last executing test programs: 12.521561083s ago: executing program 3 (id=694): unshare(0x22020400) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.482956604s ago: executing program 3 (id=695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 12.404270495s ago: executing program 3 (id=696): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x4040005) 12.239367788s ago: executing program 3 (id=698): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000640)={[{@utf8no}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_win95}, {@fat=@time_offset={'time_offset', 0x3d, 0xea}}, {@utf8}, {@numtail}, {@shortname_winnt}]}, 0x0, 0x29a, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 12.022348343s ago: executing program 3 (id=701): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$netlink(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000007c0)={0x480, 0x27, 0x10, 0x70bd29, 0x25dfdbfd, "", [@nested={0xbe, 0xf4, 0x0, 0x1, [@nested={0x4, 0x39}, @nested={0x4, 0x123}, @generic="45da34a0c78ad0b9050c985561bd1bb490ee15203fad840a5fe0c2ddda76ff8ef73a8f3de352265e006e0038dafe05341ec65a927175be8a8f315ecc967667b23b3192c772cdb0ce3004152f5e048ddc687a02dfeea053d452a59a77a7e6a2f4389858e1d5779cda409d18540bf39fc8a20422f90a64a78ff7fd5f56cb94942d6ad6d1f8353fe58332d98a86640c4ecc9dfb0e657a1da706e7df0ca021ead53b8352fbed778ac600f7e043a953199f2aa1a4"]}, @generic="3feb9107", @generic="e99d5dd48aa802505e653b3855148fecb8fe5bd2f6e6fb1d214deeb2ee2d203dcfb2e28366619933fd28b27034e1c935686170e2c948467b8c7df4e55f74dc0c3c851692f038293e8dc9534d9e40680769f9c56548fe85d7a4519b81b95a1a121d9911b691b4cb22f141c9aaf45a794d98c8dcaed50dbfeebc77cadd0eb87a5a9ff62cf11d5e0d93ceb3e8b6723edaabc40f437aad17b35f178ffc7348ddd27c861ce5c335d6443509b072706f700a0a4bd1392cc4cc1ad2b2527441f442fffd0de2d744d1436a4fc63f0787372be5166a81bff11e128d1c1a863bac44c320aac510d06d69a8462b802b3b48c533ca2d3c93f9cf6beb61380a8b8967aeecd08caf08f8b70c13afd041dad6ef3066bf5d1d3c43f74b318fa54497fd93192a8c2cc7f89b742601d99ae6c35111abf992c8ccc7af42da32f52e6168fe84686921afb99b3afb682d5495472979024ad9918313236423331122ff7a111b4f3a15cb2e0760d9090f9b17240246f59a960c9d4cdde207bcd33e50397ccae8c5f19ede73a35fb0cf5e39bd1372756b433c338829b996eb545ea176d331db2322b652a18721ce431c80b06e87d49aeadd481901e1d4f2c885030163b521fcb64acaa297ed4e59544132c2c7959c9b5e8388903626af1eb181ecbc8d51e0a9374edc559803cd1cb0c2b3000b51bf09473e80b9de8ceab0a1d83e0f02416b8094795315767d1c38292c6120d86ed216df04dddb40ad585b84db6340255eeab4f1c227c2c6e13d4c7d7a0e68bd1da6619edd629e919b8e342869bc4c4de70fd4f613661aab96903d67042daa8a458636507986454af9a35b78f0a5ab93c7f0337bf12155227b2170f7eecc36628164b54a7063ca01832d6333cfef0ab93872f0f8e4c7b74a6dffc0656d1d6d724e612e3a1ca7bad447d413417917a5b54991665acab71840c4aed029dc8c88e0049c8429c1621f5a0b81e7348b1a058813d86f1ba437632c1e7ae5a8593ace2355f6eaa6aba543f02fb52b07294ef1b0840d66796d3c03ead61ddc10cee0fa505b04c95fa98cb6005c1211975dda666023e0bc7d8f1b533665a9cf74d6af83450cf1def104ea5d1fc14f5565eef87bf38ac14758d347ddd84d9030a0551ecd90ec9df23b28ee0cd93063fd3e9c8d9c85d8a3e20ee3a0834957ac5fa292110277ce134a1cbb463148e72a8a0dd2f08fe294d0109eff6656d2fa029c128403557cd5a2c622ac58e0b33fb7646743205bdba6186249649af0f6c87bc9d759d1c9a5a0fcc301a3dd5a801634af033fa0129bd3b760b2a385c8698de30f0eaaa76c3afd", @nested={0x4, 0x110}]}, 0x480}], 0x1, 0x0, 0x0, 0x10}, 0xc050) 11.6479475s ago: executing program 3 (id=705): unshare(0x22020400) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11.449206934s ago: executing program 32 (id=705): unshare(0x22020400) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.973678492s ago: executing program 4 (id=741): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000700)={'\x00', 0x0, 0x5, 0x4, 0xfffffffe, 0x0, "000000ff1d070000000900000900", '6\x00', "07030400", "e86eade4", ['\x00', "0100000004008000f500"]}) 5.755685286s ago: executing program 4 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0xf5ff, {0x0, 0x0, 0x80}}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x3c}, 0x1, 0x1200}, 0x0) 5.513625811s ago: executing program 4 (id=747): socket(0x28, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@umask={'umask', 0x3d, 0x2}}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp862'}}, {@gid}, {}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6bc, &(0x7f0000001240)="$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") close(0x3) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) socket$netlink(0x10, 0x3, 0x8000000004) 5.103368039s ago: executing program 4 (id=751): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x80015b1b, 0x0) syz_usb_disconnect(r0) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 3.517593481s ago: executing program 0 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.324327565s ago: executing program 5 (id=764): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.05763958s ago: executing program 0 (id=766): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x810) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0xc, 0x0, 0x0}, &(0x7f00000003c0)={0x18, &(0x7f0000000200)={0x0, 0xf, 0x2f, "7af7f11c10621f8c9ce9904102bd85e474c5f2e7b42d6e4c396dc2bf758878f20824d5fc7032a1fb4a1a680ac77a46"}, 0x0, 0x0, 0x0, 0x0}) 3.057461399s ago: executing program 5 (id=767): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x83) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0xff7e82) 2.729269226s ago: executing program 5 (id=769): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000001cc0)="$eJzs3Au4TdXXMPAx5pyLQ9JOcjmsMcdip4NJkuSSkEuSJEmSW0KSJElIbrklIQm5J7knndw6Tjru9/s16eSVJElISDK/53T5e3v7+vzf99/3eb/3jN/zrLPnOGuPsefc46y9117POeebLsNrNKpZtQEzw79C/XbbGwASAGAQAFwDAAEAlMlVJhcgQDaNvf+lBxF/swdnXekZiCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITKzrbPzXytb5t2+6TK8xrJ/6vq//T/vxl9v5Pr/fyfZLrNf3v//x/qnjjTpf+Ym/c/cpP+Zm/Q/c5P+Z27S/8xN+p+5Sf+FyMyu9PXn/w+235+qKz2Py2zBfynvyv70CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTILM75SwwA/D6+0vMSQgghhBBCCCHE38dnvdIzEEIIIYQQQgghxP99CGA0GAggC2SFBMgG2eEqyAFXQ064BmJwLeSC6yA3XA95IC/kg/yQCAWgIIRAYIEhgkJQGOLgPcCNkARFoRgUBwcloCTcBKXgZigNt0AZSE4BuA3KQXmoABXhdqgEd0BlqAJV4U6oBtWhBtSEu6AW3A214R6oA/dCXbgP6sH9UB8egAbwIDSEh6ARPAyN4RFoAk2hGTSHFv+l/BegB7wIPaEX9IY+0Bdegn7QHwbAQBgEL8NgeAWGwKswFIbBcHgNRsDrMBLegFEwGsbAmzAWxsF4mAATYRJMhrdgCrwNU+EdmAbTYQbMhFkwG+bAuzAX3oN58D4kI8B8WAALYREshg8hBZZAKnwES+FjSINlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFu2FPlb3wCeyDT2E/fAbp8Pl/Mv8s/DG/KwICKlRo0GAWzIIJmIDZMTvmwByYE3NiDGOYC3NhbsyNeTAP5sN8mIiJWBALIiEhI2MhLIRxjGMRLIJJmITFsBg6dFgSS2IpvBlLY2ksg2WwLJbFclgey2NFrIiVsBJWxspY9bYFAFgNa2ANvAvvwruxNtbGOlgH62JdrIf1sD7WxwbYABtiQ2yEjbAxNsYm2ASbYTNsgS2wJbbEVtgK22AbbIttsR22w/bYHjtgB+yIHbETdsLO2Bm7YBfsit2wG76AL+CL+CL2wmqqD/bFvtgP++EAHIgD8WUcjK/gK/gqDsVhOBxfw9fwdRyJZ3AUjsYxOAYrqXE4Hicgq0k4GSfjFJyCU3EqTsPpOB1n4iycjXNwDs7F9zDjCEvGD/ADXIALcBEuxsWYgkswFVNxKZ7FNFyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW3IbbcAfuwF24C/fgHvwEP8FP8VMciumYjgfwAB7Eg3gID+FhPIxH8Mi2qwDwGB7D43gcT+BJPIUn8TSexjN4Fs/hOTyP5/ECPpf4VcM9RdcNBZXBKKOyqCwqQSWo7Cq7yqFyqJwqp4qpmMqlcqncKrfKo/KofCqfSlSJqqAqqEiRYhWpQqqQiqu4KqKKqCSVpIqpYsopp0qqkqqUKqVKq9KqjLpVlVW3qXKqvGrtKqqKqpJq4yqrKqqqqqqqqeqqhqqpaqpaqpaqrWqrOqqOqqvqqnrqflVf9cEB+KDK6EwjNQwbq+HYRDVVzVRz9To+qlqqkdhKtVZt1ONqNI7Cdqqla6+eUh3UeOyonkn4/YWui3pedVXdVHf1guqhWrmeqpeahn1UXzUT+6n+aoAaqOZidfU+JmMN9aoaqoap4eo1tQhfVyPVG2qUGq3GqDfVWDVOjVcT1EQ1SU1Wb6kp6m01Vb2jpqnpaoaaqWap2WqOelfNVe+peep9law+UPPVArVQLVKL1YcqRS1RqeojtVR9rNLUMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1Ta1Xe1QO9UutVvtUXvVJ2qf+lTtV5+pdPW5ynj9Pqi+UIfUl+qw+kodUV+ro+obdUx9q46rXuqEOqlOqe/VafWDOqPO9jmnflTn1U/qgvpZXVRegUattNZGBzqLzqoTdDadXV+lc+irdU59jY7pa3UufZ3Ora/XeXRenU/n14m6gC6oQ03aataRLqQL67i+QRfRN+okXVQX08W10yV0SX2TLqVv1qX1LbqMvlWX1bfpcrq8rqAr6tt1JX2Hrqyr6Kr6Tl1NV9c1dE19l66l79a19T26jr5X19X36Xr6fl1fP6Ab6Ad1Q/2QbqQf1o31I7qJbqqb6ea6hX5Ut9SP6Va6tW6jH9dt9RO6nX5St9dP6Q76ad1RP6M76Wd1Z/2c7qKf1111N91d/6wvaq976l66t+6j++qXdD/dXw/QA/Ug/bIerF/RQ/Sreqgepofr1/QI/boeqd/Qo/RoPUa/qcfqcXq8nqAn6kl6sn5LT9Fv66n6HT1NT9czdFaYpWfrAb9VmvdP5L/9h/yZOiN/yC+PvkVv1dv0dr1D79S79G69R+/Ve/U+vU/v1/t1uk7XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf0Sf2j/l6f1j/oM/qsPqt/1Of1eX3ht+cADBpltDEmMFlMVpNgspns5iqTw1xtcpprTMxca3KZ60xuc73JY/KafCa/STQFTEETGjLWsIlMIVPYxM0Npoi50SSZoqaYKW6cKWFKmptMzCD8K/l/Mb8VM349pk0L08K0NC1NK9PKtDFtTFvT1rQz7Ux70950MB1MR9PRdDKdTGfT2XQxXUxX09V0N91ND9PD9EQwvU1v09e8ZPqZ/maAGWgGmZdNRuEhZogZaoaa4Wa4GWFGmJFmpBllRpmMnWPNWDPejDcTzUQz2Uw2U8wUM9VMNdPMNDPDzDCzzCwzx8wxc81cM8/MM8km2cw3881Cs9AsNotNikkxqSbVLDVLTZpZZpaZFWaFWWVWmTVmjVln1pkNZoPZZDaZNLPVbDXbzXaz0+w0u81us9fsNfvMPrPf7DfpJt0cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMcXPcnDAnzClzypw2p80Zc8acM+fMeXPeXDAXzEVzMeO0L1CBCkxggixBliAhSAiyB9mDHEGOIGeQM4gFsSBXkCvIHVwf5AnyBvmC/EFiUCAoGIQBBTbgIAoKBYWDeHBDUCS4MUgKigbFguKBC0oEJYObglLBzUHp4JagTHBrUDa4LSgXlA8qBBWD24NKwR1B5aBKUDW4M6gWVA9qBDWDu4Jawd1B7eCeoE5wb1A3uC+oF9wf1A8eCBoEDwYNg4eCRsHDQePgkaBJ0DRoFjQPWvyt9b0/k/cx1zPsFWaFPmHf8KWwX9g/HBAODAeFL4eDw1fCIeGr4dBwWDg8fC0cEb4ejgzfCEeFo8Mx4Zvh2HBcOD6cEE4MJ4WTw7fCKeHb4dTwnXBaOD2cEc4MZ4Wzwznhu+Hc8L1wXvh+mBx+EM4PF4QLw0Xh4vDDMCVcEqaGH4VLw4/DtHBZuDxcEa4MV4WrwzXh2nBduD7cEG4MN4Wbwy3h1nBbuD3cEe4Md4W7wz3h3vCTcF/4abg//CxMDz8PD4S/v+19GR4OvwqPhF+HR8NvwmPht+Hx8LvwRHgyPBV+H54OfwjPhGfDc+GP4fnwp/BC+HN4MfQZJ/cZb+9kyFAWykIJlEDZKTvloByUk3JSjGKUi3JRbspNeSgP5aN8lEiJVJAKUgYmpkJUiOIUpyJUhJIoiYpRMXLkqCSVpFJUikpTaSpDZagslaVyVI4qUAW6nW6nO+gOqkJV6E66k6pTdapJNakW1aLaVJvqUB2qS3WpHtWj+lSfGlADakgNqRE1osbUmJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaXu1J16UA/qST2pN/WmvtSX+lE/GkADaBANosE0mIbQEBpKQ2k4DacRNIJG0kgaRaNpDL1JY2kcjacJNJEm0WSaTFNoCk2lqTSNptEMmkGzaBbNoTk0l+bSPJpHyZRM82k+LaSFtJgWUwqlUCql0lJaSmmURstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22k77aSdtJt2017aS/toH+2n/ZRO6XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kTwl2Gw2u73K5rBX25z2Gvsf43w2v020BWxBG9o8Nu8fYrLWJtmitpgtbp0tYUvam/4Ul7PlbQVb0d5uK9k7bOXfYoDf41prd/76i+j2XlvT3mVr2bttbXuPrWPvtXXtfbaefdjWt4/YBrapbWib20b2YdvYPmKb2Ka2mW1u29onbDv7pG1vn7Id7NN/ilPsErvWrrPr7Qa7z35qz9kf7VH7jT1vf7I9bS87yL5sB9tX7BD7qh1qh/0pHmPftGPtODveTrAT7aQ/xTPsTDvLzrZz7Lt2rn3vT/Fi+6FNtql2vl1gF9pFv8QZc0q1H9ml9mObZpfZ5XaFXWlX2dV2zT/musJuspvtFrvXfmK32x12p91ld9s9v8QZ69hvP7Pp9nN7xH5tD9ov7CF7zB62X/0SZ6zvmP3WHrff2RP2pD1lv7en7Q/2jD37y/oz1v69/dletN4CIyvWbDjgLJyVEzgbZ+erOAdfzTn5Go7xtZyLr+PcfD3n4bycj/NzIhfgghwysWXmiAtxYY7zDVyEb+QkLsrFuDg7LsEl+SYuxTdzac44e72Vy/JtXI7LcwWuyLdzJb6DK3MVrsp3cjWuzjW4Jt/Ftfhurs33cB2+l+vyfVyP7+f6/AA34Ae5IT/EjfhhbsyPcBNuys24ObfgR7klP8atuDW34ce5LT/B7fhJbs9PcQd+mjvyM9yJn+XO/Bx34ee5K3fj7vwC9+AXuSf34t7ch/vyS9yP+/MAHsiD+GUezK/wEH6Vh/IwHs6v8Qh+nUfyGzyKR/MYfpPH8jgezxN4Ik/iyfwWT+G3eSq/w9N4Os/gmTyLZ/Mcfpfn8ns8j9/nZP6A5/MCXsiLeDF/yCm8hFP5I17KH3MaL+PlvIJX8ipezWt4La/j9byBN/Im3sxbeCtv4+28g5F38W7ew3v5E97Hn/J+/ozT+XM+wP/GB/kLPsRf8mH+io/w13yUv+Fj/C0f5+/4BJ/kU/w9n+Yf+Ayf5XP8I5/nn/gC/8wX2TNEGKlIRyYKoixR1ighyhZlj66KckRXRzmja6JYdG2UK7ouyh1dH+WJ8kb5ovxRYlQgKhiFEUU24iiKCkWFo3h0Q1QkujFKiopGxaLikYtKRCWjm6JS0c1R6eiWqEx0a1Q2ui0qF5WPHr63YnR7VCm6I6ocVYmqRndG1aLqUY2oZnRXVCu6O6od3RPVie6NSkf3RfWi+6P60QNRA3gwahg9FDWKHo4aR49ETaKmUbOoedQiejRqGT0WtYpaR22ix6O20RNRu+jJqH30VNQhevqy+3tHfaK+0UvRS5H39+iF8UXxxfEP4ynxJfHU+EfxpfGP42nxZfHl8RXxlfFV8dXxNfG18XXx9fEN8Y3xTfHN8S1x72tmBYdOOe2MC1wWl9UluGwuu7vK5XBXu5zuGhdz17pc7jqX213v8ri8Lp/L7xJdAVfQhY6cdewiV8gVdnF3gyvibnRJrqgr5oo750q4kq65a+FauJbuMdfKtXZt3OPucfeEe8I96Z50T7kO7mnX0T3jOrlnXWf3nHvOPe+6um6uu3vB9XAvup6ul+vteru+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6im+wmuyluipvqprppbpqb4Wa4WW6Wm+PmuLlurpvn5rnkpGQ33813C91Ct9gtdikuxaW6VLfULXVpLs0td8vdSrfSrXar3Vq31q13691Gt9FtdpvdVrfVbXfb3U630+12u91et9ftc/vcfrffpbt0d8AdOOfdQXfIfekOu6/cEfe1O+q+ccfct+64+86dcCfdKfe9O+1+cGfcWXfO/ejOu5/cBfezu+i8mxx7KzYl9nZsauyd2LTY9NiM2MzYrNjs2JzYu7G5sfdi82Lvx5JjH8TmxxbEFsYWxRbHPoylxJbEUmMfxZbGPo6lxZbFlsdWxFbGVsW8L7A98oV8YR/3N/gi/kaf5Iv6Yr64d76EL+lv8qX8zb60v8WX8bf6sv42X86X9xX8I76Jb+qb+ea+hX/Ut/SP+Va+tW/jH/dt/RO+nX/St/dP+Q7+ad/RP+M7+Wd9Z/+c7+Kf9119N9/dv+B7+Bd9T699b9/H9/Uv+X6+vx/gB/pB/mU/2L/ih/hX/VA/zA/3r/kR/nU/0r/hR/nRfox/04/14/x4P8FP9JP8ZP+Wn+Lf9lP9O36an+5n+Jl+lp/t5/h3/Vz/np/n3/fJ/gM/3y/wC/0iv9h/6FP8Ep/qP/JL/cc+zS/zy/0KDwmr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w+/0u/xuv8fv9Z/4ff5Tv99/5tP95/6A/zd/0H/hD/kv/WH/lT/iv/ZH/Tf+mP/WH/ff+RP+pD/lv/en/Q/+jD/rz/kf/Xn/k7/gf/YX5W/WhBBCCCH+Kfoy+/v8IVL/+Kp++05fALh6R/7D/7Hmxjy/jvurxLYxAHiqV5cHf9+qVevdu/dv903TEBReAACxS/lZ4FK8DNrAE9AeWkOp/+38+qtu5/ky9eO3AmT/dzkJcCm+VP/mv6g/Lvmy9RcAJBW+lJMNLsWX6pf+U+3gl/p5W16mfrYvJgO0+nd5OeBSfKl+SXgMnob2f7inEEIIIYQQQgjxq/6qQqfLfb7N+HyeaC7lZIVL8eU+nwshhBBCCCGEEOLKe7Zb9ycfbd++dae/GFT5610yyCyDLP89pnElBpc9QP4zA4ArvZx/DBDgl0t8f32fK/3KJIQQQgghhPi7XTrpv9IzEUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghMq//F/9y7EqvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/lcAAAD//98IJ/w=") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.323044875s ago: executing program 5 (id=771): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00\b\x00', "be0ea450d5a50003"}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800600270000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2.198426307s ago: executing program 1 (id=772): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x82\x04\xd2O\x04\"-\xe7+\x06D\x1c0\xc6n.[}\xca\x03,Q\x0e%\xd3\x1b\xb4\x1cN0hab\xc7\x98\x86dV\xf1c\x96\xa1:\xfc7`v\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00'}], 0xa, "000278330600"}, 0x54) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.113010718s ago: executing program 5 (id=774): syz_usb_connect(0x3, 0x2d, &(0x7f0000002c40)={{0x12, 0x1, 0x71428af0d0b7ee11, 0xab, 0xc2, 0x57, 0x20, 0x10c5, 0x819a, 0xe7d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x37, 0x0, 0x90, 0x3, [{{0x9, 0x4, 0x69, 0x2, 0x1, 0x3, 0x0, 0x0, 0x9, [], [{{0x9, 0x5, 0x86, 0x3, 0x3ff, 0x0, 0x4, 0x8}}]}}]}}]}}, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.857626984s ago: executing program 2 (id=776): syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x64, 0x60, 0xc3, 0x10, 0xaf0, 0x7501, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x0, 0x0, 0x69, 0x68, 0xae}}]}}]}}, 0x0) 1.857482064s ago: executing program 1 (id=777): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x23b, &(0x7f0000000200)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rmdir(&(0x7f0000000140)='./bus\x00') 1.816456664s ago: executing program 4 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x78bd2a, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xc, 0x1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xfffffffffffffeef}}]}, 0x40}, 0x1, 0x0, 0x0, 0x140480a4}, 0x4008000) 1.636974088s ago: executing program 4 (id=779): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.549636969s ago: executing program 1 (id=780): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x181942, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1008800, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0x7}}, {@zero_size_dir}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@sys_tz}, {@time_offset={'time_offset', 0x3d, 0x200}}, {@gid}, {@errors_continue}, {@errors_continue}, {@errors_continue}]}, 0x3, 0x1543, &(0x7f00000003c0)="$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") mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) 1.320537034s ago: executing program 1 (id=781): openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x9, 0x0, 0x2, 0x2, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.217410846s ago: executing program 1 (id=782): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b"], 0x1c}}, 0x0) 1.02550218s ago: executing program 1 (id=783): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000140)={0x20, 0xe, 0x5, "897f895bef"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.0011146s ago: executing program 0 (id=784): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 889.169773ms ago: executing program 0 (id=785): add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000040ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) 777.589035ms ago: executing program 0 (id=786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0xeac0e19b6999623b, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x2b}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xb}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x0) 749.436195ms ago: executing program 0 (id=787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x6}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0x1, 