last executing test programs: 4m31.390084674s ago: executing program 32 (id=2029): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m22.702242454s ago: executing program 2 (id=2075): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 4m21.689192154s ago: executing program 2 (id=2079): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005a40)=[{{&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000380)='6', 0x1}], 0x1}}], 0x1, 0xd0) listen(r0, 0x1ff) 4m20.863460805s ago: executing program 2 (id=2084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000040000000400000004"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4m20.376515023s ago: executing program 2 (id=2086): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,gid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00d<', @ANYRESDEC=0x0, @ANYBLOB=',rootdir=00000000000000000004,uid=ignore,uid=ignore,gid=ignore,iocharset=koi8-u,umask=00000000000000000077777,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x11) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m19.197347211s ago: executing program 2 (id=2093): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000000101"], 0x64}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 4m18.333684191s ago: executing program 2 (id=2097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000200)=""/25, &(0x7f0000000000)=0x14) 4m16.227378873s ago: executing program 33 (id=2097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000200)=""/25, &(0x7f0000000000)=0x14) 3m0.873546171s ago: executing program 6 (id=2542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 3m0.612761214s ago: executing program 6 (id=2544): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="838875be4be313f03e73412551acabcb05d764933e5bc8c9cb4b9c7d11ae2524ea800918d0b22406e45c12664afde202cad176a62d758666f2074ca2070c40919d5f3e9218c219de04a31b732d", 0x4d}, {&(0x7f0000001540)="0920c6781fe8980d883c804fc0d3f120470a7ad0dbfa2fe06e397c6c25cdcb89ca384d12f0bbcc80013cff6b33c8806bd6a5c6bd166e24ad5e309419613dffa9374f931d6729db8efaedba7f69fe80", 0x4f}], 0x2) 2m59.945380549s ago: executing program 6 (id=2549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 2m59.529110075s ago: executing program 6 (id=2551): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,gid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00d<', @ANYRESDEC=0x0, @ANYBLOB=',rootdir=00000000000000000004,uid=ignore,uid=ignore,gid=ignore,iocharset=koi8-u,umask=00000000000000000077777,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x11) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m59.197821569s ago: executing program 3 (id=2553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x54}}, 0x0) 2m58.702106216s ago: executing program 6 (id=2556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) 2m58.297957759s ago: executing program 3 (id=2568): socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 2m57.815424849s ago: executing program 3 (id=2562): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x1}, 0x0) 2m57.71373263s ago: executing program 6 (id=2563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008035eb0000000001000000940000930600003e4f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x280}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x1}, {@in=@remote, 0x20000, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000}, {}, {0x0, 0x0, 0x1}, 0x80000000, 0x0, 0xa, 0x0, 0x0, 0x20}}, 0xf0}}, 0x0) 2m55.305816712s ago: executing program 34 (id=2563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008035eb0000000001000000940000930600003e4f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x280}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x1}, {@in=@remote, 0x20000, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000}, {}, {0x0, 0x0, 0x1}, 0x80000000, 0x0, 0xa, 0x0, 0x0, 0x20}}, 0xf0}}, 0x0) 2m54.704573117s ago: executing program 3 (id=2566): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,gid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00d<', @ANYRESDEC=0x0, @ANYBLOB=',rootdir=00000000000000000004,uid=ignore,uid=ignore,gid=ignore,iocharset=koi8-u,umask=00000000000000000077777,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x11) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m53.270654369s ago: executing program 1 (id=2572): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000001480)=""/199, 0xc7}], 0x4}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2m52.977966892s ago: executing program 3 (id=2576): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1], 0x27) 2m52.666588016s ago: executing program 1 (id=2577): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x5, 0x3, 0x0, {0x0, 0xfff9}, {0xa}, @cond=[{0x0, 0x0, 0x0, 0x80, 0x0, 0x2}, {0x0, 0x0, 0xd22, 0x1, 0x80}]}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) 2m52.169313653s ago: executing program 3 (id=2579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) unshare(0x20000400) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 2m52.169026208s ago: executing program 1 (id=2580): munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x10000}) 2m50.417182393s ago: executing program 35 (id=2579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) unshare(0x20000400) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 2m50.36484574s ago: executing program 1 (id=2585): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,gid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00d<', @ANYRESDEC=0x0, @ANYBLOB=',rootdir=00000000000000000004,uid=ignore,uid=ignore,gid=ignore,iocharset=koi8-u,umask=00000000000000000077777,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x11) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m49.000049824s ago: executing program 1 (id=2588): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x30000008}) dup3(r0, r1, 0x0) 2m47.698856983s ago: executing program 1 (id=2594): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) 2m46.374661321s ago: executing program 36 (id=2594): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) 2m10.589069886s ago: executing program 8 (id=2745): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000380)=0x200000000000000c, 0x5, 0x3) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m9.220988528s ago: executing program 8 (id=2750): unshare(0x20020480) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x0) 2m8.701598734s ago: executing program 8 (id=2755): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000180)="f7", 0x1, 0x200980) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) 2m7.928753904s ago: executing program 8 (id=2759): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x2e00) 2m7.178446979s ago: executing program 8 (id=2764): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 2m6.442288497s ago: executing program 8 (id=2768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x20040044) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}}, &(0x7f0000000200)=0x84) 2m4.582602471s ago: executing program 37 (id=2768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x20040044) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}}, &(0x7f0000000200)=0x84) 5.444984591s ago: executing program 9 (id=3486): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup3(r1, r0, 0x0) 4.969610404s ago: executing program 9 (id=3489): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.0592735s ago: executing program 5 (id=3495): socket$kcm(0x10, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 4.055975671s ago: executing program 7 (id=3496): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000002540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000c13, &(0x7f0000000100)={[{@showassoc}, {@check_relaxed}, {@nojoliet}, {@block={'block', 0x3d, 0x400}}, {@sbsector}, {@hide}, {@check_relaxed}, {@unhide}, {@check_relaxed}, {@map_off}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}, 0x3, 0xa03, &(0x7f0000004600)="$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") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 4.055792766s ago: executing program 4 (id=3497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 3.99836101s ago: executing program 9 (id=3498): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000004740)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) 3.548457868s ago: executing program 5 (id=3499): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x6000, 0x80600}) 3.465315301s ago: executing program 9 (id=3500): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x7, 0x0, 0x804}, 0x7, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x80000, 0x0, 0x8000180d, 0x0, 0xae4d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xb753, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000, 0x9], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3e8, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffb]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) 3.432087986s ago: executing program 4 (id=3501): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1000000, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='ext4_discard_blocks\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 3.04528756s ago: executing program 7 (id=3502): r0 = io_uring_setup(0x5a21, &(0x7f0000000500)={0x0, 0x6fdf, 0x40, 0x3, 0x259}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000580), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 2.970670616s ago: executing program 0 (id=3503): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) unshare(0x20000400) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 2.950535231s ago: executing program 9 (id=3504): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="008482"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.572920593s ago: executing program 7 (id=3505): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x122a2, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.410831336s ago: executing program 4 (id=3506): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@bridge_dellink={0x28, 0x11, 0x5, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x6008, 0x62700}, [@IFLA_WEIGHT={0x8, 0xf, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 2.343482583s ago: executing program 5 (id=3507): r0 = io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 2.29827207s ago: executing program 0 (id=3508): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.868695485s ago: executing program 5 (id=3509): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.818683315s ago: executing program 4 (id=3510): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00038008"], 0x34}}, 0x0) 1.479398422s ago: executing program 0 (id=3511): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @empty}}]}, 0x10c) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) 1.394046991s ago: executing program 7 (id=3512): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRES64, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$eJzs289ulFAUx/EfDANa/9S/GzddaKIbS0cT0Z19lElL66SMNtZNGxPjA/gQvoE+kQu3nUR3rsTMZToOSIVhOtDpfD9Jw71wD/fcUJjDAgFYWjckWbLUlhTH8YdXD2ytNZ0UgFq09DsGsKz0459dXlIMALjYBpstUwfsS/r28/3W8eivPVEh/M9g0zbbl5KOJ+LdkvXH4KNltvecdPzwEXSpRHz8OYl/mJn/8pTzr2TiV0rHJ+t/dD8df0XSVUnXJF2XtDp617op6VbO/NuZ+e8Od34tmQRQkaX1bD+1w9ZOLwo3xv226Xcmxqe55vjTcd8z/fWtN9H22ScPYCZ2wf3fytz/Tub+B7C4Dg6P9rpRFL7Nb3w5/VDNDbsoVdPwVO6E338VjLHPwZJnbgxf3c7khG6J/5bCMWsVZj95+Zw655O6tOlLkDQcSVXDndFKcsf0Z83Qy71e7l43Ou2J4czvYQSgVv67/r5/cHj0uNfv7oa74esnwYsg6DzvPAt8U/n7Oz1po+k0AczB3x/98jHx6jwzAgAAAAAAAAAAAAAA07ot6U6FuDj74Q8AAACAc6+OT6DGk31qdKkAAAAAAAAAAAAAAAAAAADAwvsTAAD//2QeNU0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/141, 0x8d) 1.270622634s ago: executing program 4 (id=3513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.060361672s ago: executing program 0 (id=3514): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x38}}, 0x0) 796.599234ms ago: executing program 4 (id=3515): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0xa, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x4, 0x4, &(0x7f0000000180)={0xb, "c92ef7d4b4f043c07e3efe66dd00aeffac04a3461d1b6213a647540764c7fd00"}}) 720.947011ms ago: executing program 7 (id=3516): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e25, 0x200, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="1a10c7", 0x3}], 0x1}}], 0x1, 0x4001c00) 454.664947ms ago: executing program 9 (id=3517): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x6000, 0x80600}) 452.01665ms ago: executing program 0 (id=3518): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEykzadbtn/b7Qbx358zuNjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU8qi0FdyMJm7Oq3MlrBcQ4T8oFvFWNPutr4xCLof/WsfV6NtVFMOPIgYXLl+6++VcJll/TsIvAosW+Pjp4MG9fn//0Rlis1i4+NcJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJTPvfL1qGDX5nUK0owGUPWvbbrftbkvHhIvDmDvygx9EAcrsSHlw2N/fGsvnWVobh0GVlOQz48FhUPW0za0a1WqlUq1Warfrt+8YRm5qhhESxhCmIpZ+0NIbZrkncKKXkLEa/zH+JIA2iuhiB7uQqT8WGnDhoDNjeSzp/9+5pebWO97/J738ymjxFej+/1r07dqs/n9GLhJSr5C2RMyYv9jPis5I4jGeYoAHuIc++tjHoyWULSHXXrqEvBG35FLymfnTgkIXNjw4sNGBiRa+CBnPkaijhhoMvIdtNOFBogkbbSh42IMHHyo8ovJhpgomfDhwIbEBCzchUUEddWxBQqGMPTjYQRctNGDiX0EQHOBQt/tWnM/zlK1GElSZsREF5JLjbh/VOVs7q///4bNo7bj/N9j/f15Fx0Eh+vh4XgzRZ0AQX/8vaO3VZENEREREREREr4LQv30X+q/ybwMI0LTbypiIKby27IiIiIiIiIhoGQSCAq5CRHfl422I6et/IiIiIiIiInqzCf2MnQBQ0jf1i9HjUmf5JUD2HFIkIiIiIiIiopekn/y/lgcCfZf/GsRC1/9ERERERERE9Ab41dgY+7lsPMZukPxZPwNg7c8F8dHfCnBXxHFv96viyAyXmEdxzNQdAH7zirgYD9SrP/IA9DdLXRVxbRL4Z/Lbh9AnB+lj/T8PIkII90QC+ex4ATMSEGHNtVz8DR/gerTK9Xic+fuDDPSSaEThUtNuq7LltO9WYJoXM77a9X/28PDngDvczoPD/n75Rz/u39e5HIezjo/CQp9NpJNJb4xRLk/0eAv6mYu00Y1X0Uyq/HW3UxK6XiPZ/izMo8x4RfN2QG0ViLbyF1iP9tl6EMWWBsMR9wWwpgd/qJT1LpvYendFjLKonNzytB0xY8uLOosbUcyNjRvRR9ImYTkZUfxaFqiWp/fBRBbV8SxObwvx9xPtPz8LiGLYFlthFn8ICzqRxfc/ilbe6u0mw2OcJYupo4CI6HU5GPVCehDzqTH2k+4hOamdvd9BDojPcjN691EtQdx/JL37k98GUQ+VBXLx3ybSa0n6FYRn9A2hy8lHA7rnrqSc0Y3yp0EQmBeLGD+j/zcIkg0yFujdjoMgOHlG//3oHUhx2lNZ/DsIgrsV3ZP85kSv+mG4wocz6/Xa1SyKKODJ0U/0APih9/ff339YrW7VjHcN43YVK/p/FeKPLNj3EBHRlNPfsaMjMnMixLu4HpVx/f5f34mmJnq8L8W3FGi3gD7uYzN5hcBaeqklHOCb/4huQ9iMrlqB9VL0WRrIy5fuhle1w9hDkdNveNmceVWn+9IoVt/eUB3GJu8dOnkFOIrdesV7gYiI6Hytz+iHgYn+H5P9f3Gi/9/ERhSxcSX1urs0dkvhZnJ1PLykH1w4To2tnJ78t5bcGERERJ8Tyv1ElPxfCte1e+9V6vWK6W8r6TrWd6VrN1pK2l1fuda22W0p2XMd37Gctuy5KNirypPeTq/nuL5sOq7sOZ69q9/8LuNXv3uqY3Z92/J6bWV6SlpO1zctXzZsz5K9nW+3bW9buXplr6csu2lbpm87Xek5O66lylJ6So0F2g3V9e2mHU52Zc+1O6a7J7/ntHc6SjaUZ7l2z3eiApO67G7TcTu62DKChV90SERE9P/o8dPBg3v9/v6jkxOr4aV5NOcYM2KmJ/IpBXKMICIios+YUXe9wErFV5gQERERERERERERERERERERERERERERERFNOf2RvgUnVtIeFgSGc356MZ6D5xg9YjhVjsDL5vOp+0c9sN+LrJ5ZtNLkkYjBg4/nBK8O5yTNPx5zvEiluAS8cPv85QvABT0H0ZzcEg+A6edHl36MpU184yBq0VkxemHqosJwX+SW/59DOPHwd9OLRNjyQRAE81cvTLZh/uzHcw7Ao/ycXbB6yvFz3mciIjpv/wsAAP//eO06pA==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 439.088085ms ago: executing program 5 (id=3527): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x41, 0x0) r0 = syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 122.334324ms ago: executing program 7 (id=3519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 73.165522ms ago: executing program 5 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x8844) 0s ago: executing program 0 (id=3521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @private=0xa010102, 0x3}, @phonet={0x23, 0x2, 0x1a, 0x5}, @in={0x2, 0x4e21, @broadcast}, 0x9, 0x0, 0x0, 0x0, 0xa38e, &(0x7f0000000040)='ipvlan1\x00', 0xdc7}) kernel console output (not intermixed with test programs): 703.994030][ T5435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.066316][T11690] dvb-usb: bulk message failed: -22 (3/0) [ 704.076051][T11690] cxusb: i2c wr: len=79 is too big! [ 704.076051][T11690] [ 704.153150][T11704] loop6: detected capacity change from 0 to 512 [ 704.167601][ T5435] usb 6-1: selecting invalid altsetting 6 [ 704.173694][ T5435] usb 6-1: digital interface selection failed (-22) [ 704.181936][ T5435] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 