last executing test programs: 24m43.910860335s ago: executing program 32 (id=957): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) preadv2(r0, 0x0, 0x0, 0x8, 0x3, 0x1b) 22m5.457018956s ago: executing program 33 (id=1596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r1, 0x403, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4800) 20m18.468061258s ago: executing program 34 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, r1, 0x201, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 17m12.108925603s ago: executing program 35 (id=2612): io_setup(0x4, &(0x7f0000002380)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 14m16.867292628s ago: executing program 36 (id=3253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x8809}, @val={0x3, 0x1, 0x4, 0x7, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3f, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x14, 0x0, 0x200}}}}, 0x36) 13m2.677662481s ago: executing program 37 (id=3551): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 12m50.1740929s ago: executing program 9 (id=3604): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) 12m49.143704481s ago: executing program 9 (id=3607): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) 12m48.187853006s ago: executing program 9 (id=3609): setresuid(0xee00, 0xee00, 0x0) r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x42800) 12m47.50308761s ago: executing program 9 (id=3611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 12m45.609955281s ago: executing program 9 (id=3615): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), &(0x7f0000000080)=@ng={0x4, 0x14}, 0x2, 0x0) mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, r0, 0x180000000) 12m45.572068368s ago: executing program 7 (id=3616): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) 12m40.607181856s ago: executing program 38 (id=3618): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 12m40.482887435s ago: executing program 7 (id=3621): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x1) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 12m39.902954853s ago: executing program 7 (id=3622): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x1c}}, 0x40) 12m39.226574704s ago: executing program 7 (id=3624): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 12m37.682299861s ago: executing program 7 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 12m37.629828205s ago: executing program 9 (id=3627): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0xabd, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 12m34.591291011s ago: executing program 39 (id=3627): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0xabd, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 12m31.819038357s ago: executing program 7 (id=3633): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 12m29.813210537s ago: executing program 40 (id=3633): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 7m20.18589128s ago: executing program 3 (id=4748): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000300000014000100fc"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0xa800) 7m19.234114627s ago: executing program 3 (id=4751): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 7m18.041375744s ago: executing program 3 (id=4754): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) 7m16.317980018s ago: executing program 3 (id=4755): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 7m15.277755692s ago: executing program 3 (id=4759): openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x10000, 0x4000009, 0x10000800, 0xe0df, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7m14.282675176s ago: executing program 3 (id=4762): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m11.208715164s ago: executing program 41 (id=4762): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m17.130476654s ago: executing program 2 (id=5171): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42483, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, 0x0, 0x0, 0x600}]) 5m15.238420747s ago: executing program 2 (id=5177): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 5m13.837471463s ago: executing program 2 (id=5181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}}, 0x8c0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 5m12.176870854s ago: executing program 2 (id=5188): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5m9.959065336s ago: executing program 2 (id=5197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 5m8.083672782s ago: executing program 2 (id=5201): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) 5m4.677284051s ago: executing program 42 (id=5201): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) 3m12.358788206s ago: executing program 5 (id=5585): unshare(0x600) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) 3m11.314706813s ago: executing program 5 (id=5590): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x7, 0x0, r0, 0x0, 0x0, 0x600}]) 3m10.294890833s ago: executing program 5 (id=5594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000ec9600000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000040093"], 0x40}}, 0x0) 3m9.240367035s ago: executing program 5 (id=5599): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000040)=ANY=[], 0x4, 0x181, &(0x7f0000001000)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x82001, 0x0) 3m7.871526887s ago: executing program 5 (id=5603): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) 3m6.966810996s ago: executing program 5 (id=5607): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m2.647518134s ago: executing program 43 (id=5607): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.051647299s ago: executing program 1 (id=6179): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xc, 0x0, 0xffffffffffffffa6, 0x64, @dev={0xac, 0x14, 0x14, 0x1e}, 0x1, "8628"}]}}}}}}}}, 0x0) 10.811676907s ago: executing program 1 (id=6184): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "55d94ec93a"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) 9.687612615s ago: executing program 1 (id=6189): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) memfd_secret(0x80000) 7.107730741s ago: executing program 0 (id=6196): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000001700001c001a80180005801400058008000200c7000000080001"], 0x3c}}, 0x0) 7.043966717s ago: executing program 6 (id=6198): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) 6.778868668s ago: executing program 4 (id=6199): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') unlink(&(0x7f0000000000)='./file0/file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 6.340966108s ago: executing program 0 (id=6200): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="a253f38ef45c5805a1f7209442f3c7816c9f1839dfafa7db73e40ff90900000000000000fb9013ecf316395d0386140380cd7f90790e1340b58000000000000047b5002b230d0aa7a2ff07e9d1c3c23f5014fd86b67be57ba7a643fa610de58dcea6035a66e4df2c9e7769341567fc5856dc07000000321254149c32f96a814325cb5ef9a7a8a8028078b3d99bf6f04222c7c021e8fac46cfca40bf640af89a098879e4216582ffd6d3e5a8c1eda8852bdc0b4bf285872448857e3b7681329264294965ea12c6e4bb575cb5d8eea49f4ca025c26f6e97edd53422a09e73c21c23b5eb6d5f9f3f4a0839e8b9ffe9ab485f55bb29c029bef43c8f9", 0xfa}], 0x1, 0x0, 0x0, 0x3}, 0x0) 6.182876898s ago: executing program 6 (id=6201): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="8f4c1e94dcc0"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) 5.982435083s ago: executing program 8 (id=6202): ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000001c0)={0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0xa) 5.214502466s ago: executing program 0 (id=6203): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303066662c63726561746f723d5a1b3b9a2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653ddde29ffa2c6e6c733d69736f383835392d342c00"], 0x46, 0x718, &(0x7f00000011c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2070080, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5.067407492s ago: executing program 6 (id=6204): syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000ac0)={[{@jqfmt_vfsold}, {@noquota}, {@debug}, {@noload}, {@stripe={'stripe', 0x3d, 0x4}}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x183081, 0x0) 5.061130694s ago: executing program 4 (id=6205): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x580, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x51c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}]}}}, {0x410, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x400, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x1ac, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "f9613b739952821aef911a658da3128bb307879bc633026beaf1d83797262b74f2b6804b8e6344a5b219739b198d168efcf63b8046d373826779208a414debe2eece6dc9af57619d1067828507e80379b88f08207c509859203d75b8f1ae46289e3c5171e1340083e1b27112080bc651291bdbbaf7328cc2f3fd43fb965c209969e1d6362b99137b5b7265c27c62ae8cb321781c2aa463738ec2f493adcb3ae85839e3e6696061a11b9d2d901770b92e291492c1de"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x65, 0x1, "96b4fb240638b2e3cee9fc625003a7c3ebacf2787e75ca8bc337b6fe7283fd0f52eb90eca13bbde1f2f7dc9283c590f3c47c838901a97310edad49970c4695003709e3e40a1817c45ceaeb80cea87fef947eccc1ddb6dd8e98463ac56e7be62801"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_BITWISE_DATA={0x220, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "2a695aab2ec6b0617260ac1070213e395889db78ed9b8e693d4a479f45f502753413d0bd681b1bb08b9e5ebd4de86612d0f7e47b55511c8c169688c25a732cb3d53d29cbe4cf132aaaf005e57afdce1764ed19c20620e5b0995d23fc2e44632ade8c992bd60a75c11b9461dd62ec957135177a9fffc9bfcc567e5fe090f9bbd5b98575fd527b26063cc597f60967484ecdf822b0226818915eef96084b50aa4943d53b6988e9ea54e70981006d67f9e2f1029a134ab0fe9ec129745e94c361cd8b3c9d455a29182eadc45a559ee4dcd91cb43483cab4bab99e4ec22c501c3bf55bb0deed89855e3404fdd276e0cfc484c66e33a9b4"}, @NFTA_DATA_VALUE={0xd, 0x1, "9a318185db1c8e62bb"}, @NFTA_DATA_VALUE={0x99, 0x1, "7941a83916dfc4bf6121dfd7271095d54dba8a5cced15be1852f6dff9043669769f344924395c7070a816eebbf0ad2e779912ba7a4b29dc646bea2e3f2e391bfd9e4472f359e133ed6aa74089c81aec18b3c3ff72c9f1c4f649753fef4d8f8524b9cddc25a8328395b7968df7f0ecfdb6a0b3bc0dbb156fe3b43ca66d14b717d9bf6929b786cd9e5ffec972f8913799268f1c2dee5"}]}, @NFTA_BITWISE_MASK={0x28, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}]}, @NFT_MSG_DELFLOWTABLE={0x1e4, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x180000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x100, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d6bec83}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xc8, 0x14, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x81, 0x8, "8a976fa4018b050fbe9b6235e5bb5aca4cbed691d4fc9e668b34950c366fc10c66bc8ef1c92e43665d60e8cccf59d6868ff3df43bd6716063c3e5a22347a3ca39cd01a7acdc03e3b5ba2a5ca85c0b0c0804a043426b568f5f65859aaebf14f70af9ae67b6b1ea02b735afa507439baca9270fc76d4efe724382bf904f5"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}], {0x14}}, 0x9c4}, 0x1, 0x0, 0x0, 0x4000}, 0x884) 4.981862577s ago: executing program 8 (id=6206): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) 4.861905373s ago: executing program 1 (id=6207): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x801, 0x8000, 0x0, 0x0}], 0x1}) 4.022550297s ago: executing program 4 (id=6208): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x0) 3.821849128s ago: executing program 0 (id=6209): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58}, 0x28) tee(r0, r1, 0x5, 0x2) 3.767199099s ago: executing program 8 (id=6210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x9, 0x200, 0x40000, 0x0, 0xfffffffd, 0x0, 0x2}}) 2.966653386s ago: executing program 4 (id=6211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf}]}]}, 0x3c}}, 0x0) 2.322312566s ago: executing program 8 (id=6212): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 2.319670671s ago: executing program 6 (id=6213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0) 2.167059103s ago: executing program 0 (id=6214): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.708151096s ago: executing program 1 (id=6215): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x605f}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_DIRECT_QLEN={0x1, 0x5, 0xa9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) 1.562420705s ago: executing program 4 (id=6216): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 1.234900814s ago: executing program 6 (id=6217): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) 1.012969254s ago: executing program 8 (id=6218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 738.011338ms ago: executing program 0 (id=6219): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 699.350406ms ago: executing program 4 (id=6220): r0 = socket(0x10, 0x80003, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 613.728222ms ago: executing program 1 (id=6221): setreuid(0x0, 0xee00) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) 315.854505ms ago: executing program 6 (id=6222): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=6223): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x6) kernel console output (not intermixed with test programs): "/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1550.726953][ T30] audit: type=1326 audit(1769055617.593:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1551.276278][ T30] audit: type=1326 audit(1769055617.633:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1551.300241][ T30] audit: type=1326 audit(1769055617.633:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1552.525645][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.628512][T18669] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 1552.879980][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.081011][T12405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.088652][T12405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.271427][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.279473][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.093873][T18687] trusted_key: encrypted_key: keyword 'upmate' not recognized [ 1556.107053][T18713] netlink: 'syz.2.4838': attribute type 1 has an invalid length. [ 1556.283265][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.947800][T18738] loop5: detected capacity change from 0 to 64 [ 1559.915146][T18482] veth0_vlan: entered promiscuous mode [ 1560.133645][T18482] veth1_vlan: entered promiscuous mode [ 1560.258478][T18755] loop0: detected capacity change from 0 to 4096 [ 1560.422169][T18755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1560.744376][T18482] veth0_macvtap: entered promiscuous mode [ 1560.885246][T18482] veth1_macvtap: entered promiscuous mode [ 1561.307015][T14872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.320524][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.371853][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.747291][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4856'. [ 1561.818415][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4856'. [ 1561.871262][T12405] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.883593][T12405] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.942837][T12405] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.019533][T12405] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.469323][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1562.877001][T18790] loop5: detected capacity change from 0 to 1024 [ 1566.818796][T18838] overlayfs: missing 'workdir' [ 1568.684554][T18862] loop5: detected capacity change from 0 to 64 [ 1568.841066][T18862] Trying to free block not in datazone [ 1568.896771][T18862] minix_free_block (loop5:21): bit already cleared [ 1569.924207][T18876] loop2: detected capacity change from 0 to 65 [ 1570.064523][T18876] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1571.022479][ T6472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.030830][ T6472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.043405][T11366] kernel write not supported for file /input/event0 (pid: 11366 comm: kworker/1:4) [ 1571.536351][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.544605][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.562145][T18887] loop2: detected capacity change from 0 to 512 [ 1571.681620][T18887] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1571.817076][T18888] loop1: detected capacity change from 0 to 2048 [ 1571.897280][T18888] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1573.019244][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4764'. [ 1575.010613][T18925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1579.087123][T18980] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1579.097172][T18980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1579.431826][T18984] loop0: detected capacity change from 0 to 64 [ 1579.526492][T18984] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1579.666939][T18984] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop0:00000002 [ 1580.824031][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1581.083616][T19001] loop0: detected capacity change from 0 to 1024 [ 1581.744231][T15893] hfsplus: b-tree write err: -5, ino 4 [ 1582.539838][T19016] loop5: detected capacity change from 0 to 128 [ 1582.730630][T19016] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1582.847244][T19016] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1583.943779][T15116] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1584.004070][T19030] loop2: detected capacity change from 0 to 512 [ 1584.260782][T19030] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1584.273656][T19030] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 1584.284223][T19030] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4940: Corrupt directory, running e2fsck is recommended [ 1584.335516][T19030] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1584.409688][T19030] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.4940: corrupted in-inode xattr: e_name out of bounds [ 1584.425772][T19030] EXT4-fs (loop2): Remounting filesystem read-only [ 1584.441029][T19030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1584.995295][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.052531][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4946'. [ 1586.486411][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.493115][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1587.530244][T19070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1588.278749][T19074] loop8: detected capacity change from 0 to 128 [ 1588.433335][T19074] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1588.521253][T19074] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1589.100367][T18482] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1589.975726][T19102] loop8: detected capacity change from 0 to 128 [ 1593.127499][ T5838] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1593.372183][ T5838] usb 9-1: config 4 has an invalid interface number: 231 but max is 0 [ 1593.380917][ T5838] usb 9-1: config 4 has no interface number 0 [ 1593.460858][ T5838] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1593.470555][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.479033][ T5838] usb 9-1: Product: syz [ 1593.483413][ T5838] usb 9-1: Manufacturer: syz [ 1593.488391][ T5838] usb 9-1: SerialNumber: syz [ 1593.692022][ T5838] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1594.172469][ T5838] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1594.183558][ T5838] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1594.402792][T11366] usb 9-1: USB disconnect, device number 5 [ 1594.896624][T19156] program syz.0.4978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1599.122092][T19210] loop0: detected capacity change from 0 to 1024 [ 1599.165746][T19210] EXT4-fs: Ignoring removed orlov option [ 1599.223047][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4994'. [ 1599.333106][T19210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.487949][T19210] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1599.613801][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1599.613899][ T30] audit: type=1800 audit(1769055666.623:259): pid=19210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4992" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1599.667919][T19210] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.4992: lblock 0 mapped to illegal pblock 0 (length 1) [ 1599.708616][T19221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1600.198262][T19228] loop1: detected capacity change from 0 to 1024 [ 1600.294382][T19228] EXT4-fs: Ignoring removed bh option [ 1600.339344][T19228] EXT4-fs: inline encryption not supported [ 1600.367272][T14872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1600.408497][T19228] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1600.500935][T19228] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1600.631495][T19228] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.4995: lblock 2 mapped to illegal pblock 2 (length 1) [ 1600.727503][T19228] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1600.785553][T19228] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.4995: lblock 0 mapped to illegal pblock 48 (length 1) [ 1600.971534][T19228] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1600.980893][T19228] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4995: Failed to acquire dquot type 0 [ 1601.090592][T19228] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1601.134094][T19228] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.4995: mark_inode_dirty error [ 1601.243483][T19228] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1601.310497][T19228] EXT4-fs (loop1): 1 orphan inode deleted [ 1601.334042][ T6472] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 1601.362868][T19228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.445596][ T6472] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1601.454647][ T6472] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 1601.773804][T19228] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.4995: lblock 0 mapped to illegal pblock 48 (length 1) [ 1601.888761][T19228] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 1602.311063][T19246] loop8: detected capacity change from 0 to 128 [ 1602.527811][T19248] loop5: detected capacity change from 0 to 512 [ 1602.661150][T15058] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.743819][T19248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1602.840272][T19248] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.758927][T15116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.477030][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5005'. [ 1606.264788][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5013'. [ 1606.274397][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5013'. [ 1607.162849][T19299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5018'. [ 1608.088426][T19308] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5020'. [ 1608.326195][T19313] program syz.1.5023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1609.562015][T19323] loop8: detected capacity change from 0 to 2048 [ 1609.843263][T19323] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.018067][T19323] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.5026: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1610.153621][T19323] EXT4-fs (loop8): Remounting filesystem read-only [ 1610.608156][T18482] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.674171][T19362] loop1: detected capacity change from 0 to 256 [ 1612.990589][T19362] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 1613.552550][T19372] bond1: entered promiscuous mode [ 1613.598843][T19372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1613.678396][T19372] team0: Port device bond1 added [ 1616.072163][T19405] loop8: detected capacity change from 0 to 256 [ 1616.111649][T19405] exfat: Deprecated parameter 'namecase' [ 1616.304492][T19405] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1618.235285][T19423] loop0: detected capacity change from 0 to 256 [ 1618.288086][T19423] exfat: Deprecated parameter 'utf8' [ 1618.527634][T19423] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1619.596727][T19438] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1619.606518][T19438] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1619.617490][T19438] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 1621.134302][T19460] loop5: detected capacity change from 0 to 64 [ 1621.282345][T19461] loop8: detected capacity change from 0 to 524287999 [ 1621.447034][T19459] loop8: detected capacity change from 0 to 1024 [ 1622.258524][T13026] hfsplus: b-tree write err: -5, ino 4 [ 1623.577760][T19484] loop0: detected capacity change from 0 to 256 [ 1623.757640][T19484] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8a8ef55c, utbl_chksum : 0xe619d30d) [ 1625.951025][T19506] loop8: detected capacity change from 0 to 16 [ 1626.067133][T19506] erofs (device loop8): mounted with root inode @ nid 36. [ 1627.214831][T19519] loop2: detected capacity change from 0 to 164 [ 1628.479942][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 1628.550897][T19535] macvlan0: entered promiscuous mode [ 1628.571265][T19535] netlink: 'syz.2.5100': attribute type 1 has an invalid length. [ 1628.579719][T19535] netlink: 'syz.2.5100': attribute type 2 has an invalid length. [ 1628.588269][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 1630.329032][ T30] audit: type=1800 audit(1769055697.353:260): pid=19552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5107" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1631.304975][T19564] loop5: detected capacity change from 0 to 64 [ 1632.177424][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5113'. [ 1633.727042][T19593] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1633.776189][ T9637] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1633.991804][ T9637] usb 9-1: Using ep0 maxpacket: 32 [ 1634.016010][ T9637] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1634.024790][ T9637] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1634.033795][ T9637] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1634.043734][ T9637] usb 9-1: config 1 has no interface number 0 [ 1634.145173][T19594] loop1: detected capacity change from 0 to 4096 [ 1634.216625][ T9637] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1634.228062][ T9637] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1634.241537][ T9637] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1634.251074][ T9637] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.414242][T19595] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1634.524912][ T9637] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1634.627733][T19594] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 1634.736618][T19594] Remounting filesystem read-only [ 1634.755333][ T9637] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1635.322958][T14470] usb 9-1: USB disconnect, device number 6 [ 1635.397966][T14470] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1637.015162][T19621] binder: 19618:19621 ioctl c018620c 80000000 returned -22 [ 1638.530108][T19638] loop2: detected capacity change from 0 to 128 [ 1638.663943][T19638] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1638.817433][T19638] ext4 filesystem being mounted at /1108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1639.647649][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1641.510097][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5149'. [ 1641.958571][ T9637] IPVS: starting estimator thread 0... [ 1642.067700][T19679] IPVS: using max 192 ests per chain, 9600 per kthread [ 1644.868054][T18160] Bluetooth: hci4: command 0x0406 tx timeout [ 1645.189052][T19715] program syz.0.5164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1647.324243][T19736] loop2: detected capacity change from 0 to 1024 [ 1647.628035][T19736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1647.666563][T19736] ext4 filesystem being mounted at /1115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1647.930946][T19740] loop5: detected capacity change from 0 to 2048 [ 1647.959203][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1647.966187][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1648.097349][T19744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1648.247987][T19748] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1648.458090][T19750] netlink: 'syz.0.5175': attribute type 16 has an invalid length. [ 1648.466385][T19750] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.5175'. [ 1648.598892][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1652.209869][T19789] loop2: detected capacity change from 0 to 512 [ 1652.355130][T19789] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.5188: inode has both inline data and extents flags [ 1652.527377][T19789] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5188: couldn't read orphan inode 15 (err -117) [ 1652.601827][T19789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.938282][T19799] kernel read not supported for file /file1 (pid: 19799 comm: syz.1.5191) [ 1653.040097][ T30] audit: type=1800 audit(1769055720.063:261): pid=19799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5191" name="file1" dev="mqueue" ino=56001 res=0 errno=0 [ 1653.858047][T19809] loop8: detected capacity change from 0 to 1024 [ 1654.092767][T19809] hfsplus: bad catalog entry type [ 1654.563741][ T4539] hfsplus: b-tree write err: -5, ino 4 [ 1654.658615][T19816] loop0: detected capacity change from 0 to 2048 [ 1654.721122][T18338] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.795283][T19816] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1654.906611][T19816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1655.210562][T18338] bridge0: port 3(syz_tun) entered disabled state [ 1655.311748][T18338] syz_tun (unregistering): left allmulticast mode [ 1655.318648][T18338] syz_tun (unregistering): left promiscuous mode [ 1655.325370][T18338] bridge0: port 3(syz_tun) entered disabled state [ 1655.735532][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.067287][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.361847][T19827] program syz.0.5199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1656.752531][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.988342][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.836927][ T61] bridge_slave_1: left allmulticast mode [ 