last executing test programs: 35.027860859s ago: executing program 4 (id=982): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0) 33.944102939s ago: executing program 4 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x80) 33.64766404s ago: executing program 3 (id=993): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x2}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power}}, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x5}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x10000000000001dd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf124000100"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@host}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8, 0x4}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0xc8f2cd218dfae5e4, 0x0) ioctl$SNDCTL_MIDI_INFO(r4, 0xc074510c, &(0x7f0000000400)={"19c9e16cfde02405523ff0ddafcb3717b4d2a13d47b31159a742b04b90ad", 0x41c4, 0x10, 0x1, [0x9, 0x1, 0x0, 0x4, 0x10000, 0x4, 0x8, 0x5b6a, 0x9, 0x7, 0x3, 0x10001, 0x3, 0x3, 0x5a, 0x4, 0x2, 0x7]}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x9e235000) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 33.578978421s ago: executing program 4 (id=994): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000002480), 0x0, 0x0, 0x0) 33.510411265s ago: executing program 4 (id=995): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0) 31.928710453s ago: executing program 3 (id=1005): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000180)="17", 0x1) 31.611136966s ago: executing program 3 (id=1009): mlockall(0x1) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) recvfrom$inet_nvme(r2, &(0x7f0000000000)=""/83, 0x53, 0x0, 0x0, 0x0) 30.256538292s ago: executing program 4 (id=1017): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280)=0x7, 0x4) 29.827268125s ago: executing program 4 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 27.072751902s ago: executing program 3 (id=1034): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x16f142}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300", @ANYRES64=r0], 0xe0}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x1042}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8042}, 0x10) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x8000}}, 0x10, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r5, 0x0) inotify_init() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r5, 0x9e5d) openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 26.661494763s ago: executing program 3 (id=1036): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) 26.489150692s ago: executing program 3 (id=1037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc03ffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) 9.460292854s ago: executing program 5 (id=1093): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 7.456790713s ago: executing program 5 (id=1101): socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "9c5952"}) 6.410415593s ago: executing program 5 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000000740)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC, @ANYRESDEC=0x0], 0x1, 0x5540, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000580)="f5", 0x1}], 0x1, 0x0, 0x0, 0x0) 5.462782526s ago: executing program 0 (id=1109): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 5.296013682s ago: executing program 0 (id=1111): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 3.767971644s ago: executing program 1 (id=1115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000002e000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.679489153s ago: executing program 1 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x80) 3.612850281s ago: executing program 5 (id=1117): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x16f142}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300", @ANYRES64=r1], 0xe0}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x1042}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8042}, 0x10) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x8000}}, 0x10, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r6, 0x0) inotify_init() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x9e5d) openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 2.647506069s ago: executing program 5 (id=1119): r0 = socket(0x10, 0x0, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0xffb5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x29) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 2.535542605s ago: executing program 1 (id=1120): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, 0x0, 0x138) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x120, 0x0, 0x0, [{{}, {0x0, 0x0, 0x74, 0x0, '\xcdSu\xbe`h\xbehM\x16>\x87\xba\x01#\xcb\xc2\x00I\xb3\xdf\xdfSt;rO\xa6\xac\xddo\xfd\xd5\xb58kz\xdb\xaf\x95\xfca\xde\xa9N\x0f\x921\xa50}I\xc0\xec\xdf\xac%\"\xeb,\xe5\xd1w0\xa8\xa0z\xfb\xf0\xad\xa66\x84d\xd3\xe6\xe7\xee\x14\x9dK\xa6\xd6T\xac\xe7\xc7\v\xeb\x84\xc9:\\\x89A\x9a\xe8\xb5pe\x16\xaf\x0fS\xe4\v\x8ea\xe0\xb1\xde\xed\x8a\a\x9f\xb9'}}]}, 0x120) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000001340)={[{@dioread_nolock}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@max_dir_size_kb}, {}, {@usrjquota}, {@test_dummy_encryption}, {@nogrpid}, {@test_dummy_encryption}]}, 0xfe, 0x43a, &(0x7f00000001c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x1414, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x18) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000440)=0x40084040) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x118) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="15"], 0x15) 2.452763899s ago: executing program 0 (id=1121): r0 = syz_open_procfs$userns(0x0, &(0x7f0000002940)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="300000002e00030500"/20, @ANYRES32=r0, @ANYBLOB="a3824361e09573"], 0x30}], 0x1}, 0x0) 2.21594277s ago: executing program 5 (id=1123): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.168669515s ago: executing program 2 (id=1124): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) chdir(&(0x7f0000000300)='./bus\x00') r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 2.14312881s ago: executing program 0 (id=1125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.633823182s ago: executing program 2 (id=1126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000002e000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.479592738s ago: executing program 2 (id=1127): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008}) 1.406653553s ago: executing program 1 (id=1128): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) mkdir(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @host}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0x400000}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) 1.023816638s ago: executing program 2 (id=1129): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x16f142}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300", @ANYRES64=r1], 0xe0}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x1042}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8042}, 0x10) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x8000}}, 0x10, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r5, 0x0) inotify_init() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r5, 0x9e5d) openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 888.448642ms ago: executing program 1 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x80) 379.850298ms ago: executing program 1 (id=1131): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 260.113788ms ago: executing program 2 (id=1132): socket$inet_sctp(0x2, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) socket(0x10, 0x3, 0x0) 235.572221ms ago: executing program 0 (id=1133): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x1ffffe02, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="c68a76fc052ea9e5861f22eefbe4355322573df4473febc5460a4ac3cf40c7fb7d5f6d3de3c066b337381c804f1ad36dfc60d71b78058e95eb3c21c658ffce5b4102793eb0", 0x45}], 0x1}}], 0x1, 0x0) 73.079335ms ago: executing program 2 (id=1134): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=1135): kernel console output (not intermixed with test programs): 38][ T7366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.579'. [ 229.907258][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.938040][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.105902][ T5665] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.774752][ T7406] loop5: detected capacity change from 0 to 512 [ 230.832726][ T7406] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 230.880464][ T7410] loop3: detected capacity change from 0 to 128 [ 230.887551][ T5152] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 230.929999][ T7406] EXT4-fs (loop5): 1 truncate cleaned up [ 230.958875][ T7406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.998209][ T7410] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.080545][ T7410] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.157635][ T5152] usb 5-1: Using ep0 maxpacket: 16 [ 231.191397][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 231.208175][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.280060][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 231.296918][ T7418] team0: Port device bond0 added [ 231.338306][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.359958][ T7410] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 231.393748][ T7410] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 231.394479][ T5152] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 231.427879][ T7422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.591'. [ 231.441022][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.452371][ T5152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.471043][ T5152] usb 5-1: Product: syz [ 231.532551][ T5152] usb 5-1: Manufacturer: syz [ 231.562639][ T5152] usb 5-1: SerialNumber: syz [ 231.616805][ T5152] usb 5-1: config 0 descriptor?? [ 231.660288][ T5152] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 231.699149][ T5467] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.713083][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 231.757714][ T7429] loop2: detected capacity change from 0 to 64 [ 231.767343][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 231.860097][ T7429] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 231.947587][ T7429] hfs: unable to parse mount options [ 232.114784][ T7430] loop1: detected capacity change from 0 to 32768 [ 232.123079][ T7430] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.593 (7430) [ 232.147310][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 232.173380][ T7430] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.183826][ T7430] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 232.192416][ T7430] BTRFS info (device loop1): using free-space-tree [ 232.205580][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 232.208855][ T7435] loop2: detected capacity change from 0 to 256 [ 232.213224][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 232.254677][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 232.262618][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 232.329786][ T5152] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 232.351622][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 232.363110][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 232.393449][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 232.475758][ T5152] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 232.490380][ T5152] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 232.503182][ T5152] usb 5-1: USB disconnect, device number 8 [ 232.526145][ T5152] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 232.588327][ T5152] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 232.636464][ T5152] keyspan 5-1:0.0: device disconnected [ 232.642829][ T7433] loop0: detected capacity change from 0 to 1024 [ 232.727497][ T5547] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 233.498726][ T7477] loop4: detected capacity change from 0 to 512 [ 233.543458][ T7477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.625893][ T7477] EXT4-fs (loop4): 1 truncate cleaned up [ 233.663841][ T7477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.796293][ T7486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.606'. [ 233.815784][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 233.927739][ T6929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.039791][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 234.075036][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.116910][ T8] usb 4-1: config 0 descriptor?? [ 234.140813][ T8] cp210x 4-1:0.0: cp210x converter detected [ 234.325750][ T1787] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 234.606191][ T7494] loop4: detected capacity change from 0 to 32768 [ 234.613975][ T7494] xfs: Unknown parameter 'audit' [ 234.947782][ T1787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.989090][ T1787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.023784][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 235.060044][ T1787] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.066964][ T8] usb 4-1: USB disconnect, device number 11 [ 235.128985][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 235.145793][ T1787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.178022][ T8] cp210x 4-1:0.0: device disconnected [ 235.190704][ T1787] usb 2-1: config 0 descriptor?? [ 235.958959][ T7528] loop3: detected capacity change from 0 to 512 [ 235.968466][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.4.622'. [ 235.973348][ T7528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.034733][ T7528] EXT4-fs (loop3): 1 truncate cleaned up [ 236.074822][ T7528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.477585][ T1787] uclogic 0003:256C:006D.000D: interface is invalid, ignoring [ 236.854050][ T5467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.935897][ T1787] usb 2-1: USB disconnect, device number 16 [ 236.955555][ T5097] Bluetooth: hci4: command 0x0406 tx timeout [ 237.464208][ T7550] loop2: detected capacity