704.212115][ T5435] usb 6-1: setting power OFF [ 704.220648][ T5435] dvb-usb: bulk message failed: -22 (2/0) [ 704.227966][ T5435] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 704.238035][ T5435] (NULL device *): no alternate interface [ 704.622409][ T5435] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 704.701669][ T5435] usb 6-1: USB disconnect, device number 5 [ 704.751325][T11711] loop3: detected capacity change from 0 to 256 [ 705.145385][T11715] loop5: detected capacity change from 0 to 256 [ 705.184811][T11715] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 705.196255][T11715] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 705.304682][T11715] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 705.408672][T11720] loop6: detected capacity change from 0 to 16 [ 705.468154][T11720] erofs (device loop6): mounted with root inode @ nid 36. [ 706.048394][T11726] bridge: RTM_NEWNEIGH with invalid ether address [ 706.489556][T11727] loop5: detected capacity change from 0 to 4096 [ 707.198199][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'. [ 707.793819][T11744] loop6: detected capacity change from 0 to 256 [ 707.914789][T11744] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 707.929183][T11744] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 707.940325][ T4584] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 708.801207][T11750] loop5: detected capacity change from 0 to 16 [ 708.862439][T11750] erofs (device loop5): mounted with root inode @ nid 36. [ 708.940252][T11750] syz.5.2464: attempt to access beyond end of device [ 708.940252][T11750] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 708.955992][T11750] erofs (device loop5): read error -5 @ 43 of nid 36 [ 709.816740][T11754] syz.5.2464 (11754): drop_caches: 2 [ 710.068241][T11762] loop3: detected capacity change from 0 to 164 [ 710.640701][T11772] C: renamed from lo (while UP) [ 710.670371][T11772] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 710.689207][T11768] loop4: detected capacity change from 0 to 4096 [ 710.766064][T11775] loop3: detected capacity change from 0 to 512 [ 710.834892][T11775] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2474: inode #15: comm syz.3.2474: iget: illegal inode # [ 710.855247][T11775] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2474: couldn't read orphan inode 15 (err -117) [ 710.881009][T11775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.903547][ T4427] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 710.915885][T11775] EXT4-fs (loop3): shut down requested (2) [ 710.977549][ T5435] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 711.017983][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.054614][T11780] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2476'. [ 711.186533][ T5435] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.198177][ T5435] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.209799][ T5435] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 711.219769][ T5435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.285826][ T5435] usb 7-1: config 0 descriptor?? [ 711.766982][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.774877][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.782307][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.789769][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.799554][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.808454][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.815952][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.826212][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.834338][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.842458][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 711.849887][ T5435] uclogic 0003:5543:0522.001E: unknown main item tag 0x0 [ 712.052687][T11793] loop3: detected capacity change from 0 to 128 [ 712.116049][ T5435] uclogic 0003:5543:0522.001E: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.6-1/input0 [ 712.125826][T11793] EXT4-fs (loop3): Test dummy encryption mode enabled [ 712.175245][ T5435] usb 7-1: USB disconnect, device number 3 [ 712.195969][T11793] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 712.231063][T11793] ext4 filesystem being mounted at /484/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 712.549121][ T5810] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.938620][T11806] loop6: detected capacity change from 0 to 1024 [ 713.056678][T11809] loop3: detected capacity change from 0 to 16 [ 713.142003][T11809] erofs (device loop3): mounted with root inode @ nid 36. [ 713.270152][T11812] loop1: detected capacity change from 0 to 1024 [ 713.401771][T11816] loop5: detected capacity change from 0 to 512 [ 713.420221][T11812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.445851][T11816] EXT4-fs (loop5): Test dummy encryption mode enabled [ 713.557965][T11816] EXT4-fs error (device loop5): __ext4_iget:5379: inode #11: block 1: comm syz.5.2493: invalid block [ 713.580593][T11816] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2493: couldn't read orphan inode 11 (err -117) [ 713.610766][T11816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.704242][T11816] EXT4-fs (loop5): shut down requested (1) [ 713.784532][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.859545][ T5435] kernel write not supported for file /uhid (pid: 5435 comm: kworker/1:3) [ 714.061008][T10690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.480140][T11831] loop5: detected capacity change from 0 to 256 [ 714.505239][T11831] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 714.517464][T11831] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 714.683840][T11831] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 715.664716][T11851] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2508'. [ 715.674568][T11851] netlink: 'syz.1.2508': attribute type 9 has an invalid length. [ 715.682643][T11851] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2508'. [ 715.696503][T11851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2508'. [ 715.940290][T11853] loop5: detected capacity change from 0 to 128 [ 715.981122][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.988006][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.008767][T11853] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 716.653853][T11867] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 716.986154][T11872] loop3: detected capacity change from 0 to 512 [ 717.110910][ T5435] IPVS: starting estimator thread 0... [ 717.167514][T11872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.180659][T11872] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.232838][T11877] IPVS: using max 240 ests per chain, 12000 per kthread [ 717.299296][T11884] loop4: detected capacity change from 0 to 64 [ 717.663781][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.053002][T11896] loop4: detected capacity change from 0 to 64 [ 718.407043][T11900] loop6: detected capacity change from 0 to 2048 [ 718.428021][T11900] EXT4-fs: Ignoring removed bh option [ 718.528760][T11900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.720372][T11900] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 718.927678][ T5435] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 718.979828][T10863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.106517][ T5435] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 719.116491][ T5435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.150687][ T5435] usb 2-1: config 0 descriptor?? [ 719.190206][ T5435] cp210x 2-1:0.0: cp210x converter detected [ 719.433628][ T5435] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 719.443360][ T5435] cp210x 2-1:0.0: querying part number failed [ 719.475563][ T5435] usb 2-1: cp210x converter now attached to ttyUSB0 [ 719.589686][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2538'. [ 720.937833][ T5869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 720.995786][T11945] loop3: detected capacity change from 0 to 1024 [ 721.083170][T11945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.124777][ T5869] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 721.133614][ T5869] usb 5-1: config 0 has no interface number 0 [ 721.140214][ T5869] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 721.151792][ T5869] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 721.166199][ T5869] usb 5-1: config 0 interface 255 has no altsetting 0 [ 721.173545][ T5869] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 721.183003][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.236505][ T5869] usb 5-1: config 0 descriptor?? [ 721.259724][ T5869] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 721.353918][T11956] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.2548: Abort forced by user [ 721.377686][T11956] EXT4-fs (loop3): Remounting filesystem read-only [ 721.384656][T11956] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 721.422261][T11945] evm: overlay not supported [ 721.465534][ T5869] usb 5-1: USB disconnect, device number 13 [ 721.635521][T11958] loop6: detected capacity change from 0 to 2048 [ 721.685118][T11958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.761620][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.786981][T11958] overlayfs: upper fs needs to support d_type. [ 721.810357][T11958] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 721.819561][T11958] overlayfs: failed to set xattr on upper [ 721.825491][T11958] overlayfs: ...falling back to redirect_dir=nofollow. [ 721.834976][T11958] overlayfs: ...falling back to index=off. [ 721.841743][T11958] overlayfs: ...falling back to uuid=null. [ 721.896145][ T5435] usb 2-1: USB disconnect, device number 16 [ 721.916287][ T5435] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 721.925575][ T5435] cp210x 2-1:0.0: device disconnected [ 722.170620][T10863] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 722.203432][T10863] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 723.006589][ T4427] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.165385][ T4427] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.224078][T11978] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2561'. [ 723.311134][ T4427] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.473825][ T4427] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.844629][ T4427] bridge_slave_1: left allmulticast mode [ 723.850800][ T4427] bridge_slave_1: left promiscuous mode [ 723.857571][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.872903][ T4427] bridge_slave_0: left allmulticast mode [ 723.881186][ T4427] bridge_slave_0: left promiscuous mode [ 723.887954][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.428690][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.446115][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.471849][ T4427] bond0 (unregistering): Released all slaves [ 724.948927][ T4427] hsr_slave_0: left promiscuous mode [ 724.967660][ T4427] hsr_slave_1: left promiscuous mode [ 724.975688][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.983591][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.019989][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.028103][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.087801][ T4427] veth1_macvtap: left promiscuous mode [ 725.093535][ T4427] veth0_macvtap: left promiscuous mode [ 725.100037][ T4427] veth1_vlan: left promiscuous mode [ 725.108716][ T4427] veth0_vlan: left promiscuous mode [ 725.809968][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 725.949938][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 726.514965][T11993] loop5: detected capacity change from 0 to 256 [ 726.595727][T11993] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 726.713708][T11992] loop3: detected capacity change from 0 to 2048 [ 726.824291][T11997] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 726.846745][T11997] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 726.856890][T11997] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 726.872055][T11992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.888770][T11997] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 726.917062][T11997] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.977662][T11993] FAT-fs (loop5): Directory bread(block 64) failed [ 726.984478][T11993] FAT-fs (loop5): Directory bread(block 65) failed [ 726.991540][T11993] FAT-fs (loop5): Directory bread(block 66) failed [ 726.998494][T11993] FAT-fs (loop5): Directory bread(block 67) failed [ 727.005451][T11993] FAT-fs (loop5): Directory bread(block 68) failed [ 727.012352][T11993] FAT-fs (loop5): Directory bread(block 69) failed [ 727.019349][T11993] FAT-fs (loop5): Directory bread(block 70) failed [ 727.026100][T11993] FAT-fs (loop5): Directory bread(block 71) failed [ 727.033218][T11993] FAT-fs (loop5): Directory bread(block 72) failed [ 727.040132][T11993] FAT-fs (loop5): Directory bread(block 73) failed [ 727.093833][T11996] wlan0 speed is unknown, defaulting to 1000 [ 727.246914][T11992] overlayfs: upper fs needs to support d_type. [ 727.268673][T11992] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 727.275889][T11992] overlayfs: failed to set xattr on upper [ 727.282094][T11992] overlayfs: ...falling back to redirect_dir=nofollow. [ 727.289322][T11992] overlayfs: ...falling back to index=off. [ 727.295345][T11992] overlayfs: ...falling back to uuid=null. [ 727.834115][ T5810] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 727.886553][ T5810] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 727.922742][T11996] chnl_net:caif_netlink_parms(): no params data found [ 728.100981][T12017] rtc_cmos 00:00: Alarms can be up to one day in the future [ 728.112333][T12016] rtc_cmos 00:00: Alarms can be up to one day in the future [ 728.695123][ T4747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.705998][ T4747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.885072][ T4747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.897440][ T4747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.938650][ T5435] rtc_cmos 00:00: Alarms can be up to one day in the future [ 728.946601][ T5435] rtc_cmos 00:00: Alarms can be up to one day in the future [ 728.956932][ T5435] rtc_cmos 00:00: Alarms can be up to one day in the future [ 728.965864][ T5435] rtc_cmos 00:00: Alarms can be up to one day in the future [ 728.974525][ T5435] rtc rtc0: __rtc_set_alarm: err=-22 [ 729.005989][ T5827] Bluetooth: hci2: command tx timeout [ 729.080407][ T4747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.091272][ T4747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.290770][ T4747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.301908][ T4747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.470691][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.478476][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.486160][T11996] bridge_slave_0: entered allmulticast mode [ 729.495908][T11996] bridge_slave_0: entered promiscuous mode [ 729.525754][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.535551][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.546115][T11996] bridge_slave_1: entered allmulticast mode [ 729.555712][T11996] bridge_slave_1: entered promiscuous mode [ 729.738809][ T4747] bridge_slave_1: left allmulticast mode [ 729.744740][ T4747] bridge_slave_1: left promiscuous mode [ 729.752607][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.778868][ T4747] bridge_slave_0: left allmulticast mode [ 729.785151][ T4747] bridge_slave_0: left promiscuous mode [ 729.791960][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.247679][ T4747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.274819][ T4747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.304578][ T4747] bond0 (unregistering): Released