last executing test programs: 3m21.375062771s ago: executing program 2 (id=168): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/164, 0xa4) lseek(r0, 0xffffffffffffffec, 0x1) 3m21.096554681s ago: executing program 2 (id=170): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) 3m19.183109397s ago: executing program 2 (id=179): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5f, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/43, 0x2b) getdents64(r1, 0x0, 0x0) 3m18.642247054s ago: executing program 2 (id=183): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000840, &(0x7f0000000700)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000043620,gid=ignore,iocharset=euc-jp,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6164696e6963622c6d6f64653d30303030303030303030303030303030303030303030332c6e6f7374726963742c009b801a9990a34c426430bf3757fbcea5d9a21b29b4ae2c6d10e74873111016bc74ff654722640a72d8cc5e210fef2b359e9e61ade82c60025773de99df3af6548534bfdef68d88ae15c726"], 0xfe, 0xc2d, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x22) 3m17.736364692s ago: executing program 2 (id=185): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 3m16.720051961s ago: executing program 2 (id=189): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x9000}, {r0, 0x42}], 0x2, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m13.660335834s ago: executing program 32 (id=189): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x9000}, {r0, 0x42}], 0x2, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m57.387130776s ago: executing program 1 (id=233): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12030, 0x0) 2m56.300332929s ago: executing program 1 (id=235): socket$unix(0x1, 0x2, 0x0) r0 = syz_clone(0xb00200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='fd/3\x00') 2m54.588806405s ago: executing program 1 (id=239): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffda1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="dd6542a82c", 0x5}) recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m53.451162093s ago: executing program 1 (id=244): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 2m51.174789194s ago: executing program 1 (id=249): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) r2 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m49.367538432s ago: executing program 1 (id=255): socket$netlink(0x10, 0x3, 0x8000000004) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x20, 0x0, 0x0, 0x0) 2m48.067187697s ago: executing program 33 (id=255): socket$netlink(0x10, 0x3, 0x8000000004) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x20, 0x0, 0x0, 0x0) 24.768439545s ago: executing program 4 (id=665): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 24.008893634s ago: executing program 4 (id=667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x40010) read$alg(r1, &(0x7f00000000c0)=""/188, 0xbc) 23.677459228s ago: executing program 4 (id=668): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r1, 0x0, 0x0) 22.824578364s ago: executing program 4 (id=672): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="02"], 0x10) 22.018680814s ago: executing program 4 (id=675): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfff) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 21.244226225s ago: executing program 4 (id=679): r0 = io_uring_setup(0x7daf, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r2, 0x0, 0x80, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 13.818599078s ago: executing program 3 (id=698): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 12.815268027s ago: executing program 3 (id=700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x1, 0x4) eventfd(0xfffffff9) prctl$PR_SET_SECUREBITS(0x1c, 0x30) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 12.158270791s ago: executing program 3 (id=702): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCFLSH(r0, 0x804c4700, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000000)=0x1, 0x24, 0x0) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) 8.780280098s ago: executing program 6 (id=712): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x191, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.470591341s ago: executing program 0 (id=713): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x60600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 7.660809235s ago: executing program 6 (id=715): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 7.299066318s ago: executing program 0 (id=716): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r0], 0x20}}, 0x0) 6.872925842s ago: executing program 5 (id=717): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 6.393025515s ago: executing program 6 (id=718): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000380)={0x0, 0x5}, 0x2) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) 6.084966065s ago: executing program 0 (id=719): r0 = io_uring_setup(0x26ce, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.92955373s ago: executing program 3 (id=720): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr, 0x2}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) dup2(r1, r0) 4.823993466s ago: executing program 5 (id=721): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x809, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7e6b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x8, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0xdb44, 0x3, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x9, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x6, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xf1, 0xffff, 0xfffffffd, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x2, 0x5, 0x938, 0x3, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x1ffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x1, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.004378396s ago: executing program 6 (id=722): r0 = userfaultfd(0x801) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) 3.522888345s ago: executing program 5 (id=723): epoll_create1(0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x0, 0x3fffe, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) 3.334371417s ago: executing program 0 (id=724): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/89, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x8, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x1, r2}, 0x10) 2.984085333s ago: executing program 3 (id=725): pipe2$9p(0x0, 0x0) ioperm(0x83, 0x6, 0x8) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x7, 0x5, 0x4, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0xe) read$dsp(r0, &(0x7f0000000200)=""/115, 0x73) 2.539042635s ago: executing program 6 (id=726): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000380)="cf", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 2.08200262s ago: executing program 5 (id=727): clock_gettime(0x1, &(0x7f0000000500)={0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioperm(0x0, 0x12b, 0x8000000000008) clock_settime(0x0, &(0x7f00000009c0)={r0, r1+60000000}) 1.580426395s ago: executing program 0 (id=728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) socket$inet_udp(0x2, 0x2, 0x0) 1.346411759s ago: executing program 6 (id=729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, 0x0, 0x0) 1.125707154s ago: executing program 5 (id=730): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 955.504968ms ago: executing program 0 (id=731): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000200)='./file1\x00', 0x10000, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000001580)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 628.132811ms ago: executing program 3 (id=732): syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 0s ago: executing program 5 (id=733): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000100)=ANY=[@ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0xc5a, &(0x7f0000001040)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): Directory 'hsr0' with parent 'hsr' already present! [ 270.372604][ T5778] Cannot create hsr debugfs directory [ 270.720613][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.842694][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.967528][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.017834][ T5792] hsr_slave_0: entered promiscuous mode [ 271.027719][ T5792] hsr_slave_1: entered promiscuous mode [ 