change from 0 to 64 [ 237.647756][ T7550] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 237.675988][ T7550] hfs: unable to parse mount options [ 237.858090][ T7561] loop2: detected capacity change from 0 to 256 [ 238.256066][ T7572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.635'. [ 238.497864][ T7578] loop5: detected capacity change from 0 to 512 [ 238.521970][ T7582] loop0: detected capacity change from 0 to 128 [ 238.539092][ T7578] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.603123][ T7578] EXT4-fs (loop5): 1 truncate cleaned up [ 238.608630][ T7582] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.616283][ T7578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.644441][ T7578] overlay: ./file1 is not a directory [ 238.656423][ T7582] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.727995][ T5152] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 238.757368][ T5665] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.771893][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.930154][ T5152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.954790][ T5152] usb 3-1: config 0 has no interfaces? [ 238.961734][ T5152] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.971346][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.987912][ T5152] usb 3-1: config 0 descriptor?? [ 239.360567][ T1787] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 239.558173][ T1787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.568775][ T1787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.581357][ T1787] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.592423][ T1787] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 239.619304][ T1787] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.630329][ T1787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.639913][ T1787] usb 2-1: Product: syz [ 239.644118][ T1787] usb 2-1: Manufacturer: syz [ 239.653960][ T1787] usb 2-1: SerialNumber: syz [ 239.894432][ T1787] usb 2-1: 0:2 : does not exist [ 239.957406][ T1787] usb 2-1: USB disconnect, device number 17 [ 239.998925][ T7618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.651'. [ 240.142933][ T7622] loop5: detected capacity change from 0 to 512 [ 240.151830][ T7622] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 240.170528][ T7622] EXT4-fs (loop5): 1 truncate cleaned up [ 240.189396][ T7622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.218013][ T7622] overlay: ./file1 is not a directory [ 240.235183][ T5266] udevd[5266]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.310788][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.331256][ T5166] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 240.540526][ T5166] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 240.564814][ T5166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.584684][ T5166] usb 1-1: Product: syz [ 240.589266][ T5166] usb 1-1: Manufacturer: syz [ 240.594172][ T5166] usb 1-1: SerialNumber: syz [ 240.664992][ T5166] usb 1-1: config 0 descriptor?? [ 241.111941][ T5166] usb 1-1: Firmware version (0.0) predates our first public release. [ 241.137425][ T5166] usb 1-1: Please update to version 0.2 or newer [ 241.401051][ T5166] usb 1-1: USB disconnect, device number 17 [ 241.464644][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.478704][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.487391][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.502615][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.510893][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.523606][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.524740][ T5162] usb 3-1: USB disconnect, device number 20 [ 241.804007][ T6600] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.917514][ T7664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.665'. [ 242.060609][ T6600] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.265911][ T6600] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.398374][ T5152] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 242.563073][ T6600] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.617450][ T5152] usb 4-1: Using ep0 maxpacket: 32 [ 242.647625][ T5152] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 242.666021][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.670'. [ 242.667300][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.734670][ T5152] usb 4-1: Product: syz [ 242.757291][ T5152] usb 4-1: Manufacturer: syz [ 242.772173][ T5152] usb 4-1: SerialNumber: syz [ 242.823557][ T5152] usb 4-1: config 0 descriptor?? [ 242.853484][ T5152] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 242.932453][ T7682] pimreg: entered allmulticast mode [ 242.984473][ T7684] pimreg: left allmulticast mode [ 243.474160][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 243.500127][ T5165] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 243.530925][ T6600] bridge_slave_1: left allmulticast mode [ 243.536977][ T6600] bridge_slave_1: left promiscuous mode [ 243.543023][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.558562][ T6600] bridge_slave_0: left allmulticast mode [ 243.564595][ T6600] bridge_slave_0: left promiscuous mode [ 243.571281][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.595914][ T5103] Bluetooth: hci5: command tx timeout [ 243.699436][ T5165] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.745742][ T5165] usb 5-1: config 0 has no interfaces? [ 243.751430][ T5165] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 243.773968][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.811300][ T5165] usb 5-1: config 0 descriptor?? [ 244.890552][ T6600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.917228][ T6600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.931745][ T6600] bond0 (unregistering): Released all slaves [ 244.976052][ T7703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.681'. [ 245.175177][ T5152] gspca_stk1135: reg_w 0x2ff err -71 [ 245.182607][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.192505][ T5152] gspca_stk1135: Sensor write failed [ 245.198220][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.210620][ T5152] gspca_stk1135: Sensor write failed [ 245.216236][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.222632][ T5152] gspca_stk1135: Sensor read failed [ 245.230540][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.237004][ T5152] gspca_stk1135: Sensor read failed [ 245.243495][ T5152] gspca_stk1135: Detected sensor type unknown (0x0) [ 245.250380][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.261589][ T5152] gspca_stk1135: Sensor read failed [ 245.275604][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.286229][ T5152] gspca_stk1135: Sensor read failed [ 245.291554][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.298142][ T5152] gspca_stk1135: Sensor write failed [ 245.303469][ T5152] gspca_stk1135: serial bus timeout: status=0x00 [ 245.317476][ T5152] gspca_stk1135: Sensor write failed [ 245.338022][ T5152] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 245.368088][ T5152] usb 4-1: USB disconnect, device number 12 [ 245.676201][ T5103] Bluetooth: hci5: command tx timeout [ 245.742546][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.771586][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.814694][ T7650] bridge_slave_0: entered allmulticast mode [ 245.859074][ T7650] bridge_slave_0: entered promiscuous mode [ 246.031648][ T7737] loop3: detected capacity change from 0 to 1024 [ 246.075685][ T7737] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 246.106309][ T5108] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 246.150470][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.178639][ T7737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.191430][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.223946][ T7650] bridge_slave_1: entered allmulticast mode [ 246.254707][ T5165] usb 5-1: USB disconnect, device number 9 [ 246.305703][ T7650] bridge_slave_1: entered promiscuous mode [ 246.341493][ T5108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.355990][ T5108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.407248][ T5108] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 246.454325][ T5108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.467100][ T7751] EXT4-fs warning (device loop3): ext4_resize_fs:2018: can't read last block, resize aborted [ 246.496594][ T5108] usb 1-1: config 0 descriptor?? [ 246.537268][ T7737] loop3: detected capacity change from 1024 to 0 [ 246.599909][ T52] loop: Write error at byte offset 9223372036854776831, length 1024. [ 246.657222][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 246.667031][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 246.685205][ T7751] EXT4-fs error (device loop3) in ext4_update_primary_sb:90: IO failure [ 246.714057][ T7751] EXT4-fs (loop3): previous I/O error to superblock detected [ 246.727669][ T7751] syz.3.688: attempt to access beyond end of device [ 246.727669][ T7751] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 246.768397][ T7751] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 246.787854][ T6600] hsr_slave_0: left promiscuous mode [ 246.798053][ T7751] EXT4-fs (loop3): I/O error while writing superblock [ 246.809178][ T6600] hsr_slave_1: left promiscuous mode [ 246.835860][ T7751] EXT4-fs (loop3): Failed to update primary superblock [ 246.871979][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.896058][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.938821][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.961719][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.980122][ T5108] usbhid 1-1:0.0: can't add hid device: -71 [ 246.996891][ T5467] syz-executor: attempt to access beyond end of device [ 246.996891][ T5467] loop3: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 246.998030][ T5108] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 247.067131][ T5108] usb 1-1: USB disconnect, device number 18 [ 247.104993][ T6600] veth1_macvtap: left promiscuous mode [ 247.114595][ T5467] syz-executor: attempt to access beyond end of device [ 247.114595][ T5467] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 247.118528][ T6600] veth0_macvtap: left promiscuous mode [ 247.153490][ T6600] veth1_vlan: left promiscuous mode [ 247.162196][ T5467] syz-executor: attempt to access beyond end of device [ 247.162196][ T5467] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 247.191964][ T5467] syz-executor: attempt to access beyond end of device [ 247.191964][ T5467] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 247.193149][ T6600] veth0_vlan: left promiscuous mode [ 247.234412][ T5467] syz-executor: attempt to access beyond end of device [ 247.234412][ T5467] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 247.277059][ T5467] syz-executor: attempt to access beyond end of device [ 247.277059][ T5467] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 247.323063][ T5467] syz-executor: attempt to access beyond end of device [ 247.323063][ T5467] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 247.353934][ T5467] syz-executor: attempt to access beyond end of device [ 247.353934][ T5467] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 247.394510][ T5467] syz-executor: attempt to access beyond end of device [ 247.394510][ T5467] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 247.431831][ T5467] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 247.446871][ T5467] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 247.489577][ T5467] EXT4-fs (loop3): I/O error while writing superblock [ 247.525021][ T5467] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 247.556821][ T5467] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 247.577359][ T5467] EXT4-fs (loop3): I/O error while writing superblock [ 247.611227][ T5467] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 247.629676][ T7768] loop2: detected capacity change from 0 to 64 [ 247.653432][ T5467] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 247.665016][ T5467] EXT4-fs (loop3): I/O error while writing superblock [ 247.684834][ T1083] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 247.714103][ T1083] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 247.739695][ T1083] EXT4-fs (loop3): I/O error while writing superblock [ 247.755812][ T5103] Bluetooth: hci5: command tx timeout [ 247.764027][ T7770] loop0: detected capacity change from 0 to 2048 [ 247.764046][ T29] audit: type=1800 audit(1721848611.883:40): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.699" name="bus" dev="loop2" ino=8 res=0 errno=0 [ 247.795151][ T5467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.823026][ T5467] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 247.831658][ T5467] EXT4-fs (loop3): I/O error while writing superblock [ 247.840400][ T7742] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 247.869844][ T7770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.887621][ T7770] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.445648][ T7778] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.700: bg 0: block 288: padding at end of block bitmap is not set [ 248.475250][ T7778] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -117 [ 248.972975][ T5665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.313409][ T6600] team0 (unregistering): Port device team_slave_1 removed [ 249.472724][ T6600] team0 (unregistering): Port device team_slave_0 removed [ 249.842065][ T5103] Bluetooth: hci5: command tx timeout [ 250.108625][ T7797] loop0: detected capacity change from 0 to 40427 [ 250.158396][ T7797] F2FS-fs (loop0): invalid crc value [ 250.223831][ T7797] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.291443][ T7797] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 250.391126][ T5665] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 250.698887][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.728703][ T7759] netlink: 32 bytes leftover after parsing attributes in process `syz.4.694'. [ 250.990074][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.223003][ T7819] loop1: detected capacity change from 0 to 2048 [ 251.249961][ T7650] team0: Port device team_slave_0 added [ 251.302474][ T7650] team0: Port device team_slave_1 added [ 251.317429][ T7819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.368600][ T7819] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.785960][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.848241][ T7831] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.714: bg 0: block 288: padding at end of block bitmap is not set [ 251.864010][ T7831] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117 [ 252.414557][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.468275][ T5547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.518550][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.577529][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.615671][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.663593][ T7833] loop0: detected capacity change from 0 to 64 [ 252.691051][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.821494][ T29] audit: type=1800 audit(1721848616.923:41): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.712" name="bus" dev="loop0" ino=8 res=0 errno=0 [ 253.321915][ T7650] hsr_slave_0: entered promiscuous mode [ 253.382502][ T7650] hsr_slave_1: entered promiscuous mode [ 253.465798][ T7650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.473940][ T7650] Cannot create hsr debugfs directory [ 253.568756][ T7849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.724'. [ 253.886897][ T7863] capability: warning: `syz.4.729' uses deprecated v2 capabilities in a way that may be insecure [ 254.098897][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.112452][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.123319][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.141095][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.156519][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 254.164121][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.218101][ T6600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.452624][ T6600] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.629401][ T5166] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 254.660072][ T6600] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.847652][ T5166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.860641][ T5166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.889041][ T5166] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.898871][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.911147][ T6600] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.928686][ T5166] usb 5-1: config 0 descriptor?? [ 255.362402][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.369058][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.637984][ T7888] loop1: detected capacity change from 0 to 32768 [ 255.659816][ T7888] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.734 (7888) [ 255.677119][ T6600] bridge_slave_1: left allmulticast mode [ 255.682827][ T6600] bridge_slave_1: left promiscuous mode [ 255.717047][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.737661][ T6600] bridge_slave_0: left allmulticast mode [ 255.743516][ T6600] bridge_slave_0: left promiscuous mode [ 255.763179][ T7888] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 255.774529][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.782726][ T7888] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 255.795267][ T7888] BTRFS info (device loop1): using free-space-tree [ 255.976207][ T5166] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 256.088296][ T5547] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.199895][ T5166] usb 5-1: USB disconnect, device number 10 [ 256.245780][ T5103] Bluetooth: hci4: command tx timeout [ 256.581213][ T6600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.594292][ T6600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.611448][ T6600] bond0 (unregistering): Released all slaves [ 256.648801][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.740'. [ 256.667447][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 256.685508][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 257.086167][ T7936] fuse: Bad value for 'fd' [ 257.314183][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 257.346407][ T5108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 257.408349][ T6600] hsr_slave_0: left promiscuous mode [ 257.415147][ T6600] hsr_slave_1: left promiscuous mode [ 257.433672][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.447939][ T7947] loop0: detected capacity change from 0 to 2048 [ 257.449377][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.471865][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.484267][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.510480][ T7947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.520973][ T6600] veth1_macvtap: left promiscuous mode [ 257.529555][ T5108] usb 5-1: device descriptor read/64, error -71 [ 257.530059][ T6600] veth0_macvtap: left promiscuous mode [ 257.541795][ T6600] veth1_vlan: left promiscuous mode [ 257.548629][ T6600] veth0_vlan: left promiscuous mode [ 257.559604][ T7947] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.041570][ T5108] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 258.077268][ T7954] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.750: bg 0: block 288: padding at end of block bitmap is not set [ 258.130722][ T7954] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -117 [ 258.326029][ T5103] Bluetooth: hci4: command tx timeout [ 258.365600][ T5108] usb 5-1: device descriptor read/64, error -71 [ 258.489050][ T5108] usb usb5-port1: attempt power cycle [ 258.606008][ T5665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.730952][ T7959] loop0: detected capacity change from 0 to 64 [ 258.841131][ T7959] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 258.853204][ T7959] hfs: unable to parse mount options [ 258.911508][ T5108] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 258.954594][ T5108] usb 5-1: device descriptor read/8, error -71 [ 259.220154][ T6600] team0 (unregistering): Port device team_slave_1 removed [ 259.241758][ T5108] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.276426][ T5108] usb 5-1: device descriptor read/8, error -71 [ 259.289784][ T6600] team0 (unregistering): Port device team_slave_0 removed [ 259.402470][ T5108] usb usb5-port1: unable to enumerate USB device [ 259.406423][ T5162] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 259.618593][ T5162] usb 1-1: Using ep0 maxpacket: 32 [ 259.630244][ T5162] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 259.643731][ T5162] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 259.652981][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 259.661257][ T5162] usb 1-1: Product: syz [ 259.665478][ T5162] usb 1-1: Manufacturer: syz [ 259.670092][ T5162] usb 1-1: SerialNumber: syz [ 259.693427][ T5162] usb 1-1: config 0 descriptor?? [ 259.720416][ T7963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 259.853533][ T7650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.932337][ T7957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.752'. [ 259.948427][ T7650] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.979662][ T5162] usb 1-1: USB disconnect, device number 19 [ 260.023569][ T7650] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.105197][ T7650] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.363462][ T7978] fuse: Bad value for 'fd' [ 260.396940][ T5103] Bluetooth: hci4: command tx timeout [ 260.415678][ T5165] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 260.472758][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.502547][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.535741][ T7872] bridge_slave_0: entered allmulticast mode [ 260.543491][ T7872] bridge_slave_0: entered promiscuous mode [ 260.565147][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.581628][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.589635][ T5162] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 260.595918][ T7872] bridge_slave_1: entered allmulticast mode [ 260.627513][ T5165] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 260.639127][ T7872] bridge_slave_1: entered promiscuous mode [ 260.665018][ T5165] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 260.744290][ T5165] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 260.755420][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.784545][ T5165] usb 2-1: Product: syz [ 260.793858][ T5165] usb 2-1: Manufacturer: syz [ 260.799308][ T5162] usb 1-1: Using ep0 maxpacket: 32 [ 260.807814][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.823700][ T5162] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.843095][ T5165] usb 2-1: SerialNumber: syz [ 260.858503][ T5165] usb 2-1: config 0 descriptor?? [ 260.864247][ T7967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 260.870037][ T5162] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.889594][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.898338][ T5162] usb 1-1: Product: syz [ 260.902942][ T5162] usb 1-1: Manufacturer: syz [ 260.903507][ T7967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 260.908786][ T5162] usb 1-1: SerialNumber: syz [ 260.926894][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.934358][ T5162] usb 1-1: config 0 descriptor?? [ 260.942315][ T7963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.167278][ T7967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 261.168070][ T7872] team0: Port device team_slave_0 added [ 261.206597][ T7967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 261.210631][ T7872] team0: Port device team_slave_1 added [ 261.327373][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.342974][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.398852][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.438167][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.463333][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.498445][ T8006] loop2: detected capacity change from 0 to 64 [ 261.511281][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.651229][ T8006] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 261.666938][ T8006] hfs: unable to parse mount options [ 261.700690][ T7872] hsr_slave_0: entered promiscuous mode [ 261.760244][ T7872] hsr_slave_1: entered promiscuous mode [ 261.807743][ T7872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.837657][ T5165] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 261.855677][ T7872] Cannot create hsr debugfs directory [ 261.917612][ T5165] usb 2-1: USB disconnect, device number 18 [ 261.962592][ T5266] udevd[5266]: setting mode of /dev/bus/usb/002/018 to 020664 failed: No such file or directory [ 262.004669][ T5266] udevd[5266]: setting owner of /dev/bus/usb/002/018 to uid=0, gid=0 failed: No such file or directory [ 262.209365][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.767'. [ 262.225103][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.766'. [ 262.334957][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.475819][ T5103] Bluetooth: hci4: command tx timeout [ 262.630544][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.883116][ T8034] loop1: detected capacity change from 0 to 32768 [ 262.895420][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.902789][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.929107][ T8034] [ 262.929107][ T8034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.929107][ T8034] [ 262.942902][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.950220][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.986522][ T8034] [ 262.986522][ T8034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.986522][ T8034] [ 262.997643][ T8034] [ 262.997643][ T8034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.997643][ T8034] [ 263.008306][ T8034] [ 263.008306][ T8034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.008306][ T8034] [ 263.019029][ T8034] [ 263.019029][ T8034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.019029][ T8034] [ 263.049938][ T1787] usb 1-1: USB disconnect, device number 20 [ 263.063941][ T111] [ 263.063941][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.063941][ T111] [ 263.172154][ T8042] [ 263.172154][ T8042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.172154][ T8042] [ 263.240865][ T8042] [ 263.240865][ T8042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.240865][ T8042] [ 263.318321][ T7650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.331285][ T8042] [ 263.331285][ T8042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.331285][ T8042] [ 263.367148][ T7650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.395752][ T8042] [ 263.395752][ T8042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.395752][ T8042] [ 263.459715][ T110] [ 263.459715][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.459715][ T110] [ 263.623542][ T5547] [ 263.623542][ T5547] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.623542][ T5547] [ 263.636928][ T8057] loop0: detected capacity change from 0 to 64 [ 263.644011][ T8047] loop2: detected capacity change from 0 to 4096 [ 263.681275][ T5547] [ 263.681275][ T5547] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.681275][ T5547] [ 263.695102][ T8047] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 263.780434][ T8057] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 263.805822][ T8057] hfs: unable to parse mount options [ 263.841768][ T8047] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 264.330516][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.442941][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.779'. [ 264.769385][ T7872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.818233][ T7872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.871064][ T8086] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 264.871064][ T8086] The task syz.1.781 (8086) triggered the difference, watch for misbehavior. [ 264.898536][ T7872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.008671][ T7872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.029299][ T8053] loop4: detected capacity change