all slaves [ 730.345071][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.385002][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.627478][T11996] team0: Port device team_slave_0 added [ 730.712044][T11996] team0: Port device team_slave_1 added [ 730.772228][T12037] loop1: detected capacity change from 0 to 2048 [ 730.892475][ T4747] hsr_slave_0: left promiscuous mode [ 730.924839][ T4747] hsr_slave_1: left promiscuous mode [ 730.934281][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.942282][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.955845][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.963880][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.972816][T12037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.048270][ T4747] veth1_macvtap: left promiscuous mode [ 731.054154][ T4747] veth0_macvtap: left promiscuous mode [ 731.063972][ T4747] veth1_vlan: left promiscuous mode [ 731.069749][ T4747] veth0_vlan: left promiscuous mode [ 731.080234][ T5827] Bluetooth: hci2: command tx timeout [ 731.135147][T12037] overlayfs: upper fs needs to support d_type. [ 731.237928][T12037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 731.245205][T12037] overlayfs: failed to set xattr on upper [ 731.254054][T12037] overlayfs: ...falling back to redirect_dir=nofollow. [ 731.262153][T12037] overlayfs: ...falling back to index=off. [ 731.268399][T12037] overlayfs: ...falling back to uuid=null. [ 731.380351][T12039] loop4: detected capacity change from 0 to 4096 [ 731.413003][T12039] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 731.488486][T11997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 731.497813][T11997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 731.507738][T11997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 731.520994][T11997] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 731.532611][T11997] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 731.639362][T12039] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 731.698052][T12039] ntfs3(loop4): ino=1a, mi_enum_attr [ 731.704159][T12039] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 731.799128][ T5818] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 731.860106][ T5818] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 731.948160][ T30] audit: type=1800 audit(1751860387.879:132): pid=12039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2586" name="file1" dev="loop4" ino=24 res=0 errno=0 [ 732.002640][ T4747] team0 (unregistering): Port device team_slave_1 removed [ 732.029141][ T4747] team0 (unregistering): Port device team_slave_0 removed [ 732.614508][ T5818] bridge0: port 4(syz_tun) entered disabled state [ 732.663334][ T5818] syz_tun (unregistering): left allmulticast mode [ 732.670141][ T5818] syz_tun (unregistering): left promiscuous mode [ 732.676884][ T5818] bridge0: port 4(syz_tun) entered disabled state [ 732.686738][T12050] loop4: detected capacity change from 0 to 256 [ 732.720970][T11996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.728429][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.755008][T11996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.866412][T12043] wlan0 speed is unknown, defaulting to 1000 [ 732.871166][T11996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.879899][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.906558][T11996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.944387][ T4747] IPVS: stop unused estimator thread 0... [ 733.158052][T11997] Bluetooth: hci2: command tx timeout [ 733.286186][ T4747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.297596][ T4747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.441824][T11996] hsr_slave_0: entered promiscuous mode [ 733.452164][T11996] hsr_slave_1: entered promiscuous mode [ 733.460779][T11996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.468730][T11996] Cannot create hsr debugfs directory [ 733.558830][ T4747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.570669][ T4747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.642668][T11997] Bluetooth: hci0: command tx timeout [ 733.720453][ T4747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.731242][ T4747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.913930][ T4747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.925689][ T4747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.368234][ T4747] team0: left allmulticast mode [ 734.373403][ T4747] team_slave_0: left allmulticast mode [ 734.379290][ T4747] team_slave_1: left allmulticast mode [ 734.385750][ T4747] bridge0: port 3(team0) entered disabled state [ 734.402234][ T4747] bridge_slave_1: left allmulticast mode [ 734.409231][ T4747] bridge_slave_1: left promiscuous mode [ 734.415860][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.443382][ T4747] bridge_slave_0: left allmulticast mode [ 734.449477][ T4747] bridge_slave_0: left promiscuous mode [ 734.456018][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.103661][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.105761][ T4747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.126746][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.137781][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.147888][ T4747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.164095][ T4747] bond0 (unregistering): Released all slaves [ 735.187141][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.212432][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 735.241913][T11997] Bluetooth: hci2: command tx timeout [ 735.295305][T12043] chnl_net:caif_netlink_parms(): no params data found [ 735.350786][T12067] loop4: detected capacity change from 0 to 256 [ 735.361759][ T4747] IPVS: stopping master sync thread 11867 ... [ 735.384960][T12067] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 735.396047][T12067] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 735.499471][T12067] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 735.502164][T12064] wlan0 speed is unknown, defaulting to 1000 [ 735.534233][T12070] loop5: detected capacity change from 0 to 256 [ 735.744699][ T5827] Bluetooth: hci0: command tx timeout [ 736.025000][ T4747] hsr_slave_0: left promiscuous mode [ 736.057641][ T4747] hsr_slave_1: left promiscuous mode [ 736.070217][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.078149][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.124181][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.132157][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.171938][ T4747] veth1_macvtap: left promiscuous mode [ 736.178381][ T4747] veth1_vlan: left promiscuous mode [ 736.178683][T12077] loop5: detected capacity change from 0 to 1024 [ 736.183878][ T4747] veth0_vlan: left promiscuous mode [ 736.201209][T12077] EXT4-fs: Ignoring removed bh option [ 736.244955][T12077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 736.494984][T10690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 736.885075][ T4747] team_slave_1 (unregistering): left promiscuous mode [ 736.895725][ T4747] team0 (unregistering): Port device team_slave_1 removed [ 736.941715][ T4747] team_slave_0 (unregistering): left promiscuous mode [ 736.954793][ T4747] team0 (unregistering): Port device team_slave_0 removed [ 737.357648][ T5827] Bluetooth: hci3: command tx timeout [ 737.443592][T11996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 737.549387][T11996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 737.616039][T11996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 737.737528][T11996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 737.778060][ T4747] IPVS: stop unused estimator thread 0... [ 737.839139][ T5827] Bluetooth: hci0: command tx timeout [ 737.969735][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.980806][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.988591][T12043] bridge_slave_0: entered allmulticast mode [ 737.998426][T12043] bridge_slave_0: entered promiscuous mode [ 738.072012][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.079845][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.087786][T12043] bridge_slave_1: entered allmulticast mode [ 738.097430][T12043] bridge_slave_1: entered promiscuous mode [ 738.246493][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.275213][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.321368][T12064] chnl_net:caif_netlink_parms(): no params data found [ 738.391994][T12094] netlink: 46 bytes leftover after parsing attributes in process `syz.5.2605'. [ 738.538755][T12043] team0: Port device team_slave_0 added [ 738.555493][T12043] team0: Port device team_slave_1 added [ 738.830181][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.837584][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.864050][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.898820][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.906114][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.934708][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.244457][T12043] hsr_slave_0: entered promiscuous mode [ 739.257810][T12043] hsr_slave_1: entered promiscuous mode [ 739.266473][T12043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.275532][T12043] Cannot create hsr debugfs directory [ 739.397607][ T5827] Bluetooth: hci3: command tx timeout [ 739.532970][T12105] loop5: detected capacity change from 0 to 1764 [ 739.618737][T12105] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 739.669706][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.678653][T12064] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.686327][T12064] bridge_slave_0: entered allmulticast mode [ 739.695686][T12064] bridge_slave_0: entered promiscuous mode [ 739.760169][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.768913][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.787695][T12064] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.795424][T12064] bridge_slave_1: entered allmulticast mode [ 739.822758][T12064] bridge_slave_1: entered promiscuous mode [ 739.887822][ T5827] Bluetooth: hci0: command tx timeout [ 740.023101][T12064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.076626][T12064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.234267][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.272270][T12064] team0: Port device team_slave_0 added [ 740.385835][T12064] team0: Port device team_slave_1 added [ 740.446980][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.454677][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.651028][T12064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.659006][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.685529][T12064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.718689][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.726211][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.880332][T12064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.887757][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.914220][T12064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.994368][T12043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 741.157898][T12043] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 741.220952][T12043] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 741.305401][T12064] hsr_slave_0: entered promiscuous mode [ 741.315900][T12064] hsr_slave_1: entered promiscuous mode [ 741.325278][T12064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.333248][T12064] Cannot create hsr debugfs directory [ 741.340344][T12043] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 741.478474][ T5827] Bluetooth: hci3: command tx timeout [ 741.723364][T12122] loop4: detected capacity change from 0 to 512 [ 741.791706][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2618'. [ 741.884286][T12122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.897595][T12122] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 742.354014][T12064] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 742.423594][T12064] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 742.499122][T12064] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 742.583262][T12064] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 742.719734][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.941269][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.941394][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.023385][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.031172][ T4584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.102391][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.110056][ T4584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.433857][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.558149][ T5827] Bluetooth: hci3: command tx timeout [ 743.688353][T12064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.826903][T12064] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.886924][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.894691][ T4584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.996678][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.004408][ T4584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.785495][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.153441][T11996] veth0_vlan: entered promiscuous mode [ 745.259220][T12064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.270829][T11996] veth1_vlan: entered promiscuous mode [ 745.603969][T11996] veth0_macvtap: entered promiscuous mode [ 745.681167][T11996] veth1_macvtap: entered promiscuous mode [ 745.840967][T11996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.940125][T11996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.986165][T12170] input: syz0 as /devices/virtual/input/input30 [ 746.024040][T11996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.033318][T11996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.043668][T11996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.053013][T11996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.254565][T12043] veth0_vlan: entered promiscuous mode [ 747.355121][T12043] veth1_vlan: entered promiscuous mode [ 747.687964][T12043] veth0_macvtap: entered promiscuous mode [ 747.733574][T12043] veth1_macvtap: entered promiscuous mode [ 747.749646][T12064] veth0_vlan: entered promiscuous mode [ 747.840893][T12064] veth1_vlan: entered promiscuous mode [ 747.949242][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.079703][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.188071][T12043] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.197404][T12043] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.206439][T12043] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.215790][T12043] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.271147][T12064] veth0_macvtap: entered promiscuous mode [ 748.298921][T12064] veth1_macvtap: entered promiscuous mode [ 748.433438][T12064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.573642][T12064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.676189][T12064] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.686670][T12064] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.697054][T12064] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.706442][T12064] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.891740][ T4186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.900363][ T4186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.043904][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.053932][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.742206][T12283] loop7: detected capacity change from 0 to 1024 [ 753.804221][ T1848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.812432][ T1848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.885490][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 