 387.128359][ T11] usb 4-1: config 0 descriptor?? [ 387.827790][ T5875] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 387.839466][ T11] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 387.886478][ T9027] input: syz1 as /devices/virtual/input/input19 [ 388.028773][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 388.055036][ T5875] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 388.070854][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.093258][ T11] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 388.103607][ T11] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 388.114778][ T11] asix 4-1:0.0: probe with driver asix failed with error -71 [ 388.151477][ T9] IPVS: starting estimator thread 0... [ 388.192358][ T5875] pvrusb2: Hardware description: Terratec Grabster AV400 [ 388.201404][ T5875] pvrusb2: ********** [ 388.205674][ T5875] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 388.216072][ T5875] pvrusb2: Important functionality might not be entirely working. [ 388.224103][ T5875] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 388.235618][ T5875] pvrusb2: ********** [ 388.249110][ T11] usb 4-1: USB disconnect, device number 8 [ 388.258539][ T9032] IPVS: using max 240 ests per chain, 12000 per kthread [ 388.400129][ T2331] pvrusb2: Invalid write control endpoint [ 388.608298][ T9022] pvrusb2: Invalid write control endpoint [ 388.626198][ T11] usb 5-1: USB disconnect, device number 7 [ 388.648243][ T2331] pvrusb2: Invalid write control endpoint [ 388.655264][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 388.665109][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 388.672908][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 388.686027][ T2331] pvrusb2: Device being rendered inoperable [ 388.694403][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 388.702697][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 388.712554][ T2331] pvrusb2: Attached sub-driver cx25840 [ 388.718211][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 388.728557][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 388.804132][ T9041] loop2: detected capacity change from 0 to 256 [ 388.957129][ T9041] FAT-fs (loop2): Directory bread(block 64) failed [ 388.964411][ T9041] FAT-fs (loop2): Directory bread(block 65) failed [ 388.971461][ T9041] FAT-fs (loop2): Directory bread(block 66) failed [ 388.978296][ T9041] FAT-fs (loop2): Directory bread(block 67) failed [ 388.988479][ T9041] FAT-fs (loop2): Directory bread(block 68) failed [ 388.996083][ T9041] FAT-fs (loop2): Directory bread(block 69) failed [ 389.003405][ T9041] FAT-fs (loop2): Directory bread(block 70) failed [ 389.010271][ T9041] FAT-fs (loop2): Directory bread(block 71) failed [ 389.017310][ T9041] FAT-fs (loop2): Directory bread(block 72) failed [ 389.023990][ T9041] FAT-fs (loop2): Directory bread(block 73) failed [ 389.215836][ T9047] loop3: detected capacity change from 0 to 128 [ 389.296654][ T9050] loop6: detected capacity change from 0 to 128 [ 389.399317][ T30] audit: type=1800 audit(2000000031.049:52): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1285" name="bus" dev="loop6" ino=1048662 res=0 errno=0 [ 389.933914][ T9059] Falling back ldisc for ttyS3. [ 389.968886][ T9051] loop5: detected capacity change from 0 to 8192 [ 390.032433][ T9051] bio_check_eod: 595 callbacks suppressed [ 390.032510][ T9051] syz.5.1286: attempt to access beyond end of device [ 390.032510][ T9051] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 390.095226][ T9051] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 390.107291][ T9051] FAT-fs (loop5): Filesystem has been set read-only [ 390.157942][ T9051] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 390.179278][ T9051] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 391.909928][ T9086] loop6: detected capacity change from 0 to 32768 [ 391.919018][ T9086] btrfs: Deprecated parameter 'usebackuproot' [ 391.925294][ T9086] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 391.949299][ T9086] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1303 (9086) [ 391.984495][ T9086] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 391.995044][ T9086] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 392.168062][ T9086] BTRFS info (device loop6): rebuilding free space tree [ 392.202513][ T9086] BTRFS info (device loop6): enabling ssd optimizations [ 392.209912][ T9086] BTRFS info (device loop6): disabling tree log [ 392.216329][ T9086] BTRFS info (device loop6): enabling free space tree [ 392.223598][ T9086] BTRFS info (device loop6): force clearing of disk cache [ 392.230982][ T9086] BTRFS info (device loop6): enabling auto defrag [ 392.237663][ T9086] BTRFS info (device loop6): doing ref verification [ 392.244422][ T9086] BTRFS info (device loop6): trying to use backup root at mount time [ 392.252816][ T9086] BTRFS info (device loop6): max_inline set to 4096 [ 392.347465][ T8334] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 392.527602][ T9117] input: syz1 as /devices/virtual/input/input20 [ 394.152076][ T9150] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 394.158186][ T9150] dvmrp1: ignored: set checksum disabled [ 395.055622][ T9170] loop6: detected capacity change from 0 to 1024 [ 395.141888][ T9170] EXT4-fs: inline encryption not supported [ 395.148117][ T9170] EXT4-fs: Ignoring removed i_version option [ 395.229096][ T9170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.345979][ T9170] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1336: Allocating blocks 497-513 which overlap fs metadata [ 395.371843][ T9170] EXT4-fs (loop6): pa ffff88810f44a5b0: logic 624, phys. 113, len 25 [ 395.380424][ T9170] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 24, pa_free 25 [ 395.649664][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.534112][ T9205] loop5: detected capacity change from 0 to 32768 [ 397.548636][ T9205] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [ 397.560967][ T9205] bcachefs (/dev/loop5): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096) [ 397.573368][ T9205] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset [ 397.813737][ T9215] loop2: detected capacity change from 0 to 512 [ 397.869276][ T9215] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.981515][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 398.001781][ T9215] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 398.088825][ T9215] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1355: attempt to clear invalid blocks 2 len 1 [ 398.129342][ T9215] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 398.144502][ T9215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1355: invalid indirect mapped block 1819239214 (level 0) [ 398.170407][ T9215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1355: invalid indirect mapped block 1819239214 (level 1) [ 398.208781][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.220385][ T42] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.230689][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.240063][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.270208][ T9215] EXT4-fs (loop2): 1 truncate cleaned up [ 398.278071][ T9215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.310374][ T9201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.330301][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.556684][ T42] usb 5-1: USB disconnect, device number 8 [ 398.645256][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.987612][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 399.077335][ T42] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 399.154443][ T24] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 399.163284][ T24] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 399.172530][ T24] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 399.183156][ T24] usb 6-1: config 220 has no interface number 2 [ 399.189806][ T24] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.203385][ T24] usb 6-1: config 220 interface 0 has no altsetting 0 [ 399.210476][ T24] usb 6-1: config 220 interface 76 has no altsetting 0 [ 399.217614][ T24] usb 6-1: config 220 interface 1 has no altsetting 1 [ 399.262310][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 399.271789][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.280107][ T24] usb 6-1: Product: syz [ 399.284419][ T24] usb 6-1: Manufacturer: syz [ 399.289356][ T24] usb 6-1: SerialNumber: syz [ 399.307128][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 399.325087][ T42] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 399.336472][ T42] usb 3-1: config 0 has no interface number 0 [ 399.343775][ T42] usb 3-1: config 0 interface 12 has no altsetting 0 [ 399.364047][ T42] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 399.373499][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.382161][ T42] usb 3-1: Product: syz [ 399.386599][ T42] usb 3-1: Manufacturer: syz [ 399.391657][ T42] usb 3-1: SerialNumber: syz [ 399.411520][ T42] usb 3-1: config 0 descriptor?? [ 399.463828][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 399.473274][ T9239] netlink: 'syz.3.1366': attribute type 30 has an invalid length. [ 399.516398][ T3986] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.554134][ T3986] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.563850][ T24] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 399.564195][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1367'. [ 399.573731][ T24] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 