last executing test programs: 2m1.914797292s ago: executing program 1 (id=356): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@mblk_io_submit}, {@abort}, {@nodiscard}, {@noinit_itable}]}, 0x64, 0x51a, &(0x7f00000007c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 2m0.18341407s ago: executing program 1 (id=363): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='discard,errors=remount-ro,zero_size_dir,keep_last_dots,iocharset=macromanian,time_offset=0x0000000000000000,dmask=00000000000000000000001,allow_utime=00000000000000000002000,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c666d61736b3d30303030303030303030303030303030303030303030302c74696d655f6f66667365743d307830303030303030303030c8373bb2c08a7857603030303030622c6f626a5f726f6c653d6163746976655f6c6f67733d342c646566636f6e746578743d726f6f742c6d6561737572652c66756e633d4b455845435f494e495452414d46535f434845434b2c646f6e745f686173682c7063720830303030303030303030303030303030303033382c00"], 0xfc, 0x1557, &(0x7f0000004a40)="$eJzs3AmYjtX7OPD7Puc8Y0h6m2QZzjn3w5sshyTJkiRLkiRJki0hSfKVhMSQLWkIIdnJHpItJo1935eEJkmTJNmyJed/DeanvtW/fr/6/VzXd+7Pdb2Xcz/Pc5/nfud+l+c9453vOgysUq9qxTpEBH8LXv4nAQBiAaAvANwAAAEAlIwrGZe2P7PEhL93EvbPemzata6AXUvc/4yN+5+xcf8zNu5/xsb9z9i4/xkb9z9j4/4zlpFtmZ77Rr5l3Buv/2dk/P7/HyS16Kiv1hW9uSNAzF9N4f5nbNz//1jBXzmI+5+xcf8zqthrXQD7J83+n6Xx8z8jyPSHe7j/GRv3n7GM7NI6cGa45uvQ1+oGkYz9O5Br/fhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYxnPVXKQBIH1/ruhhjjDHGGGOMMfbP8ZmudQWMMcYYY4wxxhj734cgQIKCAGIgE8RCZsgCAgCuh2xwA0TgRoiDmyA73Aw5ICfkgtwQD3kgL2gwYIEghHyQH6JwCxSAW6EgFILCUAQcFIVicBsUh9uhBNwBJeFOKAV3QWkoA2WhHNwN5eEeqAD3QkW4DypBZagCVeF+qAYPIB4BqAEPQU14GGrBI1AbHoU68BjUhcehHjwB9eFJaAANoRE0hia/zYfq8GB6fszv578CXeBV6ArdIAG6Qw94DXpCL+gNfaAvvA794A3oD29CIgyAgfAWDILBMATehqEwDIbDOzAC3oWRMApGwxgYC+NgPEyAifAeTILJMAWmwjSYDjPgfZgJs2A2fABz4EOYC/NgPiyAhfARLILFkAQfwxL4BJJhKSyD5bACVsIqWA1rYC2sg/U/9YSNsAk2wxbYCttgO+yAnbALPoXd8Bnsgb2D5wFACnzxB/niSm//Pf9Mej7sg88hBToiIKBAgQoVxmAMxmIsZsEsAWBWzIbZMIIRjMM4zI7ZMQfmwFyYC+MxHvNiXjRokJAwH+bDKEaxABbAglgQC2NhdOiwGBbD4ng7lsASWBJLYikshaWxDJbBclgOy2N5rIAVsCJWxEpYCatgFbwf78fuWB2rYw2sgTWxZvryFNbBOlgX62I9rIf1sT42wAbYCBthE2yCTbEpNsNm2AJbYEtsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yEnVJfyQT4Kr6K3bCS6I49sAf2xMRMvbEP9sHXsR++gW/gm5iIA3AgvoVv4WAckhlwKA7D4Tg8Nq2ekTgKSYzBsTgWx+N4nIgTcRJOxsk4FafhdJyBM3AmzsJZ+AHOwQ/xQ5yH83ABLsSFuAgXYxIm4RI8g8m4FJfhclyBK3EFrsY1uBrX4XpchxtxI27GzbgVt+J23I47cSd+igoAP8O9uBcTMQVTcD/uxwN4AA/iQUzFVDyEh/AwHs4KeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4Uvw3dT8ttDYRRBollIgRMSJWxIosIovIKrKKbCKbiIiIiBNxIrvILnKIHCKXyCXiRbzIK/IKI4wgEcYAgIiKqCggCoiCoqAoLAoLJ5woJoqJ4qK4KCFKiJLiTlFK3CVKizKiuSsnyonyooWrIO4VFUVFUUlUFlVEVVFVVBPVRHVRXdQQNURNUVPUEo+I2qI79sbHRFpn6okBWF8MxAaioZCXHxsKxBBsJpqLFuIZMQyHYivR1LUWz4s2YiS2Ff8So/BF0V6MwQ7iZdFRdBKdxSuii2jmuopuYhJ2Fz3EVOwpeoneoo+YiZXFBzgncxXxpkgUA8RA8ZZYgIPFEPG2GCqGieHiHTFCvCtGilFitBgjxopxYryYICaK98QkMVlMEVPFNDFdzBDvi5lilpgtPhBzxIdirpgn5osFYqH4SCwSi0WS+FgsEZ+IZLFULBPLxQqxUqwSq8UasVasE+vFBrFRbBKbxRaxVWwT28UOsVPsEp+K3eIzsUfsFfvE5yJFfCH2iy/FAfGVOCi+FqniG3FIfCsOi+/EEfG9OCp+EMfEcXFCnBSnxI/itDgjzopz4rz4SVwQP4uLwguQKIWUUslAxshMMlZmllnkdTKrDK68htwo4+RNMru8WeaQOWUumVvGyzwyr9TSSCtJhjKfzC+j8hZZQN4qC8pCsrAsIp0sKovJ22RxebssIe+QJeWdspS8S5aWZWRZWU7eLcvLeyRELp+jkqwsq8iq8n6ZAA/I6vJBWUM+JGvKh2Ut+YisLR+VdeRjsq58XNaTT8j68knZQDaUjWRj2UQ+JZvKp2Uz2Vy2kM/IlvJZ2Uo+J1vL52Ub6a88RGIB5Euyg3xZdpSdZGf5s7wovewqu0noDrKHfE32lL1kb9lH9pWvy37yDdlfvikT5QA5UL4lB8nBcoh8Ww6Vw+Rw+Y4cId+VI+UoOVqOkWPlODleTpAT5Xtykpwsp8ipcpqcLntfmWm2lH+aP+F38vtfOvtmuUVuldvkdrlD7pS7ZNpLz265R+6R++Q+mSJT5H65Xx6QB+RBeVCmylR5SB6Sh+VheUQekUflUXlMHpfn5El5Sv4oT8sz8ow8J8/L8/LClZ8BKFRCSaVUoGJUJhWrMqss6jqVVV2vsqkbVETdqOLUTSq7ulnlUDlVLpVbxas8Kq/SyiirSIUqn8qvouoWvPKAUYVVEeVUUVVM3fbfyVcF1K2qoCr0q/z0+hL+oL4mqolqqpqqZqqZaqFaqJaqpWqlWqnWqrVqo9qotqqtaqfaqfaqveqgOqiOqqPqrDqrLqqL6qq6qgSVoHqo11RP1Uv1Vn1UX/W66qf6qf6qv0pUiWqgGqgGqUFqiBqihqqhargarkaoEWqkGqlGq9FqrBqrxqvxaqKaqCapSWqKmqKmqWlqhpqhZqqZaraareaoOWqumqvmq/lqoVqoFqlFKkklqSVqiUpWS9VStVwtVyvVSrVarVZr1Vq1Xq1XG9VGlay2qC1qm9qmdqgdapfapXar3WqP2qP2qX0qRaWo/Wq/OqAOqIPqoEpVqeqQOqQOq8PqiDqijqqj6pg6pk6oE+qUOqVOq9PqrDqrzqvz6oK6oC6qi2mXfYEIRKACFcQEMUFsEBtkCbIEWYOsQbYgWxAJIkFcEBdkD24OcgQ5g1xB7iA+yBPkDXRgAhukX2lEg1uCAsGtQcGgUFA4KBK4oGhQLObKzuCOoGRwZ1AquCsoHZQJygblgruD8sE9QYXg3qBicF9QKagcVAmqBvcH1YIHgurBg0GN4KGgZvBwUCt4JKgdPBrUCR4L6gaPB/WCJ4L6wZNBg6Bh0ChoHDQJbg9K/GPze38659Ouq+6mE3R33UO/pnvqXrq37qP76td1P/2G7q/f1Il6gB6o39KD9GA9RL+th+pherh+R4/Q7+qRepQercfosXqcHq8n6In6PT1JT9ZT9FQ9TU/XM/T7eqaepWfrD/Qc/aGeq+fp+XqBXqg/0ov0Yp2kP9Zp1zzJeqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x16p96lP9W79Wd6j96r9+nPdYr+Qu/XX+oD+it9UH+tU/U3+pD+Vh/W3+kj+nt9VP+gj+nj+oQ+qU/pH/VpfUaf1ef0ef2TvqB/1he1T7u4T3t7N8ooE2NiTKyJNVlMFpPVZDXZTDYTMRETZ+JMdpPd5DA5TC6Ty8SbeJPX5DVpyJDJZ/KZqImaAqaAKWgKmsKmsHHGmWKmmCluipsSpoQpaUqaUqaUKW1Km7KmrLnb3G3uMfeYe8295j5zn6lsKpuqpqqpZqqZ6qa6qWFqmJqmpqllapnaprapY+qYuqauqWfqmfqmvmlgGphGppFpYpqYpqapaWaamRamhWlpWppWppVpbVqbNqaNaWvamnamnWlv2psOpoPpaDqazqaz6WK6mK6mq0kwCaaH6WF6mp6mt+lt+pq+pp/pZ/qb/ibRJJqBZqAZZAaZIWaIGWqGmeFpTTPvmpFmVPobpxlvxpuJZqKZZCaZKWaKmWammRlmhvF+ppltZps5Zo6Za+aa+Wa+WWgWmkVmkUkySWaJWWKSTbJZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9skmD1mn9lnUkyK2W/2mwPmgDloDppUk2oOmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJeeX90ptYm9lmsdfZrPZ6m83eYP89zmVz23ibx+a12uawOX8VG2ttQVvIFrZFrLNFbTF722/i0raMLWvL2btteXuPrfCbuJp9wFa3D9oa9iFb1d7/q7imfdjWsk/Y2ogAtqGtaxvbevYJW98+aRvYhraRbWxb2mdtK/ucbW2ft23sC7+JF9nFdo1da9fZ9XaP3WvP2nP2sP3Onrc/2a62m+1rX7f97Bu2v33TJtoBl+IrPxxIi4fbd+wI+64daUfZ0XbMb+IpdqqdZqfbGfZ9O9PO+k280H5k59gkO9fOs/PtgktxWk1J9mO7xH5ik20Ay+xyu8KutKvs6v+qdbndaDfZzXa3/cxus9vtDrvT7kovzO61++znNsV+YQ/Zb+0B+5U9aI/YVPvNpTjt/h2x39uj9gd7zB63J+xJe8r+qNKz0+77SfuzvWi9BUICkqQooBjKRLGUmbLQdZSVrqdsdANF6EaKo5soO91MOSgn5aLcFE95KC9pMmSJKKR8lJ+idAull1eYipCjolSMbqPidDuVoDuoJN1JpeguKk1lqCyVo7upPN1DFeheqkj3USWqTFWoKt1P1egBqk4PUg16iGrSw1SLHqHa9CjVoceoLj1O9egJqk9PUgNqSI2oMTWhp6gpPU3NqDm1oGeoJT1Lreg5ak3PUxt6gdrSv6gdvUjt6SXqQC9TR+pEnekV6kKvUlfqRgnUnXrQa9STFPSmPtSXXqd+9Ab1pzcpkQbQQHqLBtFgGkJv01AaRsPpHRpB79JIGkWjaQyNpXE0nibQRHqPJtFkmkJTaRpNpxn0Ps2kWTSbPqA59CHNpXk0nxbQQvqIFtFiSqKPaQl9Qsm0lJbRclpBK2kVraY1tJbW0XraQBtpE22mLbSVttF22kE7aRd9SrvpM9pDe2kffU4p9AXtpy/pAH1FB+lrSqVv6BB9S4fpOzpC3/tu9AMdo+N0gk7SKfqRTtMZOkvn6Dz9RBfoZ7pIniDEUIQyVGEQxoSZwtgwc5glvC7MGl4fZgtvCCPhjWFceFOYPbw5zBHmDHOFucP4ME+YN9ShCW1IYRjmC/OH0fCWsEB4a1gwLBQWDouELiwaFgtvC4uHt4clwjvCkuGdYanwrrB0WCZ84qFy4d1h+fCesEJ4b1gxvC+sFFYOq4RVw/vDauEDYRA+GNYIHwpLhA+HtcJHwtrho2Gd8LGwbvh4WC98IqwfPhk2CBuGjcLGYZPwqbBp+HTYLGwetgifCVuGz4atwufC1uHzYZvwhUv7H178x/sTwu5hj/C18LXQ+wfl/OiC6MLoR9FF0cXRpOjH0SXRT6LJ0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHNUe+rZgKHTjjplAtcjMvkYl1ml8Vd57K66102d4OLuBtdnLvJZXc3uxwup8vlcrt4l8flddoZZx250OVz+V3U3eIKuFtdQVfIFXZFnHNFXTHX2DVxTVxT97Rr5pq7Fu4Z94x71j3rnnPPueddG/eCa+v+5dq5F11795J7yb3sOrpOrrN7xXVx47Jdfk4muB6uh+vperrerrfr6/q6fq6f6+/6u0SX6Aa6gW6QG+SGuCFuqBvqhrvhboQb4Ua6kW60G+3GurFuvBvvJrqJbpKb5Ka4KW6am+ZmuBluppvpys+6fJa5bq6b7+a7hW6hW+TSrhmT3BK3xCW7ZLfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt8vtcrvdbrfH33B5Upfi9rv97oA74A66r12q+8Ydct+6w+47d8R97466H9wxd9ydcCfdKfejO+3OuLPunDvvfnIX3M/uovNubGRcZHxkQmRi5L3IpMjkyJTI1Mi0yPTIjMj7kZmRWZHZkQ8icyIfRuZG5kXmRxZEFkY+iiyKLI4kRT6OLIl8EkmOLI0siyyPrIisjHifZ1vo8/n8Pupv8QX8rb6gL+QL+yLe+aK+mL/NF/e3+xL+Dl/S3+lL+bt8aV/Gl/VP+ga+oW/kG/sm/inf1D/tm/nmvoV/xrf0z/pW/jnf2j/v2/gXfFv/L9/Ov+jb+5d8B/+y7+g7+c7+Fd/Fv+q7+m4+wXf3Pfxrvqfv5Xv7Pr6vf93382/4/v5Nn+gH+IH+LT/ID/ZD/Nt+qB/mh8e840ekf0SGMX6sH+fH+wl+on/PT/KT/RQ/1U/z0/0M/76f6Wf52f4DP8d/6Of6eX6+X+AX+o/8Ir/YJ/mP/RL/iU/2S9MXlf0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9Lv+p3+0/83v8Xr/Pf+5T/Bd+v//S3zr4K3/Qf+1T/Tf+kP/WH/bf+SP+e3/U/+CP+eP+hD/pT/kf/Wl/xp/15/x5/5O/4H/2F/k7a4wxxhhjf8m4q0Px6z2Xl/O7/06O+MXBPQDg+u25U3+5P+2KckOOy+NeIr5lBACe79bhsfRbpUoJCQlXjk2WEOSfB5D+m6A0l5aNr8RLoQU8C62hORT/3fp7iU7n6U/mj94JkOUXObFwNb46/5cAmPA78z/1zPBFpcKzcf+f+ecBFMx/NSczXI2XQotL6yvNocQf1J+z6Z/Un/mrsQDNfpGTFa7GV+svBk/DC9D6V0cyxhhjjDHGGGOX9RJl26V//kz/jyu/9/k8Xl3NyQRX4z/7fM4YY4wxxhhjjLFr78VOnZ97Kv2be0+1bt283aUtf2VQ4b9z8F8aXP/LLfXhH5yZB38+yAQA6VsUAPzNCQHSBvL/8l5s/T85V+KVZ8u/71pxzgfQucCVLz3+cyeN/fu9+MuDGPivLdfqFYkxxhhjjDH2v+Xq1f+vt6trVRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYB/cU/DDYB/sbfFbvW95ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi71v5fAAAA//8dC+YX") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x8880, 0x85) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x1) 1m58.907478459s ago: executing program 1 (id=369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000300)="7800000018002507b9409b02ffff48000203be04020406050a08040c5c000900580004020a0000000d0085a168d0bf46d32345653600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f3250", 0x78, 0x0, 0x0, 0x0) 1m58.143727942s ago: executing program 1 (id=374): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m57.455136542s ago: executing program 1 (id=380): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af25, &(0x7f0000000080)) 1m56.917022888s ago: executing program 1 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x24, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x22, &(0x7f0000000500)={0x0, 0x0}}, 0x27) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) 1m55.792802351s ago: executing program 32 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x24, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x22, &(0x7f0000000500)={0x0, 0x0}}, 0x27) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) 1m10.751119324s ago: executing program 0 (id=590): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004"], 0x48) 1m9.366903017s ago: executing program 0 (id=598): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m8.404127538s ago: executing program 0 (id=603): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x0, @loopback, 0x9}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000002c0)="5665702f5e5648f3dab42167388ebf5ed679d647b515d24e4890314545f81e011fdeed7d3695847f", 0x28}], 0x1}, 0x80090) 1m7.944783731s ago: executing program 0 (id=605): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000001e80)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES16], 0x4, 0x345, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(0x0, 0x2ab) 1m7.090142164s ago: executing program 0 (id=609): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r1, 0x80079a0) splice(r1, 0x0, r0, 0x0, 0x800000020200, 0x4) 1m6.094397233s ago: executing program 0 (id=613): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '~'}]}}}}}}}}, 0x0) 1m3.867369405s ago: executing program 33 (id=613): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '~'}]}}}}}}}}, 0x0) 4.943244645s ago: executing program 3 (id=898): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4008810) 4.537781852s ago: executing program 3 (id=902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) 3.269522316s ago: executing program 3 (id=911): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.967043776s ago: executing program 2 (id=912): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 2.433342401s ago: executing program 3 (id=914): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x6) 2.422478098s ago: executing program 5 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280050009"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) 2.408073668s ago: executing program 6 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x28, 0x2, 0x28, &(0x7f0000000040)) 2.080526943s ago: executing program 4 (id=917): r0 = getpgid(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 2.049059439s ago: executing program 2 (id=918): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.904342276s ago: executing program 5 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0x0, 0x0) 1.900493846s ago: executing program 6 (id=920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.739410968s ago: executing program 4 (id=921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, 0x0) 1.706417171s ago: executing program 5 (id=922): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x102b, &(0x7f00000005c0)=ANY=[@ANYRESOCT], 0x0) 1.576656783s ago: executing program 2 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.359901803s ago: executing program 4 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) 1.346276092s ago: executing program 6 (id=925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x80000001, 0x80000001}, 0x10) 1.320905589s ago: executing program 3 (id=926): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0) 1.216661263s ago: executing program 5 (id=927): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x12000001f}) pselect6(0x40, &(0x7f0000000100)={0x3, 0x80000000, 0x5, 0xfff, 0x6, 0x1ff, 0x0, 0xa}, &(0x7f0000000140)={0x9, 0x6, 0x0, 0x100, 0xcf9, 0x0, 0x4, 0x7}, 0x0, 0x0, 0x0) 975.538336ms ago: executing program 2 (id=928): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 975.09636ms ago: executing program 4 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 960.353664ms ago: executing program 6 (id=930): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000340)=r0, 0x1) 798.261993ms ago: executing program 3 (id=931): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc0041, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$TCSBRKP(r0, 0x5425, 0x5) 715.096946ms ago: executing program 5 (id=932): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x1) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 551.995594ms ago: executing program 4 (id=933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000140)=0x40) 540.118449ms ago: executing program 2 (id=934): r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file4\x00'}, 0x6e) ioctl$sock_proto_private(r0, 0x89e0, 0x0) 519.915503ms ago: executing program 6 (id=935): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) 331.452335ms ago: executing program 5 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 202.282061ms ago: executing program 2 (id=937): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) 158.190364ms ago: executing program 4 (id=938): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) 0s ago: executing program 6 (id=939): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1b) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x800, r0, 0x0, 0x0, 0x3, 0x0, 0x1, r2}]) kernel console output (not intermixed with test programs): im1: renamed from eth1 [ 178.982834][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.038217][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.185439][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.210042][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.256454][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.276186][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.308244][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.329741][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.363216][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.419466][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.615589][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.647037][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.714962][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.736519][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.816422][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.851077][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.888821][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.997280][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.186302][ T5805] Bluetooth: hci1: command tx timeout [ 180.273294][ T5805] Bluetooth: hci0: command tx timeout [ 180.294243][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.344923][ T5805] Bluetooth: hci3: command