last executing test programs: 16m19.048173718s ago: executing program 32 (id=4615): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ppoll(&(0x7f0000000100)=[{r0, 0x4040}], 0x1, 0x0, 0x0, 0x0) 16m12.619512332s ago: executing program 33 (id=4649): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="747970653dbcaeaad02c636f6465706167653d6d616363656e746575726f2c71756965742c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d61736369692c00d0a8ec5a8890d9d4633918a2987ec6ac65d89ba6a0bd63fd96f96c3fb4f466427906b003f094f4af9e914718a353af395b6bce5e7ceb326d22f8e0aa6cf83fa438fda2026de6d1ad2d1c38e021e414ce150a41bf70f7fd2f86a9ade73fafb467c81cb59813d68600000000000000093700004eeda023fe7ec1e7c3069db2dac8990e273ddc3fa7581ad213ae17f312bd029ed6299c36911207f114373bef12ca0219aeb4d0e69462402b7a5e8a8e4096fdc1aba6530b7d42418edb34b22302b2f059681e2f108dbd979e92"], 0x5, 0x2e5, &(0x7f0000000800)="$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") rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') 16m10.000017595s ago: executing program 34 (id=4662): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000000f80)=""/4110, 0x100e}, {&(0x7f0000000040)=""/104, 0x68}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x9}], 0x2, 0x0, 0x0) 15m13.24609941s ago: executing program 35 (id=4886): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150c, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/46, 0x2e) 14m33.696897792s ago: executing program 2 (id=5059): setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 14m33.094684333s ago: executing program 2 (id=5062): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 14m30.070736368s ago: executing program 36 (id=5062): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 10m48.206651169s ago: executing program 37 (id=6106): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r0, 0x32, 0x1, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8m16.969159633s ago: executing program 9 (id=6966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x201, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x10}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000040) 8m16.290243914s ago: executing program 9 (id=6971): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 8m15.532538486s ago: executing program 9 (id=6976): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) 8m14.783997296s ago: executing program 9 (id=6981): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1810002, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x1cd, &(0x7f0000002180)="$eJzs282O0lAYxvGnBdqZ8ftr48rEhW6kypDo7JwL8AbcTWbqhFjUiBuIibLxPrwMd96JNwCJXkFNSwkUaSltaEH+v2Sm75z06TmTzNs5JSAAe+tm+N2QoUZY+b7/5YGk168k1VOjVikLBLAxvjFp+iTW8uGD9BSA3VD7vXzcTmzwH9PC5C4A7LLxaS3cB/w0pF9/Pp+Poq9Gxv3D+NSUatEPc3lLOsiUHxrh8X5dGs3lbcUvYHxN2L98n+QfKZ4/zLr+aP6jhfzRqmDwyBQYmuHh8cN4/oqkq5KuSbou6Ub0rHVL0u0l818szH8v4/qBIoK/vmZsJFPbxvPNlBPs9HzQPW86nvt0rVlnGlH+Wc68FeVbBfPHOfN2lG+ev/cuEs96mfPqQDrzn/5fz8r+TzR7+bBI/9cL9j+wz3r9wdszz3M/rl+YuVIU+1JMN5LBSHCbXp36VvmayysOt2MZyUXFNyYAG+d86n5wev3Bk0737NK9dN+12icv2set9vMTJ9yXO0V25wC22eyffrbz098SBAAAAAAAAAAAAAAAqnBH0t2qFwEAAACgFGV8nKjq3xEAAAAAAAAAAAAAAAAAAAD4X/wNAAD//7bVPAk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 8m13.721953629s ago: executing program 9 (id=6986): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) lseek(r0, 0x2, 0x1) 8m12.99725753s ago: executing program 9 (id=6991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000001a0000001c000d0104000080140000800800020089728e82b1070e423cb1"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 8m10.686209239s ago: executing program 38 (id=6991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000001a0000001c000d0104000080140000800800020089728e82b1070e423cb1"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 6m13.804438312s ago: executing program 6 (id=7662): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r1}) 6m12.857322872s ago: executing program 6 (id=7669): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000900)={[{@overriderock}, {@nocompress}, {@hide}, {@session={'session', 0x3d, 0x5a}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 6m12.293128006s ago: executing program 6 (id=7673): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 6m11.729273047s ago: executing program 6 (id=7678): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 6m11.213291028s ago: executing program 6 (id=7683): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 6m10.649907037s ago: executing program 6 (id=7686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) removexattr(0x0, 0x0) 5m55.441636041s ago: executing program 39 (id=7686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) removexattr(0x0, 0x0) 3m31.5364156s ago: executing program 4 (id=8649): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffeda, 0x0, @gue={{0x2}}}}}}}, 0x0) 3m30.986127996s ago: executing program 4 (id=8652): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='-3', 0x2}]) 3m30.285553214s ago: executing program 4 (id=8659): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') 3m29.969609474s ago: executing program 4 (id=8660): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001"], 0x130}}, 0x0) 3m29.293958999s ago: executing program 4 (id=8666): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 3m28.670129734s ago: executing program 4 (id=8672): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) 3m13.241352805s ago: executing program 40 (id=8672): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) 1m27.345235642s ago: executing program 7 (id=9353): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x103, @local, 0xa}, 0x1c) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000001200)="454b5ecae18bdf35ce23a4a84229a3be56a2ed77af8437524b87065e245db4190209ec20442c695ce63bbf600bda409a8e2fdd9cd2ce0941686e6c26ef4f9c907179bfb05e003793ab09c5452846df928363d13b69a298d79a782b5b6de978d6d930e4899e8b6b4359321cedc3c0af28758baf2989873bee3700ab94b7e03ea1ab73a0f081305f540956e7653dd2ab73a412312d3bd4e7658a7295182e92088e1fbad980", 0xa4}, {&(0x7f0000000080)="54650bd8c91671fc34987c54acb123f3ac611fe3329d278e74cbfad2ff74", 0x1e}, {&(0x7f00000001c0)="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", 0x4f0}], 0x3) 1m26.960435281s ago: executing program 7 (id=9355): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000040)) 1m26.383179214s ago: executing program 7 (id=9360): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x18e, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x4, 0x13, 0x7, 0x7f, 0x6, 0xb763599953cb090d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 1m25.884672511s ago: executing program 7 (id=9365): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x4004, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303031302c636f6465706167653d63703835352c696f636861727365743d6370313235302c0065fcfac35652d2119752177b83dd62bd1f7de553835128ed9475d69a7ff68815d149e3d770260f87adedaaa6166f2883a669eadf2fc703841d76d28addf20312d9c8fc5b9c22b6ded1166f95bc118305a3ee7ebad510e9785ba1b21c76ac0d23979366134009b2e8055dfdb125c12135913b94b66581", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYBLOB="d3f35b2297445ef029d1864d2fa28357216768347b4e29f27da9448236496d7f8e1f1692877062f7af1f6d5e06c98ff182c2d8859074ed34c8c537a0b145cedef8e4ec5ed426fbbfae61328eaf7b084e2f5dceae9684c14981c48762696b73478e92a645f261d79997bcb1e932a3a0fa099263b83dd195aa8d6b98ca3f1d44279b4c944d1fc34ab659dc061fb25b68d1decc34a81af69416ebec70fa59c6bae763c506a00ca1ca0954d3399f2e2b6c7b914b03e4c0121813e5", @ANYBLOB="930f5cedffd91218932a937443bfd092311dd9f5aca3e0daf0e3c850948814dab6ce93f85bf7d0614662ca07fcba804e2181ea10357b2152c11ea1c1290e597ceada5fcd29201d9f8bb050a7db0ae3fedd350305b88b281ad98df8d2dde194f4f16561c179cc9fee273fab23ec519b5d0c945fc1995042a9444415d92df893773482d47e8fe3ab08a63d0ab9dd6b68d0524ff7e886edf3e9a93311aae9f71b59ff87790e9c1208ea5d8f6a8bd749f72ef1eca23235a5b0dae4b09e40a4b4cf06aa4d1b36bc91ffeafd9f8ceb19f6c085a9bfe9ce2e89fbf9af06e8e947bf42518d1f0027c5fa39249914cdacc74a2750f3d79cf2", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0x1, 0x309, &(0x7f0000000880)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chown(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 1m25.33646575s ago: executing program 7 (id=9369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'squashfs\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}}, 0x0) 1m24.872987273s ago: executing program 7 (id=9371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) 1m22.619457626s ago: executing program 41 (id=9371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) 1m1.391811309s ago: executing program 2 (id=9375): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/167, 0xa7) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) 59.559715225s ago: executing program 2 (id=9482): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1810002, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0805c250a09347cb0bca3b9f8a8755b3945d3396e6eb14eb64426210d11830f13cb571b8967902d058a39cf86287f14c080fcb8d529bfcda2a3722d8dc8ebe2c29476750ec92bf56619454329e748b3549ba625812d4422958b334db652bd2b9492784354250a06d9b3f22846434889dbea72d8f13aa590030f83b62254e87e4230846ce6bd18bc79e73a1a1fa67571c3ba78979ed9dfc3410b95c51ce90bcca297c2a6995b236c39c5ec957cf8717fa28a560525b50a3a689d2bc34038bc078356614f0c584b2ae572c025c4d8414161f1100073f6fee746c008cefce574d1c1e0333b07febbd41add7375c604f3c34b6606013a8172cea655aa6580601b3668ac91df25f684745c94ad9ffc15548d32a8608c5acb60bc437052b2dd51eea8957d673499f6f685feefb2332976ce89829d1cd967d7dd29336387ff12a", @ANYRES16=0x0], 0x1, 0x1cd, &(0x7f0000002180)="$eJzs282O0lAYxvGnBdqZ8ftr48rEhW6kypDo7JwL8AbcTWbqhFjUiBuIibLxPrwMd96JNwCJXkFNSwkUaSltaEH+v2Sm75z06TmTzNs5JSAAe+tm+N2QoUZY+b7/5YGk168k1VOjVikLBLAxvjFp+iTW8uGD9BSA3VD7vXzcTmzwH9PC5C4A7LLxaS3cB/w0pF9/Pp+Poq9Gxv3D+NSUatEPc3lLOsiUHxrh8X5dGs3lbcUvYHxN2L98n+QfKZ4/zLr+aP6jhfzRqmDwyBQYmuHh8cN4/oqkq5KuSbou6Ub0rHVL0u0l818szH8v4/qBIoK/vmZsJFPbxvPNlBPs9HzQPW86nvt0rVlnGlH+Wc68FeVbBfPHOfN2lG+ev/cuEs96mfPqQDrzn/5fz8r+TzR7+bBI/9cL9j+wz3r9wdszz3M/rl+YuVIU+1JMN5LBSHCbXp36VvmayysOt2MZyUXFNyYAG+d86n5wev3Bk0737NK9dN+12icv2set9vMTJ9yXO0V25wC22eyffrbz098SBAAAAAAAAAAAAAAAqnBH0t2qFwEAAACgFGV8nKjq3xEAAAAAAAAAAAAAAAAAAAD4X/wNAAD//7bVPAk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 58.436545582s ago: executing program 2 (id=9488): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x24, 0x0) 57.904618864s ago: executing program 2 (id=9496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) 55.956611337s ago: executing program 42 (id=9496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) 30.412023855s ago: executing program 0 (id=9632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7097b6dbdf251700000004000380480006"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 29.373613492s ago: executing program 0 (id=9636): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) 28.269330522s ago: executing program 0 (id=9639): syz_mount_image$udf(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, &(0x7f00000010c0), 0x1, 0x1030, &(0x7f0000001100)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 26.366000985s ago: executing program 0 (id=9643): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) 24.586179836s ago: executing program 0 (id=9650): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 23.836632846s ago: executing program 0 (id=9655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) 8.359110185s ago: executing program 43 (id=9655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) 5.904247837s ago: executing program 8 (id=9746): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2, 0x0, 0x0, 0x40080}, 0x24000895) 5.040339667s ago: executing program 3 (id=9748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002340)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000340)) 4.978722119s ago: executing program 5 (id=9749): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) 4.973959503s ago: executing program 8 (id=9750): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd70004cdbdf250100000008000700e00000020a0002000500000008000800ac1e41010c0031006e6c383032313100"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 4.497337615s ago: executing program 1 (id=9751): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0x0, 0xee00) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 4.347108198s ago: executing program 3 (id=9752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000007002100626200001c0022800400008004"], 0x38}}, 0x10004000) 4.198347294s ago: executing program 5 (id=9753): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@private=0xa010101, 0xfffc, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x10000000000000, 0x0, 0x0, 0x0, 0xfa2, 0x0, 0x5}, {}, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x1}, {{@in=@empty, 0x400004d6, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x2, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.179030611s ago: executing program 8 (id=9754): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x20048811) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 3.741149887s ago: executing program 1 (id=9755): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fba7080000000000000004"], 0x14}}, 0x0) 3.465527104s ago: executing program 5 (id=9756): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 3.391676118s ago: executing program 3 (id=9757): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4040088) 2.918335499s ago: executing program 1 (id=9758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280080001400000000d0500030000000000080004400000008b08000240000000040900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) 2.777177868s ago: executing program 8 (id=9759): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_continue}, {@sys_tz}, {@zero_size_dir}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard}, {@gid}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}, 0x1, 0x1525, &(0x7f00000037c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='./file2\x00') 2.694892694s ago: executing program 3 (id=9760): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) 1.937079147s ago: executing program 1 (id=9761): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.553186444s ago: executing program 5 (id=9762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x19ecbd1b}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}]}]}]}, 0x28}}, 0x20040084) 1.553002908s ago: executing program 3 (id=9763): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0x8008550e, 0x0) 1.505518187s ago: executing program 8 (id=9764): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0xb, 0xd}]}, 0x8) syz_emit_ethernet(0xfc0, &(0x7f00000006c0)={@remote, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @generic="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"}}}}, 0x0) 1.37662286s ago: executing program 1 (id=9765): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@resgid}, {@debug}]}, 0x1, 0x24d, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) 957.44596ms ago: executing program 3 (id=9766): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="f7606e5b0b979b4bec2d84f3ba3767b0026be50def6571aff7a56d761c77aeec3e4c382896f6cbf59a0c14c32e19e59b64a7ec129388e913288d61a2ffcdf0f87a0e9503000000c63e124b049aaba4", 0x4f}], 0x1) 656.006268ms ago: executing program 5 (id=9767): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000680)={[{@utf8no}, {@utf8no}, {@shortname_win95}, {@numtail}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8000}}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_win95}, {@uni_xlateno}]}, 0x25, 0x36b, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 644.163654ms ago: executing program 1 (id=9768): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) 469.794719ms ago: executing program 8 (id=9769): symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0xf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 5 (id=9770): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) unshare(0x24040400) recvmsg$kcm(r0, 0x0, 0x10000) kernel console output (not intermixed with test programs): ty change from 0 to 1024 [ 1513.057535][ T30] audit: type=1326 audit(1746773277.082:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24551 comm="syz.5.7567" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f33539 code=0x0 [ 1513.083023][T24550] hfsplus: bad catalog entry type [ 1513.170701][T24555] pim6reg: entered allmulticast mode [ 1513.214279][T24555] pim6reg: left allmulticast mode [ 1513.342684][T11629] hfsplus: b-tree write err: -5, ino 4 [ 1514.020365][T24565] loop7: detected capacity change from 0 to 2048 [ 1514.117968][T24565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1514.203938][ T30] audit: type=1800 audit(1746773278.212:182): pid=24565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7573" name="file1" dev="loop7" ino=1367 res=0 errno=0 [ 1514.439941][T24569] loop6: detected capacity change from 0 to 64 [ 1515.054012][T24577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7579'. [ 1515.063381][T24577] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7579'. [ 1515.339220][T10725] IPVS: starting estimator thread 0... [ 1515.434805][T24581] IPVS: using max 240 ests per chain, 12000 per kthread [ 1516.334230][T10725] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1516.390745][T24602] loop6: detected capacity change from 0 to 8 [ 1516.455715][T24602] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1516.464211][T24602] SQUASHFS error: Failed to read block 0x9b: -5 [ 1516.470668][T24602] SQUASHFS error: Unable to read metadata cache entry [99] [ 1516.478390][T24602] SQUASHFS error: Unable to read inode 0x127 [ 1516.504524][T10725] usb 2-1: Using ep0 maxpacket: 32 [ 1516.547299][T10725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.558884][T10725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.569267][T10725] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1516.578938][T10725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.615240][T10725] usb 2-1: config 0 descriptor?? [ 1517.094935][T10725] apple 0003:05AC:029C.0034: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.1-1/input0 [ 1517.265327][T10725] usb 2-1: USB disconnect, device number 23 [ 1520.344177][T24660] veth0_macvtap: left promiscuous mode [ 1520.369490][T24661] loop7: detected capacity change from 0 to 8 [ 1520.383440][T24660] macvtap0: entered promiscuous mode [ 1520.402816][T24660] veth0_macvtap: entered promiscuous mode [ 1520.424201][T24660] team0: Device macvtap0 failed to register rx_handler [ 1520.457071][T24660] veth0_macvtap: left promiscuous mode [ 1522.404356][T22613] Bluetooth: hci1: command 0x0405 tx timeout [ 1522.461887][T24698] netlink: 'syz.3.7637': attribute type 8 has an invalid length. [ 1522.584887][T24699] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7636'. [ 1523.104247][T24707] loop7: detected capacity change from 0 to 512 [ 1523.231667][T24707] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.7641: Invalid inode bitmap blk 4 in block_group 0 [ 1523.336430][T24707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1523.432076][T24707] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1523.448516][T24707] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.7641: Invalid inode bitmap blk 4 in block_group 0 [ 1523.534870][T24707] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1523.806666][T16119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.976566][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1524.071432][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7648'. [ 1524.177920][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1524.253126][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1524.286307][ T24] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.356670][ T24] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1524.366524][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.374975][ T24] usb 6-1: Product: syz [ 1524.379347][ T24] usb 6-1: Manufacturer: syz [ 1524.386922][ T24] usb 6-1: SerialNumber: syz [ 1524.704494][ T30] audit: type=1326 audit(1746773288.722:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.3.7652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1524.734525][ T30] audit: type=1326 audit(1746773288.732:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.3.7652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1524.835593][ T24] usb 6-1: Limiting number of CPorts to U8_MAX [ 1524.843442][ T24] usb 6-1: Not enough endpoints found in device, aborting! [ 1525.002244][ T30] audit: type=1326 audit(1746773288.792:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.3.7652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1525.035537][ T30] audit: type=1326 audit(1746773288.792:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.3.7652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1525.059914][T10725] usb 6-1: USB disconnect, device number 22 [ 1525.071375][ T30] audit: type=1326 audit(1746773288.792:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.3.7652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1527.143388][T24766] loop6: detected capacity change from 0 to 164 [ 1527.305723][T24766] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1528.205415][T24782] netlink: 276 bytes leftover after parsing attributes in process `syz.3.7676'. [ 1528.799171][T24793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7682'. [ 1532.934692][T24842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7704'. [ 1534.567780][T24862] loop7: detected capacity change from 0 to 8 [ 1534.690241][T24862] SQUASHFS error: Unable to read directory block [629:46] [ 1534.760391][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1534.769783][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1535.141864][T17354] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1535.157881][T17354] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1535.268542][T17354] usb 7-1: USB disconnect, device number 17 [ 1536.806625][T24889] loop7: detected capacity change from 0 to 256 [ 1537.997896][T24905] sd 0:0:1:0: device reset [ 1538.626213][T24916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7742'. [ 1539.211351][T24922] loop7: detected capacity change from 0 to 1024 [ 1539.530246][T24926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7747'. [ 1539.621368][ T4545] hfsplus: b-tree write err: -5, ino 4 [ 1540.041015][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7751'. [ 1540.050759][T24934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7751'. [ 1540.783385][T24941] pimreg3: entered allmulticast mode [ 1541.458474][T24955] loop7: detected capacity change from 0 to 64 [ 1541.579525][T24956] veth3: entered promiscuous mode [ 1541.585094][T24956] veth3: entered allmulticast mode [ 1541.951729][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7762'. [ 1543.546389][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7770'. [ 1543.576738][T24977] vlan2: entered promiscuous mode [ 1543.582025][T24977] erspan0: entered promiscuous mode [ 1545.219513][T22613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1545.233972][T22613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1545.244955][T22613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1545.283146][T22613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1545.306503][T22613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1547.054174][T24993] chnl_net:caif_netlink_parms(): no params data found [ 1547.372061][T22613] Bluetooth: hci2: command tx timeout [ 1547.376872][T25023] loop7: detected capacity change from 0 to 1024 [ 1547.919344][T25031] netlink: 'syz.5.7795': attribute type 1 has an invalid length. [ 1548.499125][T24993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.509522][T24993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.517687][T24993] bridge_slave_0: entered allmulticast mode [ 1548.527131][T24993] bridge_slave_0: entered promiscuous mode [ 1548.593260][T24993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.604025][T24993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.611809][T24993] bridge_slave_1: entered allmulticast mode [ 1548.622267][T24993] bridge_slave_1: entered promiscuous mode [ 1548.677711][T25038] pimreg: entered allmulticast mode [ 1548.800015][ T4545] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.045826][T24993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.097516][ T4545] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.208608][T24993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.281592][ T4545] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.477587][T22613] Bluetooth: hci2: command tx timeout [ 1549.577909][ T4545] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.632655][T24993] team0: Port device team_slave_0 added [ 1549.732192][T24993] team0: Port device team_slave_1 added [ 1550.033063][T24993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.042825][T24993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1550.069037][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.079395][T24993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.097808][ T4545] bridge_slave_1: left allmulticast mode [ 1550.104422][ T4545] bridge_slave_1: left promiscuous mode [ 1550.110958][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.149442][ T4545] bridge_slave_0: left allmulticast mode [ 1550.158654][ T4545] bridge_slave_0: left promiscuous mode [ 1550.165428][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.840064][T25068] netlink: 'syz.7.7809': attribute type 32 has an invalid length. [ 1550.848352][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7809'. [ 1550.862760][T25067] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7819'. [ 1550.929908][T25070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7810'. [ 1551.162158][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.185306][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.230001][ T4545] bond0 (unregistering): Released all slaves [ 1551.317990][T24993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.325381][T24993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1551.351470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.367699][T24993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.427559][T25068] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 1551.523828][T22613] Bluetooth: hci2: command tx timeout [ 1551.766927][ T4545] tipc: Disabling bearer [ 1551.772776][ T4545] tipc: Left network mode [ 1551.799074][T24993] hsr_slave_0: entered promiscuous mode [ 1551.809025][T24993] hsr_slave_1: entered promiscuous mode [ 1551.820513][T24993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1551.828546][T24993] Cannot create hsr debugfs directory [ 1552.178034][T25082] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7815'. [ 1552.540436][ T4545] hsr_slave_0: left promiscuous mode [ 1552.578332][ T4545] hsr_slave_1: left promiscuous mode [ 1552.589473][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.600035][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.635645][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.643448][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.698727][ T4545] veth1_macvtap: left promiscuous mode [ 1552.704760][ T4545] veth0_macvtap: left promiscuous mode [ 1552.710678][ T4545] veth1_vlan: left promiscuous mode [ 1552.717053][ T4545] veth0_vlan: left promiscuous mode [ 1553.525972][ T4545] team0 (unregistering): Port device team_slave_1 removed [ 1553.578973][ T4545] team0 (unregistering): Port device team_slave_0 removed [ 1553.658234][T22613] Bluetooth: hci2: command tx timeout [ 1554.867339][T25107] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7826'. [ 1555.341690][ T4545] IPVS: stop unused estimator thread 0... [ 1555.582297][T25111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7828'. [ 1556.292957][T24993] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1556.452633][T24993] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1556.582905][T24993] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1556.688284][T24993] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1557.947524][T24993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.172593][T24993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.251412][T16167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.259069][T16167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.378976][T16293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.386644][T16293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.114121][T25112] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1559.353244][T25112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.365747][T25112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.379445][T25112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1559.392894][T25112] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1559.402520][T25112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.571120][T25112] usb 6-1: config 0 descriptor?? [ 1560.067012][T25112] plantronics 0003:047F:FFFF.0035: unbalanced delimiter at end of report description [ 1560.126314][T25112] plantronics 0003:047F:FFFF.0035: parse failed [ 1560.133403][T25112] plantronics 0003:047F:FFFF.0035: probe with driver plantronics failed with error -22 [ 1560.268269][T17354] usb 6-1: USB disconnect, device number 23 [ 1560.330800][T24993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.382893][T25179] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7849'. [ 1560.395764][T25179] netlink: 'syz.3.7849': attribute type 9 has an invalid length. [ 1560.404909][T25179] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7849'. [ 1560.415490][T25179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7849'. [ 1562.381121][T24993] veth0_vlan: entered promiscuous mode [ 1562.477809][T24993] veth1_vlan: entered promiscuous mode [ 1562.764049][T24993] veth0_macvtap: entered promiscuous mode [ 1562.888191][T24993] veth1_macvtap: entered promiscuous mode [ 1563.036529][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.047493][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.057726][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.068625][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.078862][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.089688][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.099907][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.110731][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.129435][T24993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.391320][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.402464][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.412736][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.423714][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.436723][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.450021][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.460786][T24993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.472877][T24993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.488264][T24993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.843018][T24993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.853165][T24993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.862827][T24993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.873784][T24993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.736795][T25242] netlink: 'syz.7.7867': attribute type 10 has an invalid length. [ 