399.591058][ T24] usb 6-1: No valid video chain found. [ 399.596054][ T3986] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.612960][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.642179][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1367'. [ 399.729741][ T24] usb 6-1: USB disconnect, device number 6 [ 400.312528][ T42] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 400.321279][ T42] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 400.328952][ T42] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 400.337009][ T42] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 400.457350][ T42] usb 3-1: USB disconnect, device number 10 [ 400.788402][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1377'. [ 400.811864][ T9260] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1376'. [ 401.232357][ T9270] loop2: detected capacity change from 0 to 128 [ 401.303361][ T9270] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.324155][ T9270] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 401.497407][ T9270] fscrypt (loop2, inode 12): Unsupported encryption flags (0xf3) [ 401.592559][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1384'. [ 401.732169][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.974610][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1389'. [ 402.658398][ T9294] loop6: detected capacity change from 0 to 4096 [ 402.920702][ T9294] ntfs3(loop6): failed to convert "0080" to cp862 [ 404.010807][ T9329] loop2: detected capacity change from 0 to 16 [ 404.068064][ T9329] erofs (device loop2): mounted with root inode @ nid 36. [ 404.125814][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.138605][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.152877][ T9329] erofs (device loop2): readahead error at folio 7 @ nid 36 [ 404.161383][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.172143][ T9329] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 404.179769][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.190571][ T9329] erofs (device loop2): readahead error at folio 5 @ nid 36 [ 404.198314][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.209420][ T9329] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 404.217413][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.228162][ T9329] erofs (device loop2): readahead error at folio 3 @ nid 36 [ 404.235620][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.249530][ T9329] erofs (device loop2): readahead error at folio 2 @ nid 36 [ 404.257922][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.268678][ T9329] erofs (device loop2): readahead error at folio 1 @ nid 36 [ 404.276139][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.286894][ T9329] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 404.294395][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.305686][ T9329] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 404.316458][ T9329] erofs (device loop2): read error -117 @ 0 of nid 36 [ 404.323535][ T9329] erofs (device loop2): failed to readdir of logical block 0 of nid 36 [ 404.506249][ T9335] netlink: 'syz.2.1411': attribute type 6 has an invalid length. [ 404.846672][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 405.194819][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1417'. [ 405.499473][ T9353] vxcan1: entered allmulticast mode [ 405.528566][ T9353] vxcan1: left allmulticast mode [ 405.736978][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 405.807088][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 405.831485][ T9363] input: syz0 as /devices/virtual/input/input21 [ 405.905852][ T9365] loop6: detected capacity change from 0 to 256 [ 405.942983][ T9365] exfat: Deprecated parameter 'utf8' [ 405.997261][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 406.043839][ T42] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 406.053398][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.061800][ T42] usb 5-1: Product: syz [ 406.066127][ T42] usb 5-1: Manufacturer: syz [ 406.071042][ T42] usb 5-1: SerialNumber: syz [ 406.087115][ T9365] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 406.134278][ T42] usb 5-1: config 0 descriptor?? [ 406.163026][ T42] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 406.431864][ T9376] loop2: detected capacity change from 0 to 16 [ 406.476216][ T9376] erofs (device loop2): mounted with root inode @ nid 36. [ 406.808348][ T9380] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 406.979768][ T42] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 406.998918][ T42] usb 5-1: USB disconnect, device number 9 [ 407.177996][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 407.337428][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 407.353452][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 407.419485][ T24] usb 6-1: config 9 has an invalid interface number: 48 but max is 0 [ 407.428103][ T24] usb 6-1: config 9 has no interface number 0 [ 407.434447][ T24] usb 6-1: config 9 interface 48 has no altsetting 0 [ 407.467403][ T24] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 407.476906][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.485900][ T24] usb 6-1: Product: syz [ 407.490513][ T24] usb 6-1: Manufacturer: syz [ 407.495272][ T24] usb 6-1: SerialNumber: syz [ 407.836961][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 407.849377][ T9396] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 407.857557][ T9396] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1440'. [ 407.874155][ T9397] loop6: detected capacity change from 0 to 1024 [ 407.900904][ T9397] EXT4-fs: Ignoring removed nobh option [ 407.907674][ T9397] EXT4-fs: Ignoring removed bh option [ 407.995975][ T9397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.374966][ T9409] loop2: detected capacity change from 0 to 128 [ 408.376151][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.433718][ T24] gspca_vc032x: reg_r err -71 [ 408.439044][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.444469][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.454127][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.460660][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.466083][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.471643][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.477504][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.482921][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.488476][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.493886][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.499425][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.504839][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.510485][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.515894][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.521426][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.526969][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.532375][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.537931][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.547427][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.552843][ T24] gspca_vc032x: Unknown sensor... [ 408.559296][ T24] vc032x 6-1:9.48: probe with driver vc032x failed with error -22 [ 408.572793][ T24] usb 6-1: USB disconnect, device number 7 [ 408.597668][ T9409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 408.606061][ T9409] System zones: 1-3, 19-19, 35-36 [ 408.618626][ T9409] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 408.643023][ T9409] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 408.809331][ T30] audit: type=1800 audit(2000000050.459:53): pid=9409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1444" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 408.809712][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.838596][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.983646][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.067835][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 410.273278][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.286293][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.297042][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 410.306278][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.339420][ T9449] loop5: detected capacity change from 0 to 512 [ 410.349329][ T24] usb 3-1: config 0 descriptor?? [ 410.377331][ T9449] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 410.452635][ T9449] EXT4-fs (loop5): 1 orphan inode deleted [ 410.458896][ T9449] EXT4-fs (loop5): 1 truncate cleaned up [ 410.467784][ T9449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.518432][ T9451] block nbd0: shutting down sockets [ 410.549343][ T9449] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1462: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 410.571126][ T9449] EXT4-fs (loop5): Remounting filesystem read-only [ 410.702562][ T7329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.811650][ T9455] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1465'. [ 410.833850][ T24] arvo 0003:1E7D:30D4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 410.858248][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 411.008504][ T24] arvo 0003:1E7D:30D4.000D: couldn't init struct arvo_device [ 411.016202][ T24] arvo 0003:1E7D:30D4.000D: couldn't install keyboard [ 411.067908][ T24] arvo 0003:1E7D:30D4.000D: probe with driver arvo failed with error -71 [ 411.142040][ T24] usb 3-1: USB disconnect, device