271.037794][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.045766][ T5792] Cannot create hsr debugfs directory [ 271.109057][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.743560][ T5780] Bluetooth: hci3: command tx timeout [ 271.813848][ T5780] Bluetooth: hci0: command tx timeout [ 271.821404][ T5780] Bluetooth: hci2: command tx timeout [ 271.894687][ T5780] Bluetooth: hci4: command tx timeout [ 271.900413][ T5788] Bluetooth: hci1: command tx timeout [ 272.010527][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.038018][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.079663][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.113950][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.242844][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.330890][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.472941][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.508796][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 272.538185][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.564865][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.591669][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.643309][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 272.694551][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 272.736793][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.774990][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.810363][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.261140][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.494426][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.526517][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.534398][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.671719][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.679498][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.889701][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.170998][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.195905][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.344468][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.352290][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.453817][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.461648][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.544481][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.572972][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.761902][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.769663][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.854363][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.896293][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.955641][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.963521][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.102915][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.193452][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.201355][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.309655][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.317538][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.334713][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.342622][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.500659][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.565391][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.573576][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.755178][ T5792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.766051][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.109172][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.204020][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.938279][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.979142][ T5785] veth0_vlan: entered promiscuous mode [ 278.000345][ T5781] veth0_vlan: entered promiscuous mode [ 278.099486][ T5785] veth1_vlan: entered promiscuous mode [ 278.143770][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.162861][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.175360][ T5781] veth1_vlan: entered promiscuous mode [ 278.509302][ T5785] veth0_macvtap: entered promiscuous mode [ 278.633390][ T5785] veth1_macvtap: entered promiscuous mode [ 278.730831][ T5781] veth0_macvtap: entered promiscuous mode [ 278.809160][ T5792] veth0_vlan: entered promiscuous mode [ 278.877845][ T5781] veth1_macvtap: entered promiscuous mode [ 278.959031][ T5778] veth0_vlan: entered promiscuous mode [ 278.983647][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.043186][ T5792] veth1_vlan: entered promiscuous mode [ 279.132304][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.193044][ T5778] veth1_vlan: entered promiscuous mode [ 279.220862][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.233512][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.248511][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.272549][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.281805][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.291225][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.300305][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.374316][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.385283][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.400401][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.520581][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.529859][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.542623][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.552397][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.675473][ T5792] veth0_macvtap: entered promiscuous mode [ 279.764254][ T5778] veth0_macvtap: entered promiscuous mode [ 279.788025][ T5792] veth1_macvtap: entered promiscuous mode [ 279.876796][ T5778] veth1_macvtap: entered promiscuous mode [ 280.017419][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.029425][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.039632][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.050474][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.068764][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.228561][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.241284][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.252936][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.263842][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.274039][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.284864][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.303474][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.327625][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.338474][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.348668][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.359454][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.374239][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.406718][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.420543][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.432596][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.443448][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.454387][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.465782][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.480819][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.522943][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.535676][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.545085][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.554382][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.688177][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.700426][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.709735][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.719051][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.402238][ T5784] veth0_vlan: entered promiscuous mode [ 281.518987][ T5784] veth1_vlan: entered promiscuous mode [ 281.982084][ T5784] veth0_macvtap: entered promiscuous mode [ 282.054483][ T5784] veth1_macvtap: entered promiscuous mode [ 