last executing test programs: 12m23.232741678s ago: executing program 32 (id=1400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r1, 0x30d}, 0x14}}, 0x0) 9m15.750333051s ago: executing program 33 (id=2524): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r0) 8m12.324538956s ago: executing program 34 (id=2873): set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 7m1.584488278s ago: executing program 6 (id=3198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@local, 0x800, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x62}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0xffffffffffffffff}, 0x20000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002600)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x8000000000000001, 0x0, 0x400000000000, 0xf1}, {}, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 7m0.2628406s ago: executing program 6 (id=3203): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 6m57.057146879s ago: executing program 35 (id=3203): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 6m20.18255804s ago: executing program 36 (id=3292): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x1, r0, 0x9}) 6m0.9182488s ago: executing program 37 (id=3372): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r0) 4m52.604941355s ago: executing program 38 (id=3791): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000c8f000/0x1000)=nil, &(0x7f0000bcc000/0x2000)=nil, 0x1000, 0x3}) 4m13.913444432s ago: executing program 9 (id=4011): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 4m13.31512171s ago: executing program 9 (id=4015): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4100, 0xf0cb2f4a0c2cfc5d, 0x0) 4m11.487511209s ago: executing program 9 (id=4025): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 4m10.760830909s ago: executing program 9 (id=4029): syz_mount_image$exfat(0x0, &(0x7f0000000400)='./file0\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000400)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000dc0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x202000, 0x0) 4m10.076220072s ago: executing program 9 (id=4034): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000001f040000000000003f000000000000005504020001ed0a0025000000170000000f030000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c8216feb1a69005bbe781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m8.944943833s ago: executing program 9 (id=4040): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000040)) 4m8.205807549s ago: executing program 39 (id=4040): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000040)) 3m7.638893393s ago: executing program 2 (id=4313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) 3m6.89257519s ago: executing program 2 (id=4317): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000000), 0x1, 0x77d, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff8, 0x2) getdents(r0, 0x0, 0x58) 3m5.665630807s ago: executing program 2 (id=4325): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f000054e000/0x1000)=nil, 0x1000}, 0x0, 0x2}) 3m4.444759922s ago: executing program 2 (id=4331): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@jqfmt_vfsold}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000540)={[{@data_journal}, {@discard}, {@nomblk_io_submit}, {@init_itable_val}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@noblock_validity}, {@acl}, {@sysvgroups}]}, 0x1, 0x263, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 3m3.495911019s ago: executing program 2 (id=4338): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 3m2.808246346s ago: executing program 2 (id=4343): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m1.469784274s ago: executing program 40 (id=4343): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m40.937966137s ago: executing program 6 (id=4345): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x6) 2m40.753295382s ago: executing program 6 (id=4438): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x1, 0x189, &(0x7f00000027c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) 2m40.131961209s ago: executing program 6 (id=4441): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008"], 0x24}}, 0x0) 2m39.275109387s ago: executing program 6 (id=4446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="4d7e00c30000000000002700000008000200", @ANYRES16=r2], 0x1c}, 0x4, 0x700000000000000}, 0x0) 2m38.090842751s ago: executing program 41 (id=4446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="4d7e00c30000000000002700000008000200", @ANYRES16=r2], 0x1c}, 0x4, 0x700000000000000}, 0x0) 1m59.880336628s ago: executing program 0 (id=4649): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1m59.320627201s ago: executing program 0 (id=4652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 1m58.194768298s ago: executing program 0 (id=4661): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x0, 0xff, 0x2}}, 0x18) 1m57.416387858s ago: executing program 0 (id=4665): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 1m57.021165498s ago: executing program 0 (id=4667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) 1m56.516404047s ago: executing program 0 (id=4670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x1000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 1m54.980409023s ago: executing program 42 (id=4670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x1000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 53.112081312s ago: executing program 1 (id=5004): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @random="bf5aa2a954fa"}, 0x14) 52.644221928s ago: executing program 1 (id=5007): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='f2fs_readpages\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="06"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/66, 0x42}}, 0x10) 52.165665823s ago: executing program 1 (id=5011): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x90, 0x0, r1, 0x0) 51.541362283s ago: executing program 1 (id=5015): syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x180, &(0x7f0000000040)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/98, 0x62) 51.038045701s ago: executing program 1 (id=5019): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000e00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3, @multicast1}}, 0x24) 49.810434749s ago: executing program 1 (id=5034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 47.974772209s ago: executing program 43 (id=5034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 44.095954723s ago: executing program 4 (id=5041): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r1, 0x1, r0, 0x486}) 41.97587385s ago: executing program 4 (id=5049): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000002c0)='./file0\x00', 0x1600008, &(0x7f0000000300)={[{@nodecompose}, {}, {@barrier}, {@uid}, {@gid}, {@type={'type', 0x3d, "05f2875e"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@part={'part', 0x3d, 0xa}}]}, 0x1, 0x63a, &(0x7f0000000e40)="$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") syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 40.803852068s ago: executing program 4 (id=5054): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = memfd_secret(0x0) fcntl$setlease(r1, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.16010582s ago: executing program 4 (id=5057): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfb1, 0x0) read$usbfs(r0, &(0x7f0000000000)=""/25, 0x19) read$usbfs(r0, &(0x7f0000002240)=""/133, 0x85) 39.464716126s ago: executing program 4 (id=5060): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 38.967338936s ago: executing program 4 (id=5063): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}]}}}]}, 0x60}}, 0x0) 22.044852677s ago: executing program 44 (id=5063): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}]}}}]}, 0x60}}, 0x0) 6.908539824s ago: executing program 3 (id=5162): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000240)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)) 6.144596692s ago: executing program 3 (id=5165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x1001, @void, @val, @val={0x3, 0x1, 0xc}, @void, @val={0x6, 0x2, 0xfff2}, @val={0x5, 0x3, {0x6, 0x20}}, @val={0x25, 0x3, {0x0, 0x80}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xe, 0xad, 0x2}}, @val={0x2d, 0x1a, {0x80, 0x2, 0x4, 0x0, {0x1fc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c782, 0x401, 0xf}}, @val={0x72, 0x6}, @void, @void}}]}, 0x84}}, 0x0) 5.463225322s ago: executing program 3 (id=5168): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000300)={0x20, 0x9, 0xc, {0xc, 0x22, "ce6788be57635e6972bb"}}, 0x0, 0x0, 0x0}, 0x0) 4.859189938s ago: executing program 7 (id=5169): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x64) getdents(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.725658243s ago: executing program 5 (id=5170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) 3.991693843s ago: executing program 7 (id=5172): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setrlimit(0x7, &(0x7f00000000c0)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 3.991447919s ago: executing program 5 (id=5173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d3}, 0x8040) 3.694098512s ago: executing program 8 (id=5174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) fdatasync(0xffffffffffffffff) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x149142, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.24789901s ago: executing program 5 (id=5175): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5c, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) 2.864714961s ago: executing program 8 (id=5176): r0 = io_uring_setup(0x30d2, &(0x7f0000000600)={0x0, 0x3709, 0x0, 0x0, 0x4c}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="27a0f900f41c"}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.483618788s ago: executing program 7 (id=5177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x1001, @void, @val, @val={0x3, 0x1, 0xc}, @void, @val={0x6, 0x2, 0xfff2}, @val={0x5, 0x3, {0x6, 0x20}}, @val={0x25, 0x3, {0x0, 0x80}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xe, 0xad, 0x2}}, @val={0x2d, 0x1a, {0x80, 0x2, 0x4, 0x0, {0x1fc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c782, 0x401, 0xf}}, @val={0x72, 0x6}, @void, @void}}]}, 0x84}}, 0x0) 2.479372926s ago: executing program 5 (id=5186): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 2.170422701s ago: executing program 7 (id=5178): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="200002c8", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000020000100", @ANYRES32=r2, @ANYBLOB="00000000ac1414aa00000000000000000000000086dd"], 0x58}}, 0x0) 2.120074828s ago: executing program 8 (id=5179): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffce040000000000007b0a00fe000000002d04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) 1.961793343s ago: executing program 7 (id=5180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x20044e, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 1.877022236s ago: executing program 8 (id=5181): r0 = socket(0x2a, 0x2, 0x0) unshare(0x22020600) r1 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='flow\x00', 0x0, r0) 1.696116428s ago: executing program 3 (id=5182): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000001040)='./file1\x00', 0x4040, &(0x7f0000001080)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYRES32, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f00000001c0)='./file1\x00', 0x0) unlink(&(0x7f0000000700)='./file1\x00') mount$9p_rdma(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0xb0000, 0x0) 1.469777937s ago: executing program 5 (id=5183): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$cgroup_pressure(r0, &(0x7f0000000080)={'full', 0x20, 0x4, 0x20, 0x3}, 0x2f) 1.06846075s ago: executing program 7 (id=5184): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000200)='./file1\x00', 0x10000, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000001580)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x34) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0xb5) 843.537414ms ago: executing program 8 (id=5185): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, r0, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}]}]}, 0x30}}, 0x40000) 637.257245ms ago: executing program 3 (id=5187): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x3, 0x0, [{0xd000, 0xad, &(0x7f0000000580)=""/173}, {0x0, 0xfffffffffffffd7c, &(0x7f0000000440)=""/109}, {0x5000, 0x6c, &(0x7f0000000680)=""/108}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 617.518737ms ago: executing program 5 (id=5188): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") ftruncate(0xffffffffffffffff, 0xc17a) unshare(0x20000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 257.802732ms ago: executing program 8 (id=5189): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x6c, 0x0, 0xfe}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) ioctl$VT_DISALLOCATE(r0, 0x5608) 0s ago: executing program 3 (id=5190): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): city change from 0 to 128 [ 1033.710808][T15983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1033.712544][T15983] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.857082][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1034.017241][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1034.036079][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.047758][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.058034][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1034.067632][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.161270][T13786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1034.188535][ T8] usb 5-1: config 0 descriptor?? [ 1034.201719][ T8] hub 5-1:0.0: USB hub found [ 1034.456219][ T8] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1034.646739][T15995] tun0: tun_chr_ioctl cmd 1074025677 [ 1034.654240][T15995] tun0: linktype set to 774 [ 1034.919463][ T8] hid-generic 0003:046D:C31C.0055: item fetching failed at offset 0/1 [ 1034.967914][ T8] hid-generic 0003:046D:C31C.0055: probe with driver hid-generic failed with error -22 [ 1035.212807][T16004] loop5: detected capacity change from 0 to 64 [ 1035.516618][ T25] usb 5-1: USB disconnect, device number 26 [ 1035.756767][T16011] loop0: detected capacity change from 0 to 2048 [ 1035.808670][T16011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1036.068631][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4289'. [ 1037.453616][T16032] loop2: detected capacity change from 0 to 2048 [ 1037.506932][T16032] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1037.522937][T16032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.736835][ T8] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1039.972658][ T4902] tipc: Subscription rejected, illegal request [ 1040.066775][ T8] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1040.076578][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.124535][ T8] usb 6-1: config 0 descriptor?? [ 1040.375627][ T8] kaweth 6-1:0.0: Firmware present in device. [ 1040.497786][T16081] loop1: detected capacity change from 0 to 512 [ 1040.516849][T16081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1040.567028][T16081] EXT4-fs (loop1): 1 truncate cleaned up [ 1040.574707][T16081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.587246][ T8] kaweth 6-1:0.0: Statistics collection: 0 [ 1040.587386][ T8] kaweth 6-1:0.0: Multicast filter limit: 0 [ 1040.587496][ T8] kaweth 6-1:0.0: MTU: 0 [ 1040.587597][ T8] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1040.660356][T16082] loop2: detected capacity change from 0 to 2048 [ 1040.918432][T13786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.969938][T16082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.028096][ T8] kaweth 6-1:0.0: Error setting SOFS wait [ 1041.035210][ T8] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 1041.063729][ T8] usb 6-1: USB disconnect, device number 28 [ 1041.534572][T15380] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.345205][ T29] audit: type=1326 audit(2000000947.655:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.5.4327" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x0 [ 1042.880146][T16116] loop0: detected capacity change from 0 to 1024 [ 1042.943028][T16116] hfsplus: failed to load root directory [ 1043.024577][T16118] loop1: detected capacity change from 0 to 64 [ 1043.103475][T16120] loop2: detected capacity change from 0 to 512 [ 1043.125636][T16120] EXT4-fs: Ignoring removed mblk_io_submit option [ 1043.200718][T16120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.333253][T16120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1043.341630][T16120] EXT4-fs: Cannot specify journal on remount [ 1043.827729][T16130] loop1: detected capacity change from 0 to 1024 [ 1044.188035][T15380] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.207382][T12593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.277244][ T4902] hfsplus: b-tree write err: -5, ino 4 [ 1044.398291][T12593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.594421][T12593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.787108][T12593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.955294][T16142] loop0: detected capacity change from 0 to 4096 [ 1044.991008][T16142] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1045.461129][T12593] bridge_slave_1: left allmulticast mode [ 1045.467297][T12593] bridge_slave_1: left promiscuous mode [ 1045.473917][T12593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.669192][T12593] bridge_slave_0: left allmulticast mode [ 1045.679718][T12593] bridge_slave_0: left promiscuous mode [ 1045.686518][T12593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.168815][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1046.250038][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1046.271934][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1046.285349][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1046.305516][T16153] No such timeout policy "syz1" [ 1046.437212][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1046.452233][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1046.496340][T12593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.537335][T12593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.602486][T16155] loop0: detected capacity change from 0 to 2048 [ 1046.636654][T16156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1046.680215][T12593] bond0 (unregistering): Released all slaves [ 1046.711570][T16156] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1046.722903][T16156] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1046.736358][T16156] Remounting filesystem read-only [ 1047.160485][T16164] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4352'. [ 1047.170108][T16164] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4352'. [ 1047.486720][T16164] vlan0: entered promiscuous mode [ 1047.700946][T10840] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1047.714468][T12593] hsr_slave_0: left promiscuous mode [ 1047.736631][T12593] hsr_slave_1: left promiscuous mode [ 1047.781280][T12593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.792657][T12593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.839093][T12593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.847096][T12593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.891011][T12593] veth1_macvtap: left promiscuous mode [ 1047.898201][T12593] veth0_macvtap: left promiscuous mode [ 1047.905279][T12593] veth1_vlan: left promiscuous mode [ 1047.910874][T12593] veth0_vlan: left promiscuous mode [ 1047.951099][T10840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1047.958567][T10840] usb 1-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 1047.968133][T10840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.019935][T10840] usb 1-1: config 0 descriptor?? [ 1048.040244][T10840] snd_usb_toneport 1-1:0.0: Line 6 POD Studio UX1 found [ 1048.265070][T10840] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 1048.273273][T10840] snd_usb_toneport 1-1:0.0: Line 6 POD Studio UX1 now disconnected [ 1048.292849][T10840] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1048.560941][T10840] usb 1-1: USB disconnect, device number 29 [ 1048.791759][ T51] Bluetooth: hci4: command tx timeout [ 1048.945780][T12593] team0 (unregistering): Port device team_slave_1 removed [ 1048.995422][T12593] team0 (unregistering): Port device team_slave_0 removed [ 1049.538745][T16181] loop5: detected capacity change from 0 to 4096 [ 1049.678153][T16181] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1050.118218][T16146] chnl_net:caif_netlink_parms(): no params data found [ 1050.209939][ T29] audit: type=1800 audit(2000000954.998:1131): pid=16191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4358" name="file2" dev="loop5" ino=31 res=0 errno=0 [ 1050.888316][T16200] loop0: detected capacity change from 0 to 256 [ 1050.950908][T16200] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 1050.996462][ T51] Bluetooth: hci4: command tx timeout [ 1051.106062][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.114287][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.123903][T16146] bridge_slave_0: entered allmulticast mode [ 1051.133476][T16146] bridge_slave_0: entered promiscuous mode [ 1051.265881][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.274108][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.284894][T16146] bridge_slave_1: entered allmulticast mode [ 1051.297994][T16146] bridge_slave_1: entered promiscuous mode [ 1051.641680][T16146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.739057][T16146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.032316][T16146] team0: Port device team_slave_0 added [ 1052.115616][T16146] team0: Port device team_slave_1 added [ 1052.355913][T16146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.366312][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.396812][T16146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.475518][T16146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.482959][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.510560][T16146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.572572][ T5135] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1052.781214][T16226] loop0: detected capacity change from 0 to 128 [ 1052.815687][ T5135] usb 5-1: Using ep0 maxpacket: 16 [ 1052.829120][T16226] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1052.851644][ T5135] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1052.862868][ T5135] usb 5-1: config 0 has no interface number 0 [ 1052.869349][ T5135] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.880769][ T5135] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.893725][ T5135] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1052.904476][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.937224][T16146] hsr_slave_0: entered promiscuous mode [ 1052.953398][T16226] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 550) [ 1052.962572][T16226] FAT-fs (loop0): Filesystem has been set read-only [ 1052.994438][T16146] hsr_slave_1: entered promiscuous mode [ 1053.023631][ T5135] usb 5-1: config 0 descriptor?? [ 1053.086191][T16231] loop5: detected capacity change from 0 to 64 [ 1053.269049][ T51] Bluetooth: hci4: command tx timeout [ 1053.276290][T14783] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 550) [ 1053.852722][ T5135] uclogic 0003:28BD:0071.0056: pen parameters not found [ 1053.863095][ T5135] uclogic 0003:28BD:0071.0056: interface is invalid, ignoring [ 1053.920607][ T5135] usb 5-1: USB disconnect, device number 27 [ 1054.070017][T16237] [U]  [ 1054.608588][T16146] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1054.636230][T16146] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1054.662190][T16146] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1054.715334][T16146] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1055.443887][ T51] Bluetooth: hci4: command tx timeout [ 1055.607606][T16146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.824053][T16146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.885904][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.893915][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.983240][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.991015][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.930023][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1057.834532][T16276] bridge_slave_0: left allmulticast mode [ 1057.841101][T16276] bridge_slave_0: left promiscuous mode [ 1057.848078][T16276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.904590][T16276] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1057.972799][T16146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.766260][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1058.983521][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1058.993448][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.021614][T16293] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4405'. [ 1059.067134][ T25] usb 5-1: config 0 descriptor?? [ 1059.089631][ T25] cp210x 5-1:0.0: cp210x converter detected [ 1059.264680][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4406'. [ 1059.528609][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.571163][ T25] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1059.603328][ T25] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1059.814907][ T25] usb 5-1: USB disconnect, device number 28 [ 1059.859889][T16146] veth0_vlan: entered promiscuous mode [ 1059.862245][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1059.902231][T16146] veth1_vlan: entered promiscuous mode [ 1060.033509][T16146] veth0_macvtap: entered promiscuous mode [ 1060.063982][ T25] cp210x 5-1:0.0: device disconnected [ 1060.090798][T16146] veth1_macvtap: entered promiscuous mode [ 1060.105311][ T5135] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1060.151044][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.162901][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.173388][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.184397][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.194762][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.205640][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.215961][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.226779][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.239179][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.250717][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.267331][T16146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.331435][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.344591][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.355511][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.366394][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.377670][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.388736][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.399019][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.409923][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.420653][T16146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.431564][T16146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.446829][T16146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.472142][T16146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.481739][T16146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.492055][T16146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.501575][T16146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.609567][ T5135] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1060.620793][ T5135] usb 1-1: config 0 has no interface number 0 [ 1060.627311][ T5135] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.638651][ T5135] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.651549][ T5135] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1060.661822][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.808560][ T5135] usb 1-1: config 0 descriptor?? [ 1061.306874][ T5135] prodikeys 0003:041E:2801.0057: unknown main item tag 0x0 [ 1061.376168][ T5135] prodikeys 0003:041E:2801.0057: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 1061.392566][ T5135] hid_prodikeys: hid-prodikeys: failed to find output report [ 1061.392566][ T5135] [ 1061.540058][ T5135] usb 1-1: USB disconnect, device number 30 [ 1062.849043][T16334] loop0: detected capacity change from 0 to 64 [ 1062.890221][T16338] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4421'. [ 1063.613976][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4422'. [ 1063.728375][T16350] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4422'. [ 1063.741076][T16350] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4422'. [ 1065.415493][T16383] loop5: detected capacity change from 0 to 8 [ 1065.567039][T16383] SQUASHFS error: Unable to read directory block [629:46] [ 1065.662053][T12593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.668944][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1065.670215][T12593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.771973][ T5047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.780485][ T5047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.868083][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1065.912484][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.924735][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1065.937367][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1065.951581][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1065.966750][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.106752][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1066.116484][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1066.127550][ T25] usb 5-1: Manufacturer: syz [ 1066.157204][ T25] usb 5-1: config 0 descriptor?? [ 1066.503451][T16398] loop6: detected capacity change from 0 to 64 [ 1066.648225][ T25] rc_core: IR keymap rc-hauppauge not found [ 1066.654694][ T25] Registered IR keymap rc-empty [ 1066.660474][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1066.734870][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1066.793227][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1066.812594][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 1066.941386][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.003339][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.038620][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.067062][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.086468][T16146] VFS: Lookup of '.¨' in minix loop6 would have caused loop [ 1067.097687][T16146] VFS: Lookup of '.