number 11 [ 411.300241][ T9464] loop6: detected capacity change from 0 to 128 [ 411.400147][ T9464] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 411.455266][ T9464] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.559446][ T30] audit: type=1804 audit(2000000053.209:54): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1469" name="/newroot/87/file1/file0" dev="loop6" ino=12 res=1 errno=0 [ 411.852873][ T8334] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.248709][ T9484] loop5: detected capacity change from 0 to 128 [ 412.671152][ T9493] loop5: detected capacity change from 0 to 256 [ 412.781618][ T9493] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 412.834759][ T30] audit: type=1800 audit(2000000054.479:55): pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1481" name="file1" dev="loop5" ino=1048664 res=0 errno=0 [ 413.508572][ T11] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 413.629022][ T9497] loop3: detected capacity change from 0 to 32768 [ 413.639121][ T9497] XFS (loop3): Invalid device [./file2/file0], error=-2 [ 413.721689][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.731969][ T11] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 413.741797][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.901185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.923738][ T11] usb 7-1: config 0 descriptor?? [ 414.475032][ T11] greenasia 0003:0E8F:0012.000E: hidraw0: USB HID v0.07 Device [HID 0e8f:0012] on usb-dummy_hcd.6-1/input0 [ 414.491159][ T11] greenasia 0003:0E8F:0012.000E: no inputs found [ 414.682306][ T24] usb 7-1: USB disconnect, device number 2 [ 416.307953][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1505'. [ 416.332808][ T9540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.410980][ T9562] netlink: 'syz.4.1515': attribute type 83 has an invalid length. [ 418.543215][ T9579] loop6: detected capacity change from 0 to 512 [ 418.610693][ T9579] EXT4-fs (loop6): orphan cleanup on readonly fs [ 418.617411][ T9579] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 418.672968][ T9579] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 418.717274][ T9579] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1524: attempt to clear invalid blocks 2 len 1 [ 418.742940][ T9579] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1524: invalid indirect mapped block 1819239214 (level 0) [ 418.767579][ T9579] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1524: invalid indirect mapped block 1819239214 (level 1) [ 418.854491][ T9579] EXT4-fs (loop6): 1 truncate cleaned up [ 418.865747][ T9579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.975418][ T9579] EXT4-fs (loop6): shut down requested (1) [ 419.014556][ T9579] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 419.088047][ T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 419.221578][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.263568][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 419.273410][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 419.275530][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 419.298236][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 419.385748][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 419.397765][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.405941][ T24] usb 3-1: Product: syz [ 419.410671][ T24] usb 3-1: Manufacturer: syz [ 419.415429][ T24] usb 3-1: SerialNumber: syz [ 419.431440][ T24] usb 3-1: config 0 descriptor?? [ 419.439935][ T9588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 419.485296][ T9588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 419.519964][ T24] usb 3-1: ucan: probing device on interface #0 [ 419.555139][ T9599] loop5: detected capacity change from 0 to 1024 [ 419.610766][ T9599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.130831][ T9608] loop5: detected capacity change from 0 to 1024 [ 420.158055][ T24] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 420.197828][ T24] usb 3-1: USB disconnect, device number 12 [ 420.227872][ T9608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.374738][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 420.391433][ T9616] netlink: 173 bytes leftover after parsing attributes in process `syz.3.1540'. [ 420.660893][ T7329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.455684][ T9636] loop5: detected capacity change from 0 to 2048 [ 421.536978][ T9636] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 421.560225][ T9644] 9p: Unknown access argument ÿÿ: -22 [ 421.592333][ T9639] loop3: detected capacity change from 0 to 1024 [ 421.599838][ T9645] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.758716][ T30] audit: type=1326 audit(2000000074.416:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.4.1552" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x0 [ 421.864456][ T9639] hfsplus: xattr searching failed [ 421.891616][ T9639] hfsplus: catalog searching failed [ 422.238477][ T35] hfsplus: b-tree write err: -5, ino 3 [ 423.835434][ T9695] loop3: detected capacity change from 0 to 1024 [ 423.856267][ T9695] EXT4-fs: Ignoring removed oldalloc option [ 423.864035][ T9695] EXT4-fs: Ignoring removed bh option [ 423.969556][ T9695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.547944][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.334047][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 426.513863][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 426.529410][ T24] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 426.537988][ T24] usb 6-1: config 4 has no interface number 0 [ 426.545106][ T24] usb 6-1: config 4 interface 51 has no altsetting 0 [ 426.590501][ T24] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 426.600099][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.608424][ T24] usb 6-1: Product: syz [ 426.612748][ T24] usb 6-1: Manufacturer: syz [ 426.617629][ T24] usb 6-1: SerialNumber: syz [ 426.642808][ T24] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 426.750404][ T9751] loop2: detected capacity change from 0 to 1024 [ 426.780847][ T9751] EXT4-fs: inline encryption not supported [ 426.876594][ T9751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.889958][ T9751] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.916569][ T24] usb 6-1: USB disconnect, device number 8 [ 427.018431][ T30] audit: type=1800 audit(2000000079.659:57): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1597" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 427.052197][ T9751] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.1597: lblock 1 mapped to illegal pblock 1 (length 1) [ 427.113595][ T9751] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1597: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 427.280634][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 427.729404][ T9773] loop6: detected capacity change from 0 to 256 [ 428.203236][ T24] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 428.400540][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 428.410697][ T24] usb 5-1: config 0 has no interface number 0 [ 428.417397][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.428496][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 428.439545][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 428.451445][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 428.462935][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 428.474092][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.487447][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 428.496880][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.563239][ T24] usb 5-1: config 0 descriptor?? [ 428.577356][ T9781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.593499][ T9781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.654700][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 428.861794][ T24] usb 5-1: USB disconnect, device number 10 [ 428.874442][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 429.200630][ T9809] loop3: detected capacity change from 0 to 64 [ 429.343265][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 429.534063][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 429.565279][ T24] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 429.574016][ T24] usb 3-1: config 4 has no interface number 0 [ 429.580285][ T24] usb 3-1: config 4 interface 51 has no altsetting 0 [ 429.586162][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 429.634750][ T9815] netlink: 'syz.4.1621': attribute type 2 has an invalid length. [ 429.669060][ T24] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 429.678621][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.686949][ T24] usb 3-1: Product: syz [ 429.691263][ T24] usb 3-1: Manufacturer: syz [ 429.696161][ T24] usb 3-1: SerialNumber: syz [ 429.766670][ T24] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 430.018305][ T24] usb 3-1: USB disconnect, device number 13 [ 430.209408][ T9825] netlink: 'syz.5.1627': attribute type 11 has an invalid length. [ 430.575979][ T9831] loop3: detected capacity change from 0 to 256 [ 430.590613][ T9835] loop6: detected capacity change from 0 to 128 [ 430.624166][ T9835] EXT4-fs: Ignoring removed nobh option [ 430.681842][ T9835] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.747868][ T9835] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.826398][ T9831] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 430.840455][ T9831] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 431.056805][ T8334] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.133582][ T9847] loop2: detected capacity change from 0 to 128 [ 431.172612][ T9847] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 431.206165][ T9847] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 431.284092][ T9847] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.1637: checksumming directory block 0 [ 431.313559][ T9853] loop6: detected capacity change from 0 to 512 [ 431.398799][ T9853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 431.412190][ T9853] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.455799][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.721444][ T9868] sctp: [Deprecated]: syz.4.1643 (pid 9868) Use of int in max_burst socket option. [ 431.721444][ T9868] Use struct sctp_assoc_value instead [ 431.849252][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 432.575730][ T9877] loop3: detected capacity change from 0 to 1024 [ 432.676024][ T9877] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 432.784487][ T9877] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1648: Invalid block bitmap block 0 in block_group 0 [ 432.813011][ T9877] Quota error (device loop3): write_blk: dquota write failed [ 432.821129][ T9877] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 432.831567][ T9877] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1648: Failed to acquire dquot type 0 [ 432.871444][ T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 432.903155][ T9877] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1648: Freeing blocks not in datazone - block = 0, count = 4096 [ 432.922999][ T9877] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1648: Invalid inode bitmap blk 0 in block_group 0 [ 432.938953][ T9877] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 432.949589][ T9877] EXT4-fs (loop3): 1 orphan inode deleted [ 432.951878][ T3986] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 432.957881][ T9877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.964847][ T3986] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:19: Failed to release dquot type 0 [ 433.048624][ T11] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 433.057951][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.068364][ T11] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 433.077794][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 433.087585][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.097752][ T5875] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 433.115515][ T11] usb 3-1: config 0 descriptor?? [ 433.150570][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.160571][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 433.291389][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.311076][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 433.321236][ T5875] usb 5-1: can't read configurations, error -71 [ 433.347581][ T11] usb 3-1: USB disconnect, device number 14 [ 433.366382][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 433.376492][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.395065][ T24] usb 6-1: config 0 descriptor?? [ 433.410489][ T24] cp210x 6-1:0.0: cp210x converter detected [ 433.833234][ T24] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 433.874254][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 433.958704][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 433.971747][ T9905] netlink: 'syz.3.1658': attribute type 20 has an invalid length. [ 433.979720][ T9905] netlink: 'syz.3.1658': attribute type 21 has an invalid length. [ 434.065824][ T24] usb 6-1: USB disconnect, device number 9 [ 434.103518][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 434.148741][ T24] cp210x 6-1:0.0: device disconnected [ 434.536951][ T9915] loop3: detected capacity change from 0 to 64 [ 434.771646][ T9920] @: renamed from vlan0 (while UP) [ 434.865557][ T9915] syz.3.1663: attempt to access beyond end of device [ 434.865557][ T9915] loop3: rw=2049, sector=671, nr_sectors = 8 limit=64 [ 435.839759][ T9944] Bluetooth: MGMT ver 1.23 [ 435.949511][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 436.141217][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 436.157565][ T24] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 436.168879][ T24] usb 3-1: config 0 has no interface number 0 [ 436.175145][ T24] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.188478][ T24] usb 3-1: config 0 interface 85 has no altsetting 0 [ 436.245921][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 436.255384][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.264768][ T24] usb 3-1: Product: syz [ 436.269396][ T24] usb 3-1: Manufacturer: syz [ 436.274151][ T24] usb 3-1: SerialNumber: syz [ 436.291244][ T24] usb 3-1: config 0 descriptor?? [ 436.943584][ T24] appletouch 3-1:0.85: Geyser mode initialized. [ 436.952681][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input22 [ 437.143066][ T9970] loop6: detected capacity change from 0 to 128 [ 437.176790][ T5875] usb 3-1: USB disconnect, device number 15 [ 437.203920][ T5875] appletouch 3-1:0.85: input: appletouch disconnected [ 437.233574][ T9970] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.262894][ T9970] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 437.294873][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.533925][ T8334] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.086614][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1697'. [ 438.319998][ T9996] loop2: detected capacity change from 0 to 128 [ 439.173606][T10009] loop5: detected capacity change from 0 to 64 [ 439.213813][T10009] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 440.133778][T10029] netlink: 'syz.5.1719': attribute type 6 has an invalid length. [ 440.166352][T10029] netlink: 'syz.5.1719': attribute type 6 has an invalid length. [ 440.222838][T10032] netlink: 'syz.3.1717': attribute type 3 has an invalid length. [ 440.231769][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 440.236188][T10031] loop2: detected capacity change from 0 to 1024 [ 440.291451][T10031] EXT4-fs: Ignoring removed orlov option [ 440.307010][T10031] EXT4-fs (loop2): Test dummy encryption mode enabled [ 440.335175][T10031] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 440.420996][T10031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.805975][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.854608][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1726'. [ 441.233821][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1730'. [ 441.392568][T10058] program syz.4.1732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.577941][ C1] sd 0:0:1:0: [sda] tag#7878 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 441.588908][ C1] sd 0:0:1:0: [sda] tag#7878 CDB: Write(6) 0a 00 00 00 00 00 [ 441.603014][T10061] loop6: detected capacity change from 0 to 256 [ 441.620912][T10061] exfat: Deprecated parameter 'utf8' [ 441.626828][T10061] exfat: Deprecated parameter 'utf8' [ 441.863497][T10063] macsec1: entered promiscuous mode [ 441.869941][T10063] macsec1: entered allmulticast mode [ 441.875406][T10063] veth1_macvtap: entered allmulticast mode [ 442.007403][T10056] loop5: detected capacity change from 0 to 32768 [ 442.102777][T10056] JBD2: Ignoring recovery information on journal [ 442.107880][T10061] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d) [ 442.196940][T10056] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 442.400470][ T7329] ocfs2: Unmounting device (7,5) on (node local) [ 442.625827][T10072] loop6: detected capacity change from 0 to 1024 [ 443.423549][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'. [ 444.177883][T10103] loop2: detected capacity change from 0 to 164 [ 444.216874][T10103] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.303978][T10103] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.329700][T10103] rock: directory entry would overflow storage [ 444.336487][T10103] rock: sig=0x4f50, size=4, remaining=3 [ 444.342809][T10103] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 444.770511][T10116] pim6reg: tun_chr_ioctl cmd 2147767507 [ 445.541825][T10132] netlink: 'syz.3.1763': attribute type 3 has an invalid length. [ 445.550128][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'. [ 445.827888][T10138] netlink: 'syz.6.1768': attribute type 2 has an invalid length. [ 446.220628][ T5875] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 446.424447][ T5875] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 446.433045][ T5875] usb 6-1: config 0 has no interface number 0 [ 446.439611][ T5875] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 446.451045][ T5875] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 446.464855][ T5875] usb 6-1: config 0 interface 255 has no altsetting 0 [ 446.471855][ T5875] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 446.481175][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.642932][ T5875] usb 6-1: config 0 descriptor?? [ 446.659694][ T5875] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 446.875035][ T42] usb 6-1: USB disconnect, device number 10 [ 446.904588][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 446.989412][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1783'. [ 447.070818][T10171] loop6: detected capacity change from 0 to 2048 [ 447.073959][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 447.108484][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 447.118167][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.139545][ T24] usb 3-1: config 0 descriptor?? [ 447.157548][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 447.205378][T10171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.427781][ T35] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 447.517830][ T35] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 447.530971][ T35] EXT4-fs (loop6): This should not happen!! Data will be lost [ 447.530971][ T35] [ 447.540909][ T35] EXT4-fs (loop6): Total free blocks count 0 [ 447.549215][ T35] EXT4-fs (loop6): Free/Dirty block details [ 447.555698][ T35] EXT4-fs (loop6): free_blocks=66060288 [ 447.561512][ T35] EXT4-fs (loop6): dirty_blocks=16 [ 447.567122][ T35] EXT4-fs (loop6): Block reservation details [ 447.573676][ T35] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 447.611263][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.996846][ T24] gspca_nw80x: reg_r err -71 [ 448.001820][ T24] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 448.029739][ T24] usb 3-1: USB disconnect, device number 16 [ 449.149224][T10204] loop2: detected capacity change from 0 to 2048 [ 449.233180][T10204] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 449.332878][T10204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.793631][ T24] kernel write not supported for file /sequencer2 (pid: 24 comm: kworker/1:0) [ 451.836751][T10256] loop3: detected capacity change from 0 to 64 [ 451.909558][T10256] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 452.653258][T10275] loop2: detected capacity change from 0 to 2048 [ 452.744465][T10275] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 452.752843][T10275] UDF-fs: Scanning with blocksize 512 failed [ 452.845430][T10275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.165704][T10287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1834'. [ 453.214253][T10289] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1834'. [ 453.272538][T10287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1834'. [ 453.652684][T10293] loop6: detected capacity change from 0 to 4096 [ 453.670923][T10293] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 453.846468][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 454.042676][ T5822] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 454.256571][T10308] netlink: 'syz.6.1841': attribute type 10 has an invalid length. [ 454.266083][T10308] syz_tun: entered promiscuous mode [ 454.301684][T10308] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 454.483532][T10310] loop5: detected capacity change from 0 to 256 [ 454.596700][T10310] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 454.603810][T10315] rtc_cmos 00:00: Alarms can be up to one day in the future [ 454.609953][T10310] FAT-fs (loop5): Filesystem has been set read-only [ 454.625834][ T30] audit: type=1800 audit(2000000107.263:58): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1844" name="file1" dev="loop5" ino=1048672 res=0 errno=0 [ 454.642184][T10312] rtc_cmos 00:00: Alarms can be up to one day in the future [ 454.647372][ T30] audit: type=1800 audit(2000000107.263:59): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1844" name="file1" dev="loop5" ino=1048672 res=0 errno=0 [ 454.859218][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 454.867369][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 454.875245][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 454.883086][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 454.890749][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 455.221390][T10326] loop2: detected capacity change from 0 to 16 [ 455.325962][T10326] loop2: detected capacity change from 0 to 1024 [ 455.692522][ T14] hfsplus: b-tree write err: -5, ino 4 [ 456.017197][T10347] loop6: detected capacity change from 0 to 128 [ 456.084090][T10347] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 456.177087][T10347] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 456.279072][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 456.644926][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 456.711022][T10363] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 456.717323][T10363] syzkaller1: linktype set to 773 [ 456.841340][T10365] loop3: detected capacity change from 0 to 1024 [ 457.592889][T10376] loop2: detected capacity change from 0 to 64 [ 457.742264][T10372] loop5: detected capacity change from 0 to 32768 [ 457.811422][T10379] overlayfs: upper fs needs to support d_type. [ 457.853233][T10379] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 457.861332][T10379] overlayfs: failed to set xattr on upper [ 457.864518][T10372] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 457.867254][T10379] overlayfs: ...falling back to redirect_dir=nofollow. [ 457.892138][T10372] allowing incompatible features above 0.0: (unknown version) [ 457.892231][T10372] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 457.892386][T10372] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 457.892545][T10372] bcachefs (loop5): initializing new filesystem [ 457.908479][T10372] bcachefs (loop5): going read-write [ 457.922838][T10379] overlayfs: ...falling back to index=off. [ 457.948804][T10379] overlayfs: ...falling back to uuid=null. [ 457.992950][T10372] bcachefs (loop5): marking superblocks [ 458.043992][T10372] bcachefs (loop5): initializing freespace [ 458.071129][T10372] bcachefs (loop5): done initializing freespace [ 458.093773][T10372] bcachefs (loop5): reading snapshots table [ 458.100193][T10372] bcachefs (loop5): reading snapshots done [ 458.241589][T10372] bcachefs (loop5): done starting filesystem [ 458.338134][T10372] syz.5.1872 (10372) used greatest stack depth: 1152 bytes left [ 458.373872][ T7329] bcachefs (loop5): shutting down [ 458.379195][ T7329] bcachefs (loop5): going read-only [ 458.384562][ T7329] bcachefs (loop5): finished waiting for writes to stop [ 458.456916][ T7329] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 458.682769][ T7329] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 458.743316][ T7329] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 458.785039][ T7329] bcachefs (loop5): marking filesystem clean [ 458.860018][ T7329] bcachefs (loop5): shutdown complete [ 459.027740][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 459.076937][T10405] netlink: 'syz.3.1882': attribute type 10 has an invalid length. [ 459.097367][T10405] team0: Cannot enslave team device to itself [ 459.118015][T10407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1884'. [ 459.127650][T10407] netem: change failed [ 459.216432][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 459.266571][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 459.276580][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.330716][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 459.338006][ T24] pvrusb2: ********** [ 459.342099][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 459.352446][ T24] pvrusb2: Important functionality might not be entirely working. [ 459.360527][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 459.372098][ T24] pvrusb2: ********** [ 459.568204][ T2331] pvrusb2: Invalid write control endpoint [ 459.782510][ T24] usb 3-1: USB disconnect, device number 17 [ 459.789004][ T2331] pvrusb2: Invalid write control endpoint [ 459.789064][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 459.789124][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 459.789179][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 459.789244][ T2331] pvrusb2: Device being rendered inoperable [ 459.789386][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 459.789507][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 459.790714][ T2331] pvrusb2: Attached sub-driver cx25840 [ 459.855298][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 459.865591][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 460.679967][T10430] tun0: tun_chr_ioctl cmd 2147767506 [ 460.963862][T10432] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 461.601628][T10445] netem: change failed [ 461.766332][ T5868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 461.957520][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.971532][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.983882][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.998033][ T5868] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.007382][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.093883][T10454] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 462.117028][ T5868] usb 5-1: config 0 descriptor?? [ 462.287102][T10456] loop3: detected capacity change from 0 to 8 [ 462.429734][T10456] squashfs: Unknown parameter 'xœìU?kAÿ½Ý¹Û;½" 6¶&&·±–ú<.k ÙóOöDï8ÈY¥Q[?@ÀÒ/`#X‹…ˆ`£…‚«ˆœ¼™7›½Û5Þ [ 462.429734][T10456] !