282.268425][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.280102][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.290613][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.301703][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.311952][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.322849][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.333212][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.344161][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.359254][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.658549][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.671168][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.683070][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.694981][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.705789][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.716712][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.726962][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.737791][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.753000][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.105742][ T5784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.115100][ T5784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.124528][ T5784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.133852][ T5784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.980042][ T4829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.989522][ T4829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.132954][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.141265][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.469143][ T4740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.477606][ T4740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.640244][ T5781] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 287.742356][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.750483][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.401205][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.409425][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.503913][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.512329][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.629848][ T4740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.638158][ T4740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.759030][ T4740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.767422][ T4740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.706075][ T5964] loop0: detected capacity change from 0 to 4096 [ 289.774673][ T5968] loop3: detected capacity change from 0 to 128 [ 289.786200][ T5964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.936012][ T5968] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.994399][ T5968] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.003798][ T5964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.072766][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.104131][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 290.817189][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.824344][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.868307][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.877140][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.035629][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.091642][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.099730][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.138243][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.358472][ T5990] loop1: detected capacity change from 0 to 1024 [ 292.451758][ T5990] ======================================================= [ 292.451758][ T5990] WARNING: The mand mount option has been deprecated and [ 292.451758][ T5990] and is ignored by this kernel. Remove the mand [ 292.451758][ T5990] option from the mount to silence this warning. [ 292.451758][ T5990] ======================================================= [ 292.794234][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 292.939646][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.139351][ T5990] process 'syz.1.12' launched './file1' with NULL argv: empty string added [ 293.244632][ T6004] loop3: detected capacity change from 0 to 512 [ 293.274079][ T6004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 293.287758][ T6004] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.336049][ T6002] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 293.656653][ T6007] input: syz0 as /devices/virtual/input/input5 [ 293.682288][ T6004] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 293.744729][ T6004] EXT4-fs (loop3): 1 truncate cleaned up [ 293.791920][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.818203][ T6004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.933253][ T29] audit: type=1800 audit(1735922959.219:2): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 294.164386][ T29] audit: type=1804 audit(1735922959.439:3): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.15" name="/newroot/4/bus/file1" dev="loop3" ino=18 res=1 errno=0 [ 294.640112][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.011151][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 295.192247][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 295.231450][ T25] usb 3-1: config 16 has an invalid interface number: 117 but max is 0 [ 295.240359][ T25] usb 3-1: config 16 has no interface number 0 [ 295.249918][ T25] usb 3-1: config 16 interface 117 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 295.267607][ T25] usb 3-1: config 16 interface 117 has no altsetting 0 [ 295.788922][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=6011, bcdDevice=3f.af [ 295.799959][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.809321][ T25] usb 3-1: Product: syz [ 295.814228][ T25] usb 3-1: Manufacturer: syz [ 295.819210][ T25] usb 3-1: SerialNumber: syz [ 295.835303][ T6023] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.256864][ T25] gspca_main: sonixb-2.14.0 probing 0c45:6011 [ 296.277157][ T25] sonixb 3-1:16.117: Error reading register 00: -71 [ 296.304766][ T5780] Bluetooth: hci4: command 0x0405 tx timeout [ 296.341246][ T25] usb 3-1: USB disconnect, device number 2 [ 297.438200][ T6037] loop1: detected capacity change from 0 to 2048 [ 297.692344][ T6037] loop1: p1 p3 < > p4 < p5 > [ 297.697517][ T6037] loop1: partition table partially beyond EOD, truncated [ 297.715382][ T6037] loop1: p1 size 33024 extends beyond EOD, truncated [ 297.839908][ T6037] loop1: p3 start 4284289 is beyond EOD, truncated [ 297.891519][ T6037] loop1: p5 size 33024 extends beyond EOD, truncated [ 298.772505][ T6049] loop3: detected capacity change from 0 to 512 [ 299.528344][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.32: casefold flag without casefold feature [ 299.621462][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.32: couldn't read orphan inode 15 (err -117) [ 299.712008][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 299.756623][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.583450][ T6060] syzkaller1: entered promiscuous mode [ 300.589234][ T6060] syzkaller1: entered allmulticast mode [ 300.751617][ T5841] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 300.791683][ T6067] loop2: detected capacity change from 0 to 1024 [ 300.973265][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.764644][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 301.808573][ T5841] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 301.818336][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.845301][ T75] hfsplus: b-tree write err: -5, ino 4 [ 301.906471][ T5841] usb 5-1: config 0 descriptor?? [ 303.099021][ T5841] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 303.110127][ T5841] asix 5-1:0.0: probe with driver asix failed with error -71 [ 303.178485][ T5841] usb 5-1: USB disconnect, device number 2 [ 304.322102][ T6093] loop2: detected capacity change from 0 to 2048 [ 305.027594][ T6093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.106461][ T6110] loop3: detected capacity change from 0 to 256 [ 305.205462][ T6093] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 305.287695][ T6093] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 305.300816][ T6093] EXT4-fs (loop2): This should not happen!! Data will be lost [ 305.300816][ T6093] [ 305.311096][ T6093] EXT4-fs (loop2): Total free blocks count 0 [ 305.317356][ T6093] EXT4-fs (loop2): Free/Dirty block details [ 305.323624][ T6093] EXT4-fs (loop2): free_blocks=2415919104 [ 305.329608][ T6093] EXT4-fs (loop2): dirty_blocks=32 [ 305.335131][ T6093] EXT4-fs (loop2): Block reservation details [ 305.341589][ T6093] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 305.410087][ T6111] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 307.280531][ T6128] block nbd4: shutting down sockets [ 