1565.607332][T25257] loop7: detected capacity change from 0 to 1024 [ 1565.636453][T25257] EXT4-fs: inline encryption not supported [ 1565.642560][T25257] EXT4-fs: Ignoring removed i_version option [ 1565.723136][T25257] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1566.023073][T25257] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 2: comm syz.7.7872: lblock 2 mapped to illegal pblock 2 (length 1) [ 1566.054278][T25257] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1566.062884][T25257] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 48: comm syz.7.7872: lblock 0 mapped to illegal pblock 48 (length 1) [ 1566.157578][T25257] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1566.167083][T25257] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7872: Failed to acquire dquot type 0 [ 1566.229431][T25257] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1566.281461][T25257] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #11: comm syz.7.7872: mark_inode_dirty error [ 1566.351014][T25257] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 1566.364606][T25257] EXT4-fs (loop7): 1 orphan inode deleted [ 1566.372500][T25257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1566.402435][T11629] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1566.460875][T11629] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1566.470727][T11629] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0 [ 1566.637850][T25257] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #2: block 16: comm syz.7.7872: lblock 0 mapped to illegal pblock 16 (length 1) [ 1567.033009][T16119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.090445][T16119] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1567.184958][T16119] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1567.245323][T16119] EXT4-fs error (device loop7): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 1568.674001][T10725] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1568.896085][T10725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.907359][T10725] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1568.975820][T10725] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1568.986285][T10725] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1568.995305][T10725] usb 2-1: Manufacturer: syz [ 1569.066011][T10725] usb 2-1: config 0 descriptor?? [ 1569.331827][T25307] netlink: 'syz.1.7885': attribute type 1 has an invalid length. [ 1569.340061][T25307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7885'. [ 1569.429910][T10725] usb 2-1: USB disconnect, device number 24 [ 1569.646862][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.655770][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.913421][T11616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.922658][T11616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.296395][T12383] hid-generic 0000:0004:0000.0036: unknown main item tag 0x0 [ 1570.306780][T12383] hid-generic 0000:0004:0000.0036: unknown main item tag 0x0 [ 1570.314754][T12383] hid-generic 0000:0004:0000.0036: unknown main item tag 0x0 [ 1570.386202][T12383] hid-generic 0000:0004:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1570.988104][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1570.997616][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1572.198284][T25366] sp0: Synchronizing with TNC [ 1572.265040][T25365] [U] [ 1572.298858][T25368] sp0: Synchronizing with TNC [ 1573.047286][T17719] Bluetooth: hci1: command 0x0405 tx timeout [ 1574.693041][ T30] audit: type=1326 audit(1746773338.712:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.7.7921" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae539 code=0x0 [ 1581.565305][T25531] sp0: Synchronizing with TNC [ 1583.621278][T25563] tipc: Started in network mode [ 1583.626789][T25563] tipc: Node identity fe800000000000000000000000000033, cluster identity 4711 [ 1583.639217][T25563] tipc: Enabled bearer , priority 3 [ 1584.756619][T10725] tipc: Node number set to 4269801523 [ 1584.919303][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7984'. [ 1584.934019][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7984'. [ 1585.709074][T25600] [U] [ ֣H>W)BY9N!^T%bs1g:K"Gy>2mv8h;5)- [ 1585.719554][T25600] [U] oi?Wx4Mk1KBJ&[,㩉Ij?3 32t [ 1585.727961][T25600] [U] o&݌L3N7SE8(!`&E޻qNƷ [ 1585.735109][T25600] [U] hA=' Sj [ 1585.739197][T25600] [U] <_ݙ@c ժ9^A&w8v:vW VP^;%ϲ}ֈ~4xiShjq7 [ 1585.750836][T25600] [U] ܝ9Xԑ#Y9vX1;j}mJ/3UhdR?BZ֞S9_pPCiG)܂]!a@XCRfn%(܎ǻOKQ [ 1589.446997][T10725] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1589.470052][T25668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8013'. [ 1589.624422][T10725] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1589.633214][T10725] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1589.644818][T10725] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1589.658283][T10725] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1589.669715][T10725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1589.680084][T10725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1589.884612][T10725] usb 5-1: string descriptor 0 read error: -22 [ 1589.891440][T10725] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1589.901247][T10725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.987357][T10725] usb 5-1: config 0 descriptor?? [ 1589.995345][T25664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1590.019332][T10725] hub 5-1:0.0: bad descriptor, ignoring hub [ 1590.028058][T10725] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1590.042923][T10725] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 1590.144251][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 1590.208054][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 1590.352670][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 1590.377438][T10725] usb 5-1: USB disconnect, device number 19 [ 1590.425471][T25682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8017'. [ 1590.500180][T25679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8017'. [ 1591.444407][T11618] tipc: Subscription rejected, illegal request [ 1591.598486][T25701] sp0: Synchronizing with TNC [ 1592.091325][T25712] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8030'. [ 1592.108109][T25712] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8030'. [ 1592.120055][T25712] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8030'. [ 1592.129436][T25712] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8030'. [ 1593.238847][T25729] sp0: Synchronizing with TNC [ 1593.516547][T25734] program syz.1.8039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1594.664752][T10725] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1594.716480][T25755] loop7: detected capacity change from 0 to 256 [ 1594.855353][T10725] usb 4-1: Using ep0 maxpacket: 32 [ 1594.889956][T10725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1594.898640][T10725] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 1594.908926][T10725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.977466][T10725] usb 4-1: config 0 descriptor?? [ 1595.094889][T25112] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1595.297237][T25112] usb 2-1: Using ep0 maxpacket: 16 [ 1595.338957][T25112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.352045][T25112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.364991][T25112] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1595.378997][T25112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.493019][T25112] usb 2-1: config 0 descriptor?? [ 1595.669388][T10725] usb 4-1: string descriptor 0 read error: -71 [ 1595.737800][T10725] uclogic 0003:256C:006E.0037: failed retrieving string descriptor #200: -71 [ 1595.747429][T10725] uclogic 0003:256C:006E.0037: failed retrieving pen parameters: -71 [ 1595.759966][T10725] uclogic 0003:256C:006E.0037: failed probing pen v2 parameters: -71 [ 1595.768664][T10725] uclogic 0003:256C:006E.0037: failed probing parameters: -71 [ 1595.779184][T10725] uclogic 0003:256C:006E.0037: probe with driver uclogic failed with error -71 [ 1595.951527][T10725] usb 4-1: USB disconnect, device number 19 [ 1596.001985][T25112] hid-alps 0003:044E:1215.0038: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0 [ 1596.210588][T25112] usb 2-1: USB disconnect, device number 25 [ 1597.019724][T25786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8057'. [ 1598.112736][T25802] loop7: detected capacity change from 0 to 2048 [ 1598.161203][T25802] EXT4-fs: Ignoring removed oldalloc option [ 1598.292201][T25802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1598.422753][T25802] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.8064: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1598.487208][T25802] EXT4-fs (loop7): Remounting filesystem read-only [ 1598.794840][T16119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.615204][T25917] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.8104' resets device [ 1607.989210][T25112] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1608.190304][T25112] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.206086][T25112] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1608.301763][T25112] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1608.311521][T25112] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1608.322736][T25112] usb 5-1: Manufacturer: syz [ 1608.407278][T25112] usb 5-1: config 0 descriptor?? [ 1608.712071][T25972] netlink: 'syz.4.8121': attribute type 1 has an invalid length. [ 1608.721347][T25972] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8121'. [ 1608.779154][T10725] usb 5-1: USB disconnect, device number 20 [ 1609.484367][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8135'. [ 1611.966815][T10725] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1612.245729][T10725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.256658][T10725] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1612.338991][T10725] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1612.348705][T10725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1612.357306][T10725] usb 4-1: SerialNumber: syz [ 1612.693305][T10725] usb 4-1: 0:2 : does not exist [ 1612.847316][T10725] usb 4-1: USB disconnect, device number 20 [ 1613.050567][T26049] loop7: detected capacity change from 0 to 4096 [ 1613.084503][T26049] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1614.231921][T26073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8161'. [ 1614.241387][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8161'. [ 1614.251070][T26073] netlink: 'syz.5.8161': attribute type 20 has an invalid length. [ 1614.389542][T26076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8160'. [ 1617.275121][T26126] loop7: detected capacity change from 0 to 8 [ 1618.739587][ T30] audit: type=1326 audit(1746773382.742:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26145 comm="syz.1.8198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1618.761809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.865036][ T30] audit: type=1326 audit(1746773382.812:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26145 comm="syz.1.8198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1618.887928][ T30] audit: type=1326 audit(1746773382.812:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26145 comm="syz.1.8198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1619.897103][T26170] tmpfs: Cannot change global quota limit on remount [ 1624.742364][T26242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8224'. [ 1625.447240][T26253] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1625.886380][T26261] sp0: Synchronizing with TNC [ 1625.971732][T26258] [U] [ 1626.825264][T26276] netlink: 'syz.5.8234': attribute type 1 has an invalid length. [ 1630.281229][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8250'. [ 1630.698910][T26328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1630.916651][T26333] netlink: 'syz.4.8255': attribute type 1 has an invalid length. [ 1630.928961][T26334] loop7: detected capacity change from 0 to 64 [ 1630.936305][T26333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1630.973078][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8256'. [ 1631.817069][T26347] netlink: 524 bytes leftover after parsing attributes in process `syz.5.8258'. [ 1632.430892][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1632.437859][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1632.709229][T26363] erspan0: entered promiscuous mode [ 1632.728038][T26363] erspan0: left promiscuous mode [ 1635.476981][T26409] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8283'. [ 1637.225742][T26441] tmpfs: Cannot change global quota limit on remount [ 1637.863184][T26450] futex_wake_op: syz.5.8296 tries to shift op by 144; fix this program [ 1638.124019][T26456] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1638.900017][T26468] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1639.178792][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1642.099586][T26519] sp0: Synchronizing with TNC [ 1644.675861][T26562] netlink: 'syz.1.8347': attribute type 10 has an invalid length. [ 1644.696953][T26562] batman_adv: batadv0: Adding interface: team0 [ 1644.703350][T26562] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.745058][T26562] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1644.814845][T26563] netlink: 'syz.1.8347': attribute type 10 has an invalid length. [ 1644.823051][T26563] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8347'. [ 1644.844417][T26563] team0: entered promiscuous mode [ 1644.849721][T26563] team_slave_0: entered promiscuous mode [ 1644.859372][T26563] team_slave_1: entered promiscuous mode [ 1644.878048][T26563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.886506][T26563] batman_adv: batadv0: Interface activated: team0 [ 1644.893363][T26563] batman_adv: batadv0: Interface deactivated: team0 [ 1644.905559][T26563] batman_adv: batadv0: Removing interface: team0 [ 1644.970661][T26563] bridge0: port 3(team0) entered blocking state [ 1644.977807][T26563] bridge0: port 3(team0) entered disabled state [ 1644.987844][T26563] team0: entered allmulticast mode [ 1644.993259][T26563] team_slave_0: entered allmulticast mode [ 1645.001834][T26563] team_slave_1: entered allmulticast mode [ 1645.018363][T26563] bridge0: port 3(team0) entered blocking state [ 1645.025292][T26563] bridge0: port 3(team0) entered forwarding state [ 1646.160186][T26583] sp0: Synchronizing with TNC [ 1647.255457][T26600] sp0: Synchronizing with TNC [ 1647.280491][T26599] [U] [ 1647.812949][T26608] debugfs: Bad value for 'uid' [ 1647.823113][T26608] debugfs: Bad value for 'uid' [ 1650.969556][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1650.984820][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1651.000841][T26647] netlink: 'syz.3.8386': attribute type 12 has an invalid length. [ 1652.284093][T26659] loop7: detected capacity change from 0 to 256 [ 1652.305259][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8400'. [ 1652.373417][ T30] audit: type=1800 audit(1746773416.392:192): pid=26659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8388" name=93FDD4787ADAD4209069 dev="loop7" ino=383 res=0 errno=0 [ 1653.589374][T26680] loop7: detected capacity change from 0 to 256 [ 1654.846818][T17354] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1654.949515][T26698] netlink: 'syz.3.8413': attribute type 1 has an invalid length. [ 1655.054353][T17354] usb 6-1: Using ep0 maxpacket: 16 [ 1655.112189][T17354] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1655.120816][T17354] usb 6-1: config 0 has no interface number 0 [ 1655.127390][T17354] usb 6-1: config 0 