¨' in minix loop6 would have caused loop [ 1067.160798][ T5781] Bluetooth: hci3: command 0x0405 tx timeout [ 1067.185019][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.215546][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.346058][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.374971][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.408254][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.437147][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.470835][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1067.516560][ T25] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 8a [ 1067.526214][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1067.597611][ T25] usb 5-1: USB disconnect, device number 29 [ 1067.853494][ T3855] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.910698][T16409] loop5: detected capacity change from 0 to 128 [ 1067.920369][T16407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.060473][ T3855] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.265491][ T3855] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.501616][ T3855] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.817883][ T3855] bridge_slave_1: left allmulticast mode [ 1068.823884][ T3855] bridge_slave_1: left promiscuous mode [ 1068.830778][ T3855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.852796][ T3855] bridge_slave_0: left allmulticast mode [ 1068.859324][ T3855] bridge_slave_0: left promiscuous mode [ 1068.866400][ T3855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.446745][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1069.457511][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1069.494839][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1069.508580][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1069.520971][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1069.530481][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1069.583330][T16419] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1069.861174][ T3855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.990191][ T3855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.025158][ T3855] bond0 (unregistering): Released all slaves [ 1070.490335][T16429] loop4: detected capacity change from 0 to 512 [ 1070.503533][T16429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1071.010038][T16429] EXT4-fs (loop4): 1 truncate cleaned up [ 1071.019138][T16429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.439829][T15454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.576216][ T3855] hsr_slave_0: left promiscuous mode [ 1071.621135][ T3855] hsr_slave_1: left promiscuous mode [ 1071.632010][ T3855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.639891][ T3855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.671619][ T3855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.679537][ T3855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.720370][T16450] loop4: detected capacity change from 0 to 128 [ 1071.799440][ T51] Bluetooth: hci4: command tx timeout [ 1071.820607][T16450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1071.830264][T16453] loop1: detected capacity change from 0 to 4096 [ 1071.860764][ T3855] veth1_macvtap: left promiscuous mode [ 1071.863047][T16450] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.866807][ T3855] veth0_macvtap: left promiscuous mode [ 1071.905883][ T3855] veth1_vlan: left promiscuous mode [ 1071.911489][ T3855] veth0_vlan: left promiscuous mode [ 1072.389739][T16453] ntfs3(loop1): ino=5, "/" attr_set_size [ 1072.395811][T16453] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1072.821896][ T3855] team0 (unregistering): Port device team_slave_1 removed [ 1072.839746][T15454] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1072.871467][ T3855] team0 (unregistering): Port device team_slave_0 removed [ 1074.085582][ T5781] Bluetooth: hci4: command tx timeout [ 1074.378423][T16415] chnl_net:caif_netlink_parms(): no params data found [ 1075.105569][T16415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.113714][T16415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.124639][T16415] bridge_slave_0: entered allmulticast mode [ 1075.134005][T16415] bridge_slave_0: entered promiscuous mode [ 1075.150288][T16415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.159780][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.167914][T16415] bridge_slave_1: entered allmulticast mode [ 1075.177486][T16415] bridge_slave_1: entered promiscuous mode [ 1075.312522][T16491] loop4: detected capacity change from 0 to 512 [ 1075.321523][T16491] EXT4-fs: Ignoring removed orlov option [ 1075.376462][T16415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.427682][T16415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.445092][T16491] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.4477: Attempting to read directory block (0) that is past i_size (256) [ 1075.492620][T16491] EXT4-fs (loop4): Remounting filesystem read-only [ 1075.503728][T16491] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1075.528772][T16491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.619969][T16415] team0: Port device team_slave_0 added [ 1075.660641][T16415] team0: Port device team_slave_1 added [ 1075.823704][T16496] loop0: detected capacity change from 0 to 128 [ 1075.842255][T16415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.849660][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.875774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.889692][T16415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.917664][T16415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.926293][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.952417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.959503][T16415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.985376][T15454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.991794][T16496] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1076.100072][T16496] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.164951][T16415] hsr_slave_0: entered promiscuous mode [ 1076.175647][T16415] hsr_slave_1: entered promiscuous mode [ 1076.314941][ T5781] Bluetooth: hci4: command tx timeout [ 1076.618234][T14783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1077.655215][T16415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1077.743974][T16415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1077.808258][T16415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1077.894093][T16415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1078.587039][ T5781] Bluetooth: hci4: command tx timeout [ 1078.768442][T16415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.943465][T16415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.064582][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.072376][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.213669][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.221468][ T4768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.411458][T16415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1079.422317][T16415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1080.182399][T16548] loop1: detected capacity change from 0 to 256 [ 1080.763576][T16415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.135477][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1082.338761][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1082.399345][ T25] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1082.407907][ T25] usb 2-1: config 0 has no interface number 0 [ 1082.417025][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1082.428777][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1082.500864][ T25] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1082.513363][ T25] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1082.521855][ T25] usb 2-1: Product: syz [ 1082.526264][ T25] usb 2-1: SerialNumber: syz [ 1082.575524][ T25] usb 2-1: config 0 descriptor?? [ 1082.626144][ T25] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 1082.635963][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input69 [ 1082.871701][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1082.874903][T10840] usb 2-1: USB disconnect, device number 22 [ 1082.878862][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1082.942973][T10840] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1083.207229][T16415] veth0_vlan: entered promiscuous mode [ 1083.334478][T16415] veth1_vlan: entered promiscuous mode [ 1083.663985][T16415] veth0_macvtap: entered promiscuous mode [ 1083.746851][T16415] veth1_macvtap: entered promiscuous mode [ 1084.013301][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.028267][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.041070][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.051982][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.062146][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.075527][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.085723][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.097252][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.111676][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.122912][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.141770][T16415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.414394][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.428815][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.442932][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.453758][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.466979][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.481379][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.491589][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.502368][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.515540][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.527415][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.546772][T16415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.597186][T16415] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.606792][T16415] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.618550][T16415] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.627725][T16415] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.917048][T16601] loop1: detected capacity change from 0 to 128 [ 1085.974463][T16601] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1086.041608][T16601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.493300][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1086.853923][ T25] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1086.864625][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1086.905909][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1086.915500][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1086.923870][ T25] usb 2-1: SerialNumber: syz [ 1087.297247][ T25] usb 2-1: 0:2 : does not exist [ 1087.399103][ T25] usb 2-1: USB disconnect, device number 23 [ 1087.645841][T16621] tipc: Started in network mode [ 1087.651073][T16621] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 1087.663231][T16621] tipc: Enabling of bearer rejected, failed to enable media [ 1089.745509][T12592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.746727][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.757056][T12592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.762177][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.636109][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1090.852424][T16654] loop1: detected capacity change from 0 to 512 [ 1090.858479][T16656] loop5: detected capacity change from 0 to 1024 [ 1090.859431][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1090.913247][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.925005][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.961592][T16656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.978805][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1090.988615][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.999540][ T8] usb 5-1: Product: syz [ 1091.004915][ T8] usb 5-1: Manufacturer: syz [ 1091.009920][ T8] usb 5-1: SerialNumber: syz [ 1091.352696][ T8] usb 5-1: 0:2 : does not exist [ 1091.468770][ T8] usb 5-1: USB disconnect, device number 30 [ 1091.571196][T16662] loop7: detected capacity change from 0 to 4096 [ 1091.669864][T16667] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1091.705794][ T9153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.715422][T16666] misc userio: Can't change port type on an already running userio instance [ 1092.111270][T16669] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1092.618311][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 1092.654411][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4544'. [ 1093.061909][T16687] loop0: detected capacity change from 0 to 512 [ 1093.143696][T16687] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1093.156718][T16687] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4546: invalid block [ 1093.286161][T16687] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4546: invalid indirect mapped block 4294967295 (level 1) [ 1093.332696][T16687] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4546: invalid indirect mapped block 4294967295 (level 1) [ 1093.353752][T16687] EXT4-fs (loop0): 2 truncates cleaned up [ 1093.364743][T16687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1093.530673][T16697] loop1: detected capacity change from 0 to 1024 [ 1093.540900][T16697] EXT4-fs: Ignoring removed i_version option [ 1093.561686][T14783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.667096][T16697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.192327][T13786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.492650][T16716] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1095.918246][T16730] net veth1_virt_wifi virt_wifi0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1096.085825][T16732] hub 4-0:1.0: USB hub found [ 1096.103585][T16732] hub 4-0:1.0: 1 port detected [ 1096.158021][T16732] usb usb4: usbfs: process 16732 (syz.4.4565) did not claim interface 0 before use [ 1097.394215][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1097.738959][ T8] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 1098.022034][ T8] usb 1-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1098.031512][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.040896][ T8] usb 1-1: Product: syz [ 1098.045719][ T8] usb 1-1: Manufacturer: syz [ 1098.050756][ T8] usb 1-1: SerialNumber: syz [ 1098.098903][ T8] usb 1-1: config 0 descriptor?? [ 1098.129296][ T8] go7007-loader 1-1:0.0: can't handle multiple config [ 1098.136456][ T8] go7007-loader 1-1:0.0: probe failed [ 1098.453463][ T8] usb 1-1: USB disconnect, device number 31 [ 1099.430015][T16778] sctp: [Deprecated]: syz.4.4585 (pid 16778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.430015][T16778] Use struct sctp_sack_info instead [ 1100.286273][T16791] geneve0: entered promiscuous mode [ 1100.312324][T16791] geneve0: left promiscuous mode [ 1101.246217][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'. [ 1102.465611][T16830] loop7: detected capacity change from 0 to 1024 [ 1102.549207][T16832] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1102.555921][T16832] pim6reg1: linktype set to 825 [ 1103.130093][T16839] CIFS mount error: No usable UNC path provided in device string! [ 1103.130093][T16839] [ 1103.140791][T16839] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1104.877398][T16875] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 1105.935182][T16891] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4637'. [ 1106.045965][T16893] loop4: detected capacity change from 0 to 1024 [ 1106.156252][T16895] loop7: detected capacity change from 0 to 128 [ 1106.282277][T16895] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 1106.420539][T16895] sysv_free_block: getblk() failed [ 1106.426302][T16895] sysv_free_block: getblk() failed [ 1106.434515][T16895] sysv_free_block: getblk() failed [ 1106.441199][T16895] sysv_free_block: getblk() failed [ 1106.446686][T16895] sysv_free_block: getblk() failed [ 1106.452123][T16895] sysv_free_block: getblk() failed [ 1106.457664][T16895] sysv_free_block: getblk() failed [ 1106.464378][T16895] sysv_free_block: getblk() failed [ 1106.470252][T16895] sysv_free_block: getblk() failed [ 1106.475609][T16895] sysv_free_block: getblk() failed [ 1106.481170][T16895] sysv_free_block: getblk() failed [ 1106.486571][T16895] sysv_free_block: getblk() failed [ 1106.492088][T16895] sysv_free_block: getblk() failed [ 1106.497433][T16895] sysv_free_block: getblk() failed [ 1106.503652][T16895] sysv_free_block: getblk() failed [ 1106.509636][T16895] sysv_free_block: getblk() failed [ 1106.515228][T16895] sysv_free_block: getblk() failed [ 1106.520838][T16895] sysv_free_block: getblk() failed [ 1106.526200][T16895] sysv_free_block: getblk() failed [ 1106.531739][T16895] sysv_free_block: getblk() failed [ 1106.537110][T16895] sysv_free_block: getblk() failed [ 1106.545302][T16895] sysv_free_block: getblk() failed [ 1106.550654][T16895] sysv_free_block: getblk() failed [ 1106.557216][T16895] sysv_free_block: getblk() failed [ 1106.562582][T16895] sysv_free_block: getblk() failed [ 1106.568411][T16895] sysv_free_block: getblk() failed [ 1106.574818][T16895] sysv_free_block: getblk() failed [ 