tx timeout [ 180.350494][ T5805] Bluetooth: hci2: command tx timeout [ 180.356449][ T5805] Bluetooth: hci4: command tx timeout [ 180.432438][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.623704][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.719306][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.726884][ T4754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.780521][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.823673][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.859266][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.880909][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.888451][ T4754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.030686][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.038223][ T4754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.065605][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.073022][ T4754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.123376][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.164007][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.183932][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.227487][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.235055][ T5022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.292454][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.392059][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.399580][ T5022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.414035][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.421556][ T5022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.443261][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.450784][ T5022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.465372][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.472785][ T5022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.587197][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.594777][ T5022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.723265][ T5803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.735274][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.732305][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.123994][ T5812] veth0_vlan: entered promiscuous mode [ 183.284340][ T5812] veth1_vlan: entered promiscuous mode [ 183.325356][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.698621][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.716411][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.728923][ T5812] veth0_macvtap: entered promiscuous mode [ 183.760507][ T5803] veth0_vlan: entered promiscuous mode [ 183.830986][ T5803] veth1_vlan: entered promiscuous mode [ 183.851184][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.870776][ T5812] veth1_macvtap: entered promiscuous mode [ 184.104336][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.218557][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.270547][ T5803] veth0_macvtap: entered promiscuous mode [ 184.317970][ T4754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.371210][ T5803] veth1_macvtap: entered promiscuous mode [ 184.381603][ T4754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.402403][ T5811] veth0_vlan: entered promiscuous mode [ 184.411960][ T5806] veth0_vlan: entered promiscuous mode [ 184.428653][ T3745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.466846][ T3745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.531670][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.556120][ T5806] veth1_vlan: entered promiscuous mode [ 184.595406][ T5811] veth1_vlan: entered promiscuous mode [ 184.643372][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.790293][ T5089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.838055][ T5089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.875217][ T5089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.909427][ T5806] veth0_macvtap: entered promiscuous mode [ 184.943812][ T5089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.992199][ T5806] veth1_macvtap: entered promiscuous mode [ 185.043276][ T5811] veth0_macvtap: entered promiscuous mode [ 185.166185][ T5811] veth1_macvtap: entered promiscuous mode [ 185.193738][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.307600][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.335617][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.417747][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.445280][ T5022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.454337][ T5022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.500879][ T3745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.550454][ T3745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.579745][ T3745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.611683][ T3745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.680500][ T3745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.747220][ T3743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.218766][ T5814] veth0_vlan: entered promiscuous mode [ 186.298324][ T5814] veth1_vlan: entered promiscuous mode [ 186.603010][ T5814] veth0_macvtap: entered promiscuous mode [ 186.716161][ T5814] veth1_macvtap: entered promiscuous mode [ 186.873736][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.968664][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.061816][ T197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.098019][ T5089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.133537][ T5089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.177154][ T5089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.039356][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.047661][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.249044][ T3745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.257453][ T3745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.650337][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 190.715130][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.723212][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.853139][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.861318][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.927490][ T4754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.935670][ T4754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.138791][ T4754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.148130][ T4754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.330244][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.342034][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.378811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.389028][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.786447][ T5994] loop2: detected capacity change from 0 to 64 [ 192.109428][ T5994] Trying to free block not in datazone [ 192.115461][ T5994] Trying to free block not in datazone [ 192.119635][ T5996] ======================================================= [ 192.119635][ T5996] WARNING: The mand mount option has been deprecated and [ 192.119635][ T5996] and is ignored by this kernel. Remove the mand [ 192.119635][ T5996] option from the mount to silence this warning. [ 192.119635][ T5996] ======================================================= [ 192.127278][ T5994] Trying to free block not in datazone [ 192.618078][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.626511][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.893687][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.902689][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.943615][ T5022] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.953347][ T5022] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.981215][ T5022] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.055190][ T5022] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.063291][ T6022] loop3: detected capacity change from 0 to 512 [ 194.112665][ T6022] EXT4-fs: Ignoring removed orlov option [ 194.140153][ T6022] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 194.153657][ T6022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.171059][ T6019] loop0: detected capacity change from 0 to 2048 [ 194.255195][ T6019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.416565][ T6022] EXT4-fs (loop3): 1 orphan inode deleted [ 194.422601][ T6022] EXT4-fs (loop3): 1 truncate cleaned up [ 194.438503][ T6022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.660453][ T6022] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.13: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 194.777249][ T6022] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 194.914296][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 195.025141][ T6028] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 195.104473][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.536099][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 195.859419][ T6037] loop0: detected capacity change from 0 to 1024 [ 195.881677][ T6037] EXT4-fs: Ignoring removed oldalloc option [ 195.888143][ T6037] EXT4-fs: Ignoring removed bh option [ 196.036589][ T6037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.157580][ T6037] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 196.703260][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.429500][ T6062] loop3: detected capacity change from 0 to 128 [ 197.453058][ T6062] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.499152][ T6062] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.068521][ T3743] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.546110][ T6079] netlink: 27 bytes leftover after parsing attributes in process `syz.2.36'. [ 200.037854][ T6100] netlink: 27 bytes leftover after parsing attributes in process `syz.4.44'. [ 200.148442][ T6102] netlink: 84 bytes leftover after parsing attributes in process `syz.1.45'. [ 200.233850][ T6104] loop0: detected capacity change from 0 to 512 [ 200.298379][ T6104] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.463514][ T6104] EXT4-fs (loop0): 1 truncate cleaned up [ 200.471902][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.647652][ T6104] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.46: invalid fast symlink length 39 [ 200.739013][ T6104] EXT4-fs (loop0): Remounting filesystem read-only [ 201.127895][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.551164][ T6118] loop4: detected capacity change from 0 to 512 [ 201.614260][ T6118] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.404197][ T6133] netlink: 7 bytes leftover after parsing attributes in process `syz.1.58'. [ 202.413476][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 202.424445][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 202.878346][ T6139] loop9: detected capacity change from 0 to 7 [ 202.909820][ T6139] Dev loop9: unable to read RDB block 7 [ 202.916008][ T6139] loop9: unable to read partition table [ 202.955732][ T6139] loop9: partition table beyond EOD, truncated [ 202.962131][ T6139] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.129197][ T5805] block nbd0: Receive control failed (result -32) [ 203.257407][ T6148] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 203.910675][ T6155] sp0: Synchronizing with TNC [ 203.971003][ T6156] loop4: detected capacity change from 0 to 1024 [ 204.147828][ T6156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.172109][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 204.181323][ T6160] netlink: 'syz.3.70': attribute type 7 has an invalid length. [ 204.189264][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 205.005321][ T5925] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.052372][ T6172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 205.243924][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.254426][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.265882][ T5925] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.387216][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.402618][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.412796][ T5925] usb 2-1: Product: syz [ 205.417363][ T5925] usb 2-1: Manufacturer: syz [ 205.422206][ T5925] usb 2-1: SerialNumber: syz [ 205.501885][ T5925] cdc_mbim 2-1:1.0: skipping garbage [ 206.279941][ C1] hrtimer: interrupt took 361990 ns [ 206.280155][ T6179] loop4: detected capacity change from 0 to 8192 [ 206.392937][ T5925] cdc_mbim 2-1:1.0: bind() failure [ 206.463067][ T5925] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 206.470707][ T5925] cdc_ncm 2-1:1.1: bind() failure [ 206.569416][ T5925] usb 2-1: USB disconnect, device number 2 [ 207.427279][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 208.374119][ T6199] loop3: detected capacity change from 0 to 4096 [ 208.401177][ T6199] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 208.474474][ T6205] loop4: detected capacity change from 0 to 64 [ 208.493849][ T6205] minix: block size(59136) > page size(4096) not supported by filesystem [ 208.882699][ T6199] ntfs3: Cannot use different iocharset when remounting! [ 208.920117][ T6199] ntfs3(loop3): failed to convert name for inode a. [ 209.737680][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.97'. [ 209.877326][ T6213] loop1: detected capacity change from 0 to 2048 [ 210.053915][ T6213] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 210.159598][ T6211] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 211.501682][ T6243] capability: warning: `syz.0.108' uses deprecated v2 capabilities in a way that may be insecure [ 211.802931][ T6246] loop3: detected capacity change from 0 to 1024 [ 212.169259][ T6250] pimreg: tun_chr_ioctl cmd 1074025677 [ 212.175480][ T6250] pimreg: linktype set to 776 [ 213.916142][ T6277] loop2: detected capacity change from 0 to 4096 [ 214.090316][ T6282] loop4: detected capacity change from 0 to 512 [ 214.130754][ T6282] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.257173][ T6282] EXT4-fs (loop4): 1 truncate cleaned up [ 214.267861][ T6282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.800657][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.488741][ T6299] loop2: detected capacity change from 0 to 256 [ 215.525606][ T6299] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.174966][ T5925] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 216.393288][ T5925] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 216.402020][ T5925] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 216.411306][ T5925] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 216.421871][ T5925] usb 2-1: config 220 has no interface number 2 [ 216.428572][ T5925] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 216.442048][ T5925] usb 2-1: config 220 interface 0 has no altsetting 0 [ 216.449106][ T5925] usb 2-1: config 220 interface 76 has no altsetting 0 [ 216.461732][ T5925] usb 2-1: config 220 interface 1 has no altsetting 0 [ 216.498010][ T5925] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 216.507656][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.515986][ T5925] usb 2-1: Product: syz [ 216.520316][ T5925] usb 2-1: Manufacturer: syz [ 216.525320][ T5925] usb 2-1: SerialNumber: syz [ 216.820825][ T5925] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 216.837506][ T5925] uvcvideo 2-1:220.0: No valid video chain found. [ 216.844270][ T5925] usb 2-1: selecting invalid altsetting 0 [ 217.009776][ T5925] usb 2-1: selecting invalid altsetting 0 [ 217.016642][ T5925] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 217.133182][ T5925] usb 2-1: USB disconnect, device number 3 [ 217.364345][ T6324] loop0: detected capacity change