1657.842838][ T61] bridge_slave_1: left promiscuous mode [ 1657.850332][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.941210][ T61] bridge_slave_0: left allmulticast mode [ 1657.947285][ T61] bridge_slave_0: left promiscuous mode [ 1657.953925][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.764445][ T61] team0: Port device geneve0 removed [ 1658.872541][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.919694][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.949062][ T61] bond0 (unregistering): Released all slaves [ 1659.496238][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5204'. [ 1659.609827][T19844] loop5: detected capacity change from 0 to 512 [ 1659.853497][T19844] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5205: error while reading EA inode 32 err=-116 [ 1660.005245][T19844] EXT4-fs (loop5): Remounting filesystem read-only [ 1660.056889][T19844] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 1660.137168][T19844] EXT4-fs (loop5): 1 orphan inode deleted [ 1660.203794][T19844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1660.691223][T11366] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1660.855455][T19853] loop0: detected capacity change from 0 to 1024 [ 1660.874283][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1660.884521][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1660.906340][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1660.967609][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1661.000369][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1661.009495][T11366] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1661.018950][T11366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.027397][T11366] usb 2-1: Product: syz [ 1661.031763][T11366] usb 2-1: Manufacturer: syz [ 1661.036860][T11366] usb 2-1: SerialNumber: syz [ 1661.050764][T11366] usb 2-1: config 0 descriptor?? [ 1661.091266][T11366] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 016 [ 1661.352120][T15116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.771891][ T61] hsr_slave_0: left promiscuous mode [ 1661.816460][T11366] i2c i2c-2: failure reading functionality [ 1661.842162][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1661.849424][ T61] hsr_slave_1: left promiscuous mode [ 1661.885755][T11366] i2c i2c-2: connected i2c-tiny-usb device [ 1661.888332][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.969852][T11366] usb 2-1: USB disconnect, device number 16 [ 1662.011101][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1662.022548][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.229470][ T61] veth1_macvtap: left promiscuous mode [ 1662.251638][ T61] veth0_macvtap: left promiscuous mode [ 1662.283485][ T61] veth1_vlan: left promiscuous mode [ 1662.338456][ T61] veth0_vlan: left promiscuous mode [ 1663.106371][T18160] Bluetooth: hci2: command tx timeout [ 1663.175504][T19868] Bluetooth: MGMT ver 1.23 [ 1663.707349][T19870] program syz.1.5216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1664.402785][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1664.451642][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1665.187337][T18160] Bluetooth: hci2: command tx timeout [ 1665.860164][ T61] IPVS: stop unused estimator thread 0... [ 1665.962139][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1665.980021][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1667.283263][T18160] Bluetooth: hci2: command tx timeout [ 1667.301295][T19854] chnl_net:caif_netlink_parms(): no params data found [ 1667.324352][T19895] loop8: detected capacity change from 0 to 2048 [ 1667.512664][T19895] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1667.521959][T19895] UDF-fs: Scanning with blocksize 512 failed [ 1667.797760][T19895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1669.132228][T11366] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1669.346244][T18160] Bluetooth: hci2: command tx timeout [ 1669.446388][T11366] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1669.454950][T11366] usb 9-1: config 0 has no interface number 0 [ 1669.506631][T11366] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1669.539427][T11366] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1669.549260][T11366] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.558045][T11366] usb 9-1: Product: syz [ 1669.562411][T11366] usb 9-1: Manufacturer: syz [ 1669.567279][T11366] usb 9-1: SerialNumber: syz [ 1669.705394][T11366] usb 9-1: config 0 descriptor?? [ 1669.792911][T19854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.808234][T19854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.929913][T19854] bridge_slave_0: entered allmulticast mode [ 1669.988510][T19854] bridge_slave_0: entered promiscuous mode [ 1670.081103][T19854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.089314][T19854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.151942][T19854] bridge_slave_1: entered allmulticast mode [ 1670.229384][T19854] bridge_slave_1: entered promiscuous mode [ 1670.565121][T11366] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1670.680416][T19854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.761313][T11366] usb 9-1: USB disconnect, device number 7 [ 1670.845416][T19854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.382924][T19854] team0: Port device team_slave_0 added [ 1671.471429][T19854] team0: Port device team_slave_1 added [ 1671.894051][T19854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.901461][T19854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.928297][T19854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.073052][T19945] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1672.168248][T19854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.273085][T19854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.301261][T19854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.352443][T19945] @0Ů: renamed from bond_slave_1 (while UP) [ 1672.413250][T18160] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1672.447712][T19947] loop5: detected capacity change from 0 to 512 [ 1673.005421][T19854] hsr_slave_0: entered promiscuous mode [ 1673.090343][T19854] hsr_slave_1: entered promiscuous mode [ 1673.134269][T19854] debugfs: 'hsr0' already exists in 'hsr' [ 1673.140723][T19854] Cannot create hsr debugfs directory [ 1673.204610][T13008] IPVS: starting estimator thread 0... [ 1673.296254][T19955] IPVS: using max 192 ests per chain, 9600 per kthread [ 1673.889133][T19959] program syz.1.5247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.722460][T19963] loop5: detected capacity change from 0 to 4096 [ 1674.774434][T19963] ntfs3: Unknown parameter '˙˙˙˙˙˙˙˙' [ 1675.026154][T18255] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1675.245161][T18255] usb 2-1: Using ep0 maxpacket: 8 [ 1675.386310][T18255] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1675.396004][T18255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.404229][T18255] usb 2-1: Product: syz [ 1675.408963][T18255] usb 2-1: Manufacturer: syz [ 1675.413762][T18255] usb 2-1: SerialNumber: syz [ 1675.459658][T18255] usb 2-1: config 0 descriptor?? [ 1675.561121][T18255] gspca_main: se401-2.14.0 probing 047d:5003 [ 1675.818084][T19973] program syz.8.5252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1675.986390][T18255] gspca_se401: Too many frame sizes [ 1676.185057][T18255] usb 2-1: USB disconnect, device number 17 [ 1676.205496][T19975] loop0: detected capacity change from 0 to 512 [ 1676.431929][T19978] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5255'. [ 1676.574463][T19854] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1676.668091][T19854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1676.739908][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5256'. [ 1676.823682][T19854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1677.018452][T19854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1677.704117][T19993] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5260'. [ 1678.975528][T19854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.284929][T19854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.811290][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.819007][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.035109][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.042890][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.288681][T20011] loop1: detected capacity change from 0 to 32768 [ 1680.299087][T20011] BTRFS warning: excessive commit interval 65536, use with care [ 1680.307282][T20011] btrfs: Unknown parameter 'check_int_print_mask' [ 1680.890218][T20010] loop0: detected capacity change from 0 to 4096 [ 1681.283827][T20010] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1681.752336][T20010] ntfs3(loop0): ino=1a, mi_enum_attr [ 1681.806546][T20010] ntfs3(loop0): ino=1a, mi_enum_attr [ 1681.812207][T20010] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1682.111473][T20007] ntfs3(loop0): ino=1e, "file1" attr_set_size [ 1684.247674][T19854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1685.201003][T20060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5281'. [ 1685.214569][T20060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5281'. [ 1686.303096][T20072] loop1: detected capacity change from 0 to 1024 [ 1687.056439][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1687.947646][T19854] veth0_vlan: entered promiscuous mode [ 1688.170273][T19854] veth1_vlan: entered promiscuous mode [ 1688.814251][T19854] veth0_macvtap: entered promiscuous mode [ 1688.963761][T19854] veth1_macvtap: entered promiscuous mode [ 1689.324570][T19854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.524562][T19854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.691664][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.723381][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.773280][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.841437][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.596930][T20113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.829685][T20142] tap0: tun_chr_ioctl cmd 1074025677 [ 1692.835612][T20142] tap0: linktype set to 776 [ 1693.875122][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5310'. [ 1697.660602][T20198] loop5: detected capacity change from 0 to 512 [ 1697.794343][T20198] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5323: error while reading EA inode 32 err=-116 [ 1697.867757][T20198] EXT4-fs (loop5): Remounting filesystem read-only [ 1697.895976][T20198] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 1697.898420][T18282] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1697.950037][T20198] EXT4-fs (loop5): 1 orphan inode deleted [ 1698.004679][T20198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1698.150648][T18282] usb 9-1: Using ep0 maxpacket: 16 [ 1698.226445][T18282] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.295325][T18282] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1698.309094][T18282] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1698.318828][T18282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.452348][T18282] usb 9-1: config 0 descriptor?? [ 1698.551220][T18282] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1698.589754][ T6472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.597938][ T6472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.866461][ T30] audit: type=1326 audit(1769055765.883:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20212 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1698.872525][T18268] usb 9-1: USB disconnect, device number 8 [ 1699.009640][T15116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.053738][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.062121][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.164106][ T30] audit: type=1326 audit(1769055765.993:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20212 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1699.191854][ T30] audit: type=1326 audit(1769055765.993:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20212 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1699.215851][ T30] audit: type=1326 audit(1769055766.003:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20212 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1700.521989][T20228] loop8: detected capacity change from 0 to 512 [ 1700.850927][T20228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1700.957428][T20228] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.991216][T20228] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.5331: corrupted inode contents [ 1701.086889][T20228] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.5331: mark_inode_dirty error [ 1701.152808][T20239] EXT4-fs (loop8): shut down requested (2) [ 1701.737528][T18482] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.762792][ T6472] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1702.664214][T20257] loop8: detected capacity change from 0 to 512 [ 1702.833435][T20257] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1703.047426][T20257] EXT4-fs error (device loop8): htree_dirblock_to_tree:1051: inode #2: comm syz.8.5337: Directory hole found for htree leaf block 0 [ 1703.172468][T20257] EXT4-fs (loop8): Remounting filesystem read-only [ 1703.352781][T18282] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1703.581398][T18282] usb 6-1: Using ep0 maxpacket: 8 [ 1703.669366][T18282] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1703.679037][T18282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.718288][T18482] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1703.861805][T18282] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1703.869426][T18282] pvrusb2: ********** [ 1703.873599][T18282] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1703.884129][T18282] pvrusb2: Important functionality might not be entirely working. [ 1703.892223][T18282] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1703.910543][T18282] pvrusb2: ********** [ 1704.122208][ T2334] pvrusb2: Invalid write control endpoint [ 1704.327159][T18282] usb 6-1: USB disconnect, device number 14 [ 1704.413293][T20271] can0: slcan on ptm0. [ 1704.557694][T20270] can0 (unregistered): slcan off ptm0. [ 1704.838307][ T2334] pvrusb2: Invalid write control endpoint [ 1704.844257][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1704.854225][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1704.862093][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1704.872381][ T2334] pvrusb2: Device being rendered inoperable [ 1705.079918][ T2334] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1705.183897][ T2334] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1705.253608][ T2334] pvrusb2: Attached sub-driver cx25840 [ 1705.260210][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1705.272598][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1707.217991][T20305] loop1: detected capacity change from 0 to 256 [ 1707.255375][T20305] exfat: Deprecated parameter 'utf8' [ 1707.315579][T20307] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5356'. [ 