753.924137][T12283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 753.971969][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.980700][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.093680][T12283] overlayfs: upper fs needs to support d_type. [ 754.163716][T12283] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 754.172470][T12283] overlayfs: failed to set xattr on upper [ 754.179523][T12283] overlayfs: ...falling back to redirect_dir=nofollow. [ 754.192001][T12283] overlayfs: ...falling back to index=off. [ 754.199708][T12283] overlayfs: ...falling back to uuid=null. [ 754.339526][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.347699][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.485432][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.498549][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.196276][T12300] loop9: detected capacity change from 0 to 512 [ 755.209095][T12298] loop7: detected capacity change from 0 to 1024 [ 755.259595][T12300] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.2595: iget: bad i_size value: 38620345925642 [ 755.287715][T12300] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.2595: couldn't read orphan inode 15 (err -117) [ 755.309738][T12300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.406199][T12300] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2595: bg 0: block 5: invalid block bitmap [ 755.460896][T12300] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 412 with error 28 [ 755.475319][T12300] EXT4-fs (loop9): This should not happen!! Data will be lost [ 755.475319][T12300] [ 755.486801][T12300] EXT4-fs (loop9): Total free blocks count 0 [ 755.494652][T12300] EXT4-fs (loop9): Free/Dirty block details [ 755.501166][T12300] EXT4-fs (loop9): free_blocks=0 [ 755.506356][T12300] EXT4-fs (loop9): dirty_blocks=416 [ 755.511953][T12300] EXT4-fs (loop9): Block reservation details [ 755.519935][T12300] EXT4-fs (loop9): i_reserved_data_blocks=416 [ 756.045679][T12064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.094826][T12309] loop8: detected capacity change from 0 to 4096 [ 756.229832][T12313] loop7: detected capacity change from 0 to 2048 [ 756.253588][T12316] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 756.329715][T12313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.344380][T12313] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.370191][ T30] audit: type=1800 audit(1751860412.339:133): pid=12309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2655" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 756.765090][T11996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.267765][ T5435] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 757.446034][T12333] wlan0 speed is unknown, defaulting to 1000 [ 757.658645][ T5435] usb 10-1: Using ep0 maxpacket: 8 [ 757.689728][ T5435] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 757.699656][ T5435] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.791061][ T5435] pvrusb2: Hardware description: Terratec Grabster AV400 [ 757.798481][ T5435] pvrusb2: ********** [ 757.802671][ T5435] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 757.813042][ T5435] pvrusb2: Important functionality might not be entirely working. [ 757.821273][ T5435] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 757.833089][ T5435] pvrusb2: ********** [ 758.091994][ T2330] pvrusb2: Invalid write control endpoint [ 758.309225][T12329] pvrusb2: Invalid write control endpoint [ 758.345679][ T5435] usb 10-1: USB disconnect, device number 2 [ 758.450989][ T2330] pvrusb2: Invalid write control endpoint [ 758.457030][ T2330] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 758.466807][ T2330] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 758.476704][ T2330] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 758.493224][ T2330] pvrusb2: Device being rendered inoperable [ 758.501516][ T2330] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 758.509027][ T2330] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 758.518147][ T2330] pvrusb2: Attached sub-driver cx25840 [ 758.523887][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 758.523957][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 758.725706][T12351] loop8: detected capacity change from 0 to 512 [ 758.777704][T12351] EXT4-fs (loop8): Test dummy encryption mode enabled [ 758.854580][T12351] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.2670: corrupted in-inode xattr: invalid ea_ino [ 758.885035][T12351] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2670: couldn't read orphan inode 15 (err -117) [ 759.030233][T12351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.046884][T12356] loop4: detected capacity change from 0 to 1024 [ 759.061863][T12356] EXT4-fs: Ignoring removed orlov option [ 759.190918][T12356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.260658][T12356] EXT4-fs (loop4): shut down requested (1) [ 759.396980][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2675'. [ 759.429569][T12043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.535573][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.694568][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2677'. [ 759.969874][T12373] wlan0 speed is unknown, defaulting to 1000 [ 760.049638][T12369] loop5: detected capacity change from 0 to 4096 [ 760.253988][T12377] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 760.433857][ T30] audit: type=1800 audit(1751860416.399:134): pid=12369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2676" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 761.037682][ T5435] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 761.238146][ T5435] usb 9-1: Using ep0 maxpacket: 8 [ 761.294227][ T5435] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 761.303838][ T5435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.415166][ T5435] pvrusb2: Hardware description: Terratec Grabster AV400 [ 761.422594][ T5435] pvrusb2: ********** [ 761.426751][ T5435] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 761.437274][ T5435] pvrusb2: Important functionality might not be entirely working. [ 761.445340][ T5435] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 761.459260][ T5435] pvrusb2: ********** [ 761.688004][ T2330] pvrusb2: Invalid write control endpoint [ 761.833188][T12398] tipc: Started in network mode [ 761.840941][T12398] tipc: Node identity ac14140f, cluster identity 4711 [ 761.849236][T12398] tipc: New replicast peer: 255.255.255.255 [ 761.861414][T12398] tipc: Enabled bearer , priority 10 [ 761.914533][T12383] pvrusb2: Invalid write control endpoint [ 761.946399][ T5435] usb 9-1: USB disconnect, device number 2 [ 762.031558][ T2330] pvrusb2: Invalid write control endpoint [ 762.054278][ T2330] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 762.069124][ T2330] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 762.083369][ T2330] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 762.096272][ T2330] pvrusb2: Device being rendered inoperable [ 762.102565][ T2330] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 762.109996][ T2330] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 762.119108][ T2330] pvrusb2: Attached sub-driver cx25840 [ 762.124813][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 762.135354][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 762.466180][ T5827] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 762.990968][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2695'. [ 762.999721][ T5435] tipc: Node number set to 2886997007 [ 763.053843][T12412] netlink: 173 bytes leftover after parsing attributes in process `syz.8.2695'. [ 763.375867][T12419] wlan0 speed is unknown, defaulting to 1000 [ 763.892462][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2700'. [ 763.978640][ T5869] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 764.177637][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 764.205280][ T5869] usb 8-1: config index 0 descriptor too short (expected 27904, got 36) [ 764.214585][ T5869] usb 8-1: config 0 has too many interfaces: 159, using maximum allowed: 32 [ 764.228246][ T5869] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.241300][ T5869] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 159 [ 764.380032][ T5869] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 764.389655][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.398312][ T5869] usb 8-1: Product: syz [ 764.402723][ T5869] usb 8-1: Manufacturer: syz [ 764.407682][ T5869] usb 8-1: SerialNumber: syz [ 764.476807][ T5869] usb 8-1: config 0 descriptor?? [ 764.494304][T12428] loop4: detected capacity change from 0 to 4096 [ 764.562845][T12430] loop5: detected capacity change from 0 to 4096 [ 764.585191][T12430] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 764.718777][T12424] ALSA: mixer_oss: invalid OSS volume 'AπΕ–' [ 764.725588][T12424] ALSA: mixer_oss: invalid OSS volume '' [ 764.827711][ T5869] usb 8-1: USB disconnect, device number 2 [ 764.885540][T12430] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 764.914924][T12430] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 765.000405][ T30] audit: type=1800 audit(1751860420.959:135): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2702" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 766.032453][T12450] loop7: detected capacity change from 0 to 2048 [ 766.093546][T12450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.523172][ T5827] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 766.532298][ T5827] Bluetooth: hci3: Injecting HCI hardware error event [ 766.540196][ T5827] Bluetooth: hci3: hardware error 0x00 [ 767.666652][T12466] loop9: detected capacity change from 0 to 4096 [ 767.737508][T12466] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 768.107070][T12466] ntfs3(loop9): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 768.141811][T12466] ntfs3(loop9): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 768.597761][ T5827] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 768.769809][T12489] mkiss: ax0: crc mode is auto. [ 770.253016][T12514] loop5: detected capacity change from 0 to 16 [ 770.318883][T12514] erofs (device loop5): mounted with root inode @ nid 36. [ 770.862510][T12523] wlan0 speed is unknown, defaulting to 1000 [ 771.261614][T12516] loop4: detected capacity change from 0 to 8192 [ 771.277800][ T5435] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 771.447544][ T5435] usb 8-1: Using ep0 maxpacket: 32 [ 771.517650][ T5435] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 771.527299][ T5435] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.535598][ T5435] usb 8-1: Product: syz [ 771.540206][ T5435] usb 8-1: Manufacturer: syz [ 771.545094][ T5435] usb 8-1: SerialNumber: syz [ 771.568423][ T5435] usb 8-1: config 0 descriptor?? [ 771.584203][ T5435] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 772.439868][ T5435] gspca_ov534_9: reg_w failed -71 [ 772.504405][T12540] loop8: detected capacity change from 0 to 128 [ 772.523197][T12541] sctp: [Deprecated]: syz.5.2754 (pid 12541) Use of int in maxseg socket option. [ 772.523197][T12541] Use struct sctp_assoc_value instead [ 772.556512][T12540] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 772.601587][T12543] bond0: (slave bond1): Error -95 calling ndo_bpf [ 772.612541][T12543] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 772.758049][ T5435] gspca_ov534_9: Unknown sensor 0000 [ 772.758391][ T5435] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 772.809449][ T5435] usb 8-1: USB disconnect, device number 3 [ 773.008975][T12545] loop9: detected capacity change from 0 to 128 [ 773.105617][T12545] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 773.128566][T12545] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 773.182879][T12552] loop8: detected capacity change from 0 to 128 [ 773.231438][T12552] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 773.433842][T12064] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 773.729913][T12559] netlink: 'syz.5.2763': attribute type 11 has an invalid length. [ 773.774396][T12043] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 773.788909][T12043] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 773.898321][ T5435] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 774.098656][ T5435] usb 8-1: Using ep0 maxpacket: 16 [ 774.111548][ T5435] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 774.123354][ T5435] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 774.133464][ T5435] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 774.173209][ T5435] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 774.183317][ T5435] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 774.191657][ T5435] usb 8-1: SerialNumber: syz [ 774.213935][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'. [ 774.339210][T12555] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 774.411649][ T1848] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.531049][ T1848] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.656556][ T5435] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 774.698493][ T1848] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.738745][ T5435] usb 8-1: USB disconnect, device number 4 [ 774.836864][T12569] loop4: detected capacity change from 0 to 128 [ 774.909608][T12569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 774.912184][ T1848] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.342778][ T1848] bridge_slave_1: left allmulticast mode [ 775.349071][ T1848] bridge_slave_1: left promiscuous mode [ 775.355655][ T1848] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.405272][ T1848] bridge_slave_0: left allmulticast mode [ 775.411378][ T1848] bridge_slave_0: left promiscuous mode [ 775.420890][ T1848] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.919180][ T1848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.946364][ T1848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.968319][ T1848] bond0 (unregistering): Released all slaves [ 776.447159][ T1848] hsr_slave_0: left promiscuous mode [ 776.477001][ T1848] hsr_slave_1: left promiscuous mode [ 776.485278][ T1848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.493775][ T1848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.554781][ T1848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.562838][ T1848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.666589][ T1848] veth1_macvtap: left promiscuous mode [ 776.674066][ T1848] veth0_macvtap: left promiscuous mode [ 776.680431][ T1848] veth1_vlan: left promiscuous mode [ 776.685995][ T1848] veth0_vlan: left promiscuous mode [ 777.469733][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.476664][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.559125][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 777.645113][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 777.680605][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 777.697782][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 777.710775][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 777.761037][ T1848] team0 (unregistering): Port device team_slave_1 removed [ 777.792471][ T1848] team0 (unregistering): Port device team_slave_0 removed [ 778.229696][T12588] wlan0 speed is unknown, defaulting to 1000 [ 778.603432][T12596] macvlan0: entered promiscuous mode [ 778.619832][T12596] netlink: 'syz.5.2790': attribute type 1 has an invalid length. [ 778.628038][T12596] netlink: 'syz.5.2790': attribute type 2 has an invalid length. [ 779.043340][T12588] chnl_net:caif_netlink_parms(): no params data found [ 779.803568][ T5812] Bluetooth: hci0: command tx timeout [ 779.887519][T12588] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.898297][T12588] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.906000][T12588] bridge_slave_0: entered