from 0 to 64 [ 218.024962][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 218.057125][ T6334] loop4: detected capacity change from 0 to 512 [ 218.075971][ T6334] EXT4-fs: Ignoring removed oldalloc option [ 218.157333][ T6334] EXT4-fs (loop4): 1 truncate cleaned up [ 218.165156][ T6334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.454990][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.496033][ T6357] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 219.505857][ T6357] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 219.516877][ T6357] overlayfs: failed to get uuid (32/file0, err=-13); falling back to uuid=null. [ 221.210754][ T6383] Zero length message leads to an empty skb [ 221.655821][ T6379] loop2: detected capacity change from 0 to 8192 [ 221.921620][ T6392] process 'syz.3.173' launched './file0' with NULL argv: empty string added [ 222.318163][ T6397] netlink: 'syz.2.176': attribute type 6 has an invalid length. [ 223.660601][ T6421] loop2: detected capacity change from 0 to 1024 [ 223.753020][ T6421] hfsplus: bad catalog entry type [ 224.051418][ T6424] tap0: tun_chr_ioctl cmd 1074025677 [ 224.058572][ T6424] tap0: linktype set to 773 [ 224.159229][ T59] hfsplus: b-tree write err: -5, ino 4 [ 224.567660][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.574264][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.479369][ T6456] loop1: detected capacity change from 0 to 4096 [ 226.527557][ T6459] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.584431][ T30] audit: type=1800 audit(1764840256.292:2): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.202" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 226.643790][ T6452] loop0: detected capacity change from 0 to 4096 [ 226.838082][ T6461] loop2: detected capacity change from 0 to 256 [ 229.115836][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 229.195190][ T5854] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.275728][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 229.291698][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.291836][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.291981][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.292102][ T5925] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.292323][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.317311][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.317455][ T5925] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.317569][ T5925] usb 4-1: Manufacturer: syz [ 229.345869][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 229.346524][ T5925] usb 4-1: config 0 descriptor?? [ 229.367103][ T5854] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.407733][ T5854] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 229.407878][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.407991][ T5854] usb 2-1: Product: syz [ 229.408082][ T5854] usb 2-1: Manufacturer: syz [ 229.408173][ T5854] usb 2-1: SerialNumber: syz [ 229.437447][ T5854] usb 2-1: config 0 descriptor?? [ 229.885007][ T5925] rc_core: IR keymap rc-hauppauge not found [ 229.885077][ T5925] Registered IR keymap rc-empty [ 229.885629][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 229.908813][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 229.919294][ T5854] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 229.929148][ T5925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 229.932555][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 229.983235][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.000033][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.017851][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.037654][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.055825][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.078232][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.099009][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.115963][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.135238][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.165853][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.195838][ T5925] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 230.196010][ T5925] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 230.207097][ T6492] loop0: detected capacity change from 0 to 4096 [ 230.220556][ T6492] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 230.328150][ T5854] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 230.414438][ T5854] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 230.446922][ T5925] usb 4-1: USB disconnect, device number 2 [ 230.499428][ T5854] usb 2-1: USB disconnect, device number 4 [ 230.597582][ T6492] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 230.599682][ T6492] ntfs3(loop0): ino=1a, mi_enum_attr [ 230.600127][ T6492] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 231.103948][ T6496] Bluetooth: MGMT ver 1.23 [ 231.652958][ T6500] loop1: detected capacity change from 0 to 1024 [ 231.671775][ T6500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.778099][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.277981][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.121715][ T6515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.122014][ T6515] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 233.129242][ T6515] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 233.145483][ T6515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.145684][ T6515] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.150440][ T5805] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 233.151937][ T5805] Bluetooth: hci2: command 0x0401 tx timeout [ 233.178349][ T6515] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.184365][ T6515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.185172][ T6515] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.198318][ T6515] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.351887][ T6515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.352166][ T6515] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 233.368236][ T6515] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 233.407226][ T6515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.407427][ T6515] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.447601][ T6515] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.821486][ T6529] netlink: 'syz.2.231': attribute type 5 has an invalid length. [ 234.119341][ T6536] loop3: detected capacity change from 0 to 128 [ 234.219431][ T6536] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.379652][ T6536] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.706086][ T5806] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.904932][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.231708][ T5805] Bluetooth: hci2: command 0x0401 tx timeout [ 235.238143][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.385214][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.457522][ T6553] loop1: detected capacity change from 0 to 4096 [ 235.474757][ T5805] Bluetooth: hci4: command 0x0405 tx timeout [ 235.519567][ T6553] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 235.611953][ T6556] Bluetooth: MGMT ver 1.23 [ 235.729987][ T6553] ntfs3(loop1): ino=b, mi_enum_attr [ 235.735798][ T6553] ntfs3(loop1): Failed to load $Extend (-22). [ 235.742245][ T6553] ntfs3(loop1): Failed to initialize $Extend. [ 235.892804][ T6559] loop2: detected capacity change from 0 to 256 [ 235.937409][ T6559] exfat: Deprecated parameter 'namecase' [ 235.943597][ T6559] exfat: Deprecated parameter 'namecase' [ 236.106133][ T6562] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 236.121263][ T6559] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 236.235578][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 236.403772][ T6560] loop0: detected capacity change from 0 to 4096 [ 236.469421][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.480616][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.480908][ T6560] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 236.566755][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.576647][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.586604][ T9] usb 2-1: SerialNumber: syz [ 236.872547][ T6569] loop3: detected capacity change from 0 to 512 [ 236.966521][ T9] usb 2-1: 0:2 : does not exist [ 236.998597][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.029742][ T6569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.040530][ T9] usb 2-1: USB disconnect, device number 5 [ 237.251274][ T6569] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.251: bg 0: block 306: padding at end of block bitmap is not set [ 237.306151][ T5805] Bluetooth: hci2: command 0x0401 tx timeout [ 237.312440][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.361511][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.464474][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.474246][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.553383][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 238.321726][ T6582] loop2: detected capacity change from 0 to 256 [ 238.489433][ T6582] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 238.520389][ T6584] macvtap1: entered promiscuous mode [ 238.526066][ T6584] macvtap1: entered allmulticast mode [ 238.533953][ T6584] dummy0: entered promiscuous mode [ 238.539626][ T6584] dummy0: entered allmulticast mode [ 238.551400][ T6584] team0: Device macvtap1 failed to register rx_handler [ 238.615097][ T6584] dummy0: left allmulticast mode [ 238.621229][ T6584] dummy0: left promiscuous mode [ 238.649086][ T6582] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 239.075254][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.358491][ T6590] warning: `syz.2.259' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 239.387082][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.387297][ T5805] Bluetooth: hci2: command 0x0401 tx timeout [ 239.544931][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.629793][ T5805] Bluetooth: hci4: command 0x0405 tx timeout [ 240.756951][ T6609] loop1: detected capacity change from 0 to 2048 [ 240.825067][ T6609] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.927374][ T6616] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.698418][ T6645] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 244.017718][ T6663] netlink: 332 bytes leftover after parsing attributes in process `syz.2.293'. [ 244.027461][ T6663] netlink: 'syz.2.293': attribute type 9 has an invalid length. [ 244.035741][ T6663] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 244.285275][ T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0) [ 244.909593][ T6678] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 244.956541][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 245.240372][ T6681] loop3: detected capacity change from 0 to 512 [ 245.277636][ T6681] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.465251][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.549131][ T6685] bond0: entered promiscuous mode [ 245.554448][ T6685] bond_slave_0: entered promiscuous mode [ 245.561447][ T6685] bond_slave_1: entered promiscuous mode [ 245.576710][ T6685] batadv0: entered promiscuous mode [ 245.587483][ T6685] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 245.707363][ T6685] bond0: left promiscuous mode [ 245.712344][ T6685] bond_slave_0: left promiscuous mode [ 245.719456][ T6685] bond_slave_1: left promiscuous mode [ 245.760960][ T6685] batadv0: left promiscuous mode [ 246.920555][ T6701] netlink: 5 bytes leftover after parsing attributes in process `syz.1.310'. [ 246.930114][ T6701] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 246.981952][ T6701] 0ªî{X¹¦: entered allmulticast mode [ 246.989816][ T6701] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 248.034478][ T6718] mmap: syz.2.318 (6718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 248.553511][ T6729] loop0: detected capacity change from 0 to 128 [ 250.479626][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 251.188459][ T6767] netlink: 76 bytes leftover after parsing attributes in process `syz.0.337'. [ 251.548920][ T6775] loop0: detected capacity change from 0 to 64 [ 251.572414][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.793937][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.801273][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 251.810768][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.907310][ T9] usb 2-1: config 0 descriptor?? [ 252.349826][ T6786] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 252.783086][ T9] video4linux radio48: keene_cmd_main failed (-71) [ 252.790148][ T9] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 252.876300][ T9] usb 2-1: USB disconnect, device number 6 [ 253.221056][ T6795] dvmrp1: entered allmulticast mode [ 253.372359][ T6795] dvmrp1: left allmulticast mode [ 253.464985][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 253.655341][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 253.709275][ T5854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.720011][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.732392][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.742947][ T5854] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.752998][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.890754][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 253.931544][ T5854] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 253.941131][ T5854] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 253.952204][ T5854] usb 4-1: Manufacturer: syz [ 253.977395][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 254.027420][ T5854] usb 4-1: config 0 descriptor?? [ 254.575505][ T5854] rc_core: IR keymap rc-hauppauge not found [ 254.581571][ T5854] Registered IR keymap rc-empty [ 254.591194][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.628916][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.657504][ T5854] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 254.673433][ T5854] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 254.690452][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 254.716495][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.731120][ T6816] loop1: detected capacity change from 0 to 512 [ 254.767265][ T6816] EXT4-fs: Ignoring removed oldalloc option [ 254.773674][ T6816] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.791078][ C1] rc rc0: IR event FIFO is full! [ 254.796504][ T6819] rc rc0: two consecutive events of type space [ 254.820103][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.833331][ T6816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.846443][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.857075][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 254.871274][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.882309][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.893844][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.904731][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 254.917316][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.945658][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.968511][ T6816] EXT4-fs (loop1): orphan cleanup on readonly fs [ 254.977740][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 255.009602][ T6816] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 255.014707][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 255.020078][ T6816] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 255.027428][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 