Íü`y¿yóþ;y»7“»I' [ 462.565019][ T5868] plantronics 0003:047F:FFFF.000F: unbalanced collection at end of report description [ 462.601873][ T5868] plantronics 0003:047F:FFFF.000F: parse failed [ 462.608926][ T5868] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 462.828545][ T5875] usb 5-1: USB disconnect, device number 13 [ 463.389916][T10471] loop6: detected capacity change from 0 to 512 [ 463.418116][T10471] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 464.384255][T10492] loop6: detected capacity change from 0 to 256 [ 464.476802][T10493] loop3: detected capacity change from 0 to 1024 [ 464.541351][T10493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.676824][T10492] FAT-fs (loop6): Directory bread(block 64) failed [ 464.683713][T10492] FAT-fs (loop6): Directory bread(block 65) failed [ 464.690895][T10492] FAT-fs (loop6): Directory bread(block 66) failed [ 464.697785][T10492] FAT-fs (loop6): Directory bread(block 67) failed [ 464.704751][T10492] FAT-fs (loop6): Directory bread(block 68) failed [ 464.711440][T10492] FAT-fs (loop6): Directory bread(block 69) failed [ 464.718414][T10492] FAT-fs (loop6): Directory bread(block 70) failed [ 464.725330][T10492] FAT-fs (loop6): Directory bread(block 71) failed [ 464.732144][T10492] FAT-fs (loop6): Directory bread(block 72) failed [ 464.740653][T10492] FAT-fs (loop6): Directory bread(block 73) failed [ 464.781122][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.591839][T10518] team0: No ports can be present during mode change [ 466.065307][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 466.657285][T10545] input: syz1 as /devices/virtual/input/input23 [ 466.943246][T10551] loop5: detected capacity change from 0 to 128 [ 467.059842][ T30] audit: type=1800 audit(2000000119.719:60): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1946" name="bus" dev="loop5" ino=1048677 res=0 errno=0 [ 467.344699][T10558] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 467.350511][T10558] dvmrp1: ignored: set checksum disabled [ 467.487007][T10563] loop2: detected capacity change from 0 to 136 [ 467.707472][T10567] loop5: detected capacity change from 0 to 512 [ 467.719830][T10567] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.758010][T10567] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 467.847047][T10567] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1956: attempt to clear invalid blocks 2 len 1 [ 467.933867][T10567] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 467.948976][T10567] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1956: invalid indirect mapped block 1819239214 (level 0) [ 467.990965][T10567] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1956: invalid indirect mapped block 1819239214 (level 1) [ 468.027646][T10567] EXT4-fs (loop5): 1 truncate cleaned up [ 468.035992][T10567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.141215][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 468.305693][ T7329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.493142][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 468.503033][T10583] netlink: 'syz.4.1963': attribute type 30 has an invalid length. [ 468.562147][ T3986] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.596265][ T3986] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.650409][ T3986] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.672894][ T3986] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.931807][T10593] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1968'. [ 469.333214][T10606] netlink: 'syz.6.1984': attribute type 6 has an invalid length. [ 469.414438][T10605] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1974'. [ 469.458254][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 469.591492][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 469.633996][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 469.679187][ T5875] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 469.687881][ T5875] usb 4-1: config 0 has no interface number 0 [ 469.694275][ T5875] usb 4-1: config 0 interface 12 has no altsetting 0 [ 469.729755][ T5875] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 469.739301][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.747595][ T5875] usb 4-1: Product: syz [ 469.754198][ T5875] usb 4-1: Manufacturer: syz [ 469.758949][ T5875] usb 4-1: SerialNumber: syz [ 469.809166][ T5875] usb 4-1: config 0 descriptor?? [ 470.225991][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.234227][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.506415][T10627] loop6: detected capacity change from 0 to 16 [ 470.584194][T10627] erofs (device loop6): mounted with root inode @ nid 36. [ 470.663732][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.676198][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.687388][T10627] erofs (device loop6): readahead error at folio 7 @ nid 36 [ 470.695028][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.705809][T10627] erofs (device loop6): readahead error at folio 6 @ nid 36 [ 470.713395][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.724165][T10627] erofs (device loop6): readahead error at folio 5 @ nid 36 [ 470.731756][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.742825][T10627] erofs (device loop6): readahead error at folio 4 @ nid 36 [ 470.750292][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.761125][T10627] erofs (device loop6): readahead error at folio 3 @ nid 36 [ 470.767762][ T5875] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 470.768736][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.780754][ T5875] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 470.789139][T10627] erofs (device loop6): readahead error at folio 2 @ nid 36 [ 470.789256][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.789358][T10627] erofs (device loop6): readahead error at folio 1 @ nid 36 [ 470.789462][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.789578][T10627] erofs (device loop6): readahead error at folio 0 @ nid 36 [ 470.789708][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.797208][ T5875] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 470.804608][T10627] erofs (device loop6): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 470.815301][ T5875] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 470.822556][T10627] erofs (device loop6): read error -117 @ 0 of nid 36 [ 470.849758][ T5875] usb 4-1: USB disconnect, device number 9 [ 470.851750][T10627] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 471.127618][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 471.201770][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 472.007888][T10651] loop3: detected capacity change from 0 to 256 [ 472.071394][T10651] exfat: Deprecated parameter 'utf8' [ 472.097702][T10642] loop2: detected capacity change from 0 to 32768 [ 472.131701][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 472.146352][T10642] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 472.161505][T10642] bcachefs (/dev/loop2): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096) [ 472.174085][T10642] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset [ 472.241237][T10651] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 472.487045][T10656] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 472.580911][ T9] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 472.592724][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.599552][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 472.608935][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.633052][ T9] usb 6-1: config 0 descriptor?? [ 473.163580][T10663] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 473.172862][T10663] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2000'. [ 473.480897][ T9] hid_parser_main: 51 callbacks suppressed [ 473.480993][ T9] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 473.495301][ T9] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 473.503363][ T9] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 473.512120][ T9] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 473.519841][ T9] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 473.595708][ T9] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 473.662915][T10671] netlink: 'syz.2.2003': attribute type 3 has an invalid length. [ 473.671114][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'. [ 473.985479][ T9] corsair-cpro 0003:1B1C:0C10.0010: probe with driver corsair-cpro failed with error -110 [ 474.014584][ T9] usb 6-1: USB disconnect, device number 11 [ 474.126793][T10681] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 474.343262][ T5875] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 474.510767][ T3901] Bluetooth: hci1: Frame reassembly failed (-84) [ 474.519905][T10685] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 474.567598][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.581885][ T5875] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 474.591241][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.616974][ T5875] usb 3-1: config 0 descriptor?? [ 475.053552][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 475.081977][ T5875] uclogic 0003:5543:0522.0011: unbalanced delimiter at end of report description [ 475.106061][ T5875] uclogic 0003:5543:0522.0011: parse failed [ 475.112624][ T5875] uclogic 0003:5543:0522.0011: probe with driver uclogic failed with error -22 [ 475.273514][ T5875] usb 3-1: USB disconnect, device number 18 [ 475.294272][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.305633][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 475.316952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.331826][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 475.341253][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.388558][T10693] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 475.412923][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.639395][ T24] usb 4-1: USB disconnect, device number 10 [ 475.938235][T10707] netlink: 'syz.6.2033': attribute type 83 has an invalid length. [ 476.510838][ T5822] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 476.839154][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 