1106.580227][T16895] sysv_free_block: getblk() failed [ 1106.586223][T16895] sysv_free_block: getblk() failed [ 1106.591631][T16895] sysv_free_block: getblk() failed [ 1106.597224][T16895] sysv_free_block: getblk() failed [ 1106.602747][T16895] sysv_free_block: getblk() failed [ 1106.608272][T16895] sysv_free_block: getblk() failed [ 1106.613684][T16895] sysv_free_block: getblk() failed [ 1106.619223][T16895] sysv_free_block: getblk() failed [ 1106.624568][T16895] sysv_free_block: getblk() failed [ 1106.630085][T16895] sysv_free_block: trying to free block not in datazone [ 1106.847413][T16906] netlink: 372 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1106.964277][T16415] sysv_free_block: getblk() failed [ 1106.970393][T16415] sysv_free_block: getblk() failed [ 1106.975839][T16415] sysv_free_block: trying to free block not in datazone [ 1106.987361][T16415] sysv_free_block: getblk() failed [ 1106.994262][T16415] sysv_free_block: getblk() failed [ 1106.999911][T16415] sysv_free_block: getblk() failed [ 1107.005706][T16415] sysv_free_block: getblk() failed [ 1107.013039][T16415] sysv_free_block: getblk() failed [ 1107.018816][T16415] sysv_free_block: getblk() failed [ 1107.024536][T16415] sysv_free_block: getblk() failed [ 1107.029866][T16415] sysv_free_block: getblk() failed [ 1107.035357][T16415] sysv_free_block: getblk() failed [ 1107.040736][T16415] sysv_free_block: getblk() failed [ 1107.046233][T16415] sysv_free_block: getblk() failed [ 1107.051576][T16415] sysv_free_block: getblk() failed [ 1107.057501][T16415] sysv_free_block: getblk() failed [ 1107.062844][T16415] sysv_free_block: getblk() failed [ 1107.068430][T16415] sysv_free_block: getblk() failed [ 1107.073811][T16415] sysv_free_block: getblk() failed [ 1107.079302][T16415] sysv_free_block: getblk() failed [ 1107.084923][T16415] sysv_free_block: getblk() failed [ 1107.093624][T16415] sysv_free_block: trying to free block not in datazone [ 1107.103461][T16415] sysv_free_block: trying to free block not in datazone [ 1107.110849][T16415] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1108.907614][T16942] loop1: detected capacity change from 0 to 128 [ 1109.021875][T16942] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1109.132169][T16940] sysv_free_block: getblk() failed [ 1109.137567][T16940] sysv_free_block: getblk() failed [ 1109.143484][T16940] sysv_free_block: getblk() failed [ 1109.149045][T16940] sysv_free_block: getblk() failed [ 1109.154634][T16940] sysv_free_block: getblk() failed [ 1109.160075][T16940] sysv_free_block: getblk() failed [ 1109.165911][T16940] sysv_free_block: getblk() failed [ 1109.175295][T16940] sysv_free_block: getblk() failed [ 1109.180853][T16940] sysv_free_block: getblk() failed [ 1109.186446][T16940] sysv_free_block: getblk() failed [ 1109.191887][T16940] sysv_free_block: getblk() failed [ 1109.197507][T16940] sysv_free_block: getblk() failed [ 1109.204222][T16940] sysv_free_block: getblk() failed [ 1109.209701][T16940] sysv_free_block: getblk() failed [ 1109.215325][T16940] sysv_free_block: getblk() failed [ 1109.220875][T16940] sysv_free_block: getblk() failed [ 1109.226398][T16940] sysv_free_block: getblk() failed [ 1109.231847][T16940] sysv_free_block: getblk() failed [ 1109.237392][T16940] sysv_free_block: getblk() failed [ 1109.242745][T16940] sysv_free_block: getblk() failed [ 1109.248329][T16940] sysv_free_block: getblk() failed [ 1109.253687][T16940] sysv_free_block: getblk() failed [ 1109.259683][T16940] sysv_free_block: getblk() failed [ 1109.265319][T16940] sysv_free_block: getblk() failed [ 1109.270850][T16940] sysv_free_block: getblk() failed [ 1109.276216][T16940] sysv_free_block: getblk() failed [ 1109.285255][T16940] sysv_free_block: getblk() failed [ 1109.290873][T16940] sysv_free_block: getblk() failed [ 1109.296220][T16940] sysv_free_block: getblk() failed [ 1109.301787][T16940] sysv_free_block: getblk() failed [ 1109.307123][T16940] sysv_free_block: getblk() failed [ 1109.313684][T16940] sysv_free_block: getblk() failed [ 1109.319376][T16940] sysv_free_block: getblk() failed [ 1109.324953][T16940] sysv_free_block: getblk() failed [ 1109.330294][T16940] sysv_free_block: getblk() failed [ 1109.335871][T16940] sysv_free_block: getblk() failed [ 1109.341191][T16940] sysv_free_block: trying to free block not in datazone [ 1109.366930][T16945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1109.510059][T16947] loop5: detected capacity change from 0 to 128 [ 1109.852393][ T29] audit: type=1800 audit(2000001010.804:1132): pid=16947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4663" name="file1" dev="loop5" ino=1049016 res=0 errno=0 [ 1109.965283][T13786] sysv_free_block: getblk() failed [ 1109.972646][T13786] sysv_free_block: getblk() failed [ 1109.978400][T13786] sysv_free_block: trying to free block not in datazone [ 1109.986044][T13786] sysv_free_block: getblk() failed [ 1109.991620][T13786] sysv_free_block: getblk() failed [ 1109.997550][T13786] sysv_free_block: getblk() failed [ 1110.003174][T13786] sysv_free_block: getblk() failed [ 1110.010014][T13786] sysv_free_block: getblk() failed [ 1110.015420][T13786] sysv_free_block: getblk() failed [ 1110.021153][T13786] sysv_free_block: getblk() failed [ 1110.026516][T13786] sysv_free_block: getblk() failed [ 1110.032039][T13786] sysv_free_block: getblk() failed [ 1110.037425][T13786] sysv_free_block: getblk() failed [ 1110.046112][T13786] sysv_free_block: getblk() failed [ 1110.052549][T13786] sysv_free_block: getblk() failed [ 1110.057912][T13786] sysv_free_block: getblk() failed [ 1110.063924][T13786] sysv_free_block: getblk() failed [ 1110.069327][T13786] sysv_free_block: getblk() failed [ 1110.074825][T13786] sysv_free_block: getblk() failed [ 1110.081399][T13786] sysv_free_block: getblk() failed [ 1110.087639][T13786] sysv_free_block: getblk() failed [ 1110.096908][T13786] sysv_free_block: trying to free block not in datazone [ 1110.105191][T13786] sysv_free_block: trying to free block not in datazone [ 1110.112370][T13786] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1110.654049][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.858484][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.931197][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4669'. [ 1111.033992][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.219377][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.641356][ T11] bridge_slave_1: left allmulticast mode [ 1111.647283][ T11] bridge_slave_1: left promiscuous mode [ 1111.656778][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.759531][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.859313][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.906943][ T11] bond0 (unregistering): Released all slaves [ 1113.378625][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.438189][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.523301][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1113.636094][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1113.650056][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1113.671162][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1114.879542][T16981] program syz.5.4679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1115.143708][T16984] loop4: detected capacity change from 0 to 4096 [ 1115.286317][T16984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.612782][ T11] hsr_slave_0: left promiscuous mode [ 1115.664204][ T11] hsr_slave_1: left promiscuous mode [ 1115.673314][T16993] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1115.844271][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.856698][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.882046][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.892556][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.985711][ T11] veth1_macvtap: left promiscuous mode [ 1115.993103][ T11] veth0_macvtap: left promiscuous mode [ 1115.999190][ T11] veth1_vlan: left promiscuous mode [ 1116.005072][ T11] veth0_vlan: left promiscuous mode [ 1116.028073][T16997] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4685'. [ 1116.042620][T15454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.101467][ T51] Bluetooth: hci3: command tx timeout [ 1116.793591][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1116.822062][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1117.127270][T16997] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1117.136743][T16997] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1117.145956][T16997] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1117.155287][T16997] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1117.197182][T17001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4687'. [ 1117.898646][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4691'. [ 1118.037016][T16972] chnl_net:caif_netlink_parms(): no params data found [ 1118.326973][T17015] loop7: detected capacity change from 0 to 164 [ 1118.374031][ T51] Bluetooth: hci3: command tx timeout [ 1118.392555][T17017] loop4: detected capacity change from 0 to 64 [ 1118.864199][T17023] loop5: detected capacity change from 0 to 1024 [ 1118.930729][T17023] hfsplus: failed to load root directory [ 1119.231843][T16972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.241580][T16972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.252340][T16972] bridge_slave_0: entered allmulticast mode [ 1119.261626][T16972] bridge_slave_0: entered promiscuous mode [ 1119.352265][T16972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.360203][T16972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.368104][T16972] bridge_slave_1: entered allmulticast mode [ 1119.384140][T16972] bridge_slave_1: entered promiscuous mode [ 1119.599208][T16972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.689568][T16972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.911149][T16972] team0: Port device team_slave_0 added [ 1119.970528][T16972] team0: Port device team_slave_1 added [ 1120.179759][T16972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.189679][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.225573][T16972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.243151][T16972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.253089][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.286633][T16972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.531842][ T5781] Bluetooth: hci3: command tx timeout [ 1120.647937][T17042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4705'. [ 1120.891954][T16972] hsr_slave_0: entered promiscuous mode [ 1120.917921][T16972] hsr_slave_1: entered promiscuous mode [ 1120.941832][T16972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.949883][T16972] Cannot create hsr debugfs directory [ 1121.060090][T10840] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1121.271500][T10840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.283514][T10840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.293877][T10840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1121.307738][T10840] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1121.317242][T10840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.435647][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4709'. [ 1121.445390][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4709'. [ 1121.480740][T10840] usb 5-1: config 0 descriptor?? [ 1121.833334][ T29] audit: type=1326 audit(2000001022.019:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1121.901997][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1121.920203][ T29] audit: type=1326 audit(2000001022.038:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1121.945546][ T29] audit: type=1326 audit(2000001022.057:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1121.968368][ T29] audit: type=1326 audit(2000001022.066:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1121.997806][ T29] audit: type=1326 audit(2000001022.066:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1122.022753][ T29] audit: type=1326 audit(2000001022.085:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1122.048725][ T29] audit: type=1326 audit(2000001022.085:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1122.073271][ T29] audit: type=1326 audit(2000001022.085:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1122.074437][T10840] logitech 0003:046D:C29C.0058: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 1122.100997][ T29] audit: type=1326 audit(2000001022.122:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1122.140570][ T29] audit: type=1326 audit(2000001022.122:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.1.4711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1122.197485][T10840] logitech 0003:046D:C29C.0058: no inputs found [ 1122.219424][T10840] usb 5-1: USB disconnect, device number 31 [ 1122.690650][T16972] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1122.762010][ T51] Bluetooth: hci3: command tx timeout [ 1122.764959][T16972] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1122.821164][T16972] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1122.867575][T16972] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1123.788437][T17079] loop4: detected capacity change from 0 to 256 [ 1124.043901][T16972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.249142][T16972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.352077][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.359965][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.461053][T17079] FAT-fs (loop4): Directory bread(block 64) failed [ 1124.467892][T17079] FAT-fs (loop4): Directory bread(block 65) failed [ 1124.475037][T17079] FAT-fs (loop4): Directory bread(block 66) failed [ 1124.482350][T17079] FAT-fs (loop4): Directory bread(block 67) failed [ 1124.489290][T17079] FAT-fs (loop4): Directory bread(block 68) failed [ 1124.499225][T17079] FAT-fs (loop4): Directory bread(block 69) failed [ 1124.507184][T17079] FAT-fs (loop4): Directory bread(block 70) failed [ 1124.514279][T17079] FAT-fs (loop4): Directory bread(block 71) failed [ 1124.521227][T17079] FAT-fs (loop4): Directory bread(block 72) failed [ 1124.521389][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.529044][T17079] FAT-fs (loop4): Directory bread(block 73) failed [ 1124.535695][ T4768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.709874][T17079] syz.4.4718: attempt to access beyond end of device [ 1124.709874][T17079] loop4: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 1124.728989][T17079] syz.4.4718: attempt to access beyond end of device [ 1124.728989][T17079] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 1124.771637][T17079] syz.4.4718: attempt to access beyond end of device [ 1124.771637][T17079] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 1125.169363][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.380273][T16972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.397241][T17127] loop4: detected capacity change from 0 to 2048 [ 1127.475827][T17132] loop1: detected capacity change from 0 to 16 [ 1127.530317][T17127] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1127.552300][T17132] erofs (device loop1): mounted with root inode @ nid 36. [ 1128.292255][T16972] veth0_vlan: entered promiscuous mode [ 1128.349193][T16972] veth1_vlan: entered promiscuous mode [ 1128.633537][T16972] veth0_macvtap: entered promiscuous mode [ 1128.687510][T16972] veth1_macvtap: entered promiscuous mode [ 