255.036458][ T6816] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.356: Failed to acquire dquot type 1 [ 255.061161][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 255.070230][ T24] usb 1-1: Manufacturer: syz [ 255.085006][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 255.096187][ T24] usb 1-1: config 0 descriptor?? [ 255.105340][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 255.125297][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 255.138435][ T6816] EXT4-fs (loop1): 1 truncate cleaned up [ 255.150524][ T6816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.167332][ T5854] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 255.201537][ T5854] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 255.211227][ T5854] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 255.248857][ T5854] usb 4-1: USB disconnect, device number 3 [ 255.433609][ T6816] EXT4-fs: Ignoring removed orlov option [ 255.440055][ T6816] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 255.450229][ T6816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.492214][ T6816] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 255.537877][ T6816] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.356: Abort forced by user [ 255.559457][ T24] rc_core: IR keymap rc-hauppauge not found [ 255.565654][ T24] Registered IR keymap rc-empty [ 255.573326][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.592390][ T6816] EXT4-fs (loop1): Remounting filesystem read-only [ 255.599442][ T6816] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 255.608437][ T6816] ext4 filesystem being remounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.635822][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.656832][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 255.682103][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 255.758509][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.841100][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.866293][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.918863][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.955669][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.994033][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.011108][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.038298][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.088802][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.118954][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.145031][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.179212][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 256.191035][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 256.298165][ T24] usb 1-1: USB disconnect, device number 2 [ 256.563000][ T6834] loop1: detected capacity change from 0 to 256 [ 256.658386][ T6834] exfat: Deprecated parameter 'utf8' [ 256.787126][ T6834] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 256.833992][ T6838] loop2: detected capacity change from 0 to 256 [ 256.935645][ T30] audit: type=1804 audit(1764840286.642:3): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.363" name="/newroot/64/file1/file1" dev="loop1" ino=1048617 res=1 errno=0 [ 257.767122][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 258.309229][ T6859] loop1: detected capacity change from 0 to 128 [ 258.856202][ T6866] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 259.429097][ T6873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.382'. [ 261.328747][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.376380][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.417464][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.443163][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.454387][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.477390][ T6899] loop3: detected capacity change from 0 to 128 [ 261.518170][ T6899] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 261.681776][ T6899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.885381][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 263.425045][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 263.546481][ T5805] Bluetooth: hci4: command tx timeout [ 263.611565][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.625451][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.697752][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.708707][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 263.717326][ T9] usb 1-1: Manufacturer: syz [ 263.807384][ T9] usb 1-1: config 0 descriptor?? [ 264.147258][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.155142][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.163218][ T6898] bridge_slave_0: entered allmulticast mode [ 264.182330][ T6898] bridge_slave_0: entered promiscuous mode [ 264.289265][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.297406][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.305652][ T6898] bridge_slave_1: entered allmulticast mode [ 264.316965][ T6898] bridge_slave_1: entered promiscuous mode [ 264.448172][ T9] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 264.457632][ T9] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 264.465755][ T9] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 264.624805][ T9] usb 1-1: USB disconnect, device number 3 [ 264.741281][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.809595][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.122633][ T6898] team0: Port device team_slave_0 added [ 265.206196][ T6898] team0: Port device team_slave_1 added [ 265.541728][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.551139][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.577822][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.607992][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.615531][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.642016][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.652379][ T5805] Bluetooth: hci4: command tx timeout [ 265.920525][ T6898] hsr_slave_0: entered promiscuous mode [ 265.977574][ T6898] hsr_slave_1: entered promiscuous mode [ 265.988439][ T6898] debugfs: 'hsr0' already exists in 'hsr' [ 265.994325][ T6898] Cannot create hsr debugfs directory [ 266.127957][ T6956] sctp: [Deprecated]: syz.3.416 (pid 6956) Use of int in max_burst socket option. [ 266.127957][ T6956] Use struct sctp_assoc_value instead [ 266.654255][ T6961] loop3: detected capacity change from 0 to 2048 [ 266.830644][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.095919][ T6898] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.118312][ T6898] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.150438][ T6898] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.161511][ T6970] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.181046][ T6971] netlink: 88 bytes leftover after parsing attributes in process `syz.2.422'. [ 267.190573][ T6898] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.198563][ T6968] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.231223][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.231524][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.239196][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.257765][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.265720][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.273201][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 267.705149][ T5805] Bluetooth: hci4: command tx timeout [ 267.823256][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 267.890307][ T6977] bond1: option ad_user_port_key: invalid value (20551) [ 267.897916][ T6977] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 267.923290][ T6977] bond1 (unregistering): Released all slaves [ 267.969153][ T6978] loop3: detected capacity change from 0 to 2048 [ 268.053160][ T6975] serio: Serial port ptm0 [ 268.088404][ T6978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.191926][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.237022][ T30] audit: type=1800 audit(1764840297.942:4): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.423" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 268.327625][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.403550][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.411120][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.505942][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.513549][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.065074][ T6991] dvmrp1: entered allmulticast mode [ 269.785006][ T5805] Bluetooth: hci4: command tx timeout [ 270.047768][ T7001] pim6reg1: tun_chr_ioctl cmd 2147767507 [ 270.221841][ T7004] usb usb8: usbfs: process 7004 (syz.4.434) did not claim interface 0 before use [ 270.418183][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.650008][ T7011] loop3: detected capacity change from 0 to 8 [ 270.989164][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 272.522326][ T7037] netlink: 76 bytes leftover after parsing attributes in process `syz.4.445'. [ 272.659294][ T6898] veth0_vlan: entered promiscuous mode [ 272.729862][ T6898] veth1_vlan: entered promiscuous mode [ 272.906287][ T7039] loop0: detected capacity change from 0 to 4096 [ 273.008161][ T6898] veth0_macvtap: entered promiscuous mode [ 273.066844][ T6898] veth1_macvtap: entered promiscuous mode [ 273.233611][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.448'. [ 273.243094][ T7043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.448'. [ 273.296893][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.489361][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.625987][ T1300] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.728939][ T1300] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.760851][ T1300] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.776585][ T197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.121739][ T7078] loop0: detected capacity change from 0 to 1024 [ 276.156446][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 276.345825][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 276.386043][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.394357][ T9] usb 3-1: config 0 has no interface number 0 [ 276.417309][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 276.427413][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.436042][ T9] usb 3-1: Product: syz [ 276.440367][ T9] usb 3-1: Manufacturer: syz [ 276.445302][ T9] usb 3-1: SerialNumber: syz [ 276.497621][ T9] usb 3-1: config 0 descriptor?? [ 276.544894][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 276.553892][ T9] usb 3-1: selecting invalid altsetting 1 [ 276.567167][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 276.594376][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 276.606245][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 276.614907][ T9] usb 3-1: media controller created [ 276.621629][ T3943] hfsplus: b-tree write err: -5, ino 4 [ 276.674059][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.859754][ T7097] loop0: detected capacity change from 0 to 512 [ 277.956726][ T7077] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 277.984234][ T7097] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 278.000709][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 278.008253][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 278.066493][ T7097] EXT4-fs (loop0): 1 truncate cleaned up [ 278.074286][ T7097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.080071][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 278.389129][ T30] audit: type=1326 audit(1764840308.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.415965][ T30] audit: type=1326 audit(1764840308.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.439862][ T30] audit: type=1326 audit(1764840308.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.461954][ T30] audit: type=1326 audit(1764840308.132:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.484105][ T30] audit: type=1326 audit(1764840308.132:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.593447][ T7104] loop4: detected capacity change from 0 to 1024 [ 278.602042][ T9] usb 3-1: USB disconnect, device number 2 [ 278.652627][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.768552][ T7104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.794920][ T30] audit: type=1326 audit(1764840308.282:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.816763][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.827713][ T30] audit: type=1326 audit(1764840308.302:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.849638][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.859069][ T30] audit: type=1326 audit(1764840308.302:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.881718][ T30] audit: type=1326 audit(1764840308.362:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 278.903892][ T30] audit: type=1326 audit(1764840308.362:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 279.051145][ T7104] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.469: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 279.212392][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 279.371697][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.448270][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 279.894991][ T4754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.903031][ T4754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.010585][ T7120] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 280.172851][ T4754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.181145][ T4754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.313260][ T7125] loop2: detected capacity change from 0 to 1024 [ 280.498700][ T7125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.672696][ T7131] loop3: detected capacity change from 0 to 128 [ 280.720049][ T7125] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.475: Attempting to read directory block (623) that is past i_size (638464) [ 280.775006][ T7131] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.814057][ T7131] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.825356][ T7125] EXT4-fs (loop2): Remounting filesystem read-only [ 281.256183][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.295171][ T5806] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.631358][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.639707][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.647859][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.655741][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.663466][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.671550][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.682416][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.691243][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.699247][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.707053][ T24] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 281.831894][ T7146] loop0: detected capacity change from 0 to 128 [ 282.045167][ T24] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 282.064430][ T7146] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.160359][ T7146] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.759524][ T7153] fido_id[7153]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.891814][ T5811] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.326256][ T7164] loop4: detected capacity change from 0 to 1024 [ 283.337716][ T7165] loop3: detected capacity change from 0 to 1024 [ 284.499260][ T7175] loop0: detected capacity change from 0 to 256 [ 284.934795][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 284.941856][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 284.951895][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 285.031779][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 285.041794][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 285.189205][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 285.198329][ T9] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 285.207551][ T9] usb 6-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 285.218226][ T9] usb 6-1: config 220 has no interface number 2 [ 285.225175][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 285.238724][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 285.246068][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 285.253137][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 285.500489][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 285.509976][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.518502][ T9] usb 6-1: Product: syz [ 285.522842][ T9] usb 6-1: Manufacturer: syz [ 285.527783][ T9] usb 6-1: SerialNumber: syz [ 285.898873][ T9] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 285.908340][ T9] usb 6-1: selecting invalid altsetting 0 [ 285.915641][ T9] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 285.923365][ T9] uvcvideo 6-1:220.0: No valid video chain found. [ 285.968056][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.974936][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.055056][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 286.077311][ T9] usb 6-1: selecting invalid altsetting 0 [ 286.090070][ T9] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 286.225990][ T9] usb 6-1: USB disconnect, device number 2 [ 286.283922][ T24] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 286.296368][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.305704][ T24] usb 3-1: Product: syz [ 286.310041][ T24] usb 3-1: Manufacturer: syz [ 286.314963][ T24] usb 3-1: SerialNumber: syz [ 286.417375][ T24] usb 3-1: config 0 descriptor?? [ 286.460928][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 286.467377][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 286.659004][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 286.713284][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.765848][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 286.774797][ T24] usb 3-1: media controller created [ 286.867593][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.446911][ T24] DVB: Unable to find symbol dib7000p_attach() [ 287.464779][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 287.775540][ T5854] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 287.867408][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 287.873787][ T24] Registered IR keymap rc-empty [ 287.880129][ T24] dvb-usb: could not initialize remote control. [ 287.886787][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 287.971039][ T24] usb 3-1: USB disconnect, device number 3 [ 288.031224][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 288.051584][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 288.063500][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.181557][ T5854] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.192203][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.201191][ T5854] usb 1-1: Product: syz [ 288.211553][ T5854] usb 1-1: Manufacturer: syz [ 288.216588][ T5854] usb 1-1: SerialNumber: syz [ 288.327363][ T5854] usb 1-1: config 0 descriptor?? [ 288.406907][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 288.514459][ T5854] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.525358][ T5854] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 288.709247][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.518'. [ 288.889172][ T7234] netlink: 256 bytes leftover after parsing attributes in process `syz.2.520'. [ 289.171788][ T5854] em28xx 1-1:0.0: chip ID is em2874 [ 289.380803][ T5854] usb 1-1: USB disconnect, device number 4 [ 289.388641][ T5854] em28xx 1-1:0.0: Disconnecting em28xx [ 289.433022][ T5854] em28xx 1-1:0.0: Freeing device [ 289.673242][ T7241] loop4: detected capacity change from 0 to 1024 [ 291.776570][ T7261] could not allocate digest TFM handle sha3-512-generic [ 292.096485][ T5854] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 292.254766][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 292.298801][ T5854] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 292.308252][ T5854] usb 3-1: config 0 has no interface number 0 [ 292.317029][ T5854] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 292.332425][ T5854] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 292.343842][ T5854] usb 3-1: config 0 interface 126 has no altsetting 0 [ 292.436883][ T5854] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 292.446448][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.454948][ T5854] usb 3-1: Product: syz [ 292.459287][ T5854] usb 3-1: Manufacturer: syz [ 292.464159][ T5854] usb 3-1: SerialNumber: syz [ 292.562390][ T5854] usb 3-1: config 0 descriptor?? [ 292.570417][ T7270] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.578939][ T7270] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.790508][ T7280] loop4: detected capacity change from 0 to 1024 [ 292.840552][ T7280] EXT4-fs: inline encryption not supported [ 293.008809][ T7280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.116931][ T5854] ir_usb 3-1:0.126: IR Dongle converter detected [ 293.386872][ T5854] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 293.407465][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.600236][ T9] usb 3-1: USB disconnect, device number 4 [ 293.638095][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 293.649651][ T9] ir_usb 3-1:0.126: device disconnected [ 297.176172][ T7301] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 297.733587][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.551'. [ 297.814425][ T7320] loop4: detected capacity change from 0 to 512 [ 297.879926][ T7320] EXT4-fs: Ignoring removed oldalloc option [ 297.952869][ T5854] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 298.030113][ T7320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.043428][ T7320] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.146166][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 298.180189][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.191680][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.204960][ T5854] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.214354][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.318115][ T5854] usb 3-1: config 0 descriptor?? [ 298.567939][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.606039][ T7331] netlink: 316 bytes leftover after parsing attributes in process `syz.0.556'. [ 298.743110][ T7328] loop5: detected capacity change from 0 to 4096 [ 298.763267][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.860081][ T7328] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 298.864738][ T7332] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.917994][ T7328] NILFS (loop5): mounting fs with errors [ 298.983049][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 299.032923][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 299.044171][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.055778][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.067356][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 299.081154][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 299.095242][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.212119][ T9] usb 4-1: config 0 descriptor?? [ 299.663562][ T9] hid (null): report_id 0 is invalid [ 299.746313][ T9] redragon 0003:0C45:760B.0003: report_id 0 is invalid [ 299.753523][ T9] redragon 0003:0C45:760B.0003: item 0 1 1 8 parsing failed [ 299.840429][ T9] redragon 0003:0C45:760B.0003: probe with driver redragon failed with error -22 [ 300.121910][ T7329] loop3: detected capacity change from 0 to 1024 [ 300.189373][ T7329] EXT4-fs: Ignoring removed orlov option [ 300.328037][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.528683][ T24] usb 4-1: USB disconnect, device number 4 [ 300.947196][ T5854] usbhid 3-1:0.0: can't add hid device: -71 [ 300.953811][ T5854] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 301.021782][ T5854] usb 3-1: USB disconnect, device number 5 [ 301.361163][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.564874][ T5854] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 301.725232][ T24] IPVS: starting estimator thread 0... [ 301.787982][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.798232][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 301.811496][ T5854] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 301.820940][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.864941][ T7365] IPVS: using max 240 ests per chain, 12000 per kthread [ 301.942712][ T7366] loop5: detected capacity change from 0 to 8 [ 302.000569][ T5854] usb 3-1: config 0 descriptor?? [ 302.091140][ T7366] SQUASHFS error: Unable to read inode 0x11f [ 302.470911][ T5854] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 2/5 [ 302.508938][ T5854] kovaplus 0003:1E7D:2D50.0004: parse failed [ 302.516222][ T5854] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -22 [ 303.336384][ T7387] netlink: 'syz.0.577': attribute type 12 has an invalid length. [ 304.362411][ T24] usb 3-1: USB disconnect, device number 6 [ 304.530505][ T7400] loop0: detected capacity change from 0 to 1024 [ 304.688865][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 304.688933][ T30] audit: type=1326 audit(1764840334.382:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 304.717411][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.732079][ T30] audit: type=1326 audit(1764840334.392:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 304.755614][ T30] audit: type=1326 audit(1764840334.392:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 304.779444][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.791875][ T30] audit: type=1326 audit(1764840334.392:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 304.813918][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.820451][ T30] audit: type=1326 audit(1764840334.392:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 304.883420][ T7400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.248818][ T30] audit: type=1326 audit(1764840334.562:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 305.253033][ T7405] IPVS: Scheduler module ip_vs_ not found [ 305.271143][ T30] audit: type=1326 audit(1764840334.562:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 305.298873][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.305795][ T30] audit: type=1326 audit(1764840334.562:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 305.328152][ T30] audit: type=1326 audit(1764840334.572:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 305.350229][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.519340][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.884987][ T30] audit: type=1326 audit(1764840335.082:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 306.189765][ T7422] loop2: detected capacity change from 0 to 64 [ 306.404815][ T7425] loop5: detected capacity change from 0 to 512 [ 307.635233][ T7440] loop2: detected capacity change from 0 to 128 [ 307.669545][ T7440] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 307.748058][ T7440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.195761][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 308.435851][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 308.447698][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 308.524179][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 308.533970][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.543135][ T24] usb 5-1: Product: syz [ 308.547697][ T24] usb 5-1: Manufacturer: syz [ 308.552828][ T24] usb 5-1: SerialNumber: syz [ 308.620055][ T7451] loop0: detected capacity change from 0 to 64 [ 308.638128][ T24] usb 5-1: config 0 descriptor?? [ 308.823628][ T7453] loop3: detected capacity change from 0 to 128 [ 308.907218][ T7453] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.985118][ T7453] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 309.082753][ T5811] hfs: request for non-existent node 131072 in B*Tree [ 309.089968][ T5811] hfs: request for non-existent node 131072 in B*Tree [ 309.339115][ T24] usb 5-1: USB disconnect, device number 2 [ 309.555185][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 309.692059][ T7461] loop5: detected capacity change from 0 to 512 [ 310.031936][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.188191][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.347606][ T7465] loop4: detected capacity change from 0 to 128 [ 310.429521][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.435311][ T7465] FAT-fs (loop4): Directory bread(block 414) failed [ 310.447220][ T7465] FAT-fs (loop4): Directory bread(block 415) failed [ 310.457741][ T7465] FAT-fs (loop4): Directory bread(block 416) failed [ 310.465831][ T7465] FAT-fs (loop4): Directory bread(block 417) failed [ 310.472733][ T7465] FAT-fs (loop4): Directory bread(block 418) failed [ 310.479737][ T7465] FAT-fs (loop4): Directory bread(block 419) failed [ 310.486660][ T7465] FAT-fs (loop4): Directory bread(block 420) failed [ 310.493460][ T7465] FAT-fs (loop4): Directory bread(block 421) failed [ 310.501544][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 310.626173][ T7465] FAT-fs (loop4): Directory bread(block 414) failed [ 310.633059][ T7465] FAT-fs (loop4): Directory bread(block 415) failed [ 310.736129][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.286906][ T35] bridge_slave_1: left allmulticast mode [ 311.292840][ T35] bridge_slave_1: left promiscuous mode [ 311.299587][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.321225][ T35] bridge_slave_0: left allmulticast mode [ 311.327570][ T35] bridge_slave_0: left promiscuous mode [ 311.334054][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.873968][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.899982][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.914241][ T35] bond0 (unregistering): Released all slaves [ 312.317708][ T35] hsr_slave_0: left promiscuous mode [ 312.335982][ T35] hsr_slave_1: left promiscuous mode [ 312.343821][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.351671][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.407207][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.415297][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.538877][ T35] veth1_macvtap: left promiscuous mode [ 312.544963][ T35] veth0_macvtap: left promiscuous mode [ 312.550931][ T35] veth1_vlan: left promiscuous mode [ 312.556838][ T35] veth0_vlan: left promiscuous mode [ 313.466902][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.473318][ T35] team0 (unregistering): Port device team_slave_1 removed [ 313.477394][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.490982][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.512522][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.532326][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.598138][ T35] team0 (unregistering): Port device team_slave_0 removed [ 314.511048][ T35] IPVS: stop unused estimator thread 0... [ 314.886459][ T7508] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 315.127660][ T7512] netlink: 268 bytes