last executing test programs: 1m20.466033536s ago: executing program 2 (id=5772): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 1m20.122026351s ago: executing program 2 (id=5774): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x1054c3b7, 0x40801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) fcntl$lock(r1, 0x5, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) 1m20.024070302s ago: executing program 2 (id=5776): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m17.116877682s ago: executing program 2 (id=5789): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./bus\x00', 0x10418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1m16.851218945s ago: executing program 2 (id=5791): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6c7, &(0x7f0000000a80)="$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") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000001c0)) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211404, &(0x7f00000017c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES16, @ANYRES8=0x0, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64=r1, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRES16], 0x5, 0x151a, &(0x7f0000002c80)="$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") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x100a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m16.564186909s ago: executing program 2 (id=5792): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) 1m16.269375353s ago: executing program 32 (id=5792): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) 30.500107426s ago: executing program 1 (id=6005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x2, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 30.387124437s ago: executing program 1 (id=6007): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 30.056862102s ago: executing program 1 (id=6011): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 29.031516815s ago: executing program 1 (id=6014): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ftruncate(r0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x77f8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x10, 0xff, 0x80000000) 28.514505923s ago: executing program 1 (id=6021): semget$private(0x0, 0x6, 0x3b1) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 27.748632893s ago: executing program 1 (id=6029): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000440)) 27.398933058s ago: executing program 33 (id=6029): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000440)) 8.793918391s ago: executing program 0 (id=6098): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) ptrace$cont(0x9, r4, 0xb, 0x80000000000) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) r6 = epoll_create1(0x80000) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x7f36be39) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x1f}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7.688862276s ago: executing program 0 (id=6100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000200)={0x54, r1, 0x1, 0x70bd28, 0x2000, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x54}}, 0x0) 7.482730329s ago: executing program 0 (id=6104): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.863323907s ago: executing program 0 (id=6106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b29, 0x0) setxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='security.e'], 0x0, 0x0, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280), &(0x7f0000000740)=ANY=[], 0x25, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 6.489972292s ago: executing program 3 (id=6112): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x86) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x60000000}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8, 0x7, 0xe48, 0x9f1, 0x17, "de98cd550c0f9c4a"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x4, 0x7ff, 0x3, 0x1, 0xa, 0x2, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x2, 0xfffffffd, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0xc, 0x0, 0x5, 0x2006, 0x808, 0x40, 0x1, 0xe], [0x7f5, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0x384, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x400, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0x5, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0x3, 0x3, 0x12b, 0x4, 0x1, 0x8a, 0xfffffffc, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x85f, 0x2000001, 0x2000002, 0x2, 0x60a7, 0x6, 0x13, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x3, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x0, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.489764452s ago: executing program 0 (id=6113): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2b, 0x5e, 0x6, 0x10, 0x77d, 0x627a, 0x10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x3, 0xe0, 0x46}}]}}]}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x5, 0x7fffffff, 0x8, 0x6, 0x1, 0x2, 0x0, 0x4}}) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') 6.360047754s ago: executing program 3 (id=6115): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001ec0)='./file2\x00', 0x20042, 0x81) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="18ff2eba36ab8c", 0x7}], 0x1, 0x4f, 0x800) fdatasync(r0) 5.998966789s ago: executing program 3 (id=6118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000200001000000000000000001020000000200000c0000000008000400fbff060000005b0000000000f1b68c1e486e6e0658fa3a6213aaf1be0d3f6e47c922556110e1f32028e272d1e99aba2c4bd2a8e2e332f8e48d617a845c17ea5343cedb3ea88f4a1dabda4983117b293d0edbfec2881d6e9af7f2c9d984c2d4687e6dc84f26"], 0x2c}}, 0x8) 5.354530098s ago: executing program 3 (id=6119): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000001540)='./file0\x00', 0x2008080, &(0x7f0000001580), 0x1, 0x14d1, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0xfd, 0x0, &(0x7f0000000240)) 4.718732956s ago: executing program 5 (id=6120): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x7, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x1, 0xfa}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x0, 0xee}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf9, 0xb9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x5, 0xe0}}}}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 4.685074486s ago: executing program 3 (id=6121): socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10141, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) unshare(0x6020400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)) 3.345998795s ago: executing program 6 (id=6130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2, 0x5, 0x54, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x4) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x20, 0x0) 3.205346597s ago: executing program 6 (id=6131): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom0\x00', 0x800, 0x0) 3.005829669s ago: executing program 5 (id=6132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x0, 0xff, 0x5, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 2.935950081s ago: executing program 5 (id=6133): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@rodir}, {@numtail}, {@shortname_mixed}, {@fat=@nfs_nostale_ro}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) 2.779392263s ago: executing program 5 (id=6134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="a1c3b1c14866"}) 2.646046324s ago: executing program 0 (id=6135): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x4, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet(0xa, 0x801, 0x84) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r2, &(0x7f0000000200)=""/168, 0xa8) 2.581973675s ago: executing program 6 (id=6136): r0 = getpid() capset(&(0x7f0000000000)={0x20080522, r0}, 0x0) 2.499372467s ago: executing program 5 (id=6137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@remote, 0x0, 0x0, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xfffffffffffffffc}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@ipv4}]}]}, 0xfc}}, 0x0) 2.318078749s ago: executing program 5 (id=6138): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000a00)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.316447409s ago: executing program 6 (id=6139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f00000000c0)='./file3\x00', 0x40e020, &(0x7f0000000040)=ANY=[], 0x1, 0x1d2, &(0x7f00000006c0)="$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") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x589f8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [0xffffff00], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000480)={0x1, 0x0, 0x3d8d, 0x3, 0xaac}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f0000000040)=0x9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r7 = socket(0x10, 0x3, 0x0) keyctl$clear(0x3, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, 0x0, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x560c, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7400ffdbdf2501000000100002800c0f0180080006000000000004000180"], 0x28}}, 0x40) 1.223758654s ago: executing program 6 (id=6140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.046056496s ago: executing program 6 (id=6142): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000240)={0x1, 0x101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r3, @ANYBLOB=' \x00'], 0x38}}, 0x40840) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x14, 0x20, 0x70bd2d, 0x25dfdbff, {0x3, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48849) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) 782.26502ms ago: executing program 4 (id=6144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000002280)=0x40) 693.911101ms ago: executing program 3 (id=6145): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2b, 0x5e, 0x6, 0x10, 0x77d, 0x627a, 0x10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x3, 0xe0, 0x46}}]}}]}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x5, 0x7fffffff, 0x8, 0x6, 0x1, 0x2, 0x0, 0x4}}) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') 637.062281ms ago: executing program 4 (id=6146): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@gid}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@nocompress}, {@map_off}, {}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}]}, 0x1, 0xa51, &(0x7f0000001240)="$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") 460.669754ms ago: executing program 4 (id=6147): unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 201.891967ms ago: executing program 4 (id=6148): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC]) statfs(0x0, 0x0) 146.313708ms ago: executing program 4 (id=6149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4044080) 0s ago: executing program 4 (id=6150): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setitimer(0x0, &(0x7f0000000440)={{0x77359400}, {0x77359400}}, 0x0) setitimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r3, &(0x7f0000000240)='./file0/bus\x00', 0x80000000) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, 0x0, 0x20008844) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) fanotify_init(0x10, 0x40000) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) kernel console output (not intermixed with test programs): top speed; connect to a high speed hub [ 1449.797198][ T4346] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1449.808208][ T4346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1449.827461][ T4346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1449.837959][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.849157][ T4346] usb 4-1: Product: syz [ 1449.853562][ T4346] usb 4-1: Manufacturer: syz [ 1449.858486][ T4346] usb 4-1: SerialNumber: syz [ 1449.872272][T21917] netlink: 'syz.4.5494': attribute type 10 has an invalid length. [ 1450.089234][ T4346] usb 4-1: 0:2 : does not exist [ 1450.126591][ T4346] usb 4-1: USB disconnect, device number 9 [ 1451.036625][T21940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1451.054301][T21940] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1451.069217][T21940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1451.579717][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5507'. [ 1451.609537][T21953] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1451.648180][T16496] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1451.870293][T16496] usb 4-1: Using ep0 maxpacket: 16 [ 1451.877411][T16496] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1451.902433][T16496] usb 4-1: config 0 has no interface number 0 [ 1451.917516][T16496] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1451.960438][T16496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.968651][T16496] usb 4-1: Product: syz [ 1451.987451][T16496] usb 4-1: Manufacturer: syz [ 1451.993212][T16496] usb 4-1: SerialNumber: syz [ 1452.006703][T16496] usb 4-1: config 0 descriptor?? [ 1452.186924][T21959] netlink: 'syz.2.5508': attribute type 10 has an invalid length. [ 1452.236808][T21949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.266473][T21949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.446033][T16496] usb 4-1: USB disconnect, device number 10 [ 1453.548922][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5519'. [ 1453.588703][T21986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1453.602754][T21986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1453.626632][T21986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1453.736302][T21986] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1455.090269][ T4346] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1455.290277][ T4346] usb 3-1: Using ep0 maxpacket: 16 [ 1455.300330][ T4346] usb 3-1: config 0 has no interfaces? [ 1455.318962][ T4346] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1455.348717][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.377306][ T4346] usb 3-1: Product: syz [ 1455.393001][ T4346] usb 3-1: Manufacturer: syz [ 1455.405254][ T4346] usb 3-1: SerialNumber: syz [ 1455.424924][ T4346] usb 3-1: config 0 descriptor?? [ 1457.180281][ T4301] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1457.350344][ T4301] usb 4-1: device descriptor read/64, error -71 [ 1457.640300][ T4301] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1457.810978][ T4301] usb 4-1: device descriptor read/64, error -71 [ 1457.930430][ T4301] usb usb4-port1: attempt power cycle [ 1457.992482][T15394] usb 3-1: USB disconnect, device number 103 [ 1458.340293][ T4301] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1458.373503][ T4301] usb 4-1: device descriptor read/8, error -71 [ 1458.590275][T15394] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1458.650258][ T4301] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1458.681309][ T4301] usb 4-1: device descriptor read/8, error -71 [ 1458.781272][T15394] usb 3-1: not running at top speed; connect to a high speed hub [ 1458.800339][ T4301] usb usb4-port1: unable to enumerate USB device [ 1458.807179][T15394] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1458.834012][T15394] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1458.854069][T15394] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1458.885258][T15394] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1458.907035][T15394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.929337][T15394] usb 