307.711180][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 307.931207][ T25] usb 4-1: config 0 has no interfaces? [ 307.959564][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.969180][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.977700][ T25] usb 4-1: Product: syz [ 307.982306][ T25] usb 4-1: Manufacturer: syz [ 308.136163][ T6139] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 308.144225][ T6139] netlink: 17 bytes leftover after parsing attributes in process `syz.0.69'. [ 308.171008][ T25] usb 4-1: config 0 descriptor?? [ 308.789034][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.799188][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.853628][ T3060] usb 4-1: USB disconnect, device number 2 [ 309.536548][ T6160] loop0: detected capacity change from 0 to 256 [ 309.651092][ T6155] input: syz0 as /devices/virtual/input/input6 [ 311.786925][ T3060] IPVS: starting estimator thread 0... [ 312.176070][ T6188] sp0: Synchronizing with TNC [ 312.185675][ T6180] IPVS: using max 192 ests per chain, 9600 per kthread [ 313.622959][ T6205] loop3: detected capacity change from 0 to 164 [ 313.630148][ T6206] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 314.880374][ T6216] syz.0.98 uses obsolete (PF_INET,SOCK_PACKET) [ 315.949560][ T6231] loop0: detected capacity change from 0 to 512 [ 316.004962][ T6230] loop1: detected capacity change from 0 to 1024 [ 316.334750][ T6231] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 316.355893][ T6231] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 316.368761][ T6231] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 316.461801][ T6231] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 316.470591][ T6231] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.104: corrupted in-inode xattr: invalid ea_ino [ 316.551255][ T6231] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.104: couldn't read orphan inode 15 (err -117) [ 316.663413][ T6231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.766331][ T6241] loop4: detected capacity change from 0 to 512 [ 316.801560][ T2151] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 316.834655][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 316.848165][ T6241] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.866815][ T6231] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 316.881617][ T6231] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 316.892256][ T6231] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 316.948322][ T6231] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 316.963606][ T6231] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 316.976547][ T6231] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 317.023237][ T2151] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.034980][ T2151] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.045774][ T2151] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.052882][ T2151] usb 3-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 317.065024][ T2151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.112036][ T6244] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 317.124108][ T6244] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 317.135336][ T6244] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 317.172180][ T2151] usb 3-1: config 0 descriptor?? [ 317.294971][ T6231] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 317.367315][ T6231] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.104: path /17/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 317.453800][ T6231] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 64: comm syz.0.104: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 317.543859][ T6250] loop3: detected capacity change from 0 to 1024 [ 317.545995][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 317.812199][ T2151] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 317.819845][ T2151] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 317.827443][ T2151] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 317.835348][ T2151] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 317.842756][ T2151] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 317.889986][ T2151] wacom 0003:056A:033D.0001: Unknown device_type for 'HID 056a:033d'. Assuming pen. [ 318.024800][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.084468][ T2151] wacom 0003:056A:033D.0001: hidraw0: USB HID v0.00 Device [HID 056a:033d] on usb-dummy_hcd.2-1/input0 [ 318.104318][ T2151] input: Wacom Intuos P M 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:033D.0001/input/input7 [ 318.141743][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.228247][ T2151] usb 3-1: USB disconnect, device number 3 [ 318.369665][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 318.850589][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.250940][ T6274] loop1: detected capacity change from 0 to 256 [ 320.347019][ T2151] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 320.396645][ T6274] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 320.701554][ T29] audit: type=1800 audit(1735922985.969:4): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.118" name="file1" dev="loop1" ino=1048604 res=0 errno=0 [ 320.884705][ T2151] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 320.894571][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.903521][ T2151] usb 1-1: Product: syz [ 320.907980][ T2151] usb 1-1: Manufacturer: syz [ 320.912990][ T2151] usb 1-1: SerialNumber: syz [ 320.924317][ T2151] usb 1-1: config 0 descriptor?? [ 321.246356][ T3060] usb 1-1: USB disconnect, device number 2 [ 321.617947][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.351447][ T2151] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 322.542397][ T2151] usb 4-1: Using ep0 maxpacket: 8 [ 322.591190][ T2151] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 322.600992][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.609500][ T2151] usb 4-1: Product: syz [ 322.614783][ T2151] usb 4-1: Manufacturer: syz [ 322.619683][ T2151] usb 4-1: SerialNumber: syz [ 322.705529][ T2151] usb 4-1: config 0 descriptor?? [ 323.099710][ T2151] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 323.536373][ T2151] usb write operation failed. (-71) [ 323.598383][ T2151] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 323.614612][ T2151] dvbdev: DVB: registering new adapter (Terratec H7) [ 323.622932][ T2151] usb 4-1: media controller created [ 323.647516][ T2151] usb read operation failed. (-71) [ 323.745711][ T2151] usb write operation failed. (-71) [ 323.838465][ T2151] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 323.886391][ T2151] usb 4-1: USB disconnect, device number 3 [ 324.112951][ T5841] kernel write not supported for file bpf-prog (pid: 5841 comm: kworker/0:5) [ 324.130551][ T3060] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 324.352463][ T3060] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 324.361401][ T3060] usb 5-1: config 54 has no interface number 0 [ 324.397225][ T3060] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 324.406861][ T3060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.415772][ T3060] usb 5-1: Product: syz [ 324.420425][ T3060] usb 5-1: Manufacturer: syz [ 324.426034][ T3060] usb 5-1: SerialNumber: syz [ 324.984696][ T3060] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 324.999907][ T4740] usb 5-1: Failed to submit usb control message: -71 [ 325.007247][ T4740] usb 5-1: unable to send the bmi data to the device: -71 [ 325.015081][ T4740] usb 5-1: unable to get target info from device [ 325.022126][ T4740] usb 5-1: could not get target info (-71) [ 325.022353][ T3060] usb 5-1: USB disconnect, device number 3 [ 325.028175][ T4740] usb 5-1: could not probe fw (-71) [ 326.444310][ T6340] loop2: detected capacity change from 0 to 512 [ 326.627564][ T6340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.641283][ T6340] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.825964][ T6340] syz.2.143 (6340) used greatest stack depth: 5384 bytes left [ 328.177011][ T6368] syzkaller1: entered promiscuous mode [ 328.183097][ T6368] syzkaller1: entered allmulticast mode [ 328.253068][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.262948][ T2151] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 328.461751][ T2151] usb 5-1: config 8 has an invalid interface number: 97 but max is 0 [ 328.470330][ T2151] usb 5-1: config 