allmulticast mode [ 779.915741][T12588] bridge_slave_0: entered promiscuous mode [ 779.931755][T12588] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.940375][T12588] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.948503][T12588] bridge_slave_1: entered allmulticast mode [ 779.960540][T12588] bridge_slave_1: entered promiscuous mode [ 780.273902][T12588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.354455][T12588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.381675][T12617] netem: change failed [ 780.387854][ T5869] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 780.430605][T12618] batman_adv: batadv0: Adding interface: dummy0 [ 780.437536][T12618] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.464554][T12618] batman_adv: batadv0: Interface activated: dummy0 [ 780.588424][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 780.617608][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 780.629852][ T5869] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 780.639957][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 780.691457][T12588] team0: Port device team_slave_0 added [ 780.730612][T12588] team0: Port device team_slave_1 added [ 780.741378][ T5869] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.750974][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 780.759524][ T5869] usb 5-1: SerialNumber: syz [ 780.822932][T12614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 780.977888][T12588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.985289][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.012218][T12588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.039175][T12588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.046562][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.073241][T12588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.102125][ T5869] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 781.134346][ T5869] usb 5-1: USB disconnect, device number 14 [ 781.473100][T12588] hsr_slave_0: entered promiscuous mode [ 781.484605][T12588] hsr_slave_1: entered promiscuous mode [ 781.493109][T12588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.506196][T12588] Cannot create hsr debugfs directory [ 781.899890][ T5812] Bluetooth: hci0: command tx timeout [ 782.007956][T12636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2798'. [ 782.505175][T12643] loop7: detected capacity change from 0 to 256 [ 782.810598][T12643] FAT-fs (loop7): Directory bread(block 64) failed [ 782.817794][T12643] FAT-fs (loop7): Directory bread(block 65) failed [ 782.824721][T12643] FAT-fs (loop7): Directory bread(block 66) failed [ 782.831646][T12643] FAT-fs (loop7): Directory bread(block 67) failed [ 782.839044][T12643] FAT-fs (loop7): Directory bread(block 68) failed [ 782.845866][T12643] FAT-fs (loop7): Directory bread(block 69) failed [ 782.852911][T12643] FAT-fs (loop7): Directory bread(block 70) failed [ 782.863806][T12643] FAT-fs (loop7): Directory bread(block 71) failed [ 782.872197][T12643] FAT-fs (loop7): Directory bread(block 72) failed [ 782.879229][T12643] FAT-fs (loop7): Directory bread(block 73) failed [ 782.936373][T12640] loop5: detected capacity change from 0 to 4096 [ 783.071621][T12069] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 783.188633][T12588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 783.230593][T12588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 783.294147][T12588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 783.310139][T12069] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 783.319872][T12069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.328291][T12069] usb 5-1: Product: syz [ 783.332683][T12069] usb 5-1: Manufacturer: syz [ 783.337675][T12069] usb 5-1: SerialNumber: syz [ 783.362706][T12588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 783.389103][T12069] usb 5-1: config 0 descriptor?? [ 783.404726][ T30] audit: type=1800 audit(1751860439.369:136): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2799" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 783.631554][ T5869] usb 5-1: USB disconnect, device number 15 [ 783.958524][ T5812] Bluetooth: hci0: command tx timeout [ 784.333860][T12588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.511116][T12588] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.576315][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.583932][ T4186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.688215][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.695942][ T4186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.587790][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2811'. [ 786.038590][ T5812] Bluetooth: hci0: command tx timeout [ 786.128172][T12680] loop9: detected capacity change from 0 to 512 [ 786.246691][T12680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 786.373757][T12680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.388536][T12680] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.610817][T12680] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 786.643155][T12588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.176912][T12588] veth0_vlan: entered promiscuous mode [ 787.215360][T12064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.305848][T12588] veth1_vlan: entered promiscuous mode [ 787.624854][T12588] veth0_macvtap: entered promiscuous mode [ 787.703948][T12588] veth1_macvtap: entered promiscuous mode [ 787.914805][T12588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.953612][T12588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.000712][T12588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.010066][T12588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.019207][T12588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.035818][T12588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.453777][T12707] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 789.950102][ T5435] kernel read not supported for file /dsp (pid: 5435 comm: kworker/1:3) [ 789.989170][T12069] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 790.204607][T12069] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 790.215725][T12069] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 790.291518][T12069] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 790.301265][T12069] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.309643][T12069] usb 8-1: Product: syz [ 790.314031][T12069] usb 8-1: Manufacturer: syz [ 790.319049][T12069] usb 8-1: SerialNumber: syz [ 790.343040][T12069] usb 8-1: config 0 descriptor?? [ 790.370481][T12728] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.415828][T12728] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.765315][T12728] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.809095][T12728] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 791.279622][T12069] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 791.481734][T12069] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 791.527045][T12069] usb 8-1: USB disconnect, device number 5 [ 791.757891][T12756] netlink: 'syz.9.2842': attribute type 29 has an invalid length. [ 792.445076][T12763] loop9: detected capacity change from 0 to 128 [ 793.052889][T12771] loop9: detected capacity change from 0 to 64 [ 793.094065][T12771] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 793.277988][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.286345][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.320530][T12775] binder: binder_mmap: 12773 80000000-80b36000 bad vm_flags failed -1 [ 793.570424][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.578874][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.642294][T12792] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2854'. [ 794.882449][T12795] loop9: detected capacity change from 0 to 128 [ 794.922110][T12795] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 794.977610][T12795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 795.444366][T12806] loop0: detected capacity change from 0 to 256 [ 795.739255][T12806] FAT-fs (loop0): Directory bread(block 64) failed [ 795.746217][T12806] FAT-fs (loop0): Directory bread(block 65) failed [ 795.753689][T12806] FAT-fs (loop0): Directory bread(block 66) failed [ 795.765871][T12806] FAT-fs (loop0): Directory bread(block 67) failed [ 795.774437][T12806] FAT-fs (loop0): Directory bread(block 68) failed [ 795.781424][T12806] FAT-fs (loop0): Directory bread(block 69) failed [ 795.788471][T12806] FAT-fs (loop0): Directory bread(block 70) failed [ 795.795258][T12806] FAT-fs (loop0): Directory bread(block 71) failed [ 795.803046][T12806] FAT-fs (loop0): Directory bread(block 72) failed [ 795.810046][T12806] FAT-fs (loop0): Directory bread(block 73) failed [ 796.766945][T12827] netem: unknown loss type 0 [ 796.772404][T12827] netem: change failed [ 796.809748][T12825] misc userio: Begin command sent, but we're already running [ 798.078831][T12842] loop5: detected capacity change from 0 to 2048 [ 798.247958][T12842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.505864][T10690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.567595][ T5435] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 798.782737][ T5435] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 798.792584][ T5435] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.841187][ T5435] usb 8-1: config 0 descriptor?? [ 798.886640][ T5435] cp210x 8-1:0.0: cp210x converter detected [ 799.296698][ T5435] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 799.334332][ T5435] usb 8-1: cp210x converter now attached to ttyUSB0 [ 799.523963][ T5435] usb 8-1: USB disconnect, device number 6 [ 799.573113][ T5435] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 799.609940][ T5435] cp210x 8-1:0.0: device disconnected [ 799.659459][T12865] loop0: detected capacity change from 0 to 4096 [ 799.697401][T12865] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 799.882174][T12868] wlan0 speed is unknown, defaulting to 1000 [ 800.315005][T12876] loop9: detected capacity change from 0 to 128 [ 800.430397][T12876] EXT4-fs (loop9): Test dummy encryption mode enabled [ 800.539002][T12876] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 800.673457][T12876] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 801.185647][T12064] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 801.490644][T12887] loop7: detected capacity change from 0 to 2048 [ 801.584577][T12887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.989949][T11996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.092636][T12903] misc userio: Begin command sent, but we're already running [ 802.371205][T12905] wlan0 speed is unknown, defaulting to 1000 [ 802.739562][T12908] loop7: detected capacity change from 0 to 4096 [ 802.760822][T12908] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 803.965682][T12924] loop5: detected capacity change from 0 to 64 [ 804.672233][T12930] loop4: detected capacity change from 0 to 2048 [ 804.714129][T12936] misc userio: Begin command sent, but we're already running [ 804.785089][T12930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.806527][T12935] loop5: detected capacity change from 0 to 2048 [ 804.885575][T12935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.975061][T12935] EXT4-fs (loop5): shut down requested (0) [ 805.057778][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.337516][T10690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.654048][T12957] loop7: detected capacity change from 0 to 64 [ 805.934488][T12957] hfs: keylen 94 too large [ 806.287091][T12968] loop0: detected capacity change from 0 to 164 [ 806.388863][T12968] Unable to read rock-ridge attributes [ 806.464679][T12961] loop5: detected capacity change from 0 to 4096 [ 806.510571][T12961] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 807.534696][T12982] loop9: detected capacity change from 0 to 2048 [ 807.624640][T12982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.755548][T12982] EXT4-fs (loop9): shut down requested (0) [ 808.031826][T12064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.122125][T12993] misc userio: Begin command sent, but we're already running [ 808.808526][T12999] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2941'. [ 808.999849][T13001] loop4: detected capacity change from 0 to 164 [ 809.045603][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2942'. [ 809.067879][T13001] Unable to read rock-ridge attributes [ 809.108605][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2942'. [ 809.578466][T13011] loop4: detected capacity change from 0 to 64 [ 809.850550][T13015] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2960'. [ 809.932928][T13012] loop5: detected capacity change from 0 to 4096 [ 810.086411][T13017] loop7: detected capacity change from 0 to 2048 [ 810.194575][T13017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.318939][T13017] EXT4-fs (loop7): shut down requested (0) [ 810.347584][T13024] loop3: detected capacity change from 2048 to 1920 [ 810.576244][T13012] overlayfs: upper fs does not support tmpfile. [ 810.589763][T13027] loop0: detected capacity change from 0 to 256 [ 810.620081][T13012] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 810.665947][T11996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.891199][T13031] loop4: detected capacity change from 0 to 256 [ 810.995354][T13029] loop9: detected capacity change from 0 to 2048 [ 811.069092][T13031] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 811.112169][T13029] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.133064][T13029] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.159038][ T30] audit: type=1800 audit(1751860467.099:137): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2955" name="file1" dev="loop4" ino=1048807 res=0 errno=0 [ 811.675031][T12064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.987304][ T5435] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 812.020203][T13046] batadv_slave_1: entered promiscuous mode [ 812.025758][T13045] batadv_slave_1: left promiscuous mode [ 812.178331][ T5435] usb 5-1: Using ep0 maxpacket: 8 [ 812.211718][ T5435] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.211865][ T5435] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.211990][ T5435] usb 5-1: config 0 interface 0 has no altsetting 0 [ 812.212146][ T5435] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 812.212278][ T5435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.218319][ T5435] usb 5-1: config 0 descriptor?? [ 812.676246][ T5435] cypress 0003:04B4:BCA1.001F: unknown main item tag 0x0 [ 812.684068][ T5435] cypress 0003:04B4:BCA1.001F: unknown main item tag 0x0 [ 812.691570][ T5435] cypress 0003:04B4:BCA1.001F: item fetching failed at offset 2/3 [ 812.765760][ T5435] cypress 0003:04B4:BCA1.001F: parse failed [ 812.772555][ T5435] cypress 0003:04B4:BCA1.001F: probe with driver cypress failed with error -22 [ 812.824696][T13055] loop0: detected capacity change from 0 to 16 [ 812.846380][T13055] erofs (device loop0): mounted with root inode @ nid 36. [ 812.879238][T12021] usb 5-1: USB disconnect, device number 16 [ 813.173412][T13056] loop7: detected capacity change from 0 to 512 [ 813.751407][T13062] loop9: detected capacity change from 0 to 512 [ 813.942103][T13070] loop0: detected capacity change from 0 to 256 [ 814.115772][T13066] loop5: detected capacity change from 0 to 2048 [ 814.136617][T13070] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 814.233059][T13066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.246034][T13066] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.291851][ T30] audit: type=1800 audit(1751860470.249:138): pid=13070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2970" name="file1" dev="loop0" ino=1048808 res=0 errno=0 [ 814.791018][T10690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.968594][T13084] batadv_slave_1: entered promiscuous mode [ 814.989634][T13083] batadv_slave_1: left promiscuous mode [ 815.189785][ T5435] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 815.328428][T12021] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 815.508699][T13096] loop9: detected capacity change from 0 to 16 [ 815.534254][T13096] erofs (device loop9): mounted with root inode @ nid 36. [ 816.800181][T13107] loop7: detected capacity change from 0 to 4096 [ 816.818724][T13122] loop4: detected capacity change from 0 to 512 [ 816.864509][T13122] EXT4-fs (loop4): Test dummy encryption mode enabled [ 816.874390][T13107] NILFS (loop7): invalid segment: Checksum error in segment payload [ 816.883186][T13107] NILFS (loop7): trying rollback from an earlier position [ 816.945450][T13107] NILFS (loop7): recovery complete [ 816.969394][T13125] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 816.988542][T13122] EXT4-fs error (device loop4): __ext4_iget:5379: inode #11: block 1: comm syz.4.2991: invalid block [ 817.082876][T13122] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2991: couldn't read orphan inode 11 (err -117) [ 817.115206][T13122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.285079][T13122] EXT4-fs (loop4): shut down requested (1) [ 817.593916][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.893912][T13134] loop9: detected capacity change from 0 to 1024 [ 819.023582][T13151] loop0: detected capacity change from 0 to 512 [ 819.074249][T13155] loop5: detected capacity change from 0 to 164 [ 819.100727][T13151] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.3002: inode #15: comm syz.0.3002: iget: illegal inode # [ 819.144214][T13151] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3002: couldn't read orphan inode 15 (err -117) [ 819.175147][T13151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.202383][T13151] EXT4-fs (loop0): shut down requested (2) [ 819.310638][T12588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.679187][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3006'. [ 820.418082][T13172] loop4: detected capacity change from 0 to 128 [ 820.455104][T13172] EXT4-fs (loop4): Test dummy encryption mode enabled [ 820.499775][T13172] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 820.546136][T13172] ext4 filesystem being mounted at /637/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 820.983871][ T5817] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 821.457518][ T5435] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 821.643521][ T5435] usb 6-1: Using ep0 maxpacket: 16 [ 821.688012][ T5435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 821.731865][ T5435] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 821.741611][ T5435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.745015][T13193] loop7: detected capacity change from 0 to 164 [ 821.750163][ T5435] usb 6-1: Product: syz [ 821.750265][ T5435] usb 6-1: Manufacturer: syz [ 821.750360][ T5435] usb 6-1: SerialNumber: syz [ 821.787941][ T5435] usb 6-1: config 0 descriptor?? [ 821.814779][ T5435] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 821.824734][ T5435] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 822.109703][ T5435] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 822.131075][T13195] loop4: detected capacity change from 0 to 1024 [ 822.188699][T13197] loop0: detected capacity change from 0 to 512 [ 822.218692][ T5435] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 822.227040][ T5435] em28xx 6-1:0.0: board has no eeprom [ 822.237510][T13197] EXT4-fs (loop0): Test dummy encryption mode enabled [ 822.258833][T13184] em28xx 6-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 822.309064][ T5435] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 822.318813][ T5435] em28xx 6-1:0.0: dvb set to bulk mode. [ 822.331262][T12069] em28xx 6-1:0.0: Binding DVB extension [ 822.378563][ T5435] usb 6-1: USB disconnect, device number 6 [ 822.389509][ T5435] em28xx 6-1:0.0: Disconnecting em28xx [ 822.416030][T13197] EXT4-fs error (device loop0): __ext4_iget:5379: inode #11: block 1: comm syz.0.3023: invalid block [ 822.483824][T13197] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3023: couldn't read orphan inode 11 (err -117) [ 822.516459][T12069] em28xx 6-1:0.0: Registering input extension [ 822.523632][ T5435] em28xx 6-1:0.0: Closing input extension [ 822.542879][ T5435] em28xx 6-1:0.0: Freeing device [ 822.559664][T13197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.636357][T13197] EXT4-fs (loop0): shut down requested (1) [ 822.839518][T12588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.127663][T12021] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 823.164602][T13211] loop0: detected capacity change from 0 to 128 [ 823.218031][T13211] EXT4-fs (loop0): Test dummy encryption mode enabled [ 823.273217][T13211] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 823.317779][T12021] usb 5-1: Using ep0 maxpacket: 8 [ 823.353687][T13211] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 823.421142][T12021] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 823.430737][T12021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.439225][T12021] usb 5-1: Product: syz [ 823.443637][T12021] usb 5-1: Manufacturer: syz [ 823.448586][T12021] usb 5-1: SerialNumber: syz [ 823.486684][T12021] usb 5-1: config 0 descriptor?? [ 823.509779][T12021] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 823.523760][T12021] usb 5-1: setting power ON [ 823.530198][T12021] dvb-usb: bulk message failed: -22 (2/0) [ 823.563672][T12021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.644014][T12021] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 823.653278][T12021] usb 5-1: media controller created [ 823.708933][T13209] dvb-usb: bulk message failed: -22 (3/0) [ 823.720300][T13209] cxusb: i2c wr: len=79 is too big! [ 823.720300][T13209] [ 823.781246][T12021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.874396][T12588] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.074793][T12021] usb 5-1: selecting invalid altsetting 6 [ 824.082227][T12021] usb 5-1: digital interface selection failed (-22) [ 824.089152][T12021] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 824.151424][T12021] usb 5-1: setting power OFF [ 824.156471][T12021] dvb-usb: bulk message failed: -22 (2/0) [ 824.162501][T12021] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 824.172081][T12021] (NULL device *): no alternate interface [ 824.690519][T12021] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 824.759205][T12021] usb 5-1: USB disconnect, device number 18 [ 824.852009][T13232] loop7: detected capacity change from 0 to 512 [ 824.867645][T13232] EXT4-fs (loop7): Test dummy encryption mode enabled [ 824.904005][T13232] EXT4-fs error (device loop7): __ext4_iget:5379: inode #11: block 1: comm syz.7.3037: invalid block [ 824.919700][T13232] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3037: couldn't read orphan inode 11 (err -117) [ 824.937847][T13232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.015623][T13232] EXT4-fs (loop7): shut down requested (1) [ 825.169224][T11996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.331327][T13241] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 825.687530][T12021] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 825.811533][T13247] loop4: detected capacity change from 0 to 16 [ 825.849372][T13247] erofs (device loop4): mounted with root inode @ nid 36. [ 825.897902][T12021] usb 8-1: Using ep0 maxpacket: 16 [ 825.919849][T12021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 825.964704][T12021] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 825.978817][T12021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.988907][T12021] usb 8-1: Product: syz [ 825.993366][T12021] usb 8-1: Manufacturer: syz [ 825.999041][T12021] usb 8-1: SerialNumber: syz [ 826.018822][T13247] syz.4.3040: attempt to access beyond end of device [ 826.018822][T13247] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 826.033432][T13247] erofs (device loop4): read error -5 @ 43 of nid 36 [ 826.080071][T12021] usb 8-1: config 0 descriptor?? [ 826.105665][T12021] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 826.115441][T12021] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 826.421453][T12021] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 826.671830][T13252] loop9: detected capacity change from 0 to 2048 [ 826.701826][T12021] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 826.713560][T12021] em28xx 8-1:0.0: board has no eeprom [ 826.724176][T13252] EXT4-fs: Ignoring removed bh option [ 826.870729][T12021] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 826.882722][T12021] em28xx 8-1:0.0: dvb set to bulk mode. [ 826.892379][ T5869] em28xx 8-1:0.0: Binding DVB extension [ 827.014532][T12021] usb 8-1: USB disconnect, device number 8 [ 827.022750][T12021] em28xx 8-1:0.0: Disconnecting em28xx [ 827.083321][T13252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.208902][T13252] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 827.257498][T13262] loop5: detected capacity change from 0 to 64 [ 827.499752][ T5869] em28xx 8-1:0.0: Registering input extension [ 827.558839][T12021] em28xx 8-1:0.0: Closing input extension [ 827.652580][T13250] syz.4.3040 (13250): drop_caches: 2 [ 827.663558][T12021] em28xx 8-1:0.0: Freeing device [ 827.706314][T12064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.097714][T13270] loop0: detected capacity change from 0 to 64 [ 828.848353][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3059'. [ 829.407122][ T5435] kernel write not supported for file /uhid (pid: 5435 comm: kworker/1:3) [ 829.869490][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3067'. [ 829.879062][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3067'. [ 830.242686][T13301] loop0: detected capacity change from 0 to 4096 [ 830.840597][T13314] loop4: detected capacity change from 0 to 256 [ 830.903080][T13310] loop5: detected capacity change from 0 to 4096 [ 830.974489][T13319] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 831.578838][T12021] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 831.787461][T12021] usb 8-1: Using ep0 maxpacket: 8 [ 831.856159][T12021] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 831.864779][T12021] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.875805][T12021] usb 8-1: config 0 has no interface number 0 [ 831.968282][T12021] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 831.978737][T12021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.987003][T12021] usb 8-1: Product: syz [ 831.992067][T12021] usb 8-1: Manufacturer: syz [ 831.996992][T12021] usb 8-1: SerialNumber: syz [ 832.022821][T12021] usb 8-1: config 0 descriptor?? [ 832.095995][T13336] netlink: 'syz.5.3081': attribute type 2 has an invalid length. [ 832.247546][T12021] usb 8-1: USB disconnect, device number 9 [ 832.960801][T13348] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 833.299122][T13350] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 834.136824][T13368] macsec2: entered allmulticast mode [ 834.142549][T13368] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 834.235086][T13368] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 835.076017][T13383] loop7: detected capacity change from 0 to 1024 [ 835.107726][T13383] EXT4-fs: Ignoring removed bh option [ 835.128904][T13385] loop9: detected capacity change from 0 to 256 [ 835.196737][T13383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 835.217502][T12021] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 835.283098][T13392] loop0: detected capacity change from 0 to 256 [ 835.305542][T13392] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 835.316956][T13392] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 835.381058][T13392] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 835.427574][T12021] usb 6-1: Using ep0 maxpacket: 16 [ 835.454301][T12021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.465738][T12021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.476009][T12021] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 835.489415][T12021] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 835.503022][T12021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.614907][T11996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 835.638333][T12021] usb 6-1: config 0 descriptor?? [ 836.103420][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.117784][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.125348][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.134955][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.142597][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.150193][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.157805][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.165335][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.172942][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.180556][T12021] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 836.393832][T12021] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0020/input/input37 [ 836.536745][T12021] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 836.579240][T12021] usb 6-1: USB disconnect, device number 7 [ 836.603881][T13406] loop0: detected capacity change from 0 to 128 [ 836.727782][T13406] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 836.844015][T13406] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 836.902804][T13408] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 838.717976][T13447] loop7: detected capacity change from 0 to 512 [ 838.817669][T13447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.831130][T13447] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 838.903080][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.910061][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.631827][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 839.727565][T13460] netlink: 'syz.9.3134': attribute type 4 has an invalid length. [ 839.911116][T11996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.085170][T13462] loop5: detected capacity change from 0 to 512 [ 840.157503][T13462] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 840.234186][T13462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.260185][T13467] loop7: detected capacity change from 0 to 256 [ 840.379574][T13462] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 840.422373][T13467] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 840.614778][T10690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.113357][T13497] loop4: detected capacity change from 0 to 2048 [ 842.237661][T13497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.639582][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.110441][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3159'. [ 843.999312][T13525] loop9: detected capacity change from 0 to 256 [ 844.173393][T13525] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 845.428795][T13546] loop0: detected capacity change from 0 to 512 [ 845.517750][T13546] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3176: iget: bad i_size value: 38620345925642 [ 845.669636][T13546] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3176: couldn't read orphan inode 15 (err -117) [ 845.738370][T13546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.922335][T13552] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 845.992789][ T4584] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 112 with error 28 [ 846.005740][ T4584] EXT4-fs (loop0): This should not happen!! Data will be lost [ 846.005740][ T4584] [ 846.016083][ T4584] EXT4-fs (loop0): Total free blocks count 0 [ 846.022435][ T4584] EXT4-fs (loop0): Free/Dirty block details [ 846.028828][ T4584] EXT4-fs (loop0): free_blocks=0 [ 846.033993][ T4584] EXT4-fs (loop0): dirty_blocks=112 [ 846.042757][ T4584] EXT4-fs (loop0): Block reservation details [ 846.049836][ T4584] EXT4-fs (loop0): i_reserved_data_blocks=112 [ 846.503006][T12588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.487919][ T5435] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 847.687521][ T5435] usb 5-1: Using ep0 maxpacket: 8 [ 847.692892][T13582] loop9: detected capacity change from 0 to 2048 [ 847.709066][ T5435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.720719][ T5435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.730999][ T5435] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 847.740464][ T5435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.809558][T13586] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 847.841113][ T5435] usb 5-1: config 0 descriptor?? [ 848.302647][ T5435] holtek 0003:1241:5015.0021: unknown main item tag 0x0 [ 848.310226][ T5435] holtek 0003:1241:5015.0021: unknown main item tag 0x0 [ 848.317721][ T5435] holtek 0003:1241:5015.0021: item fetching failed at offset 2/5 [ 848.358741][ T5435] holtek 0003:1241:5015.0021: parse failed [ 848.365166][ T5435] holtek 0003:1241:5015.0021: probe with driver holtek failed with error -22 [ 848.511342][T13593] loop5: detected capacity change from 0 to 1024 [ 848.536778][T12021] usb 5-1: USB disconnect, device number 19 [ 849.625617][T13605] loop7: detected capacity change from 0 to 1024 [ 849.802615][T13609] loop0: detected capacity change from 0 to 1024 [ 849.829889][ T30] audit: type=1800 audit(1751860505.779:139): pid=13605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3197" name="bus" dev="loop7" ino=26 res=0 errno=0 [ 850.083239][ T4584] hfsplus: b-tree write err: -5, ino 4 [ 850.211500][T13615] loop5: detected capacity change from 0 to 512 [ 850.232870][T13615] EXT4-fs: Ignoring removed mblk_io_submit option [ 850.306986][ T48] hfsplus: b-tree write err: -5, ino 4 [ 850.338356][T13615] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 850.368602][T13615] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3201: attempt to clear invalid blocks 2 len 1 [ 850.467658][T13615] EXT4-fs (loop5): Remounting filesystem read-only [ 850.512929][T13615] EXT4-fs (loop5): 1 truncate cleaned up [ 850.521061][T13615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.725640][T13625] netlink: 'syz.9.3207': attribute type 11 has an invalid length. [ 850.882050][T10690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.170306][T11997] Bluetooth: hci2: command 0x0406 tx timeout [ 851.384293][T13635] tap0: tun_chr_ioctl cmd 1074025677 [ 851.390519][T13635] tap0: linktype set to 774 [ 852.822712][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3220'. [ 853.093878][ T5812] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1 [ 853.102204][ T5812] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 853.763156][ T5435] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 853.945110][T13678] loop7: detected capacity change from 0 to 4096 [ 853.987865][ T5435] usb 10-1: Using ep0 maxpacket: 32 [ 854.012878][ T5435] usb 10-1: config index 0 descriptor too short (expected 27904, got 36) [ 854.021956][ T5435] usb 10-1: config 0 has too many interfaces: 159, using maximum allowed: 32 [ 854.033614][ T5435] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.045095][ T5435] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 159 [ 854.110249][ T5435] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 854.119919][ T5435] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.125259][T13685] loop0: detected capacity change from 0 to 16 [ 854.130620][ T5435] usb 10-1: Product: syz [ 854.130723][ T5435] usb 10-1: Manufacturer: syz [ 854.130825][ T5435] usb 10-1: SerialNumber: syz [ 854.159614][ T5435] usb 10-1: config 0 descriptor?? [ 854.182996][T13685] erofs (device loop0): mounted with root inode @ nid 36. [ 854.287871][T13687] loop5: detected capacity change from 0 to 256 [ 854.432897][T13679] ALSA: mixer_oss: invalid OSS volume 'AπΕ–' [ 854.443805][T13679] ALSA: mixer_oss: invalid OSS volume '' [ 854.507877][ T5435] usb 10-1: USB disconnect, device number 3 [ 854.570733][T13687] FAT-fs (loop5): Directory bread(block 64) failed [ 854.581150][T13687] FAT-fs (loop5): Directory bread(block 65) failed [ 854.588201][T13687] FAT-fs (loop5): Directory bread(block 66) failed [ 854.594990][T13687] FAT-fs (loop5): Directory bread(block 67) failed [ 854.602183][T13687] FAT-fs (loop5): Directory bread(block 68) failed [ 854.609052][T13687] FAT-fs (loop5): Directory bread(block 69) failed [ 854.615944][T13687] FAT-fs (loop5): Directory bread(block 70) failed [ 854.622895][T13687] FAT-fs (loop5): Directory bread(block 71) failed [ 854.629937][T13687] FAT-fs (loop5): Directory bread(block 72) failed [ 854.636714][T13687] FAT-fs (loop5): Directory bread(block 73) failed [ 854.696263][ T30] audit: type=1800 audit(1751860510.659:140): pid=13678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3224" name="file1" dev="loop7" ino=33 res=0 errno=0 [ 855.215235][T13695] loop4: detected capacity change from 0 to 128 [ 855.295363][T13695] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 856.148861][T13695] loop4: detected capacity change from 0 to 32768 [ 856.158588][T13695] btrfs: Unknown parameter 'subj_role' [ 857.157868][ T5812] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 857.166443][ T5812] Bluetooth: hci4: Injecting HCI hardware error event [ 857.170759][T13720] mkiss: ax0: crc mode is auto. [ 857.175093][ T5812] Bluetooth: hci4: hardware error 0x00 [ 857.367400][T13717] loop9: detected capacity change from 0 to 2048 [ 857.413098][T13717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 858.018272][T13730] wlan0 speed is unknown, defaulting to 1000 [ 858.528094][T13744] loop9: detected capacity change from 0 to 16 [ 858.564277][T13744] erofs (device loop9): mounted with root inode @ nid 36. [ 859.128326][T13752] sp0: Synchronizing with TNC [ 859.322985][ T5812] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 859.408577][T13754] loop9: detected capacity change from 0 to 1024 [ 859.667991][T12021] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 859.746236][T13760] loop5: detected capacity change from 0 to 2048 [ 859.829043][T13760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.867876][T12021] usb 8-1: Using ep0 maxpacket: 8 [ 859.891353][T12021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.902778][T12021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.913044][T12021] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 859.922593][T12021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.949583][T12021] usb 8-1: config 0 descriptor?? [ 860.454312][T12021] holtek 0003:1241:5015.0022: unknown main item tag 0x0 [ 860.462040][T12021] holtek 0003:1241:5015.0022: unknown main item tag 0x0 [ 860.469481][T12021] holtek 0003:1241:5015.0022: item fetching failed at offset 2/5 [ 860.520010][T12021] holtek 0003:1241:5015.0022: parse failed [ 860.526366][T12021] holtek 0003:1241:5015.0022: probe with driver holtek failed with error -22 [ 860.663461][T12021] usb 8-1: USB disconnect, device number 10 [ 860.798246][T12069] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 861.003069][T12069] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 861.012074][T12069] usb 5-1: config 150 has no interface number 0 [ 861.018754][T12069] usb 5-1: config 150 interface 204 has no altsetting 0 [ 861.025948][T12069] usb 5-1: config 150 interface 1 has no altsetting 0 [ 861.080801][T12069] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 861.090481][T12069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.102459][T12069] usb 5-1: Product: syz [ 861.106862][T12069] usb 5-1: Manufacturer: syz [ 861.113617][T12069] usb 5-1: SerialNumber: syz [ 861.395898][T12069] xr_serial 5-1:150.204: xr_serial converter detected [ 861.467742][T12069] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 861.474757][T12069] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 861.546971][T12069] usb 5-1: USB disconnect, device number 20 [ 861.555871][T12069] xr_serial 5-1:150.204: device disconnected [ 861.723505][T13781] Bluetooth: MGMT ver 1.23 [ 861.985303][T13787] loop9: detected capacity change from 0 to 16 [ 862.066617][T13787] erofs (device loop9): mounted with root inode @ nid 36. [ 862.668115][T13797] loop7: detected capacity change from 0 to 1024 [ 862.726421][T13797] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 862.769483][T13799] sctp: [Deprecated]: syz.9.3282 (pid 13799) Use of int in maxseg socket option. [ 862.769483][T13799] Use struct sctp_assoc_value instead [ 862.818265][T13797] hfsplus: bad catalog entry used to create inode [ 863.158042][T12069] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 863.172298][T13807] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 863.253192][T13806] wlan0 speed is unknown, defaulting to 1000 [ 863.348259][T12069] usb 8-1: Using ep0 maxpacket: 32 [ 863.372968][T12069] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 863.381924][T12069] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 863.390948][T12069] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 863.401073][T12069] usb 8-1: config 1 has no interface number 0 [ 863.407561][T12069] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.419030][T12069] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 863.432600][T12069] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 863.442008][T12069] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.606900][T12069] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 863.859609][T12069] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 864.412764][T12021] usb 8-1: USB disconnect, device number 11 [ 864.421046][T12021] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 864.831151][T13825] loop5: detected capacity change from 0 to 128 [ 864.874086][T13825] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 865.660028][T13825] loop5: detected capacity change from 0 to 32768 [ 865.669357][T13825] btrfs: Unknown parameter 'subj_role' [ 866.047517][T12069] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 866.232722][T12069] usb 8-1: Using ep0 maxpacket: 16 [ 866.268643][T12069] usb 8-1: config 0 interface 0 has no altsetting 0 [ 866.275879][T12069] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 866.285688][T12069] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.393476][T12069] usb 8-1: config 0 descriptor?? [ 866.867496][T12069] cypress 0003:04B4:ED81.0023: item fetching failed at offset 3/7 [ 866.882750][T12069] cypress 0003:04B4:ED81.0023: parse failed [ 866.883086][T12069] cypress 0003:04B4:ED81.0023: probe with driver cypress failed with error -22 [ 867.087404][T12069] usb 8-1: USB disconnect, device number 12 [ 867.931343][T13849] wlan0 speed is unknown, defaulting to 1000 [ 868.185894][T13855] loop9: detected capacity change from 0 to 256 [ 868.412885][T13855] FAT-fs (loop9): Directory bread(block 64) failed [ 868.420730][T13855] FAT-fs (loop9): Directory bread(block 65) failed [ 868.427787][T13855] FAT-fs (loop9): Directory bread(block 66) failed [ 868.434658][T13855] FAT-fs (loop9): Directory bread(block 67) failed [ 868.441662][T13855] FAT-fs (loop9): Directory bread(block 68) failed [ 868.448618][T13855] FAT-fs (loop9): Directory bread(block 69) failed [ 868.455564][T13855] FAT-fs (loop9): Directory bread(block 70) failed [ 868.462373][T13855] FAT-fs (loop9): Directory bread(block 71) failed [ 868.473864][T13855] FAT-fs (loop9): Directory bread(block 72) failed [ 868.482093][T13855] FAT-fs (loop9): Directory bread(block 73) failed [ 869.588962][T13872] loop5: detected capacity change from 0 to 256 [ 869.915014][T13872] FAT-fs (loop5): Directory bread(block 64) failed [ 869.922334][T13872] FAT-fs (loop5): Directory bread(block 65) failed [ 869.929516][T13872] FAT-fs (loop5): Directory bread(block 66) failed [ 869.936268][T13872] FAT-fs (loop5): Directory bread(block 67) failed [ 869.943272][T13872] FAT-fs (loop5): Directory bread(block 68) failed [ 869.950196][T13872] FAT-fs (loop5): Directory bread(block 69) failed [ 869.957109][T13872] FAT-fs (loop5): Directory bread(block 70) failed [ 869.964046][T13872] FAT-fs (loop5): Directory bread(block 71) failed [ 869.972126][T13872] FAT-fs (loop5): Directory bread(block 72) failed [ 869.978999][T13872] FAT-fs (loop5): Directory bread(block 73) failed [ 870.895576][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3323'. [ 871.824782][T13906] loop4: detected capacity change from 0 to 512 [ 871.861119][T12069] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 871.895574][T13906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 871.970464][T13906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.984196][T13906] ext4 filesystem being mounted at /701/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.059003][T12069] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 872.069433][T12069] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 872.103366][T12069] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 872.113014][T12069] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.124188][T12069] usb 10-1: Product: syz [ 872.129256][T12069] usb 10-1: Manufacturer: syz [ 872.134410][T12069] usb 10-1: SerialNumber: syz [ 872.149911][T12069] usb 10-1: config 0 descriptor?? [ 872.170220][T13902] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 872.209099][T13906] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 872.228115][T13902] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 872.526528][T13902] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 872.552002][T13902] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 872.875913][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.022568][T12069] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 873.239804][T12069] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 873.304047][T12069] usb 10-1: USB disconnect, device number 4 [ 873.470729][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3342'. [ 874.154641][T13945] loop9: detected capacity change from 0 to 128 [ 874.222849][T13945] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 874.418674][T13945] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 874.462335][T13951] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 874.650563][T12069] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 874.863888][T12069] usb 8-1: config 150 has an invalid interface number: 204 but max is 1 [ 874.872682][T12069] usb 8-1: config 150 has no interface number 0 [ 874.879327][T12069] usb 8-1: config 150 interface 204 has no altsetting 0 [ 874.886540][T12069] usb 8-1: config 150 interface 1 has no altsetting 0 [ 875.004078][T12069] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 875.013713][T12069] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.025129][T12069] usb 8-1: Product: syz [ 875.030513][T12069] usb 8-1: Manufacturer: syz [ 875.035360][T12069] usb 8-1: SerialNumber: syz [ 875.389012][T12069] xr_serial 8-1:150.204: xr_serial converter detected [ 875.446932][T12069] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 875.454075][T12069] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 875.506032][T12069] usb 8-1: USB disconnect, device number 13 [ 875.514661][T12069] xr_serial 8-1:150.204: device disconnected [ 875.750271][T13965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3356'. [ 876.619751][T13976] binder: binder_mmap: 13975 80000000-80b36000 bad vm_flags failed -1 [ 877.092426][T13982] veth1_macvtap: left promiscuous mode [ 877.222116][T13986] loop4: detected capacity change from 0 to 64 [ 877.298281][T13986] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 878.174542][T13991] loop7: detected capacity change from 0 to 4096 [ 878.287987][T14001] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 