interface 255 altsetting 121 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.139153][T17354] usb 6-1: config 0 interface 255 altsetting 121 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.149767][T17354] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1655.157568][T17354] usb 6-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1655.169427][T17354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.350587][T26702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8424'. [ 1655.370400][T17354] usb 6-1: config 0 descriptor?? [ 1655.901975][T17354] uclogic 0003:28BD:0934.0039: interface is invalid, ignoring [ 1656.128902][T25112] usb 6-1: USB disconnect, device number 24 [ 1656.521359][T26720] netlink: 'syz.4.8420': attribute type 4 has an invalid length. [ 1658.291034][ T30] audit: type=1326 audit(1746773422.312:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.3.8432" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 1660.179708][T26769] loop7: detected capacity change from 0 to 128 [ 1661.081309][T26784] PKCS8: Unsupported PKCS#8 version [ 1661.201193][T25112] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1661.234959][T25112] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1662.076069][T26791] loop7: detected capacity change from 0 to 4096 [ 1662.207761][T26791] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1662.218587][T26791] UDF-fs: Scanning with blocksize 512 failed [ 1662.378075][T26791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1662.484100][T26791] UDF-fs: error (device loop7): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1663.331667][T26818] loop7: detected capacity change from 0 to 128 [ 1664.093293][T26830] program syz.4.8476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1665.173160][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8484'. [ 1665.312170][T26853] netlink: 'syz.7.8488': attribute type 29 has an invalid length. [ 1665.381439][T26853] netlink: 'syz.7.8488': attribute type 29 has an invalid length. [ 1667.947321][T26894] netlink: 'syz.5.8504': attribute type 18 has an invalid length. [ 1669.771042][T26919] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8518'. [ 1669.781110][T26919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8518'. [ 1670.337344][T26925] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1671.331064][T26942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8529'. [ 1671.405193][T26944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8529'. [ 1675.793176][T27011] pimreg: entered allmulticast mode [ 1675.799733][T27015] pimreg: left allmulticast mode [ 1676.004993][T12383] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1676.198358][T12383] usb 6-1: Using ep0 maxpacket: 16 [ 1676.240178][T12383] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.251127][T12383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1676.262660][T12383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1676.282395][T12383] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1676.294050][T12383] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1676.360935][T27022] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1676.376084][T27022] netlink: 'syz.1.8567': attribute type 9 has an invalid length. [ 1676.390101][T27022] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1676.403881][T27022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1676.439239][T12383] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1676.451529][T12383] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1676.462530][T12383] usb 6-1: Manufacturer: syz [ 1676.537613][T12383] usb 6-1: config 0 descriptor?? [ 1677.063800][T12383] rc_core: IR keymap rc-hauppauge not found [ 1677.070238][T12383] Registered IR keymap rc-empty [ 1677.076172][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.135079][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.179784][T12383] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1677.200584][T12383] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 1677.300311][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.372481][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.419796][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.444981][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.494221][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.549558][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.581601][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.630436][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.654420][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.682721][T12383] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1677.729940][T12383] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1677.739777][T12383] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1677.820140][T12383] usb 6-1: USB disconnect, device number 25 [ 1679.496495][T27065] pim6reg: entered allmulticast mode [ 1679.518755][T27066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8594'. [ 1679.528241][T27066] netlink: 108 bytes leftover after parsing attributes in process `syz.7.8594'. [ 1679.565584][T27065] pim6reg: left allmulticast mode [ 1679.864891][ T30] audit: type=1326 audit(1746773443.872:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.4.8586" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f04539 code=0x0 [ 1680.244425][T27078] netlink: 332 bytes leftover after parsing attributes in process `syz.5.8588'. [ 1680.249991][T27077] loop7: detected capacity change from 0 to 64 [ 1680.254229][T27078] netlink: 'syz.5.8588': attribute type 9 has an invalid length. [ 1680.279011][T27078] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8588'. [ 1680.290170][T27078] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8588'. [ 1681.094444][T12383] IPVS: starting estimator thread 0... [ 1681.184259][T27088] IPVS: using max 240 ests per chain, 12000 per kthread [ 1683.934070][T12383] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1684.144178][T12383] usb 4-1: Using ep0 maxpacket: 32 [ 1684.206898][T12383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.223902][T12383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.234586][T12383] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1684.249158][T12383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.285948][T12383] usb 4-1: config 0 descriptor?? [ 1684.837023][T12383] apple 0003:05AC:029C.003B: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.3-1/input0 [ 1685.034782][T17354] usb 4-1: USB disconnect, device number 21 [ 1686.150387][T27165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8632'. [ 1686.594533][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8636'. [ 1686.670600][T27169] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1686.680770][T27169] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1686.699597][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8634'. [ 1687.430282][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8642'. [ 1688.134938][ T30] audit: type=1326 audit(1746773452.142:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27192 comm="syz.1.8646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1688.160419][ T30] audit: type=1326 audit(1746773452.142:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27192 comm="syz.1.8646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1688.183994][ T30] audit: type=1326 audit(1746773452.152:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27192 comm="syz.1.8646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1688.945558][T27205] loop7: detected capacity change from 0 to 164 [ 1689.096092][T27205] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1689.733242][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8668'. [ 1690.080442][T27225] netlink: 276 bytes leftover after parsing attributes in process `syz.4.8660'. [ 1693.871360][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1693.880804][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1694.895980][T27286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8690'. [ 1696.267681][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1696.280467][T27306] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8700'. [ 1699.340749][T27344] sd 0:0:1:0: device reset [ 1701.632493][T27374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8735'. [ 1701.644643][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8734'. [ 1701.659192][T27372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8734'. [ 1702.761044][T27390] pimreg3: entered allmulticast mode [ 1703.363447][T27397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1703.384522][T27395] veth3: entered promiscuous mode [ 1703.389926][T27395] veth3: entered allmulticast mode [ 1705.242953][T27419] loop7: detected capacity change from 0 to 16 [ 1705.282905][T27419] erofs (device loop7): mounted with root inode @ nid 36. [ 1705.362322][T27419] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1705.403397][T27419] erofs (device loop7): failed to decompress -44 in[46, 4050] out[1851] [ 1705.412702][T27419] erofs (device loop7): read error -117 @ 43 of nid 36 [ 1706.868753][T27443] netlink: 'syz.1.8768': attribute type 1 has an invalid length. [ 1707.694406][T27451] pimreg: entered allmulticast mode [ 1707.890476][T27453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1707.907337][T27453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1707.922248][T27453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1707.958294][T27453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1707.980190][T27453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1708.805473][T27464] tipc: Enabled bearer , priority 10 [ 1709.493372][T27452] chnl_net:caif_netlink_parms(): no params data found [ 1709.823258][T11629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.086215][T17719] Bluetooth: hci3: command tx timeout [ 1710.107332][T11629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.215281][T11629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.437031][T11629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.848907][T27487] xt_socket: unknown flags 0xd0 [ 1710.997310][T11629] bridge_slave_1: left allmulticast mode [ 1711.003329][T11629] bridge_slave_1: left promiscuous mode [ 1711.016867][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.134860][T11629] bridge_slave_0: left allmulticast mode [ 1711.140800][T11629] bridge_slave_0: left promiscuous mode [ 1711.148304][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.428139][T27493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8787'. [ 1711.750251][T11629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.835874][T11629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.871754][T11629] bond0 (unregistering): Released all slaves [ 1712.168180][T17719] Bluetooth: hci3: command tx timeout [ 1712.378006][T27452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.388537][T27452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.396496][T27452] bridge_slave_0: entered allmulticast mode [ 1712.408609][T27452] bridge_slave_0: entered promiscuous mode [ 1712.601226][T27452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.609930][T27452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.620509][T27452] bridge_slave_1: entered allmulticast mode [ 1712.638592][T27452] bridge_slave_1: entered promiscuous mode [ 1712.739409][T11629] hsr_slave_0: left promiscuous mode [ 1712.764721][T11629] hsr_slave_1: left promiscuous mode [ 1712.772838][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1712.781152][T11629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1712.865961][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1712.873988][T11629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.025189][T11629] veth1_macvtap: left promiscuous mode [ 1713.034231][T11629] veth0_macvtap: left promiscuous mode [ 1713.040141][T11629] veth1_vlan: left promiscuous mode [ 1713.045881][T11629] veth0_vlan: left promiscuous mode [ 1713.767669][T17354] Process accounting resumed [ 1713.984685][T11629] team0 (unregistering): Port device team_slave_1 removed [ 1714.059370][T11629] team0 (unregistering): Port device team_slave_0 removed [ 1714.339639][T17719] Bluetooth: hci3: command tx timeout [ 1714.681019][T27452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.811992][T27452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.979491][T27452] team0: Port device team_slave_0 added [ 1715.013066][T27452] team0: Port device team_slave_1 added [ 1715.175725][T27452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.187471][T27452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.220422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.232007][T27452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.270824][T27452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.278309][T27452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.304522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.321922][T27452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.720267][T27452] hsr_slave_0: entered promiscuous mode [ 1715.735779][T27452] hsr_slave_1: entered promiscuous mode [ 1715.744634][T27452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1715.752422][T27452] Cannot create hsr debugfs directory [ 1716.144521][T27539] loop7: detected capacity change from 0 to 256 [ 1716.231298][T27539] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1716.247525][T27539] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1716.404121][T17719] Bluetooth: hci3: command tx timeout [ 1716.433394][T27539] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1719.041496][T27452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1722.207546][T27452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1722.357748][T27452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1722.429645][T27452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1723.692782][T27452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.949287][T27452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.098351][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.106057][T12383] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1724.106155][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.137986][T27617] loop7: detected capacity change from 0 to 64 [ 1724.190865][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.198509][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.381170][T12383] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1724.389857][T12383] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.404662][T12383] usb 4-1: config 0 has no interface number 0 [ 1724.530850][T12383] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1724.546447][T12383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.554956][T12383] usb 4-1: Product: syz [ 1724.559360][T12383] usb 4-1: Manufacturer: syz [ 1724.566923][T12383] usb 4-1: SerialNumber: syz [ 1724.751294][T12383] usb 4-1: config 0 descriptor?? [ 1724.764844][T12383] hub 4-1:0.31: bad descriptor, ignoring hub [ 1724.771190][T12383] hub 4-1:0.31: probe with driver hub failed with error -5 [ 1724.791767][T12383] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1724.798685][T12383] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 1724.815755][T12383] usb 4-1: Failed to create links for entity 6 [ 1724.826413][T12383] usb 4-1: Failed to register entities (-22). [ 1725.021421][T12383] usb 4-1: USB disconnect, device number 22 [ 1725.281752][T27630] netlink: 'syz.1.8836': attribute type 2 has an invalid length. [ 1726.231845][T27452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.696877][ T30] audit: type=1326 audit(1746773490.712:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1726.864106][ T30] audit: type=1326 audit(1746773490.772:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1726.869756][T27452] veth0_vlan: entered promiscuous mode [ 1726.887307][ T30] audit: type=1326 audit(1746773490.772:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1726.914757][ T30] audit: type=1326 audit(1746773490.772:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1726.937296][ T30] audit: type=1326 audit(1746773490.772:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1726.961927][ T30] audit: type=1326 audit(1746773490.772:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=349 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1726.987611][ T30] audit: type=1326 audit(1746773490.772:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1727.010375][ T30] audit: type=1326 audit(1746773490.772:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.1.8844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1727.078609][T27654] loop7: detected capacity change from 0 to 1024 [ 1727.118569][T27656] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1727.205828][T27452] veth1_vlan: entered promiscuous mode [ 1727.549996][T16167] hfsplus: b-tree write err: -5, ino 4 [ 1727.650537][T27452] veth0_macvtap: entered promiscuous mode [ 1727.740938][T27452] veth1_macvtap: entered promiscuous mode [ 1727.802457][T27557] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1727.966968][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.988440][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.000025][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.016719][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.025038][T27557] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1728.026918][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.035971][T27557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.051493][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.065467][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.081166][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.101860][T27452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.238051][T27557] usb 4-1: config 0 descriptor?? [ 1728.288065][T27557] cp210x 4-1:0.0: cp210x converter detected [ 1728.457783][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.473786][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.485176][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.505625][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.517306][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.533109][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.543352][T27452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.559194][T27452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.574428][T27452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.745481][T27557] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1728.935101][T27452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.940700][T16069] usb 4-1: USB disconnect, device number 23 [ 1728.949462][T27452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.959407][T27452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.968516][T27452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.026571][T16069] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1729.060440][T16069] cp210x 4-1:0.0: device disconnected [ 1731.998508][T27715] loop7: detected capacity change from 0 to 4096 [ 1732.101288][T27715] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1732.304616][T25112] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1732.432142][T27715] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1732.457840][T27715] ntfs3(loop7): Failed to load $Extend (-22). [ 1732.464466][T27715] ntfs3(loop7): Failed to initialize $Extend. [ 1732.495381][T25112] usb 2-1: Using ep0 maxpacket: 8 [ 1732.536226][T27735] netlink: 11 bytes leftover after parsing attributes in process `syz.5.8869'. [ 1732.541355][T25112] usb 2-1: config 0 has no interfaces? [ 1732.551318][T25112] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1732.565972][T25112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.663826][T25112] usb 2-1: config 0 descriptor?? [ 1732.921802][T27557] usb 2-1: USB disconnect, device number 26 [ 1733.220543][T27744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8872'. [ 1734.107462][T27557] kernel write not supported for file /stat (pid: 27557 comm: kworker/0:2) [ 1735.329730][T11618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.338038][T11618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.641471][T11629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.649915][T11629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.024990][T27557] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1736.211692][T27557] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1736.221689][T27557] usb 6-1: config 0 has no interface number 0 [ 1736.228271][T27557] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.239885][T27557] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.250179][T27557] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1736.264611][T27557] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1736.274728][T27557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.434825][T27557] usb 6-1: config 0 descriptor?? [ 1736.443927][T27795] veth0_macvtap: left promiscuous mode [ 1736.451727][T27795] macvtap0: entered promiscuous mode [ 1736.471049][T27795] veth0_macvtap: entered promiscuous mode [ 1736.491409][T27795] team0: Device macvtap0 failed to register rx_handler [ 1736.561630][T27795] veth0_macvtap: left promiscuous mode [ 1736.945349][T27557] uclogic 0003:28BD:0905.003C: interface is invalid, ignoring [ 1737.157722][T27557] usb 6-1: USB disconnect, device number 26 [ 1737.473427][T27807] loop7: detected capacity change from 0 to 128 [ 1737.525926][T27807] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1737.569337][T27807] ext4 filesystem being mounted at /819/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.954501][T16119] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1738.449212][T27824] loop7: detected capacity change from 0 to 256 [ 1738.492697][T27824] exfat: Bad value for 'uid' [ 1738.499265][T27824] exfat: Bad value for 'uid' [ 1739.489857][T27842] veth0_macvtap: left promiscuous mode [ 1739.501669][T27846] kernel read not supported for file / -9mZr7âW)s!Qfsl{Tr)rO2:"T+͟v|ղ (pid: 27846 comm: syz.3.8901) [ 1739.510100][T27842] macvtap0: entered promiscuous mode [ 1739.525170][ T30] audit: type=1800 audit(1746773503.552:206): pid=27846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8901" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=80202 res=0 errno=0 [ 1739.537813][T27842] veth0_macvtap: entered promiscuous mode [ 1739.589551][T27842] team0: Device macvtap0 failed to register rx_handler [ 1739.635459][T27842] veth0_macvtap: left promiscuous mode [ 1741.431563][T27872] loop0: detected capacity change from 0 to 2048 [ 1741.641599][T27872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1741.698894][T27872] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1742.131204][T27452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.379689][T27893] veth0_macvtap: left promiscuous mode [ 1742.414742][T27893] macvtap0: entered promiscuous mode [ 1742.446025][T27893] veth0_macvtap: entered promiscuous mode [ 1742.459886][T27893] team0: Device macvtap0 failed to register rx_handler [ 1742.561737][T27893] veth0_macvtap: left promiscuous mode [ 1743.045960][T27903] loop7: detected capacity change from 0 to 512 [ 1743.253385][T27903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1743.267437][T27903] ext4 filesystem being mounted at /826/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.331669][T27901] loop0: detected capacity change from 0 to 4096 [ 1743.414991][T27901] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1743.479157][T27912] tipc: Started in network mode [ 1743.484764][T27912] tipc: Node identity 00004012000000000000000000000001, cluster identity 4711 [ 1743.494285][T27912] tipc: Enabling of bearer rejected, failed to enable media [ 1743.685615][T27884] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 128: padding at end of block bitmap is not set [ 1743.798637][T16119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1743.844678][T17719] Bluetooth: hci1: command 0x0405 tx timeout [ 1743.889634][T27901] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1744.350854][T27923] syz.7.8927 (27923): drop_caches: 4 [ 1745.092294][T27933] /dev/nbd7: Can't open blockdev [ 1747.066448][T27968] qrtr: Invalid version 0 [ 1747.684918][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8949'. [ 1747.801227][T27982] loop0: detected capacity change from 0 to 256 [ 1747.850231][T27982] exfat: Bad value for 'uid' [ 1747.855497][T27982] exfat: Bad value for 'uid' [ 1748.401080][T27991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8953'. [ 1749.229905][T28008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1753.067676][T28072] netlink: 'syz.7.8981': attribute type 4 has an invalid length. [ 1753.353878][T27557] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1753.574148][T27557] usb 4-1: Using ep0 maxpacket: 8 [ 1753.619624][T27557] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1753.630414][T27557] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1753.638844][T27557] usb 4-1: Product: syz [ 1753.643232][T27557] usb 4-1: Manufacturer: syz [ 1753.648205][T27557] usb 4-1: SerialNumber: syz [ 1753.776163][T27557] usb 4-1: config 0 descriptor?? [ 1753.817337][T27557] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1754.429581][T27557] gspca_zc3xx: reg_w_i err -71 [ 1754.436000][T27557] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1754.486400][T27557] usb 4-1: USB disconnect, device number 24 [ 1754.858504][T28098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1754.868124][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1754.877511][T28098] netlink: 'syz.0.8990': attribute type 12 has an invalid length. [ 1755.311918][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1755.318957][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1755.714425][T28112] debugfs: Bad value for 'uid' [ 1755.719770][T28112] debugfs: Bad value for 'uid' [ 1756.635000][T25112] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1756.879082][T25112] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1756.893861][T25112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.979834][T25112] usb 2-1: config 0 descriptor?? [ 1756.995470][T25112] cp210x 2-1:0.0: cp210x converter detected [ 1757.667946][T25112] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1757.682492][T25112] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1757.725431][T25112] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1757.751244][T25112] usb 2-1: USB disconnect, device number 27 [ 1757.754391][T28139] loop0: detected capacity change from 0 to 512 [ 1757.787560][T25112] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1757.796735][T25112] cp210x 2-1:0.0: device disconnected [ 1757.850862][T28139] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1757.906404][T28139] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.9006: invalid indirect mapped block 2683928664 (level 1) [ 1757.976338][T28139] EXT4-fs (loop0): Remounting filesystem read-only [ 1758.002639][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9007'. [ 1758.023241][T28139] EXT4-fs (loop0): 1 truncate cleaned up [ 1758.035009][T28139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1758.064663][T28148] tmpfs: Cannot change global quota limit on remount [ 1758.576714][T27452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.878221][T28176] netlink: 'syz.0.9016': attribute type 1 has an invalid length. [ 1759.887997][T28176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1760.890152][T28194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9024'. [ 1761.650845][ T30] audit: type=1326 audit(1746773525.662:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.5.9028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1761.676380][ T30] audit: type=1326 audit(1746773525.662:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.5.9028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1761.702668][ T30] audit: type=1326 audit(1746773525.672:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.5.9028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1761.725405][ T30] audit: type=1326 audit(1746773525.672:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.5.9028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1766.712360][T28293] loop7: detected capacity change from 0 to 512 [ 1766.738435][T28293] EXT4-fs: Ignoring removed mblk_io_submit option [ 1766.840747][T16069] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1766.857499][T28293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1766.873374][T28293] ext4 filesystem being mounted at /858/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1767.044362][T16069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.054902][T16069] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1767.064520][T16069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.138559][T28305] EXT4-fs error (device loop7): __ext4_new_inode:1278: comm syz.7.9060: failed to insert inode 16: doubly allocated? [ 1767.185527][T16069] usb 4-1: config 0 descriptor?? [ 1767.643857][T16119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.700146][T16069] lg-g15 0003:046D:C222.003D: unbalanced collection at end of report description [ 1767.766651][T16069] lg-g15 0003:046D:C222.003D: probe with driver lg-g15 failed with error -22 [ 1767.948671][T16069] usb 4-1: USB disconnect, device number 25 [ 1769.650045][T28345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1769.739137][T28347] loop0: detected capacity change from 0 to 256 [ 1769.783323][T28347] exfat: Deprecated parameter 'namecase' [ 1769.789856][T28347] exfat: Deprecated parameter 'utf8' [ 1770.030163][T28347] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 1772.561770][T25112] hid-generic 0000:0004:0000.003E: unknown main item tag 0x0 [ 1772.575808][T25112] hid-generic 0000:0004:0000.003E: unknown main item tag 0x0 [ 1772.584679][T25112] hid-generic 0000:0004:0000.003E: unknown main item tag 0x0 [ 1772.634388][T16069] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1772.662826][T25112] hid-generic 0000:0004:0000.003E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1772.864217][T16069] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1772.872511][T16069] usb 4-1: config 0 has no interface number 0 [ 1772.956248][T16069] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1772.966281][T16069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.974786][T16069] usb 4-1: Product: syz [ 1772.979173][T16069] usb 4-1: Manufacturer: syz [ 1772.984162][T16069] usb 4-1: SerialNumber: syz [ 1773.056586][T16069] usb 4-1: config 0 descriptor?? [ 1773.318928][T16069] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1773.359290][T16069] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1773.372661][T16069] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1773.381326][T16069] usb 4-1: media controller created [ 1773.535889][T16069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1774.155029][T28415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9113'. [ 1774.414619][T16069] usb 4-1: USB disconnect, device number 26 [ 1777.119610][T25112] IPVS: starting estimator thread 0... [ 1777.224137][T28467] IPVS: using max 240 ests per chain, 12000 per kthread [ 1777.399627][T28472] pim6reg: entered allmulticast mode [ 1777.524847][T28472] pim6reg: left allmulticast mode [ 