from 0 to 32768 [ 265.110883][ T8053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.775 (8053) [ 265.199416][ T8053] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.258668][ T8053] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 265.321362][ T8053] BTRFS info (device loop4): using free-space-tree [ 265.355140][ T8099] loop0: detected capacity change from 0 to 1024 [ 265.535590][ T5166] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 265.607379][ T7650] veth0_vlan: entered promiscuous mode [ 265.681691][ T11] hfsplus: b-tree write err: -5, ino 4 [ 265.694396][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.738958][ T5166] usb 3-1: Using ep0 maxpacket: 32 [ 265.749126][ T5166] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 265.768894][ T7650] veth1_vlan: entered promiscuous mode [ 265.816780][ T5166] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.842291][ T6929] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.850118][ T5166] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.904787][ T5166] usb 3-1: Product: syz [ 265.930635][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.958284][ T5166] usb 3-1: Manufacturer: syz [ 265.964105][ T5166] usb 3-1: SerialNumber: syz [ 265.969587][ T8123] loop0: detected capacity change from 0 to 64 [ 266.013464][ T5166] usb 3-1: config 0 descriptor?? [ 266.067214][ T1787] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.074416][ T1787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.090302][ T8096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.147851][ T1787] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.155163][ T1787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.173894][ T8123] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 266.222590][ T8123] hfs: unable to parse mount options [ 266.295325][ T7650] veth0_macvtap: entered promiscuous mode [ 266.310730][ T8123] loop0: detected capacity change from 0 to 256 [ 266.378228][ T9] usb 3-1: USB disconnect, device number 21 [ 266.421594][ T7650] veth1_macvtap: entered promiscuous mode [ 266.574588][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.654427][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.686020][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.721860][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.742074][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.775342][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.801465][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.815169][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.857124][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.901465][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.925417][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.939867][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.959980][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.980321][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.995726][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 267.008608][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.040564][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.065430][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.096943][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.141114][ T8134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.790'. [ 267.191689][ T7650] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.206990][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 267.218731][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 267.236617][ T7650] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.259696][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.274113][ T7650] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.304417][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 267.321263][ T7650] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.350498][ T9] usb 3-1: Product: syz [ 267.356842][ T9] usb 3-1: Manufacturer: syz [ 267.362060][ T9] usb 3-1: SerialNumber: syz [ 267.398499][ T9] usb 3-1: config 0 descriptor?? [ 267.423143][ T8096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.594590][ T29] audit: type=1326 audit(1721848631.723:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.673809][ T29] audit: type=1326 audit(1721848631.723:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.680621][ T5097] Bluetooth: hci2: command 0x0406 tx timeout [ 267.701951][ T29] audit: type=1326 audit(1721848631.723:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.760308][ T29] audit: type=1326 audit(1721848631.723:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.784113][ T29] audit: type=1326 audit(1721848631.723:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.806896][ T29] audit: type=1326 audit(1721848631.723:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.828406][ T29] audit: type=1326 audit(1721848631.723:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.885723][ T29] audit: type=1326 audit(1721848631.723:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.923241][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.933152][ T29] audit: type=1326 audit(1721848631.723:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 267.965287][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.982470][ T8157] loop4: detected capacity change from 0 to 512 [ 268.027464][ T29] audit: type=1326 audit(1721848631.723:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 268.046800][ T8157] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 268.104839][ T8157] EXT4-fs (loop4): invalid journal inode [ 268.117972][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.128695][ T8157] EXT4-fs (loop4): can't get journal size [ 268.137143][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.158678][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.222446][ T8157] EXT4-fs (loop4): 1 truncate cleaned up [ 268.251210][ T8157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.454458][ T7872] veth0_vlan: entered promiscuous mode [ 268.509105][ T7872] veth1_vlan: entered promiscuous mode [ 268.670060][ T7872] veth0_macvtap: entered promiscuous mode [ 268.679369][ T5165] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 268.752378][ T7872] veth1_macvtap: entered promiscuous mode [ 268.879520][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.906950][ T5165] usb 6-1: Using ep0 maxpacket: 8 [ 268.932787][ T6929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.958824][ T5165] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 268.970497][ T8169] loop1: detected capacity change from 0 to 40427 [ 268.977302][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.989840][ T8169] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 268.995795][ T5165] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.999528][ T8169] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 269.036120][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.054963][ T5165] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 269.055207][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.088057][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.095491][ T5165] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.131764][ T8169] F2FS-fs (loop1): Found nat_bits in checkpoint [ 269.138872][ T5165] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 269.155122][ T5165] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 269.179181][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.188582][ T5165] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 269.203274][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.215007][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.229773][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.240716][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.252740][ T5165] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.268044][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.277499][ T8169] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 269.284574][ T8169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 269.291312][ T5165] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 269.313495][ T5165] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 269.322248][ T8169] bio_check_eod: 17 callbacks suppressed [ 269.322269][ T8169] syz.1.801: attempt to access beyond end of device [ 269.322269][ T8169] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.328392][ T8] usb 3-1: USB disconnect, device number 22 [ 269.379810][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.395866][ T5165] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 269.421236][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.441568][ T5165] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.469342][ T5165] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 269.485533][ T5165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.489006][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.495001][ T5165] usb 6-1: Product: syz [ 269.509649][ T5165] usb 6-1: Manufacturer: syz [ 269.514277][ T5165] usb 6-1: SerialNumber: syz [ 269.522012][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.533320][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.545246][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.555469][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.573063][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.593162][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.615563][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.645981][ T5547] syz-executor: attempt to access beyond end of device [ 269.645981][ T5547] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 269.646746][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.694181][ T8161] loop0: detected capacity change from 0 to 32768 [ 269.740503][ T7872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.749988][ T5547] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 269.756173][ T8161] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.800 (8161) [ 269.775908][ T5547] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 269.783633][ T5547] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 269.793117][ T5165] adutux 6-1:168.0: interrupt endpoints not found [ 269.802851][ T7872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.805975][ T5165] usb 6-1: USB disconnect, device number 9 [ 269.832472][ T8161] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.843172][ T8161] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 269.853098][ T7872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.869634][ T8161] BTRFS info (device loop0): using free-space-tree [ 269.883063][ T7872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.118927][ T8191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.806'. [ 270.412874][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.443430][ T5665] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 270.455322][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.624422][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.678741][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.273930][ T8224] loop5: detected capacity change from 0 to 512 [ 271.367145][ T8224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 271.429823][ T8224] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.797193][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.820'. [ 271.877909][ T7650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 272.587426][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 272.796284][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 272.874574][ T8] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 272.879376][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 272.879396][ T29] audit: type=1326 audit(1721848637.013:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 272.905413][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.969581][ T8] usb 5-1: Product: syz [ 272.973951][ T8] usb 5-1: Manufacturer: syz [ 272.983038][ T8] usb 5-1: SerialNumber: syz [ 273.003443][ T29] audit: type=1326 audit(1721848637.053:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.029297][ T8] usb 5-1: config 0 descriptor?? [ 273.062189][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 273.092271][ T29] audit: type=1326 audit(1721848637.063:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.122283][ T8246] loop2: detected capacity change from 0 to 32768 [ 273.143392][ T8275] loop1: detected capacity change from 0 to 1024 [ 273.155604][ T8246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.821 (8246) [ 273.182939][ T29] audit: type=1326 audit(1721848637.063:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.224238][ T8246] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 273.248209][ T8246] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 273.277060][ T29] audit: type=1326 audit(1721848637.063:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.308035][ T8246] BTRFS info (device loop2): using free-space-tree [ 273.373703][ T29] audit: type=1326 audit(1721848637.063:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.458490][ T29] audit: type=1326 audit(1721848637.063:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.483023][ T29] audit: type=1326 audit(1721848637.063:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.506327][ T29] audit: type=1326 audit(1721848637.063:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.533062][ T29] audit: type=1326 audit(1721848637.073:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8088f75f19 code=0x7ffc0000 [ 273.643075][ T5915] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 273.991884][ T8308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.836'. [ 275.108112][ T8] gspca_stk1135: reg_w 0x203 err -71 [ 275.114488][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.150669][ T8] gspca_stk1135: Sensor write failed [ 275.175719][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.199358][ T8] gspca_stk1135: Sensor write failed [ 275.223678][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.259315][ T8] gspca_stk1135: Sensor read failed [ 275.292873][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.318427][ T8] gspca_stk1135: Sensor read failed [ 275.340206][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 275.369171][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.399178][ T8] gspca_stk1135: Sensor read failed [ 275.404470][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.429178][ T8] gspca_stk1135: Sensor read failed [ 275.446582][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.475546][ T8] gspca_stk1135: Sensor write failed [ 275.489308][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 275.497602][ T8] gspca_stk1135: Sensor write failed [ 275.502986][ T8] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 275.522693][ T8] usb 5-1: USB disconnect, device number 15 [ 275.692775][ T8350] loop1: detected capacity change from 0 to 64 [ 275.819757][ T8353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.851'. [ 276.126325][ T8355] loop3: detected capacity change from 0 to 4096 [ 276.167020][ T8355] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 276.242347][ T8355] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 276.902397][ T8387] loop2: detected capacity change from 0 to 512 [ 276.923707][ T8387] EXT4-fs: Ignoring removed i_version option [ 276.934940][ T8387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 276.960287][ T8387] EXT4-fs (loop2): 1 truncate cleaned up [ 276.991567][ T8387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.096636][ T5915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.235215][ T8396] loop2: detected capacity change from 0 to 64 [ 277.505802][ T5152] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 277.723715][ T5152] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.733282][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.776697][ T5152] usb 4-1: config 0 descriptor?? [ 277.796310][ T5152] cp210x 4-1:0.0: cp210x converter detected [ 278.202504][ T5152] usb 4-1: cp210x converter now attached to ttyUSB0 [ 278.405085][ T1787] usb 4-1: USB disconnect, device number 13 [ 278.461095][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 278.484966][ T1787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.509951][ T8437] loop2: detected capacity change from 0 to 64 [ 278.516230][ T1787] cp210x 4-1:0.0: device disconnected [ 278.852750][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 279.427894][ T5165] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 279.642513][ T8440] loop0: detected capacity change from 0 to 32768 [ 279.659336][ T8440] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.885 (8440) [ 279.672611][ T5165] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 279.686262][ T5152] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 279.694123][ T5165] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 279.712562][ T5165] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 279.723855][ T5165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.732370][ T5165] usb 4-1: Product: syz [ 279.781381][ T5165] usb 4-1: Manufacturer: syz [ 279.795270][ T5165] usb 4-1: SerialNumber: syz [ 279.828534][ T8440] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.841755][ T5165] usb 4-1: config 0 descriptor?? [ 279.860240][ T8440] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 279.870352][ T8457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 279.890007][ T8440] BTRFS info (device loop0): using free-space-tree [ 279.906254][ T8457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 279.915133][ T5152] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 279.975566][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.998385][ T5152] usb 5-1: config 0 descriptor?? [ 280.080527][ T8496] loop5: detected capacity change from 0 to 64 [ 280.141406][ T8489] tipc: Started in network mode [ 280.192210][ T8489] tipc: Node identity 4aa783f0fea1, cluster identity 4711 [ 280.203694][ T8457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.251362][ T8489] tipc: Enabled bearer , priority 0 [ 280.258371][ T8457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.372785][ T8502] tipc: Resetting bearer [ 280.467793][ T5152] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 280.495693][ T5152] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 280.524514][ T5152] [drm:udl_init] *ERROR* Selecting channel failed [ 280.563079][ T8485] tipc: Disabling bearer [ 280.583977][ T5152] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 280.594574][ T5152] [drm] Initialized udl on minor 2 [ 280.595681][ T5665] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.602537][ T5152] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.632277][ T5152] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 280.651493][ T5162] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.694986][ T5152] usb 5-1: USB disconnect, device number 16 [ 280.714069][ T5162] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 280.901956][ T5165] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 280.936114][ T5165] usb 4-1: USB disconnect, device number 14 [ 281.412469][ T8520] loop5: detected capacity change from 0 to 2048 [ 281.519864][ T8520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.566351][ T8520] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.737652][ T8531] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 282.492102][ T8540] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -117 [ 282.659097][ T7650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.887987][ T8578] loop4: detected capacity change from 0 to 2048 [ 283.981216][ T8578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.003698][ T8543] loop2: detected capacity change from 0 to 32768 [ 284.027117][ T8578] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.041635][ T8585] loop1: detected capacity change from 0 to 256 [ 284.074231][ T8543] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.917 (8543) [ 284.402546][ T8587] loop0: detected capacity change from 0 to 1024 [ 284.565455][ T1787] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 284.644912][ T8543] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.740190][ T8543] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 284.804088][ T1787] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 284.823725][ T8543] BTRFS info (device loop2): using free-space-tree [ 284.895229][ T8596] Invalid ELF header magic: != ELF [ 285.070069][ T1787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.085812][ T1787] usb 6-1: Product: syz [ 285.090057][ T1787] usb 6-1: Manufacturer: syz [ 285.094669][ T1787] usb 6-1: SerialNumber: syz [ 285.100131][ T6929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.116444][ T1787] usb 6-1: config 0 descriptor?? [ 285.433128][ T8543] overlayfs: missing 'lowerdir' [ 285.556120][ T1787] usb 6-1: Firmware version (0.0) predates our first public release. [ 285.584669][ T1787] usb 6-1: Please update to version 0.2 or newer [ 285.666604][ T5915] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 285.740067][ T8620] fuse: Bad value for 'group_id' [ 285.766886][ T8620] fuse: Bad value for 'group_id' [ 285.878533][ T1787] usb 6-1: USB disconnect, device number 10 [ 286.476682][ T8636] netlink: 188 bytes leftover after parsing attributes in process `syz.2.937'. [ 286.510393][ T8636] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 286.869976][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 286.948483][ T8646] loop2: detected capacity change from 0 to 2048 [ 287.035030][ T8646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.067876][ T1787] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 287.071151][ T8646] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.115547][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 287.145610][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.162119][ T9] usb 6-1: config 0 descriptor?? [ 287.457867][ T1787] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 287.465004][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 287.475432][ T1787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.576165][ T5164] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 287.605261][ T1787] usb 4-1: config 0 descriptor?? [ 287.721625][ T8658] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.947: bg 0: block 288: padding at end of block bitmap is not set [ 287.760403][ T8658] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117 [ 287.781101][ T1787] cp210x 4-1:0.0: cp210x converter detected [ 287.862079][ T5164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.918083][ T5164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.985484][ T5164] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 288.056197][ T1787] usb 4-1: cp210x converter now attached to ttyUSB0 [ 288.075516][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.160348][ T5164] usb 5-1: config 0 descriptor?? [ 288.169046][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 288.177784][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 288.185111][ T5915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.207392][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 288.225437][ T9] [drm] Initialized udl on minor 2 [ 288.230928][ T5166] usb 4-1: USB disconnect, device number 15 [ 288.231692][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.251580][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 288.265908][ T5166] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 288.267393][ T5165] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.300733][ T5166] cp210x 4-1:0.0: device disconnected [ 288.310466][ T9] usb 6-1: USB disconnect, device number 11 [ 288.323995][ T5165] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 288.381155][ T8662] loop0: detected capacity change from 0 to 1024 [ 288.454998][ T8662] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 288.549445][ T8662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.630539][ T8662] EXT4-fs warning (device loop0): ext4_resize_fs:2018: can't read last block, resize aborted [ 288.682306][ T5164] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 288.696589][ T5164] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 288.713578][ T5164] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 288.739168][ T5164] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 288.779071][ T5164] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 288.795799][ T5164] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 288.813225][ T5164] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 288.827434][ T8677] loop1: detected capacity change from 0 to 64 [ 288.844560][ T5164] petalynx 0003:18B1:0037.000F: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 288.901151][ T5665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.927246][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 288.927269][ T29] audit: type=1800 audit(1721848653.033:285): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.959" name="bus" dev="loop1" ino=8 res=0 errno=0 [ 288.956427][ T5164] usb 5-1: USB disconnect, device number 17 [ 289.573694][ T8697] loop3: detected capacity change from 0 to 2048 [ 289.677957][ T8697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.705800][ T8697] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.725603][ T5166] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 290.123291][ T8710] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.966: bg 0: block 288: padding at end of block bitmap is not set [ 290.139107][ T8710] fs-verity (loop3, inode 13): ext4_end_enable_verity() failed with err -117 [ 290.203307][ T5166] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 290.213668][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.672494][ T5166] usb 6-1: config 0 descriptor?? [ 290.729737][ T7872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.437542][ T5103] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 291.447935][ T5103] Bluetooth: hci5: Injecting HCI hardware error event [ 291.459486][ T5103] Bluetooth: hci5: hardware error 0x00 [ 291.619851][ T8719] loop3: detected capacity change from 0 to 1024 [ 291.706506][ T8721] loop4: detected capacity change from 0 to 64 [ 291.732244][ T8719] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 291.795536][ T29] audit: type=1800 audit(1721848655.923:286): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.975" name="bus" dev="loop4" ino=8 res=0 errno=0 [ 291.795605][ T5166] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 291.877026][ T5166] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 291.886678][ T8719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.952872][ T5166] [drm:udl_init] *ERROR* Selecting channel failed [ 292.001562][ T8719] EXT4-fs warning (device loop3): ext4_resize_fs:2018: can't read last block, resize aborted [ 292.042808][ T5166] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 292.085563][ T5166] [drm] Initialized udl on minor 2 [ 292.113609][ T5166] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 292.143432][ T8724] loop0: detected capacity change from 0 to 1024 [ 292.161844][ T7872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.166443][ T5166] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 292.178194][ T5164] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 292.212417][ T5164] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 292.262869][ T5166] usb 6-1: USB disconnect, device number 12 [ 292.269204][ T5164] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 292.637394][ T29] audit: type=1326 audit(1721848656.753:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 292.693869][ T29] audit: type=1326 audit(1721848656.763:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 292.765705][ T29] audit: type=1326 audit(1721848656.763:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 292.833422][ T29] audit: type=1326 audit(1721848656.763:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 292.865492][ T5166] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 292.876930][ T29] audit: type=1326 audit(1721848656.773:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 292.917004][ T29] audit: type=1326 audit(1721848656.773:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 292.981209][ T29] audit: type=1326 audit(1721848656.773:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 