477.033613][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.043963][ T24] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 477.053956][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.105131][ T24] usb 4-1: config 0 descriptor?? [ 477.308817][ T5818] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 477.310874][ T5820] Bluetooth: hci6: command 0x1003 tx timeout [ 477.608789][ T24] greenasia 0003:0E8F:0012.0012: hidraw0: USB HID v0.07 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 477.620654][ T24] greenasia 0003:0E8F:0012.0012: no inputs found [ 477.874000][ T24] usb 4-1: USB disconnect, device number 11 [ 478.079407][ T5875] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 478.258100][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 478.283331][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 478.305960][ T5875] usb 3-1: config 9 has an invalid interface number: 48 but max is 0 [ 478.314765][ T5875] usb 3-1: config 9 has no interface number 0 [ 478.321213][ T5875] usb 3-1: config 9 interface 48 has no altsetting 0 [ 478.376292][ T5875] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 478.385874][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.394712][ T5875] usb 3-1: Product: syz [ 478.399158][ T5875] usb 3-1: Manufacturer: syz [ 478.403906][ T5875] usb 3-1: SerialNumber: syz [ 478.704078][ T5875] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 478.794995][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 478.985697][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 478.997075][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 479.008958][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 479.043317][ T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 479.053126][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.061558][ T24] usb 5-1: Product: syz [ 479.067081][ T24] usb 5-1: Manufacturer: syz [ 479.072264][ T24] usb 5-1: SerialNumber: syz [ 479.108108][ T24] usb 5-1: config 0 descriptor?? [ 479.115966][T10762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 479.133812][T10762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 479.150165][ T24] usb 5-1: ucan: probing device on interface #0 [ 479.303141][ T5875] gspca_vc032x: reg_r err -71 [ 479.309771][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.315196][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.321417][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.326846][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.332436][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.337965][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.343377][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.349590][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.354996][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.360550][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.367024][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.376225][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.382703][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.388287][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.393690][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.399371][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.404777][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.411131][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.416539][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.423205][ T5875] gspca_vc032x: Unknown sensor... [ 479.428677][ T5875] vc032x 3-1:9.48: probe with driver vc032x failed with error -22 [ 479.452386][ T5875] usb 3-1: USB disconnect, device number 19 [ 479.851047][ T24] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 479.909018][ T24] usb 5-1: USB disconnect, device number 14 [ 480.286200][T10785] loop2: detected capacity change from 0 to 2048 [ 480.326513][T10785] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 480.374370][T10790] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.592075][T10796] loop6: detected capacity change from 0 to 512 [ 480.654457][T10796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 480.654665][T10794] 9p: Unknown access argument ÿÿ: -22 [ 480.705058][T10796] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2065: casefold flag without casefold feature [ 480.726141][T10796] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2065: couldn't read orphan inode 15 (err -117) [ 480.797732][T10796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.945693][T10796] EXT4-fs warning (device loop6): ext4_empty_dir:3089: inode #2: comm syz.6.2065: directory missing '.' [ 481.194608][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.697666][T10809] loop6: detected capacity change from 0 to 4096 [ 481.725777][T10809] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 481.867664][T10809] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 481.889759][T10809] ntfs3(loop6): mft corrupted [ 481.894741][T10809] ntfs3(loop6): Failed to load $Extend (-22). [ 481.901341][T10809] ntfs3(loop6): Failed to initialize $Extend. [ 481.998833][T10809] ntfs3(loop6): ino=1e, mi_enum_attr [ 482.004423][T10809] ntfs3(loop6): ino=1e, mi_enum_attr [ 482.012646][T10809] ntfs3(loop6): ino=1e, "file1" mi_enum_attr [ 482.019129][T10809] ntfs3(loop6): ino=1e, "file1" mi_enum_attr [ 482.063711][T10809] ntfs3(loop6): ino=1e, "file1" mi_enum_attr [ 482.224274][T10832] loop3: detected capacity change from 0 to 256 [ 484.004198][T10857] loop6: detected capacity change from 0 to 32768 [ 484.098473][T10857] JBD2: Ignoring recovery information on journal [ 484.212755][T10857] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 484.365790][T10872] loop5: detected capacity change from 0 to 64 [ 484.398951][ T8334] ocfs2: Unmounting device (7,6) on (node local) [ 486.046199][T10901] loop6: detected capacity change from 0 to 128 [ 486.115319][T10901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 486.165979][T10901] System zones: 1-3, 19-19, 35-36 [ 486.199782][T10901] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 486.294369][T10901] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 486.643759][ T30] audit: type=1800 audit(2000000139.249:61): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2107" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 487.154276][ T8334] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.307756][T10917] loop5: detected capacity change from 0 to 128 [ 487.365268][T10917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 487.379778][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'. [ 487.408136][T10917] System zones: 1-3, 19-19, 35-36 [ 487.441657][T10917] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 487.571068][T10917] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 487.714627][ T30] audit: type=1800 audit(2000000151.390:62): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2125" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 488.013086][ T7329] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 488.895845][T10956] loop2: detected capacity change from 0 to 512 [ 488.925426][T10956] EXT4-fs: Ignoring removed mblk_io_submit option [ 488.940087][T10956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 488.991497][T10956] EXT4-fs (loop2): 1 truncate cleaned up [ 489.000390][T10956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.195488][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.361261][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2136'. [ 490.183817][ T5875] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 490.354150][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 490.365685][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 490.377608][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 490.418021][ T5875] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 490.429840][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.439025][ T5875] usb 7-1: Product: syz [ 490.443453][ T5875] usb 7-1: Manufacturer: syz [ 490.448209][ T5875] usb 7-1: SerialNumber: syz [ 490.463198][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 490.479031][ T5875] usb 7-1: config 0 descriptor?? [ 490.486368][T10981] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 490.521103][T10981] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 490.546438][ T5875] usb 7-1: ucan: probing device on interface #0 [ 490.623235][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 490.640730][ T9] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 490.649853][ T9] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 490.658698][ T9] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 490.672622][ T9] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 490.684987][ T9] usb 6-1: config 250 has no interface number 0 [ 490.691607][ T9] usb 6-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 490.707067][ T9] usb 6-1: config 250 interface 228 has no altsetting 0 [ 490.903874][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 490.914009][ T9] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 490.923021][ T9] usb 6-1: Product: syz [ 490.927349][ T9] usb 6-1: SerialNumber: syz [ 490.953577][ T9] hub 6-1:250.228: bad descriptor, ignoring hub [ 490.960123][ T9] hub 6-1:250.228: probe with driver hub failed with error -5 [ 491.217186][ T5875] ucan 7-1:0.0: probe with driver ucan failed with error -71 [ 491.249698][ T5875] usb 7-1: USB disconnect, device number 3 [ 491.377073][T11005] input: syz0 as /devices/virtual/input/input24 [ 491.452332][ T24] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 