1778.041609][T28482] netlink: 188 bytes leftover after parsing attributes in process `syz.7.9137'. [ 1778.056488][T28482] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9137'. [ 1780.559770][T28527] loop7: detected capacity change from 0 to 16 [ 1780.597003][T28527] erofs: Unknown parameter 't5;} 7_cN"Lam)p'6~' [ 1780.668852][T28527] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9142'. [ 1781.656788][T16069] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1781.899416][T16069] usb 4-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 1781.912144][T16069] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 1781.925219][T16069] usb 4-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1781.938863][T16069] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1781.948119][T16069] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1781.958362][T16069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.135992][T16069] usb 4-1: config 0 descriptor?? [ 1782.666646][T16069] corsair-psu 0003:1B1C:1C03.003F: item fetching failed at offset 0/3 [ 1782.728777][T16069] corsair-psu 0003:1B1C:1C03.003F: probe with driver corsair-psu failed with error -22 [ 1782.886846][T25112] usb 4-1: USB disconnect, device number 27 [ 1785.777207][T28612] loop7: detected capacity change from 0 to 64 [ 1786.752121][T28627] loop7: detected capacity change from 0 to 2048 [ 1786.878324][T28627] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1786.886672][T28627] UDF-fs: Scanning with blocksize 512 failed [ 1787.025064][T28627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1787.466289][ T30] audit: type=1326 audit(1746773551.472:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.5.9184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1787.609198][ T30] audit: type=1326 audit(1746773551.522:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.5.9184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1787.632583][ T30] audit: type=1326 audit(1746773551.532:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.5.9184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1787.655813][ T30] audit: type=1326 audit(1746773551.532:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.5.9184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1787.678554][ T30] audit: type=1326 audit(1746773551.532:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.5.9184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1787.703205][ T30] audit: type=1326 audit(1746773551.532:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.5.9184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1787.726487][ T30] audit: type=1326 audit(1746773551.532:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.5.9184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1788.474471][T16069] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1788.605606][T28656] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9192'. [ 1788.684745][T16069] usb 6-1: Using ep0 maxpacket: 16 [ 1788.734871][T16069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1788.746625][T16069] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1788.760028][T16069] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1788.769661][T16069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.939684][T16069] usb 6-1: config 0 descriptor?? [ 1789.392929][T16069] kovaplus 0003:1E7D:2D50.0040: unknown main item tag 0x0 [ 1789.400897][T16069] kovaplus 0003:1E7D:2D50.0040: unknown main item tag 0x0 [ 1789.408569][T16069] kovaplus 0003:1E7D:2D50.0040: unknown main item tag 0x0 [ 1789.572938][T16069] kovaplus 0003:1E7D:2D50.0040: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1789.674566][T16069] kovaplus 0003:1E7D:2D50.0040: couldn't init struct kovaplus_device [ 1789.683252][T16069] kovaplus 0003:1E7D:2D50.0040: couldn't install mouse [ 1789.760228][T16069] kovaplus 0003:1E7D:2D50.0040: probe with driver kovaplus failed with error -71 [ 1789.856270][T16069] usb 6-1: USB disconnect, device number 27 [ 1790.050790][T27557] kernel write not supported for file /snd/midiC2D0 (pid: 27557 comm: kworker/0:2) [ 1790.054662][T28674] loop0: detected capacity change from 0 to 4096 [ 1790.297579][T28684] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1790.413965][ T30] audit: type=1800 audit(1746773554.412:218): pid=28674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9196" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1790.734928][T28693] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9204'. [ 1794.984459][T16069] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1795.194105][T16069] usb 4-1: Using ep0 maxpacket: 16 [ 1795.249265][T16069] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1795.257962][T16069] usb 4-1: config 0 has no interface number 0 [ 1795.267797][T16069] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1795.279366][T16069] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1795.382153][T16069] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1795.391778][T16069] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1795.401254][T16069] usb 4-1: Product: syz [ 1795.406209][T16069] usb 4-1: SerialNumber: syz [ 1795.505990][T16069] usb 4-1: config 0 descriptor?? [ 1795.531270][T16069] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1795.540829][T16069] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input41 [ 1795.815656][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1795.818286][T12383] usb 4-1: USB disconnect, device number 28 [ 1795.822805][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1795.898707][T12383] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1796.063284][T28767] loop0: detected capacity change from 0 to 8192 [ 1796.144945][T28767] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1796.242401][T28767] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 1796.251947][T28767] FAT-fs (loop0): Filesystem has been set read-only [ 1797.079010][T28792] tipc: Enabling of bearer rejected, media not registered [ 1798.157869][T28815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9246'. [ 1798.427860][T28821] loop7: detected capacity change from 0 to 64 [ 1798.552203][T28821] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 1800.539264][T28855] loop0: detected capacity change from 0 to 512 [ 1800.576098][T28855] EXT4-fs: Ignoring removed nobh option [ 1800.921774][T28855] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.9261: corrupted inode contents [ 1801.001875][T28855] EXT4-fs (loop0): Remounting filesystem read-only [ 1801.040476][T28855] EXT4-fs (loop0): 1 truncate cleaned up [ 1801.048809][T28855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1801.062250][T28855] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1801.077068][T11616] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1801.088171][T11616] Quota error (device loop0): write_blk: dquota write failed [ 1801.102440][T11616] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 1801.118615][T11616] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1801.129664][T11616] Quota error (device loop0): write_blk: dquota write failed [ 1801.138483][T11616] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 1801.149529][T11616] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 1801.162475][T11616] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1801.172010][T11616] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1801.441990][T28873] sctp: [Deprecated]: syz.3.9275 (pid 28873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1801.441990][T28873] Use struct sctp_sack_info instead [ 1801.460674][T28874] loop7: detected capacity change from 0 to 64 [ 1801.504279][T27452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1802.558813][T28891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9273'. [ 1803.394451][T16069] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1803.522368][T28907] loop7: detected capacity change from 0 to 1024 [ 1803.566790][T16069] usb 4-1: Using ep0 maxpacket: 8 [ 1803.598888][T16069] usb 4-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 1803.610023][T16069] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1803.619653][T16069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.736064][T16069] usb 4-1: config 0 descriptor?? [ 1803.885754][T11618] hfsplus: b-tree write err: -5, ino 4 [ 1803.979490][T12383] usb 4-1: USB disconnect, device number 29 [ 1804.258958][T28917] netlink: 'syz.7.9286': attribute type 1 has an invalid length. [ 1805.080360][T28932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9294'. [ 1806.328785][T27453] Bluetooth: hci3: command 0x0405 tx timeout [ 1806.540664][T28958] loop0: detected capacity change from 0 to 64 [ 1806.579589][T28958] hfs: unable to locate alternate MDB [ 1806.585368][T28958] hfs: continuing without an alternate MDB [ 1807.191386][T28969] netlink: 'syz.0.9312': attribute type 3 has an invalid length. [ 1807.200063][T28969] netlink: 'syz.0.9312': attribute type 1 has an invalid length. [ 1807.209330][T28969] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9312'. [ 1807.849193][T12383] kernel write not supported for file /input/event2 (pid: 12383 comm: kworker/1:2) [ 1807.911252][ T30] audit: type=1400 audit(1746773571.932:219): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626209171 pid=28981 comm="syz.7.9318" [ 1808.270961][T28987] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1808.277793][T28987] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1808.286243][T28987] vhci_hcd vhci_hcd.0: Device attached [ 1808.388260][T28988] vhci_hcd: connection closed [ 1808.407347][T16184] vhci_hcd: stop threads [ 1808.419394][T16184] vhci_hcd: release socket [ 1808.424242][T16184] vhci_hcd: disconnect device [ 1808.488565][T16069] vhci_hcd: vhci_device speed not set [ 1808.905197][T29001] tipc: Enabled bearer , priority 1 [ 1809.790608][T29016] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9333'. [ 1810.026556][T12383] tipc: Node number set to 16403 [ 1810.379453][T29021] loop0: detected capacity change from 0 to 1024 [ 1810.641350][T29022] loop7: detected capacity change from 0 to 4096 [ 1810.716272][T29022] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1811.081659][T29022] ntfs3(loop7): ino=19, mi_enum_attr [ 1811.087599][T29022] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1811.231526][T29022] ntfs3(loop7): MFT: r=b, expect seq=0 instead of b! [ 1812.407208][T17719] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1812.416159][T17719] Bluetooth: hci5: Injecting HCI hardware error event [ 1812.424723][T17719] Bluetooth: hci5: hardware error 0x00 [ 1814.119656][T29082] loop7: detected capacity change from 0 to 64 [ 1814.488530][T17719] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1814.585645][T16069] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1814.778482][T11618] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.814946][T16069] usb 2-1: Using ep0 maxpacket: 32 [ 1814.815954][T29086] loop0: detected capacity change from 0 to 1024 [ 1814.870408][T16069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.881981][T16069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.892784][T16069] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1814.902887][T16069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.918155][T16069] usb 2-1: config 0 descriptor?? [ 1814.988525][T11618] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.148617][T11618] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.210957][T16184] hfsplus: b-tree write err: -5, ino 4 [ 1815.290809][T11618] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.437396][T16069] apple 0003:05AC:029C.0041: unbalanced collection at end of report description [ 1815.490478][T16069] apple 0003:05AC:029C.0041: parse failed [ 1815.497188][T16069] apple 0003:05AC:029C.0041: probe with driver apple failed with error -22 [ 1815.694464][ T5867] usb 2-1: USB disconnect, device number 28 [ 1815.719748][T11618] bridge_slave_1: left allmulticast mode [ 1815.725891][T11618] bridge_slave_1: left promiscuous mode [ 1815.732485][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.835405][T11618] bridge_slave_0: left allmulticast mode [ 1815.851015][T11618] bridge_slave_0: left promiscuous mode [ 1815.857799][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.684067][T11618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1816.714274][T11618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1816.755962][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1816.765596][T11618] bond0 (unregistering): Released all slaves [ 1816.766913][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1817.364145][T11618] hsr_slave_0: left promiscuous mode [ 1817.456048][T11618] hsr_slave_1: left promiscuous mode [ 1817.464275][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1817.472087][T11618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1817.699164][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1817.707235][T11618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1818.045624][T11618] veth1_macvtap: left promiscuous mode [ 1818.051691][T11618] veth1_vlan: left promiscuous mode [ 1818.057650][T11618] veth0_vlan: left promiscuous mode [ 1818.501415][T27453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1818.516196][T27453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1818.525367][T27453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1818.538111][T27453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1818.549209][T27453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1818.757585][T11618] pimreg3 (unregistering): left allmulticast mode [ 1819.046344][T11618] team0 (unregistering): Port device team_slave_1 removed [ 1819.121337][T11618] team0 (unregistering): Port device team_slave_0 removed [ 1819.515015][T29114] tipc: Enabling of bearer rejected, failed to enable media [ 1819.743221][T29122] loop0: detected capacity change from 0 to 16 [ 1819.982351][T11618] IPVS: stop unused estimator thread 0... [ 1820.521842][T29131] loop0: detected capacity change from 0 to 1024 [ 1820.620925][T29107] chnl_net:caif_netlink_parms(): no params data found [ 1820.644388][T29131] EXT4-fs: inline encryption not supported [ 1820.647524][T17719] Bluetooth: hci2: command tx timeout [ 1820.650383][T29131] EXT4-fs: Ignoring removed i_version option [ 1820.746422][T29131] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1820.891950][T29131] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.9389: lblock 2 mapped to illegal pblock 2 (length 1) [ 1820.944830][T29131] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1820.953300][T29131] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.9389: lblock 0 mapped to illegal pblock 48 (length 1) [ 1820.981112][T29131] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1820.990537][T29131] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9389: Failed to acquire dquot type 0 [ 1821.013883][T29131] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1821.025961][T29131] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.9389: mark_inode_dirty error [ 1821.060905][T29131] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 1821.074812][T29131] EXT4-fs (loop0): 1 orphan inode deleted [ 1821.082724][T29131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1821.118148][ T12] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1821.155718][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1821.164644][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0 [ 1821.265476][T29131] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.9389: lblock 0 mapped to illegal pblock 16 (length 1) [ 