3-1: Product: syz [ 1458.946878][T15394] usb 3-1: Manufacturer: syz [ 1458.955960][T15394] usb 3-1: SerialNumber: syz [ 1459.009311][T22070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5550'. [ 1459.193357][T15394] usb 3-1: 0:2 : does not exist [ 1459.305527][T15394] usb 3-1: USB disconnect, device number 104 [ 1460.364080][T22092] binder: 22091:22092 ioctl c0306201 0 returned -14 [ 1460.480457][ T4346] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1460.670357][ T4346] usb 4-1: Using ep0 maxpacket: 16 [ 1460.678763][ T4346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.752015][ T4346] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1460.804580][ T4346] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1460.829566][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.870244][ T4346] usb 4-1: config 0 descriptor?? [ 1461.340303][ T4301] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1461.552853][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 1461.561075][ T4301] usb 3-1: config 0 has no interfaces? [ 1461.570794][ T4301] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1461.582537][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.591353][ T4301] usb 3-1: Product: syz [ 1461.595614][ T4301] usb 3-1: Manufacturer: syz [ 1461.602750][ T4301] usb 3-1: SerialNumber: syz [ 1461.614768][ T4301] usb 3-1: config 0 descriptor?? [ 1461.896304][T22102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.933465][T22102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.795665][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5564'. [ 1462.831731][T22107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1462.867800][T22107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1462.903018][T22107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1463.403756][ T4301] usb 4-1: USB disconnect, device number 15 [ 1463.474094][T22120] binder: 22119:22120 ioctl c0306201 0 returned -14 [ 1464.164298][ T4346] usb 3-1: USB disconnect, device number 105 [ 1464.933764][T22153] binder: 22152:22153 ioctl c0306201 200000000240 returned -11 [ 1465.011389][T22154] binder: 22152:22154 ioctl c0306201 0 returned -14 [ 1465.452856][ T4297] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1465.644158][ T4297] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1465.658013][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.677343][ T4297] usb 3-1: Product: syz [ 1465.686210][ T4297] usb 3-1: Manufacturer: syz [ 1465.694734][ T4297] usb 3-1: SerialNumber: syz [ 1465.718425][ T4297] usb 3-1: config 0 descriptor?? [ 1465.756395][T22167] netlink: 'syz.3.5586': attribute type 4 has an invalid length. [ 1466.137950][ T4297] airspy 3-1:0.0: usb_control_msg() failed -32 request 0a [ 1466.146828][ T4297] airspy 3-1:0.0: Could not detect board [ 1466.158765][ T4297] airspy: probe of 3-1:0.0 failed with error -32 [ 1467.730112][T22200] device syzkaller0 entered promiscuous mode [ 1468.120255][T16496] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1468.224836][T15394] usb 3-1: USB disconnect, device number 106 [ 1468.320689][T16496] usb 4-1: Using ep0 maxpacket: 16 [ 1468.329595][T16496] usb 4-1: config 222 has an invalid interface number: 31 but max is 0 [ 1468.380330][T16496] usb 4-1: config 222 has no interface number 0 [ 1468.390379][T16496] usb 4-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 1468.497220][T16496] usb 4-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 1468.534754][T16496] usb 4-1: config 222 interface 31 has no altsetting 0 [ 1468.560369][T16496] usb 4-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 1468.577785][T16496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.592678][T16496] usb 4-1: Product: syz [ 1468.623745][T16496] usb 4-1: Manufacturer: syz [ 1468.643591][T16496] usb 4-1: SerialNumber: syz [ 1468.742172][T22200] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1468.753693][T15394] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1468.955241][T15394] usb 3-1: not running at top speed; connect to a high speed hub [ 1468.977816][T16496] ldusb 4-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 1469.007471][T15394] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1469.033779][T16496] usb 4-1: USB disconnect, device number 16 [ 1469.061728][T16496] ldusb 4-1:222.31: LD USB Device #0 now disconnected [ 1469.077924][T15394] usb 3-1: config 1 has no interface number 1 [ 1469.115304][T15394] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1469.167223][T15394] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1469.216408][T15394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.239672][T15394] usb 3-1: Product: syz [ 1469.249893][T15394] usb 3-1: Manufacturer: syz [ 1469.267613][T15394] usb 3-1: SerialNumber: syz [ 1469.504425][T15394] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1469.527711][T15394] usb 3-1: failed to enable PITCH for EP 0x82 [ 1469.555805][T15394] usb 3-1: 2:1: cannot set freq 8525114 to ep 0x82 [ 1469.613922][T15394] usb 3-1: USB disconnect, device number 107 [ 1472.572975][T22240] netlink: 'syz.1.5611': attribute type 10 has an invalid length. [ 1473.020350][T15394] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1473.120327][ T4297] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1473.211310][T15394] usb 3-1: not running at top speed; connect to a high speed hub [ 1473.220129][T15394] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1473.229421][T15394] usb 3-1: config 1 has no interface number 1 [ 1473.238320][T15394] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1473.247738][T15394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.256049][T15394] usb 3-1: Product: syz [ 1473.260696][T15394] usb 3-1: Manufacturer: syz [ 1473.265327][T15394] usb 3-1: SerialNumber: syz [ 1473.300455][ T4297] usb 4-1: Using ep0 maxpacket: 8 [ 1473.307091][ T4297] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.317405][ T4297] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1473.330921][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.495803][T15394] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1473.504818][T15394] usb 3-1: failed to enable PITCH for EP 0x82 [ 1473.511670][T15394] usb 3-1: 2:1: cannot set freq 8525114 to ep 0x82 [ 1473.541485][T15394] usb 3-1: USB disconnect, device number 108 [ 1473.568660][T14685] udevd[14685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1474.310656][T22270] Bluetooth: MGMT ver 1.22 [ 1474.411787][T22275] loop2: detected capacity change from 0 to 1024 [ 1474.438207][T22275] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1474.457740][T22275] EXT4-fs (loop2): invalid journal inode [ 1474.463844][T22275] EXT4-fs (loop2): can't get journal size [ 1474.475306][T22275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1474.563149][T15523] EXT4-fs (loop2): unmounting filesystem. [ 1475.630239][T15394] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1475.840326][T15394] usb 3-1: Using ep0 maxpacket: 16 [ 1475.898480][ T4297] usb 4-1: USB disconnect, device number 17 [ 1475.910103][T15394] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1475.926195][T15394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.946403][T15394] usb 3-1: config 0 descriptor?? [ 1475.956770][T15394] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1476.470465][ T4297] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1476.674776][ T4297] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1476.692226][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.725711][ T4297] usb 4-1: Product: syz [ 1476.729933][ T4297] usb 4-1: Manufacturer: syz [ 1476.766673][T15394] gspca_sonixj: reg_r err -32 [ 1476.772412][T15394] sonixj: probe of 3-1:0.0 failed with error -32 [ 1476.778832][ T4297] usb 4-1: SerialNumber: syz [ 1476.824077][ T4297] usb 4-1: config 0 descriptor?? [ 1477.251169][ T4297] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a [ 1477.260632][ T4297] airspy 4-1:0.0: Could not detect board [ 1477.275348][ T4297] airspy: probe of 4-1:0.0 failed with error -32 [ 1477.424880][T22312] loop1: detected capacity change from 0 to 128 [ 1478.435883][T16496] usb 3-1: USB disconnect, device number 109 [ 1478.900248][T16496] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1479.088157][T15394] usb 4-1: USB disconnect, device number 18 [ 1479.096291][T16496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.133864][T16496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.161295][T16496] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1479.171653][T16496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.189863][T16496] usb 3-1: config 0 descriptor?? [ 1479.544564][T22335] netlink: 'syz.3.5648': attribute type 10 has an invalid length. [ 1479.601803][T16496] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1479.609420][T16496] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1479.616890][T16496] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1479.624486][T16496] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1479.632322][T16496] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1479.642182][T16496] playstation 0003:054C:0DF2.0018: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1479.801437][T16496] playstation 0003:054C:0DF2.0018: Invalid reportID received, expected 9 got 28 [ 1479.810799][T16496] playstation 0003:054C:0DF2.0018: Failed to retrieve DualSense pairing info: -22 [ 1479.820107][T16496] playstation 0003:054C:0DF2.0018: Failed to get MAC address from DualSense [ 1479.828946][T16496] playstation 0003:054C:0DF2.0018: Failed to create dualsense. [ 1479.837724][T16496] playstation: probe of 0003:054C:0DF2.0018 failed with error -22 [ 1479.973642][T22338] loop0: detected capacity change from 0 to 512 [ 1480.005322][T15394] usb 3-1: USB disconnect, device number 110 [ 1480.067333][T22338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1480.078693][T22338] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1480.197896][T14962] EXT4-fs (loop0): unmounting filesystem. [ 1480.411051][T22347] loop3: detected capacity change from 0 to 8 [ 1480.439703][T22347] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1480.451677][T22347] SQUASHFS error: Failed to read block 0x9b: -5 [ 1480.457933][T22347] SQUASHFS error: Unable to read metadata cache entry [99] [ 1480.466222][T22347] SQUASHFS error: Unable to read inode 0x127 [ 1480.922593][T22362] input: syz1 as /devices/virtual/input/input25 [ 1480.947260][T22360] device syzkaller0 entered promiscuous mode [ 1481.000247][T15394] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1481.008132][ T4301] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1481.190289][T15394] usb 3-1: Using ep0 maxpacket: 16 [ 1481.200093][ T4301] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1481.209495][T15394] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1481.218713][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.227132][T15394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.235384][ T4301] usb 4-1: Product: syz [ 1481.239860][ T4301] usb 4-1: Manufacturer: syz [ 1481.246417][T15394] usb 3-1: config 0 descriptor?? [ 1481.251684][ T4301] usb 4-1: SerialNumber: syz [ 1481.262696][T15394] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1481.270677][ T4301] usb 4-1: config 0 descriptor?? [ 1481.683969][ T4301] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a [ 1481.693804][ T4301] airspy 4-1:0.0: Could not detect board [ 1481.706178][ T4301] airspy: probe of 4-1:0.0 failed with error -32 [ 1482.071013][T15394] gspca_sonixj: reg_r err -32 [ 1482.075873][T15394] sonixj: probe of 3-1:0.0 failed with error -32 [ 1483.528246][T22368] netlink: 'syz.1.5661': attribute type 10 has an invalid length. [ 1483.677174][T22375] loop0: detected capacity change from 0 to 2048 [ 1483.693391][T22375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1483.702363][T22375] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1483.737431][T15394] usb 3-1: USB disconnect, device number 111 [ 1483.770344][T16496] usb 4-1: USB disconnect, device number 19 [ 1483.848330][T14962] EXT4-fs (loop0): unmounting filesystem. [ 1483.902130][T22385] fuse: Bad value for 'fd' [ 1484.004228][T22387] loop4: detected capacity change from 0 to 2048 [ 1484.071533][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.077939][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.105705][T22387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1484.127382][T22392] loop2: detected capacity change from 0 to 164 [ 1484.179418][T22392] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1484.220810][T16496] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1484.301800][T14520] EXT4-fs (loop4): unmounting filesystem. [ 1484.420239][T16496] usb 4-1: Using ep0 maxpacket: 32 [ 1484.427509][T16496] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1484.446715][T16496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.460083][T16496] usb 4-1: config 0 descriptor?? [ 1484.469290][T16496] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1484.700447][ T4301] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1484.880254][ T4301] usb 3-1: Using ep0 maxpacket: 8 [ 1484.888744][ T4301] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1484.920364][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.958957][ T4301] usb 3-1: Product: syz [ 1484.963571][ T4301] usb 3-1: Manufacturer: syz [ 1484.968201][ T4301] usb 3-1: SerialNumber: syz [ 1484.990560][ T4301] usb 3-1: config 0 descriptor?? [ 1485.205728][ T4301] usb read operation failed. (-32) [ 1485.278283][T22408] netlink: 'syz.0.5675': attribute type 10 has an invalid length. [ 1485.614176][ T4301] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1486.279875][T16496] gspca_vc032x: reg_r err -71 [ 1486.284857][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.290486][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.295999][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.301344][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.306694][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.312281][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.317573][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.322963][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.328251][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.333584][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.338860][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.344222][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.349521][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.354847][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.360280][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.365562][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.370877][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.376148][T16496] gspca_vc032x: I2c Bus Busy Wait 00 [ 1486.381510][T16496] gspca_vc032x: Unknown sensor... [ 1486.386552][T16496] vc032x: probe of 4-1:0.0 failed with error -22 [ 1486.395062][T16496] usb 4-1: USB disconnect, device number 20 [ 1487.090224][T16496] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1487.270603][T16496] usb 4-1: Using ep0 maxpacket: 16 [ 1487.277070][T16496] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.288170][T16496] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.298500][T16496] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1487.305177][T16496] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1487.314342][T16496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.324122][T16496] usb 4-1: config 0 descriptor?? [ 1487.707816][T22422] fuse: Bad value for 'fd' [ 1487.718854][T22424] netlink: 798 bytes leftover after parsing attributes in process `syz.4.5681'. [ 1487.832286][T22426] loop2: detected capacity change from 0 to 16 [ 1487.835883][T16496] hid (null): invalid report_count 50691 [ 1487.859939][T22426] erofs: (device loop2): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block) [ 1487.876397][T16496] hid (null): unknown global tag 0xcf [ 1487.883370][T16496] hid (null): report_id 0 is invalid [ 1487.907600][T22426] devpts: called with bogus options [ 1488.053576][T16496] usb 4-1: USB disconnect, device number 21 [ 1488.098275][ T27] kauditd_printk_skb: 676 callbacks suppressed [ 1488.098292][ T27] audit: type=1326 audit(2000001118.730:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22431 comm="syz.2.