293.013581][ T29] audit: type=1326 audit(1721848656.773:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eddb75f19 code=0x7ffc0000 [ 293.081605][ T5166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.106718][ T5166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.130192][ T5166] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 293.157844][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.195008][ T5166] usb 6-1: config 0 descriptor?? [ 293.279041][ T8761] loop3: detected capacity change from 0 to 64 [ 293.635322][ T5166] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 293.666617][ T5166] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 293.686313][ T5166] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 293.698839][ T5166] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 293.720289][ T5166] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 293.752842][ T5166] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 293.775620][ T5103] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 293.828287][ T5166] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 293.925441][ T5166] petalynx 0003:18B1:0037.0010: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.5-1/input0 [ 293.995938][ T5166] usb 6-1: USB disconnect, device number 13 [ 294.205705][ T5162] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 294.305638][ T1787] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 294.433593][ T5162] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 294.459901][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.479481][ T5162] usb 4-1: config 0 descriptor?? [ 294.504800][ T8759] loop2: detected capacity change from 0 to 40427 [ 294.531594][ T8759] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 294.540882][ T1787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.545442][ T8759] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 294.581041][ T1787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.612786][ T1787] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 294.653269][ T1787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.667060][ T8759] F2FS-fs (loop2): Found nat_bits in checkpoint [ 294.695613][ T1787] usb 5-1: config 0 descriptor?? [ 294.790009][ T5162] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 294.845790][ T5162] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 294.884915][ T5162] [drm:udl_init] *ERROR* Selecting channel failed [ 294.961216][ T8797] loop5: detected capacity change from 0 to 64 [ 295.017256][ T8759] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 295.042879][ T8759] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 295.056944][ T5162] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 295.084313][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 295.084338][ T29] audit: type=1800 audit(1721848659.213:339): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1002" name="bus" dev="loop5" ino=8 res=0 errno=0 [ 295.124149][ T5162] [drm] Initialized udl on minor 2 [ 295.147651][ T8759] syz.2.988: attempt to access beyond end of device [ 295.147651][ T8759] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 295.174293][ T5162] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 295.206348][ T5162] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 295.215819][ T5152] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 295.242871][ T5152] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 295.248228][ T8759] syz.2.988: attempt to access beyond end of device [ 295.248228][ T8759] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 295.305928][ T5162] usb 4-1: USB disconnect, device number 16 [ 295.324046][ T5152] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 295.511565][ T5915] syz-executor: attempt to access beyond end of device [ 295.511565][ T5915] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 295.589963][ T5915] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 295.835736][ T1787] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 295.840298][ T8808] loop0: detected capacity change from 0 to 64 [ 296.025126][ T8808] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 296.065566][ T8808] hfs: unable to parse mount options [ 296.122372][ T8808] loop0: detected capacity change from 0 to 256 [ 296.570202][ T5152] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 296.770817][ T8825] loop1: detected capacity change from 0 to 2048 [ 296.794298][ T5152] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.807404][ T5152] usb 6-1: config 1 has no interface number 1 [ 296.824446][ T5152] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.862869][ T5152] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 296.921653][ T8825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.962814][ T5152] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.990496][ T29] audit: type=1326 audit(1721848661.103:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 296.993506][ T8825] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.050437][ T5152] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.074115][ T5152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.105057][ T5165] usb 5-1: USB disconnect, device number 18 [ 297.113433][ T5152] usb 6-1: Product: syz [ 297.125504][ T5152] usb 6-1: Manufacturer: syz [ 297.130135][ T5152] usb 6-1: SerialNumber: syz [ 297.230985][ T29] audit: type=1326 audit(1721848661.103:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 297.358675][ T29] audit: type=1326 audit(1721848661.103:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 297.395462][ T29] audit: type=1326 audit(1721848661.103:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 297.431369][ T5152] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 297.445013][ T29] audit: type=1326 audit(1721848661.103:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 297.629686][ T8839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1015: bg 0: block 288: padding at end of block bitmap is not set [ 297.686506][ T8839] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117 [ 297.746825][ T29] audit: type=1326 audit(1721848661.103:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 297.910742][ T29] audit: type=1326 audit(1721848661.103:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 298.075147][ T29] audit: type=1326 audit(1721848661.103:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 298.105783][ T5152] usb 6-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 298.162256][ T29] audit: type=1326 audit(1721848661.103:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 298.266627][ T5547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.277276][ T5152] usb 6-1: USB disconnect, device number 14 [ 298.720533][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1024'. [ 298.730371][ T5266] udevd[5266]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.798910][ T5103] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 298.810848][ T5103] Bluetooth: hci4: Injecting HCI hardware error event [ 298.820841][ T5097] Bluetooth: hci4: hardware error 0x00 [ 298.862596][ T8857] loop2: detected capacity change from 0 to 64 [ 298.950975][ T8857] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 298.959590][ T8857] hfs: unable to parse mount options [ 299.431824][ T8827] loop0: detected capacity change from 0 to 40427 [ 299.472528][ T8827] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 299.547468][ T8827] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 299.691842][ T8827] F2FS-fs (loop0): Found nat_bits in checkpoint [ 299.729709][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.745980][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.754470][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.764611][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.781232][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 299.789214][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.990727][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.219482][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.521585][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.553081][ T8864] loop5: detected capacity change from 0 to 32768 [ 300.619391][ T8864] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1029 (8864) [ 300.748723][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.769833][ T8864] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 300.800620][ T8864] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 300.855916][ T8864] BTRFS info (device loop5): using free-space-tree [ 300.958867][ T5097] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 301.059280][ T8887] loop0: detected capacity change from 0 to 2048 [ 301.207330][ T8887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.327836][ T8887] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.876841][ T5097] Bluetooth: hci0: command tx timeout [ 302.070544][ T8918] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1033: bg 0: block 288: padding at end of block bitmap is not set [ 302.395033][ T8918] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -117 [ 302.433818][ T62] bridge_slave_1: left allmulticast mode [ 302.489233][ T62] bridge_slave_1: left promiscuous mode [ 302.560956][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 302.560982][ T29] audit: type=1804 audit(1721848666.693:438): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1029" name="/newroot/48/bus/bus" dev="loop5" ino=263 res=1 errno=0 [ 302.607353][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.793343][ T62] bridge_slave_0: left allmulticast mode [ 302.843809][ T62] bridge_slave_0: left promiscuous mode [ 302.908019][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.953494][ T5665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.964131][ T7650] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.075713][ T1787] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 303.319025][ T1787] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.356499][ T1787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.401049][ T1787] usb 2-1: config 0 descriptor?? [ 303.441681][ T1787] cp210x 2-1:0.0: cp210x converter detected [ 303.553847][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.576039][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.579084][ T29] audit: type=1326 audit(1721848667.713:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 303.606105][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.651415][ T1787] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 303.651725][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.665492][ T1787] cp210x 2-1:0.0: querying part number failed [ 303.676701][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.698910][ T29] audit: type=1326 audit(1721848667.763:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 303.699167][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.794308][ T1787] usb 2-1: cp210x converter now attached to ttyUSB0 [ 303.824336][ T29] audit: type=1326 audit(1721848667.763:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 303.870164][ T29] audit: type=1326 audit(1721848667.763:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 303.892107][ T29] audit: type=1326 audit(1721848667.763:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 303.914373][ T29] audit: type=1326 audit(1721848667.763:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 303.939596][ T29] audit: type=1326 audit(1721848667.763:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 303.961510][ T29] audit: type=1326 audit(1721848667.763:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 304.057551][ T29] audit: type=1326 audit(1721848667.763:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 304.079089][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.088097][ T5119] Bluetooth: hci0: command tx timeout [ 304.281465][ T8937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.606492][ T8927] loop0: detected capacity change from 0 to 40427 [ 304.617178][ T8927] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 304.652638][ T8927] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 304.727376][ T8927] F2FS-fs (loop0): Found nat_bits in checkpoint [ 304.919096][ T8927] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 304.930880][ T8927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 305.007405][ T8927] syz.0.1044: attempt to access beyond end of device [ 305.007405][ T8927] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.056838][ T8927] syz.0.1044: attempt to access beyond end of device [ 305.056838][ T8927] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 305.194366][ T5665] syz-executor: attempt to access beyond end of device [ 305.194366][ T5665] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 305.240718][ T5665] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 305.280439][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.322026][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.370843][ T62] bond0 (unregistering): Released all slaves [ 305.608785][ T8950] sctp: [Deprecated]: syz.2.1051 (pid 8950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.608785][ T8950] Use struct sctp_sack_info instead [ 305.823251][ T5152] usb 2-1: USB disconnect, device number 19 [ 305.850791][ T5152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 305.916130][ T5152] cp210x 2-1:0.0: device disconnected [ 305.927764][ T5119] Bluetooth: hci4: command tx timeout [ 306.176230][ T5119] Bluetooth: hci0: command tx timeout [ 307.195960][ T5152] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 307.385457][ T5152] usb 2-1: Using ep0 maxpacket: 8 [ 307.393499][ T5152] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.427033][ T5152] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 307.446186][ T5152] usb 2-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 307.489046][ T5152] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 307.518946][ T5152] usb 2-1: config 1 has no interface number 1 [ 307.553936][ T5152] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 307.576398][ T5152] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.598566][ T5152] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.620805][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.655931][ T5152] usb 2-1: Product: syz [ 307.660188][ T5152] usb 2-1: Manufacturer: syz [ 307.681063][ T5152] usb 2-1: SerialNumber: syz [ 307.706219][ T62] hsr_slave_0: left promiscuous mode [ 307.758410][ T62] hsr_slave_1: left promiscuous mode [ 307.821167][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.840135][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.875413][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 307.875437][ T29] audit: type=1326 audit(1721848671.993:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 307.885528][ T8982] loop5: detected capacity change from 0 to 256 [ 307.919167][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.937714][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.970393][ T29] audit: type=1326 audit(1721848671.993:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 307.991909][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.999190][ T5119] Bluetooth: hci4: command tx timeout [ 308.035625][ T62] veth1_macvtap: left promiscuous mode [ 308.053311][ T62] veth0_macvtap: left promiscuous mode [ 308.060947][ T5152] usb 2-1: USB disconnect, device number 20 [ 308.067480][ T62] veth1_vlan: left promiscuous mode [ 308.073021][ T62] veth0_vlan: left promiscuous mode [ 308.086666][ T29] audit: type=1326 audit(1721848672.003:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 308.107958][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.137197][ T29] audit: type=1326 audit(1721848672.003:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 308.158593][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.213520][ T29] audit: type=1326 audit(1721848672.003:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 308.239878][ T5119] Bluetooth: hci0: command tx timeout [ 308.260962][ T29] audit: type=1326 audit(1721848672.003:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 308.301993][ T29] audit: type=1326 audit(1721848672.003:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 308.342294][ T29] audit: type=1326 audit(1721848672.003:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 308.432518][ T29] audit: type=1326 audit(1721848672.003:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 308.462386][ T5266] udevd[5266]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.471470][ T29] audit: type=1326 audit(1721848672.003:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x7ffc0000 [ 309.480194][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 309.735597][ T5166] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 309.807205][ T8991] loop5: detected capacity change from 0 to 40427 [ 309.834134][ T8991] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 309.851583][ T8991] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 309.913473][ T8991] F2FS-fs (loop5): Found nat_bits in checkpoint [ 309.965308][ T62] team0 (unregistering): Port device team_slave_1 removed [ 309.984118][ T5166] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.004005][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.041450][ T5166] usb 3-1: config 0 descriptor?? [ 310.067532][ T8991] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 310.075897][ T5166] cp210x 3-1:0.0: cp210x converter detected [ 310.079170][ T8991] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 310.081948][ T5119] Bluetooth: hci4: command tx timeout [ 310.121893][ T8991] syz.5.1060: attempt to access beyond end of device [ 310.121893][ T8991] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.149921][ T8991] syz.5.1060: attempt to access beyond end of device [ 310.149921][ T8991] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 310.188303][ T62] team0 (unregistering): Port device team_slave_0 removed [ 310.225288][ T7650] syz-executor: attempt to access beyond end of device [ 310.225288][ T7650] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 310.254753][ T7650] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 310.330384][ T5166] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 310.338230][ T5166] cp210x 3-1:0.0: querying part number failed [ 310.347770][ T5166] usb 3-1: cp210x converter now attached to ttyUSB0 [ 310.505543][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.707608][ T25] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 310.723050][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.745649][ T25] usb 2-1: config 0 descriptor?? [ 310.925738][ T9015] loop5: detected capacity change from 0 to 64 [ 311.032703][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 311.044013][ T9015] hfs: unable to load iocharset "macice½s¸Vœ'"Ý=0x0000000000000000" [ 311.056503][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 311.064589][ T9015] hfs: unable to parse mount options [ 311.071049][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 311.113303][ T25] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 311.130686][ T25] [drm] Initialized udl on minor 2 [ 311.146374][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 311.166344][ T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 311.181296][ T9017] loop5: detected capacity change from 0 to 256 [ 311.204301][ T25] usb 2-1: USB disconnect, device number 21 [ 311.210646][ T5108] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 311.219604][ T5108] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 311.372082][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 312.155582][ T5119] Bluetooth: hci4: command tx timeout [ 312.653557][ T5162] usb 3-1: USB disconnect, device number 23 [ 312.743403][ T5162] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 312.762098][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.804949][ T5162] cp210x 3-1:0.0: device disconnected [ 312.815576][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.822896][ T8872] bridge_slave_0: entered allmulticast mode [ 312.871804][ T8872] bridge_slave_0: entered promiscuous mode [ 312.885585][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 312.899681][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.945656][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.989030][ T8872] bridge_slave_1: entered allmulticast mode [ 313.016762][ T8872] bridge_slave_1: entered promiscuous mode [ 313.106750][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 313.148319][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 313.186448][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 313.213956][ T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 313.276003][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.296639][ T9] usb 1-1: config 0 descriptor?? [ 313.374591][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.430569][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.722710][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.747442][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.808922][ T9] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 313.825632][ T9] hid-generic 0003:0158:0100.0012: unexpected long global item [ 313.862877][ T9] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 314.034197][ T9] usb 1-1: USB disconnect, device number 21 [ 314.129943][ T8872] team0: Port device team_slave_0 added [ 314.181377][ T8872] team0: Port device team_slave_1 added [ 314.348438][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.374840][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.470901][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.551842][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.569501][ T9055] loop2: detected capacity change from 0 to 40427 [ 314.585030][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.612917][ T9055] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 314.640428][ T9055] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 314.683651][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.738858][ T9055] F2FS-fs (loop2): Found nat_bits in checkpoint [ 314.919965][ T9055] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 314.933112][ T9055] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 314.985831][ T9055] syz.2.1078: attempt to access beyond end of device [ 314.985831][ T9055] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.016021][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.059872][ T9074] syz.2.1078: attempt to access beyond end of device [ 315.059872][ T9074] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 315.093651][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 315.217518][ T5915] syz-executor: attempt to access beyond end of device [ 315.217518][ T5915] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 315.257874][ T5915] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 315.507962][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.682254][ T8872] hsr_slave_0: entered promiscuous mode [ 315.708568][ T8872] hsr_slave_1: entered promiscuous mode [ 315.726269][ T8872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.733879][ T8872] Cannot create hsr debugfs directory [ 315.781217][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.825939][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 315.935497][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 316.047089][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.075604][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 316.108626][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.137410][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.155941][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.166072][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 316.176778][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.177867][ T9] usb 1-1: config 0 descriptor?? [ 316.189063][ T25] usb 2-1: config 0 descriptor?? [ 316.261611][ T9] cp210x 1-1:0.0: cp210x converter detected [ 316.268500][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 316.268519][ T29] audit: type=1326 audit(1721848680.393:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b24b75f19 code=0x0 [ 316.428964][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.436527][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.443963][ T8928] bridge_slave_0: entered allmulticast mode [ 316.452877][ T8928] bridge_slave_0: entered promiscuous mode [ 316.471106][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 316.479801][ T9] cp210x 1-1:0.0: querying part number failed [ 316.489062][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.499688][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 316.507217][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.527032][ T8928] bridge_slave_1: entered allmulticast mode [ 316.534841][ T8928] bridge_slave_1: entered promiscuous mode [ 316.638157][ T25] kone 0003:1E7D:2CED.0013: item fetching failed at offset 2/5 [ 316.659006][ T25] kone 0003:1E7D:2CED.0013: parse failed [ 316.675698][ T25] kone 0003:1E7D:2CED.0013: probe with driver kone failed with error -22 [ 316.824742][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.829730][ T25] usb 2-1: USB disconnect, device number 22 [ 316.831586][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.963071][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.983785][ T9098] ip6gre0: entered promiscuous mode [ 317.000613][ T9098] vlan2: entered promiscuous mode [ 317.018700][ T9098] ip6gre0: left promiscuous mode [ 317.201707][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.566169][ T8928] team0: Port device team_slave_0 added [ 317.609462][ T62] bridge_slave_1: left allmulticast mode [ 317.665451][ T62] bridge_slave_1: left promiscuous mode [ 317.691091][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.722283][ T62] bridge_slave_0: left allmulticast mode [ 317.745467][ T62] bridge_slave_0: left promiscuous mode [ 317.758819][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.541468][ T5167] usb 1-1: USB disconnect, device number 22 [ 318.554011][ T5167] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.593125][ T5167] cp210x 1-1:0.0: device disconnected [ 318.735295][ T9117] loop1: detected capacity change from 0 to 40427 [ 318.760036][ T9117] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 318.778840][ T9117] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 318.827133][ T9117] F2FS-fs (loop1): Found nat_bits in checkpoint [ 318.888920][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.903111][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.924267][ T62] bond0 (unregistering): Released all slaves [ 319.063519][ T9117] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 319.086822][ T9117] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 319.131919][ T9117] syz.1.1091: attempt to access beyond end of device [ 319.131919][ T9117] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 319.174114][ T9117] syz.1.1091: attempt to access beyond end of device [ 319.174114][ T9117] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 319.194398][ T9135] loop0: detected capacity change from 0 to 1024 [ 319.205875][ T9135] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 319.244256][ T8928] team0: Port device team_slave_1 added [ 319.267510][ T5547] syz-executor: attempt to access beyond end of device [ 319.267510][ T5547] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 319.293429][ T5547] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 319.295090][ T9135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.332160][ T9135] EXT4-fs warning (device loop0): ext4_resize_fs:2018: can't read last block, resize aborted [ 319.364329][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 319.511458][ T5665] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.983965][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.015666][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.075799][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.095688][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 320.116173][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.123666][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.194245][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.356891][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.375878][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.390014][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 