1128.867699][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.881720][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.893608][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.909933][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.924422][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.937278][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.951303][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.963191][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.974564][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.990541][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.007645][T16972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.099661][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.113531][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.126634][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.138362][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.151113][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.161918][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.173159][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.186729][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.196962][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.209337][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.219760][T10840] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1129.227435][T16972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.322374][T16972] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.334461][T16972] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.347784][T16972] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.359775][T16972] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.520551][T10840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.535389][T10840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.546572][T10840] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1129.556221][T10840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.688854][T10840] usb 6-1: config 0 descriptor?? [ 1130.161178][T10840] logitech 0003:046D:C294.0059: unknown main item tag 0x0 [ 1130.169422][T10840] logitech 0003:046D:C294.0059: unknown main item tag 0x0 [ 1130.176897][T10840] logitech 0003:046D:C294.0059: unknown main item tag 0x0 [ 1130.184600][T10840] logitech 0003:046D:C294.0059: unknown main item tag 0x0 [ 1130.197002][T10840] logitech 0003:046D:C294.0059: unknown main item tag 0x0 [ 1130.308334][T10840] logitech 0003:046D:C294.0059: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.5-1/input0 [ 1130.320429][T10840] logitech 0003:046D:C294.0059: no inputs found [ 1130.400915][T10840] usb 6-1: USB disconnect, device number 29 [ 1130.853687][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4754'. [ 1130.936669][T17171] loop1: detected capacity change from 0 to 128 [ 1131.145244][T17171] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1131.261849][T17171] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.526644][T17182] loop7: detected capacity change from 0 to 8 [ 1131.694238][T17182] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1131.701000][T17182] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1131.708799][T17182] SQUASHFS error: Unable to read directory block [6e4:0] [ 1131.779398][T13786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1132.385919][T17190] loop1: detected capacity change from 0 to 4096 [ 1132.447044][T17190] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1133.263381][T17190] ntfs3(loop1): ino=0, attr_set_size [ 1133.273925][T17190] ntfs3(loop1): ino=0, attr_set_size [ 1133.316528][T17190] ntfs3(loop1): ino=0, attr_set_size [ 1134.266135][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.275524][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.509298][ T3855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.517383][ T3855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.856199][T17224] loop5: detected capacity change from 0 to 128 [ 1134.886763][T17224] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1134.958979][T17224] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1135.346649][T12592] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1135.570310][ T5135] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1135.600662][T17235] netlink: 'syz.5.4776': attribute type 19 has an invalid length. [ 1135.761904][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 1135.978800][ T5135] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1135.990099][ T5135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.998948][ T5135] usb 2-1: Product: syz [ 1136.003360][ T5135] usb 2-1: Manufacturer: syz [ 1136.010991][ T5135] usb 2-1: SerialNumber: syz [ 1136.055750][ T5135] usb 2-1: config 0 descriptor?? [ 1136.090417][ T5135] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1136.694749][ T5135] gspca_sn9c2028: read1 error -110 [ 1136.709822][ T5135] gspca_sn9c2028: read1 error -32 [ 1136.728832][ T5135] gspca_sn9c2028: read1 error -32 [ 1136.734452][ T5135] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1137.470641][T17260] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1137.478452][T17260] macvtap1: entered promiscuous mode [ 1137.487914][T17260] macvtap1: entered allmulticast mode [ 1137.493741][T17260] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1137.580366][T17260] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 1137.588811][T17260] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 1138.768896][ T5135] usb 2-1: USB disconnect, device number 24 [ 1139.476726][T17283] loop7: detected capacity change from 0 to 16 [ 1139.533765][T17283] erofs (device loop7): mounted with root inode @ nid 36. [ 1139.599542][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1139.599623][ T29] audit: type=1800 audit(2000001038.632:1144): pid=17283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4799" name="file0" dev="loop7" ino=49 res=0 errno=0 [ 1140.476656][T17292] loop5: detected capacity change from 0 to 512 [ 1140.485022][T17298] loop4: detected capacity change from 0 to 8 [ 1140.525244][T17300] loop8: detected capacity change from 0 to 512 [ 1140.536694][T17300] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1140.570312][T17292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1140.584229][T17300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1140.601242][T17300] System zones: 1-12 [ 1140.640073][T17298] loop4: detected capacity change from 0 to 1024 [ 1140.687073][T17300] EXT4-fs (loop8): 1 truncate cleaned up [ 1140.699801][T17300] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.737898][T17292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.754622][T17292] ext4 filesystem being mounted at /685/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.781827][T17300] EXT4-fs (loop8): shut down requested (1) [ 1141.365306][T16972] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.566292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.759050][ T9153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.348293][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1142.533828][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1142.562589][ T25] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1142.562587][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1142.562759][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1142.595393][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1142.607439][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1142.617107][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.694207][ T8] usb 5-1: config 0 descriptor?? [ 1142.817321][T17321] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1142.832118][ T8] hub 5-1:0.0: USB hub found [ 1143.118702][ T8] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1143.371489][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 1143.378317][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1143.480039][ T8] usb 5-1: USB disconnect, device number 32 [ 1143.556097][ T25] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1143.565665][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.597879][ T25] usb 6-1: config 0 descriptor?? [ 1143.625519][ T25] cp210x 6-1:0.0: cp210x converter detected [ 1144.104689][ T25] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1144.243132][ T25] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1144.344238][ T25] usb 6-1: USB disconnect, device number 30 [ 1144.359001][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1144.630513][T17339] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4819'. [ 1144.827226][ T25] cp210x 6-1:0.0: device disconnected [ 1147.295358][T17382] loop8: detected capacity change from 0 to 512 [ 1147.316393][T17382] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1147.601692][T17382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 1147.640694][T17382] System zones: 1-12 [ 1147.660237][T17382] EXT4-fs (loop8): 1 truncate cleaned up [ 1147.667748][T17382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.756398][T17382] fscrypt (loop8, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 1148.116984][T16972] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.402732][T17407] loop5: detected capacity change from 0 to 2048 [ 1149.529709][T17407] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1149.611702][T17416] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1149.624293][T17407] ------------[ cut here ]------------ [ 1149.634331][T17407] WARNING: CPU: 1 PID: 17407 at security/landlock/fs.c:955 current_check_refer_path+0x1343/0x16d0 [ 1149.645821][T17407] Modules linked in: [ 1149.650103][T17407] CPU: 1 UID: 0 PID: 17407 Comm: syz.5.4845 Tainted: G W 6.13.0-rc4-syzkaller #0 [ 1149.663773][T17407] Tainted: [W]=WARN [ 1149.667890][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1149.679937][T17407] RIP: 0010:current_check_refer_path+0x1343/0x16d0 [ 1149.686804][T17407] Code: e8 12 e8 e0 fb 66 b8 00 08 89 44 24 08 e9 89 f6 ff ff e8 00 e8 e0 fb 66 b8 00 10 89 44 24 08 e9 77 f6 ff ff e8 ee e7 e0 fb 90 <0f> 0b 90 e9 61 f6 ff ff 8b 7c 24 14 e8 9c 11 7c fc 66 85 db 0f 84 [ 1149.712923][T17407] RSP: 0018:ffff8880576c3b10 EFLAGS: 00010283 [ 1149.719310][T17407] RAX: ffffffff85d840d2 RBX: 0000000000000000 RCX: 0000000000080000 [ 1149.728521][T17407] RDX: ffffc90016399000 RSI: 0000000000007bc6 RDI: 0000000000007bc7 [ 1149.739499][T17407] RBP: ffff8880576c3c30 R08: 0000000000000005 R09: ffffffff85d83679 [ 1149.747918][T17407] R10: 0000000000000008 R11: ffff888125bbc180 R12: ffff888013043000 [ 1149.756353][T17407] R13: ffff888125bbccb8 R14: 0000000000000000 R15: 000000000000000f [ 1149.770298][T17407] FS: 0000000000000000(0000) GS:ffff88813fd00000(0063) knlGS:00000000f510fb40 [ 1149.784047][T17407] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1149.791279][T17407] CR2: 000000000c26e974 CR3: 000000013e6c0000 CR4: 00000000003526f0 [ 1149.802297][T17407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1149.810634][T17407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1149.821771][T17407] Call Trace: [ 1149.825261][T17407] [ 1149.832142][T17407] ? show_trace_log_lvl+0x268/0x3d0 [ 1149.837721][T17407] ? hook_path_rename+0x74/0x90 [ 1149.843033][T17407] ? show_regs+0xb4/0xe0 [ 1149.847593][T17407] ? __warn+0x2c7/0x780 [ 1149.852202][T17407] ? current_check_refer_path+0x1343/0x16d0 [ 1149.858441][T17407] ? report_bug+0x929/0xbd0 [ 1149.866184][T17407] ? current_check_refer_path+0x1343/0x16d0 [ 1149.872569][T17407] ? handle_bug+0x6d/0x90 [ 1149.877182][T17407] ? exc_invalid_op+0x1f/0x50 [ 1149.882278][T17407] ? asm_exc_invalid_op+0x1f/0x30 [ 1149.887628][T17407] ? current_check_refer_path+0x8e9/0x16d0 [ 1149.898575][T17407] ? current_check_refer_path+0x1342/0x16d0 [ 1149.905246][T17407] ? current_check_refer_path+0x1343/0x16d0 [ 1149.911587][T17407] ? kmsan_get_metadata+0x13e/0x1c0 [ 1149.917220][T17407] hook_path_rename+0x74/0x90 [ 1149.922196][T17407] security_path_rename+0x285/0x740 [ 1149.933398][T17407] do_renameat2+0xff3/0x1d50 [ 1149.939241][T17407] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1149.945424][T17407] __ia32_sys_renameat2+0x14f/0x1f0 [ 1149.951091][T17407] ia32_sys_call+0x2f8a/0x4180 [ 1149.956198][T17407] __do_fast_syscall_32+0xb0/0x110 [ 1149.965018][T17407] ? irqentry_exit+0x16/0x60 [ 1149.970094][T17407] do_fast_syscall_32+0x38/0x80 [ 1149.975254][T17407] do_SYSENTER_32+0x1f/0x30 [ 1149.980175][T17407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1149.986872][T17407] RIP: 0023:0xf711d579 [ 1149.994227][T17407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1150.016020][T17407] RSP: 002b:00000000f510f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 1150.025297][T17407] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000780 [ 1150.039210][T17407] RDX: 00000000ffffff9c RSI: 00000000200007c0 RDI: 0000000000000002 [ 1150.048435][T17407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.056870][T17407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1150.067887][T17407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.078657][T17407] [ 1150.081902][T17407] ---[ end trace 0000000000000000 ]--- [ 1150.655024][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1150.852241][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1150.892388][ T25] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1150.900966][ T25] usb 2-1: config 0 has no interface number 0 [ 1150.983258][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1150.994092][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.002833][ T25] usb 2-1: Product: syz [ 1151.010227][ T25] usb 2-1: Manufacturer: syz [ 1151.015250][ T25] usb 2-1: SerialNumber: syz [ 1151.071225][ T25] usb 2-1: config 0 descriptor?? [ 1151.091150][ T25] smsc95xx v2.0.0 [ 1151.354595][T17423] syz_tun: refused to change device tx_queue_len [ 1151.361884][T17423] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1151.495949][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1151.507174][ T25] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1151.627396][ T25] usb 2-1: USB disconnect, device number 25 [ 1151.858939][T17447] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4862'. [ 1151.870470][ T5135] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1152.111906][ T5135] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1152.122926][ T5135] usb 6-1: config 0 has no interface number 0 [ 1152.145194][ T5135] usb 6-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 1152.154791][ T5135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.165835][ T5135] usb 6-1: Product: syz [ 1152.166230][T17449] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4863'. [ 1152.170796][ T5135] usb 6-1: Manufacturer: syz [ 1152.170912][ T5135] usb 6-1: SerialNumber: syz [ 1152.236090][ T5135] usb 6-1: config 0 descriptor?? [ 1152.316354][ T5135] cx231xx 6-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 1152.328861][ T5135] cx231xx 6-1:0.1: Not found matching IAD interface [ 1152.496659][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4864'. [ 1152.571338][ T8] usb 6-1: USB disconnect, device number 31 [ 1154.055938][T17478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4880'. [ 1154.071425][T17478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4880'. [ 1154.406437][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4879'. [ 1155.621121][T17498] loop7: detected capacity change from 0 to 4096 [ 1155.672936][T17498] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1155.828035][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.910242][T17508] loop8: detected capacity change from 0 to 512 [ 1156.126013][T17508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1156.215443][T17510] loop4: detected capacity change from 0 to 2048 [ 1156.368629][T17508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.385729][T17508] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.472626][T17510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1156.522437][ T29] audit: type=1800 audit(2000001054.459:1145): pid=17508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4890" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1156.648350][ T29] audit: type=1800 audit(2000001054.562:1146): pid=17498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4886" name="file2" dev="loop7" ino=31 res=0 errno=0 [ 1156.795444][T17521] loop5: detected capacity change from 0 to 64 [ 1157.154275][T16972] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.187025][T17525] loop4: detected capacity change from 0 to 128 [ 1157.394470][T17525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1157.418288][T17525] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.011968][T15454] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1160.850722][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4915'. [ 