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5558e969 code=0x7ffc0000 [ 1488.173607][ T27] audit: type=1326 audit(2000001118.770:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22431 comm="syz.2.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5558e969 code=0x7ffc0000 [ 1488.196752][ T27] audit: type=1326 audit(2000001118.770:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22431 comm="syz.2.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5b5558d37c code=0x7ffc0000 [ 1488.234212][ T27] audit: type=1326 audit(2000001118.770:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22431 comm="syz.2.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5558e969 code=0x7ffc0000 [ 1488.256655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1488.286956][ T27] audit: type=1326 audit(2000001118.770:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22431 comm="syz.2.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5558e969 code=0x7ffc0000 [ 1488.309402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1488.348540][T22438] loop2: detected capacity change from 0 to 128 [ 1488.369407][T22438] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1488.389074][T22438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1488.404359][T22438] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.5688: Block bitmap for bg 0 marked uninitialized [ 1488.459111][T15523] EXT4-fs (loop2): unmounting filesystem. [ 1489.112508][T15394] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1489.193579][T22450] fuse: Bad value for 'fd' [ 1489.310246][T15394] usb 4-1: Using ep0 maxpacket: 16 [ 1489.327115][T15394] usb 4-1: config 0 has no interfaces? [ 1489.336286][T15394] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1489.345791][T15394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.354817][T15394] usb 4-1: Product: syz [ 1489.359117][T15394] usb 4-1: Manufacturer: syz [ 1489.375620][T15394] usb 4-1: SerialNumber: syz [ 1489.394643][T15394] usb 4-1: config 0 descriptor?? [ 1489.673368][T22447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.708988][T22447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.780831][ T27] audit: type=1326 audit(2000001120.420:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22457 comm="syz.0.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924778e969 code=0x7ffc0000 [ 1489.834741][ T27] audit: type=1326 audit(2000001120.440:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22457 comm="syz.0.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f924778d37c code=0x7ffc0000 [ 1489.857016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1489.975080][ T27] audit: type=1326 audit(2000001120.440:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22457 comm="syz.0.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924778e969 code=0x7ffc0000 [ 1490.044285][T22464] loop0: detected capacity change from 0 to 1024 [ 1490.083633][T22462] loop1: detected capacity change from 0 to 512 [ 1490.162396][T22462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1490.912568][T22470] hfsplus: b-tree write err: -5, ino 4 [ 1490.922826][ T27] audit: type=1800 audit(2000001121.550:3312): pid=22462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5699" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1490.975704][T15768] EXT4-fs (loop1): unmounting filesystem. [ 1491.188881][T22480] loop0: detected capacity change from 0 to 512 [ 1491.206330][T22480] EXT4-fs: Ignoring removed mblk_io_submit option [ 1491.248093][T22480] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1491.267589][T22480] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.5703: attempt to clear invalid blocks 2 len 1 [ 1491.295639][T22480] EXT4-fs (loop0): Remounting filesystem read-only [ 1491.303930][T22480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1491.327278][T22480] EXT4-fs (loop0): Remounting filesystem read-only [ 1491.343065][T22480] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5703: invalid indirect mapped block 1819239214 (level 0) [ 1491.371691][T22480] EXT4-fs (loop0): Remounting filesystem read-only [ 1491.399239][T22480] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5703: invalid indirect mapped block 1819239214 (level 1) [ 1491.467292][T22480] EXT4-fs (loop0): Remounting filesystem read-only [ 1491.485365][T22480] EXT4-fs (loop0): 1 truncate cleaned up [ 1491.498421][T22480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1491.584017][T22480] cgroup2: Unknown parameter 'hugetlb' [ 1491.646727][T14962] EXT4-fs (loop0): unmounting filesystem. [ 1491.699378][ T27] audit: type=1326 audit(2000001122.330:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.1.5708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0feb8e969 code=0x7ffc0000 [ 1491.927851][T22495] loop2: detected capacity change from 0 to 1024 [ 1491.957190][T22497] loop1: detected capacity change from 0 to 256 [ 1492.018778][T22495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1492.031207][T22495] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1492.044744][T19190] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1492.090377][T15394] usb 4-1: USB disconnect, device number 22 [ 1492.138367][T22501] loop0: detected capacity change from 0 to 256 [ 1492.179878][T15523] EXT4-fs (loop2): unmounting filesystem. [ 1492.875986][T22523] loop4: detected capacity change from 0 to 512 [ 1492.915660][T22523] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.5719: bad orphan inode 134217728 [ 1492.929643][T22523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1492.952395][T22523] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1493.019933][T14520] EXT4-fs (loop4): unmounting filesystem. [ 1493.125056][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1493.125073][ T27] audit: type=1326 audit(2000001123.760:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcead8e969 code=0x7ffc0000 [ 1493.198837][ T27] audit: type=1326 audit(2000001123.760:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdcead8d37c code=0x7ffc0000 [ 1493.252350][ T27] audit: type=1326 audit(2000001123.760:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcead8e969 code=0x7ffc0000 [ 1493.670578][T16496] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1493.860244][T16496] usb 4-1: Using ep0 maxpacket: 16 [ 1493.867147][T16496] usb 4-1: config 0 has no interfaces? [ 1493.875197][T16496] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1493.884826][T16496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.893013][T16496] usb 4-1: Product: syz [ 1493.897312][T16496] usb 4-1: Manufacturer: syz [ 1493.902011][T16496] usb 4-1: SerialNumber: syz [ 1493.916276][T16496] usb 4-1: config 0 descriptor?? [ 1494.165393][T22534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.178173][T22534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.353852][T12719] usb 4-1: USB disconnect, device number 23 [ 1496.788693][T22565] loop3: detected capacity change from 0 to 256 [ 1496.998193][T22565] FAT-fs (loop3): Directory bread(block 64) failed [ 1497.050223][T22565] FAT-fs (loop3): Directory bread(block 65) failed [ 1497.070435][T22565] FAT-fs (loop3): Directory bread(block 66) failed [ 1497.077043][T22565] FAT-fs (loop3): Directory bread(block 67) failed [ 1497.101270][T22565] FAT-fs (loop3): Directory bread(block 68) failed [ 1497.120254][T22565] FAT-fs (loop3): Directory bread(block 69) failed [ 1497.132349][T22565] FAT-fs (loop3): Directory bread(block 70) failed [ 1497.159530][T22565] FAT-fs (loop3): Directory bread(block 71) failed [ 1497.180543][T22565] FAT-fs (loop3): Directory bread(block 72) failed [ 1497.187085][T22565] FAT-fs (loop3): Directory bread(block 73) failed [ 1497.399070][T22565] syz.3.5736: attempt to access beyond end of device [ 1497.399070][T22565] loop3: rw=2049, sector=1224, nr_sectors = 100 limit=256 [ 1498.525109][ T4297] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1498.720276][ T4297] usb 4-1: Using ep0 maxpacket: 8 [ 1498.729708][ T4297] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1498.752849][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.790594][ T4297] usb 4-1: Product: syz [ 1498.805030][ T4297] usb 4-1: Manufacturer: syz [ 1498.885904][ T4297] usb 4-1: SerialNumber: syz [ 1498.903812][ T4297] usb 4-1: config 0 descriptor?? [ 1499.431169][ T4301] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1499.433408][ T128] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1499.460235][ T4301] dvb_usb_az6007: probe of 3-1:0.0 failed with error -2 [ 1499.472143][ T128] dvb_usb_az6007: probe of 5-1:0.0 failed with error -110 [ 1499.490862][T22573] loop2: detected capacity change from 0 to 2048 [ 1499.510560][ T128] usb 5-1: USB disconnect, device number 100 [ 1499.540025][T22573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881 [ 1499.574257][T22575] loop1: detected capacity change from 0 to 1024 [ 1499.580771][ T4301] usb 3-1: USB disconnect, device number 112 [ 1499.589275][T22573] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x98 != 0x00 [ 1499.616768][T22573] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh [ 1499.634560][T22573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881 [ 1499.727121][T22573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=19137, location=19137 [ 1499.791191][ T4297] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1499.803896][ T4297] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1499.815302][ T4297] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1500.043408][T22573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881 [ 1500.145600][T22573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=19137, location=19137 [ 1500.251050][ T6072] hfsplus: b-tree write err: -5, ino 4 [ 1500.264529][T22573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881 [ 1500.309952][T22573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=19137, location=19137 [ 1500.332662][T22573] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1500.526830][T22588] loop4: detected capacity change from 0 to 512 [ 1500.626141][T22588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1500.843657][T22605] netlink: 'syz.1.5746': attribute type 10 has an invalid length. [ 1501.180542][T15394] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1501.380310][T15394] usb 3-1: Using ep0 maxpacket: 16 [ 1501.389117][T15394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.461756][T22611] loop3: detected capacity change from 0 to 128 [ 1501.532761][T15394] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1501.545112][T22611] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1501.613744][T15394] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1501.623420][ T27] audit: type=1800 audit(2000001132.260:3321): pid=22588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5744" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1501.667352][T22611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1501.689143][T15394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.710006][T22611] ext4 filesystem being mounted at /500/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.748353][T15394] usb 3-1: config 0 descriptor?? [ 1501.850526][T14520] EXT4-fs (loop4): unmounting filesystem. [ 1502.220260][T16496] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1502.355445][T15307] EXT4-fs (loop3): unmounting filesystem. [ 1502.431501][T16496] usb 5-1: not running at top speed; connect to a high speed hub [ 1502.474560][T16496] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1502.522511][T16496] usb 5-1: config 1 has no interface number 1 [ 1502.547646][T16496] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1502.585507][T16496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.623614][T16496] usb 5-1: Product: syz [ 1502.639524][T16496] usb 5-1: Manufacturer: syz [ 1502.651411][T16496] usb 5-1: SerialNumber: syz [ 1502.883084][T16496] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1502.898640][T16496] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1502.944708][T16496] usb 5-1: USB disconnect, device number 101 [ 1503.156281][T22632] loop0: detected capacity change from 0 to 256 [ 1503.189259][T22632] exfat: Unknown parameter '' [ 1503.194649][T16006] udevd[16006]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1505.650436][ T128] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1505.866116][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 1505.883777][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.893044][T15394] usb 3-1: USB disconnect, device number 113 [ 1505.927777][ T128] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1505.938766][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.973854][ T128] usb 5-1: config 0 descriptor?? [ 1505.995352][ T128] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1506.036448][T22653] loop2: detected capacity change from 0 to 2048 [ 1506.059894][T22653] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1506.118943][T22653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1506.161431][T22655] fuse: Bad value for 'fd' [ 1506.990565][ T128] gspca_vc032x: reg_r err -32 [ 1506.995552][ T128] vc032x: probe of 5-1:0.0 failed with error -32 [ 1507.200250][T15394] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1507.391865][T15394] usb 3-1: Using ep0 maxpacket: 32 [ 1507.399146][T15394] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1507.408816][T15394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.431914][T15394] usb 3-1: config 0 descriptor?? [ 1507.445337][T15394] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1507.451774][T22686] netlink: 'syz.0.5777': attribute type 10 has an invalid length. [ 1508.054820][ T128] usb 5-1: USB disconnect, device number 102 [ 1508.815615][ T27] audit: type=1326 audit(2000001139.450:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22700 comm="syz.4.5784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcead8e969 code=0x0 [ 1509.246711][T15394] gspca_vc032x: reg_r err -71 [ 