8 has no interface number 0 [ 328.477005][ T2151] usb 5-1: config 8 interface 97 has no altsetting 0 [ 328.511863][ T6370] loop3: detected capacity change from 0 to 128 [ 328.549808][ T6370] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 328.775953][ T6370] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.828906][ T2151] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=5d.c5 [ 328.841230][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.849533][ T2151] usb 5-1: Product: syz [ 328.855646][ T2151] usb 5-1: Manufacturer: syz [ 328.860539][ T2151] usb 5-1: SerialNumber: syz [ 328.868451][ T6370] ext2 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 329.207226][ T2151] pn533_usb 5-1:8.97: NFC: Could not find bulk-in or bulk-out endpoint [ 329.277494][ T2151] usb 5-1: USB disconnect, device number 4 [ 329.674315][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.708634][ T6380] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 330.512510][ T6390] loop3: detected capacity change from 0 to 512 [ 330.552422][ T6390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.868472][ T6390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.885233][ T6390] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.437578][ T6396] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 331.490608][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 331.520013][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 331.540021][ T6403] netlink: 104 bytes leftover after parsing attributes in process `syz.4.164'. [ 331.549739][ T6403] netlink: 104 bytes leftover after parsing attributes in process `syz.4.164'. [ 332.678415][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.135958][ T6447] loop4: detected capacity change from 0 to 512 [ 335.211229][ T2151] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 335.246800][ T6444] loop2: detected capacity change from 0 to 2048 [ 335.259373][ T6444] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 335.320132][ T6444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.342836][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.356203][ T6447] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.393143][ T2151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.405181][ T2151] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 335.416706][ T2151] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 335.564285][ T2151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.574917][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.583530][ T2151] usb 1-1: Product: syz [ 335.591140][ T2151] usb 1-1: Manufacturer: syz [ 335.596023][ T2151] usb 1-1: SerialNumber: syz [ 335.684736][ T6452] ip6erspan0: tun_chr_ioctl cmd 1074025680 [ 335.946520][ T5792] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 335.980271][ T5792] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 336.017759][ T6437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.067308][ T6437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.340505][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.728115][ T3620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.784042][ T6437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.864410][ T6437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.983923][ T3620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.141821][ T2151] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 337.148816][ T2151] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 337.157188][ T2151] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 337.199021][ T6462] capability: warning: `syz.4.187' uses 32-bit capabilities (legacy support in use) [ 337.306767][ T3620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.398961][ T2151] cdc_ncm 1-1:1.0: setting tx_max = 32 [ 337.418988][ T2151] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 337.563697][ T3620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.692930][ T2151] usb 1-1: USB disconnect, device number 3 [ 337.700606][ T2151] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 338.281973][ T3620] bridge_slave_1: left allmulticast mode [ 338.287946][ T3620] bridge_slave_1: left promiscuous mode [ 338.295770][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.412989][ T3620] bridge_slave_0: left allmulticast mode [ 338.418986][ T3620] bridge_slave_0: left promiscuous mode [ 338.426222][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.314114][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.363352][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.392743][ T3620] bond0 (unregistering): Released all slaves [ 340.125061][ T3620] hsr_slave_0: left promiscuous mode [ 340.171834][ T3620] hsr_slave_1: left promiscuous mode [ 340.216982][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.225075][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.291944][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.303429][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.395525][ T3620] veth1_macvtap: left promiscuous mode [ 340.405190][ T3620] veth0_macvtap: left promiscuous mode [ 340.411451][ T3620] veth1_vlan: left promiscuous mode [ 340.417046][ T3620] veth0_vlan: left promiscuous mode [ 341.403215][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.461733][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.776614][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.024808][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.104922][ T6500] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.120574][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 342.251956][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 342.386716][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.396900][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.624994][ T29] audit: type=1326 audit(1735923007.959:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.4.199" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f52579 code=0x0 [ 342.652675][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 342.845444][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 342.945971][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 342.955922][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.967443][ T25] usb 2-1: Product: syz [ 342.972869][ T25] usb 2-1: Manufacturer: syz [ 342.977771][ T25] usb 2-1: SerialNumber: syz [ 343.037762][ T25] usb 2-1: config 0 descriptor?? [ 343.102998][ T6485] pim6reg1: entered promiscuous mode [ 343.109001][ T6485] pim6reg1: entered allmulticast mode [ 343.583756][ T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.536020][ T5788] Bluetooth: hci4: command tx timeout [ 344.902011][ T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 344.999536][ T25] usb 2-1: USB disconnect, device number 2 [ 345.417500][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 346.001960][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 346.529081][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 346.611964][ T5788] Bluetooth: hci4: command tx timeout [ 347.008100][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.020087][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.030446][ T25] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 347.039923][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.168064][ T25] usb 1-1: config 0 descriptor?? [ 347.242403][ T5841] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 347.456257][ T5841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 347.471143][ T5841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 347.589099][ T5841] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 347.598812][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.607437][ T5841] usb 5-1: Product: syz [ 347.612064][ T5841] usb 5-1: Manufacturer: syz [ 347.617025][ T5841] usb 5-1: SerialNumber: syz [ 347.712750][ T5841] usb 5-1: config 0 descriptor?? [ 347.722050][ T6551] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 347.967249][ T6551] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 347.994951][ T25] cp2112 0003:10C4:EA90.0002: item fetching failed at offset 3/7 [ 348.070173][ T25] cp2112 0003:10C4:EA90.0002: parse failed [ 348.077302][ T25] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -22 [ 348.181621][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.198380][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.209397][ T6490] bridge_slave_0: entered allmulticast