1707.435191][T20305] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1709.374208][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1709.381381][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1709.413667][T18268] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1709.693773][T18268] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1709.703356][T18268] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.714036][T18268] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1709.723527][T18268] usb 9-1: config 1 has no interface number 1 [ 1709.897560][T18268] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1710.016904][T18268] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1710.027515][T18268] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.035745][T18268] usb 9-1: Product: syz [ 1710.044991][T18268] usb 9-1: Manufacturer: syz [ 1710.051396][T18268] usb 9-1: SerialNumber: syz [ 1710.269384][T20331] loop5: detected capacity change from 0 to 1024 [ 1710.502552][T18268] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1710.532353][T18268] usb 9-1: MIDIStreaming interface descriptor not found [ 1710.910056][T18268] usb 9-1: USB disconnect, device number 9 [ 1711.083181][ T58] hfsplus: b-tree write err: -5, ino 4 [ 1711.573354][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1714.332010][T20380] loop8: detected capacity change from 0 to 128 [ 1714.463482][T20380] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1714.526783][T20380] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1715.332941][T20393] loop6: detected capacity change from 0 to 128 [ 1715.514233][T20393] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1715.663063][T18482] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1715.681306][T20393] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.807652][T19854] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1717.231345][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1717.241441][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1717.870680][T11366] kernel write not supported for file bpf-map (pid: 11366 comm: kworker/1:4) [ 1718.348330][T20420] loop0: detected capacity change from 0 to 256 [ 1718.418949][T20420] exfat: Deprecated parameter 'namecase' [ 1718.424965][T20420] exfat: Deprecated parameter 'namecase' [ 1718.516671][T20420] exfat: Deprecated parameter 'utf8' [ 1718.727474][T20420] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1718.862694][T20428] loop8: detected capacity change from 0 to 256 [ 1719.086625][T20430] loop5: detected capacity change from 0 to 128 [ 1719.106395][ T30] audit: type=1800 audit(1769055786.123:266): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5395" name="file1" dev="loop8" ino=1049056 res=0 errno=0 [ 1719.264901][ T30] audit: type=1800 audit(1769055786.163:267): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5395" name="file1" dev="loop8" ino=1049056 res=0 errno=0 [ 1719.502073][T20430] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1719.610447][T20430] ext4 filesystem being mounted at /362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1720.702837][T15116] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1721.651868][T20455] bridge0: entered promiscuous mode [ 1721.696321][T20455] macvlan2: entered promiscuous mode [ 1722.625571][T20467] loop1: detected capacity change from 0 to 256 [ 1722.797718][T20472] bridge0: port 3(netdevsim0) entered blocking state [ 1722.804893][T20472] bridge0: port 3(netdevsim0) entered disabled state [ 1722.863715][T20472] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1722.981532][T20472] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1723.061245][T20472] bridge0: port 3(netdevsim0) entered blocking state [ 1723.068592][T20472] bridge0: port 3(netdevsim0) entered forwarding state [ 1723.468855][T20476] loop6: detected capacity change from 0 to 2048 [ 1723.784710][T20476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1724.095249][T20476] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1724.230656][T20476] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1724.243658][T20476] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1724.243658][T20476] [ 1724.254684][T20476] EXT4-fs (loop6): Total free blocks count 0 [ 1724.262066][T20476] EXT4-fs (loop6): Free/Dirty block details [ 1724.268529][T20476] EXT4-fs (loop6): free_blocks=2415919504 [ 1724.279715][T20476] EXT4-fs (loop6): dirty_blocks=32 [ 1724.285119][T20476] EXT4-fs (loop6): Block reservation details [ 1724.293012][T20476] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 1724.862978][ T61] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 1726.648203][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5421'. [ 1728.043523][T20524] loop0: detected capacity change from 0 to 2048 [ 1728.197467][T20524] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1728.205503][T20524] UDF-fs: Scanning with blocksize 512 failed [ 1728.566942][T20524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1728.826734][T20524] ALSA: mixer_oss: invalid OSS volume '´.Č\ä' [ 1731.896411][T20568] Invalid logical block size (1) [ 1732.623607][T18268] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1732.806298][T18268] usb 9-1: Using ep0 maxpacket: 8 [ 1732.883752][T18268] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1732.893504][T18268] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.902065][T18268] usb 9-1: Product: syz [ 1732.906565][T18268] usb 9-1: Manufacturer: syz [ 1732.911384][T18268] usb 9-1: SerialNumber: syz [ 1733.066248][T18268] usb 9-1: config 0 descriptor?? [ 1733.168033][T18268] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1734.074897][T18268] gspca_sq930x: ucbus_write failed -71 [ 1734.082763][T18268] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 1734.188455][T18268] usb 9-1: USB disconnect, device number 10 [ 1734.380230][T20589] loop0: detected capacity change from 0 to 1024 [ 1734.613939][T20589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1734.727297][T20589] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1735.021130][T20589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5448: bg 0: block 112: padding at end of block bitmap is not set [ 1735.058194][T20598] macvtap1: entered promiscuous mode [ 1735.063846][T20598] macvtap1: entered allmulticast mode [ 1735.161028][T20589] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 1735.174197][T20589] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1735.174197][T20589] [ 1735.202297][T20598] vlan0: entered allmulticast mode [ 1735.207989][T20598] veth0_vlan: entered allmulticast mode [ 1735.213966][T20598] vlan0: entered promiscuous mode [ 1735.362455][T20598] team0: Device macvtap1 failed to register rx_handler [ 1735.472388][T20598] vlan0: left allmulticast mode [ 1735.477849][T20598] veth0_vlan: left allmulticast mode [ 1735.483482][T20598] vlan0: left promiscuous mode [ 1735.796148][ T61] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 1735.877572][ T61] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1735.891118][ T61] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1735.891118][ T61] [ 1736.020907][T14872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1740.388971][T20663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5470'. [ 1742.778717][T20680] loop1: detected capacity change from 0 to 4096 [ 1742.918326][T20680] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1743.216478][T18268] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1743.409064][T18268] usb 6-1: Using ep0 maxpacket: 16 [ 1743.474057][T18268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.485948][T18268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.496326][T18268] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1743.505647][T18268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.576845][T20680] ntfs3(loop1): ino=1a, mi_enum_attr [ 1743.582422][T20680] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1743.619306][T18268] usb 6-1: config 0 descriptor?? [ 1743.638597][T20680] ntfs3(loop1): ino=1a, mi_enum_attr [ 1743.644337][T20680] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1744.303611][T18268] corsair 0003:1B1C:1B02.003A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 1744.641492][T18268] usb 6-1: USB disconnect, device number 15 [ 1744.716808][T20699] loop0: detected capacity change from 0 to 4096 [ 1745.390318][T20710] fido_id[20710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1745.996847][ T30] audit: type=1326 audit(1769055813.013:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.6.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1746.019712][ T30] audit: type=1326 audit(1769055813.013:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.6.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1746.132620][T20720] loop6: detected capacity change from 0 to 128 [ 1746.241457][T20720] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1746.473156][ T30] audit: type=1326 audit(1769055813.473:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.6.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1746.691260][ T30] audit: type=1326 audit(1769055813.503:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.6.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1746.718304][ T30] audit: type=1326 audit(1769055813.503:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.6.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1746.742642][ T30] audit: type=1326 audit(1769055813.583:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.6.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1746.765097][ T30] audit: type=1326 audit(1769055813.583:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20718 comm="syz.6.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1747.656409][T20730] net_ratelimit: 67 callbacks suppressed [ 1747.656501][T20730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1747.847276][T20736] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5494'. [ 1748.086980][T20731] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1748.129752][T20736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.138597][T20736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.434225][T20765] netlink: 'syz.1.5504': attribute type 1 has an invalid length. [ 1750.442705][T20765] netlink: 'syz.1.5504': attribute type 7 has an invalid length. [ 1750.451645][T20765] netlink: 'syz.1.5504': attribute type 8 has an invalid length. [ 1750.459681][T20765] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1751.042442][T20759] loop8: detected capacity change from 0 to 4096 [ 1751.905210][T20780] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5508'. [ 1751.914890][T20780] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5508'. [ 1753.816012][ T9637] IPVS: starting estimator thread 0... [ 1753.936168][T20802] IPVS: using max 192 ests per chain, 9600 per kthread [ 1756.767272][T20840] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1756.866580][T20840] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1758.076717][T18268] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1758.320415][T18268] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1758.330152][T18268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.423807][T18268] usb 7-1: config 0 descriptor?? [ 1758.656459][T18255] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1758.751655][T18268] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1758.949828][T18268] [drm:udl_init] *ERROR* Selecting channel failed [ 1758.957245][T18255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.968733][T18255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.979003][T18255] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1758.993358][T18255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.216822][T18268] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1759.223902][T18268] [drm] Initialized udl on minor 2 [ 1759.269540][T18255] usb 6-1: config 0 descriptor?? [ 1759.291435][T18268] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1759.453802][T18268] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1759.534372][T14470] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1759.554448][T14470] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1759.589211][T18268] usb 7-1: USB disconnect, device number 6 [ 1759.837364][T18255] hid (null): nested delimiters [ 1759.904107][T18255] wacom 0003:056A:030C.003B: nested delimiters [ 1759.920297][T18255] wacom 0003:056A:030C.003B: item 0 1 2 10 parsing failed [ 1760.040167][T18255] wacom 0003:056A:030C.003B: parse failed [ 1760.046773][T18255] wacom 0003:056A:030C.003B: probe with driver wacom failed with error -22 [ 1760.196927][T18255] usb 6-1: USB disconnect, device number 16 [ 1761.773308][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5544'. [ 1761.843354][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5544'. [ 1762.532876][T20896] loop6: detected capacity change from 0 to 1024 [ 1762.632690][T18160] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.456017][ T1125] hfsplus: b-tree write err: -5, ino 8 [ 1765.775706][T20932] loop8: detected capacity change from 0 to 256 [ 1768.578123][T20963] loop8: detected capacity change from 0 to 1024 [ 1768.957579][T20963] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1768.964368][T20963] hfsplus: xattr searching failed [ 1769.146661][T20976] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1769.153541][T20976] hfsplus: xattr search failed [ 1769.794304][ T1111] hfsplus: b-tree write err: -5, ino 4 [ 1770.815533][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1770.822460][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1770.925454][T20995] sctp: [Deprecated]: syz.0.5580 (pid 20995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1770.925454][T20995] Use struct sctp_sack_info instead [ 1771.240872][T20999] loop1: detected capacity change from 0 to 128 [ 1771.317988][T20999] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1771.467598][T20999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1771.673224][T20999] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 1771.728150][T20999] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1772.511845][T21011] sctp: [Deprecated]: syz.8.5588 (pid 21011) Use of int in maxseg socket option. [ 1772.511845][T21011] Use struct sctp_assoc_value instead [ 1774.627389][ T9637] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1774.846137][ T9637] usb 9-1: Using ep0 maxpacket: 16 [ 1774.880816][ T9637] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1774.892275][ T9637] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1774.902550][ T9637] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1774.915962][ T9637] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1774.925245][ T9637] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.096842][T21040] loop5: detected capacity change from 0 to 8 [ 1775.152781][ T9637] usb 9-1: config 0 descriptor?? [ 1775.321734][T21043] netlink: 'syz.1.5601': attribute type 1 has an invalid length. [ 1775.731429][ T9637] hid_parser_main: 91 callbacks suppressed [ 1775.731541][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1775.745191][ T9637] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 1775.804195][T15116] SQUASHFS error: Unable to read directory block [1d0:22] [ 1775.867188][T15116] SQUASHFS error: Unable to read directory block [1d0:22] [ 