1509.252769][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.258192][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.292734][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.298097][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.343869][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.349248][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.377807][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.398093][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.429546][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.449302][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.462035][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.474275][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.485660][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.497469][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.502854][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.508166][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.533755][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.545191][T15394] gspca_vc032x: I2c Bus Busy Wait 00 [ 1509.557816][T15394] gspca_vc032x: Unknown sensor... [ 1509.568970][T15394] vc032x: probe of 3-1:0.0 failed with error -22 [ 1509.600464][T15394] usb 3-1: USB disconnect, device number 114 [ 1509.813575][T22714] loop2: detected capacity change from 0 to 128 [ 1509.850356][T22714] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1509.881182][T22714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1509.970279][ T128] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1510.107460][T15523] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 1510.124501][T15523] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 1510.220245][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 1510.228839][ T128] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1510.269782][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.279149][T22708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.343885][ T128] usb 5-1: Product: syz [ 1510.352653][T22708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.365015][ T128] usb 5-1: Manufacturer: syz [ 1510.369660][ T128] usb 5-1: SerialNumber: syz [ 1510.414260][ T128] usb 5-1: config 0 descriptor?? [ 1510.440042][T22470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.683418][T22470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.844309][T22470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.976997][T22470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.034371][T22721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1511.044923][T22721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1511.054609][T22721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1511.073999][T22721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1511.083965][T22721] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1511.092653][T22721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1511.105651][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1511.114299][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1511.123201][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1511.131359][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1511.139127][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1511.147003][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1511.243472][ T128] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1511.366634][T22470] tipc: Left network mode [ 1511.395897][T22720] chnl_net:caif_netlink_parms(): no params data found [ 1511.534704][T22729] loop1: detected capacity change from 0 to 512 [ 1511.546714][T22720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.547185][T22729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1511.559387][T22720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.574542][T22720] device bridge_slave_0 entered promiscuous mode [ 1511.578977][T22729] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.5794: bad orphan inode 134217728 [ 1511.583352][T22720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.599001][T22720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.612347][T22720] device bridge_slave_1 entered promiscuous mode [ 1511.619518][T22729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1511.629462][T22729] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.716224][T22720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.729793][T15768] EXT4-fs (loop1): unmounting filesystem. [ 1511.779473][T22720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.903170][T22720] team0: Port device team_slave_0 added [ 1511.935933][T22720] team0: Port device team_slave_1 added [ 1511.964943][T22720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.973510][T22720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.008611][T22720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.062501][T22720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.072614][T22720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.099801][T22720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.111967][T22738] netlink: 'syz.1.5796': attribute type 10 has an invalid length. [ 1512.131981][T22738] team0: Port device wlan1 added [ 1512.189429][T22720] device hsr_slave_0 entered promiscuous mode [ 1512.196314][T22720] device hsr_slave_1 entered promiscuous mode [ 1512.204345][T22720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.212284][T22720] Cannot create hsr debugfs directory [ 1512.484931][T22720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1512.495025][T22720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1512.529328][T22720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1512.639807][T22720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1512.723598][T22470] device hsr_slave_0 left promiscuous mode [ 1512.746679][T22470] device hsr_slave_1 left promiscuous mode [ 1512.817163][T22470] device veth1_macvtap left promiscuous mode [ 1512.828134][T22470] device veth0_macvtap left promiscuous mode [ 1512.844449][T22470] device veth1_vlan left promiscuous mode [ 1512.862026][T22470] device veth0_vlan left promiscuous mode [ 1513.191924][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 1514.879658][ T27] audit: type=1326 audit(2000001145.510:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22766 comm="syz.4.5805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcead8e969 code=0x0 [ 1515.273629][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 1516.998915][T22470] bond0 (unregistering): Released all slaves [ 1517.350328][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 1517.494083][T22720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.510799][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1517.518916][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1517.530353][T22720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.577950][T22720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1517.588629][T22720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1517.628417][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1517.640870][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1517.660950][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.668093][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.677535][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1517.686600][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1517.699410][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.706574][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.715577][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1517.724851][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1517.734030][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1517.743161][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1517.752034][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1517.761078][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1517.769842][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1517.800456][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1517.827403][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1517.855543][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1517.939860][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1517.969824][T22789] loop3: detected capacity change from 0 to 16 [ 1517.986443][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1518.142704][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1518.179581][T22789] erofs: (device loop3): mounted with root inode @ nid 36. [ 1519.289163][T22799] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5813'. [ 1519.397889][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1519.416006][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1519.430541][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 1519.442580][T22720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.634038][T22804] netlink: 'syz.4.5814': attribute type 10 has an invalid length. [ 1519.673876][T22804] team0: Port device wlan1 added [ 1519.961080][T22810] loop1: detected capacity change from 0 to 256 [ 1519.983184][T22810] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1520.027691][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.050586][T22810] FAT-fs (loop1): Filesystem has been set read-only [ 1520.069324][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.110610][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.152986][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.179541][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.209914][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.242890][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.264286][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.287948][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.315986][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.337421][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1520.365639][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1520.388571][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.399385][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.418444][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.427460][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1520.436550][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1520.446037][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.457277][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1520.472222][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.484907][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1520.493899][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.502967][T22720] device veth0_vlan entered promiscuous mode [ 1520.513867][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.523934][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.535472][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.547441][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.558356][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.565963][T22720] device veth1_vlan entered promiscuous mode [ 1520.577771][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.589556][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.606032][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.625991][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.645404][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.658555][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.678470][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.695570][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.714632][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.730071][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.747974][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.764302][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.779921][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.812694][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1520.824316][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.853526][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1520.867138][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.889293][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.889548][T22720] device veth0_macvtap entered promiscuous mode [ 1520.907482][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.926572][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.950973][T22720] device veth1_macvtap entered promiscuous mode [ 1520.956989][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1520.978739][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.015613][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.023375][T22720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.038523][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.060357][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.069796][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1521.101016][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1521.108768][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.135650][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1521.150473][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.166080][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1521.174762][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.191785][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.198017][T22720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.200666][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.226670][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1521.238284][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.248093][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1521.268065][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.278832][T22720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.297918][T22720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.297937][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.326021][T22720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.345040][T22720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.351541][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.394054][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.418957][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.457586][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.490316][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.519123][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.529363][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.535094][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.560430][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.569023][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.578903][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1521.597274][ T4577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.602316][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.609720][ T4577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.637414][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1521.640558][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.690467][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.699062][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.736916][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.765340][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.797534][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.841531][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.850117][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.894924][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.939366][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.948302][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.980258][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1521.988847][T22810] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1522.030687][ T27] audit: type=1800 audit(2000001152.670:3324): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5811" name="file1" dev="loop1" ino=1048625 res=0 errno=0 [ 1522.160274][T16496] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1522.350336][T16496] usb 6-1: Using ep0 maxpacket: 16 [ 1522.364298][T16496] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1522.406744][T16496] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.449142][T16496] usb 6-1: config 0 has no interface number 0 [ 1522.455710][T16496] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1522.490271][T16496] usb 6-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.529915][T16496] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1522.581988][T16496] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1522.594256][T22470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.605232][T16496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.627408][T22721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1522.636015][T16496] usb 6-1: Product: syz [ 1522.647061][T22721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1522.656461][T16496] usb 6-1: Manufacturer: syz [ 1522.662937][T15771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1522.668208][T16496] usb 6-1: SerialNumber: syz [ 1522.675959][T15771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1522.683712][T15771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1522.691892][T15771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1522.692393][T16496] usb 6-1: config 0 descriptor?? [ 1522.736416][T22822] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1522.767658][T16496] dm9601: probe of 6-1:0.41 failed with error -22 [ 1522.787783][T16496] sr9700: probe of 6-1:0.41 failed with error -22 [ 1522.838056][T22470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.931482][T22470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.041775][T22470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.224619][T22829] chnl_net:caif_netlink_parms(): no params data found [ 1523.235569][T22842] loop0: detected capacity change from 0 to 1024 [ 1523.243658][T22842] EXT4-fs: Ignoring removed orlov option [ 1523.249550][T22842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1523.279889][T22842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1523.354702][T14962] EXT4-fs (loop0): unmounting filesystem. [ 1523.361758][T22470] tipc: Left network mode [ 1523.362241][T22829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.373529][T22829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.389306][T22829] device bridge_slave_0 entered promiscuous mode [ 1523.398625][T22829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.406313][T22829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.421847][T22829] device bridge_slave_1 entered promiscuous mode [ 1523.452440][T22829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.464372][T22829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.556051][T22829] team0: Port device team_slave_0 added [ 1523.587657][T22829] team0: Port device team_slave_1 added [ 1523.596385][T22854] loop0: detected capacity change from 0 to 2048 [ 1523.615003][T22829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.622177][T22829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.649709][T22829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.663689][T22829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.671369][T22829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.671491][T22854] loop0: p1 < > p3 [ 1523.697712][T22829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.714129][T22854] loop0: p3 size 134217728 extends beyond EOD, truncated [ 1523.776620][T22829] device hsr_slave_0 entered promiscuous mode [ 1523.783561][T22829] device hsr_slave_1 entered promiscuous mode [ 1523.789937][T22829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1523.797602][T22829] Cannot create hsr debugfs directory [ 1524.294832][T22470] team0: Port device wlan1 removed [ 1524.313180][T22829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1524.323812][T22829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1524.332989][T22829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1524.342619][T22829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1524.457831][T22829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.486965][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1524.496409][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1524.508101][T22829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.518374][T22470] device hsr_slave_0 left promiscuous mode [ 1524.527883][T22470] device hsr_slave_1 left promiscuous mode [ 1524.545336][T22470] device veth1_macvtap left promiscuous mode [ 1524.551664][T22470] device veth0_macvtap left promiscuous mode [ 1524.557705][T22470] device veth1_vlan left promiscuous mode [ 1524.563760][T22470] device veth0_vlan left promiscuous mode [ 1524.800476][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 1524.925784][T11716] usb 6-1: USB disconnect, device number 2 [ 1525.644113][T22871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5833'. [ 1526.346500][T22883] loop1: detected capacity change from 0 to 1024 [ 1526.915427][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 1527.003434][ T5311] hfsplus: b-tree write err: -5, ino 4 [ 1527.112622][T22892] loop5: detected capacity change from 0 to 512 [ 1527.155263][T22892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1527.158969][T22894] loop1: detected capacity change from 0 to 256 [ 1527.234770][T22894] FAT-fs (loop1): Directory bread(block 64) failed [ 1527.240639][T22892] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1527.246580][T22894] FAT-fs (loop1): Directory bread(block 65) failed [ 1527.257636][T22894] FAT-fs (loop1): Directory bread(block 66) failed [ 1527.263554][T22892] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.270911][T22894] FAT-fs (loop1): Directory bread(block 67) failed [ 1527.295975][T22894] FAT-fs (loop1): Directory bread(block 68) failed [ 1527.297676][T22892] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.5841: verity file corrupted; can't find descriptor [ 1527.314374][T22894] FAT-fs (loop1): Directory bread(block 69) failed [ 1527.324349][T22894] FAT-fs (loop1): Directory bread(block 70) failed [ 1527.331065][T22894] FAT-fs (loop1): Directory bread(block 71) failed [ 1527.337711][T22894] FAT-fs (loop1): Directory bread(block 72) failed [ 1527.344777][T22894] FAT-fs (loop1): Directory bread(block 73) failed [ 1527.373923][T22892] EXT4-fs (loop5): Remounting filesystem read-only [ 1527.380884][T22892] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 1527.397826][T22470] bond0 (unregistering): Released all slaves [ 1527.438250][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1527.446954][T22894] syz.1.5839: attempt to access beyond end of device [ 1527.446954][T22894] loop1: rw=2049, sector=1224, nr_sectors = 100 limit=256 [ 1527.549161][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.558680][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.571820][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.579011][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.589822][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1527.599267][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.609267][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.616385][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.625863][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1527.634911][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.656795][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1527.695857][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1527.743482][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1527.772701][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1527.871215][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1527.904508][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1527.923330][T12719] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1528.162339][T12719] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1528.189678][T12719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.207796][T12719] usb 6-1: Product: syz [ 1528.222654][T12719] usb 6-1: Manufacturer: syz [ 1528.227412][T12719] usb 6-1: SerialNumber: syz [ 1528.993333][T15771] Bluetooth: hci4: command 0x040f tx timeout [ 1529.007567][T22829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1529.020317][T12719] usb 6-1: config 0 descriptor?? [ 1529.052609][T22829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1529.074994][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1529.091254][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1529.100075][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1529.116111][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1529.126970][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1529.444344][T12719] airspy 6-1:0.0: Board ID: 05 [ 1529.449190][T12719] airspy 6-1:0.0: Firmware version:  [ 1529.717090][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1529.739365][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1529.783411][T22829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.845722][T12719] airspy 6-1:0.0: usb_control_msg() failed -32 request 0e [ 1529.858836][T12719] airspy 6-1:0.0: Registered as swradio24 [ 1529.873932][T12719] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1530.254361][T22933] loop1: detected capacity change from 0 to 2048 [ 1530.315282][T22933] loop1: p1 < > p3 [ 1530.332793][T22933] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1530.433599][T22937] loop3: detected capacity change from 0 to 8192 [ 1530.599294][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1530.608942][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1530.637962][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1530.653261][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1530.666147][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1530.679797][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1530.692412][T22829] device veth0_vlan entered promiscuous mode [ 1530.719889][T22829] device veth1_vlan entered promiscuous mode [ 1530.755467][T22946] loop3: detected capacity change from 0 to 128 [ 1530.757708][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1530.771724][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1530.780031][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1530.783543][T22946] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1530.790036][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1530.804964][T22946] FAT-fs (loop3): Filesystem has been set read-only [ 1530.813653][T22829] device veth0_macvtap entered promiscuous mode [ 1530.828395][T22829] device veth1_macvtap entered promiscuous mode [ 1530.846156][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.858144][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.869642][T22829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.884133][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1530.896911][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1530.915804][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1530.916371][T12719] usb 6-1: USB disconnect, device number 3 [ 1530.924800][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1530.950456][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.962099][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.978421][T22829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.987209][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1531.012665][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1531.030901][T15771] Bluetooth: hci4: command 0x0419 tx timeout [ 1531.040980][T22829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.049728][T22829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.069169][T22829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.079482][T22829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.253025][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.280035][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.308297][ T5311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.311625][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1531.331122][ T5311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.355837][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1531.479307][T22961] loop4: detected capacity change from 0 to 128 [ 1531.576993][T22962] syz.4.5817: attempt to access beyond end of device [ 1531.576993][T22962] loop4: rw=2049, sector=145, nr_sectors = 864 limit=128 [ 1531.694290][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.694290][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.711602][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.711602][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.726866][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.726866][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.740888][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.740888][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.755286][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.755286][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.769489][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.769489][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.783311][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.783311][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.804352][T22961] syz.4.5817: attempt to access beyond end of device [ 1531.804352][T22961] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1531.890348][T16496] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1531.948649][T22966] loop4: detected capacity change from 0 to 256 [ 1532.005272][T22966] FAT-fs (loop4): Directory bread(block 64) failed [ 1532.012351][T22966] FAT-fs (loop4): Directory bread(block 65) failed [ 1532.018969][T22966] FAT-fs (loop4): Directory bread(block 66) failed [ 1532.026012][T22966] FAT-fs (loop4): Directory bread(block 67) failed [ 1532.033135][T22966] FAT-fs (loop4): Directory bread(block 68) failed [ 1532.047111][T22966] FAT-fs (loop4): Directory bread(block 69) failed [ 1532.054221][T22966] FAT-fs (loop4): Directory bread(block 70) failed [ 1532.061132][T22966] FAT-fs (loop4): Directory bread(block 71) failed [ 1532.068306][T22966] FAT-fs (loop4): Directory bread(block 72) failed [ 1532.076097][T22966] FAT-fs (loop4): Directory bread(block 73) failed [ 1532.084957][T16496] usb 6-1: not running at top speed; connect to a high speed hub [ 1532.104761][T16496] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1532.126376][T16496] usb 6-1: config 1 has no interface number 1 [ 