491.462927][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 491.645899][ T24] usb 6-1: device firmware changed [ 491.665706][ T24] usb 6-1: USB disconnect, device number 12 [ 491.865402][ T5875] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 491.969020][T11015] loop2: detected capacity change from 0 to 64 [ 491.981663][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 492.034805][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 492.057073][T11015] hfs: request for non-existent node 131072 in B*Tree [ 492.066477][T11015] hfs: request for non-existent node 131072 in B*Tree [ 492.091441][ T5875] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 492.100370][ T5875] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 492.111357][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.139973][ T5875] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.149563][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.157963][ T5875] usb 5-1: Product: syz [ 492.162608][ T5875] usb 5-1: Manufacturer: syz [ 492.169560][ T5875] usb 5-1: SerialNumber: syz [ 492.181190][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 492.219693][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.230329][ T24] usb 6-1: config 0 has no interfaces? [ 492.273327][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 492.282856][ T24] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 492.291386][ T24] usb 6-1: Product: syz [ 492.295698][ T24] usb 6-1: SerialNumber: syz [ 492.324829][ T24] usb 6-1: config 0 descriptor?? [ 492.548199][ T24] usb 6-1: USB disconnect, device number 13 [ 492.741537][T11025] loop6: detected capacity change from 0 to 1024 [ 492.771843][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 492.811895][T11025] ===================================================== [ 492.819205][T11025] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0 [ 492.827094][T11025] hfsplus_rename_cat+0x1173/0x17e0 [ 492.832719][T11025] hfsplus_rename+0x1fc/0x2f0 [ 492.837563][T11025] vfs_rename+0x1f4e/0x2530 [ 492.842371][T11025] do_renameat2+0x1484/0x1a50 [ 492.847361][T11025] __ia32_sys_rename+0xd7/0x140 [ 492.852676][T11025] ia32_sys_call+0x351c/0x4310 [ 492.857577][T11025] __do_fast_syscall_32+0xb0/0x150 [ 492.863138][T11025] do_fast_syscall_32+0x38/0x80 [ 492.868133][T11025] do_SYSENTER_32+0x1f/0x30 [ 492.872944][T11025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.879493][T11025] [ 492.882071][T11025] Uninit was stored to memory at: [ 492.888142][T11025] hfsplus_rename_cat+0x10a9/0x17e0 [ 492.893950][T11025] hfsplus_rename+0x1fc/0x2f0 [ 492.898814][T11025] vfs_rename+0x1f4e/0x2530 [ 492.903635][T11025] do_renameat2+0x1484/0x1a50 [ 492.908480][T11025] __ia32_sys_rename+0xd7/0x140 [ 492.913662][T11025] ia32_sys_call+0x351c/0x4310 [ 492.918572][T11025] __do_fast_syscall_32+0xb0/0x150 [ 492.924194][T11025] do_fast_syscall_32+0x38/0x80 [ 492.929232][T11025] do_SYSENTER_32+0x1f/0x30 [ 492.931339][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 492.934016][T11025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.934158][T11025] [ 492.948123][T11025] Uninit was stored to memory at: [ 492.953836][T11025] hfsplus_create_cat+0x18fb/0x1910 [ 492.959199][T11025] hfsplus_fill_super+0x211d/0x2730 [ 492.964735][T11025] get_tree_bdev_flags+0x6e3/0x920 [ 492.970013][T11025] get_tree_bdev+0x38/0x50 [ 492.974691][T11025] hfsplus_get_tree+0x35/0x40 [ 492.979567][T11025] vfs_get_tree+0xb0/0x5c0 [ 492.981318][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 492.984362][T11025] do_new_mount+0x733/0x1420 [ 492.996181][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.998940][T11025] path_mount+0x6db/0x1e90 [ 493.011981][T11025] __se_sys_mount+0x6eb/0x7d0 [ 493.016815][T11025] __ia32_sys_mount+0xe2/0x150 [ 493.021884][T11025] ia32_sys_call+0x2c16/0x4310 [ 493.026781][T11025] __do_fast_syscall_32+0xb0/0x150 [ 493.032190][T11025] do_fast_syscall_32+0x38/0x80 [ 493.037169][T11025] do_SYSENTER_32+0x1f/0x30 [ 493.042022][T11025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.048568][T11025] [ 493.050802][ T5875] usb 5-1: 0:2 : does not exist [ 493.051061][T11025] Uninit was created at: [ 493.060549][T11025] __alloc_frozen_pages_noprof+0x689/0xf00 [ 493.066511][T11025] alloc_pages_mpol+0x328/0x860 [ 493.071643][T11025] alloc_frozen_pages_noprof+0xf7/0x200 [ 493.077409][T11025] allocate_slab+0x24d/0x1220 [ 493.082340][T11025] ___slab_alloc+0xff3/0x3470 [ 493.088159][T11025] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 493.094663][T11025] hfsplus_alloc_inode+0x5a/0xd0 [ 493.099751][T11025] alloc_inode+0x87/0x4a0 [ 493.104471][T11025] iget_locked+0x239/0x12d0 [ 493.109140][T11025] hfsplus_iget+0x5c/0xb80 [ 493.113862][T11025] hfsplus_btree_open+0x128/0x1cf0 [ 493.118906][ T9] usb 3-1: config 0 descriptor?? [ 493.119134][T11025] hfsplus_fill_super+0x1161/0x2730 [ 493.129515][T11025] get_tree_bdev_flags+0x6e3/0x920 [ 493.134936][T11025] get_tree_bdev+0x38/0x50 [ 493.139505][T11025] hfsplus_get_tree+0x35/0x40 [ 493.144492][T11025] vfs_get_tree+0xb0/0x5c0 [ 493.149057][T11025] do_new_mount+0x733/0x1420 [ 493.153974][T11025] path_mount+0x6db/0x1e90 [ 493.158544][T11025] __se_sys_mount+0x6eb/0x7d0 [ 493.163980][T11025] __ia32_sys_mount+0xe2/0x150 [ 493.168914][T11025] ia32_sys_call+0x2c16/0x4310 [ 493.173921][T11025] __do_fast_syscall_32+0xb0/0x150 [ 493.179220][T11025] do_fast_syscall_32+0x38/0x80 [ 493.184340][T11025] do_SYSENTER_32+0x1f/0x30 [ 493.188976][T11025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.196517][T11025] [ 493.198950][T11025] CPU: 1 UID: 0 PID: 11025 Comm: syz.6.2165 Not tainted syzkaller #0 PREEMPT(none) [ 493.208868][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.219188][T11025] ===================================================== [ 493.226515][T11025] Disabling lock debugging due to kernel taint [ 493.232877][T11025] Kernel panic - not syncing: kmsan.panic set ... [ 493.239412][T11025] CPU: 1 UID: 0 PID: 11025 Comm: syz.6.2165 Tainted: G B syzkaller #0 PREEMPT(none) [ 493.250508][T11025] Tainted: [B]=BAD_PAGE [ 493.254731][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.264895][T11025] Call Trace: [ 493.268251][T11025] [ 493.271246][T11025] __dump_stack+0x26/0x30 [ 493.275732][T11025] dump_stack_lvl+0x53/0x270 [ 493.280471][T11025] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 493.286440][T11025] dump_stack+0x1e/0x25 [ 493.290734][T11025] vpanic+0x361/0xc50 [ 493.294878][T11025] panic+0x15d/0x160 [ 493.298965][T11025] kmsan_report+0x31c/0x320 [ 493.303609][T11025] ? __msan_warning+0x1b/0x30 [ 493.308427][T11025] ? hfsplus_rename_cat+0x1173/0x17e0 [ 493.313958][T11025] ? hfsplus_rename+0x1fc/0x2f0 [ 493.318963][T11025] ? vfs_rename+0x1f4e/0x2530 [ 493.323790][T11025] ? do_renameat2+0x1484/0x1a50 [ 493.328796][T11025] ? __ia32_sys_rename+0xd7/0x140 [ 493.333988][T11025] ? ia32_sys_call+0x351c/0x4310 [ 493.339051][T11025] ? __do_fast_syscall_32+0xb0/0x150 [ 493.344463][T11025] ? do_fast_syscall_32+0x38/0x80 [ 493.349702][T11025] ? do_SYSENTER_32+0x1f/0x30 [ 493.354502][T11025] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.361167][T11025] ? kmsan_get_metadata+0xfb/0x160 [ 493.366426][T11025] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 493.372389][T11025] ? hfsplus_bnode_dump+0x50a/0x560 [ 493.377762][T11025] ? kmsan_get_metadata+0xfb/0x160 [ 493.383018][T11025] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 493.388990][T11025] ? hfsplus_brec_remove+0x92f/0xa60 [ 493.394490][T11025] ? kmsan_get_metadata+0xfb/0x160 [ 493.399866][T11025] __msan_warning+0x1b/0x30 [ 493.404512][T11025] hfsplus_rename_cat+0x1173/0x17e0 [ 493.409896][T11025] ? kfree+0xf1/0xec0 [ 493.414018][T11025] ? filter_irq_stacks+0x49/0x190 [ 493.419174][T11025] ? stack_depot_save_flags+0x35/0x7b0 [ 493.424758][T11025] ? kmsan_get_metadata+0xfb/0x160 [ 493.430106][T11025] ? kmsan_get_metadata+0xfb/0x160 [ 493.435364][T11025] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 493.441834][T11025] ? kmsan_get_metadata+0xfb/0x160 [ 493.447097][T11025] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 493.453049][T11025] ? kmsan_get_metadata+0xfb/0x160 [ 493.458308][T11025] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 493.464298][T11025] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 493.470782][T11025] hfsplus_rename+0x1fc/0x2f0 [ 493.475632][T11025] ? __pfx_hfsplus_rename+0x10/0x10 [ 493.480996][T11025] vfs_rename+0x1f4e/0x2530 [ 493.485749][T11025] do_renameat2+0x1484/0x1a50 [ 493.490647][T11025] __ia32_sys_rename+0xd7/0x140 [ 493.495671][T11025] ia32_sys_call+0x351c/0x4310 [ 493.500564][T11025] __do_fast_syscall_32+0xb0/0x150 [ 493.505826][T11025] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 493.511731][T11025] do_fast_syscall_32+0x38/0x80 [ 493.516709][T11025] do_SYSENTER_32+0x1f/0x30 [ 493.521332][T11025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.527826][T11025] RIP: 0023:0xf70ee539 [ 493.531985][T11025] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 493.551722][T11025] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 493.560270][T11025] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000380 [ 493.568342][T11025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.576397][T11025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.584466][T11025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.592533][T11025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.600627][T11025] [ 493.603994][T11025] Kernel Offset: disabled [ 493.608358][T11025] Rebooting in 86400 seconds..