leftover after parsing attributes in process `syz.4.628'. [ 315.285459][ T7489] chnl_net:caif_netlink_parms(): no params data found [ 315.468422][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.477583][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.494645][ T7517] bridge0: entered allmulticast mode [ 315.626688][ T5809] Bluetooth: hci2: command tx timeout [ 316.280616][ T7531] tipc: Started in network mode [ 316.286023][ T7531] tipc: Node identity ac14140f, cluster identity 4711 [ 316.298952][ T7531] tipc: New replicast peer: 255.255.255.255 [ 316.308708][ T7531] tipc: Enabled bearer , priority 10 [ 316.696373][ T7526] overlayfs: failed to resolve './file0/file1': -107 [ 316.992243][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.003421][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.015002][ T7489] bridge_slave_0: entered allmulticast mode [ 317.088282][ T7489] bridge_slave_0: entered promiscuous mode [ 317.167925][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.175587][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.183321][ T7489] bridge_slave_1: entered allmulticast mode [ 317.192906][ T7489] bridge_slave_1: entered promiscuous mode [ 317.358730][ T7545] loop3: detected capacity change from 0 to 2048 [ 317.425064][ T5925] tipc: Node number set to 2886997007 [ 317.473218][ T7545] UDF-fs: warning (device loop3): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 317.485881][ T7545] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 317.596878][ T7489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.678945][ T7489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.712396][ T5809] Bluetooth: hci2: command tx timeout [ 317.936225][ T7544] loop5: detected capacity change from 0 to 4096 [ 318.266579][ T7489] team0: Port device team_slave_0 added [ 318.363974][ T7544] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 318.371132][ T7544] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 318.408928][ T7489] team0: Port device team_slave_1 added [ 318.597782][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.605122][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.631294][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.638335][ T7489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.719468][ T7543] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 318.816266][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.823380][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.849558][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.859955][ T7489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.977127][ T3943] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 319.005179][ T6898] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 319.011912][ T6898] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 319.019787][ T6898] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 319.125237][ T3708] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 319.435175][ T7489] hsr_slave_0: entered promiscuous mode [ 319.445264][ T7489] hsr_slave_1: entered promiscuous mode [ 319.453815][ T7489] debugfs: 'hsr0' already exists in 'hsr' [ 319.459949][ T7489] Cannot create hsr debugfs directory [ 319.791395][ T5809] Bluetooth: hci2: command tx timeout [ 320.179030][ T7583] bond1: ARP target 9.0.0.0 is already present [ 320.190140][ T7583] bond1: option arp_ip_target: invalid value (9) [ 320.281326][ T7586] loop3: detected capacity change from 0 to 1024 [ 320.295645][ T5925] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 320.342049][ T7583] bond1 (unregistering): Released all slaves [ 320.457671][ T7586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.480329][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 320.518947][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 320.589552][ T5925] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.603069][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.609007][ T7586] EXT4-fs error (device loop3): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.3.648: path /133/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 320.612802][ T5925] usb 5-1: Product: syz [ 320.632399][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.642982][ T5925] usb 5-1: Manufacturer: syz [ 320.648033][ T5925] usb 5-1: SerialNumber: syz [ 320.676149][ T5925] usb 5-1: config 0 descriptor?? [ 320.712272][ T5925] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.722670][ T5925] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 320.948599][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.199329][ T7489] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 321.281421][ T7489] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.394167][ T7489] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 321.418180][ T5925] em28xx 5-1:0.0: chip ID is em28174 [ 321.493390][ T7489] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.724455][ T5925] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 321.733066][ T5925] em28xx 5-1:0.0: board has no eeprom [ 321.866676][ T5809] Bluetooth: hci2: command tx timeout [ 321.894893][ T5925] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 321.903067][ T5925] em28xx 5-1:0.0: dvb set to bulk mode. [ 321.911118][ T9] em28xx 5-1:0.0: Binding DVB extension [ 321.986308][ T5925] usb 5-1: USB disconnect, device number 3 [ 321.993883][ T5925] em28xx 5-1:0.0: Disconnecting em28xx [ 322.410289][ T9] em28xx 5-1:0.0: Registering input extension [ 322.806963][ T5854] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 322.838581][ T9] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 322.849021][ T9] Registered IR keymap rc-empty [ 322.857663][ T9] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 322.870480][ T9] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 322.935089][ T9] em28xx 5-1:0.0: Input extension successfully initialized [ 322.958921][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.968369][ T5925] em28xx 5-1:0.0: Closing input extension [ 322.994910][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 323.009937][ T5854] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 323.018717][ T5854] usb 4-1: config 0 has no interface number 0 [ 323.025171][ T5854] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 323.035902][ T5854] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 323.054715][ T5854] usb 4-1: config 0 interface 126 has no altsetting 0 [ 323.138502][ T5925] em28xx 5-1:0.0: Freeing device [ 323.159568][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.225448][ T5854] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 323.235300][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.243492][ T5854] usb 4-1: Product: syz [ 323.248199][ T5854] usb 4-1: Manufacturer: syz [ 323.253045][ T5854] usb 4-1: SerialNumber: syz [ 323.297303][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.304882][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.436765][ T5854] usb 4-1: config 0 descriptor?? [ 323.445904][ T7612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.453862][ T7612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.487179][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.494891][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.791667][ T7489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.097181][ T5854] ir_usb 4-1:0.126: IR Dongle converter detected [ 324.371244][ T5854] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 324.577565][ T5854] usb 4-1: USB disconnect, device number 5 [ 324.709597][ T5854] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 324.721243][ T5854] ir_usb 4-1:0.126: device disconnected [ 325.811918][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.255029][ T7672] overlayfs: upper fs does not support tmpfile. [ 327.989390][ T7662] loop3: detected capacity change from 0 to 8192 [ 328.036862][ T7662] msdos: Unknown parameter 'A' [ 328.560296][ T7489] veth0_vlan: entered promiscuous mode [ 328.676477][ T7489] veth1_vlan: entered promiscuous mode [ 329.386846][ T7489] veth0_macvtap: entered promiscuous mode [ 329.407281][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'. [ 329.523424][ T7489] veth1_macvtap: entered promiscuous mode [ 329.762104][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.906237][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.001117][ T3743] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.101278][ T3743] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.140195][ T3943] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.228074][ T3943] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.358697][ T7714] netlink: 'syz.4.686': attribute type 12 has an invalid length. [ 330.367081][ T7714] netlink: 'syz.4.686': attribute type 3 has an invalid length. [ 330.375187][ T7714] netlink: 148 bytes leftover after parsing attributes in process `syz.4.686'. [ 331.836723][ T7735] loop3: detected capacity change from 0 to 256 [ 332.132040][ T7735] FAT-fs (loop3): Directory bread(block 64) failed [ 332.139131][ T7735] FAT-fs (loop3): Directory bread(block 65) failed [ 332.146281][ T7735] FAT-fs (loop3): Directory bread(block 66) failed [ 332.152989][ T7735] FAT-fs (loop3): Directory bread(block 67) failed [ 332.159981][ T7735] FAT-fs (loop3): Directory bread(block 68) failed [ 332.170797][ T7735] FAT-fs (loop3): Directory bread(block 69) failed [ 332.179055][ T7735] FAT-fs (loop3): Directory bread(block 70) failed [ 332.186703][ T7735] FAT-fs (loop3): Directory bread(block 71) failed [ 332.193535][ T7735] FAT-fs (loop3): Directory bread(block 72) failed [ 332.200618][ T7735] FAT-fs (loop3): Directory bread(block 73) failed [ 333.726284][ T7761] loop3: detected capacity change from 0 to 256 [ 334.039311][ T7761] FAT-fs (loop3): Directory bread(block 64) failed [ 334.046279][ T7761] FAT-fs (loop3): Directory bread(block 65) failed [ 334.053201][ T7761] FAT-fs (loop3): Directory bread(block 66) failed [ 334.060145][ T7761] FAT-fs (loop3): Directory bread(block 67) failed [ 334.067165][ T7761] FAT-fs (loop3): Directory bread(block 68) failed [ 334.073872][ T7761] FAT-fs (loop3): Directory bread(block 69) failed [ 334.080928][ T7761] FAT-fs (loop3): Directory bread(block 70) failed [ 334.087881][ T7761] FAT-fs (loop3): Directory bread(block 71) failed [ 334.094864][ T7761] FAT-fs (loop3): Directory bread(block 72) failed [ 334.101552][ T7761] FAT-fs (loop3): Directory bread(block 73) failed [ 335.837277][ T7791] loop4: detected capacity change from 0 to 128 [ 336.136986][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.145768][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.457832][ T4754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.469350][ T4754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.046273][ T7818] loop4: detected capacity change from 0 to 1764 [ 338.347103][ T7822] veth1_macvtap: left promiscuous mode [ 338.363093][ T7822] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 338.560697][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'. [ 338.714136][ T7827] loop2: detected capacity change from 0 to 1024 [ 338.785712][ T7827] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.877174][ T7827] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 338.894993][ T7827] EXT4-fs (loop2): orphan cleanup on readonly fs [ 338.934956][ T5854] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 339.002307][ T7827] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.723: Invalid inode table block 0 in block_group 0 [ 339.084295][ T7827] EXT4-fs (loop2): Remounting filesystem read-only [ 339.091441][ T7827] __quota_error: 1 callbacks suppressed [ 339.091512][ T7827] Quota error (device loop2): write_blk: dquota write failed [ 339.105339][ T7827] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 339.115779][ T7827] EXT4-fs (loop2): 1 truncate cleaned up [ 339.131899][ T7827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.195231][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 339.220690][ T5854] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.235539][ T5854] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.260586][ T5854] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 339.270558][ T5854] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 339.279297][ T5854] usb 7-1: Product: syz [ 339.283627][ T5854] usb 7-1: Manufacturer: syz [ 339.291429][ T7827] EXT4-fs (loop2): shut down requested (1) [ 339.501207][ T5854] hub 7-1:4.0: USB hub found [ 339.588813][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.763593][ T5854] hub 7-1:4.0: 1 port detected [ 339.839865][ T7838] netlink: 32 bytes leftover after parsing attributes in process `syz.5.727'. [ 339.973136][ T5854] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 339.979960][ T5854] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 340.115437][ T5854] usb 7-1: USB disconnect, device number 2 [ 340.733584][ T7850] netlink: 'syz.2.733': attribute type 8 has an invalid length. [ 341.212968][ T7852] netlink: 60 bytes leftover after parsing attributes in process `syz.4.735'. [ 342.029350][ T7867] loop3: detected capacity change from 0 to 1024 [ 342.054467][ T7867] EXT4-fs: inline encryption not supported [ 342.137240][ T7867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.232847][ T30] audit: type=1800 audit(1764840371.942:36): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.740" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 342.586591][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.338985][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 343.348388][ T7889] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 344.220537][ T7901] loop4: detected capacity change from 0 to 128 [ 344.273870][ T5159] udevd[5159]: worker [7202] terminated by signal 33 (Unknown signal 33) [ 344.283712][ T7901] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 344.308837][ T5159] udevd[5159]: worker [7202] failed while handling '/devices/virtual/block/loop2' [ 344.378894][ T5159] udevd[5159]: worker [5974] terminated by signal 33 (Unknown signal 33) [ 344.435061][ T5159] udevd[5159]: worker [5974] failed while handling '/devices/virtual/block/loop4' [ 345.077357][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.756'. [ 345.527704][ T7923] loop6: detected capacity change from 0 to 256 [ 345.537063][ T7923] vfat: Unknown parameter '®õQÖˆâÑmAË€“29…¾' [ 346.580580][ T7941] loop5: detected capacity change from 0 to 64 [ 346.637246][ T7941] minix: block size(59136) > page size(4096) not supported by filesystem [ 346.732028][ T7941] Trying to free block not in datazone [ 346.737878][ T7941] Trying to free block not in datazone [ 346.743723][ T7941] Trying to free block not in datazone [ 346.750128][ T7941] Trying to free block not in datazone [ 346.755860][ T7941] Trying to free block not in datazone [ 346.761498][ T7941] Trying to free block not in datazone [ 346.767180][ T7941] Trying to free block not in datazone [ 346.772761][ T7941] Trying to free block not in datazone [ 346.778669][ T7941] Trying to free block not in datazone [ 346.784366][ T7941] Trying to free block not in datazone [ 346.790064][ T7941] Trying to free block not in datazone [ 346.796221][ T7941] Trying to free block not in datazone [ 346.801808][ T7941] Trying to free block not in datazone [ 346.810810][ T7941] Trying to free block not in datazone [ 346.817758][ T7941] Trying to free block not in datazone [ 346.823350][ T7941] Trying to free block not in datazone [ 346.829142][ T7941] Trying to free block not in datazone [ 346.835578][ T7941] Trying to free block not in datazone [ 346.841169][ T7941] Trying to free block not in datazone [ 346.847245][ T7941] Trying to free block not in datazone [ 346.852823][ T7941] Trying to free block not in datazone [ 346.858549][ T7941] Trying to free block not in datazone [ 346.864219][ T7941] Trying to free block not in datazone [ 346.870296][ T7941] Trying to free block not in datazone [ 346.875994][ T7941] Trying to free block not in datazone [ 346.881635][ T7941] Trying to free block not in datazone [ 346.887348][ T7941] Trying to free block not in datazone [ 346.892925][ T7941] Trying to free block not in datazone [ 346.898737][ T7941] Trying to free block not in datazone [ 346.904315][ T7941] Trying to free block not in datazone [ 346.913143][ T7941] Trying to free block not in datazone [ 346.920240][ T7941] Trying to free block not in datazone [ 346.927864][ T7941] Trying to free block not in datazone [ 346.929380][ T7943] syz.5.763: attempt to access beyond end of device [ 346.929380][ T7943] loop5: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 346.933423][ T7941] Trying to free block not in datazone [ 346.933466][ T7941] Trying to free block not in datazone [ 346.933507][ T7941] Trying to free block not in datazone [ 346.933549][ T7941] Trying to free block not in datazone [ 346.933596][ T7941] Trying to free block not in datazone [ 346.947721][ T7943] Trying to free block not in datazone [ 346.952428][ T7941] Trying to free block not in datazone [ 346.952473][ T7941] Trying to free block not in datazone [ 346.958090][ T7943] Trying to free block not in datazone [ 346.958135][ T7943] Trying to free block not in datazone [ 347.006193][ T7941] Trying to free block not in datazone [ 347.016110][ T7941] Trying to free block not in datazone [ 347.021725][ T7941] Trying to free block not in datazone [ 347.028814][ T7941] Trying to free block not in datazone [ 347.034414][ T7941] Trying to free block not in datazone [ 347.040158][ T7941] Trying to free block not in datazone [ 347.045909][ T7941] Trying to free block not in datazone [ 347.051487][ T7941] Trying to free block not in datazone [ 347.057277][ T7941] Trying to free block not in datazone [ 347.062921][ T7941] Trying to free block not in datazone [ 347.070343][ T7941] Trying to free block not in datazone [ 347.076430][ T7941] Trying to free block not in datazone [ 347.082077][ T7941] Trying to free block not in datazone [ 347.088015][ T7941] Trying to free block not in datazone [ 347.093652][ T7941] Trying to free block not in datazone [ 347.099354][ T7941] Trying to free block not in datazone [ 347.105195][ T7941] Trying to free block not in datazone [ 347.110837][ T7941] Trying to free block not in datazone [ 347.120641][ T7941] Trying to free block not in datazone [ 347.127684][ T7941] Trying to free block not in datazone [ 347.133272][ T7941] Trying to free block not in datazone [ 347.139044][ T7941] Trying to free block not in datazone [ 347.144893][ T7941] Trying to free block not in datazone [ 347.150480][ T7941] Trying to free block not in datazone [ 347.156226][ T7941] Trying to free block not in datazone [ 347.161965][ T7941] Trying to free block not in datazone [ 347.167730][ T7941] Trying to free block not in datazone [ 347.173321][ T7941] Trying to free block not in datazone [ 347.179174][ T7941] Trying to free block not in datazone [ 347.184860][ T7941] Trying to free block not in datazone [ 347.190441][ T7941] Trying to free block not in datazone [ 347.196175][ T7941] Trying to free block not in datazone [ 347.201759][ T7941] Trying to free block not in datazone [ 347.207918][ T7941] Trying to free block not in datazone [ 347.213564][ T7941] Trying to free block not in datazone [ 347.223461][ T7941] Trying to free block not in datazone [ 347.230552][ T7941] Trying to free block not in datazone [ 347.236505][ T7941] Trying to free block not in datazone [ 347.242084][ T7941] Trying to free block not in datazone [ 347.247857][ T7941] Trying to free block not in datazone [ 347.253449][ T7941] Trying to free block not in datazone [ 347.259201][ T7941] Trying to free block not in datazone [ 347.264946][ T7941] Trying to free block not in datazone [ 347.270561][ T7941] Trying to free block not in datazone [ 347.276252][ T7941] Trying to free block not in datazone [ 347.281880][ T7941] Trying to free block not in datazone [ 347.287619][ T7941] Trying to free block not in datazone [ 347.293203][ T7941] Trying to free block not in datazone [ 347.299234][ T7941] Trying to free block not in datazone [ 347.304903][ T7941] Trying to free block not in datazone [ 347.310562][ T7941] Trying to free block not in datazone [ 347.316415][ T7941] Trying to free block not in datazone [ 347.326132][ T7941] Trying to free block not in datazone [ 347.333111][ T7941] Trying to free block not in datazone [ 347.338842][ T7941] Trying to free block not in datazone [ 347.344657][ T7941] Trying to free block not in datazone [ 347.350245][ T7941] Trying to free block not in datazone [ 347.355946][ T7941] Trying to free block not in datazone [ 347.361590][ T7941] Trying to free block not in datazone [ 347.367287][ T7941] Trying to free block not in datazone [ 347.372879][ T7941] Trying to free block not in datazone [ 347.378621][ T7941] Trying to free block not in datazone [ 347.384460][ T7941] Trying to free block not in datazone [ 347.412488][ T7941] Trying to free block not in datazone [ 347.418247][ T7941] Trying to free block not in datazone [ 347.429247][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.429480][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.446239][ T7941] Trying to free block not in datazone [ 347.451850][ T7941] Trying to free block not in datazone [ 347.457602][ T7941] Trying to free block not in datazone [ 347.463253][ T7941] Trying to free block not in datazone [ 347.469240][ T7941] Trying to free block not in datazone [ 347.474972][ T7941] Trying to free block not in datazone [ 347.480629][ T7941] Trying to free block not in datazone [ 347.486375][ T7941] Trying to free block not in datazone [ 347.491959][ T7941] Trying to free block not in datazone [ 347.497760][ T7941] Trying to free block not in datazone [ 347.503363][ T7941] Trying to free block not in datazone [ 347.509097][ T7941] Trying to free block not in datazone [ 347.514843][ T7941] Trying to free block not in datazone [ 347.520439][ T7941] Trying to free block not in datazone [ 347.529272][ T7941] Trying to free block not in datazone [ 347.536433][ T7941] Trying to free block not in datazone [ 347.542046][ T7941] Trying to free block not in datazone [ 347.547818][ T7941] Trying to free block not in datazone [ 347.553426][ T7941] Trying to free block not in datazone [ 347.559202][ T7941] Trying to free block not in datazone [ 347.564922][ T7941] Trying to free block not in datazone [ 347.570514][ T7941] Trying to free block not in datazone [ 347.576242][ T7941] Trying to free block not in datazone [ 347.581875][ T7941] Trying to free block not in datazone [ 347.590485][ T7941] Trying to free block not in datazone [ 347.598510][ T7941] Trying to free block not in datazone [ 347.604096][ T7941] Trying to free block not in datazone [ 347.609856][ T7941] Trying to free block not in datazone [ 347.615837][ T7941] Trying to free block not in datazone [ 347.621426][ T7941] Trying to free block not in datazone [ 347.630195][ T7941] Trying to free block not in datazone [ 347.637269][ T7941] Trying to free block not in datazone [ 347.642858][ T7941] Trying to free block not in datazone [ 347.648741][ T7941] Trying to free block not in datazone [ 347.654368][ T7941] Trying to free block not in datazone [ 347.660157][ T7941] Trying to free block not in datazone [ 347.665943][ T7941] Trying to free block not in datazone [ 347.671517][ T7941] Trying to free block not in datazone [ 347.677312][ T7941] Trying to free block not in datazone [ 347.682892][ T7941] Trying to free block not in datazone [ 347.688662][ T7941] Trying to free block not in datazone [ 347.694313][ T7941] Trying to free block not in datazone [ 347.700088][ T7941] Trying to free block not in datazone [ 347.705926][ T7941] Trying to free block not in datazone [ 347.711558][ T7941] Trying to free block not in datazone [ 347.717418][ T7941] Trying to free block not in datazone [ 347.723003][ T7941] Trying to free block not in datazone [ 347.732961][ T7941] Trying to free block not in datazone [ 347.739997][ T7941] Trying to free block not in datazone [ 347.745808][ T7941] Trying to free block not in datazone [ 347.751401][ T7941] Trying to free block not in datazone [ 347.757186][ T7941] Trying to free block not in datazone [ 347.762816][ T7941] Trying to free block not in datazone [ 347.768619][ T7941] Trying to free block not in datazone [ 347.774207][ T7941] Trying to free block not in datazone [ 347.779987][ T7941] Trying to free block not in datazone [ 347.785824][ T7941] Trying to free block not in datazone [ 347.791407][ T7941] Trying to free block not in datazone [ 347.797176][ T7941] Trying to free block not in datazone [ 347.802759][ T7941] Trying to free block not in datazone [ 347.808506][ T7941] Trying to free block not in datazone [ 347.814159][ T7941] Trying to free block not in datazone [ 347.819905][ T7941] Trying to free block not in datazone [ 347.826010][ T7941] Trying to free block not in datazone [ 347.836078][ T7941] Trying to free block not in datazone [ 347.841688][ T7941] Trying to free block not in datazone [ 347.848827][ T7941] Trying to free block not in datazone [ 347.854693][ T7941] Trying to free block not in datazone [ 347.860346][ T7941] Trying to free block not in datazone [ 347.866118][ T7941] Trying to free block not in datazone [ 347.871806][ T7941] Trying to free block not in datazone [ 347.877627][ T7941] Trying to free block not in datazone [ 347.883242][ T7941] Trying to free block not in datazone [ 347.897688][ T7941] Trying to free block not in datazone [ 347.903304][ T7941] Trying to free block not in datazone [ 347.909119][ T7941] Trying to free block not in datazone [ 347.914959][ T7941] Trying to free block not in datazone [ 347.922397][ T7941] Trying to free block not in datazone [ 347.928272][ T7941] Trying to free block not in datazone [ 347.937173][ T7941] Trying to free block not in datazone [ 347.942857][ T7941] Trying to free block not in datazone [ 347.949941][ T7941] Trying to free block not in datazone [ 347.955675][ T7941] Trying to free block not in datazone [ 347.961308][ T7941] Trying to free block not in datazone [ 347.967106][ T7941] Trying to free block not in datazone [ 347.972686][ T7941] Trying to free block not in datazone [ 347.978741][ T7941] Trying to free block not in datazone [ 347.984328][ T7941] Trying to free block not in datazone [ 347.990098][ T7941] Trying to free block not in datazone [ 347.995867][ T7941] Trying to free block not in datazone [ 348.001468][ T7941] Trying to free block not in datazone [ 348.007338][ T7941] Trying to free block not in datazone [ 348.013072][ T7941] Trying to free block not in datazone [ 348.018813][ T7941] Trying to free block not in datazone [ 348.024417][ T7941] Trying to free block not in datazone [ 348.030224][ T7941] Trying to free block not in datazone [ 348.039406][ T7941] Trying to free block not in datazone [ 348.046482][ T7941] Trying to free block not in datazone [ 348.052276][ T7941] Trying to free block not in datazone [ 348.058071][ T7941] Trying to free block not in datazone [ 348.063737][ T7941] Trying to free block not in datazone [ 348.069623][ T7941] Trying to free block not in datazone [ 348.075317][ T7941] Trying to free block not in datazone [ 348.080953][ T7941] Trying to free block not in datazone [ 348.086645][ T7941] Trying to free block not in datazone [ 348.092227][ T7941] Trying to free block not in datazone [ 348.098004][ T7941] Trying to free block not in datazone [ 348.103583][ T7941] Trying to free block not in datazone [ 348.109442][ T7941] Trying to free block not in datazone [ 348.115356][ T7941] Trying to free block not in datazone [ 348.120958][ T7941] Trying to free block not in datazone [ 348.126877][ T7941] Trying to free block not in datazone [ 348.132471][ T7941] Trying to free block not in datazone [ 348.141358][ T7941] Trying to free block not in datazone [ 348.148574][ T7941] Trying to free block not in datazone [ 348.154172][ T7941] Trying to free block not in datazone [ 348.160040][ T7941] Trying to free block not in datazone [ 348.165746][ T7941] Trying to free block not in datazone [ 348.171321][ T7941] Trying to free block not in datazone [ 348.177143][ T7941] Trying to free block not in datazone [ 348.182721][ T7941] Trying to free block not in datazone [ 348.188505][ T7941] Trying to free block not in datazone [ 348.194142][ T7941] Trying to free block not in datazone [ 348.202589][ T7941] Trying to free block not in datazone [ 348.210900][ T7941] Trying to free block not in datazone [ 348.216679][ T7941] Trying to free block not in datazone [ 348.222273][ T7941] Trying to free block not in datazone [ 348.227984][ T7941] Trying to free block not in datazone [ 348.233564][ T7941] Trying to free block not in datazone [ 348.243873][ T7941] Trying to free block not in datazone [ 348.251296][ T7941] Trying to free block not in datazone [ 348.257023][ T7941] Trying to free block not in datazone [ 348.262660][ T7941] Trying to free block not in datazone [ 348.268494][ T7941] Trying to free block not in datazone [ 348.274069][ T7941] Trying to free block not in datazone [ 348.279899][ T7941] Trying to free block not in datazone [ 348.285671][ T7941] Trying to free block not in datazone [ 348.291289][ T7941] Trying to free block not in datazone [ 348.297066][ T7941] Trying to free block not in datazone [ 348.302648][ T7941] Trying to free block not in datazone [ 348.308418][ T7941] Trying to free block not in datazone [ 348.314111][ T7941] Trying to free block not in datazone [ 348.319922][ T7941] Trying to free block not in datazone [ 348.325604][ T7941] Trying to free block not in datazone [ 348.331238][ T7941] Trying to free block not in datazone [ 348.337220][ T7941] Trying to free block not in datazone [ 348.347050][ T7941] Trying to free block not in datazone [ 348.352660][ T7941] Trying to free block not in datazone [ 348.363149][ T7941] Trying to free block not in datazone [ 348.369651][ T7941] Trying to free block not in datazone [ 348.375376][ T7941] Trying to free block not in datazone [ 348.386052][ T7941] Trying to free block not in datazone [ 348.934257][ T7956] loop3: detected capacity change from 0 to 1024 [ 348.997871][ T7956] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.135538][ T7956] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.768: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.226734][ T7956] Quota error (device loop3): write_blk: dquota write failed [ 349.234382][ T7956] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 349.245070][ T7956] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.768: Failed to acquire dquot type 0 [ 349.409440][ T7956] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.768: Freeing blocks not in datazone - block = 0, count = 4096 [ 349.496229][ T7956] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.768: Invalid inode bitmap blk 0 in block_group 0 [ 349.517513][ T3943] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.576878][ T7956] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 349.609787][ T3943] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 349.618747][ T3943] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 0 [ 349.664988][ T7956] EXT4-fs (loop3): 1 