1160.970185][T17575] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4919'. [ 1160.980094][T17575] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4919'. [ 1161.742753][T17579] loop1: detected capacity change from 0 to 1764 [ 1162.421279][T17599] loop8: detected capacity change from 0 to 512 [ 1162.523649][T17599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.537669][T17599] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.904884][T17606] loop1: detected capacity change from 0 to 2048 [ 1162.985492][T16972] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.009268][T17606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1163.208492][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4936'. [ 1163.243821][T17614] netlink: 173 bytes leftover after parsing attributes in process `syz.7.4936'. [ 1164.526559][T17634] loop7: detected capacity change from 0 to 4096 [ 1164.713439][T17634] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1165.153262][T17642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4945'. [ 1165.194164][T17634] ntfs3(loop7): Failed to load $Extend (-22). [ 1165.200722][T17634] ntfs3(loop7): Failed to initialize $Extend. [ 1165.285138][T17634] Process accounting resumed [ 1165.408560][T17647] netlink: 85 bytes leftover after parsing attributes in process `syz.4.4949'. [ 1165.895534][T17652] loop5: detected capacity change from 0 to 512 [ 1165.912139][T17650] loop8: detected capacity change from 0 to 8192 [ 1165.951133][T17652] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.4953: iget: bogus i_mode (0) [ 1165.972044][T17652] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4953: couldn't read orphan inode 17 (err -117) [ 1166.042269][T17652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1166.079531][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4951'. [ 1166.134387][T17652] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4953: bg 0: block 7: invalid block bitmap [ 1166.319270][ T9153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.814566][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.828106][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.838809][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.850376][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.867375][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.903269][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.957233][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.442751][T17676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1167.457988][T17676] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1167.961515][T17686] overlayfs: failed to clone lowerpath [ 1168.624431][T17696] netlink: 'syz.4.4971': attribute type 27 has an invalid length. [ 1168.651752][T17695] loop7: detected capacity change from 0 to 1024 [ 1168.712154][T17695] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1168.919569][T17695] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4969: Invalid block bitmap block 0 in block_group 0 [ 1169.053930][T17695] Quota error (device loop7): write_blk: dquota write failed [ 1169.064693][T17695] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1169.076518][T17695] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.4969: Failed to acquire dquot type 0 [ 1169.144347][T17695] EXT4-fs error (device loop7): ext4_free_blocks:6589: comm syz.7.4969: Freeing blocks not in datazone - block = 0, count = 4096 [ 1169.174235][T17695] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4969: Invalid inode bitmap blk 0 in block_group 0 [ 1169.202575][T17705] loop8: detected capacity change from 0 to 256 [ 1169.227944][T17695] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1169.321167][ T1832] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 1169.327473][T17695] EXT4-fs (loop7): 1 orphan inode deleted [ 1169.330478][ T1832] EXT4-fs error (device loop7): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 0 [ 1169.355860][T17695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.412282][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1169.421944][T17708] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1169.644448][T17714] loop1: detected capacity change from 0 to 64 [ 1169.701448][T17711] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1169.711021][T17711] macvtap1: entered promiscuous mode [ 1169.717642][T17711] macvtap1: entered allmulticast mode [ 1169.723542][T17711] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 1169.823611][T17695] EXT4-fs (loop7): shut down requested (2) [ 1169.858140][T17711] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 1169.866490][T17711] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 1170.220916][T16415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.274792][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4980'. [ 1171.087774][T17736] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1171.094621][T17736] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1171.105691][T17736] vhci_hcd vhci_hcd.0: Device attached [ 1171.402183][ T5135] vhci_hcd: vhci_device speed not set [ 1171.423759][ T8] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 1171.466540][ T5135] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1171.538046][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.547134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.605620][ T8] usb 6-1: config 0 has no interfaces? [ 1171.611444][ T8] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1171.621133][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.674159][ T8] usb 6-1: config 0 descriptor?? [ 1171.715989][T17747] loop7: detected capacity change from 0 to 512 [ 1171.890350][T17747] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1171.984969][T17744] loop1: detected capacity change from 0 to 4096 [ 1172.013050][T17737] usb 43-1: recv xbuf, 0 [ 1172.018227][ T8] usb 6-1: USB disconnect, device number 32 [ 1172.033781][ T4768] vhci_hcd: stop threads [ 1172.039632][ T4768] vhci_hcd: release socket [ 1172.044702][ T4768] vhci_hcd: disconnect device [ 1172.085212][T17753] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1172.103839][ T5135] vhci_hcd: vhci_device speed not set [ 1172.130471][T17747] Process accounting resumed [ 1172.135434][T17754] loop8: detected capacity change from 0 to 256 [ 1172.188603][T17752] loop4: detected capacity change from 0 to 1024 [ 1172.204910][T17744] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1172.214729][T17744] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1172.233844][T17752] EXT4-fs: Ignoring removed nobh option [ 1172.240360][T17752] EXT4-fs: Ignoring removed orlov option [ 1172.249283][T17744] Remounting filesystem read-only [ 1172.252346][T17754] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1172.254436][T17744] NILFS (loop1): error -5 truncating bmap (ino=12) [ 1172.283661][T17744] NILFS (loop1): mounting fs with errors [ 1172.333357][T17752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.516378][T15454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.069276][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.079165][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.113729][T17762] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 1173.121605][T17762] macvtap1: entered promiscuous mode [ 1173.128612][T17762] macvtap1: entered allmulticast mode [ 1173.140034][T17762] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 1173.163415][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.172745][T17768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.201757][T17762] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 1173.217706][T17762] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 1173.252594][T17768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.291314][ T29] audit: type=1326 audit(2000001070.136:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17767 comm="syz.5.4998" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d579 code=0x0 [ 1173.355488][T17764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.695974][T17792] binder: 17791:17792 ioctl 40046205 0 returned -22 [ 1175.893959][T17805] loop8: detected capacity change from 0 to 1024 [ 1175.912489][T17808] loop1: detected capacity change from 0 to 64 [ 1175.939515][T17805] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1176.079021][T17805] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #11: comm syz.8.5014: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1176.153585][T13786] MINIX-fs: deleted inode referenced: 5 [ 1176.204168][T13786] MINIX-fs: deleted inode referenced: 5 [ 1176.210380][T13786] MINIX-fs: deleted inode referenced: 5 [ 1176.218694][T17805] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5014: couldn't read orphan inode 11 (err -117) [ 1176.256194][T17805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.354596][T13786] MINIX-fs: deleted inode referenced: 5 [ 1176.516016][T17805] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5014: Invalid block bitmap block 0 in block_group 0 [ 1176.570918][T17805] Quota error (device loop8): write_blk: dquota write failed [ 1176.581973][T17805] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1176.593491][T17805] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.5014: Failed to acquire dquot type 0 [ 1176.739296][T13786] syz_tun: left allmulticast mode [ 1176.748853][T13786] syz_tun: left promiscuous mode [ 1176.794013][T13786] team0: Port device vlan2 removed [ 1177.004706][ T4902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.107481][T16972] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.147430][ T4902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.168265][T12592] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8 [ 1177.177843][T12592] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 0 [ 1177.239348][T17819] loop5: detected capacity change from 0 to 4096 [ 1177.279400][T17819] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1177.396337][ T4902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.572949][ T4902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.129955][ T4902] bridge_slave_1: left allmulticast mode [ 1178.141731][ T4902] bridge_slave_1: left promiscuous mode [ 1178.148682][ T4902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.195584][ T4902] bridge_slave_0: left allmulticast mode [ 1178.204400][ T4902] bridge_slave_0: left promiscuous mode [ 1178.210991][ T4902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.048364][ T4902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.073778][ T4902] bond_slave_0: left allmulticast mode [ 1179.133472][ T4902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.191025][ T4902] bond_slave_1: left allmulticast mode [ 1179.204396][ T4902] bond0 (unregistering): Released all slaves [ 1179.732887][T17836] gfs2: gfs2 mount does not exist [ 1179.929039][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1180.020182][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1180.106783][T16151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1180.123871][T16151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1180.458140][T17839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1180.474353][ T4902] hsr_slave_0: left promiscuous mode [ 1180.522027][T17839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1180.536642][ T4902] hsr_slave_1: left promiscuous mode [ 1180.569553][ T4902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.579091][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.597781][ T4902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.605640][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.677031][ T4902] veth1_macvtap: left promiscuous mode [ 1180.683758][ T4902] veth0_macvtap: left promiscuous mode [ 1180.690933][ T4902] veth1_vlan: left promiscuous mode [ 1180.696789][ T4902] veth0_vlan: left promiscuous mode [ 1181.950367][ T4902] team0 (unregistering): Port device team_slave_1 removed [ 1182.047831][ T4902] team0 (unregistering): Port device team_slave_0 removed [ 1182.790505][T17839] Bluetooth: hci2: command tx timeout [ 1182.925393][T17864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5040'. [ 1183.775835][T17837] chnl_net:caif_netlink_parms(): no params data found [ 1184.242073][T17878] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5044'. [ 1184.762757][ T29] audit: type=1326 audit(2000001080.865:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.786782][ T29] audit: type=1326 audit(2000001080.865:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.808975][ C0] vkms_vblank_simulate: vblank timer overrun [ 1184.817847][ T29] audit: type=1326 audit(2000001080.865:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.841586][ T29] audit: type=1326 audit(2000001080.865:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.865415][ T29] audit: type=1326 audit(2000001080.865:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.888279][ T29] audit: type=1326 audit(2000001080.865:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.910920][ T29] audit: type=1326 audit(2000001080.865:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.933187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1184.942874][ T29] audit: type=1326 audit(2000001080.865:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.966477][ T29] audit: type=1326 audit(2000001080.865:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1184.989781][ T29] audit: type=1326 audit(2000001080.865:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.5041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 1185.029818][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.039667][T17837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.047640][T17837] bridge_slave_0: entered allmulticast mode [ 1185.059566][T17837] bridge_slave_0: entered promiscuous mode [ 1185.077400][T17839] Bluetooth: hci2: command tx timeout [ 1185.116479][T17837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.127320][T17837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.128355][T17885] input: syz0 as /devices/virtual/input/input73 [ 1185.135227][T17837] bridge_slave_1: entered allmulticast mode [ 1185.155103][T17837] bridge_slave_1: entered promiscuous mode [ 1185.348076][T17837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.373072][T17837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.584946][T17892] loop4: detected capacity change from 0 to 1024 [ 1185.761327][T17837] team0: Port device team_slave_0 added [ 1185.779328][T17837] team0: Port device team_slave_1 added [ 1185.946958][T17837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.954723][T17837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.982445][T17837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.031049][T17837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.038530][T17837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.066079][T17837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.211898][T17837] hsr_slave_0: entered promiscuous mode [ 1186.232088][T17837] hsr_slave_1: entered promiscuous mode [ 1186.286233][T17837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.294327][T17837] Cannot create hsr debugfs directory [ 1186.778592][T17901] loop5: detected capacity change from 0 to 2048 [ 1186.940133][T17906] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1187.124991][T17901] NILFS (loop5): error -2 truncating bmap (ino=16) [ 1187.235527][T17839] Bluetooth: hci2: command tx timeout [ 1187.409563][T17837] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.496421][T17837] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.697093][T17837] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.847872][T17837] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.266191][T17837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1188.294728][T17837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1188.393044][T17837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1188.505306][T17837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1189.308413][T17932] loop8: detected capacity change from 0 to 16 [ 1189.390924][T17932] erofs (device loop8): mounted with root inode @ nid 36. [ 1189.431134][T17932] erofs (device loop8): invalid logical cluster 0 at nid 36 [ 1189.439335][T17932] syz.8.5067: attempt to access beyond end of device [ 1189.439335][T17932] loop8: rw=0, sector=131072, nr_sectors = 1 limit=16 [ 1189.459229][T17932] erofs (device loop8): read error -5 @ 0 of nid 36 [ 1189.565960][T17839] Bluetooth: hci2: command tx timeout [ 1190.194377][T17837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.246879][T17837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.416198][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.423998][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.445500][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.453271][ T4768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.524050][T17837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.995724][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1191.228265][T17939] atomic_op ffff888013db2928 conn xmit_atomic 0000000000000000 [ 1192.917555][T17837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.551748][T17837] veth0_vlan: entered promiscuous mode [ 1194.050504][T17950] loop5: detected capacity change from 0 to 4096 [ 1194.212330][T17951] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1194.475645][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5074'. [ 1194.491963][T17950] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1194.502052][T17950] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1194.573863][T17950] Remounting filesystem read-only [ 1194.579457][T17950] NILFS (loop5): error -5 truncating bmap (ino=12) [ 1195.008180][ T9153] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1195.031634][T17837] veth1_vlan: entered promiscuous mode [ 1195.477591][T17837] veth0_macvtap: entered promiscuous mode [ 1195.631428][T17837] veth1_macvtap: entered promiscuous mode [ 1195.930415][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.941377][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.954246][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.965096][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.975463][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.990676][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.001228][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.017897][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.028967][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.039834][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.058753][T17837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.540490][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.551568][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.569719][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.581902][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.594884][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.605666][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.615831][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.629273][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.643296][T17837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.660856][T17837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.679592][T17837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.958707][T17837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.967821][T17837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.977085][T17837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.992729][T17837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.658599][T17979] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1200.965150][ T29] audit: type=1326 audit(2000001096.019:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17991 comm="syz.8.5088" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x0 [ 1202.273828][T18005] loop7: detected capacity change from 0 to 256 [ 1203.146500][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1203.315961][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1203.467998][ T25] usb 9-1: config 0 has an invalid interface number: 246 but max is 0 [ 1203.476896][ T25] usb 9-1: config 0 has no interface number 0 [ 1203.515171][ T25] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1203.524826][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.537137][ T25] usb 9-1: Product: syz [ 1203.542003][ T25] usb 9-1: Manufacturer: syz [ 1203.546865][ T25] usb 9-1: SerialNumber: syz [ 1203.711365][ T25] usb 9-1: config 0 descriptor?? [ 1203.999937][T17839] Bluetooth: hci4: command 0x0406 tx timeout [ 1204.540709][T18022] loop5: detected capacity change from 0 to 256 [ 1204.717046][T18022] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1205.151176][ T29] audit: type=1800 audit(2000001099.872:1159): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5096" name="file1" dev="loop5" ino=1049034 res=0 errno=0 [ 1205.176541][T18022] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 1205.187168][T18022] exFAT-fs (loop5): Filesystem has been set read-only [ 1205.560430][ T25] msi2500 9-1:0.246: Registered as swradio24 [ 1205.566733][ T25] msi2500 9-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1205.585845][T17839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1205.593855][ T25] usb 9-1: USB disconnect, device number 2 [ 1205.606935][T17839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1205.621029][T17839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1205.669091][T17839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1205.685111][T17839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1205.694547][T17839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1207.130607][T18032] chnl_net:caif_netlink_parms(): no params data found [ 1207.357201][T12593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.367929][T12593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.541115][T12593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.550876][T12593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.841563][ T5047] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.935609][ T51] Bluetooth: hci5: command tx timeout [ 1208.189181][ T5047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.357161][ T5047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.372919][ T8] IPVS: starting estimator thread 0... [ 1208.467328][T18064] IPVS: using max 288 ests per chain, 14400 per kthread [ 1208.496374][T18063] vivid-007: disconnect [ 1208.505670][T18062] vivid-007: reconnect [ 1208.563925][ T5047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.827334][T18032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.838161][T18032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.847704][T18032] bridge_slave_0: entered allmulticast mode [ 1208.859917][T18032] bridge_slave_0: entered promiscuous mode [ 1208.984716][T18032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.992720][T18032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.000786][T18032] bridge_slave_1: entered allmulticast mode [ 1209.015396][T18032] bridge_slave_1: entered promiscuous mode [ 1209.124093][T18070] loop3: detected capacity change from 0 to 256 [ 1209.182213][T18070] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1209.271524][ T5047] bridge_slave_1: left allmulticast mode [ 1209.277455][ T5047] bridge_slave_1: left promiscuous mode [ 1209.284594][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.495387][ T5047] bridge_slave_0: left allmulticast mode [ 1209.501391][ T5047] bridge_slave_0: left promiscuous mode [ 1209.508282][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.314181][T18083] loop5: detected capacity change from 0 to 64 [ 1210.321157][ T51] Bluetooth: hci5: command tx timeout [ 1210.816385][ T5047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.880472][ T5047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.938628][ T5047] bond0 (unregistering): Released all slaves [ 1211.038556][T18032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.130825][T18032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.266159][ T5047] tipc: Left network mode [ 1211.740686][T18032] team0: Port device team_slave_0 added [ 1211.784711][T18032] team0: Port device team_slave_1 added [ 1212.266110][T18032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.273504][T18032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.303932][T18032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.343742][T18032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.351132][T18032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.380331][T18032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.519250][ T51] Bluetooth: hci5: command tx timeout [ 1212.893698][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5127'. [ 1213.554368][ T5047] hsr_slave_0: left promiscuous mode [ 1213.573548][ T5047] hsr_slave_1: left promiscuous mode [ 1213.582961][ T5047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.594573][ T5047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.610337][ T5047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.618574][ T5047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.664024][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5128'. [ 1213.713828][ T5047] veth1_macvtap: left promiscuous mode [ 1213.722720][ T5047] veth0_macvtap: left promiscuous mode [ 1213.728769][ T5047] veth1_vlan: left promiscuous mode [ 1213.734329][ T5047] veth0_vlan: left promiscuous mode [ 1214.697445][ T51] Bluetooth: hci5: command tx timeout [ 1214.853519][ T5047] team0 (unregistering): Port device team_slave_1 removed [ 1214.882223][ T5047] team0 (unregistering): Port device team_slave_0 removed [ 1215.312510][T18032] hsr_slave_0: entered promiscuous mode [ 1215.327164][T18032] hsr_slave_1: entered promiscuous mode [ 1215.339537][T18032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1215.348815][T18032] Cannot create hsr debugfs directory [ 1216.069185][T18134] loop5: detected capacity change from 0 to 512 [ 1216.209550][T18134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1216.222989][T18134] ext4 filesystem being mounted at /755/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.301373][T18140] netlink: 'syz.8.5141': attribute type 9 has an invalid length. [ 1216.501458][ T9153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.755315][T18145] loop8: detected capacity change from 0 to 64 [ 1216.957343][T18032] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1216.982451][T18032] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1217.041895][T18032] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1217.095966][T18032] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1217.861986][T18032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.916809][T18032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.107637][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.115455][ T5047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.132787][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.140555][ T5047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.252414][T18032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1218.265874][T18032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1218.801693][T18172] loop8: detected capacity change from 0 to 256 [ 1218.812325][T18170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5151'. [ 1219.022105][ T29] audit: type=1800 audit(2000001112.921:1160): pid=18172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5152" name="file1" dev="loop8" ino=1049041 res=0 errno=0 [ 1219.086912][T18177] hub 4-0:1.0: USB hub found [ 1219.109050][T18178] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1219.122936][T18177] hub 4-0:1.0: 1 port detected [ 1219.126899][T18178] FAT-fs (loop8): Filesystem has been set read-only [ 1219.130290][ T29] audit: type=1804 audit(2000001113.005:1161): pid=18178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5152" name="/newroot/90/file0/file1" dev="loop8" ino=1049041 res=1 errno=0 [ 1219.137950][T18178] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1219.159396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.180686][T18178] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1219.213350][T18179] usb usb4: usbfs: process 18179 (syz.5.5155) did not claim interface 0 before use [ 1219.234978][ T29] audit: type=1800 audit(2000001113.090:1162): pid=18178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5152" name="file1" dev="loop8" ino=1049041 res=0 errno=0 [ 1219.849795][T18184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1220.302878][T18191] netlink: 'syz.7.5160': attribute type 7 has an invalid length. [ 1220.311061][T18191] netlink: 15 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1220.322580][T18191] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1220.325178][T18032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.332131][T18191] netlink: 872 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1220.348145][T18191] netlink: 'syz.7.5160': attribute type 7 has an invalid length. [ 1220.356297][T18191] netlink: 15 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1220.697733][T18189] loop8: detected capacity change from 0 to 4096 [ 1222.453365][T18216] loop7: detected capacity change from 0 to 2048 [ 1222.530535][T18216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.687580][T18032] veth0_vlan: entered promiscuous mode [ 1222.792387][T18032] veth1_vlan: entered promiscuous mode [ 1222.912662][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1223.032757][T18032] veth0_macvtap: entered promiscuous mode [ 1223.061922][T18032] veth1_macvtap: entered promiscuous mode [ 1223.094065][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1223.106579][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1223.118335][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1223.134600][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1223.147502][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.174947][T16415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.201721][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.213207][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.226062][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.238531][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.249071][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.262904][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.277053][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.288671][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.301618][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.312507][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.330417][T18032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.373710][ T25] usb 4-1: config 0 descriptor?? [ 1223.447358][T18210] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1223.462158][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.474318][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.486147][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.500112][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.511611][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.523405][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.533603][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.544431][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.554723][T18032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.570517][T18032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.587615][T18032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.608498][T18032] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.617869][T18032] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.627072][T18032] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.636308][T18032] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.766771][ T25] hub 4-1:0.0: USB hub found [ 1224.038541][ T25] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 1224.292904][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 