878.407981][ T30] audit: type=1800 audit(1751860534.359:141): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3380" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 878.440496][T13991] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 878.450100][T13991] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 878.513635][T13991] Remounting filesystem read-only [ 878.519143][T13991] NILFS (loop7): error -5 truncating bmap (ino=12) [ 878.593112][T14004] loop5: detected capacity change from 0 to 128 [ 878.666043][T14004] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 878.757860][T11996] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 878.794052][T14004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.289681][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3378'. [ 879.485983][T14021] veth1_macvtap: left promiscuous mode [ 879.607693][T12069] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 879.778175][T12069] usb 6-1: Using ep0 maxpacket: 32 [ 879.822762][T12069] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 879.835224][T12069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.921355][T12069] usb 6-1: config 0 descriptor?? [ 880.117933][T12021] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 880.190762][T12069] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 880.232722][T12069] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 880.268640][T12069] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 880.276059][T12069] usb 6-1: media controller created [ 880.331091][T12021] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 880.336904][T12069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.340748][T12021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.428191][T12069] az6027: usb out operation failed. (-71) [ 880.431652][T12021] usb 8-1: config 0 descriptor?? [ 880.451969][T12069] az6027: usb out operation failed. (-71) [ 880.458068][T12069] stb0899_attach: Driver disabled by Kconfig [ 880.464367][T12069] az6027: no front-end attached [ 880.464367][T12069] [ 880.496592][T12069] az6027: usb out operation failed. (-71) [ 880.502739][T12069] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 880.515145][T12069] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 880.586751][T12069] dvb-usb: schedule remote query interval to 400 msecs. [ 880.594508][T12069] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 880.656347][T12069] usb 6-1: USB disconnect, device number 8 [ 880.930958][T12069] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 881.158170][T14036] loop9: detected capacity change from 0 to 164 [ 881.281763][T12021] usb 8-1: Cannot set autoneg [ 881.287523][T12021] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 881.363857][T12021] usb 8-1: USB disconnect, device number 14 [ 881.606440][T14044] vlan2: entered promiscuous mode [ 881.611961][T14044] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 883.347956][T12069] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 883.528098][T12069] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 883.538592][T12069] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 883.588885][T12069] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 883.598490][T12069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.607686][T12069] usb 6-1: Product: syz [ 883.612109][T12069] usb 6-1: Manufacturer: syz [ 883.616941][T12069] usb 6-1: SerialNumber: syz [ 883.654565][T14077] loop9: detected capacity change from 0 to 512 [ 883.666578][T12069] usb 6-1: config 0 descriptor?? [ 883.679273][T14068] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 883.688890][T14068] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 883.735792][T14077] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.3410: casefold flag without casefold feature [ 883.761578][T14077] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3410: couldn't read orphan inode 15 (err -117) [ 883.778890][T14077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.923862][T14068] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 883.936027][T14068] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 883.995201][T12064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.073657][T14082] netlink: 71 bytes leftover after parsing attributes in process `syz.7.3413'. [ 884.353090][T12069] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 884.557968][T12069] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 884.588904][T12069] usb 6-1: USB disconnect, device number 9 [ 885.171669][T14095] netlink: 'syz.4.3417': attribute type 29 has an invalid length. [ 885.678905][T12021] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 885.899311][T12021] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 885.909040][T12021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.917637][T12021] usb 6-1: Product: syz [ 885.922056][T12021] usb 6-1: Manufacturer: syz [ 885.926919][T12021] usb 6-1: SerialNumber: syz [ 885.989794][T12021] usb 6-1: config 0 descriptor?? [ 886.014353][T12021] ch341 6-1:0.0: ch341-uart converter detected [ 886.834749][T12021] usb 6-1: failed to send control message: -71 [ 886.841716][T12021] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 886.888492][T12021] usb 6-1: USB disconnect, device number 10 [ 886.901066][T12021] ch341 6-1:0.0: device disconnected [ 887.627871][T14125] loop7: detected capacity change from 0 to 512 [ 887.740253][T14125] EXT4-fs (loop7): 1 orphan inode deleted [ 887.755052][T14125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.788966][ T4772] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 887.799429][ T4772] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 1 [ 887.839637][T14125] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.040903][T14132] netlink: 'syz.5.3432': attribute type 29 has an invalid length. [ 888.160877][T11996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.028195][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 889.240288][T14153] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3441'. [ 889.416769][T14155] loop0: detected capacity change from 0 to 1024 [ 890.553747][T14175] macsec1: entered promiscuous mode [ 890.559541][T14175] macvlan1: entered promiscuous mode [ 890.638053][T14175] macvlan1: left promiscuous mode [ 890.779727][T14177] vlan2: entered promiscuous mode [ 890.785109][T14177] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 892.902081][T14208] loop7: detected capacity change from 0 to 1024 [ 893.002997][T14208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.148475][T14208] overlayfs: upper fs needs to support d_type. [ 893.184044][T14208] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 893.191745][T14208] overlayfs: failed to set xattr on upper [ 893.197907][T14208] overlayfs: ...falling back to redirect_dir=nofollow. [ 893.204973][T14208] overlayfs: ...falling back to index=off. [ 893.211158][T14208] overlayfs: ...falling back to uuid=null. [ 893.443832][T14217] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3471'. [ 894.126577][T14227] netlink: 71 bytes leftover after parsing attributes in process `syz.5.3485'. [ 895.522567][T14250] loop0: detected capacity change from 0 to 1024 [ 895.679730][T14250] hfsplus: bad catalog entry type [ 895.728792][T14258] loop7: detected capacity change from 0 to 1024 [ 895.873043][ T4186] hfsplus: b-tree write err: -5, ino 4 [ 896.088992][T14257] loop4: detected capacity change from 0 to 4096 [ 896.409331][T14257] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 896.415529][T14257] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 896.874634][T14270] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 896.884023][T14270] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 897.164887][T14278] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 897.340401][T14276] loop7: detected capacity change from 0 to 1764 [ 897.375619][T14276] iso9660: Bad value for 'uid' [ 897.381095][T14276] iso9660: Bad value for 'uid' [ 897.594629][T14282] input: syz0 as /devices/virtual/input/input41 [ 897.808370][T14284] loop4: detected capacity change from 0 to 512 [ 897.928827][T14284] EXT4-fs (loop4): 1 orphan inode deleted [ 897.937032][T14284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.968281][ T4772] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 897.978832][ T4772] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 1 [ 898.056428][T14284] ext4 filesystem being mounted at /739/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.415561][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.447565][T12021] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 898.656759][T12021] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 898.666566][T12021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.695287][T12021] usb 10-1: config 0 descriptor?? [ 899.560614][T12021] usb 10-1: Cannot set autoneg [ 899.566264][T12021] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 899.601780][T12021] usb 10-1: USB disconnect, device number 5 [ 899.683457][T14313] loop7: detected capacity change from 0 to 64 [ 899.739172][T14313] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 900.127713][T11996] minix_free_inode: bit 3 already cleared [ 900.188225][T11996] minix_free_inode: bit 4 already cleared [ 900.204114][T11996] minix_free_inode: bit 2 already cleared [ 900.242596][T11996] minix_free_inode: bit 5 already cleared [ 900.318879][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.325636][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.491129][T14324] loop0: detected capacity change from 0 to 164 [ 900.538121][T14324] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 900.588382][T12069] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 900.795475][T12069] usb 5-1: Using ep0 maxpacket: 32 [ 900.839483][T12069] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 900.849836][T12069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.892310][T12069] usb 5-1: config 0 descriptor?? [ 901.116786][T12069] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 901.149249][T12069] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 901.191750][T12069] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 901.199348][T12069] usb 5-1: media controller created [ 901.281704][T12069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.366639][T14319] ===================================================== [ 901.374435][T14319] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 901.381929][T14319] _copy_to_user+0xcc/0x120 [ 901.386631][T14319] i2cdev_ioctl_smbus+0x586/0x660 [ 901.392178][T14319] compat_i2cdev_ioctl+0x48f/0xb40 [ 901.397683][T14319] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 901.403525][T14319] ia32_sys_call+0x2d07/0x42c0 [ 901.408630][T14319] __do_fast_syscall_32+0xb0/0x150 [ 901.414039][T14319] do_fast_syscall_32+0x38/0x80 [ 901.419408][T14319] do_SYSENTER_32+0x1f/0x30 [ 901.424169][T14319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 901.431277][T14319] [ 901.433708][T14319] Uninit was stored to memory at: [ 901.441628][T14319] __i2c_smbus_xfer+0x254d/0x2f60 [ 901.446885][T14319] i2c_smbus_xfer+0x31d/0x4d0 [ 901.452825][T14319] i2cdev_ioctl_smbus+0x4a1/0x660 [ 901.458329][T14319] compat_i2cdev_ioctl+0x48f/0xb40 [ 901.463673][T14319] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 901.469700][T14319] ia32_sys_call+0x2d07/0x42c0 [ 901.474703][T14319] __do_fast_syscall_32+0xb0/0x150 [ 901.481607][T14319] do_fast_syscall_32+0x38/0x80 [ 901.486878][T14319] do_SYSENTER_32+0x1f/0x30 [ 901.491775][T14319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 901.498573][T14319] [ 901.501006][T14319] Local variable msgbuf1.i created at: [ 901.506593][T14319] __i2c_smbus_xfer+0x86a/0x2f60 [ 901.511936][T14319] i2c_smbus_xfer+0x31d/0x4d0 [ 901.516862][T14319] [ 901.519887][T14319] Bytes 0-1 of 2 are uninitialized [ 901.525182][T14319] Memory access of size 2 starts at ffff8880458a3c86 [ 901.532185][T14319] Data copied to user address 0000000080000180 [ 901.538643][T14319] [ 901.543707][T14319] CPU: 1 UID: 0 PID: 14319 Comm: syz.4.3515 Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(none) [ 901.556765][T14319] Tainted: [W]=WARN [ 901.561014][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.571440][T14319] ===================================================== [ 901.578766][T14319] Disabling lock debugging due to kernel taint [ 901.585101][T14319] Kernel panic - not syncing: kmsan.panic set ... [ 901.591713][T14319] CPU: 1 UID: 0 PID: 14319 Comm: syz.4.3515 Tainted: G B W 6.16.0-rc5-syzkaller #0 PREEMPT(none) [ 901.603814][T14319] Tainted: [B]=BAD_PAGE, [W]=WARN [ 901.608977][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.619188][T14319] Call Trace: [ 901.622568][T14319] [ 901.625606][T14319] __dump_stack+0x26/0x30 [ 901.630182][T14319] dump_stack_lvl+0x53/0x270 [ 901.634998][T14319] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 901.641136][T14319] dump_stack+0x1e/0x25 [ 901.645498][T14319] panic+0x4bd/0xd50 [ 901.649688][T14319] kmsan_report+0x31c/0x320 [ 901.654487][T14319] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 901.661025][T14319] ? kmsan_internal_check_memory+0x1e1/0x230 [ 901.667212][T14319] ? kmsan_copy_to_user+0xf1/0x190 [ 901.672512][T14319] ? _copy_to_user+0xcc/0x120 [ 901.677344][T14319] ? i2cdev_ioctl_smbus+0x586/0x660 [ 901.682713][T14319] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 901.688207][T14319] ? __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 901.694158][T14319] ? ia32_sys_call+0x2d07/0x42c0 [ 901.699274][T14319] ? __do_fast_syscall_32+0xb0/0x150 [ 901.704781][T14319] ? do_fast_syscall_32+0x38/0x80 [ 901.710044][T14319] ? do_SYSENTER_32+0x1f/0x30 [ 901.714937][T14319] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 901.721678][T14319] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 901.727154][T14319] ? __i2c_transfer+0x11cd/0x3110 [ 901.732375][T14319] ? kmsan_get_metadata+0xfb/0x160 [ 901.737721][T14319] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 901.744282][T14319] ? kmsan_get_metadata+0xfb/0x160 [ 901.749650][T14319] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 901.755742][T14319] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 901.761177][T14319] ? kmsan_get_metadata+0xfb/0x160 [ 901.766499][T14319] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 901.772550][T14319] kmsan_internal_check_memory+0x1e1/0x230 [ 901.778586][T14319] kmsan_copy_to_user+0xf1/0x190 [ 901.783763][T14319] _copy_to_user+0xcc/0x120 [ 901.788470][T14319] i2cdev_ioctl_smbus+0x586/0x660 [ 901.793718][T14319] compat_i2cdev_ioctl+0x48f/0xb40 [ 901.799050][T14319] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 901.804869][T14319] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 901.810656][T14319] ? kmsan_get_metadata+0xfb/0x160 [ 901.815999][T14319] ? kmsan_get_metadata+0xfb/0x160 [ 901.821336][T14319] ia32_sys_call+0x2d07/0x42c0 [ 901.826317][T14319] __do_fast_syscall_32+0xb0/0x150 [ 901.831646][T14319] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 901.837581][T14319] do_fast_syscall_32+0x38/0x80 [ 901.842642][T14319] do_SYSENTER_32+0x1f/0x30 [ 901.847377][T14319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 901.853943][T14319] RIP: 0023:0xf7f68539 [ 901.858168][T14319] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 901.877995][T14319] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 901.886600][T14319] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 901.894736][T14319] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 901.902873][T14319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 901.910991][T14319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 901.919092][T14319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 901.927243][T14319] [ 901.930726][T14319] Kernel Offset: disabled [ 901.935147][T14319] Rebooting in 86400 seconds..