0x2, 0x2}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 579.060599ms ago: executing program 5 (id=788): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x80015b1b, 0x0) syz_usb_disconnect(r0) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 373.687333ms ago: executing program 2 (id=789): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x830}, 0x20000000) 353.582593ms ago: executing program 2 (id=790): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x9, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 292.784604ms ago: executing program 2 (id=791): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 185.702296ms ago: executing program 2 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000580)={0x1e, 0x4, 0x1f}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) 0s ago: executing program 2 (id=793): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) kernel console output (not intermixed with test programs): cated v2 capabilities in a way that may be insecure [ 87.780258][ T4452] loop0: detected capacity change from 0 to 512 [ 87.825021][ T4325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.850025][ T4452] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.31: casefold flag without casefold feature [ 87.880773][ T4452] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.31: couldn't read orphan inode 15 (err -117) [ 87.901452][ T4452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.002067][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 88.017432][ T4325] usb 5-1: Using ep0 maxpacket: 16 [ 88.025564][ T4325] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.077939][ T4325] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 88.097584][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.110380][ T4460] loop0: detected capacity change from 0 to 16 [ 88.114521][ T4325] usb 5-1: Product: syz [ 88.120967][ T4325] usb 5-1: Manufacturer: syz [ 88.125749][ T4325] usb 5-1: SerialNumber: syz [ 88.152000][ T4460] erofs: (device loop0): mounted with root inode @ nid 36. [ 88.191638][ T4325] usb 5-1: config 0 descriptor?? [ 88.204112][ T4460] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 88.246681][ T4460] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 88.261118][ T4460] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 88.421932][ T4270] Bluetooth: hci4: Malformed LE Event: 0x0d [ 88.430887][ T4325] usb 5-1: USB disconnect, device number 2 [ 88.447590][ T4256] usb 4-1: USB disconnect, device number 2 [ 88.576961][ T4470] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.014210][ T4483] loop2: detected capacity change from 0 to 512 [ 89.079978][ T4483] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.44: casefold flag without casefold feature [ 89.124461][ T4339] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.181167][ T4491] loop0: detected capacity change from 0 to 512 [ 89.242287][ T4483] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.44: couldn't read orphan inode 15 (err -117) [ 89.266248][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.287683][ T4491] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.311163][ T4483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.333256][ T4339] usb 2-1: Using ep0 maxpacket: 8 [ 89.352600][ T4339] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 89.401539][ T4339] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.456043][ T4339] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.494782][ T4339] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.525864][ T4339] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.556830][ T4339] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.566398][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.582305][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 89.584889][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 89.605189][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 89.837528][ T4339] usb 2-1: GET_CAPABILITIES returned 0 [ 89.843217][ T4339] usbtmc 2-1:16.0: can't read capabilities [ 90.051708][ T4339] usb 2-1: USB disconnect, device number 3 [ 90.140742][ T4515] loop0: detected capacity change from 0 to 4096 [ 90.374877][ T27] audit: type=1800 audit(1757999993.594:2): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.59" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 90.429475][ T4521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.454890][ T4524] loop3: detected capacity change from 0 to 1024 [ 90.500051][ T4524] hfsplus: wrong filesystem version [ 90.523638][ T4527] loop4: detected capacity change from 0 to 512 [ 90.524747][ T4521] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 90.558497][ T4524] overlayfs: conflicting lowerdir path [ 90.609810][ T4530] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 90.634843][ T4527] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.63: casefold flag without casefold feature [ 90.681412][ T4527] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.63: couldn't read orphan inode 15 (err -117) [ 90.717607][ T4527] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.973369][ T4538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 91.008682][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 91.029990][ T4532] loop0: detected capacity change from 0 to 8192 [ 91.080247][ T4532] ======================================================= [ 91.080247][ T4532] WARNING: The mand mount option has been deprecated and [ 91.080247][ T4532] and is ignored by this kernel. Remove the mand [ 91.080247][ T4532] option from the mount to silence this warning. [ 91.080247][ T4532] ======================================================= [ 91.233125][ T4540] binder: 4539:4540 unknown command 1074553619 [ 91.248708][ T4540] binder: 4539:4540 ioctl c0306201 200000000040 returned -22 [ 91.266055][ T4532] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.426335][ T4545] loop0: detected capacity change from 8192 to 0 [ 91.439928][ T4547] loop4: detected capacity change from 0 to 2048 [ 91.451640][ T4357] loop: Write error at byte offset 9223372036854792703, length 512. [ 91.477313][ T4547] NILFS (loop4): unrecognized mount option "ÿ0xffffffffffffffff1844674407370955161501777777777777777777777ÿ01777777777777777777777ÿÿ18446744073709551615" [ 91.531731][ C1] I/O error, dev loop0, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 91.542029][ C1] Buffer I/O error on dev loop0, logical block 33, lost sync page write [ 91.552324][ T4357] loop: Write error at byte offset 9223372036854776319, length 512. [ 91.604776][ C1] I/O error, dev loop0, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 91.614414][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 91.672956][ C1] I/O error, dev loop0, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.682391][ T4532] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 91.710502][ T4357] loop: Write error at byte offset 9223372036854819327, length 512. [ 91.722570][ T4357] loop: Write error at byte offset 9223372036854825471, length 512. [ 91.737695][ C1] I/O error, dev loop0, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 91.747341][ C1] Buffer I/O error on dev loop0, logical block 85, lost async page write [ 91.779745][ T4357] loop: Write error at byte offset 9223372036854825471, length 512. [ 91.788529][ T4357] loop: Write error at byte offset 9223372036854825471, length 512. [ 91.798895][ T4357] loop: Write error at byte offset 9223372036854825471, length 512. [ 91.813957][ T4357] loop: Write error at byte offset 9223372036854825471, length 512. [ 91.871279][ T4357] loop: Write error at byte offset 9223372036854825471, length 512. [ 91.888960][ T4357] loop: Write error at byte offset 9223372036854825471, length 512. [ 91.928878][ C1] I/O error, dev loop0, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 91.938509][ C1] Buffer I/O error on dev loop0, logical block 97, lost async page write [ 91.947039][ C1] Buffer I/O error on dev loop0, logical block 98, lost async page write [ 91.955568][ C1] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 91.964105][ C1] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 91.972698][ C1] Buffer I/O error on dev loop0, logical block 101, lost async page write [ 91.981319][ C1] Buffer I/O error on dev loop0, logical block 102, lost async page write [ 91.989912][ C1] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 92.137279][ T4560] loop4: detected capacity change from 0 to 512 [ 92.207923][ T4560] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.79: casefold flag without casefold feature [ 92.316270][ T4560] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.79: couldn't read orphan inode 15 (err -117) [ 92.348735][ T4560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.434569][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.529865][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 92.636336][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 92.657698][ T14] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 92.676622][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.699826][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.723146][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.742756][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.770557][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.838748][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.093989][ T14] usb 3-1: GET_CAPABILITIES returned 0 [ 93.100718][ T14] usbtmc 3-1:16.0: can't read capabilities [ 93.320624][ T4256] usb 3-1: USB disconnect, device number 2 [ 93.361487][ T4585] random: crng reseeded on system resumption [ 93.389271][ T4584] process 'syz.4.91' launched './file1' with NULL argv: empty string added [ 93.600344][ T4590] loop4: detected capacity change from 0 to 512 [ 93.651564][ T4590] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.92: casefold flag without casefold feature [ 93.678774][ T4590] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.92: couldn't read orphan inode 15 (err -117) [ 93.712524][ T4590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.921173][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 94.080596][ T4596] Zero length message leads to an empty skb [ 94.384772][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.400354][ T4600] loop2: detected capacity change from 0 to 4096 [ 94.426048][ T4600] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 94.440670][ T4604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.98'. [ 94.464714][ T4368] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.574640][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 94.582092][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.602419][ T14] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 94.632322][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.646877][ T14] usb 5-1: Product: syz [ 94.651556][ T14] usb 5-1: Manufacturer: syz [ 94.662010][ T4368] usb 4-1: Using ep0 maxpacket: 8 [ 94.670544][ T14] usb 5-1: SerialNumber: syz [ 94.681197][ T4368] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.691914][ T4368] usb 4-1: config 179 has no interface number 0 [ 94.703609][ T14] usb 5-1: config 0 descriptor?? [ 94.710878][ T4368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 94.729379][ T4368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 94.744976][ T4368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.764592][ T4368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 94.787813][ T4368] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.806442][ T4368] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.867690][ T4368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.902509][ T4598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.131589][ T14] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 95.220886][ T4325] usb 4-1: USB disconnect, device number 3 [ 95.220888][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.541994][ T14] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 95.574168][ T14] usb 5-1: USB disconnect, device number 3 [ 95.593010][ C0] I/O error, dev loop0, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.602471][ T11] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 95.760914][ T4536] Set syz1 is full, maxelem 65536 reached [ 95.764571][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.992439][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 96.000947][ T127] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 96.034780][ T127] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.076118][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.096648][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.117202][ T127] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.131540][ T127] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.140893][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.401987][ T127] usb 1-1: GET_CAPABILITIES returned 0 [ 96.410933][ T127] usbtmc 1-1:16.0: can't read capabilities [ 96.496370][ T4642] loop4: detected capacity change from 0 to 512 [ 96.537983][ T4642] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.115: casefold flag without casefold feature [ 96.569321][ T4642] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.115: couldn't read orphan inode 15 (err -117) [ 96.580749][ T4640] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.582914][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.615873][ T127] usb 1-1: USB disconnect, device number 2 [ 96.679242][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 96.753190][ T4640] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.851059][ T4640] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.864235][ T4648] netlink: 52 bytes leftover after parsing attributes in process `syz.4.117'. [ 96.882917][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.892396][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.018615][ T4640] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.042953][ T4650] loop4: detected capacity change from 0 to 256 [ 97.089850][ T4652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.156568][ T4640] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.236451][ T4640] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.299211][ T4640] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.317355][ T4640] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.526767][ T4662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.124'. [ 97.549333][ T4278] Bluetooth: Wrong link type (-22) [ 97.553333][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.671610][ T4668] loop1: detected capacity change from 0 to 512 [ 97.753932][ T4668] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.126: casefold flag without casefold feature [ 97.794775][ T4668] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.126: couldn't read orphan inode 15 (err -117) [ 97.810992][ T4668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.999146][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 98.129577][ T4685] random: crng reseeded on system resumption [ 98.222083][ T4692] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.242165][ T4683] loop3: detected capacity change from 0 to 1024 [ 98.277634][ T4683] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.316334][ T4683] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.350785][ T4683] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.132: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.443114][ T4683] EXT4-fs (loop3): 1 orphan inode deleted [ 98.478099][ T4683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.673446][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 98.724656][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.872535][ T4708] loop4: detected capacity change from 0 to 512 [ 98.936674][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 98.946592][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 98.959122][ T4706] loop3: detected capacity change from 0 to 4096 [ 98.969643][ T4708] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.143: casefold flag without casefold feature [ 98.986138][ T4708] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.143: couldn't read orphan