1224.299777][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1224.369203][ T25] usb 4-1: USB disconnect, device number 29 [ 1225.491311][T18252] loop7: detected capacity change from 0 to 512 [ 1225.609475][T18252] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1225.790702][T18261] loop5: detected capacity change from 0 to 1024 [ 1225.909653][T18259] loop3: detected capacity change from 0 to 2048 [ 1225.953210][T18252] EXT4-fs (loop7): 1 truncate cleaned up [ 1225.961195][T18252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.045219][T18259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1226.097714][T16415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.605353][T18268] loop7: detected capacity change from 0 to 256 [ 1226.816124][T18268] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1226.900694][ T29] audit: type=1800 audit(2000001120.274:1163): pid=18268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5184" name="file1" dev="loop7" ino=1049042 res=0 errno=0 [ 1226.970025][T18276] loop5: detected capacity change from 0 to 128 [ 1227.016740][T18268] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 1227.025470][T18268] exFAT-fs (loop7): Filesystem has been set read-only [ 1227.306586][T18276] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1227.347961][T18276] ext4 filesystem being mounted at /769/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1227.380267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.633590][T18277] ===================================================== [ 1227.641080][T18277] BUG: KMSAN: uninit-value in ima_add_template_entry+0x52b/0x880 [ 1227.651857][T18277] ima_add_template_entry+0x52b/0x880 [ 1227.658410][T18277] ima_store_measurement+0x36b/0x8d0 [ 1227.668914][T18277] process_measurement+0x2c13/0x3f30 [ 1227.674442][T18277] ima_file_check+0x8e/0xd0 [ 1227.679426][T18277] security_file_post_open+0xc6/0x540 [ 1227.685000][T18277] path_openat+0x58cc/0x6200 [ 1227.690394][T18277] do_filp_open+0x268/0x600 [ 1227.695655][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.703351][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.709309][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.714268][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.719600][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.724943][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.729627][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.739920][T18277] [ 1227.744278][T18277] [ 1227.744278][T18277] [ 1227.753485][T18277] Uninit was stored to memory at: [ 1227.761637][T18277] sha256_transform_blocks+0x2dbf/0x2e90 [ 1227.771157][T18277] sha256_update+0x2ff/0x340 [ 1227.771303][T18277] crypto_sha256_update+0x37/0x60 [ 1227.771450][T18277] crypto_shash_update+0x79/0xa0 [ 1227.771593][T18277] ima_calc_file_hash+0x1804/0x3c90 [ 1227.771733][T18277] ima_collect_measurement+0x464/0xd20 [ 1227.771890][T18277] process_measurement+0x294a/0x3f30 [ 1227.772043][T18277] ima_file_check+0x8e/0xd0 [ 1227.772166][T18277] security_file_post_open+0xc6/0x540 [ 1227.772300][T18277] path_openat+0x58cc/0x6200 [ 1227.772429][T18277] do_filp_open+0x268/0x600 [ 1227.772559][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.772669][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.772799][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.772908][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.773043][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.773143][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.773241][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.775460][T18277] [ 1227.775490][T18277] Uninit was stored to memory at: [ 1227.775687][T18277] sha256_transform_blocks+0x2dbf/0x2e90 [ 1227.775841][T18277] sha256_update+0x2ff/0x340 [ 1227.775966][T18277] crypto_sha256_update+0x37/0x60 [ 1227.776110][T18277] crypto_shash_update+0x79/0xa0 [ 1227.776247][T18277] ima_calc_file_hash+0x1804/0x3c90 [ 1227.914455][T18277] ima_collect_measurement+0x464/0xd20 [ 1227.920169][T18277] process_measurement+0x294a/0x3f30 [ 1227.928443][T18277] ima_file_check+0x8e/0xd0 [ 1227.933197][T18277] security_file_post_open+0xc6/0x540 [ 1227.938969][T18277] path_openat+0x58cc/0x6200 [ 1227.944999][T18277] do_filp_open+0x268/0x600 [ 1227.945141][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.945251][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.945376][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.945480][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.945593][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.945693][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.945791][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.945957][T18277] [ 1227.945980][T18277] Uninit was stored to memory at: [ 1227.946172][T18277] sha256_transform_blocks+0xf33/0x2e90 [ 1227.946306][T18277] sha256_update+0x2ff/0x340 [ 1227.946430][T18277] crypto_sha256_update+0x37/0x60 [ 1227.946580][T18277] crypto_shash_update+0x79/0xa0 [ 1227.946721][T18277] ima_calc_file_hash+0x1804/0x3c90 [ 1227.946859][T18277] ima_collect_measurement+0x464/0xd20 [ 1227.947005][T18277] process_measurement+0x294a/0x3f30 [ 1227.947139][T18277] ima_file_check+0x8e/0xd0 [ 1227.947262][T18277] security_file_post_open+0xc6/0x540 [ 1227.947391][T18277] path_openat+0x58cc/0x6200 [ 1227.947522][T18277] do_filp_open+0x268/0x600 [ 1227.947647][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.947754][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.947876][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.947978][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.948079][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.948177][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.948272][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.948434][T18277] [ 1227.948456][T18277] Uninit was stored to memory at: [ 1227.948644][T18277] sha256_transform_blocks+0xf7d/0x2e90 [ 1227.948774][T18277] sha256_update+0x2ff/0x340 [ 1227.948893][T18277] crypto_sha256_update+0x37/0x60 [ 1227.949024][T18277] crypto_shash_update+0x79/0xa0 [ 1227.949159][T18277] ima_calc_file_hash+0x1804/0x3c90 [ 1227.949292][T18277] ima_collect_measurement+0x464/0xd20 [ 1227.949436][T18277] process_measurement+0x294a/0x3f30 [ 1227.949581][T18277] ima_file_check+0x8e/0xd0 [ 1227.949702][T18277] security_file_post_open+0xc6/0x540 [ 1227.949833][T18277] path_openat+0x58cc/0x6200 [ 1227.949962][T18277] do_filp_open+0x268/0x600 [ 1227.950086][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.950190][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.950312][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.950414][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.950524][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.950623][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.950720][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.950887][T18277] [ 1227.950909][T18277] Uninit was stored to memory at: [ 1227.951096][T18277] sha256_transform_blocks+0xfb5/0x2e90 [ 1227.951234][T18277] sha256_update+0x2ff/0x340 [ 1227.951359][T18277] crypto_sha256_update+0x37/0x60 [ 1227.951498][T18277] crypto_shash_update+0x79/0xa0 [ 1227.951645][T18277] ima_calc_file_hash+0x1804/0x3c90 [ 1227.951783][T18277] ima_collect_measurement+0x464/0xd20 [ 1227.951928][T18277] process_measurement+0x294a/0x3f30 [ 1227.952065][T18277] ima_file_check+0x8e/0xd0 [ 1227.952188][T18277] security_file_post_open+0xc6/0x540 [ 1227.952318][T18277] path_openat+0x58cc/0x6200 [ 1227.952442][T18277] do_filp_open+0x268/0x600 [ 1227.952571][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.952675][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.952798][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.952901][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.953002][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.953102][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.953198][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.953357][T18277] [ 1227.953377][T18277] Uninit was stored to memory at: [ 1227.953568][T18277] sha256_transform_blocks+0x2c35/0x2e90 [ 1227.953706][T18277] sha256_update+0x2ff/0x340 [ 1227.953827][T18277] crypto_sha256_update+0x37/0x60 [ 1227.953965][T18277] crypto_shash_update+0x79/0xa0 [ 1227.954103][T18277] ima_calc_file_hash+0x1804/0x3c90 [ 1227.954239][T18277] ima_collect_measurement+0x464/0xd20 [ 1227.954891][T18277] process_measurement+0x294a/0x3f30 [ 1227.957781][T18277] ima_file_check+0x8e/0xd0 [ 1227.957911][T18277] security_file_post_open+0xc6/0x540 [ 1227.958045][T18277] path_openat+0x58cc/0x6200 [ 1227.958171][T18277] do_filp_open+0x268/0x600 [ 1227.958297][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.958406][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.958535][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.958639][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.958744][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.958842][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.958939][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.959100][T18277] [ 1227.959125][T18277] Uninit was stored to memory at: [ 1227.959344][T18277] _copy_to_iter+0x1248/0x2b30 [ 1227.959458][T18277] copy_page_to_iter+0x419/0x880 [ 1227.959585][T18277] filemap_read+0xc65/0x1560 [ 1227.959705][T18277] generic_file_read_iter+0x136/0xad0 [ 1227.959838][T18277] __kernel_read+0x726/0xd30 [ 1227.959962][T18277] integrity_kernel_read+0x77/0x90 [ 1227.960078][T18277] ima_calc_file_hash+0x1731/0x3c90 [ 1227.960213][T18277] ima_collect_measurement+0x464/0xd20 [ 1227.960359][T18277] process_measurement+0x294a/0x3f30 [ 1227.960494][T18277] ima_file_check+0x8e/0xd0 [ 1227.960620][T18277] security_file_post_open+0xc6/0x540 [ 1227.960747][T18277] path_openat+0x58cc/0x6200 [ 1227.960873][T18277] do_filp_open+0x268/0x600 [ 1227.960998][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1227.961102][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1227.961219][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1227.961315][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.961414][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.961515][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.961614][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.961781][T18277] [ 1227.961806][T18277] Uninit was created at: [ 1227.961956][T18277] __alloc_pages_noprof+0x9a7/0xe00 [ 1227.962067][T18277] alloc_pages_mpol_noprof+0x299/0x990 [ 1227.962183][T18277] folio_alloc_noprof+0x1db/0x310 [ 1227.962293][T18277] filemap_alloc_folio_noprof+0xa6/0x440 [ 1227.962416][T18277] __filemap_get_folio+0xac4/0x1550 [ 1227.962549][T18277] block_write_begin+0x6e/0x2b0 [ 1227.962704][T18277] exfat_write_begin+0xfb/0x400 [ 1227.962816][T18277] exfat_file_write_iter+0x771/0x12a0 [ 1227.962922][T18277] do_iter_readv_writev+0x88a/0xa30 [ 1227.963067][T18277] vfs_writev+0x56a/0x14f0 [ 1227.963173][T18277] __se_compat_sys_pwritev2+0x282/0x480 [ 1227.963280][T18277] __ia32_compat_sys_pwritev2+0x11d/0x1a0 [ 1227.963393][T18277] ia32_sys_call+0x3587/0x4180 [ 1227.963491][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1227.963622][T18277] do_fast_syscall_32+0x38/0x80 [ 1227.963720][T18277] do_SYSENTER_32+0x1f/0x30 [ 1227.963815][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.963980][T18277] [ 1227.964023][T18277] CPU: 1 UID: 0 PID: 18277 Comm: syz.7.5184 Tainted: G W 6.13.0-rc4-syzkaller #0 [ 1227.964157][T18277] Tainted: [W]=WARN [ 1227.964198][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1227.964259][T18277] ===================================================== [ 1227.964294][T18277] Disabling lock debugging due to kernel taint [ 1227.964347][T18277] Kernel panic - not syncing: kmsan.panic set ... [ 1227.964406][T18277] CPU: 1 UID: 0 PID: 18277 Comm: syz.7.5184 Tainted: G B W 6.13.0-rc4-syzkaller #0 [ 1227.964560][T18277] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1227.964602][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1227.964665][T18277] Call Trace: [ 1227.964703][T18277] [ 1227.964739][T18277] dump_stack_lvl+0x216/0x2d0 [ 1227.964882][T18277] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1227.965001][T18277] dump_stack+0x1e/0x24 [ 1227.965133][T18277] panic+0x4e2/0xcf0 [ 1227.965258][T18277] ? kmsan_get_metadata+0x71/0x1c0 [ 1227.965383][T18277] kmsan_report+0x2c7/0x2d0 [ 1227.965481][T18277] ? crypto_shash_final+0x72/0xa0 [ 1227.965641][T18277] ? ima_calc_field_array_hash_tfm+0x7d8/0x810 [ 1227.965804][T18277] ? __msan_warning+0x95/0x120 [ 1227.965947][T18277] ? ima_add_template_entry+0x52b/0x880 [ 1227.966082][T18277] ? ima_store_measurement+0x36b/0x8d0 [ 1227.966230][T18277] ? process_measurement+0x2c13/0x3f30 [ 1227.966371][T18277] ? ima_file_check+0x8e/0xd0 [ 1227.966498][T18277] ? security_file_post_open+0xc6/0x540 [ 1227.966640][T18277] ? path_openat+0x58cc/0x6200 [ 1227.966770][T18277] ? do_filp_open+0x268/0x600 [ 1227.966902][T18277] ? do_sys_openat2+0x1bf/0x2f0 [ 1227.967022][T18277] ? __ia32_compat_sys_openat+0x298/0x300 [ 1227.967149][T18277] ? ia32_sys_call+0x2fb4/0x4180 [ 1227.967255][T18277] ? __do_fast_syscall_32+0xb0/0x110 [ 1227.967363][T18277] ? do_fast_syscall_32+0x38/0x80 [ 1227.967467][T18277] ? do_SYSENTER_32+0x1f/0x30 [ 1227.967575][T18277] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.967751][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1227.967858][T18277] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1227.967972][T18277] ? ima_add_template_entry+0x9b/0x880 [ 1227.968110][T18277] ? filter_irq_stacks+0x60/0x1a0 [ 1227.968248][T18277] ? stack_depot_save_flags+0x2c/0x750 [ 1227.968382][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1227.968490][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1227.968602][T18277] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1227.968726][T18277] __msan_warning+0x95/0x120 [ 1227.968871][T18277] ima_add_template_entry+0x52b/0x880 [ 1227.969025][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1227.969125][T18277] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1227.969240][T18277] ima_store_measurement+0x36b/0x8d0 [ 1227.969419][T18277] process_measurement+0x2c13/0x3f30 [ 1228.881507][T18277] ? filter_irq_stacks+0x60/0x1a0 [ 1228.886763][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1228.892169][T18277] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1228.898197][T18277] ? end_current_label_crit_section+0x124/0x2a0 [ 1228.904701][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1228.910106][T18277] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1228.916132][T18277] ima_file_check+0x8e/0xd0 [ 1228.920868][T18277] security_file_post_open+0xc6/0x540 [ 1228.926471][T18277] path_openat+0x58cc/0x6200 [ 1228.931304][T18277] ? filter_irq_stacks+0x164/0x1a0 [ 1228.936645][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1228.942046][T18277] ? kmsan_get_metadata+0x13e/0x1c0 [ 1228.947455][T18277] do_filp_open+0x268/0x600 [ 1228.952213][T18277] do_sys_openat2+0x1bf/0x2f0 [ 1228.957106][T18277] __ia32_compat_sys_openat+0x298/0x300 [ 1228.962901][T18277] ia32_sys_call+0x2fb4/0x4180 [ 1228.967868][T18277] __do_fast_syscall_32+0xb0/0x110 [ 1228.973181][T18277] ? switch_fpu_return+0x17/0x20 [ 1228.978311][T18277] do_fast_syscall_32+0x38/0x80 [ 1228.983439][T18277] do_SYSENTER_32+0x1f/0x30 [ 1228.988136][T18277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1228.994764][T18277] RIP: 0023:0xf710d579 [ 1228.998995][T18277] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1229.018839][T18277] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1229.027475][T18277] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 1229.035636][T18277] RDX: 0000000000000242 RSI: 00000000000000b5 RDI: 0000000000000000 [ 1229.043771][T18277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1229.051914][T18277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1229.060054][T18277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1229.068206][T18277] [ 1229.071656][T18277] Kernel Offset: disabled [ 1229.076046][T18277] Rebooting in 86400 seconds..