1775.922782][T15116] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 1775.999320][T15116] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 1776.078754][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.086419][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.101387][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.112889][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.120774][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.128570][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.136251][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.143766][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.151401][ T9637] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1776.572564][T21048] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5604'. [ 1776.613799][ T9637] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1776.627846][ T9637] microsoft 0003:045E:07DA.003C: no inputs found [ 1776.634400][ T9637] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 1776.846150][ T9637] usb 9-1: USB disconnect, device number 11 [ 1776.878118][T18255] hid-generic 0006:0004:0009.003D: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1776.889334][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.198689][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.533840][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.825408][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 1777.880261][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.160626][T21056] fido_id[21056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1778.260707][T21058] fido_id[21058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1779.138222][T21062] loop0: detected capacity change from 0 to 32768 [ 1779.151125][T21062] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5609 (21062) [ 1779.151304][ T61] bridge_slave_1: left allmulticast mode [ 1779.151410][ T61] bridge_slave_1: left promiscuous mode [ 1779.183787][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.235565][T21062] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1779.246244][T21062] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1779.356823][ T61] bridge_slave_0: left allmulticast mode [ 1779.362713][ T61] bridge_slave_0: left promiscuous mode [ 1779.375854][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.556496][T21062] BTRFS info (device loop0): rebuilding free space tree [ 1779.615557][T21062] BTRFS info (device loop0): disabling free space tree [ 1779.623013][T21062] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1779.633123][T21062] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1779.662572][T21062] BTRFS info (device loop0): setting nodatasum [ 1779.669267][T21062] BTRFS info (device loop0): setting nodatacow [ 1779.680410][T21062] BTRFS info (device loop0): turning off barriers [ 1779.688821][T21062] BTRFS info (device loop0): force clearing of disk cache [ 1779.843129][T14872] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1780.940689][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1780.996572][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1781.041927][ T61] bond0 (unregistering): Released all slaves [ 1781.079746][ T61] team0: Port device bond1 removed [ 1781.130674][ T61] bond1 (unregistering): Released all slaves [ 1781.427659][ T61] tipc: Left network mode [ 1781.478469][ T61] IPVS: stopping master sync thread 18669 ... [ 1781.679377][ T30] audit: type=1326 audit(1769055848.693:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21087 comm="syz.6.5613" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x0 [ 1781.755153][T21088] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5611'. [ 1781.773507][T21091] loop1: detected capacity change from 0 to 512 [ 1781.820210][T21091] EXT4-fs: Ignoring removed i_version option [ 1781.941438][T21091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1782.107592][T21091] EXT4-fs (loop1): 1 truncate cleaned up [ 1782.203559][T21091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1782.393693][ T61] hsr_slave_0: left promiscuous mode [ 1782.536653][ T61] hsr_slave_1: left promiscuous mode [ 1782.573925][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1782.582149][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1782.717747][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1782.725363][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1782.878812][ T61] veth1_macvtap: left promiscuous mode [ 1782.884601][ T61] veth0_macvtap: left promiscuous mode [ 1782.932512][ T61] veth1_vlan: left promiscuous mode [ 1782.981822][ T61] veth0_vlan: left promiscuous mode [ 1783.092381][T18160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1783.104756][T15058] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1783.108708][T18160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1783.147753][T18160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1783.228516][T18160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1783.297265][T18160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1785.073918][T21117] loop6: detected capacity change from 0 to 4096 [ 1785.260353][T21121] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1785.429115][ T5787] Bluetooth: hci4: command tx timeout [ 1785.793262][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1785.943966][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1787.527299][T18160] Bluetooth: hci4: command tx timeout [ 1788.042085][T21140] loop8: detected capacity change from 0 to 256 [ 1788.085137][T21141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1788.229195][T18160] Bluetooth: hci2: command 0x0406 tx timeout [ 1789.588493][ T5787] Bluetooth: hci4: command tx timeout [ 1789.615089][T21102] chnl_net:caif_netlink_parms(): no params data found [ 1789.861263][T21156] loop6: detected capacity change from 0 to 512 [ 1789.973310][T21156] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.5633: bg 0: block 5: invalid block bitmap [ 1790.093374][T21156] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1790.209985][T21156] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5633: invalid indirect mapped block 3 (level 2) [ 1790.361374][T21156] EXT4-fs (loop6): 2 truncates cleaned up [ 1790.393228][T21156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1790.602111][T21165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.624149][T21165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.642000][T21165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.653062][T21165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.663692][T21165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.773760][T21164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.943874][T19854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.667386][ T5787] Bluetooth: hci4: command tx timeout [ 1791.812545][T21178] loop0: detected capacity change from 0 to 256 [ 1792.298008][T21102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.305587][T21102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.361104][T21102] bridge_slave_0: entered allmulticast mode [ 1792.380328][T21102] bridge_slave_0: entered promiscuous mode [ 1792.464348][T21102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.477566][T21102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.566905][T21102] bridge_slave_1: entered allmulticast mode [ 1792.608365][T21102] bridge_slave_1: entered promiscuous mode [ 1792.746593][T14469] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1792.926406][T14469] usb 9-1: Using ep0 maxpacket: 32 [ 1792.973038][T14469] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1792.981977][T14469] usb 9-1: config 0 has no interface number 0 [ 1793.051757][T21102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1793.061813][T14469] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1793.150256][T14469] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1793.159968][T14469] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.168521][T14469] usb 9-1: Product: syz [ 1793.172910][T14469] usb 9-1: Manufacturer: syz [ 1793.177899][T14469] usb 9-1: SerialNumber: syz [ 1793.209595][T21102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.308764][T14469] usb 9-1: config 0 descriptor?? [ 1793.392840][T14469] smsc75xx v1.0.0 [ 1793.714034][T21102] team0: Port device team_slave_0 added [ 1793.772602][T21102] team0: Port device team_slave_1 added [ 1794.055135][T14469] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1794.068650][T14469] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1794.078853][T14469] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1794.156668][T21102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.164052][T21102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1794.190784][T21102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.229451][T14469] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 1794.312185][T14469] usb 9-1: USB disconnect, device number 12 [ 1794.448420][T21102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1794.455958][T21102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1794.482747][T21102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1795.040148][T21102] hsr_slave_0: entered promiscuous mode [ 1795.072195][T21102] hsr_slave_1: entered promiscuous mode [ 1795.104805][T21102] debugfs: 'hsr0' already exists in 'hsr' [ 1795.111117][T21102] Cannot create hsr debugfs directory [ 1796.355465][T21212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5654'. [ 1796.444972][T21209] loop6: detected capacity change from 0 to 1024 [ 1797.107522][ T6675] hfsplus: b-tree write err: -5, ino 4 [ 1798.096382][ T9637] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1798.306285][ T9637] usb 7-1: Using ep0 maxpacket: 16 [ 1798.346177][ T9637] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1798.358202][ T9637] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1798.510816][ T9637] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1798.524084][ T9637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.533832][ T9637] usb 7-1: Product: syz [ 1798.538322][ T9637] usb 7-1: Manufacturer: syz [ 1798.543118][ T9637] usb 7-1: SerialNumber: syz [ 1798.591956][T21102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1798.651218][ T9637] usb 7-1: config 0 descriptor?? [ 1798.670904][T21102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1798.728307][ T9637] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1798.738240][ T9637] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1798.838976][T21102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1798.991064][T21102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1799.424141][ T9637] em28xx 7-1:0.0: chip ID is em2710 [ 1799.550392][ T30] audit: type=1326 audit(1769055866.573:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.627765][ T9637] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1799.639292][ T9637] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1799.653291][ T9637] em28xx 7-1:0.0: No AC97 audio processor [ 1799.724331][ T30] audit: type=1326 audit(1769055866.573:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.730314][ T9637] usb 7-1: USB disconnect, device number 7 [ 1799.752016][ T30] audit: type=1326 audit(1769055866.613:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.779868][ T30] audit: type=1326 audit(1769055866.613:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.802431][ T30] audit: type=1326 audit(1769055866.613:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.825201][ T30] audit: type=1326 audit(1769055866.613:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7188990 code=0x7ffc0000 [ 1799.851208][ T30] audit: type=1326 audit(1769055866.713:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.874864][ T30] audit: type=1326 audit(1769055866.713:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.897575][ T30] audit: type=1326 audit(1769055866.723:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1799.899228][ T9637] em28xx 7-1:0.0: Disconnecting em28xx [ 1799.920213][ T30] audit: type=1326 audit(1769055866.723:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21233 comm="syz.0.5667" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 1800.311173][ T9637] em28xx 7-1:0.0: Freeing device [ 1801.273053][T21102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1801.583538][T21102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1801.762810][T13026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.770445][T13026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.932108][T13026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.939781][T13026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.279510][T21102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.529721][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5686'. [ 1805.740767][T21290] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5687'. [ 1805.813289][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5687'. [ 1805.822641][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5687'. [ 1808.722668][T21102] veth0_vlan: entered promiscuous mode [ 1808.914342][T21102] veth1_vlan: entered promiscuous mode [ 1809.449444][T21102] veth0_macvtap: entered promiscuous mode [ 1809.593639][T21102] veth1_macvtap: entered promiscuous mode [ 1809.693222][T21336] loop0: detected capacity change from 0 to 256 [ 1809.784839][T21336] exfat: Deprecated parameter 'utf8' [ 1809.858552][T21336] exfat: Deprecated parameter 'utf8' [ 1809.864245][T21336] exfat: Deprecated parameter 'utf8' [ 1810.002340][T21102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1810.176368][T21336] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1810.273365][T21102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.518602][T13026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.650209][T13026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.711382][T15893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.836466][ T1111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.637217][T21354] tap0: tun_chr_ioctl cmd 1074025677 [ 1811.643253][T21354] tap0: linktype set to 270 [ 1811.943905][T21359] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5707'. [ 1812.208047][T21365] program syz.8.5708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1812.816617][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1812.816710][ T30] audit: type=1326 audit(1769055879.833:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21367 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1813.000840][ T30] audit: type=1326 audit(1769055879.883:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21367 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1813.024252][ T30] audit: type=1326 audit(1769055879.883:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21367 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1813.048037][ T30] audit: type=1326 audit(1769055879.883:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21367 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1813.073733][ T30] audit: type=1326 audit(1769055879.883:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21367 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1813.695956][T21381] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1813.704556][T21381] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 