inode 15 (err -117) [ 99.004693][ T4708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.023702][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.097907][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.143939][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.181315][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.213283][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 99.225023][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.234693][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.476538][ T14] usb 2-1: GET_CAPABILITIES returned 0 [ 99.482104][ T14] usbtmc 2-1:16.0: can't read capabilities [ 99.694686][ T14] usb 2-1: USB disconnect, device number 4 [ 100.215494][ T4741] loop2: detected capacity change from 0 to 512 [ 100.272083][ T4741] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.157: casefold flag without casefold feature [ 100.284067][ T4745] veth0_macvtap: mtu less than device minimum [ 100.317964][ T4741] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.157: couldn't read orphan inode 15 (err -117) [ 100.395698][ T4741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.500380][ T4741] syz.2.157 (pid 4741) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 100.722691][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 101.464462][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.635373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.643950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.774529][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 101.803353][ T14] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 101.884924][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.946144][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.980001][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.024449][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.077556][ T4806] loop1: detected capacity change from 0 to 1024 [ 102.084086][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.121002][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.327557][ T4806] hfsplus: found bad thread record in catalog [ 102.334094][ T4806] hfsplus: catalog searching failed [ 102.361139][ T14] usb 3-1: GET_CAPABILITIES returned 0 [ 102.366830][ T14] usbtmc 3-1:16.0: can't read capabilities [ 102.569199][ T4256] usb 3-1: USB disconnect, device number 3 [ 102.595375][ T11] hfsplus: found bad thread record in catalog [ 102.623030][ T11] hfsplus: found bad thread record in catalog [ 103.318978][ T4832] loop4: detected capacity change from 0 to 64 [ 103.455527][ T27] audit: type=1800 audit(1758000006.684:3): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.187" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 103.847916][ T4846] netlink: 524 bytes leftover after parsing attributes in process `syz.1.194'. [ 103.873690][ T4844] loop3: detected capacity change from 0 to 2048 [ 104.039064][ T4854] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.163915][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.189073][ T4844] NILFS (loop3): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 104.229421][ T4858] device bridge_slave_0 left promiscuous mode [ 104.274647][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.276405][ T4844] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 104.354004][ T4858] device bridge_slave_1 left promiscuous mode [ 104.358498][ T4844] Remounting filesystem read-only [ 104.384653][ T4844] NILFS (loop3): error -5 truncating bmap (ino=16) [ 104.391492][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.455078][ T4858] bond0: (slave bond_slave_0): Releasing backup interface [ 104.520675][ T4858] bond0: (slave bond_slave_1): Releasing backup interface [ 104.528800][ T4265] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 104.657523][ T4858] team0: Port device team_slave_0 removed [ 104.696797][ T4858] team0: Port device team_slave_1 removed [ 104.717150][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.724844][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.734737][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.744030][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.758453][ T4325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.803460][ T4860] team0: Mode changed to "loadbalance" [ 104.813213][ T4863] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 104.852444][ T4863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.862310][ T4863] team0: Port device bond0 added [ 104.910003][ T4871] sch_fq: defrate 7 ignored. [ 104.944534][ T4325] usb 3-1: Using ep0 maxpacket: 8 [ 104.951876][ T4325] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 104.997107][ T4325] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.037497][ T4325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.094875][ T4325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.138078][ T4325] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.181891][ T4325] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.217947][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.244210][ T4886] loop1: detected capacity change from 0 to 512 [ 105.288990][ T4886] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.205: casefold flag without casefold feature [ 105.354045][ T4886] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.205: couldn't read orphan inode 15 (err -117) [ 105.419599][ T4886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.446237][ T4325] usb 3-1: GET_CAPABILITIES returned 0 [ 105.462050][ T4325] usbtmc 3-1:16.0: can't read capabilities [ 105.603179][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 105.660060][ T4339] usb 3-1: USB disconnect, device number 4 [ 105.714478][ T4369] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.750500][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 105.837179][ T4904] loop1: detected capacity change from 0 to 2048 [ 105.875710][ T4904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.916850][ T4369] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 105.933374][ T4369] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 105.952702][ T4369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.004968][ T4894] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.020408][ T4369] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 106.099252][ T4906] loop1: detected capacity change from 0 to 2364 [ 106.147254][ T4378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.336024][ T4912] device sit1 entered promiscuous mode [ 106.439175][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 106.635920][ T4339] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.845330][ T4339] usb 5-1: Using ep0 maxpacket: 16 [ 106.857918][ T4339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.863514][ T4930] netlink: 'syz.2.224': attribute type 2 has an invalid length. [ 106.879060][ T4930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 106.885898][ T4339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.905614][ T4339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.920890][ T4339] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.932219][ T4339] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.963790][ T4339] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.985381][ T4339] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.002990][ T4339] usb 5-1: Manufacturer: syz [ 107.015844][ T4339] usb 5-1: config 0 descriptor?? [ 107.043727][ T4932] loop2: detected capacity change from 0 to 256 [ 107.099452][ T4278] Bluetooth: hci3: failed to read key size for handle 201 [ 107.184916][ T4278] Bluetooth: hci4: command 0x0405 tx timeout [ 107.321512][ T4270] Bluetooth: hci3: unexpected subevent 0x1d length: 9 < 14 [ 107.444720][ T4939] program syz.0.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.474456][ T4339] rc_core: IR keymap rc-hauppauge not found [ 107.481804][ T4339] Registered IR keymap rc-empty [ 107.488102][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.524507][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.566117][ T4339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 107.580752][ T4339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 107.600524][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.634654][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.664705][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.704790][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.714641][ T4325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.734524][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.783233][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.807235][ T27] audit: type=1326 audit(1758000011.034:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c97b8eba9 code=0x7ffc0000 [ 107.830521][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.838122][ T27] audit: type=1326 audit(1758000011.034:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3c97b8eba9 code=0x7ffc0000 [ 107.869138][ T27] audit: type=1326 audit(1758000011.034:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c97b8eba9 code=0x7ffc0000 [ 107.894619][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.923586][ T4325] usb 3-1: Using ep0 maxpacket: 8 [ 107.938319][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.939170][ T4325] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 107.960858][ T4325] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.971647][ T4325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.984600][ T4339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.989485][ T4325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.009221][ T4325] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.023497][ T4325] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.026240][ T4339] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 108.041306][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.057115][ T4339] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 108.080275][ T4339] usb 5-1: USB disconnect, device number 4 [ 108.273334][ T4325] usb 3-1: GET_CAPABILITIES returned 0 [ 108.283498][ T4325] usbtmc 3-1:16.0: can't read capabilities [ 108.490636][ T4325] usb 3-1: USB disconnect, device number 5 [ 108.536307][ T4256] usb 4-1: USB disconnect, device number 4 [ 108.538905][ T4960] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 108.899659][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 109.123678][ T4985] tmpfs: Bad value for 'mpol' [ 109.209851][ T4339] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.275885][ T4991] loop4: detected capacity change from 0 to 64 [ 109.320564][ T4992] loop1: detected capacity change from 0 to 256 [ 109.403703][ T4992] FAT-fs (loop1): Directory bread(block 64) failed [ 109.433968][ T4992] FAT-fs (loop1): Directory bread(block 65) failed [ 109.450493][ T4339] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 109.463582][ T4992] FAT-fs (loop1): Directory bread(block 66) failed [ 109.477631][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.510623][ T4992] FAT-fs (loop1): Directory bread(block 67) failed [ 109.518468][ T4339] usb 4-1: config 0 descriptor?? [ 109.536050][ T4992] FAT-fs (loop1): Directory bread(block 68) failed [ 109.553295][ T4992] FAT-fs (loop1): Directory bread(block 69) failed [ 109.564617][ T4339] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 109.604689][ T4992] FAT-fs (loop1): Directory bread(block 70) failed [ 109.611326][ T4992] FAT-fs (loop1): Directory bread(block 71) failed [ 109.619436][ T4992] FAT-fs (loop1): Directory bread(block 72) failed [ 109.629548][ T4992] FAT-fs (loop1): Directory bread(block 73) failed [ 109.834533][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.869349][ T4256] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.913255][ T4256] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.049898][ T5009] loop1: detected capacity change from 0 to 512 [ 110.067048][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.090642][ T5009] EXT4-fs: Ignoring removed i_version option [ 110.108036][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.133058][ T5009] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.147848][ T7] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.157558][ T5009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.168042][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.177474][ T7] usb 5-1: SerialNumber: syz [ 110.203059][ T5009] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.228072][ T5009] EXT4-fs (loop1): 1 truncate cleaned up [ 110.233949][ T5009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.325550][ T5007] fido_id[5007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.381367][ T4339] gspca_sunplus: reg_w_riv err -71 [ 110.387099][ T4339] sunplus: probe of 4-1:0.0 failed with error -71 [ 110.402959][ T4995] delete_channel: no stack [ 110.413913][ T7] usb 5-1: 0:2 : does not exist [ 110.422579][ T4339] usb 4-1: USB disconnect, device number 5 [ 110.505660][ T7] usb 5-1: USB disconnect, device number 5 [ 110.526223][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 110.816249][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.924678][ T4256] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.040201][ T5023] loop2: detected capacity change from 0 to 7 [ 111.050629][ T5023] Dev loop2: unable to read RDB block 7 [ 111.061915][ T5023] loop2: AHDI p1 p2 p3 [ 111.066512][ T5023] loop2: partition table partially beyond EOD, truncated [ 111.074015][ T5023] loop2: p1 start 1601398130 is beyond EOD, truncated [ 111.086597][ T5023] loop2: p2 start 1702059890 is beyond EOD, truncated [ 111.134436][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 111.141713][ T4256] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 111.159838][ T4256] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.182494][ T4256] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.213594][ T4256] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.233147][ T4256] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.269991][ T4256] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.294174][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.385626][ T5032] loop4: detected capacity change from 0 to 256 [ 111.472615][ T5032] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 111.521739][ T4256] usb 2-1: GET_CAPABILITIES returned 0 [ 111.527922][ T4256] usbtmc 2-1:16.0: can't read capabilities [ 111.732178][ T4256] usb 2-1: USB disconnect, device number 5 [ 111.744742][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.744837][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 112.012274][ T4270] Bluetooth: Wrong link type (-22) [ 112.412164][ T5058] overlayfs: failed to resolve './file0': -2 [ 112.909789][ T5069] loop1: detected capacity change from 0 to 8192 [ 113.123587][ T5084] loop3: detected capacity change from 0 to 512 [ 113.232953][ T5084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.270699][ T5084] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.445312][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 113.644687][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.670359][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.753403][ T5108] loop4: detected capacity change from 0 to 256 [ 113.767699][ T5108] exfat: Unknown parameter 'iochar;¡WÊðŒóÙset' [ 113.841792][ T5096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.845790][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 113.859996][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.874453][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 113.880854][ T7] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.881703][ T26] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 113.890327][ T5096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.920419][ T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.934336][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.941834][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.955604][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.976204][ T26] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.979079][ T7] usb 3-1: Product: syz [ 113.990551][ T26] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.000109][ T7] usb 3-1: Manufacturer: syz [ 114.007785][ T7] usb 3-1: SerialNumber: syz [ 114.015880][ T7] usb 3-1: config 0 descriptor?? [ 114.021098][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.052451][ T5096] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 114.060156][ T5096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.068512][ T5096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.091591][ T5096] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 114.099414][ T5096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.105697][ T5096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.113065][ T5096] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 114.120821][ T5096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.127357][ T5096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.139114][ T5096] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 114.150610][ T5096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.156994][ T5096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.168357][ T5096] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 114.251560][ T26] usb 1-1: GET_CAPABILITIES returned 0 [ 114.258911][ T26] usbtmc 1-1:16.0: can't read capabilities [ 114.433153][ T7] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 114.472691][ T4339] usb 1-1: USB disconnect, device number 3 [ 114.479605][ T5124] loop3: detected capacity change from 0 to 47 [ 114.836141][ T7] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 114.896924][ T7] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 114.925791][ T5132] capability: warning: `syz.1.306' uses 32-bit capabilities (legacy support in use) [ 114.975671][ T7] gs_usb: probe of 3-1:0.0 failed with error -32 [ 115.171913][ T5138] loop1: detected capacity change from 0 to 128 [ 115.189992][ T5138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.206934][ T5138] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.234734][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.444521][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 115.457478][ T26] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 115.469394][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 115.533962][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.546708][ T26] usb 4-1: Product: syz [ 115.555447][ T26] usb 4-1: Manufacturer: syz [ 115.565953][ T26] usb 4-1: SerialNumber: syz [ 115.580587][ T26] usb 4-1: config 0 descriptor?? [ 115.599341][ T26] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 115.621701][ T26] usb 4-1: Detected FT232H [ 115.744613][ T4256] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.752315][ T4270] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.800011][ T26] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 115.944552][ T4256] usb 1-1: Using ep0 maxpacket: 16 [ 115.958744][ T4256] usb 1-1: config 0 has no interfaces? [ 115.967623][ T4256] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 115.977692][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.986218][ T4256] usb 1-1: Product: syz [ 115.991166][ T4256] usb 1-1: Manufacturer: syz [ 115.996657][ T4256] usb 1-1: SerialNumber: syz [ 116.007411][ T4256] usb 1-1: config 0 descriptor?? [ 116.065195][ T4270] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.154707][ T4270] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.154717][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.220384][ T26] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 116.227189][ T4270] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.261789][ T5144] netlink: 'syz.0.310': attribute type 13 has an invalid length. [ 116.282935][ T26] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.294023][ T5144] netlink: 'syz.0.310': attribute type 17 has an invalid length. [ 116.341233][ T26] usb 4-1: USB disconnect, device number 6 [ 116.362686][ T26] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.382973][ T7] usb 3-1: USB disconnect, device number 6 [ 116.402757][ T26] ftdi_sio 4-1:0.0: device disconnected [ 116.460225][ T5144] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 116.511318][ T4256] usb 1-1: USB disconnect, device number 4 [ 116.564123][ T5152] loop2: detected capacity change from 0 to 1024 [ 116.716824][ T5152] hfsplus: invalid extended attribute record [ 116.823977][ T56] hfsplus: b-tree write err: -5, ino 4 [ 116.968939][ T5158] loop3: detected capacity change from 0 to 64 [ 117.301847][ T5165] loop3: detected capacity change from 0 to 512 [ 117.321122][ T5165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.419493][ T5165] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.317: inode #255: comm syz.3.317: iget: illegal inode # [ 117.437766][ T5165] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.317: error while reading EA inode 255 err=-117 [ 117.453758][ T5165] EXT4-fs (loop3): 1 orphan inode deleted [ 117.459705][ T5165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.541453][ T5165] EXT4-fs (loop3): shut down requested (1) [ 117.552887][ T5126] Set syz1 is full, maxelem 65536 reached [ 117.638751][ T4314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.663810][ T5170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.676330][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 117.825587][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 117.846306][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 117.855502][ T4314] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 117.885590][ T5175] loop3: detected capacity change from 0 to 4096 [ 117.892566][ T4314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.933842][ T4314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.950877][ T4314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.961559][ T4314] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.978195][ T4314] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.990019][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.154494][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 118.199280][ T4369] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.214193][ T4314] usb 3-1: usb_control_msg returned -71 [ 118.221357][ T4314] usbtmc 3-1:16.0: can't read capabilities [ 118.227231][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 118.227460][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 118.274097][ T4314] usb 3-1: USB disconnect, device number 7 [ 118.304928][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 118.427194][ T4369] usb 2-1: Using ep0 maxpacket: 32 [ 118.440586][ T4369] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 118.451490][ T4369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.464951][ T4369] usb 2-1: config 0 descriptor?? [ 118.473109][ T4369] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 118.834548][ T4339] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 118.866796][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.033300][ T4339] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 119.046143][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.054280][ T4339] usb 5-1: Product: syz [ 119.058956][ T4339] usb 5-1: Manufacturer: syz [ 119.063847][ T4339] usb 5-1: SerialNumber: syz [ 119.068785][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 119.076173][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.089630][ T4339] usb 5-1: config 0 descriptor?? [ 119.095427][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.107463][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.119181][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.129448][ T7] usb 4-1: config 0 descriptor?? [ 119.138635][ T7] hub 4-1:0.0: USB hub found [ 119.259386][ T5195] loop2: detected capacity change from 0 to 512 [ 119.274894][ T5195] EXT4-fs: Ignoring removed nobh option [ 119.289473][ T5195] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.331: iget: bad i_size value: 38620345925642 [ 119.316014][ T5195] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.331: couldn't read orphan inode 15 (err -117) [ 119.330303][ T5195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.344199][ T7] hub 4-1:0.0: 1 port detected [ 119.349334][ T4270] Bluetooth: hci5: command 0x1003 tx timeout [ 119.354734][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.410448][ T5195] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.331: bg 0: block 5: invalid block bitmap [ 119.449733][ T5195] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131072 with max blocks 16 with error 28 [ 119.470410][ T5195] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.470410][ T5195] [ 119.503108][ T5195] EXT4-fs (loop2): Total free blocks count 0 [ 119.510595][ T5195] EXT4-fs (loop2): Free/Dirty block details [ 119.517518][ T4339] airspy 5-1:0.0: Board ID: 00 [ 119.522585][ T4339] airspy 5-1:0.0: Firmware version: [ 119.528217][ T5195] EXT4-fs (loop2): free_blocks=0 [ 119.536997][ T5195] EXT4-fs (loop2): dirty_blocks=16 [ 119.542466][ T5195] EXT4-fs (loop2): Block reservation details [ 119.548872][ T5195] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 119.693529][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 119.973190][ T7] hub 4-1:0.0: activate --> -90 [ 120.288882][ T5219] Bluetooth: MGMT ver 1.22 [ 120.295286][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.378704][ T7] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 120.378873][ T4314] usb 4-1: USB disconnect, device number 7 [ 120.396308][ T7] usb 4-1-port1: connect-debounce failed [ 120.464755][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.527857][ T4339] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 120.541722][ T4339] airspy 5-1:0.0: Registered as swradio24 [ 120.547608][ T4339] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 120.566208][ T4339] usb 5-1: USB disconnect, device number 6 [ 120.654539][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 120.665438][ T26] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 120.673699][ T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.689096][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.699798][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.710168][ T26] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.723271][ T26] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.733248][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.959986][ T26] usb 1-1: usb_control_msg returned -71 [ 120.965882][ T5226] loop3: detected capacity change from 0 to 8 [ 120.975074][ T26] usbtmc 1-1:16.0: can't read capabilities [ 120.991585][ T26] usb 1-1: USB disconnect, device number 5 [ 121.105369][ T4369] gspca_vc032x: reg_w err -71 [ 121.110123][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.134440][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.151395][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.171695][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.201973][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.231249][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.251820][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.261971][ T5231] loop4: detected capacity change from 0 to 256 [ 121.269498][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.285874][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.291300][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.302899][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.309572][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.324526][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.330214][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.344070][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.361406][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.361877][ T5231] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 121.371535][ T4369] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.386573][ T5233] loop3: detected capacity change from 0 to 1024 [ 121.402243][ T4369] gspca_vc032x: Unknown sensor... [ 121.436064][ T5235] team0: No ports can be present during mode change [ 121.438409][ T4369] vc032x: probe of 2-1:0.0 failed with error -22 [ 121.457255][ T5231] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 121.493067][ T4369] usb 2-1: USB disconnect, device number 6 [ 121.667227][ T5238] loop3: detected capacity change from 0 to 2048 [ 121.716580][ T5238] EXT4-fs: Ignoring removed nobh option [ 121.813075][ T5238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.828007][ T5238] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.932821][ T5238] fs-verity: sha256 using implementation "sha256-avx2" [ 122.106509][ T5253] block device autoloading is deprecated and will be removed. [ 122.144037][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 122.302765][ T4279] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 122.613055][ T5274] IPv4: Oversized IP packet from 127.202.26.0 [ 122.816828][ T5280] netlink: 192 bytes leftover after parsing attributes in process `syz.3.368'. [ 122.827757][ T4256] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.014740][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 123.043340][ T4256] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 123.076753][ T4256] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.099966][ T4256] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.120255][ T4256] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.140628][ T4256] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.154013][ T4256] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.163756][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.392053][ T4369] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.423206][ T4256] usb 2-1: usb_control_msg returned -71 [ 123.431336][ T4256] usbtmc 2-1:16.0: can't read capabilities [ 123.457831][ T4256] usb 2-1: USB disconnect, device number 7 [ 123.526659][ T5305] binder: 5304:5305 ioctl 4018620d 0 returned -22 [ 123.607041][ T4369] usb 3-1: config 0 has no interfaces? [ 123.617373][ T4369] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 123.639071][ T4369] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 123.651000][ T4369] usb 3-1: Manufacturer: syz [ 123.665276][ T4369] usb 3-1: config 0 descriptor?? [ 123.671063][ T5309] loop3: detected capacity change from 0 to 128 [ 123.730817][ T5309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.762080][ T5309] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.879371][ T4369] usb 3-1: USB disconnect, device number 8 [ 123.962856][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 124.177632][ T5322] loop3: detected capacity change from 0 to 64 [ 124.315008][ T4256] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 124.506967][ T4256] usb 5-1: not running at top speed; connect to a high speed hub [ 124.572734][ T4256] usb 5-1: config 1 interface 0 has no altsetting 0 [ 124.609971][ T5330] loop1: detected capacity change from 0 to 256 [ 124.629932][ T5326] loop3: detected capacity change from 0 to 32768 [ 124.630548][ T4256] usb 5-1: language id specifier not provided by device, defaulting to English [ 124.644876][ T5330] exfat: Deprecated parameter 'namecase' [ 124.662494][ T5326] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.386 (5326) [ 124.705643][ T5330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 124.747955][ T5326] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.748529][ T4256] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 124.758666][ T5326] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 124.776497][ T5326] BTRFS info (device loop3): enabling auto defrag [ 124.782957][ T5326] BTRFS info (device loop3): disabling tree log [ 124.789539][ T5326] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.800221][ T5326] BTRFS info (device loop3): trying to use backup root at mount time [ 124.808713][ T5326] BTRFS info (device loop3): max_inline at 4096 [ 124.815042][ T5326] BTRFS info (device loop3): force clearing of disk cache [ 124.822243][ T5326] BTRFS info (device loop3): enabling ssd optimizations [ 124.829273][ T5326] BTRFS info (device loop3): using spread ssd allocation scheme [ 124.837025][ T5326] BTRFS info (device loop3): using free space tree [ 124.880335][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.949611][ T4256] usb 5-1: SerialNumber: ⺫뵒橤㽣乥妕æ¤è  á­³î½½ï ¢ãŸƒï»»î»ªá™é”„㾋㢧梨æ‚䋡घí½âªŠçµŠïŠ¬âˆ¥ë§ æ ˜ç®‹á‹¨çœ·äµã¶€ä®Œè†©á¾êªºï…¶à¯¼îœ·î´ë°¾î°£éœè¦¡ì€´æ·½à±­è’¢ë‹¢ç†°ç†¨ëŒ®ä°¿ï¼´ïµŸâ‰¬èš¢é‘ˆæ€‚䒙疴꾨꺃훛㼜꽆嵨ኟ鹚î•ë› [ 125.108988][ T5326] BTRFS info (device loop3): rebuilding free space tree [ 125.211469][ T27] audit: type=1800 audit(1758000028.434:7): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.386" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 125.221871][ T4256] usblp0: Disabling reads from problematic bidirectional printer [ 125.236222][ T5360] loop1: detected capacity change from 0 to 64 [ 125.303385][ T4256] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 248 proto 3 vid 0x03F0 pid 0x0004 [ 125.359750][ T4265] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.378476][ T4256] usb 5-1: USB disconnect, device number 7 [ 125.419865][ T4256] usblp0: removed [ 126.054012][ T5382] loop1: detected capacity change from 0 to 128 [ 126.174464][ T5227] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.199650][ T5388] loop2: detected capacity change from 0 to 64 [ 126.832178][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 126.832976][ T5408] loop2: detected capacity change from 0 to 8 [ 126.859171][ T5407] device erspan0 entered promiscuous mode [ 126.880313][ T5407] device macvtap1 entered promiscuous mode [ 126.920573][ T5409] device erspan0 left promiscuous mode [ 127.819536][ T5447] netlink: 68 bytes leftover after parsing attributes in process `syz.0.430'. [ 127.829225][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.964539][ T5376] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 128.034628][ T5372] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.048914][ T4279] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 128.054960][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 128.063437][ T7] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 128.078019][ T7] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 128.123678][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.135399][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 128.156313][ T5376] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 128.170206][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.177371][ T5376] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.187627][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.200172][ T5376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.205894][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 128.215760][ T5372] usb 2-1: Using ep0 maxpacket: 8 [ 128.228183][ T7] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 128.233478][ T5376] usb 3-1: config 0 descriptor?? [ 128.247366][ T5441] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 128.252778][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.255635][ T5372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.274003][ T5372] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 128.283794][ T7] usb 4-1: config 0 descriptor?? [ 128.284172][ T5376] hub 3-1:0.0: bad descriptor, ignoring hub [ 128.296406][ T5372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.305191][ T5376] hub: probe of 3-1:0.0 failed with error -5 [ 128.314209][ T5372] usb 2-1: config 0 descriptor?? [ 128.321238][ T5376] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 128.422964][ T5462] loop4: detected capacity change from 0 to 256 [ 128.449533][ T5462] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.460857][ T5462] FAT-fs (loop4): Filesystem has been set read-only [ 128.468345][ T5462] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.480499][ T5462] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.491302][ T27] audit: type=1800 audit(1758000031.714:8): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.436" name="file1" dev="loop4" ino=1048619 res=0 errno=0 [ 128.532062][ T7] usb 4-1: USB disconnect, device number 8 [ 128.590696][ T5462] syz.4.436 (5462) used greatest stack depth: 20704 bytes left [ 128.750219][ T5372] kye 0003:0458:501A.0002: unknown main item tag 0x3 [ 128.773554][ T5372] kye 0003:0458:501A.0002: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 128.785444][ T5372] kye 0003:0458:501A.0002: tablet-enabling feature report not found [ 128.793487][ T5372] kye 0003:0458:501A.0002: tablet enabling failed [ 128.862044][ T5473] qfq: no options [ 128.957849][ T127] usb 2-1: USB disconnect, device number 8 [ 129.035259][ T5474] fido_id[5474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 129.127921][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.314441][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 129.321299][ T7] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.330497][ T7] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.339230][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.349693][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.358761][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.368565][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.378319][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 129.391337][ T7] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.400551][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.413019][ T7] usb 4-1: config 0 descriptor?? [ 129.564437][ T4339] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.761934][ T4339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.772458][ T4339] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 129.781718][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.798355][ T4339] usb 1-1: config 0 descriptor?? [ 130.186685][ T127] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.219837][ T4339] usbhid 1-1:0.0: can't add hid device: -71 [ 130.227733][ T4339] usbhid: probe of 1-1:0.0 failed with error -71 [ 130.249584][ T4339] usb 1-1: USB disconnect, device number 6 [ 130.384893][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 130.394301][ T127] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 130.403802][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.424172][ T127] usb 2-1: Product: syz [ 130.429079][ T127] usb 2-1: Manufacturer: syz [ 130.433730][ T127] usb 2-1: SerialNumber: syz [ 130.449429][ T127] usb 2-1: config 0 descriptor?? [ 130.461266][ T127] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 130.844813][ T5376] usb 3-1: USB disconnect, device number 9 [ 131.031941][ T4339] usb 4-1: USB disconnect, device number 9 [ 131.122191][ T5522] loop3: detected capacity change from 0 to 64 [ 131.362542][ T5526] loop3: detected capacity change from 0 to 1024 [ 131.529037][ T9] hfsplus: b-tree write err: -5, ino 4 [ 131.678512][ T5534] loop4: detected capacity change from 0 to 256 [ 131.693126][ T5532] loop3: detected capacity change from 0 to 2048 [ 131.803564][ T5535] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.804730][ T5537] loop2: detected capacity change from 0 to 1024 [ 131.854042][ T27] audit: type=1800 audit(1758000035.074:9): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.467" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 131.874695][ T127] gspca_topro: Sensor cx0342 [ 132.089983][ T4339] usb 2-1: USB disconnect, device number 9 [ 132.298902][ T27] audit: type=1107 audit(1758000035.524:10): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 132.710152][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.718726][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.772601][ T5563] loop4: detected capacity change from 0 to 256 [ 132.884865][ T5563] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.903516][ T5563] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 132.957866][ T5563] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 133.164197][ T5575] loop3: detected capacity change from 0 to 1024 [ 133.258128][ T5577] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 133.487914][ T5584] loop2: detected capacity change from 0 to 16 [ 133.534971][ T5584] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.754089][ T5590] loop1: detected capacity change from 0 to 1024 [ 134.199974][ T5602] loop4: detected capacity change from 0 to 1024 [ 134.314129][ T5602] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #3: block 1: comm syz.4.496: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.422522][ T5602] Quota error (device loop4): write_blk: dquota write failed [ 134.445169][ T5602] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 134.456692][ T5602] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.496: Failed to acquire dquot type 0 [ 134.489608][ T5602] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.496: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.490267][ T5613] loop3: detected capacity change from 0 to 1024 [ 134.521506][ T5602] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.496: Invalid inode bitmap blk 0 in block_group 0 [ 134.548102][ T46] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.572754][ T5613] EXT4-fs: Ignoring removed nobh option [ 134.574471][ T5602] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 134.578662][ T5613] EXT4-fs: Ignoring removed bh option [ 134.603269][ T46] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 134.626909][ T5602] EXT4-fs (loop4): 1 orphan inode deleted [ 134.635806][ T46] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:3: Failed to release dquot type 0 [ 134.643240][ T5602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.686932][ T5613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.742120][ T5602] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm syz.4.496: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.765879][ T5613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.921151][ T5602] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 134.930753][ T5602] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 980643439 [ 134.948574][ T5602] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.496: Failed to acquire dquot type 0 [ 135.013217][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 135.096255][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 135.112565][ T46] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.146474][ T46] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 135.164588][ T46] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:3: Failed to release dquot type 0 [ 135.284495][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.317210][ T5634] loop4: detected capacity change from 0 to 64 [ 135.376453][ T5638] loop2: detected capacity change from 0 to 2048 [ 135.406543][ T5638] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.462604][ T5638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.484458][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 135.494288][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.533255][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.546213][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.623786][ T5638] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 9: comm syz.2.511: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 135.674582][ T5643] EXT4-fs warning (device loop2): ext4_resize_fs:2028: can't read last block, resize aborted [ 135.684247][ T7] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 135.711326][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.735428][ T7] usb 2-1: config 0 descriptor?? [ 135.748982][ T4279] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 135.753818][ T5638] EXT4-fs (loop2): Remounting filesystem read-only [ 135.930975][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 136.169920][ T7] hid-generic 0003:0458:5005.0003: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 136.373308][ T4369] usb 2-1: USB disconnect, device number 10 [ 136.574559][ T127] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.674767][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.734461][ T127] usb 5-1: device descriptor read/64, error -71 [ 136.752461][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 136.763036][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 136.864628][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 136.874131][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 136.893862][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.912248][ T7] usb 1-1: Product: syz [ 136.922391][ T7] usb 1-1: Manufacturer: syz [ 136.952865][ T7] usb 1-1: SerialNumber: syz [ 136.970767][ T7] usb 1-1: config 0 descriptor?? [ 136.972040][ T5687] loop2: detected capacity change from 0 to 4096 [ 136.993114][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 137.006275][ T127] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.175545][ T127] usb 5-1: device descriptor read/64, error -71 [ 137.284436][ T5372] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.304605][ T127] usb usb5-port1: attempt power cycle [ 137.466217][ T5372] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 137.482145][ T5372] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.504609][ T4369] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.505155][ T5372] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.523604][ T5372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.545469][ T5372] usb 2-1: config 0 descriptor?? [ 137.553617][ T5372] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 137.611678][ T5697] loop3: detected capacity change from 0 to 128 [ 137.642075][ T5697] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 137.651507][ T5697] FAT-fs (loop3): Filesystem has been set read-only [ 137.711046][ T4369] usb 3-1: Using ep0 maxpacket: 8 [ 137.714657][ T127] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.731557][ T4369] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 137.750262][ T4369] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 137.755364][ T127] usb 5-1: device descriptor read/8, error -71 [ 137.768721][ T4369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.782206][ T4369] usb 3-1: Product: syz [ 137.786516][ T4369] usb 3-1: Manufacturer: syz [ 137.793379][ T7] gspca_sonixj: reg_r err -71 [ 137.809854][ T7] sonixj: probe of 1-1:0.0 failed with error -71 [ 137.817586][ T4369] usb 3-1: SerialNumber: syz [ 137.831411][ T4369] usb 3-1: config 0 descriptor?? [ 137.843979][ T7] usb 1-1: USB disconnect, device number 7 [ 137.855190][ T4369] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 137.863291][ T4369] usb 3-1: setting power ON [ 137.887787][ T4369] dvb-usb: bulk message failed: -22 (2/0) [ 137.901015][ T4369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.913001][ T4369] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 137.923945][ T4369] usb 3-1: media controller created [ 137.946221][ T4369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.968301][ T4369] usb 3-1: selecting invalid altsetting 6 [ 137.974659][ T4369] usb 3-1: digital interface selection failed (-22) [ 137.982528][ T4369] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 137.993184][ T4369] usb 3-1: setting power OFF [ 138.016958][ T4369] dvb-usb: bulk message failed: -22 (2/0) [ 138.027733][ T4369] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 138.041124][ T4369] (NULL device *): no alternate interface [ 138.054233][ T5693] dvb-usb: bulk message failed: -22 (3/0) [ 138.054445][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 138.081011][ T5693] dvb-usb: bulk message failed: -22 (4/0) [ 138.115211][ T127] usb 5-1: device descriptor read/8, error -71 [ 138.117106][ T5693] cxusb: i2c read failed [ 138.143212][ T4369] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 138.201966][ T4369] usb 3-1: USB disconnect, device number 10 [ 138.236322][ T127] usb usb5-port1: unable to enumerate USB device [ 138.554638][ T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.746885][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.767092][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.793907][ T127] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 138.818875][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.845069][ T127] usb 4-1: config 0 descriptor?? [ 139.254423][ T4369] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 139.264149][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.275192][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.294839][ T127] usbhid 4-1:0.0: can't add hid device: -71 [ 139.303927][ T127] usbhid: probe of 4-1:0.0 failed with error -71 [ 139.326548][ T127] usb 4-1: USB disconnect, device number 10 [ 139.618855][ T5750] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.634876][ T5750] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 139.876721][ T5758] netlink: 352 bytes leftover after parsing attributes in process `syz.4.559'. [ 139.891570][ T5756] tipc: Started in network mode [ 139.916269][ T5756] tipc: Node identity f23421eeecc5, cluster identity 4711 [ 139.948683][ T5756] tipc: Enabled bearer , priority 0 [ 139.993842][ T5759] tipc: Disabling bearer [ 140.044124][ T5372] usb 2-1: USB disconnect, device number 11 [ 140.144762][ T5765] loop1: detected capacity change from 0 to 128 [ 140.182877][ T5765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.194775][ T5765] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.267035][ T5375] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.288505][ T127] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.301417][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 140.414226][ T5771] loop1: detected capacity change from 0 to 4096 [ 140.431369][ T5771] ntfs3: Unknown parameter 'windows_names' [ 140.454883][ T5376] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.472490][ T5375] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.494783][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 140.501337][ T5375] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.512525][ T5375] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.522489][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.536813][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.554462][ T5375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.567043][ T5375] usb 4-1: SerialNumber: syz [ 140.584177][ T127] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 140.604089][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.631655][ T127] usb 5-1: config 0 descriptor?? [ 140.645416][ T5376] usb 1-1: device descriptor read/64, error -71 [ 140.816876][ T5760] delete_channel: no stack [ 140.819457][ T5375] usb 4-1: 0:2 : does not exist [ 140.844246][ T5375] usb 4-1: USB disconnect, device number 11 [ 140.854485][ T7] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 140.914566][ T5376] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.067716][ T7] usb 2-1: config 0 has an invalid interface number: 97 but max is 0 [ 141.075630][ T5376] usb 1-1: device descriptor read/64, error -71 [ 141.076187][ T7] usb 2-1: config 0 has no interface number 0 [ 141.089541][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.093305][ T127] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 141.106882][ T7] usb 2-1: config 0 interface 97 has no altsetting 0 [ 141.140791][ T7] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 141.151882][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.168967][ T7] usb 2-1: Product: syz [ 141.173373][ T7] usb 2-1: Manufacturer: syz [ 141.179838][ T7] usb 2-1: SerialNumber: syz [ 141.194283][ T7] usb 2-1: config 0 descriptor?? [ 141.204625][ T5376] usb usb1-port1: attempt power cycle [ 141.212582][ T7] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 141.221959][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 141.235170][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 141.251876][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 141.261164][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 141.284251][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.288220][ T127] usb 5-1: USB disconnect, device number 12 [ 141.328731][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 141.414174][ T7] usb 2-1: USB disconnect, device number 12 [ 141.423955][ T5776] loop3: detected capacity change from 0 to 512 [ 141.624448][ T5376] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.676799][ T5376] usb 1-1: device descriptor read/8, error -71 [ 141.809604][ T5784] device bond_slave_0 entered promiscuous mode [ 141.817484][ T5784] device bond_slave_1 entered promiscuous mode [ 141.833852][ T5784] device vlan2 entered promiscuous mode [ 141.839640][ T5784] device bond0 entered promiscuous mode [ 141.965324][ T4369] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.984845][ T5376] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 141.985752][ T4369] usb 3-1: no configurations [ 142.017814][ T4369] usb 3-1: can't read configurations, error -22 [ 142.045698][ T5376] usb 1-1: device descriptor read/8, error -71 [ 142.133494][ T5791] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 142.152539][ T5792] loop2: detected capacity change from 0 to 1024 [ 142.184960][ T5376] usb usb1-port1: unable to enumerate USB device [ 142.220886][ T5791] team0: Port device dummy0 added [ 142.240889][ T5797] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 142.289739][ T5797] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.368187][ T5797] team0: Failed to send options change via netlink (err -105) [ 142.394629][ T5797] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.425315][ T5797] team0: Port device dummy0 removed [ 142.446993][ T5797] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.577500][ T5809] sctp: [Deprecated]: syz.1.579 (pid 5809) Use of int in max_burst socket option. [ 142.577500][ T5809] Use struct sctp_assoc_value instead [ 142.748794][ T4339] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 142.936593][ T4339] usb 4-1: config 0 has no interfaces? [ 142.942399][ T4339] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 142.968838][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.984149][ T4339] usb 4-1: config 0 descriptor?? [ 143.239281][ T127] usb 4-1: USB disconnect, device number 12 [ 143.333801][ T5821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.584'. [ 143.557857][ T5827] loop4: detected capacity change from 0 to 2048 [ 143.613727][ T5827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.190364][ T5837] loop3: detected capacity change from 0 to 4096 [ 144.284725][ T4339] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.335473][ T5845] Invalid ELF header magic: != ELF [ 144.484455][ T4339] usb 2-1: Using ep0 maxpacket: 8 [ 144.492821][ T4339] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 144.522501][ T4339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.553287][ T4339] usb 2-1: config 0 has no interfaces? [ 144.572136][ T4339] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 144.581646][ T14] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.592724][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.602388][ T4339] usb 2-1: Product: syz [ 144.616537][ T4339] usb 2-1: Manufacturer: syz [ 144.621223][ T4339] usb 2-1: SerialNumber: syz [ 144.629274][ T4339] usb 2-1: config 0 descriptor?? [ 144.734524][ T14] usb 5-1: device descriptor read/64, error -71 [ 144.934478][ T4339] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.005165][ T5376] usb 2-1: USB disconnect, device number 13 [ 145.006820][ T14] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 145.144448][ T4339] usb 3-1: Using ep0 maxpacket: 32 [ 145.151818][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.163844][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.181018][ T4339] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 145.190589][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.202537][ T14] usb 5-1: device descriptor read/64, error -71 [ 145.228061][ T4339] usb 3-1: config 0 descriptor?? [ 145.334749][ T14] usb usb5-port1: attempt power cycle [ 145.353147][ T5878] netlink: 128 bytes leftover after parsing attributes in process `syz.3.610'. [ 145.641149][ T4339] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 145.656037][ T4339] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 145.744647][ T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.795850][ T14] usb 5-1: device descriptor read/8, error -71 [ 145.839034][ T4339] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 145.904973][ T5894] loop1: detected capacity change from 0 to 128 [ 145.925826][ T5894] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.994704][ T5894] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.065922][ T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 146.106118][ T14] usb 5-1: device descriptor read/8, error -71 [ 146.224702][ T14] usb usb5-port1: unable to enumerate USB device [ 146.242398][ T4339] ft260 0003:0403:6030.0005: failed to retrieve status: -32 [ 146.457169][ T5903] loop3: detected capacity change from 0 to 2048 [ 146.472291][ T4339] usb 3-1: USB disconnect, device number 13 [ 146.501514][ T5903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.621072][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.650241][ T5908] bond0: (slave dummy0): Releasing backup interface [ 146.701621][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.702429][ T5906] fido_id[5906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 146.720062][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.759400][ T5908] device bridge_slave_0 left promiscuous mode [ 146.770592][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.808409][ T5908] device bridge_slave_1 left promiscuous mode [ 146.822808][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.861637][ T5908] bond0: (slave bond_slave_0): Releasing backup interface [ 146.902541][ T5908] bond0: (slave bond_slave_1): Releasing backup interface [ 146.962222][ T5908] team0: Failed to send options change via netlink (err -105) [ 147.023500][ T5908] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 147.051433][ T5908] team0: Port device team_slave_0 removed [ 147.074814][ T5908] team0: Failed to send options change via netlink (err -105) [ 147.082711][ T5908] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 147.102861][ T5908] team0: Port device team_slave_1 removed [ 147.110091][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.117635][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.126384][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.134000][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.157099][ T5909] team0: Failed to send options change via netlink (err -105) [ 147.167216][ T5909] team0: Mode changed to "activebackup" [ 147.178543][ T5911] device ipvlan2 entered promiscuous mode [ 147.198829][ T5911] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.219454][ T5911] bridge0: port 3(ipvlan2) entered blocking state [ 147.229285][ T5911] bridge0: port 3(ipvlan2) entered disabled state [ 147.331969][ T5921] loop1: detected capacity change from 0 to 64 [ 147.707456][ T5927] loop1: detected capacity change from 0 to 4096 [ 147.760407][ T5935] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.949729][ T5372] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 148.004463][ T5375] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 148.156153][ T5372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.179995][ T5372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.194646][ T5375] usb 3-1: Using ep0 maxpacket: 16 [ 148.211848][ T5375] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.221082][ T5372] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.242069][ T5375] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 148.261384][ T5372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.274728][ T5375] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 148.297757][ T5372] usb 5-1: config 0 descriptor?? [ 148.304649][ T5375] usb 3-1: config 13 has no interface number 0 [ 148.316988][ T5375] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 148.327851][ T5375] usb 3-1: config 13 interface 50 altsetting 167 has an invalid endpoint with address 0x0, skipping [ 148.339837][ T5375] usb 3-1: config 13 interface 50 has no altsetting 0 [ 148.366235][ T5375] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 148.384544][ T5375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.402932][ T5375] usb 3-1: Product: syz [ 148.411339][ T5375] usb 3-1: Manufacturer: syz [ 148.417997][ T5375] usb 3-1: SerialNumber: syz [ 148.425712][ T5931] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.675474][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.685568][ T5375] usb 3-1: MIDIStreaming interface descriptor not found [ 148.728695][ T5375] usb 3-1: USB disconnect, device number 14 [ 148.844452][ T7] usb 1-1: device descriptor read/64, error -71 [ 149.137634][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.212310][ T5964] could not allocate digest TFM handle akäy"7 alö¬âŸyX8˜†®Úk ‰Ä`LyàÖP]ó½÷¸’ð©?Ä“n[ãÛ9gûžÅ߸mþÙñ [ 149.314656][ T7] usb 1-1: device descriptor read/64, error -71 [ 149.349234][ T5372] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 149.373654][ T5372] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 149.406365][ T5372] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 149.418743][ T5372] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 149.429205][ T5372] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 149.436017][ T7] usb usb1-port1: attempt power cycle [ 149.452763][ T5372] usb 5-1: USB disconnect, device number 17 [ 149.595368][ T5976] loop2: detected capacity change from 0 to 1024 [ 149.703747][ T41] hfsplus: b-tree write err: -5, ino 4 [ 149.869775][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.935184][ T7] usb 1-1: device descriptor read/8, error -71 [ 149.974053][ T5986] loop4: detected capacity change from 0 to 256 [ 150.204431][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 150.265122][ T7] usb 1-1: device descriptor read/8, error -71 [ 150.288433][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 150.385906][ T7] usb usb1-port1: unable to enumerate USB device [ 150.515829][ T27] audit: type=1326 audit(1758000053.744:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 150.551383][ T6007] loop2: detected capacity change from 0 to 128 [ 150.587898][ T27] audit: type=1326 audit(1758000053.764:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 150.655801][ T6007] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.701196][ T6007] hpfs: filesystem error: improperly stopped [ 150.710873][ T6010] md: md0 stopped. [ 150.714557][ T27] audit: type=1326 audit(1758000053.764:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 150.720667][ T6007] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.741371][ T6010] md0: error: failed to get bitmap file [ 150.756073][ T6007] [ 150.759176][ T6007] hpfs: You really don't want any checks? You are crazy... [ 150.778574][ T27] audit: type=1326 audit(1758000053.764:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 150.816894][ T6007] hpfs: hpfs_map_sector(): read error [ 150.848906][ T6007] hpfs: code page support is disabled [ 150.868063][ T27] audit: type=1326 audit(1758000053.764:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 150.898197][ T6007] hpfs: hpfs_map_4sectors(): unaligned read [ 150.907840][ T6007] hpfs: hpfs_map_4sectors(): unaligned read [ 150.918872][ T6007] hpfs: filesystem error: unable to find root dir [ 150.928767][ T27] audit: type=1326 audit(1758000053.764:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 150.984556][ T27] audit: type=1326 audit(1758000053.764:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 151.063312][ T27] audit: type=1326 audit(1758000053.764:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 151.116117][ T27] audit: type=1326 audit(1758000053.764:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 151.219761][ T27] audit: type=1326 audit(1758000053.764:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e358eba9 code=0x7ffc0000 [ 152.070209][ T5376] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.254647][ T5376] usb 1-1: Using ep0 maxpacket: 16 [ 152.261434][ T5376] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 152.281353][ T5376] usb 1-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 152.302061][ T5376] usb 1-1: config 0 has no interface number 0 [ 152.323755][ T5376] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 152.348177][ T5376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.375460][ T5376] usb 1-1: Product: syz [ 152.390043][ T5376] usb 1-1: Manufacturer: syz [ 152.410356][ T5376] usb 1-1: SerialNumber: syz [ 152.439070][ T5376] usb 1-1: config 