1821.604886][T27452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.673317][T27452] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1821.702907][T27452] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1821.718861][T29107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.727441][T29107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.735386][T29107] bridge_slave_0: entered allmulticast mode [ 1821.744750][T29107] bridge_slave_0: entered promiscuous mode [ 1821.765249][T27452] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 1821.836369][T29107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.844102][T29107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.852010][T29107] bridge_slave_1: entered allmulticast mode [ 1821.863331][T29107] bridge_slave_1: entered promiscuous mode [ 1822.098170][T29107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.175110][T29107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.358827][T29107] team0: Port device team_slave_0 added [ 1822.445840][T29107] team0: Port device team_slave_1 added [ 1822.711178][T16069] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1822.724126][T17719] Bluetooth: hci2: command tx timeout [ 1822.727910][T29107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.737075][T29107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1822.764259][T29107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.802987][T16069] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1822.898211][T29107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.906951][T29107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1822.936973][T29107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.120397][T29107] hsr_slave_0: entered promiscuous mode [ 1823.130543][T29107] hsr_slave_1: entered promiscuous mode [ 1823.139413][T29107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1823.147352][T29107] Cannot create hsr debugfs directory [ 1824.565271][T29176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9403'. [ 1824.808534][T17719] Bluetooth: hci2: command tx timeout [ 1825.389183][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9410'. [ 1825.782446][T29195] loop0: detected capacity change from 0 to 1024 [ 1825.827760][T29107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1825.888045][T29195] hfsplus: keylen 65060 too large [ 1825.893392][T29195] hfsplus: xattr searching failed [ 1825.910146][T29107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1825.913140][ T30] audit: type=1800 audit(1746773589.932:220): pid=29195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9412" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 1825.969391][T29107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1826.066714][T29107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1826.884156][T17719] Bluetooth: hci2: command tx timeout [ 1827.259005][T29107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.422822][T29107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.476686][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.484455][T11618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.597836][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.605564][T11618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.397387][T29107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1829.929381][T29107] veth0_vlan: entered promiscuous mode [ 1830.059133][T29107] veth1_vlan: entered promiscuous mode [ 1830.410755][T29107] veth0_macvtap: entered promiscuous mode [ 1830.494764][T29107] veth1_macvtap: entered promiscuous mode [ 1830.648675][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.660627][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.670927][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.682156][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.695177][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.706872][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.717990][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.730541][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.745914][T29107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.027031][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.038265][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.048607][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.059396][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.069783][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.080588][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.090901][T29107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.104800][T29107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.121180][T29107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.227936][T29107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.237207][T29107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.246609][T29107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.255937][T29107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.556170][T29362] netlink: zone id is out of range [ 1835.561528][T29362] netlink: zone id is out of range [ 1835.567514][T29362] netlink: zone id is out of range [ 1835.572863][T29362] netlink: zone id is out of range [ 1835.578352][T29362] netlink: zone id is out of range [ 1835.583834][T29362] netlink: zone id is out of range [ 1835.589215][T29362] netlink: zone id is out of range [ 1835.594837][T29362] netlink: zone id is out of range [ 1835.600204][T29362] netlink: zone id is out of range [ 1835.610205][T29362] netlink: zone id is out of range [ 1837.549163][T11629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.561534][T11629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.729912][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.738215][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.923124][T29427] sp0: Synchronizing with TNC [ 1840.471534][T29438] loop2: detected capacity change from 0 to 64 [ 1840.800412][T29438] syz.2.9482: attempt to access beyond end of device [ 1840.800412][T29438] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1840.854608][T29438] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 1840.865446][T29438] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1840.876689][T29438] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 1841.696961][T11629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.894992][T11629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.118365][T11629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.315117][T11629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.679342][T11629] bridge_slave_1: left allmulticast mode [ 1842.685706][T11629] bridge_slave_1: left promiscuous mode [ 1842.692198][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.709142][T11629] bridge_slave_0: left allmulticast mode [ 1842.715450][T11629] bridge_slave_0: left promiscuous mode [ 1842.721993][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.231671][T11629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1843.275442][T11629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1843.330498][T11629] bond0 (unregistering): Released all slaves [ 1843.964970][T11629] hsr_slave_0: left promiscuous mode [ 1843.984249][T11629] hsr_slave_1: left promiscuous mode [ 1843.992319][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1844.004354][T11629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.037918][ T30] audit: type=1326 audit(1746773608.042:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29479 comm="syz.0.9501" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f55539 code=0x0 [ 1844.062445][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1844.071533][T11629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1844.176999][T11629] veth1_macvtap: left promiscuous mode [ 1844.182884][T11629] veth0_macvtap: left promiscuous mode [ 1844.189292][T11629] veth1_vlan: left promiscuous mode [ 1844.195165][T11629] veth0_vlan: left promiscuous mode [ 1845.125224][T27453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1845.138788][T27453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1845.149291][T27453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1845.162925][T27453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1845.175233][T27453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1845.214288][T11629] team0 (unregistering): Port device team_slave_1 removed [ 1845.242520][T11629] team0 (unregistering): Port device team_slave_0 removed [ 1846.744818][T29492] chnl_net:caif_netlink_parms(): no params data found [ 1847.204229][T27453] Bluetooth: hci2: command tx timeout [ 1847.850051][T29492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.857777][T29492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.865732][T29492] bridge_slave_0: entered allmulticast mode [ 1847.875251][T29492] bridge_slave_0: entered promiscuous mode [ 1847.989403][T29492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.006188][T29492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.014161][T29492] bridge_slave_1: entered allmulticast mode [ 1848.023421][T29492] bridge_slave_1: entered promiscuous mode [ 1848.318739][T29492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.421054][T29492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.703128][T29492] team0: Port device team_slave_0 added [ 1848.772844][T29492] team0: Port device team_slave_1 added [ 1848.941944][T29552] sg_write: data in/out 1717986882/120 bytes for SCSI command 0x0-- guessing data in; [ 1848.941944][T29552] program syz.0.9518 not setting count and/or reply_len properly [ 1848.971660][T29492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1848.979136][T29492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.005867][T29492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1849.029590][T29492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1849.038027][T29492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.064219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1849.071587][T29492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1849.293116][T17719] Bluetooth: hci2: command tx timeout [ 1849.418602][T29492] hsr_slave_0: entered promiscuous mode [ 1849.432606][T29492] hsr_slave_1: entered promiscuous mode [ 1849.441483][T29492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1849.451044][T29492] Cannot create hsr debugfs directory [ 1850.697050][T29579] sctp: [Deprecated]: syz.1.9528 (pid 29579) Use of int in maxseg socket option. [ 1850.697050][T29579] Use struct sctp_assoc_value instead [ 1851.340016][T29492] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1851.366723][T17719] Bluetooth: hci2: command 0x040f tx timeout [ 1851.421955][T29492] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1851.456397][T29492] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1851.535641][T29492] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1851.575564][T29596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9535'. [ 1851.589548][T29596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9535'. [ 1851.600216][T29596] netlink: 'syz.5.9535': attribute type 7 has an invalid length. [ 1852.619931][T29492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.727907][T29492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.823278][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.830939][T11618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.945759][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.953329][T11618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.444037][T27453] Bluetooth: hci2: command 0x040f tx timeout [ 1854.808031][T29492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.140232][T29648] loop0: detected capacity change from 0 to 4096 [ 1855.195166][T29648] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1855.214124][T10725] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1855.409693][T10725] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1855.418571][T10725] usb 2-1: config 0 has no interface number 0 [ 1855.425205][T10725] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1855.434754][T10725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.528820][T27453] Bluetooth: hci2: command 0x040f tx timeout [ 1855.537666][T10725] usb 2-1: config 0 descriptor?? [ 1855.564314][T10725] usb 2-1: selecting invalid altsetting 1 [ 1855.570719][T10725] dvb_ttusb_budget: ttusb_init_controller: error [ 1855.580589][T10725] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1855.978279][T10725] DVB: Unable to find symbol cx22700_attach() [ 1856.336539][T10725] DVB: Unable to find symbol tda10046_attach() [ 1856.342949][T10725] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1856.414839][T10725] usb 2-1: USB disconnect, device number 29 [ 1856.946458][T29492] veth0_vlan: entered promiscuous mode [ 1857.061857][T29492] veth1_vlan: entered promiscuous mode [ 1857.294731][T29492] veth0_macvtap: entered promiscuous mode [ 1857.390861][T29492] veth1_macvtap: entered promiscuous mode [ 1857.564716][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.575700][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.586893][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.597675][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.600426][T29695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9564'. [ 1857.607722][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.607818][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.607911][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.608001][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.613139][T29492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1857.617612][T29695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9564'. [ 1857.682051][T29695] netlink: 'syz.1.9564': attribute type 18 has an invalid length. [ 1857.791825][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.802914][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.813193][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.824124][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.837145][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.848784][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.859249][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.870099][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.890722][T29492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1857.955806][T29492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.965112][T29492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.974697][T29492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.983848][T29492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.432185][T29706] sp0: Synchronizing with TNC [ 1861.135906][T29757] loop0: detected capacity change from 0 to 512 [ 1861.366120][T29757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1861.366519][T29757] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1861.489855][T29752] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1861.490208][T29752] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1861.490324][T29752] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9580: Failed to acquire dquot type 0 [ 1861.720944][T27452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1861.734358][T29769] program syz.5.9584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1862.906086][T16184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.914899][T16184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1863.111636][T11629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1863.120190][T11629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.678052][ T30] audit: type=1800 audit(1746773628.682:222): pid=29818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9597" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1866.066062][T29848] loop8: detected capacity change from 0 to 256 [ 