1813.714269][T21381] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1813.722990][T21381] netlink: 2 bytes leftover after parsing attributes in process `+}[@'. [ 1813.897669][T21381] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 1813.929462][T21386] loop8: detected capacity change from 0 to 128 [ 1814.049077][T21386] EXT4-fs: Ignoring removed nobh option [ 1814.143562][T21386] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1814.261127][T21386] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1814.416797][T21386] fscrypt (loop8, inode 12): Unsupported log2_data_unit_size in encryption policy: 52 [ 1814.770533][T21394] loop1: detected capacity change from 0 to 22 [ 1814.857335][T21394] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1815.044911][T18482] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1815.121651][T21396] batadv_slave_0: entered promiscuous mode [ 1815.213016][T21396] batman_adv: batadv0: Adding interface: macsec1 [ 1815.224624][T21396] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.251402][T21396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.262239][T21396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.326873][T21396] batman_adv: batadv0: Interface activated: macsec1 [ 1816.118011][T21407] netlink: 'syz.1.5720': attribute type 1 has an invalid length. [ 1816.825899][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1818.113803][T21434] loop1: detected capacity change from 0 to 256 [ 1819.345927][T21439] loop0: detected capacity change from 0 to 32768 [ 1819.369654][T21439] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5730 (21439) [ 1819.395512][T21439] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1819.412481][T21439] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1819.421557][T21439] BTRFS error (device loop0): superblock checksum mismatch [ 1819.430508][T21439] BTRFS error (device loop0): open_ctree failed: -22 [ 1819.638740][T21442] loop8: detected capacity change from 0 to 512 [ 1820.133708][T21442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1820.154925][T21452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input33 [ 1820.221084][T21442] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1820.594015][T21442] EXT4-fs error (device loop8): ext4_get_first_dir_block:3527: inode #12: comm syz.8.5731: Attempting to read directory block (0) that is past i_size (3) [ 1821.257663][T18482] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.504360][T21462] loop0: detected capacity change from 0 to 512 [ 1821.771079][T21462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1822.012143][T13026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.020370][T13026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.081505][T21462] EXT4-fs (loop0): shut down requested (0) [ 1822.464043][T21447] loop6: detected capacity change from 0 to 8192 [ 1822.648669][T14872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.827962][T13026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.836683][T13026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.556552][T21480] loop0: detected capacity change from 0 to 256 [ 1824.156695][T21480] FAT-fs (loop0): Directory bread(block 64) failed [ 1824.163601][T21480] FAT-fs (loop0): Directory bread(block 65) failed [ 1824.227115][T21480] FAT-fs (loop0): Directory bread(block 66) failed [ 1824.317139][T21480] FAT-fs (loop0): Directory bread(block 67) failed [ 1824.448629][T21480] FAT-fs (loop0): Directory bread(block 68) failed [ 1824.455424][T21480] FAT-fs (loop0): Directory bread(block 69) failed [ 1824.597903][T21480] FAT-fs (loop0): Directory bread(block 70) failed [ 1824.604716][T21480] FAT-fs (loop0): Directory bread(block 71) failed [ 1824.740474][T21480] FAT-fs (loop0): Directory bread(block 72) failed [ 1824.834906][T21480] FAT-fs (loop0): Directory bread(block 73) failed [ 1825.158426][T21482] loop4: detected capacity change from 0 to 32768 [ 1825.171325][T21482] xfs: Deprecated parameter 'ikeep' [ 1825.176914][T21482] XFS: ikeep mount option is deprecated. [ 1825.200115][T21488] loop8: detected capacity change from 0 to 512 [ 1825.236278][T21482] xfs: Unknown parameter 'mtpt' [ 1825.421625][T21488] EXT4-fs: Ignoring removed bh option [ 1825.493892][T21488] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1825.681764][T21488] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.5742: corrupted in-inode xattr: e_value size too large [ 1825.859864][T21488] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5742: couldn't read orphan inode 15 (err -117) [ 1826.015229][T21488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1826.790164][T18482] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.081252][T21509] loop8: detected capacity change from 0 to 2048 [ 1828.372873][T21509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1828.575648][T21509] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1828.666370][T21509] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1828.679027][T21509] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1828.679027][T21509] [ 1828.689146][T21509] EXT4-fs (loop8): Total free blocks count 0 [ 1828.695333][T21509] EXT4-fs (loop8): Free/Dirty block details [ 1828.701624][T21509] EXT4-fs (loop8): free_blocks=2415919504 [ 1828.707813][T21509] EXT4-fs (loop8): dirty_blocks=32 [ 1828.713121][T21509] EXT4-fs (loop8): Block reservation details [ 1828.719517][T21509] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 1829.331001][ T6130] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 1831.573887][T21545] loop1: detected capacity change from 0 to 2048 [ 1831.823205][T21545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1832.213036][T21556] loop0: detected capacity change from 0 to 16 [ 1832.263550][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1832.270469][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1832.334419][T21556] erofs (device loop0): mounted with root inode @ nid 36. [ 1832.520703][T15058] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.889179][T21538] loop8: detected capacity change from 0 to 8192 [ 1833.796025][T21567] loop1: detected capacity change from 0 to 2048 [ 1833.958731][T21567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1834.169663][T21567] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1834.227739][T21567] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1834.240710][T21567] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1834.240710][T21567] [ 1834.254960][T21567] EXT4-fs (loop1): Total free blocks count 0 [ 1834.262665][T21567] EXT4-fs (loop1): Free/Dirty block details [ 1834.269008][T21567] EXT4-fs (loop1): free_blocks=2415919504 [ 1834.277183][T21567] EXT4-fs (loop1): dirty_blocks=32 [ 1834.282499][T21567] EXT4-fs (loop1): Block reservation details [ 1834.289693][T21567] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 1834.350159][T21573] loop6: detected capacity change from 0 to 1764 [ 1835.045059][ T1125] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 1835.941504][T21590] loop1: detected capacity change from 0 to 164 [ 1836.026218][T14469] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1836.111946][T21590] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1836.278877][T14469] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1836.288363][T14469] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.297046][T14469] usb 9-1: Product: syz [ 1836.304997][T14469] usb 9-1: Manufacturer: syz [ 1836.311315][T14469] usb 9-1: SerialNumber: syz [ 1836.490718][T14469] usb 9-1: config 0 descriptor?? [ 1837.030103][T14469] usb 9-1: USB disconnect, device number 13 [ 1837.344305][T21601] loop0: detected capacity change from 0 to 22 [ 1837.372030][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1837.494480][T21601] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1837.567179][T21594] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1839.672728][T21625] loop1: detected capacity change from 0 to 64 [ 1840.081607][T21632] loop0: detected capacity change from 0 to 256 [ 1840.336440][T21632] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1840.492343][T21632] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1840.851732][T21633] loop6: detected capacity change from 0 to 32768 [ 1840.893845][T21633] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5788 (21633) [ 1840.926285][T21633] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1840.939566][T21633] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1840.948660][T21633] BTRFS error (device loop6): superblock checksum mismatch [ 1840.956596][T21633] BTRFS error (device loop6): open_ctree failed: -22 [ 1841.080694][T15058] hfs: node 4:3 still has 1 user(s)! [ 1843.391001][T21653] loop1: detected capacity change from 0 to 64 [ 1843.893629][T21654] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1844.860229][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5800'. [ 1845.320326][T21674] loop8: detected capacity change from 0 to 256 [ 1845.521823][T21674] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1845.736925][T21674] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 1847.950540][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5813'. [ 1851.033143][T21739] program syz.1.5827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1851.930960][T21745] loop8: detected capacity change from 0 to 1764 [ 1852.866049][ T5787] Bluetooth: hci4: command tx timeout [ 1853.222096][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5835'. [ 1853.642164][T21769] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5837'. [ 1855.801796][T21790] loop4: detected capacity change from 0 to 1764 [ 1858.526931][T21828] loop1: detected capacity change from 0 to 256 [ 1858.678892][T21828] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1858.958159][T21834] program syz.0.5861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1858.980257][T21828] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 1859.082593][ T30] audit: type=1800 audit(1769056439.109:306): pid=21828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5860" name="file1" dev="loop1" ino=1049074 res=0 errno=0 [ 1859.201212][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5862'. [ 1861.951905][T21865] loop8: detected capacity change from 0 to 256 [ 1863.074548][T21877] loop8: detected capacity change from 0 to 1024 [ 1863.707322][ T141] hfsplus: b-tree write err: -5, ino 4 [ 1863.849468][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5879'. [ 1864.367699][T21888] bridge0: adding interface bridge_slave_1 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1871.396860][T21966] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5907'. [ 1871.921807][T21977] loop4: detected capacity change from 0 to 128 [ 1871.997061][T21977] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1872.098459][T21977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1872.375544][T21977] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 1872.441420][T21977] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1872.966203][T21988] loop6: detected capacity change from 0 to 256 [ 1873.793307][T21994] loop0: detected capacity change from 0 to 1024 [ 1876.548138][T22029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1877.791369][T22042] loop1: detected capacity change from 0 to 164 [ 1877.912059][T22042] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1878.661678][ T5838] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1878.836395][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 1878.882926][ T5838] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1878.891924][ T5838] usb 5-1: config 0 has no interface number 0 [ 1879.011792][ T5838] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1879.082479][ T5838] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1879.092624][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.101133][ T5838] usb 5-1: Product: syz [ 1879.109073][ T5838] usb 5-1: Manufacturer: syz [ 1879.113875][ T5838] usb 5-1: SerialNumber: syz [ 1879.249212][ T5838] usb 5-1: config 0 descriptor?? [ 1879.630167][ T5838] ipheth 5-1:0.196: Unable to find endpoints [ 1879.858120][T13008] usb 5-1: USB disconnect, device number 18 [ 1881.207256][T22082] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5945'. [ 1883.683262][T22104] netem: change failed [ 1884.383788][T22108] loop8: detected capacity change from 0 to 2048 [ 1884.622952][T22108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1885.693334][T22120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5960'. [ 1885.751426][T22120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5960'. [ 1887.369810][T22136] loop4: detected capacity change from 0 to 512 [ 1887.383744][T22123] loop8: detected capacity change from 0 to 8192 [ 1887.856425][T22136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5966: bg 0: block 288: padding at end of block bitmap is not set [ 1888.019559][T22136] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1888.221825][T22136] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.5966: attempt to clear invalid blocks 1024 len 1 [ 1888.444224][T22136] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5966: invalid indirect mapped block 1819239214 (level 0) [ 1888.555057][T22136] EXT4-fs (loop4): 1 truncate cleaned up [ 1888.677654][T22136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1889.180020][T22136] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 1889.902366][T21102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1890.348636][T22165] loop8: detected capacity change from 0 to 512 [ 1890.458785][T22165] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1890.619892][T22165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0102] [ 1890.734622][T22165] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.5974: corrupted in-inode xattr: e_value size too large [ 1890.884876][T22165] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5974: couldn't read orphan inode 15 (err -117) [ 1890.975169][T22165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1891.094517][T22174] loop1: detected capacity change from 0 to 256 [ 1891.639390][T18482] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1892.836087][T13008] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1893.010344][T22196] loop4: detected capacity change from 0 to 64 [ 1893.080400][T13008] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 1893.156613][T13008] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1893.170171][T13008] usb 7-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1893.182547][T13008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.321853][T13008] usb 7-1: config 0 descriptor?? [ 1893.578771][T22201] loop1: detected capacity change from 0 to 128 [ 1893.699945][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1893.706902][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1893.805265][T22201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2842c118, mo2=0102] [ 1893.817886][T22201] System zones: 1-3, 19-19, 35-36 [ 1893.921362][T22201] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1893.939770][T13008] nti 0003:0757:0A00.003E: item fetching failed at offset 5/7 [ 1894.004809][T13008] nti 0003:0757:0A00.003E: probe with driver nti failed with