0 descriptor?? [ 152.462612][ T4279] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 152.650814][ T5376] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 152.661863][ T5376] usb 1-1: No valid video chain found. [ 152.690557][ T5376] usb 1-1: USB disconnect, device number 16 [ 152.784697][ T4368] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.957467][ T4368] usb 2-1: device descriptor read/64, error -71 [ 152.983105][ T6076] netlink: 68 bytes leftover after parsing attributes in process `syz.3.690'. [ 153.048411][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 153.164517][ T14] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 153.244510][ T4368] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 153.374551][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 153.382561][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.423290][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.434563][ T4368] usb 2-1: device descriptor read/64, error -71 [ 153.468864][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 153.492646][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.505494][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.514109][ T14] usb 5-1: SerialNumber: syz [ 153.541265][ T14] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 153.554678][ T4368] usb usb2-port1: attempt power cycle [ 153.672444][ T6095] loop3: detected capacity change from 0 to 128 [ 153.734011][ T14] usb 5-1: USB disconnect, device number 18 [ 153.883873][ T6099] netlink: 'syz.0.702': attribute type 11 has an invalid length. [ 153.893177][ T6099] netlink: 44 bytes leftover after parsing attributes in process `syz.0.702'. [ 153.984568][ T4368] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.025433][ T4368] usb 2-1: device descriptor read/8, error -71 [ 154.314591][ T4368] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.371718][ T4368] usb 2-1: device descriptor read/8, error -71 [ 154.423014][ T6107] tmpfs: Unknown parameter 'usrquota' [ 154.504950][ T4368] usb usb2-port1: unable to enumerate USB device [ 154.710652][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.720780][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.730398][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.739615][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.748210][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.756323][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.884617][ T4368] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.920848][ T6116] chnl_net:caif_netlink_parms(): no params data found [ 154.977974][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.985349][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.993863][ T6116] device bridge_slave_0 entered promiscuous mode [ 155.009446][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.020141][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.039298][ T6116] device bridge_slave_1 entered promiscuous mode [ 155.067159][ T6124] device netdevsim0 entered promiscuous mode [ 155.074122][ T6124] device batadv_slave_0 entered promiscuous mode [ 155.081076][ T4368] usb 3-1: Using ep0 maxpacket: 16 [ 155.088094][ T4368] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 155.096850][ T4368] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.107359][ T4368] usb 3-1: config 0 has no interface number 0 [ 155.125519][ T4368] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 155.138389][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.146963][ T4368] usb 3-1: Product: syz [ 155.151171][ T4368] usb 3-1: Manufacturer: syz [ 155.156278][ T4368] usb 3-1: SerialNumber: syz [ 155.163166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 155.174972][ T4368] usb 3-1: config 0 descriptor?? [ 155.191853][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.213963][ T4368] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 155.223956][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.234172][ T4368] usb 3-1: No valid video chain found. [ 155.286251][ T6116] team0: Port device team_slave_0 added [ 155.296507][ T6116] team0: Port device team_slave_1 added [ 155.336089][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.348041][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.385423][ T4368] usb 3-1: USB disconnect, device number 15 [ 155.411222][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.441403][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.450754][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.481885][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.560694][ T6116] device hsr_slave_0 entered promiscuous mode [ 155.578370][ T6116] device hsr_slave_1 entered promiscuous mode [ 155.591469][ T6116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.611433][ T6116] Cannot create hsr debugfs directory [ 155.680972][ T6129] loop4: detected capacity change from 0 to 1024 [ 155.705315][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 155.705331][ T27] audit: type=1800 audit(1758000058.934:48): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.714" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 155.742312][ T6129] syz.4.714: attempt to access beyond end of device [ 155.742312][ T6129] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 155.923089][ T6116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.930110][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 155.955968][ T6116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.982931][ T6116] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.008914][ T6116] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.135887][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 156.153724][ T7] usb 2-1: config 9 interface 0 has no altsetting 0 [ 156.170932][ T7] usb 2-1: New USB device found, idVendor=147a, idProduct=e03e, bcdDevice= 8.f4 [ 156.201385][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.223098][ T7] usb 2-1: Product: syz [ 156.234725][ T7] usb 2-1: Manufacturer: syz [ 156.243131][ T7] usb 2-1: SerialNumber: syz [ 156.377858][ T6151] kernel read not supported for file /eth0 (pid: 6151 comm: syz.4.720) [ 156.390645][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.409575][ T27] audit: type=1800 audit(1758000059.634:49): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.720" name="eth0" dev="mqueue" ino=40925 res=0 errno=0 [ 156.414228][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.438757][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.452240][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.476011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.517524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.526786][ T7] usb 2-1: USB disconnect, device number 18 [ 156.539481][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.546725][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.579907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.602476][ T6155] fuse: Unknown parameter 'ÃÊ' [ 156.617991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.640995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.663153][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.670381][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.699548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.724252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.751336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.772546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.784865][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 156.801338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.812565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.821917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.831449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.842263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.850985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.861991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.873756][ T6116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.034602][ T5375] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 157.175231][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.187881][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.201428][ T5375] usb 1-1: device descriptor read/64, error -71 [ 157.228128][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.474489][ T5375] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 157.634665][ T5375] usb 1-1: device descriptor read/64, error -71 [ 157.755368][ T5375] usb usb1-port1: attempt power cycle [ 157.964738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.085158][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.112504][ T6194] loop4: detected capacity change from 0 to 128 [ 158.126454][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.143077][ T6194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.174471][ T5375] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 158.195873][ T6194] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.225829][ T5375] usb 1-1: device descriptor read/8, error -71 [ 158.253524][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.275232][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.350703][ T6116] device veth0_vlan entered promiscuous mode [ 158.363988][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.389804][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.427285][ T6116] device veth1_vlan entered promiscuous mode [ 158.470338][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 158.494670][ T5375] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 158.559026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.564502][ T5375] usb 1-1: device descriptor read/8, error -71 [ 158.588118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.618633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.649742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.687506][ T5375] usb usb1-port1: unable to enumerate USB device [ 158.693907][ T6116] device veth0_macvtap entered promiscuous mode [ 158.732863][ T6116] device veth1_macvtap entered promiscuous mode [ 158.805726][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.850127][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.864671][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 158.887434][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.903204][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.936629][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.951917][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.965467][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.976532][ T6208] batman_adv: batadv0: Adding interface: dummy0 [ 158.983031][ T6208] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.018998][ T6208] batman_adv: batadv0: Interface activated: dummy0 [ 159.062370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.083033][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.115553][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.144231][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.174003][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.185664][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.195589][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.206107][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.216038][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.226574][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.244213][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.266478][ T6210] batadv0: mtu less than device minimum [ 159.273775][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.286744][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.298435][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.310021][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.321620][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.333411][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.345109][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.356723][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.368306][ T6210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 159.405651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.447718][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.542020][ T6116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.559224][ T6116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.578669][ T6116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.588935][ T6116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.874829][ T5236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.883223][ T5236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.968677][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.036950][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.069354][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.101772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.287824][ T6225] loop1: detected capacity change from 0 to 4096 [ 160.388805][ T6231] loop4: detected capacity change from 0 to 1024 [ 160.433894][ T6235] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.484288][ T6225] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 160.526688][ T6225] Remounting filesystem read-only [ 160.640439][ T6237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.648881][ T4267] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 160.649354][ T6237] bridge0: port 3(bond1) entered blocking state [ 160.665404][ T6237] bridge0: port 3(bond1) entered disabled state [ 160.673431][ T6237] device bond1 entered promiscuous mode [ 160.680150][ T6237] bridge0: port 3(bond1) entered blocking state [ 160.688013][ T6237] bridge0: port 3(bond1) entered forwarding state [ 160.720931][ T5236] bridge0: port 3(bond1) entered disabled state [ 160.731178][ T56] hfsplus: b-tree write err: -5, ino 4 [ 160.809998][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 160.854801][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'. [ 160.891882][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 160.906877][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.917568][ T6241] device dummy0 entered promiscuous mode [ 160.925832][ T6241] device team0 entered promiscuous mode [ 160.931634][ T6241] device team_slave_0 entered promiscuous mode [ 160.942019][ T6241] device team_slave_1 entered promiscuous mode [ 160.950240][ T6247] loop5: detected capacity change from 0 to 256 [ 160.955181][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 160.971253][ T6241] bridge0: port 4(hsr2) entered blocking state [ 160.978892][ T6241] bridge0: port 4(hsr2) entered disabled state [ 160.986713][ T6241] device hsr2 entered promiscuous mode [ 160.993919][ T6241] bridge0: port 4(hsr2) entered blocking state [ 161.000365][ T6241] bridge0: port 4(hsr2) entered forwarding state [ 161.007092][ T5376] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 161.016457][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 161.019301][ T6247] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 161.052489][ T6247] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 161.165731][ T4369] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.196644][ T5376] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.223257][ T5376] usb 2-1: config 0 has no interfaces? [ 161.239350][ T5376] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 161.269766][ T5376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.303326][ T5376] usb 2-1: config 0 descriptor?? [ 161.365074][ T4369] usb 5-1: Using ep0 maxpacket: 8 [ 161.383320][ T4369] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 161.400268][ T4369] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 161.423121][ T4369] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.438722][ T4369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.540260][ T5376] usb 2-1: USB disconnect, device number 19 [ 161.884541][ T5375] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 161.996443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.064923][ T5375] usb 3-1: Using ep0 maxpacket: 8 [ 162.081513][ T5375] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 162.102942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 162.103821][ T5375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.120215][ T5375] usb 3-1: Product: syz [ 162.126250][ T5375] usb 3-1: Manufacturer: syz [ 162.131028][ T5375] usb 3-1: SerialNumber: syz [ 162.162854][ T5375] usb 3-1: config 0 descriptor?? [ 162.192237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 162.297995][ T6272] loop1: detected capacity change from 0 to 2048 [ 162.310675][ T6274] tipc: Enabled bearer , priority 0 [ 162.322755][ T6274] device syzkaller0 entered promiscuous mode [ 162.340246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 162.369409][ T9] Bluetooth: (null): Invalid header checksum [ 162.387812][ T6274] tipc: Resetting bearer [ 162.394082][ T5375] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 162.432693][ T9] Bluetooth: (null): Invalid header checksum [ 162.439212][ T6276] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.470057][ T6273] tipc: Resetting bearer [ 162.556322][ T6273] tipc: Disabling bearer [ 162.813553][ T6283] loop5: detected capacity change from 0 to 128 [ 162.873916][ T6283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 162.883326][ T6283] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.893073][ T6288] loop1: detected capacity change from 0 to 512 [ 162.915179][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.947147][ T6288] EXT4-fs: Ignoring removed bh option [ 162.952970][ T27] audit: type=1800 audit(1758000066.174:50): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.767" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 162.987611][ T6288] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.001767][ T5375] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 163.002486][ T6288] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 163.024519][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 163.037060][ T5375] usb 3-1: USB disconnect, device number 16 [ 163.055165][ T6288] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 163.072255][ T6288] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 163.088195][ T6288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.094765][ T6116] EXT4-fs (loop5): unmounting filesystem. [ 163.104511][ T4368] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 163.144048][ T6288] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 163.222122][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 163.251862][ T6291] loop5: detected capacity change from 0 to 256 [ 163.266681][ T6291] exfat: Deprecated parameter 'utf8' [ 163.310536][ T6291] exfat: Deprecated parameter 'utf8' [ 163.326554][ T4368] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 163.340814][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.349990][ T6291] exfat: Deprecated parameter 'utf8' [ 163.370390][ T4368] usb 1-1: config 0 descriptor?? [ 163.383439][ T4368] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 163.391812][ T6291] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 163.422083][ T6291] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 163.443618][ T6291] exFAT-fs (loop5): Filesystem has been set read-only [ 163.564573][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.771'. [ 163.693419][ T6299] loop8: detected capacity change from 0 to 7 [ 163.710842][ T4378] Dev loop8: unable to read RDB block 7 [ 163.719191][ T4378] loop8: unable to read partition table [ 163.725763][ T4378] loop8: partition table beyond EOD, truncated [ 163.745473][ T6299] Dev loop8: unable to read RDB block 7 [ 163.753339][ T6299] loop8: unable to read partition table [ 163.770254][ T6299] loop8: partition table beyond EOD, truncated [ 163.802156][ T6299] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 163.902792][ T5375] usb 5-1: USB disconnect, device number 19 [ 163.996841][ T6308] loop1: detected capacity change from 0 to 64 [ 164.053230][ T6308] syz.1.777: attempt to access beyond end of device [ 164.053230][ T6308] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 164.066816][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 164.084708][ T5372] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 164.098133][ T6308] Buffer I/O error on dev loop1, logical block 512, async page read [ 164.108230][ T6308] syz.1.777: attempt to access beyond end of device [ 164.108230][ T6308] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 164.122145][ T6308] Buffer I/O error on dev loop1, logical block 56576, async page read [ 164.214290][ T4368] gspca_cpia1: usb_control_msg 02, error -71 [ 164.229711][ T4368] cpia1 1-1:0.0: only firmware version 1 is supported (got: 122) [ 164.239634][ T4368] usb 1-1: USB disconnect, device number 21 [ 164.274437][ T5372] usb 6-1: Using ep0 maxpacket: 32 [ 164.282855][ T5372] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.308017][ T6316] loop1: detected capacity change from 0 to 256 [ 164.310078][ T5372] usb 6-1: config 55 has an invalid interface number: 105 but max is 0 [ 164.324485][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 164.332773][ T6316] exfat: Unknown parameter 'zero_size_dir' [ 164.337475][ T5372] usb 6-1: config 55 has no interface number 0 [ 164.346605][ T5372] usb 6-1: config 55 interface 105 altsetting 2 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 164.389749][ T5372] usb 6-1: config 55 interface 105 has no altsetting 0 [ 164.414165][ T5372] usb 6-1: string descriptor 0 read error: -22 [ 164.432212][ T5372] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e7.d2 [ 164.444453][ T5372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.524760][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 164.531867][ T7] usb 3-1: config 252 has an invalid interface number: 254 but max is 0 [ 164.540367][ T7] usb 3-1: config 252 has no interface number 0 [ 164.554564][ T5375] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 164.566347][ T7] usb 3-1: New USB device found, idVendor=0af0, idProduct=7501, bcdDevice= 0.00 [ 164.575587][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.583981][ T7] usb 3-1: Product: syz [ 164.588919][ T7] usb 3-1: Manufacturer: syz [ 164.593594][ T7] usb 3-1: SerialNumber: syz [ 164.623860][ T7] hso 3-1:252.254: Not our interface [ 164.640757][ T7] usb-storage 3-1:252.254: USB Mass Storage device detected [ 164.678093][ T5372] radio-si470x 6-1:55.105: si470x_get_report: usb_control_msg returned -71 [ 164.699542][ T5372] radio-si470x: probe of 6-1:55.105 failed with error -5 [ 164.713364][ T5372] usb 6-1: USB disconnect, device number 2 [ 164.744527][ T5375] usb 5-1: Using ep0 maxpacket: 32 [ 164.753676][ T5375] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 164.784670][ T5375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.807308][ T5375] usb 5-1: Product: syz [ 164.811625][ T5375] usb 5-1: Manufacturer: syz [ 164.843469][ T5375] usb 5-1: SerialNumber: syz [ 164.853062][ T5375] usb 5-1: config 0 descriptor?? [ 164.868152][ T127] usb 3-1: USB disconnect, device number 17 [ 164.876883][ T5375] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 165.134543][ T5376] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 165.314496][ T5376] usb 2-1: Using ep0 maxpacket: 8 [ 165.322066][ T5376] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.332590][ T5376] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 165.341739][ T5376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.352998][ T5376] usb 2-1: config 0 descriptor?? [ 165.361929][ T5376] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 165.534533][ T4339] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 165.734598][ T4339] usb 6-1: Using ep0 maxpacket: 8 [ 165.754191][ T4339] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 165.762789][ T4339] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 165.773195][ T4339] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.783684][ T4339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.913613][ T6349] mmap: syz.2.793 (6349) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.928385][ T6349] ------------[ cut here ]------------ [ 165.934558][ T6349] WARNING: CPU: 0 PID: 6349 at include/linux/fs.h:503 hugetlb_split+0x234/0x2a0 [ 165.943668][ T6349] Modules linked in: [ 165.947802][ T6349] CPU: 0 PID: 6349 Comm: syz.2.793 Not tainted syzkaller #0 [ 165.955193][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.965629][ T6349] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 165.971064][ T6349] Code: b5 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 78 5f b5 ff 0f 0b e9 65 fe ff ff e8 6c 5f b5 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 e4 a9 1f 8e 80 e1 07 80 c1 03 38 c1 [ 165.991419][ T6349] RSP: 0018:ffffc90003d27568 EFLAGS: 00010283 [ 165.997887][ T6349] RAX: ffffffff81cb7124 RBX: 0000200000400000 RCX: 0000000000080000 [ 166.005989][ T6349] RDX: ffffc9000f884000 RSI: 0000000000003a7e RDI: 0000000000003a7f [ 166.014035][ T6349] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fb32a6e [ 166.022124][ T6349] R10: ffffed100fb32a6e R11: 1ffff1100fb32a6d R12: ffff88801e749df0 [ 166.030206][ T6349] R13: dffffc0000000000 R14: ffff88801e749d80 R15: ffff888078f70bb8 [ 166.038295][ T6349] FS: 00007f42e44a86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 166.047325][ T6349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.053958][ T6349] CR2: 000000110c391fc2 CR3: 000000005f8fb000 CR4: 00000000003506f0 [ 166.062047][ T6349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.070097][ T6349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.078181][ T6349] Call Trace: [ 166.081508][ T6349] [ 166.084534][ T6349] __vma_adjust+0x46b/0x1c60 [ 166.089194][ T6349] ? lockdep_softirqs_off+0x420/0x420 [ 166.089261][ T5375] gspca_topro: reg_w err -71 [ 166.094651][ T6349] ? validate_mm+0x2b0/0x2b0 [ 166.094846][ T6349] ? hugetlb_vm_op_open+0x334/0x540 [ 166.094875][ T6349] __split_vma+0x3a7/0x500 [ 166.094908][ T6349] do_mas_align_munmap+0x351/0x1220 [ 166.094950][ T6349] ? do_mas_munmap+0x2b0/0x2b0 [ 166.094984][ T6349] ? mtree_range_walk+0x672/0x7b0 [ 166.095032][ T6349] ? mas_walk+0x15f/0x180 [ 166.095066][ T6349] ? mas_find+0x1e8/0x230 [ 166.095103][ T6349] do_mas_munmap+0x240/0x2b0 [ 166.095136][ T6349] mmap_region+0x6e5/0x1c70 [ 166.095174][ T6349] ? pud_huge+0x40/0x40 [ 166.095200][ T6349] ? file_mmap_ok+0x170/0x170 [ 166.095227][ T6349] ? validate_mm+0x22a/0x2b0 [ 166.095255][ T6349] ? cap_mmap_addr+0x165/0x2e0 [ 166.095300][ T6349] ? file_mmap_ok+0x11c/0x170 [ 166.095329][ T6349] do_mmap+0x958/0xfd0 [ 166.095354][ T6349] ? aa_path_link+0x850/0x850 [ 166.095398][ T6349] ? mlock_future_check+0x100/0x100 [ 166.095423][ T6349] ? ima_file_mmap+0x8e/0x150 [ 166.095455][ T6349] ? ima_file_free+0x3e0/0x3e0 [ 166.095485][ T6349] ? common_file_perm+0x171/0x1c0 [ 166.095530][ T6349] ? bpf_lsm_mmap_file+0x5/0x10 [ 166.095564][ T6349] __se_sys_remap_file_pages+0x59e/0x770 [ 166.095598][ T6349] ? __se_sys_futex+0x14a/0x440 [ 166.095639][ T6349] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 166.095669][ T6349] ? lock_chain_count+0x20/0x20 [ 166.095704][ T6349] ? lockdep_hardirqs_on+0x94/0x140 [ 166.095733][ T6349] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 166.095766][ T6349] do_syscall_64+0x4c/0xa0 [ 166.095788][ T6349] ? clear_bhb_loop+0x60/0xb0 [ 166.095811][ T6349] ? clear_bhb_loop+0x60/0xb0 [ 166.095835][ T6349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.095871][ T6349] RIP: 0033:0x7f42e358eba9 [ 166.095903][ T6349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.095923][ T6349] RSP: 002b:00007f42e44a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 166.095949][ T6349] RAX: ffffffffffffffda RBX: 00007f42e37d6090 RCX: 00007f42e358eba9 [ 166.095967][ T6349] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 166.095982][ T6349] RBP: 00007f42e3611e19 R08: 00000000f0ffffff R09: 0000000000000000 [ 166.134791][ T5375] gspca_topro: Sensor soi763a [ 166.138779][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.187567][ T5375] usb 5-1: USB disconnect, device number 20 [ 166.190009][ T6349] R13: 00007f42e37d6128 R14: 00007f42e37d6090 R15: 00007fff1f3d9318 [ 166.190048][ T6349] [ 166.190073][ T6349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.190084][ T6349] CPU: 0 PID: 6349 Comm: syz.2.793 Not tainted syzkaller #0 [ 166.190104][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.190118][ T6349] Call Trace: [ 166.190127][ T6349] [ 166.190136][ T6349] dump_stack_lvl+0x168/0x22e [ 166.190172][ T6349] ? memcpy+0x3c/0x60 [ 166.190210][ T6349] ? show_regs_print_info+0x12/0x12 [ 166.190237][ T6349] ? load_image+0x3b0/0x3b0 [ 166.190286][ T6349] panic+0x2c9/0x710 [ 166.190324][ T6349] ? bpf_jit_dump+0xd0/0xd0 [ 166.190371][ T6349] __warn+0x2f8/0x4f0 [ 166.190400][ T6349] ? hugetlb_split+0x234/0x2a0 [ 166.190427][ T6349] ? hugetlb_split+0x234/0x2a0 [ 166.190451][ T6349] report_bug+0x2ba/0x4f0 [ 166.190477][ T6349] ? hugetlb_split+0x234/0x2a0 [ 166.190515][ T6349] handle_bug+0x3a/0x70 [ 166.190541][ T6349] exc_invalid_op+0x16/0x40 [ 166.190569][ T6349] asm_exc_invalid_op+0x16/0x20 [ 166.190591][ T6349] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 166.190617][ T6349] Code: b5 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 78 5f b5 ff 0f 0b e9 65 fe ff ff e8 6c 5f b5 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 e4 a9 1f 8e 80 e1 07 80 c1 03 38 c1 [ 166.190637][ T6349] RSP: 0018:ffffc90003d27568 EFLAGS: 00010283 [ 166.190658][ T6349] RAX: ffffffff81cb7124 RBX: 0000200000400000 RCX: 0000000000080000 [ 166.190677][ T6349] RDX: ffffc9000f884000 RSI: 0000000000003a7e RDI: 0000000000003a7f [ 166.190693][ T6349] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fb32a6e [ 166.190711][ T6349] R10: ffffed100fb32a6e R11: 1ffff1100fb32a6d R12: ffff88801e749df0 [ 166.190730][ T6349] R13: dffffc0000000000 R14: ffff88801e749d80 R15: ffff888078f70bb8 [ 166.190756][ T6349] ? hugetlb_split+0x234/0x2a0 [ 166.190787][ T6349] ? hugetlb_split+0x234/0x2a0 [ 166.190813][ T6349] __vma_adjust+0x46b/0x1c60 [ 166.190850][ T6349] ? lockdep_softirqs_off+0x420/0x420 [ 166.190888][ T6349] ? validate_mm+0x2b0/0x2b0 [ 166.190933][ T6349] ? hugetlb_vm_op_open+0x334/0x540 [ 166.190960][ T6349] __split_vma+0x3a7/0x500 [ 166.190996][ T6349] do_mas_align_munmap+0x351/0x1220 [ 166.191043][ T6349] ? do_mas_munmap+0x2b0/0x2b0 [ 166.191081][ T6349] ? mtree_range_walk+0x672/0x7b0 [ 166.191133][ T6349] ? mas_walk+0x15f/0x180 [ 166.191170][ T6349] ? mas_find+0x1e8/0x230 [ 166.191209][ T6349] do_mas_munmap+0x240/0x2b0 [ 166.191245][ T6349] mmap_region+0x6e5/0x1c70 [ 166.191284][ T6349] ? pud_huge+0x40/0x40 [ 166.191310][ T6349] ? file_mmap_ok+0x170/0x170 [ 166.191339][ T6349] ? validate_mm+0x22a/0x2b0 [ 166.191370][ T6349] ? cap_mmap_addr+0x165/0x2e0 [ 166.191420][ T6349] ? file_mmap_ok+0x11c/0x170 [ 166.191452][ T6349] do_mmap+0x958/0xfd0 [ 166.191479][ T6349] ? aa_path_link+0x850/0x850 [ 166.191536][ T6349] ? mlock_future_check+0x100/0x100 [ 166.191563][ T6349] ? ima_file_mmap+0x8e/0x150 [ 166.191601][ T6349] ? ima_file_free+0x3e0/0x3e0 [ 166.191634][ T6349] ? common_file_perm+0x171/0x1c0 [ 166.191674][ T6349] ? bpf_lsm_mmap_file+0x5/0x10 [ 166.191711][ T6349] __se_sys_remap_file_pages+0x59e/0x770 [ 166.191745][ T6349] ? __se_sys_futex+0x14a/0x440 [ 166.191788][ T6349] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 166.191820][ T6349] ? lock_chain_count+0x20/0x20 [ 166.191858][ T6349] ? lockdep_hardirqs_on+0x94/0x140 [ 166.191886][ T6349] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 166.191921][ T6349] do_syscall_64+0x4c/0xa0 [ 166.191946][ T6349] ? clear_bhb_loop+0x60/0xb0 [ 166.191969][ T6349] ? clear_bhb_loop+0x60/0xb0 [ 166.191996][ T6349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.192036][ T6349] RIP: 0033:0x7f42e358eba9 [ 166.192056][ T6349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.192076][ T6349] RSP: 002b:00007f42e44a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 166.192101][ T6349] RAX: ffffffffffffffda RBX: 00007f42e37d6090 RCX: 00007f42e358eba9 [ 166.192119][ T6349] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 166.192135][ T6349] RBP: 00007f42e3611e19 R08: 00000000f0ffffff R09: 0000000000000000 [ 166.192150][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.192166][ T6349] R13: 00007f42e37d6128 R14: 00007f42e37d6090 R15: 00007fff1f3d9318 [ 166.192201][ T6349] [ 166.195188][ T6349] Kernel Offset: disabled [ 166.760244][ T6349] Rebooting in 86400 seconds..