orphan inode deleted [ 349.678225][ T7956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.891099][ T7956] EXT4-fs (loop3): shut down requested (2) [ 350.252474][ T7974] loop6: detected capacity change from 0 to 512 [ 350.263478][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.291810][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 350.300672][ T7974] EXT4-fs: Ignoring removed oldalloc option [ 350.302509][ T7979] netem: change failed [ 350.364059][ T7974] EXT4-fs (loop6): 1 truncate cleaned up [ 350.372100][ T7974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.545190][ T30] audit: type=1800 audit(1764840380.252:37): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.774" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 351.066583][ T7489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.585175][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.781'. [ 352.298195][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.785'. [ 353.120254][ T8022] loop2: detected capacity change from 0 to 128 [ 353.200180][ T8022] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 353.346657][ T8022] hpfs: filesystem error: improperly stopped [ 353.352908][ T8022] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 353.365993][ T8022] hpfs: You really don't want any checks? You are crazy... [ 353.375282][ T8027] Bluetooth: MGMT ver 1.23 [ 353.379881][ T8027] Bluetooth: hci0: unsupported parameter 512 [ 353.386399][ T8027] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 353.469286][ T8022] hpfs: hpfs_map_sector(): read error [ 353.475079][ T8022] hpfs: code page support is disabled [ 353.546122][ T8022] hpfs: filesystem error: map_dirent: not a directory [ 353.553118][ T8022] [ 353.585136][ T8022] hpfs: hpfs_map_4sectors(): unaligned read [ 353.591385][ T8022] hpfs: filesystem error: unable to find root dir [ 353.635362][ T8033] loop4: detected capacity change from 0 to 256 [ 353.887079][ T8033] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 354.166528][ T8034] loop3: detected capacity change from 0 to 4096 [ 354.805023][ T8034] ntfs3(loop3): failed to convert "0080" to koi8-ru [ 354.852270][ T8034] ntfs3(loop3): failed to convert name for inode 1e. [ 354.915288][ T8034] ntfs3(loop3): ino=1f, mi_enum_attr [ 355.523027][ T8056] loop5: detected capacity change from 0 to 1024 [ 355.686393][ T8056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 355.699118][ T8056] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.970721][ T8056] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.800: lblock 3 mapped to illegal pblock 3 (length 3) [ 356.010943][ T8056] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 356.028179][ T8056] EXT4-fs (loop5): This should not happen!! Data will be lost [ 356.028179][ T8056] [ 356.471870][ T59] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 356.518715][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 356.531976][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 356.531976][ T59] [ 356.599883][ T6898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 357.008715][ T5854] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 357.285849][ T5854] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 357.295271][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.340545][ T5854] usb 7-1: config 0 descriptor?? [ 357.366464][ T5854] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 357.604106][ T5854] gp8psk: usb in 128 operation failed. [ 357.676615][ T5854] gp8psk: usb in 137 operation failed. [ 357.682379][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 357.721977][ T5854] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 357.730988][ T5854] usb 7-1: media controller created [ 357.863464][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.169067][ T5854] gp8psk_fe: Frontend attached [ 358.179942][ T5854] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 358.190984][ T5854] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 358.365262][ T5854] gp8psk: usb in 138 operation failed. [ 358.371008][ T5854] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 358.387043][ T5854] gp8psk: found Genpix USB device pID = 203 (hex) [ 358.521383][ T5854] usb 7-1: USB disconnect, device number 3 [ 358.999736][ T8102] loop4: detected capacity change from 0 to 512 [ 359.061369][ T8102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 359.144332][ T8102] EXT4-fs (loop4): 1 truncate cleaned up [ 359.156133][ T8102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.238409][ T5854] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 359.245963][ T30] audit: type=1800 audit(1764840388.932:38): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.815" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 360.217292][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.069246][ T8146] tipc: Enabling of bearer rejected, already enabled [ 362.228112][ T8149] netem: incorrect ge model size [ 362.233213][ T8149] netem: change failed [ 363.182923][ T30] audit: type=1326 audit(1764840392.882:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.6.839" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 363.856860][ T8174] loop3: detected capacity change from 0 to 128 [ 363.920076][ T8174] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 363.974845][ T5878] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 364.164427][ T5878] usb 5-1: config index 0 descriptor too short (expected 45925, got 18) [ 364.173230][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.183678][ T5878] usb 5-1: config 0 has no interfaces? [ 364.261962][ T5878] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 364.272151][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.281356][ T5878] usb 5-1: Product: syz [ 364.286466][ T5878] usb 5-1: Manufacturer: syz [ 364.291240][ T5878] usb 5-1: SerialNumber: syz [ 364.352554][ T5878] usb 5-1: config 0 descriptor?? [ 364.669347][ T5878] usb 5-1: USB disconnect, device number 4 [ 364.952235][ T8190] loop6: detected capacity change from 0 to 1024 [ 365.167559][ T8192] loop2: detected capacity change from 0 to 1764 [ 365.169120][ T12] hfsplus: b-tree write err: -5, ino 4 [ 365.566225][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 366.055454][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 366.395057][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.406389][ T5878] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 366.422814][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.457056][ T5878] usb 6-1: config 0 descriptor?? [ 366.922058][ T5878] cherry 0003:046A:0023.0005: bogus close delimiter [ 366.929031][ T5878] cherry 0003:046A:0023.0005: item 0 1 2 10 parsing failed [ 366.977288][ T5878] cherry 0003:046A:0023.0005: probe with driver cherry failed with error -22 [ 367.145834][ T9] usb 6-1: USB disconnect, device number 3 [ 368.157190][ T8238] loop5: detected capacity change from 0 to 1024 [ 368.315118][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 368.422463][ T12] hfsplus: b-tree write err: -5, ino 4 [ 368.487251][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 368.503136][ T8246] loop2: detected capacity change from 0 to 256 [ 368.535525][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.546861][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 368.560293][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 368.569843][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.695397][ T9] usb 7-1: config 0 descriptor?? [ 369.182452][ T9] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 369.269740][ T8258] program syz.2.880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.321767][ T9] HID 045e:07da: Invalid code 65582 type 1 [ 369.328016][ T9] HID 045e:07da: Invalid code 65583 type 1 [ 369.340704][ T9] HID 045e:07da: Invalid code 65584 type 1 [ 369.351505][ T9] HID 045e:07da: Invalid code 65585 type 1 [ 369.360777][ T9] HID 045e:07da: Invalid code 65586 type 1 [ 369.367231][ T9] HID 045e:07da: Invalid code 65587 type 1 [ 369.373494][ T9] HID 045e:07da: Invalid code 65588 type 1 [ 369.379801][ T9] HID 045e:07da: Invalid code 65589 type 1 [ 369.388572][ T9] HID 045e:07da: Invalid code 65590 type 1 [ 369.395152][ T9] HID 045e:07da: Invalid code 65591 type 1 [ 369.494339][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input13 [ 369.591000][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 369.729086][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 369.758591][ T5878] usb 7-1: USB disconnect, device number 4 [ 369.914147][ T8266] loop2: detected capacity change from 0 to 256 [ 370.020967][ T8266] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 370.519776][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 370.571276][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 370.798082][ T8282] loop6: detected capacity change from 0 to 64 [ 371.073183][ T8287] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 371.087116][ T8287] macvtap1: entered allmulticast mode [ 371.092703][ T8287] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 371.131685][ T8287] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 371.139376][ T8287] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 372.631356][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.905'. [ 373.178331][ T8326] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 373.222221][ T8326] bond0: (slave veth1_to_bond): Enslaving as an active interface with an up link [ 373.490975][ T8329] use of bytesused == 0 is deprecated and will be removed in the future, [ 373.500211][ T8329] use the actual size instead. [ 374.344828][ T5809] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 374.356690][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 374.615428][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.920'. [ 375.918707][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 375.956193][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 376.146013][ T3745] ===================================================== [ 376.153283][ T3745] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0 [ 376.161714][ T3745] n_tty_receive_buf_closing+0xfe/0x9a0 [ 376.167691][ T3745] n_tty_receive_buf_common+0x19d5/0x2540 [ 376.178982][ T3745] n_tty_receive_buf2+0x4c/0x60 [ 376.186854][ T3745] tty_ldisc_receive_buf+0xc6/0x2c0 [ 376.192595][ T3745] tty_port_default_receive_buf+0xd7/0x1a0 [ 376.200937][ T3745] flush_to_ldisc+0x43e/0xe30 [ 376.208420][ T3745] process_scheduled_works+0xb91/0x1d80 [ 376.214317][ T3745] worker_thread+0xedf/0x1590 [ 376.219395][ T3745] kthread+0xd5c/0xf00 [ 376.223659][ T3745] ret_from_fork+0x208/0x710 [ 376.228658][ T3745] ret_from_fork_asm+0x1a/0x30 [ 376.233582][ T3745] [ 376.236375][ T3745] Uninit was stored to memory at: [ 376.241761][ T3745] n_tty_receive_buf_closing+0xf7/0x9a0 [ 376.247697][ T3745] n_tty_receive_buf_common+0x19d5/0x2540 [ 376.253604][ T3745] n_tty_receive_buf2+0x4c/0x60 [ 376.258953][ T3745] tty_ldisc_receive_buf+0xc6/0x2c0 [ 376.264327][ T3745] tty_port_default_receive_buf+0xd7/0x1a0 [ 376.270504][ T3745] flush_to_ldisc+0x43e/0xe30 [ 376.275510][ T3745] process_scheduled_works+0xb91/0x1d80 [ 376.281243][ T3745] worker_thread+0xedf/0x1590 [ 376.286247][ T3745] kthread+0xd5c/0xf00 [ 376.290531][ T3745] ret_from_fork+0x208/0x710 [ 376.295504][ T3745] ret_from_fork_asm+0x1a/0x30 [ 376.302546][ T3745] [ 376.305988][ T3745] Uninit was created at: [ 376.310443][ T3745] __kmalloc_noprof+0xa96/0x1b70 [ 376.315772][ T3745] __tty_buffer_request_room+0x3d4/0x7a0 [ 376.321635][ T3745] __tty_insert_flip_string_flags+0x157/0x6f0 [ 376.328040][ T3745] uart_insert_char+0x368/0x930 [ 376.333028][ T3745] serial8250_read_char+0x1ba/0x670 [ 376.338604][ T3745] serial8250_handle_irq+0x930/0x1110 [ 376.344115][ T3745] serial8250_default_handle_irq+0x116/0x370 [ 376.350482][ T3745] serial8250_interrupt+0xcb/0x430 [ 376.356007][ T3745] __handle_irq_event_percpu+0x122/0xf40 [ 376.361825][ T3745] handle_irq_event+0xe0/0x2a0 [ 376.366984][ T3745] handle_edge_irq+0x2a9/0xb50 [ 376.371954][ T3745] __common_interrupt+0x9d/0x180 [ 376.377305][ T3745] common_interrupt+0x94/0xb0 [ 376.382145][ T3745] asm_common_interrupt+0x2b/0x40 [ 376.387484][ T3745] [ 376.389970][ T3745] CPU: 1 UID: 0 PID: 3745 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(none) [ 376.402234][ T3745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.413641][ T3745] Workqueue: events_unbound flush_to_ldisc [ 376.419881][ T3745] ===================================================== [ 376.427248][ T3745] Disabling lock debugging due to kernel taint [ 376.433577][ T3745] Kernel panic - not syncing: kmsan.panic set ... [ 376.440121][ T3745] CPU: 1 UID: 0 PID: 3745 Comm: kworker/u8:23 Tainted: G B syzkaller #0 PREEMPT(none) [ 376.451502][ T3745] Tainted: [B]=BAD_PAGE [ 376.455725][ T3745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.465888][ T3745] Workqueue: events_unbound flush_to_ldisc [ 376.471883][ T3745] Call Trace: [ 376.475233][ T3745] [ 376.478313][ T3745] __dump_stack+0x26/0x30 [ 376.482784][ T3745] dump_stack_lvl+0x53/0x270 [ 376.487514][ T3745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.493485][ T3745] dump_stack+0x1e/0x25 [ 376.497793][ T3745] vpanic+0x435/0xd30 [ 376.501952][ T3745] panic+0x15d/0x160 [ 376.506050][ T3745] kmsan_report+0x31c/0x320 [ 376.510714][ T3745] ? __msan_warning+0x1b/0x30 [ 376.515524][ T3745] ? n_tty_receive_buf_closing+0xfe/0x9a0 [ 376.521424][ T3745] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 376.527644][ T3745] ? n_tty_receive_buf2+0x4c/0x60 [ 376.532833][ T3745] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 376.538342][ T3745] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 376.544492][ T3745] ? flush_to_ldisc+0x43e/0xe30 [ 376.549507][ T3745] ? process_scheduled_works+0xb91/0x1d80 [ 376.555421][ T3745] ? worker_thread+0xedf/0x1590 [ 376.560387][ T3745] ? kthread+0xd5c/0xf00 [ 376.564744][ T3745] ? ret_from_fork+0x208/0x710 [ 376.569676][ T3745] ? ret_from_fork_asm+0x1a/0x30 [ 376.574785][ T3745] ? ret_from_fork_asm+0x1a/0x30 [ 376.579884][ T3745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.585856][ T3745] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 376.591723][ T3745] ? __update_load_avg_se+0xd02/0x11c0 [ 376.597340][ T3745] ? kmsan_get_metadata+0xfb/0x160 [ 376.602591][ T3745] ? kmsan_get_metadata+0xfb/0x160 [ 376.607851][ T3745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.613828][ T3745] ? kmsan_get_metadata+0xfb/0x160 [ 376.619104][ T3745] __msan_warning+0x1b/0x30 [ 376.623742][ T3745] n_tty_receive_buf_closing+0xfe/0x9a0 [ 376.629507][ T3745] n_tty_receive_buf_common+0x19d5/0x2540 [ 376.635488][ T3745] n_tty_receive_buf2+0x4c/0x60 [ 376.640507][ T3745] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 376.646219][ T3745] tty_ldisc_receive_buf+0xc6/0x2c0 [ 376.651573][ T3745] tty_port_default_receive_buf+0xd7/0x1a0 [ 376.657552][ T3745] flush_to_ldisc+0x43e/0xe30 [ 376.662416][ T3745] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 376.669024][ T3745] ? __pfx_flush_to_ldisc+0x10/0x10 [ 376.674378][ T3745] process_scheduled_works+0xb91/0x1d80 [ 376.680155][ T3745] worker_thread+0xedf/0x1590 [ 376.684986][ T3745] kthread+0xd5c/0xf00 [ 376.689350][ T3745] ? __pfx_worker_thread+0x10/0x10 [ 376.694604][ T3745] ? __pfx_kthread+0x10/0x10 [ 376.699321][ T3745] ret_from_fork+0x208/0x710 [ 376.704073][ T3745] ? __switch_to+0x53d/0x790 [ 376.708799][ T3745] ? __pfx_kthread+0x10/0x10 [ 376.713614][ T3745] ret_from_fork_asm+0x1a/0x30 [ 376.718556][ T3745] [ 376.721809][ T3745] Kernel Offset: disabled [ 376.726179][ T3745] Rebooting in 86400 seconds..