error -22 [ 1894.027619][T22201] ext4 filesystem being mounted at /486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1894.136328][T13008] usb 7-1: USB disconnect, device number 8 [ 1894.740161][T15058] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1895.504381][T22217] loop1: detected capacity change from 0 to 256 [ 1899.273945][T22257] loop1: detected capacity change from 0 to 256 [ 1899.412476][T22257] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1899.453410][T22261] loop4: detected capacity change from 0 to 256 [ 1899.648665][ T30] audit: type=1800 audit(1769056479.679:307): pid=22261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6008" name="file1" dev="loop4" ino=1049081 res=0 errno=0 [ 1899.708851][T22261] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 1899.716679][T22261] FAT-fs (loop4): Filesystem has been set read-only [ 1899.815443][T22261] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1902.825032][T22288] bond0: entered promiscuous mode [ 1902.830730][T22288] bond_slave_0: entered promiscuous mode [ 1902.838171][T22288] bond_slave_1: entered promiscuous mode [ 1902.991924][T22288] dummy0: entered promiscuous mode [ 1903.039515][T22288] hsr1: entered promiscuous mode [ 1903.044987][T22288] hsr1: entered allmulticast mode [ 1903.050675][T22288] bond0: entered allmulticast mode [ 1903.056300][T22288] bond_slave_0: entered allmulticast mode [ 1903.062261][T22288] bond_slave_1: entered allmulticast mode [ 1903.195297][T22288] dummy0: entered allmulticast mode [ 1904.571545][T13008] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1904.666992][T22311] loop6: detected capacity change from 0 to 128 [ 1904.701147][T22311] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1904.786326][T22311] hpfs: filesystem error: improperly stopped [ 1904.792601][T22311] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1904.802068][T22311] hpfs: You really don't want any checks? You are crazy... [ 1904.856143][T13008] usb 9-1: Using ep0 maxpacket: 16 [ 1904.943967][T13008] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1904.953634][T13008] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.963434][T13008] usb 9-1: Product: syz [ 1904.968212][T13008] usb 9-1: Manufacturer: syz [ 1904.969750][T22311] hpfs: hpfs_map_sector(): read error [ 1904.972985][T13008] usb 9-1: SerialNumber: syz [ 1904.984040][T22311] hpfs: code page support is disabled [ 1905.099306][T22311] hpfs: hpfs_map_4sectors(): unaligned read [ 1905.183425][T22311] hpfs: hpfs_map_4sectors(): unaligned read [ 1905.192469][T22311] hpfs: filesystem error: unable to find root dir [ 1905.397010][T22311] hpfs: hpfs_map_4sectors(): unaligned read [ 1905.445356][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1905.463343][T22320] loop1: detected capacity change from 0 to 256 [ 1905.492660][T22311] hpfs: hpfs_map_sector(): read error [ 1905.536929][T13008] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1905.561080][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1905.592742][T13008] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1905.635457][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1905.671236][T13008] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1905.700237][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1905.766391][T22316] ceph: No mds server is up or the cluster is laggy [ 1905.776240][T13008] usb 9-1: media controller created [ 1906.074657][T22320] FAT-fs (loop1): Directory bread(block 64) failed [ 1906.139365][T22320] FAT-fs (loop1): Directory bread(block 65) failed [ 1906.148184][T13008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1906.157409][T22320] FAT-fs (loop1): Directory bread(block 66) failed [ 1906.164152][T22320] FAT-fs (loop1): Directory bread(block 67) failed [ 1906.264466][T22320] FAT-fs (loop1): Directory bread(block 68) failed [ 1906.291294][T22320] FAT-fs (loop1): Directory bread(block 69) failed [ 1906.336391][T22320] FAT-fs (loop1): Directory bread(block 70) failed [ 1906.406552][T22320] FAT-fs (loop1): Directory bread(block 71) failed [ 1906.436626][T22320] FAT-fs (loop1): Directory bread(block 72) failed [ 1906.476525][T22320] FAT-fs (loop1): Directory bread(block 73) failed [ 1906.499620][T13008] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1906.858732][T22320] syz.1.6028: attempt to access beyond end of device [ 1906.858732][T22320] loop1: rw=8912896, sector=1192, nr_sectors = 4 limit=256 [ 1907.002533][T22320] syz.1.6028: attempt to access beyond end of device [ 1907.002533][T22320] loop1: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 1907.114989][ T30] audit: type=1800 audit(1769056487.139:308): pid=22320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6028" name="file0" dev="loop1" ino=1049082 res=0 errno=0 [ 1907.521390][T13008] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1907.666078][T13008] usb 9-1: USB disconnect, device number 14 [ 1908.564429][T22342] program syz.1.6033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1908.954173][T22343] loop8: detected capacity change from 0 to 2048 [ 1909.011957][T22343] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1909.286546][T22343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1909.692356][T22343] overlayfs: upper fs needs to support d_type. [ 1909.730119][T22343] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1909.846938][T22343] overlayfs: failed to set xattr on upper [ 1909.853143][T22343] overlayfs: ...falling back to redirect_dir=nofollow. [ 1909.860488][T22343] overlayfs: ...falling back to index=off. [ 1909.866642][T22343] overlayfs: ...falling back to uuid=null. [ 1909.956313][T22343] overlayfs: conflicting lowerdir path [ 1910.248353][T13008] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1910.508609][T13008] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1910.517313][T13008] usb 2-1: config 0 has no interface number 0 [ 1910.536545][T13008] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.551569][T13008] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1910.562903][T13008] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1910.572349][T13008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.783043][T13008] usb 2-1: config 0 descriptor?? [ 1911.310896][T13008] hid_parser_main: 18 callbacks suppressed [ 1911.311013][T13008] prodikeys 0003:041E:2801.003F: unknown main item tag 0x0 [ 1911.324739][T13008] prodikeys 0003:041E:2801.003F: unknown main item tag 0x0 [ 1911.332924][T13008] prodikeys 0003:041E:2801.003F: item fetching failed at offset 2/7 [ 1911.470558][ T9637] IPVS: starting estimator thread 0... [ 1911.497954][T13008] prodikeys 0003:041E:2801.003F: hid parse failed [ 1911.511481][T13008] prodikeys 0003:041E:2801.003F: probe with driver prodikeys failed with error -22 [ 1911.571283][T22369] IPVS: using max 240 ests per chain, 12000 per kthread [ 1911.653353][T13008] usb 2-1: USB disconnect, device number 18 [ 1912.514260][T22376] loop0: detected capacity change from 0 to 512 [ 1912.518088][T22379] loop4: detected capacity change from 0 to 512 [ 1912.594241][T22379] EXT4-fs: Ignoring removed i_version option [ 1912.885331][T22379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1912.921626][T22389] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6049'. [ 1912.953580][T22376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6044: bg 0: block 288: padding at end of block bitmap is not set [ 1912.986426][T22379] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1913.092298][T22376] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1913.274678][T22376] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.6044: attempt to clear invalid blocks 1024 len 1 [ 1913.707146][T22376] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6044: invalid indirect mapped block 1819239214 (level 0) [ 1913.832026][T21102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.008929][T22376] EXT4-fs (loop0): 1 truncate cleaned up [ 1914.347914][T22376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1914.742224][T22376] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 1917.581611][T22431] loop1: detected capacity change from 0 to 136 [ 1917.826476][ T9637] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1918.030757][ T9637] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.042742][ T9637] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.053617][ T9637] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1918.063027][ T9637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.205586][T14872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1918.430594][ T9637] usb 7-1: config 0 descriptor?? [ 1919.072064][ T9637] playstation 0003:054C:0BA0.0040: unknown main item tag 0x0 [ 1919.179539][ T9637] playstation 0003:054C:0BA0.0040: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.6-1/input0 [ 1919.358858][ T9637] playstation 0003:054C:0BA0.0040: Failed to retrieve feature with reportID 18: -71 [ 1919.375260][ T9637] playstation 0003:054C:0BA0.0040: Failed to retrieve DualShock4 pairing info: -71 [ 1919.385172][ T9637] playstation 0003:054C:0BA0.0040: Failed to get MAC address from DualShock4 [ 1919.394380][ T9637] playstation 0003:054C:0BA0.0040: Failed to create dualshock4. [ 1919.682498][ T9637] playstation 0003:054C:0BA0.0040: probe with driver playstation failed with error -71 [ 1919.806493][ T9637] usb 7-1: USB disconnect, device number 9 [ 1920.562876][T22447] fido_id[22447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1921.033901][T22462] loop8: detected capacity change from 0 to 512 [ 1921.260498][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1921.327336][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1921.637770][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1921.678214][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1921.894842][T22464] ceph: No mds server is up or the cluster is laggy [ 1922.059648][T22474] netlink: 'syz.1.6079': attribute type 2 has an invalid length. [ 1922.069268][T22474] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1922.970348][T22483] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6082'. [ 1923.917478][T22489] loop8: detected capacity change from 0 to 4096 [ 1924.391531][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1925.919243][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1925.976452][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1926.030282][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1926.067357][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1926.378356][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1926.388342][T22506] Bluetooth: hci4: command 0x0405 tx timeout [ 1926.395511][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1926.622055][T22523] ceph: No mds server is up or the cluster is laggy [ 1927.038082][T22531] nbd1: detected capacity change from 0 to 2 [ 1927.109510][ T5787] block nbd1: Receive control failed (result -32) [ 1927.671375][ T6210] block nbd1: Dead connection, failed to find a fallback [ 1927.683975][ T6210] block nbd1: shutting down sockets [ 1927.689803][ T6210] blk_print_req_error: 10 callbacks suppressed [ 1927.689883][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1927.706720][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1927.761262][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1927.774179][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1927.786935][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1927.797206][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1927.805440][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1927.815514][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1927.832890][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1927.843451][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1927.857978][ T6210] ldm_validate_partition_table(): Disk read failed. [ 1927.927412][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1927.943051][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1928.000429][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1928.010663][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1928.123558][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1928.133882][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1928.207684][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1928.218625][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1928.226909][ T6210] Dev nbd1: unable to read RDB block 0 [ 1928.273741][ T6210] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1928.286749][ T6210] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1928.307284][ T6210] nbd1: unable to read partition table [ 1928.335387][ T6210] nbd1: partition table beyond EOD, truncated [ 1928.364830][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6102'. [ 1928.410939][ T6210] ldm_validate_partition_table(): Disk read failed. [ 1928.446944][ T6210] Dev nbd1: unable to read RDB block 0 [ 1928.453251][ T6210] nbd1: unable to read partition table [ 1928.596294][ T6210] nbd1: partition table beyond EOD, truncated [ 1929.121954][T22550] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6104'. [ 1929.202207][T22550] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6104'. [ 1929.476159][ T6472] Bluetooth: hci5: Frame reassembly failed (-84) [ 1929.552163][T22561] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1931.441070][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6114'. [ 1931.506321][ T5787] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1931.510945][T22506] Bluetooth: hci5: command 0x1003 tx timeout [ 1932.821737][T22595] loop6: detected capacity change from 0 to 256 [ 1932.882126][T22597] loop1: detected capacity change from 0 to 512 [ 1933.057714][T22597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 1933.085651][T22597] System zones: 1-12 [ 1933.127960][T22597] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.6120: Directory hole found for htree index block 0 [ 1933.212748][T22595] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1933.288750][T22597] EXT4-fs (loop1): Remounting filesystem read-only [ 1933.363401][T22597] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1933.451717][T22597] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1933.568357][T22597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1934.404537][T15058] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1936.313404][T22634] loop4: detected capacity change from 0 to 512 [ 1937.096975][T22642] loop1: detected capacity change from 0 to 128 [ 1937.162658][T22642] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1937.690645][T22642] syz.1.6133: attempt to access beyond end of device [ 1937.690645][T22642] loop1: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 1937.841336][T22642] syz.1.6133: attempt to access beyond end of device [ 1937.841336][T22642] loop1: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 1938.238555][T22643] loop6: detected capacity change from 0 to 4096 [ 1938.405133][T13026] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1938.502305][T22656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6135'. [ 1939.060232][T22643] ntfs3(loop6): ino=18, mi_enum_attr [ 1939.093604][T22643] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1939.170736][T22643] ntfs3(loop6): ino=1a, mi_enum_attr [ 