1868.280790][T29888] loop0: detected capacity change from 0 to 512 [ 1868.333273][T29888] EXT4-fs: Ignoring removed nobh option [ 1868.522307][T29888] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 1868.583994][T29888] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 1868.634188][T29888] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #13: comm syz.0.9623: casefold flag without casefold feature [ 1868.657774][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1868.667306][T29897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1868.756351][T29888] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9623: couldn't read orphan inode 13 (err -117) [ 1868.845789][T29888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1868.940341][T29888] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 1869.298389][T27452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1870.927284][T29918] loop8: detected capacity change from 0 to 2048 [ 1871.638073][T29931] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1872.544667][T29938] loop0: detected capacity change from 0 to 4096 [ 1872.689681][T29938] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1872.697901][T29938] UDF-fs: Scanning with blocksize 512 failed [ 1872.866228][T29938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1874.813117][T29955] loop8: detected capacity change from 0 to 1024 [ 1874.844938][T29955] ext4: Unknown parameter 'noacl' [ 1878.196642][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1878.206912][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1880.029594][T30046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9678'. [ 1881.617395][T29179] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1881.804527][T29179] usb 4-1: Using ep0 maxpacket: 16 [ 1881.819963][T29179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.832191][T29179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.843083][T29179] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1881.852801][T29179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.934260][T10725] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1881.985624][T29179] usb 4-1: config 0 descriptor?? [ 1882.107011][T10725] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1882.116167][T10725] usb 2-1: config 0 has no interface number 0 [ 1882.158444][T10725] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1882.169906][T10725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.178761][T10725] usb 2-1: Product: syz [ 1882.183336][T10725] usb 2-1: Manufacturer: syz [ 1882.188419][T10725] usb 2-1: SerialNumber: syz [ 1882.263162][T10725] usb 2-1: config 0 descriptor?? [ 1882.369169][T17354] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1882.475639][T29179] aquacomputer_d5next 0003:0C70:F014.0043: item fetching failed at offset 1/5 [ 1882.519215][T10725] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1882.530424][T10725] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1882.539452][T10725] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1882.548199][T10725] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1882.570255][T29179] aquacomputer_d5next 0003:0C70:F014.0043: probe with driver aquacomputer_d5next failed with error -22 [ 1882.594259][T17354] usb 9-1: Using ep0 maxpacket: 32 [ 1882.645804][T17354] usb 9-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.656399][T17354] usb 9-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1882.672195][T17354] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1882.679061][T12383] usb 4-1: USB disconnect, device number 30 [ 1882.685917][T17354] usb 9-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1882.695555][T17354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.748191][T10725] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1882.806211][T17354] usb 9-1: config 0 descriptor?? [ 1882.984968][T10725] usb 2-1: USB disconnect, device number 30 [ 1883.037483][T10725] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1883.050115][T10725] keyspan 2-1:0.133: device disconnected [ 1883.305130][T17354] logitech 0003:046D:C298.0044: unbalanced collection at end of report description [ 1883.348308][T17354] logitech 0003:046D:C298.0044: parse failed [ 1883.355581][T17354] logitech 0003:046D:C298.0044: probe with driver logitech failed with error -22 [ 1883.564841][T12383] usb 9-1: USB disconnect, device number 8 [ 1885.364749][T17719] Bluetooth: hci3: command 0x0405 tx timeout [ 1886.684017][T30137] xt_CT: No such helper "snmp" [ 1888.937656][T30174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9719'. [ 1888.947505][T30174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9719'. [ 1889.858085][T30182] loop8: detected capacity change from 0 to 1024 [ 1889.922583][T30182] EXT4-fs: Ignoring removed i_version option [ 1889.929731][T30182] EXT4-fs: Ignoring removed bh option [ 1890.035276][T30182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1890.506215][T29492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1890.817331][T30204] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9727'. [ 1890.862371][T30202] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9727'. [ 1890.931639][T30206] sp0: Synchronizing with TNC [ 1890.963262][T30206] sp0: Found TNC [ 1892.421591][T30227] No control pipe specified [ 1892.516583][T17719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1892.537535][T17719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1892.552936][T17719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1892.570288][T17719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1892.582500][T17719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1894.125267][T30231] chnl_net:caif_netlink_parms(): no params data found [ 1894.653838][T27453] Bluetooth: hci4: command tx timeout [ 1895.244773][T30275] netlink: 'syz.8.9750': attribute type 2 has an invalid length. [ 1895.253670][T30275] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9750'. [ 1895.558255][T11616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.844937][T11616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.998069][T11616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.072649][T30231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.080518][T30231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.090013][T30231] bridge_slave_0: entered allmulticast mode [ 1896.099514][T30231] bridge_slave_0: entered promiscuous mode [ 1896.172086][T11616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.217791][T30231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.232068][T30231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.240029][T30231] bridge_slave_1: entered allmulticast mode [ 1896.249485][T30231] bridge_slave_1: entered promiscuous mode [ 1896.460248][T30231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.559285][T30231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.753931][T27453] Bluetooth: hci4: command tx timeout [ 1896.833162][T11616] bridge_slave_1: left allmulticast mode [ 1896.844469][T11616] bridge_slave_1: left promiscuous mode [ 1896.851216][T11616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.878423][T11616] bridge_slave_0: left allmulticast mode [ 1896.885271][T11616] bridge_slave_0: left promiscuous mode [ 1896.891786][T11616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.568893][T30301] loop8: detected capacity change from 0 to 256 [ 1897.819646][T30301] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x509db19e, utbl_chksum : 0xe619d30d) [ 1897.870638][T11616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.905753][T11616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.960407][T11616] bond0 (unregistering): Released all slaves [ 1898.081080][T30231] team0: Port device team_slave_0 added [ 1898.152319][T30231] team0: Port device team_slave_1 added [ 1898.546996][T30231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1898.554555][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1898.585797][T30231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1898.656087][T30311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9762'. [ 1898.805600][T27453] Bluetooth: hci4: command tx timeout [ 1898.854792][T30231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1898.862080][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1898.892533][T30231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.100391][T11616] hsr_slave_0: left promiscuous mode [ 1899.125540][T11616] hsr_slave_1: left promiscuous mode [ 1899.133904][T11616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1899.141673][T11616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1899.172305][T11616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1899.181125][T11616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1899.196531][T22495] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1899.229739][T11616] veth1_macvtap: left promiscuous mode [ 1899.235741][T11616] veth0_macvtap: left promiscuous mode [ 1899.241755][T11616] veth1_vlan: left promiscuous mode [ 1899.247535][T11616] veth0_vlan: left promiscuous mode [ 1899.384468][T22495] usb 4-1: Using ep0 maxpacket: 8 [ 1899.465484][T22495] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1899.475188][T22495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.483445][T22495] usb 4-1: Product: syz [ 1899.487996][T22495] usb 4-1: Manufacturer: syz [ 1899.492898][T22495] usb 4-1: SerialNumber: syz [ 1899.642920][T22495] usb 4-1: config 0 descriptor?? [ 1899.731942][T22495] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1899.740516][T22495] usb 4-1: setting power ON [ 1899.746496][T22495] dvb-usb: bulk message failed: -22 (2/0) [ 1899.866478][T30320] dvb-usb: bulk message failed: -22 (3/0) [ 1899.872888][T30320] ===================================================== [ 1899.880335][T30320] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 1899.887928][T30320] cxusb_i2c_xfer+0x1303/0x18e0 [ 1899.893003][T30320] __i2c_transfer+0xec7/0x30e0 [ 1899.898991][T30320] i2c_transfer+0x300/0x4b0 [ 1899.903862][T30320] i2c_transfer_buffer_flags+0x138/0x200 [ 1899.909781][T30320] i2cdev_write+0x214/0x2b0 [ 1899.917211][T30320] vfs_writev+0x8db/0x1420 [ 1899.921853][T30320] do_writev+0x1b1/0x580 [ 1899.927219][T30320] __ia32_sys_writev+0x9c/0xf0 [ 1899.932181][T30320] ia32_sys_call+0x3f2a/0x42c0 [ 1899.937408][T30320] __do_fast_syscall_32+0xb0/0x110 [ 1899.942783][T30320] do_fast_syscall_32+0x38/0x80 [ 1899.948042][T30320] do_SYSENTER_32+0x1f/0x30 [ 1899.952753][T30320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1899.959451][T30320] [ 1899.961886][T30320] Local variable i.i838 created at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1899.967337][T30320] cxusb_i2c_xfer+0x304/0x18e0 [ 1899.972275][T30320] __i2c_transfer+0xec7/0x30e0 [ 1899.977413][T30320] [ 1899.979881][T30320] CPU: 1 UID: 0 PID: 30320 Comm: syz.3.9766 Tainted: G W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1899.993971][T30320] Tainted: [W]=WARN [ 1899.997905][T30320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1900.008452][T30320] ===================================================== [ 1900.018030][T30320] Disabling lock debugging due to kernel taint [ 1900.025368][T30320] Kernel panic - not syncing: kmsan.panic set ... [ 1900.031962][T30320] CPU: 1 UID: 0 PID: 30320 Comm: syz.3.9766 Tainted: G B W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1900.045936][T30320] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1900.051071][T30320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1900.061265][T30320] Call Trace: [ 1900.064651][T30320] [ 1900.067685][T30320] __dump_stack+0x26/0x30 [ 1900.072206][T30320] dump_stack_lvl+0x53/0x270 [ 1900.076978][T30320] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1900.082990][T30320] dump_stack+0x1e/0x25 [ 1900.087322][T30320] panic+0x4bd/0xd50 [ 1900.091451][T30320] kmsan_report+0x29d/0x2a0 [ 1900.096147][T30320] ? vprintk_default+0x3f/0x50 [ 1900.101093][T30320] ? __msan_warning+0x96/0x120 [ 1900.106024][T30320] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 1900.111209][T30320] ? __i2c_transfer+0xec7/0x30e0 [ 1900.116336][T30320] ? i2c_transfer+0x300/0x4b0 [ 1900.121202][T30320] ? i2c_transfer_buffer_flags+0x138/0x200 [ 1900.127211][T30320] ? i2cdev_write+0x214/0x2b0 [ 1900.132075][T30320] ? vfs_writev+0x8db/0x1420 [ 1900.136857][T30320] ? do_writev+0x1b1/0x580 [ 1900.141456][T30320] ? __ia32_sys_writev+0x9c/0xf0 [ 1900.146567][T30320] ? ia32_sys_call+0x3f2a/0x42c0 [ 1900.151667][T30320] ? __do_fast_syscall_32+0xb0/0x110 [ 1900.157152][T30320] ? do_fast_syscall_32+0x38/0x80 [ 1900.162365][T30320] ? do_SYSENTER_32+0x1f/0x30 [ 1900.167218][T30320] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1900.173917][T30320] ? kmsan_get_metadata+0x105/0x1b0 [ 1900.179308][T30320] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1900.185832][T30320] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1900.192083][T30320] ? kmsan_get_metadata+0x105/0x1b0 [ 1900.197469][T30320] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1900.203987][T30320] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1900.210239][T30320] ? mutex_unlock+0x29/0x50 [ 1900.214915][T30320] ? kmsan_get_metadata+0x105/0x1b0 [ 1900.220315][T30320] __msan_warning+0x96/0x120 [ 1900.225088][T30320] cxusb_i2c_xfer+0x1303/0x18e0 [ 1900.230110][T30320] ? do_fast_syscall_32+0x38/0x80 [ 1900.235349][T30320] ? ___slab_alloc+0xba5/0x3480 [ 1900.240367][T30320] ? i2cdev_write+0x14e/0x2b0 [ 1900.245236][T30320] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1900.251244][T30320] ? kmsan_get_metadata+0x105/0x1b0 [ 1900.256643][T30320] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 1900.262013][T30320] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 1900.267371][T30320] __i2c_transfer+0xec7/0x30e0 [ 1900.272328][T30320] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1900.278845][T30320] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1900.284794][T30320] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1900.291058][T30320] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1900.296986][T30320] i2c_transfer+0x300/0x4b0 [ 1900.301687][T30320] i2c_transfer_buffer_flags+0x138/0x200 [ 1900.307537][T30320] i2cdev_write+0x214/0x2b0 [ 1900.312241][T30320] vfs_writev+0x8db/0x1420 [ 1900.316862][T30320] ? __pfx_i2cdev_write+0x10/0x10 [ 1900.322187][T30320] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1900.328720][T30320] ? kmsan_get_metadata+0x105/0x1b0 [ 1900.334117][T30320] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1900.340137][T30320] do_writev+0x1b1/0x580 [ 1900.344577][T30320] ? kmsan_get_metadata+0x105/0x1b0 [ 1900.349981][T30320] __ia32_sys_writev+0x9c/0xf0 [ 1900.354931][T30320] ia32_sys_call+0x3f2a/0x42c0 [ 1900.359859][T30320] __do_fast_syscall_32+0xb0/0x110 [ 1900.365169][T30320] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1900.371081][T30320] do_fast_syscall_32+0x38/0x80 [ 1900.376124][T30320] do_SYSENTER_32+0x1f/0x30 [ 1900.380813][T30320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1900.387334][T30320] RIP: 0023:0xf706e539 [ 1900.391528][T30320] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1900.411330][T30320] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1900.419949][T30320] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1900.428085][T30320] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1900.436206][T30320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1900.444314][T30320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1900.452422][T30320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1900.460573][T30320] [ 1900.463994][T30320] Kernel Offset: disabled [ 1900.468386][T30320] Rebooting in 86400 seconds..