320.413039][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.446848][ T25] usb 1-1: config 0 descriptor?? [ 320.642838][ T62] hsr_slave_0: left promiscuous mode [ 320.699263][ T62] hsr_slave_1: left promiscuous mode [ 320.722480][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.736270][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.767345][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.781996][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.891233][ T62] veth1_macvtap: left promiscuous mode [ 320.901439][ T9148] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 320.909427][ T62] veth0_macvtap: left promiscuous mode [ 320.910417][ T25] kone 0003:1E7D:2CED.0014: item fetching failed at offset 2/5 [ 320.930843][ T62] veth1_vlan: left promiscuous mode [ 320.936485][ T25] kone 0003:1E7D:2CED.0014: parse failed [ 320.942757][ T25] kone 0003:1E7D:2CED.0014: probe with driver kone failed with error -22 [ 320.942835][ T62] veth0_vlan: left promiscuous mode [ 320.957099][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 321.165621][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 321.175257][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 321.192016][ T25] usb 1-1: USB disconnect, device number 23 [ 321.211973][ T9] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 321.269786][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 321.302985][ T9] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 321.327592][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 321.338226][ T9] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 321.379443][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 321.395385][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.413929][ T9] usb 2-1: Product: syz [ 321.422690][ T9] usb 2-1: Manufacturer: syz [ 321.456727][ T9] usb 2-1: SerialNumber: syz [ 321.588004][ T9182] loop2: detected capacity change from 0 to 1024 [ 321.645007][ T9182] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 321.709843][ T9182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.750301][ T9] usb 2-1: USB disconnect, device number 23 [ 321.792712][ T9182] EXT4-fs warning (device loop2): ext4_resize_fs:2018: can't read last block, resize aborted [ 321.803792][ T29] audit: type=1804 audit(1721848685.923:586): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1107" name="/newroot/192/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 322.009162][ T5915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.155800][ T5119] Bluetooth: hci0: command 0x0401 tx timeout [ 322.401548][ T9196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1110'. [ 323.219049][ T9198] loop1: detected capacity change from 0 to 128 [ 323.234641][ T9178] loop5: detected capacity change from 0 to 40427 [ 323.262997][ T9198] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.293196][ T9198] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 323.331180][ T9178] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 323.351760][ T9178] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 323.410638][ T5547] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.422835][ T9178] F2FS-fs (loop5): Found nat_bits in checkpoint [ 323.623155][ T9178] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 323.632886][ T9178] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 323.703236][ T9178] syz.5.1106: attempt to access beyond end of device [ 323.703236][ T9178] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.733419][ T9178] syz.5.1106: attempt to access beyond end of device [ 323.733419][ T9178] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 323.831501][ T7650] syz-executor: attempt to access beyond end of device [ 323.831501][ T7650] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 323.848337][ T7650] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 323.866517][ T62] team0 (unregistering): Port device team_slave_1 removed [ 323.940086][ T62] team0 (unregistering): Port device team_slave_0 removed [ 324.815976][ T8928] hsr_slave_0: entered promiscuous mode [ 324.866429][ T8928] hsr_slave_1: entered promiscuous mode [ 324.902495][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.920339][ T8928] Cannot create hsr debugfs directory [ 324.934675][ T9224] fuse: Bad value for 'fd' [ 325.017717][ T9226] loop1: detected capacity change from 0 to 512 [ 325.173270][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1121'. [ 325.272707][ T9226] EXT4-fs (loop1): Test dummy encryption mode enabled [ 325.387602][ T9226] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1120: casefold flag without casefold feature [ 325.438865][ T9238] loop2: detected capacity change from 0 to 128 [ 325.488061][ T9226] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1120: couldn't read orphan inode 15 (err -117) [ 325.524287][ T8872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 325.557522][ T9226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.574439][ T9238] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.592598][ T9238] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.627528][ T5162] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 325.651693][ T9226] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 325.665663][ T8872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 325.681969][ T8872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 325.695711][ T5167] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 325.717502][ T8872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 325.734996][ T9226] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1120: Directory hole found for htree leaf block 0 [ 325.783957][ T5915] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.871526][ T5162] usb 6-1: Using ep0 maxpacket: 8 [ 325.919257][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.935507][ T5162] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 325.955438][ T5162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.963639][ T5162] usb 6-1: Product: syz [ 325.986059][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.004275][ T5162] usb 6-1: Manufacturer: syz [ 326.014094][ T5167] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 326.029387][ T5162] usb 6-1: SerialNumber: syz [ 326.031786][ T5547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.068723][ T5162] usb 6-1: config 0 descriptor?? [ 326.085020][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.138923][ T5167] usb 1-1: config 0 descriptor?? [ 326.148662][ T5162] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 326.580930][ T5167] usbhid 1-1:0.0: can't add hid device: -71 [ 326.594781][ T5167] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 326.645890][ T5167] usb 1-1: USB disconnect, device number 24 [ 326.983218][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.179387][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.255138][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.262385][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.428601][ C1] Oops: general protection fault, probably for non-canonical address 0xe3fffb240024fde2: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 327.441408][ C1] KASAN: maybe wild-memory-access in range [0x1ffff9200127ef10-0x1ffff9200127ef17] [ 327.450714][ C1] CPU: 1 UID: 0 PID: 9280 Comm: syz.1.1131 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 327.461059][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 327.471306][ C1] RIP: 0010:__cpu_map_flush+0x42/0xd0 [ 327.476702][ C1] Code: e8 23 d9 d6 ff 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 6d 24 3e 00 49 8b 1e 4c 39 f3 74 77 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 4f 24 3e 00 4c 8b 23 48 8d 7b c0 [ 327.496415][ C1] RSP: 0018:ffffc90000a18b10 EFLAGS: 00010216 [ 327.502510][ C1] RAX: 03ffff240024fde2 RBX: 1ffff9200127ef10 RCX: ffff88805665bc00 [ 327.506052][ T8928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.510569][ C1] RDX: 0000000080000100 RSI: 0000000000000000 RDI: ffffc900093f7800 [ 327.510591][ C1] RBP: dffffc0000000000 R08: ffffffff89697d9a R09: 1ffffffff1f5f4bd [ 327.510612][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f4be R12: ffffc900093f7800 [ 327.541366][ C1] R13: ffffc900093f77c0 R14: ffffc900093f7800 R15: dffffc0000000000 [ 327.549545][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 327.558598][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.565296][ C1] CR2: 00007f8089c356b8 CR3: 00000000119b4000 CR4: 0000000000350ef0 [ 327.573288][ C1] Call Trace: [ 327.576576][ C1] [ 327.579424][ C1] ? __die_body+0x88/0xe0 [ 327.583769][ C1] ? die_addr+0x108/0x140 [ 327.588121][ C1] ? exc_general_protection+0x3dd/0x5d0 [ 327.593782][ C1] ? asm_exc_general_protection+0x26/0x30 [ 327.599630][ C1] ? xdp_do_check_flushed+0x10a/0x240 [ 327.605184][ C1] ? __cpu_map_flush+0x42/0xd0 [ 327.609955][ C1] xdp_do_check_flushed+0x136/0x240 [ 327.615255][ C1] __napi_poll+0xe4/0x490 [ 327.619594][ C1] net_rx_action+0x89b/0x1240 [ 327.624278][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 327.629498][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 327.634703][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.640429][ C1] ? sched_clock+0x4a/0x70 [ 327.644871][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.651306][ C1] handle_softirqs+0x2c6/0x970 [ 327.656534][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 327.661347][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 327.666650][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.672309][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 327.677544][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 327.682163][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 327.687384][ C1] irq_exit_rcu+0x9/0x30 [ 327.691656][ C1] common_interrupt+0xaa/0xd0 [ 327.696360][ C1] [ 327.699394][ C1] [ 327.702329][ C1] asm_common_interrupt+0x26/0x40 [ 327.707372][ C1] RIP: 0010:obj_cgroup_uncharge_pages+0x14e/0x200 [ 327.713804][ C1] Code: 00 9c 8f 44 24 40 42 80 3c 2b 00 74 05 e8 9a de f7 ff f6 44 24 41 02 0f 85 82 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 4c 89 e7 <8b> 74 24 1c e8 b9 e3 ff ff 49 8d 5c 24 54 48 89 d8 48 c1 e8 03 42 [ 327.733502][ C1] RSP: 0018:ffffc900093f79a0 EFLAGS: 00000206 [ 327.739578][ C1] RAX: c25505daa4511900 RBX: 1ffff9200127ef3c RCX: ffffffff947fa903 [ 327.747549][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcad5a0 RDI: ffff88801fd6e000 [ 327.755519][ C1] RBP: ffffc900093f7a78 R08: ffffffff8fafa5ef R09: 1ffffffff1f5f4bd [ 327.763490][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f4be R12: ffff88801fd6e000 [ 327.772000][ C1] R13: dffffc0000000000 R14: 1ffff9200127ef38 R15: 0000000000000246 [ 327.780077][ C1] ? __pfx_obj_cgroup_uncharge_pages+0x10/0x10 [ 327.786250][ C1] ? __pfx_account_kernel_stack+0x10/0x10 [ 327.792149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.797873][ C1] ? percpu_ref_put+0x19/0x180 [ 327.802640][ C1] __memcg_kmem_uncharge_page+0xe9/0x290 [ 327.808415][ C1] do_exit+0x1d02/0x27f0 [ 327.812664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.818302][ C1] ? __pfx_do_exit+0x10/0x10 [ 327.822894][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.828285][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.833949][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.839946][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.846454][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 327.851580][ C1] do_group_exit+0x207/0x2c0 [ 327.856170][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.861382][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.867036][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 327.872241][ C1] get_signal+0x16a1/0x1740 [ 327.876763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.882493][ C1] ? __pfx_get_signal+0x10/0x10 [ 327.887357][ C1] arch_do_signal_or_restart+0x96/0x860 [ 327.892914][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 327.899186][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.905216][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 327.910944][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 327.916504][ C1] do_syscall_64+0x100/0x230 [ 327.921105][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.927030][ C1] RIP: 0033:0x7f8eddb75f19 [ 327.931442][ C1] Code: Unable to access opcode bytes at 0x7f8eddb75eef. [ 327.938468][ C1] RSP: 002b:00007f8edd5ff0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 327.946885][ C1] RAX: fffffffffffffe00 RBX: 00007f8eddd06040 RCX: 00007f8eddb75f19 [ 327.954858][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8eddd06040 [ 327.962824][ C1] RBP: 00007f8eddd06038 R08: 00007f8edd5ff6c0 R09: 00007f8edd5ff6c0 [ 327.970793][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8eddd06044 [ 327.978760][ C1] R13: 000000000000006e R14: 00007ffd459e03e0 R15: 00007ffd459e04c8 [ 327.986745][ C1] [ 327.989790][ C1] Modules linked in: [ 327.994306][ C1] ---[ end trace 0000000000000000 ]--- [ 327.999808][ C1] RIP: 0010:__cpu_map_flush+0x42/0xd0 [ 328.005306][ C1] Code: e8 23 d9 d6 ff 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 6d 24 3e 00 49 8b 1e 4c 39 f3 74 77 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 4f 24 3e 00 4c 8b 23 48 8d 7b c0 [ 328.025095][ C1] RSP: 0018:ffffc90000a18b10 EFLAGS: 00010216 [ 328.031228][ C1] RAX: 03ffff240024fde2 RBX: 1ffff9200127ef10 RCX: ffff88805665bc00 [ 328.039326][ C1] RDX: 0000000080000100 RSI: 0000000000000000 RDI: ffffc900093f7800 [ 328.047555][ C1] RBP: dffffc0000000000 R08: ffffffff89697d9a R09: 1ffffffff1f5f4bd [ 328.055827][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f4be R12: ffffc900093f7800 [ 328.064243][ C1] R13: ffffc900093f77c0 R14: ffffc900093f7800 R15: dffffc0000000000 [ 328.072261][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 328.081264][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.087904][ C1] CR2: 00007f8089c356b8 CR3: 000000000e134000 CR4: 0000000000350ef0 [ 328.095928][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 328.103321][ C1] Kernel Offset: disabled [ 328.107639][ C1] Rebooting in 86400 seconds..