1532.143393][T16496] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1532.174082][T16496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.193796][T16496] usb 6-1: Product: syz [ 1532.214010][T16496] usb 6-1: Manufacturer: syz [ 1532.218730][T16496] usb 6-1: SerialNumber: syz [ 1532.456970][T16496] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1532.458146][T22970] loop4: detected capacity change from 0 to 1024 [ 1532.474906][T16496] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1532.510824][T16496] usb 6-1: USB disconnect, device number 4 [ 1532.551639][ T6072] hfsplus: b-tree write err: -5, ino 4 [ 1533.483357][T22982] loop0: detected capacity change from 0 to 1024 [ 1533.517324][T22985] loop5: detected capacity change from 0 to 1024 [ 1533.601194][T22985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1533.609761][T22985] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.691253][ T27] audit: type=1800 audit(2000001164.330:3325): pid=22985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5881" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1533.874522][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1533.943092][T22996] loop1: detected capacity change from 0 to 2048 [ 1533.990063][T22996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1534.244286][T23006] loop3: detected capacity change from 0 to 2048 [ 1534.317245][T23006] loop3: p1 < > p3 [ 1534.332405][T23006] loop3: p3 size 134217728 extends beyond EOD, truncated [ 1534.387030][T23018] loop1: detected capacity change from 0 to 8192 [ 1534.481847][T23018] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1534.496777][T23018] FAT-fs (loop1): Filesystem has been set read-only [ 1536.673296][T23039] loop1: detected capacity change from 0 to 256 [ 1537.593638][T23061] loop3: detected capacity change from 0 to 256 [ 1537.601400][T23061] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1538.301494][T23067] loop5: detected capacity change from 0 to 1024 [ 1538.378217][T23067] EXT4-fs: Ignoring removed nobh option [ 1538.428790][T23067] EXT4-fs: Ignoring removed bh option [ 1538.502132][T23067] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1538.650904][T23067] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1538.670564][T23067] EXT4-fs (loop5): shut down requested (1) [ 1538.728841][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1538.806406][T16496] kernel write not supported for file /snd/seq (pid: 16496 comm: kworker/0:7) [ 1538.908531][T23085] loop1: detected capacity change from 0 to 1024 [ 1538.954426][T23085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1538.969957][T23085] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.017190][T23085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1539.046046][T23085] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1539.062068][T23085] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1539.062068][T23085] [ 1539.081828][T23085] EXT4-fs (loop1): Total free blocks count 0 [ 1539.087940][T23085] EXT4-fs (loop1): Free/Dirty block details [ 1539.094341][T23085] EXT4-fs (loop1): free_blocks=4293918720 [ 1539.100444][T23085] EXT4-fs (loop1): dirty_blocks=96 [ 1539.109269][T23085] EXT4-fs (loop1): Block reservation details [ 1539.124391][ T6310] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1539.183366][T23085] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 1539.276940][ T27] audit: type=1326 audit(2000001169.910:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.312810][ T27] audit: type=1326 audit(2000001169.940:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.341410][ T27] audit: type=1326 audit(2000001169.940:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.374149][T23096] netlink: 'syz.4.5913': attribute type 10 has an invalid length. [ 1539.383153][ T27] audit: type=1326 audit(2000001169.940:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.410273][ T27] audit: type=1326 audit(2000001169.940:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.491723][T23096] team0: Port device wlan1 added [ 1539.496856][ T27] audit: type=1326 audit(2000001169.940:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.535265][ T27] audit: type=1326 audit(2000001169.940:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.566757][ T27] audit: type=1326 audit(2000001169.940:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.596970][ T27] audit: type=1326 audit(2000001169.940:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.628650][ T27] audit: type=1326 audit(2000001169.940:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.1.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0feb2ab39 code=0x7ffc0000 [ 1539.839338][T23098] loop5: detected capacity change from 0 to 1024 [ 1540.891390][T23105] loop0: detected capacity change from 0 to 256 [ 1540.940976][T23105] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1540.980305][T23105] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1541.051761][T23105] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1541.283995][T23113] loop3: detected capacity change from 0 to 16 [ 1541.318087][T23114] loop5: detected capacity change from 0 to 256 [ 1541.328636][T23113] erofs: (device loop3): mounted with root inode @ nid 36. [ 1541.431293][T23114] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1541.538348][T23114] exFAT-fs (loop5): error, invalid size(size(0) > aligned(9223372036854777344) [ 1541.538348][T23114] [ 1541.580231][T23114] exFAT-fs (loop5): Filesystem has been set read-only [ 1543.215920][T23138] loop5: detected capacity change from 0 to 128 [ 1543.249318][T23139] loop1: detected capacity change from 0 to 256 [ 1543.256834][T23139] exfat: Deprecated parameter 'utf8' [ 1543.262458][T23139] exfat: Deprecated parameter 'namecase' [ 1543.268139][T23139] exfat: Deprecated parameter 'utf8' [ 1543.275377][T23139] exfat: Bad value for 'uid' [ 1543.623348][T23147] netlink: 'syz.1.5934': attribute type 10 has an invalid length. [ 1543.891311][T15394] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1544.100282][T15394] usb 6-1: Using ep0 maxpacket: 8 [ 1544.109408][T15394] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1544.123082][T15394] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1544.134160][T15394] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1544.147006][T15394] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1544.178848][T15394] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1544.189062][T15394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.408619][T15394] usb 6-1: usb_control_msg returned -32 [ 1544.414882][T15394] usbtmc 6-1:16.0: can't read capabilities [ 1544.448893][T15394] usb 6-1: USB disconnect, device number 5 [ 1544.545512][T23158] loop3: detected capacity change from 0 to 1024 [ 1545.091604][ T6310] hfsplus: b-tree write err: -5, ino 4 [ 1545.511922][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.518310][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.764797][T23171] loop3: detected capacity change from 0 to 2048 [ 1545.847672][T23171] UDF-fs: bad mount option "s" or missing value [ 1546.264465][T23185] loop0: detected capacity change from 0 to 1024 [ 1546.810321][ T4577] hfsplus: b-tree write err: -5, ino 4 [ 1546.974195][ T27] kauditd_printk_skb: 1679 callbacks suppressed [ 1546.974214][ T27] audit: type=1326 audit(2000001177.610:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6192ab39 code=0x7ffc0000 [ 1547.063930][ T27] audit: type=1326 audit(2000001177.610:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6198e969 code=0x7ffc0000 [ 1547.088920][T23196] loop0: detected capacity change from 0 to 1024 [ 1547.097806][ T27] audit: type=1326 audit(2000001177.610:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6192ab39 code=0x7ffc0000 [ 1547.150457][ T27] audit: type=1326 audit(2000001177.610:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6192ab39 code=0x7ffc0000 [ 1547.182913][ T27] audit: type=1326 audit(2000001177.610:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6192ab39 code=0x7ffc0000 [ 1547.207415][ T27] audit: type=1326 audit(2000001177.610:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6198e969 code=0x7ffc0000 [ 1547.232342][ T27] audit: type=1326 audit(2000001177.610:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6192ab39 code=0x7ffc0000 [ 1547.256895][ T27] audit: type=1326 audit(2000001177.610:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6198e969 code=0x7ffc0000 [ 1547.305468][ T27] audit: type=1326 audit(2000001177.610:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6192ab39 code=0x7ffc0000 [ 1547.593370][ T27] audit: type=1326 audit(2000001177.610:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.5.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6198e969 code=0x7ffc0000 [ 1547.958258][T23199] xt_hashlimit: max too large, truncated to 1048576 [ 1548.033340][T23201] loop4: detected capacity change from 0 to 256 [ 1548.044498][T23201] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1548.060597][T23201] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1548.193220][T23201] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1548.363012][T23211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5956'. [ 1548.591624][ T4301] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1548.831176][ T4301] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1548.872538][ T4301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.980232][ T4301] usb 6-1: Product: syz [ 1548.985459][ T4301] usb 6-1: Manufacturer: syz [ 1548.997126][ T4301] usb 6-1: SerialNumber: syz [ 1549.004618][ T4301] usb 6-1: config 0 descriptor?? [ 1549.465091][ T4301] airspy 6-1:0.0: Board ID: 05 [ 1549.469992][ T4301] airspy 6-1:0.0: Firmware version:  [ 1549.872750][ T4301] airspy 6-1:0.0: usb_control_msg() failed -32 request 0e [ 1549.892786][ T4301] airspy 6-1:0.0: Registered as swradio24 [ 1549.899220][ T4301] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1551.388087][T15394] usb 6-1: USB disconnect, device number 6 [ 1551.526620][T23244] loop1: detected capacity change from 0 to 1024 [ 1552.026934][ T4390] hfsplus: b-tree write err: -5, ino 4 [ 1552.226109][T23258] netlink: 'syz.5.5973': attribute type 10 has an invalid length. [ 1552.360713][T23258] team0: Port device wlan1 added [ 1552.431335][T23263] loop1: detected capacity change from 0 to 512 [ 1552.445037][T23263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1552.467129][T23263] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.5976: Unimplemented hash flags: 0x0001 [ 1552.510685][T23263] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.5976: Corrupt directory, running e2fsck is recommended [ 1552.619974][T15768] EXT4-fs (loop1): unmounting filesystem. [ 1553.055653][T23282] loop1: detected capacity change from 0 to 1024 [ 1553.581730][ T4390] hfsplus: b-tree write err: -5, ino 4 [ 1555.320539][T23322] loop5: detected capacity change from 0 to 1024 [ 1555.889821][T23325] loop3: detected capacity change from 0 to 256 [ 1556.185141][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 1556.185153][ T27] audit: type=1800 audit(2000001186.820:5091): pid=23322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5998" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1556.463591][T23339] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1556.562568][T23346] loop5: detected capacity change from 0 to 2048 [ 1556.576857][T23346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1556.957604][T23358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6010'. [ 1557.907196][T23361] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1557.935290][T23361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1557.973939][T23361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1557.990271][T23361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1557.996409][T23363] loop1: detected capacity change from 0 to 2048 [ 1558.068407][T23363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1558.139519][T23376] loop5: detected capacity change from 0 to 256 [ 1558.186106][T23376] FAT-fs (loop5): Directory bread(block 64) failed [ 1558.216160][T23378] loop4: detected capacity change from 0 to 1024 [ 1558.226521][T23376] FAT-fs (loop5): Directory bread(block 65) failed [ 1558.234063][T23376] FAT-fs (loop5): Directory bread(block 66) failed [ 1558.241025][T23376] FAT-fs (loop5): Directory bread(block 67) failed [ 1558.252377][T23376] FAT-fs (loop5): Directory bread(block 68) failed [ 1558.271015][T23376] FAT-fs (loop5): Directory bread(block 69) failed [ 1558.278513][T23376] FAT-fs (loop5): Directory bread(block 70) failed [ 1558.289947][T23376] FAT-fs (loop5): Directory bread(block 71) failed [ 1558.321445][T23376] FAT-fs (loop5): Directory bread(block 72) failed [ 1558.356205][T15768] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1558.370294][T23376] FAT-fs (loop5): Directory bread(block 73) failed [ 1558.566269][T15768] EXT4-fs (loop1): unmounting filesystem. [ 1558.876305][ T4308] hfsplus: b-tree write err: -5, ino 4 [ 1559.013651][T23394] binder: 23392:23394 ioctl c018620b 200000000080 returned -14 [ 1559.314305][ T4390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.483972][ T4390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.609004][ T4390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.678450][T23410] loop3: detected capacity change from 0 to 2048 [ 1559.721353][T23410] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1559.733538][T23411] loop4: detected capacity change from 0 to 256 [ 1559.753000][T23411] exfat: Deprecated parameter 'utf8' [ 1559.758540][T23411] exfat: Deprecated parameter 'namecase' [ 1559.764665][T23411] exfat: Deprecated parameter 'utf8' [ 1559.777628][T23411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1559.799738][T23410] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1559.814096][ T4390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.878016][T23410] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1559.924372][T23414] loop5: detected capacity change from 0 to 1024 [ 1559.936865][T23415] loop4: detected capacity change from 0 to 256 [ 1559.953414][T23410] UDF-fs: Scanning with blocksize 512 failed [ 1560.197474][T23410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1560.496439][ T4308] hfsplus: b-tree write err: -5, ino 4 [ 1560.514776][T23415] FAT-fs (loop4): Directory bread(block 64) failed [ 1560.534575][T23415] FAT-fs (loop4): Directory bread(block 65) failed [ 1560.564515][T23415] FAT-fs (loop4): Directory bread(block 66) failed [ 1560.590587][T23415] FAT-fs (loop4): Directory bread(block 67) failed [ 1560.597270][T23415] FAT-fs (loop4): Directory bread(block 68) failed [ 1560.611768][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1560.630423][T23415] FAT-fs (loop4): Directory bread(block 69) failed [ 1560.630518][T22721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1560.637155][T23415] FAT-fs (loop4): Directory bread(block 70) failed [ 1560.646226][T22721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1560.669765][T22721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1560.677730][T22721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1560.685303][T22721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1560.864614][T23415] FAT-fs (loop4): Directory bread(block 71) failed [ 1560.874695][T23415] FAT-fs (loop4): Directory bread(block 72) failed [ 1560.882286][T23415] FAT-fs (loop4): Directory bread(block 73) failed [ 1561.057911][ T128] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1561.224629][ T4297] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1561.950732][ T128] dvb_usb_az6007: probe of 5-1:0.0 failed with error -2 [ 1561.957936][ T4297] dvb_usb_az6007: probe of 4-1:0.0 failed with error -110 [ 1562.017664][T19190] udevd[19190]: failed to send result of seq 30863 to main daemon: Connection refused [ 1562.035622][ T4297] usb 4-1: USB disconnect, device number 24 [ 1562.208160][ T128] usb 5-1: USB disconnect, device number 103 [ 1562.590314][T18191] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1562.668704][T23421] chnl_net:caif_netlink_parms(): no params data found [ 1562.718568][T15771] Bluetooth: hci1: command 0x0409 tx timeout [ 1562.791024][T18191] usb 6-1: Using ep0 maxpacket: 16 [ 1562.811500][T18191] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1562.819736][T18191] usb 6-1: config 0 has no interface number 0 [ 1562.838680][T18191] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1562.848677][T18191] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1562.859568][T18191] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1562.869709][T18191] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1562.894614][T18191] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1562.905382][T18191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.923401][T18191] usb 6-1: Product: syz [ 1562.927850][T18191] usb 6-1: Manufacturer: syz [ 1562.935428][T18191] usb 6-1: SerialNumber: syz [ 1562.943913][T18191] usb 6-1: config 0 descriptor?? [ 1562.949672][T23434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1562.962701][T18191] dm9601: probe of 6-1:0.41 failed with error -22 [ 1562.969347][T23443] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1562.979584][T18191] sr9700: probe of 6-1:0.41 failed with error -22 [ 1562.992778][T23443] device syzkaller0 entered promiscuous mode [ 1563.145537][T23452] netlink: 'syz.3.6038': attribute type 10 has an invalid length. [ 1563.163870][T23452] team0: Port device wlan1 added [ 1563.181107][ T4301] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1563.370225][ T4301] usb 5-1: Using ep0 maxpacket: 16 [ 1563.377736][ T4301] usb 5-1: config 0 has no interfaces? [ 1563.395051][ T4301] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1563.410415][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.418704][ T4301] usb 5-1: Product: syz [ 1563.424286][ T4301] usb 5-1: Manufacturer: syz [ 1563.429149][ T4301] usb 5-1: SerialNumber: syz [ 1563.436323][ T4301] usb 5-1: config 0 descriptor?? [ 1563.687018][T23446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.734209][T23446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.792612][T15771] Bluetooth: hci1: command 0x041b tx timeout [ 1565.354388][T15394] usb 6-1: USB disconnect, device number 7 [ 1565.930260][T15394] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1566.176528][T15394] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1566.185858][T15394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.193987][T15394] usb 6-1: Product: syz [ 1566.198344][T15394] usb 6-1: Manufacturer: syz [ 1566.203304][T15394] usb 6-1: SerialNumber: syz [ 1566.209972][T15394] usb 6-1: config 0 descriptor?? [ 1566.623569][T15394] airspy 6-1:0.0: Board ID: 05 [ 1566.628473][T15394] airspy 6-1:0.0: Firmware version:  [ 1566.751647][T23421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.758912][T23421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.767049][T23421] device bridge_slave_0 entered promiscuous mode [ 1566.777492][T23421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.800279][T23421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.809071][T23421] device bridge_slave_1 entered promiscuous mode [ 1566.880542][T15771] Bluetooth: hci1: command 0x040f tx timeout [ 1566.922931][T23421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.937425][T23421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.065763][ T4390] team0: Port device wlan1 removed [ 1567.081452][T23421] team0: Port device team_slave_0 added [ 1567.095976][T23421] team0: Port device team_slave_1 added [ 1567.163186][T23421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.176284][T23421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.209944][T23421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.228587][T15394] airspy 6-1:0.0: usb_control_msg() failed -32 request 12 [ 1567.242007][T15394] airspy 6-1:0.0: Registered as swradio24 [ 1567.247811][T15394] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1567.304208][T23421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.311673][ T128] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1567.321793][T23421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.350474][T23421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.388115][ T4390] device hsr_slave_0 left promiscuous mode [ 1567.394533][ T4390] device hsr_slave_1 left promiscuous mode [ 1567.414741][ T4390] device veth1_macvtap left promiscuous mode [ 1567.421499][ T4390] device veth0_macvtap left promiscuous mode [ 1567.427626][ T4390] device veth1_vlan left promiscuous mode [ 1567.442874][ T4390] device veth0_vlan left promiscuous mode [ 1567.530281][ T128] usb 4-1: Using ep0 maxpacket: 8 [ 1567.537750][ T128] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1567.550659][ T128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1567.560998][ T128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1567.571422][ T128] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1567.587244][ T128] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1567.598634][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.816956][ T128] usb 4-1: usb_control_msg returned -32 [ 1567.826140][ T128] usbtmc 4-1:16.0: can't read capabilities [ 1567.847185][ T128] usb 4-1: USB disconnect, device number 25 [ 1568.691792][ T4346] usb 6-1: USB disconnect, device number 8 [ 1568.758004][T23487] loop5: detected capacity change from 0 to 512 [ 1568.793840][T23487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1568.817097][T23487] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1568.862667][T23487] EXT4-fs (loop5): 1 truncate cleaned up [ 1568.882490][T23487] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1568.918457][T23487] fscrypt (loop5, inode 18): Direct key flag not allowed with different contents and filenames modes [ 1568.950249][T15771] Bluetooth: hci1: command 0x0419 tx timeout [ 1569.002734][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1569.063764][T23491] loop5: detected capacity change from 0 to 256 [ 1569.857717][ T4390] bond0 (unregistering): Released all slaves [ 1569.979719][T23421] device hsr_slave_0 entered promiscuous mode [ 1569.992835][T23421] device hsr_slave_1 entered promiscuous mode [ 1570.007486][T23421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1570.016267][T23421] Cannot create hsr debugfs directory [ 1570.298947][T23421] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1570.300213][T18191] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1570.311631][T23507] loop5: detected capacity change from 0 to 1024 [ 1570.333343][T23421] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1570.344542][T23507] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1570.376506][T23421] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1570.386026][T23507] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1570.405199][T23421] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1570.416506][T23507] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1570.447472][T23507] EXT4-fs error (device loop5): __ext4_iget:5076: inode #17: block 1803188595: comm syz.5.6063: invalid block [ 1570.474048][ T4301] usb 5-1: USB disconnect, device number 104 [ 1570.510193][T18191] usb 4-1: Using ep0 maxpacket: 8 [ 1570.516405][T23507] EXT4-fs (loop5): no journal found [ 1570.517201][T18191] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1570.552292][T18191] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1570.580317][T18191] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1570.591058][T18191] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1570.609301][T18191] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1570.619078][T18191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.672703][T23421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.709980][T23421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.753410][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1570.766776][T23517] loop5: detected capacity change from 0 to 128 [ 1570.770574][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1570.774056][T23517] EXT4-fs: Ignoring removed nobh option [ 1570.808053][T23517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1570.809374][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1570.828181][T23517] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1570.835136][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1570.856352][T23517] netlink: 'syz.5.6066': attribute type 1 has an invalid length. [ 1570.866360][T18191] usb 4-1: GET_CAPABILITIES returned 0 [ 1570.879038][T18191] usbtmc 4-1:16.0: can't read capabilities [ 1570.894770][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1570.904303][T23100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.911415][T23100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.930354][ T4301] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1570.940356][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1570.949252][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1570.977689][T23100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.984890][T23100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.001795][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1571.005070][T23520] loop5: detected capacity change from 0 to 256 [ 1571.029465][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1571.037883][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1571.056050][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1571.074016][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1571.096316][ T128] usb 4-1: USB disconnect, device number 26 [ 1571.105465][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1571.123648][ T4301] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1571.124992][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1571.150190][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.157528][T23421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1571.174974][T23421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1571.178675][ T4301] usb 5-1: Product: syz [ 1571.198584][ T4301] usb 5-1: Manufacturer: syz [ 1571.205112][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1571.221060][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1571.229260][ T4301] usb 5-1: SerialNumber: syz [ 1571.238418][ T4301] usb 5-1: config 0 descriptor?? [ 1571.244693][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1571.257493][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1571.267352][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1571.277339][T23100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1571.522174][T23533] kvm: emulating exchange as write [ 1571.671390][ T4301] airspy 5-1:0.0: Board ID: 05 [ 1571.676225][ T4301] airspy 5-1:0.0: Firmware version:  [ 1571.701996][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1571.709837][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1571.741342][T23421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.273585][ T4301] airspy 5-1:0.0: usb_control_msg() failed -32 request 12 [ 1572.300221][T15147] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1572.373708][ T4301] airspy 5-1:0.0: Registered as swradio24 [ 1572.486578][ T4301] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1572.560850][T15147] usb 4-1: Using ep0 maxpacket: 16 [ 1572.569776][T15147] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.590671][T15147] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1572.599702][T15147] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1572.626562][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1572.648115][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1572.667605][T15147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.690734][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1572.704258][T15147] usb 4-1: config 0 descriptor?? [ 1572.738523][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1572.772100][T23421] device veth0_vlan entered promiscuous mode [ 1572.783659][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1572.803401][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1572.831349][T23421] device veth1_vlan entered promiscuous mode [ 1572.908193][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1572.920808][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1572.941919][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1572.961398][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1572.982612][T23421] device veth0_macvtap entered promiscuous mode [ 1573.020328][T15147] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1573.048292][T23421] device veth1_macvtap entered promiscuous mode [ 1573.083775][T23421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.113220][T23421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.139602][T23421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.166967][T23421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.201125][T23421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.214072][T15147] usb 6-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.231895][T15147] usb 6-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.243069][T23421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1573.253809][T23421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.270661][T15147] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1573.280822][T15147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.294783][T23421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1573.325785][T23421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.352805][T23421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1573.372830][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1573.394422][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1573.419887][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1573.454064][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1573.475792][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1573.492526][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1573.517845][T23554] loop5: detected capacity change from 0 to 512 [ 1573.532848][T23421] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.560960][T23421] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.579829][T12719] usb 5-1: USB disconnect, device number 105 [ 1573.599950][T23554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1573.616281][T23554] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1573.640531][T23421] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.655655][T23560] loop4: detected capacity change from 0 to 128 [ 1573.696651][T23421] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.717164][T23560] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1573.895005][T15147] usbhid 6-1:9.0: can't add hid device: -71 [ 1573.900377][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.915325][T15147] usbhid: probe of 6-1:9.0 failed with error -71 [ 1573.936240][T23560] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1573.956997][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.960307][T15147] usb 6-1: USB disconnect, device number 9 [ 1574.008643][T22470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.024546][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1574.061896][T22470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.117199][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1574.409943][T23562] loop4: detected capacity change from 0 to 8192 [ 1574.498447][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1574.825659][T23571] loop5: detected capacity change from 0 to 4096 [ 1574.878630][T23571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1574.924472][T23571] EXT4-fs (loop5): shut down requested (2) [ 1575.037724][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1575.095952][ T4422] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1575.113538][ T4422] Quota error (device loop5): write_blk: dquota write failed [ 1575.132827][ T4422] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 1575.256763][ T128] usb 4-1: USB disconnect, device number 27 [ 1575.281316][T23586] loop5: detected capacity change from 0 to 512 [ 1575.321884][T23586] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1575.346235][T23586] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.357316][ T4301] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 1575.469600][T23596] loop3: detected capacity change from 0 to 2048 [ 1575.479686][T23596] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1575.495272][T23596] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1575.506336][T23596] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1575.515259][T23596] UDF-fs: Scanning with blocksize 512 failed [ 1575.526878][T23596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1575.546674][ T4301] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1575.570562][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.578618][ T4301] usb 5-1: Product: syz [ 1575.583029][ T4301] usb 5-1: Manufacturer: syz [ 1575.587678][ T4301] usb 5-1: SerialNumber: syz [ 1575.602984][ T4301] usb 5-1: config 0 descriptor?? [ 1575.684337][T23603] loop3: detected capacity change from 0 to 8 [ 1575.729398][T23603] SQUASHFS error: Unable to read directory block [631:72] [ 1575.820748][T23606] loop3: detected capacity change from 0 to 1024 [ 1575.963526][T23606] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1575.979732][T23606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1576.022186][ T4301] airspy 5-1:0.0: Board ID: 05 [ 1576.027048][ T4301] airspy 5-1:0.0: Firmware version:  [ 1576.070222][T22720] EXT4-fs (loop5): unmounting filesystem. [ 1576.350712][T23606] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1576.629943][ T4301] airspy 5-1:0.0: usb_control_msg() failed -32 request 12 [ 1576.642971][ T4301] airspy 5-1:0.0: Registered as swradio24 [ 1576.650183][T15394] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1576.657914][ T4301] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1576.841659][T15394] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1576.854609][T15394] usb 6-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 1576.864571][T15394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.879571][T15394] usb 6-1: config 0 descriptor?? [ 1576.961995][T15307] EXT4-fs (loop3): unmounting filesystem. [ 1577.294400][T15394] wacom 0003:056A:0307.001A: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.5-1/input0 [ 1577.420186][ T4301] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1577.494495][T15394] usb 6-1: USB disconnect, device number 10 [ 1577.603666][ T4301] usb 4-1: Using ep0 maxpacket: 16 [ 1577.612628][ T4301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.626536][ T4301] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1577.639257][ T4301] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1577.652732][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.667345][ T4301] usb 4-1: config 0 descriptor?? [ 1578.204784][ T128] usb 5-1: USB disconnect, device number 106 [ 1579.396657][T23650] loop5: detected capacity change from 0 to 1024 [ 1579.984797][ T4390] hfsplus: b-tree write err: -5, ino 4 [ 1580.116520][T23663] loop0: detected capacity change from 0 to 1024 [ 1580.127114][T23667] loop5: detected capacity change from 0 to 256 [ 1580.140999][T23663] EXT4-fs: Ignoring removed orlov option [ 1580.157288][T23663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1580.222840][T23663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1580.289896][T15394] usb 4-1: USB disconnect, device number 28 [ 1580.399719][T14962] EXT4-fs (loop0): unmounting filesystem. [ 1580.450377][ T4297] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1580.638565][T23687] loop3: detected capacity change from 0 to 256 [ 1580.721629][ T4297] usb 5-1: Using ep0 maxpacket: 8 [ 1580.729704][ T4297] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1580.739929][ T4297] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1580.749900][ T4297] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1580.759918][ T4297] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1580.773883][ T4297] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1580.785205][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.972454][T23697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6118'. [ 1580.973721][T23695] loop5: detected capacity change from 0 to 1024 [ 1581.003982][ T4297] usb 5-1: GET_CAPABILITIES returned 0 [ 1581.012045][ T4297] usbtmc 5-1:16.0: can't read capabilities [ 1581.541229][T15394] usb 5-1: USB disconnect, device number 107 [ 1581.548196][ T4422] hfsplus: b-tree write err: -5, ino 4 [ 1581.568541][T23704] loop3: detected capacity change from 0 to 256 [ 1581.637727][T23706] loop5: detected capacity change from 0 to 1024 [ 1582.176366][T23711] hfsplus: b-tree write err: -5, ino 4 [ 1582.355879][T23718] loop4: detected capacity change from 0 to 1024 [ 1582.449122][T23718] hfsplus: xattr searching failed [ 1582.460239][ T27] audit: type=1800 audit(2000001213.100:5092): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6122" name="bus" dev="loop4" ino=0 res=0 errno=0 [ 1582.466999][T23718] hfsplus: xattr searching failed [ 1582.490199][T18191] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1582.620642][T23721] loop4: detected capacity change from 0 to 256 [ 1582.651314][ T4346] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1582.692257][T18191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1582.736899][T18191] usb 6-1: not running at top speed; connect to a high speed hub [ 1582.756709][T18191] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1582.771907][T18191] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1582.794846][T18191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.825177][T18191] usb 6-1: Product: syz [ 1582.829356][T18191] usb 6-1: Manufacturer: syz [ 1582.856154][T18191] usb 6-1: SerialNumber: syz [ 1582.861238][ T4346] usb 4-1: Using ep0 maxpacket: 16 [ 1582.937807][ T4346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.967053][ T4346] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1583.002493][ T4346] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1583.041260][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.067433][ T4346] usb 4-1: config 0 descriptor?? [ 1583.091425][T18191] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1583.118391][T18191] usb 6-1: USB disconnect, device number 11 [ 1583.162643][T23729] netlink: 'syz.4.6126': attribute type 10 has an invalid length. [ 1583.822209][T23739] loop6: detected capacity change from 0 to 512 [ 1583.858515][T23739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1583.877184][T23739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1583.942224][T23739] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1583.962427][T23739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 1583.998559][T23739] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 1584.028704][T23744] loop5: detected capacity change from 0 to 256 [ 1584.037825][T23739] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1584.037915][T23744] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1584.070365][T23739] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1584.159601][T23739] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.6131: dx entry: limit 65535 != root limit 120 [ 1584.171991][T23746] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1584.188163][T23746] device syzkaller0 entered promiscuous mode [ 1584.220238][T23739] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6131: Corrupt directory, running e2fsck is recommended [ 1584.321634][T23421] EXT4-fs (loop6): unmounting filesystem. [ 1584.738972][T23761] loop6: detected capacity change from 0 to 16 [ 1584.901824][T12719] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1585.017376][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6139'. [ 1585.672447][T12719] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1585.699306][T12719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.725369][T12719] usb 6-1: Product: syz [ 1585.750946][T12719] usb 6-1: Manufacturer: syz [ 1585.769198][T12719] usb 6-1: SerialNumber: syz [ 1585.796258][T12719] usb 6-1: config 0 descriptor?? [ 1586.149395][T18191] usb 4-1: USB disconnect, device number 29 [ 1586.235292][T12719] airspy 6-1:0.0: Board ID: 05 [ 1586.240090][T12719] airspy 6-1:0.0: Firmware version:  [ 1586.312822][T23779] loop4: detected capacity change from 0 to 1764 [ 1586.685213][T23786] 9p: Unknown access argument 18446744073709551615: -34 [ 1586.750322][T18191] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1586.836993][T12719] airspy 6-1:0.0: usb_control_msg() failed -32 request 12 [ 1586.849708][T12719] airspy 6-1:0.0: Registered as swradio24 [ 1586.872741][T12719] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1586.940227][T18191] usb 4-1: Using ep0 maxpacket: 16 [ 1586.960987][T18191] usb 4-1: config 0 has no interfaces? [ 1586.978168][T18191] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1586.997407][T23790] loop4: detected capacity change from 0 to 1764 [ 1587.009229][T18191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.030391][T23790] syz.4.6150 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1587.334420][T18191] usb 4-1: Product: syz [ 1587.338913][T18191] usb 4-1: Manufacturer: syz [ 1587.345324][T18191] usb 4-1: SerialNumber: syz [ 1692.930059][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1692.937030][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5311/1:b..l [ 1692.945382][ C1] (detected by 1, t=10502 jiffies, g=187193, q=230 ncpus=2) [ 1692.952730][ C1] task:kworker/u4:20 state:R running task stack:22320 pid:5311 ppid:2 flags:0x00004000 [ 1692.964326][ C1] Workqueue: bat_events batadv_nc_worker [ 1692.969970][ C1] Call Trace: [ 1692.973231][ C1] [ 1692.976145][ C1] __schedule+0x10e9/0x40d0 [ 1692.980636][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 1692.986508][ C1] ? lock_chain_count+0x20/0x20 [ 1692.991339][ C1] ? rcu_read_unlock_special+0x500/0x500 [ 1692.996952][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 1693.002216][ C1] preempt_schedule_irq+0xb1/0x150 [ 1693.007305][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1693.013007][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1693.018790][ C1] irqentry_exit+0x63/0x70 [ 1693.023183][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1693.028626][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xb/0x30 [ 1693.034762][ C1] Code: 6b 8a 48 c7 c6 80 20 6c 8a e8 a1 9d 3d f7 0f 0b eb d1 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 31 c0 83 3d 57 3c ef 03 00 74 1d <83> 3d e2 6f ef 03 00 74 14 65 48 8b 0d 34 28 f3 75 31 c0 83 b9 dc [ 1693.054347][ C1] RSP: 0018:ffffc9001b70fbd8 EFLAGS: 00000202 [ 1693.060393][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888029ded940 [ 1693.068357][ C1] RDX: 0000000000000000 RSI: ffffffff8abf0d80 RDI: ffffffff8abf0d40 [ 1693.076326][ C1] RBP: fffffffffffffe38 R08: dffffc0000000000 R09: fffffbfff2117049 [ 1693.084290][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: dffffc0000000000 [ 1693.092247][ C1] R13: ffffffff89d93bee R14: ffff888026740c80 R15: 00000000000001e1 [ 1693.100198][ C1] ? batadv_nc_worker+0xce/0x600 [ 1693.105137][ C1] batadv_nc_worker+0x1f0/0x600 [ 1693.109969][ C1] ? process_one_work+0x7a1/0x1160 [ 1693.115072][ C1] process_one_work+0x898/0x1160 [ 1693.119991][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1693.125609][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 1693.130624][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1693.136006][ C1] ? kthread_data+0x4b/0xc0 [ 1693.140503][ C1] worker_thread+0xaa2/0x1250 [ 1693.145190][ C1] kthread+0x29d/0x330 [ 1693.149259][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1693.154272][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1693.158847][ C1] ret_from_fork+0x1f/0x30 [ 1693.163249][ C1] [ 1693.166248][ C1] rcu: rcu_preempt kthread starved for 10161 jiffies! g187193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1693.177504][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1693.187448][ C1] rcu: RCU grace-period kthread stack dump: [ 1693.193314][ C1] task:rcu_preempt state:R running task stack:27456 pid:16 ppid:2 flags:0x00004000 [ 1693.204075][ C1] Call Trace: [ 1693.207352][ C1] [ 1693.210278][ C1] __schedule+0x10e9/0x40d0 [ 1693.214768][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 1693.220661][ C1] schedule+0xb9/0x180 [ 1693.224707][ C1] schedule_timeout+0x15c/0x280 [ 1693.229538][ C1] ? console_conditional_schedule+0x40/0x40 [ 1693.235419][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1693.241308][ C1] ? update_process_times+0x1b0/0x1b0 [ 1693.246665][ C1] ? prepare_to_swait_event+0x335/0x350 [ 1693.252191][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 1693.257023][ C1] ? rcu_gp_kthread+0x380/0x380 [ 1693.261851][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1693.267983][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 1693.272725][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1693.278108][ C1] rcu_gp_kthread+0x95/0x380 [ 1693.282691][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1693.287791][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1693.293679][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1693.298684][ C1] kthread+0x29d/0x330 [ 1693.302740][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1693.307829][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1693.312399][ C1] ret_from_fork+0x1f/0x30 [ 1693.316800][ C1] [ 1693.319800][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1693.326098][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1693.331305][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10