1939.584804][T22665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6140'. [ 1940.049393][T22669] loop1: detected capacity change from 0 to 1024 [ 1940.180146][T22669] hfsplus: Unknown parameter '0xffffffffffffffff˙˙˙˙' [ 1940.270476][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1940.517276][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1940.587779][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1940.597398][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.805276][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1940.813030][ T10] pvrusb2: ********** [ 1940.817472][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1940.828049][ T10] pvrusb2: Important functionality might not be entirely working. [ 1940.836680][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1940.848272][ T10] pvrusb2: ********** [ 1941.226381][ T2334] pvrusb2: Invalid write control endpoint [ 1941.368452][T22679] bridge0: entered promiscuous mode [ 1941.370225][T22683] netlink: 'syz.6.6144': attribute type 15 has an invalid length. [ 1941.436355][T22679] macvlan2: entered promiscuous mode [ 1941.499325][ T10] usb 9-1: USB disconnect, device number 15 [ 1941.531558][T22679] bridge0: port 3(macvlan2) entered blocking state [ 1941.539052][T22679] bridge0: port 3(macvlan2) entered disabled state [ 1941.661466][T22679] macvlan2: entered allmulticast mode [ 1941.668743][T22679] bridge0: entered allmulticast mode [ 1941.766727][ T2334] pvrusb2: Invalid write control endpoint [ 1941.777641][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1941.788684][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1941.798473][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1941.808731][ T2334] pvrusb2: Device being rendered inoperable [ 1941.841911][T22679] macvlan2: left allmulticast mode [ 1941.847408][T22679] bridge0: left allmulticast mode [ 1941.886065][ T2334] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1941.936446][ T2334] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1941.966027][ T2334] pvrusb2: Attached sub-driver cx25840 [ 1941.971762][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1941.986360][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1941.987165][T22679] bridge0: left promiscuous mode [ 1942.766835][T22694] loop6: detected capacity change from 0 to 1024 [ 1942.839288][T22694] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1942.931920][T22694] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1942.967580][T22694] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1943.031978][T22694] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.6146: Invalid inode table block 0 in block_group 0 [ 1943.150535][T22694] EXT4-fs (loop6): Remounting filesystem read-only [ 1943.157762][T22694] Quota error (device loop6): write_blk: dquota write failed [ 1943.166232][T22694] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1943.356032][T22694] EXT4-fs (loop6): 1 truncate cleaned up [ 1943.364635][T22694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1944.091312][T19854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1945.830210][T22729] loop1: detected capacity change from 0 to 128 [ 1946.039499][T22729] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1946.141339][T22729] ext4 filesystem being mounted at /526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1946.515005][T22729] syz.1.6158 (pid 22729) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1946.546768][T22738] program syz.6.6160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1947.240352][T15058] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1948.915030][T22765] loop8: detected capacity change from 0 to 128 [ 1949.021288][T22765] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1949.495555][T22765] syz.8.6168: attempt to access beyond end of device [ 1949.495555][T22765] loop8: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 1949.646123][T22765] syz.8.6168: attempt to access beyond end of device [ 1949.646123][T22765] loop8: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 1949.996123][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1950.166803][ T58] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1950.193858][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1950.264801][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.279893][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1950.291274][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1950.306684][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1950.316952][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.421013][ T10] usb 5-1: config 0 descriptor?? [ 1951.049411][ T10] microsoft 0003:045E:07DA.0041: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1951.061481][ T10] microsoft 0003:045E:07DA.0041: no inputs found [ 1951.068560][ T10] microsoft 0003:045E:07DA.0041: could not initialize ff, continuing anyway [ 1951.230554][T22791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6176'. [ 1951.255460][ T10] usb 5-1: USB disconnect, device number 19 [ 1952.529020][T22793] fido_id[22793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1952.644891][T22801] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1955.162287][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1955.170092][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1955.644063][T22831] loop8: detected capacity change from 0 to 512 [ 1955.717425][T22831] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1955.724551][T22831] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1955.877938][T22831] EXT4-fs (loop8): 1 truncate cleaned up [ 1955.947473][T22836] loop4: detected capacity change from 0 to 16 [ 1955.954666][T22831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1955.973683][T22836] erofs (device loop4): mounted with root inode @ nid 36. [ 1956.242577][T22836] erofs (device loop4): invalid de[0].nameoff 0 @ nid 36 [ 1956.488433][T22841] erofs (device loop4): corrupted dir block 72 @ nid 36 [ 1956.748640][T18482] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1957.894022][T22852] loop4: detected capacity change from 0 to 2048 [ 1957.989558][T22852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1959.248206][T22865] loop0: detected capacity change from 0 to 1024 [ 1959.442849][T22869] loop6: detected capacity change from 0 to 512 [ 1959.493508][T22865] hfsplus: bad catalog entry type [ 1959.534716][T22869] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1959.616472][T22869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 1959.728912][T22869] System zones: 1-12 [ 1959.768028][T13008] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1959.788650][T22869] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.6204: corrupted in-inode xattr: e_value size too large [ 1959.869135][T22869] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6204: couldn't read orphan inode 15 (err -117) [ 1959.960438][T13008] usb 2-1: Using ep0 maxpacket: 8 [ 1959.997318][T13008] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1960.009455][T13008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.031754][T13026] hfsplus: b-tree write err: -5, ino 4 [ 1960.058019][T22869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1960.309103][T13008] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1960.318123][T13008] pvrusb2: ********** [ 1960.322266][T13008] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1960.334620][T13008] pvrusb2: Important functionality might not be entirely working. [ 1960.342758][T13008] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1960.354471][T13008] pvrusb2: ********** [ 1960.629396][ T2334] pvrusb2: Invalid write control endpoint [ 1960.870368][T19854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.977271][ T10] usb 2-1: USB disconnect, device number 19 [ 1961.383248][ T2334] pvrusb2: Invalid write control endpoint [ 1961.389910][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1961.399525][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1961.407866][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1961.418289][ T2334] pvrusb2: Device being rendered inoperable [ 1961.572987][ T2334] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1961.688232][ T2334] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1961.730758][ T2334] pvrusb2: Attached sub-driver cx25840 [ 1961.736661][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1961.751905][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1961.994863][T22891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6213'. [ 1962.242075][T22893] netlink: 'syz.8.6212': attribute type 15 has an invalid length. [ 1962.405558][T22895] netlink: 'syz.0.6214': attribute type 12 has an invalid length. [ 1962.414505][T22895] netlink: 'syz.0.6214': attribute type 28 has an invalid length. [ 1962.422696][T22895] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6214'. [ 1962.628441][T22898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6215'. [ 1963.817950][ T141] ===================================================== [ 1963.825604][ T141] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xae2/0x98d0 [ 1963.834623][ T141] n_tty_receive_buf_standard+0xae2/0x98d0 [ 1963.841058][ T141] n_tty_receive_buf_common+0x1a59/0x2610 [ 1963.847787][ T141] n_tty_receive_buf2+0x4c/0x60 [ 1963.852871][ T141] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1963.858796][ T141] tty_port_default_receive_buf+0xd7/0x1a0 [ 1963.864884][ T141] flush_to_ldisc+0x43e/0xe40 [ 1963.870259][ T141] process_scheduled_works+0xb03/0x1da0 [ 1963.881765][ T141] worker_thread+0xede/0x1590 [ 1963.887038][ T141] kthread+0xd5a/0xf00 [ 1963.897782][ T141] ret_from_fork+0x207/0x6f0 [ 1963.902549][ T141] ret_from_fork_asm+0x1a/0x30 [ 1963.909555][ T141] [ 1963.911983][ T141] Uninit was stored to memory at: [ 1963.917791][ T141] n_tty_receive_buf_standard+0xadb/0x98d0 [ 1963.923840][ T141] n_tty_receive_buf_common+0x1a59/0x2610 [ 1963.932122][ T141] n_tty_receive_buf2+0x4c/0x60 [ 1963.937805][ T141] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1963.943340][ T141] tty_port_default_receive_buf+0xd7/0x1a0 [ 1963.949926][ T141] flush_to_ldisc+0x43e/0xe40 [ 1963.955012][ T141] process_scheduled_works+0xb03/0x1da0 [ 1963.960995][ T141] worker_thread+0xede/0x1590 [ 1963.966000][ T141] kthread+0xd5a/0xf00 [ 1963.970426][ T141] ret_from_fork+0x207/0x6f0 [ 1963.975446][ T141] ret_from_fork_asm+0x1a/0x30 [ 1963.981351][ T141] [ 1963.983792][ T141] Uninit was created at: [ 1963.988554][ T141] __kmalloc_noprof+0xae9/0x1c00 [ 1963.998659][ T141] __tty_buffer_request_room+0x3d4/0x7a0 [ 1964.004556][ T141] __tty_insert_flip_string_flags+0x157/0x6f0 [ 1964.012984][ T141] uart_insert_char+0x368/0x930 [ 1964.018369][ T141] serial8250_read_char+0x1ba/0x670 [ 1964.023928][ T141] serial8250_handle_irq+0x930/0x1110 [ 1964.029772][ T141] serial8250_default_handle_irq+0x116/0x370 [ 1964.036097][ T141] serial8250_interrupt+0xcb/0x420 [ 1964.041436][ T141] __handle_irq_event_percpu+0x118/0xec0 [ 1964.047689][ T141] handle_irq_event+0xe0/0x2a0 [ 1964.052803][ T141] handle_edge_irq+0x2a9/0xb50 [ 1964.057998][ T141] __common_interrupt+0x9d/0x180 [ 1964.063202][ T141] common_interrupt+0x94/0xb0 [ 1964.068982][ T141] asm_common_interrupt+0x2b/0x40 [ 1964.074206][ T141] [ 1964.076971][ T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u8:5 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1964.088768][ T141] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1964.098905][ T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1964.112023][ T141] Workqueue: events_unbound flush_to_ldisc [ 1964.118404][ T141] ===================================================== [ 1964.125485][ T141] Disabling lock debugging due to kernel taint [ 1964.132034][ T141] Kernel panic - not syncing: kmsan.panic set ... [ 1964.138699][ T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u8:5 Tainted: G B W L syzkaller #0 PREEMPT(voluntary) [ 1964.150307][ T141] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1964.156960][ T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1964.167355][ T141] Workqueue: events_unbound flush_to_ldisc [ 1964.173804][ T141] Call Trace: [ 1964.177299][ T141] [ 1964.180501][ T141] __dump_stack+0x26/0x30 [ 1964.185118][ T141] dump_stack_lvl+0x50/0x1c0 [ 1964.189973][ T141] ? dump_stack+0x12/0x25 [ 1964.194561][ T141] dump_stack+0x1e/0x25 [ 1964.198934][ T141] vpanic+0x435/0xd40 [ 1964.203250][ T141] panic+0x15d/0x160 [ 1964.207656][ T141] kmsan_report+0x31a/0x320 [ 1964.212473][ T141] ? __msan_warning+0x1b/0x30 [ 1964.217663][ T141] ? n_tty_receive_buf_standard+0xae2/0x98d0 [ 1964.224015][ T141] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 1964.230269][ T141] ? n_tty_receive_buf2+0x4c/0x60 [ 1964.235662][ T141] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1964.241492][ T141] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1964.247836][ T141] ? flush_to_ldisc+0x43e/0xe40 [ 1964.253086][ T141] ? process_scheduled_works+0xb03/0x1da0 [ 1964.259004][ T141] ? worker_thread+0xede/0x1590 [ 1964.264185][ T141] ? kthread+0xd5a/0xf00 [ 1964.268664][ T141] ? ret_from_fork+0x207/0x6f0 [ 1964.273646][ T141] ? ret_from_fork_asm+0x1a/0x30 [ 1964.278838][ T141] ? ret_from_fork_asm+0x1a/0x30 [ 1964.284173][ T141] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1964.290494][ T141] ? kmsan_get_metadata+0xf1/0x160 [ 1964.295883][ T141] ? kmsan_get_metadata+0x146/0x160 [ 1964.301472][ T141] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1964.308039][ T141] ? kmsan_get_metadata+0x146/0x160 [ 1964.313565][ T141] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1964.319819][ T141] ? n_tty_receive_char+0x1223/0x14f0 [ 1964.325589][ T141] ? kmsan_get_metadata+0xf1/0x160 [ 1964.331123][ T141] __msan_warning+0x1b/0x30 [ 1964.336044][ T141] n_tty_receive_buf_standard+0xae2/0x98d0 [ 1964.342240][ T141] ? kmsan_get_metadata+0xf1/0x160 [ 1964.347780][ T141] ? kmsan_get_metadata+0xf1/0x160 [ 1964.353456][ T141] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1964.359744][ T141] ? kmsan_get_metadata+0xf1/0x160 [ 1964.365092][ T141] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1964.371828][ T141] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1964.378113][ T141] ? kmsan_get_metadata+0xf1/0x160 [ 1964.383506][ T141] n_tty_receive_buf_common+0x1a59/0x2610 [ 1964.389577][ T141] n_tty_receive_buf2+0x4c/0x60 [ 1964.394620][ T141] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1964.400384][ T141] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1964.405854][ T141] tty_port_default_receive_buf+0xd7/0x1a0 [ 1964.411904][ T141] flush_to_ldisc+0x43e/0xe40 [ 1964.416840][ T141] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1964.423501][ T141] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1964.428974][ T141] process_scheduled_works+0xb03/0x1da0 [ 1964.434805][ T141] worker_thread+0xede/0x1590 [ 1964.439732][ T141] kthread+0xd5a/0xf00 [ 1964.444006][ T141] ? __pfx_worker_thread+0x10/0x10 [ 1964.449340][ T141] ? __pfx_kthread+0x10/0x10 [ 1964.454117][ T141] ret_from_fork+0x207/0x6f0 [ 1964.458886][ T141] ? __switch_to+0x521/0x750 [ 1964.463710][ T141] ? __pfx_kthread+0x10/0x10 [ 1964.468513][ T141] ret_from_fork_asm+0x1a/0x30 [ 1964.473549][ T141] [ 1964.477297][ T141] Kernel Offset: disabled [ 1964.481689][ T141] Rebooting in 86400 seconds..