mode [ 348.222275][ T6490] bridge_slave_0: entered promiscuous mode [ 348.247607][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.255811][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.263943][ T6490] bridge_slave_1: entered allmulticast mode [ 348.273654][ T6490] bridge_slave_1: entered promiscuous mode [ 348.307921][ T25] usb 1-1: USB disconnect, device number 4 [ 348.340368][ T6551] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 348.399339][ T6551] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 348.720875][ T5788] Bluetooth: hci4: command tx timeout [ 348.869733][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.955295][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.456659][ T6490] team0: Port device team_slave_0 added [ 349.555094][ T6569] loop1: detected capacity change from 0 to 2048 [ 349.653500][ T6490] team0: Port device team_slave_1 added [ 349.758684][ T6569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.943044][ T5841] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 350.142631][ T5841] dm9601 5-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 8e:75:bc:b6:ad:45 [ 350.178144][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.185588][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.212393][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.274108][ T5841] usb 5-1: USB disconnect, device number 5 [ 350.282733][ T5841] dm9601 5-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 350.402949][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.410441][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.442848][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.773856][ T5788] Bluetooth: hci4: command tx timeout [ 351.125550][ T6583] loop0: detected capacity change from 0 to 2048 [ 351.146871][ T6490] hsr_slave_0: entered promiscuous mode [ 351.239780][ T6490] hsr_slave_1: entered promiscuous mode [ 351.277087][ T6583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.281116][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.294486][ T6490] Cannot create hsr debugfs directory [ 351.765834][ T6577] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 351.908140][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.219'. [ 352.250969][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.257744][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.544328][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.286251][ T6490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.543653][ T6490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.956377][ T6490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.039992][ T6490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.029947][ T25] libceph: connect (1)[c::]:6789 error -101 [ 355.036814][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 355.202743][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.265602][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.283019][ T6628] ceph: No mds server is up or the cluster is laggy [ 355.312404][ T25] libceph: connect (1)[c::]:6789 error -101 [ 355.318862][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 355.348714][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.356637][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.378844][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.386839][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.720161][ T6490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.732278][ T6490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.008614][ T6639] loop4: detected capacity change from 0 to 128 [ 356.123510][ T6639] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.182668][ T6639] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.638927][ T6643] loop0: detected capacity change from 0 to 2048 [ 356.647371][ T6639] fscrypt (loop4, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 356.758035][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.230552][ T6651] Process accounting resumed [ 357.341916][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.681208][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.703744][ T6694] hugetlbfs: Invalid gid '0x00000000ffffffff' [ 360.967079][ T6700] loop1: detected capacity change from 0 to 512 [ 361.048840][ T6702] loop3: detected capacity change from 0 to 1024 [ 361.056980][ T6700] EXT4-fs: Ignoring removed oldalloc option [ 361.165117][ T6702] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 361.244212][ T6700] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.244: Parent and EA inode have the same ino 15 [ 361.388385][ T6490] veth0_vlan: entered promiscuous mode [ 361.513969][ T6700] EXT4-fs (loop1): Remounting filesystem read-only [ 361.522616][ T6700] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 361.533485][ T6700] EXT4-fs (loop1): 1 orphan inode deleted [ 361.535484][ T6490] veth1_vlan: entered promiscuous mode [ 361.541741][ T6700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.737542][ T6490] veth0_macvtap: entered promiscuous mode [ 361.763616][ T6490] veth1_macvtap: entered promiscuous mode [ 361.831786][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.842065][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 361.843932][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.861807][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.872789][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.883034][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.893904][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.904085][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.918452][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.934663][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.951845][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 361.954909][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.971832][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.983044][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.993893][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.004085][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.016953][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.032134][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.042369][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.053329][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.068138][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.148295][ T6490] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.157765][ T6490] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.167414][ T6490] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.176644][ T6490] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.938303][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.097130][ T4740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.153715][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.976522][ T4740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.121174][ T4740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.346900][ T4740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.863268][ T4740] bridge_slave_1: left allmulticast mode [ 365.869241][ T4740] bridge_slave_1: left promiscuous mode [ 365.876579][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.108718][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.119064][ T4740] bridge_slave_0: left allmulticast mode [ 366.125223][ T4740] bridge_slave_0: left promiscuous mode [ 366.132348][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.160342][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.170509][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.186815][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.199138][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 366.215284][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.409494][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.582489][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.733707][ T4740] bond0 (unregistering): Released all slaves [ 368.361657][ T5788] Bluetooth: hci0: command tx timeout [ 369.621709][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 369.723274][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 369.944043][ T4740] hsr_slave_0: left promiscuous mode [ 369.989882][ T4740] hsr_slave_1: left promiscuous mode [ 370.041637][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.049652][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.074074][ T6784] loop0: detected capacity change from 0 to 256 [ 370.104116][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.112165][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.182133][ T5140] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 370.194918][ T4740] veth1_macvtap: left promiscuous mode [ 370.203643][ T4740] veth0_macvtap: left promiscuous mode [ 370.209641][ T4740] veth1_vlan: left promiscuous mode [ 370.215513][ T4740] veth0_vlan: left promiscuous mode [ 370.371480][ T5788] Bluetooth: hci0: command tx timeout [ 370.566666][ T5140] usb 4-1: Using ep0 maxpacket: 8 [ 370.628027][ T5140] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 370.636859][ T5140] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.647208][ T5140] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.657482][ T5140] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.668027][ T5140] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.681872][ T5140] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.691571][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.892721][ T6793] loop4: detected capacity change from 0 to 8 [ 371.139932][ T5140] usb 4-1: usb_control_msg returned -32 [ 371.148582][ T5140] usbtmc 4-1:16.0: can't read capabilities [ 371.185473][ T6793] SQUASHFS error: Failed to read block 0x4e8: -5 [ 371.671589][ T4740] team0 (unregistering): Port device team_slave_1 removed [ 371.746790][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 371.931517][ T6801] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 372.141832][ T5834] usb 4-1: USB disconnect, device number 4 [ 372.471414][ T5788] Bluetooth: hci0: command tx timeout [ 374.259297][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.267445][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.275547][ T6739] bridge_slave_0: entered allmulticast mode [ 374.365709][ T6739] bridge_slave_0: entered promiscuous mode [ 374.428029][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.439118][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.447252][ T6739] bridge_slave_1: entered allmulticast mode [ 374.457013][ T6739] bridge_slave_1: entered promiscuous mode [ 374.538783][ T5788] Bluetooth: hci0: command tx timeout [ 374.914951][ T6829] loop3: detected capacity change from 0 to 1764 [ 375.042838][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.273848][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.044269][ T6844] loop4: detected capacity change from 0 to 128 [ 376.325194][ T6844] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.436377][ T6844] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.527788][ T6739] team0: Port device team_slave_0 added [ 376.560982][ T6739] team0: Port device team_slave_1 added [ 376.749461][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.761074][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.789120][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.873862][ T3620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.883440][ T3620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.897865][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.911133][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.937679][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.428129][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.437926][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.503833][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.004702][ T6739] hsr_slave_0: entered promiscuous mode [ 378.124046][ T6739] hsr_slave_1: entered promiscuous mode [ 378.141067][ T6739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.149015][ T6739] Cannot create hsr debugfs directory [ 379.745283][ T6739] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 379.808578][ T6739] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 379.893746][ T6739] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 379.974303][ T6739] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 381.141239][ T6882] tipc: Started in network mode [ 381.146502][ T6882] tipc: Node identity ac14142f, cluster identity 4711 [ 381.161742][ T6882] tipc: New replicast peer: 0.0.0.0 [ 381.170844][ T6882] tipc: Enabled bearer , priority 10 [ 381.233636][ T6882] tipc: New replicast peer: 100.1.1.1 [ 381.639475][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.922310][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.961139][ T5140] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 382.048764][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.056668][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.150383][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.158367][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.221312][ T5140] usb 1-1: Using ep0 maxpacket: 16 [ 382.264464][ T5140] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.286544][ T25] tipc: Node number set to 2886997039 [ 382.308047][ T5140] usb 1-1: config 128 has an invalid interface number: 66 but max is 0 [ 382.317050][ T5140] usb 1-1: config 128 has no interface number 0 [ 382.323889][ T5140] usb 1-1: config 128 interface 66 has no altsetting 0 [ 382.422762][ T5140] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=1e.90 [ 382.433243][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.441855][ T5140] usb 1-1: Product: syz [ 382.446320][ T5140] usb 1-1: Manufacturer: syz [ 382.451361][ T5140] usb 1-1: SerialNumber: syz [ 382.962977][ T5140] comedi comedi0: could not set alternate setting 3 in high speed [ 382.972196][ T5140] usbduxsigma 1-1:128.66: driver 'usbduxsigma' failed to auto-configure device. [ 383.100122][ T5140] usbduxsigma 1-1:128.66: probe with driver usbduxsigma failed with error -71 [ 383.214785][ T5140] usb 1-1: USB disconnect, device number 5 [ 383.461348][ T5841] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 384.327317][ T5841] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 384.340477][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.352321][ T5841] usb 5-1: Product: syz [ 384.356773][ T5841] usb 5-1: Manufacturer: syz [ 384.361815][ T5841] usb 5-1: SerialNumber: syz [ 384.552147][ T5841] usb 5-1: config 0 descriptor?? [ 384.600068][ T5841] ch341 5-1:0.0: ch341-uart converter detected [ 385.087614][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.713634][ T5841] ch341-uart ttyUSB0: break control not supported, using simulated break [ 385.734986][ T5841] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 385.782303][ T5841] usb 5-1: USB disconnect, device number 6 [ 385.801109][ T5841] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 385.812970][ T5841] ch341 5-1:0.0: device disconnected [ 385.941984][ T6923] geneve2: entered promiscuous mode [ 385.947507][ T6923] geneve2: entered allmulticast mode [ 389.484281][ T6739] veth0_vlan: entered promiscuous mode [ 389.600205][ T6739] veth1_vlan: entered promiscuous mode [ 390.119605][ T6739] veth0_macvtap: entered promiscuous mode [ 390.176684][ T6951] loop4: detected capacity change from 0 to 128 [ 390.383832][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 390.390178][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 390.391181][ T6739] veth1_macvtap: entered promiscuous mode [ 390.397008][ T5078] Bluetooth: hci1: command 0x0406 tx timeout [ 390.461889][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.472738][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.487588][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.499736][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.509940][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.520934][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.531169][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.542002][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.557243][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.583993][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.594971][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.605161][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.616098][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.626264][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.637163][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.648264][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.659117][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.674665][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.702198][ T6739] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.711542][ T6739] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.720751][ T6739] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.729834][ T6739] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.912816][ T6951] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.112259][ T6951] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 391.450430][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.313'. [ 391.953529][ T6965] loop0: detected capacity change from 0 to 4096 [ 392.159873][ T6965] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 392.274308][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.817361][ T29] audit: type=1326 audit(1735923058.099:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 392.843128][ T29] audit: type=1326 audit(1735923058.099:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 393.274067][ T6965] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 393.382348][ T6965] ntfs3(loop0): Failed to load $Extend (-22). [ 393.388943][ T6965] ntfs3(loop0): Failed to initialize $Extend. [ 394.069568][ T6996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 395.348139][ T29] audit: type=1326 audit(1735923060.679:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.0.320" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x0 [ 396.279454][ T7018] loop4: detected capacity change from 0 to 2048 [ 396.840203][ T7018] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 396.852372][ T7018] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 396.860283][ T7018] UDF-fs: Scanning with blocksize 512 failed [ 397.169195][ T7018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.635899][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 398.013015][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.021318][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.318718][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.327059][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.664045][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.678974][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 398.689851][ T25] usb 4-1: config 1 has no interface number 0 [ 398.697070][ T25] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.708672][ T25] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 398.929525][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.939530][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.948052][ T25] usb 4-1: Product: syz [ 398.952605][ T25] usb 4-1: Manufacturer: syz [ 398.957482][ T25] usb 4-1: SerialNumber: syz [ 398.969997][ T7048] loop4: detected capacity change from 0 to 512 [ 399.378200][ T7048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.397315][ T7048] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.569283][ T7056] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 18: invalid block bitmap [ 399.663458][ T7048] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.330: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 399.743418][ T7048] overlayfs: failed to get metacopy (-117) [ 400.405832][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.478620][ T25] cdc_ncm 4-1:1.1: bind() failure [ 400.713001][ T25] usb 4-1: USB disconnect, device number 5 [ 401.464123][ T7078] loop4: detected capacity change from 0 to 128 [ 401.745760][ T7078] loop4: detected capacity change from 0 to 512 [ 401.824115][ T7078] EXT4-fs: inline encryption not supported [ 402.347910][ T7078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.366491][ T7078] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.115304][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.804368][ T7101] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 407.500182][ T7144] 9pnet: p9_errstr2errno: server reported unknown error ut [ 407.911445][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 408.073997][ T7151] macvlan0: entered allmulticast mode [ 408.079893][ T7151] veth1_vlan: entered allmulticast mode [ 408.272278][ T7151] veth1_vlan: left allmulticast mode [ 408.370290][ T7151] macvlan0 (unregistering): left allmulticast mode [ 408.400977][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 408.415688][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 408.427993][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.597336][ T7157] loop5: detected capacity change from 0 to 512 [ 408.647293][ T7155] loop4: detected capacity change from 0 to 256 [ 408.822812][ T5834] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.830294][ T7157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.832356][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.845495][ T7157] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.853332][ T5834] usb 1-1: Product: syz [ 408.853457][ T5834] usb 1-1: Manufacturer: syz [ 408.875031][ T5834] usb 1-1: SerialNumber: syz [ 408.903631][ T5834] usb 1-1: config 0 descriptor?? [ 408.954137][ T5834] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 408.963894][ T5834] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 409.086875][ T7155] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 409.823282][ T7170] macvlan1: entered promiscuous mode [ 409.856185][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 409.913028][ T7170] veth1_vlan: left promiscuous mode [ 410.055165][ T7170] macvlan1 (unregistering): left promiscuous mode [ 410.115294][ T5834] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 410.126430][ T5834] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 410.379064][ T5834] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 410.389873][ T5834] em28xx 1-1:0.0: No AC97 audio processor [ 410.506431][ T5834] usb 1-1: USB disconnect, device number 6 [ 410.515721][ T5834] em28xx 1-1:0.0: Disconnecting em28xx [ 410.551888][ T6490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.659950][ T5834] em28xx 1-1:0.0: Freeing device [ 411.953299][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 412.482575][ T7194] syz_tun: entered allmulticast mode [ 412.577640][ T7192] syz_tun: left allmulticast mode [ 412.898868][ T7204] input: syz0 as /devices/virtual/input/input11 [ 413.726187][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.733135][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.972573][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.377'. [ 413.982475][ T7211] netem: invalid attributes len -13 [ 413.987950][ T7211] netem: change failed [ 415.292301][ T7228] loop3: detected capacity change from 0 to 128 [ 415.401110][ T7228] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 415.408727][ T7228] Bad inode number on dev loop3: 2 is out of range [ 415.415965][ T7228] SysV FS: get root inode failed [ 415.421397][ T7228] oldfs: cannot read superblock [ 415.451705][ C1] ------------[ cut here ]------------ [ 415.457400][ C1] VFS: brelse: Trying to free free buffer [ 415.464074][ C1] WARNING: CPU: 1 PID: 5141 at fs/buffer.c:1229 invalidate_bh_lru+0x1c2/0x280 [ 415.473378][ C1] Modules linked in: [ 415.477536][ C1] CPU: 1 UID: 0 PID: 5141 Comm: udevd Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 415.488073][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.498387][ C1] RIP: 0010:invalidate_bh_lru+0x1c2/0x280 [ 415.504470][ C1] Code: 85 ed 0f 85 48 ff ff ff e8 1b bd 2d ff 90 48 8b 45 c8 48 c7 80 80 0c 00 00 00 00 00 00 48 c7 c7 25 4a 0b 91 e8 cf 84 d2 fe 90 <0f> 0b 90 90 4c 8b 65 b8 41 b5 01 45 84 ed 0f 85 75 ff ff ff 31 ff [ 415.524372][ C1] RSP: 0018:ffff88813fd05e98 EFLAGS: 00010006 [ 415.530827][ C1] RAX: ffffffff815df4f9 RBX: ffff888012b894d8 RCX: ffff88811772c180 [ 415.539059][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.547277][ C1] RBP: ffff88813fd05ee0 R08: ffffffff815df4ef R09: 0000000000000000 [ 415.555589][ C1] R10: ffff88823fc64a90 R11: 0000000000000004 R12: 0000000000000000 [ 415.563804][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88813fda31a8 [ 415.572035][ C1] FS: 00007f49c2112c80(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 415.581243][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.588080][ C1] CR2: 00000000f4f04da4 CR3: 0000000118f62000 CR4: 00000000003526f0 [ 415.596335][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.604556][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.612783][ C1] Call Trace: [ 415.616254][ C1] [ 415.619284][ C1] ? show_trace_log_lvl+0x268/0x3d0 [ 415.624813][ C1] ? __flush_smp_call_function_queue+0x3af/0x1800 [ 415.631577][ C1] ? show_regs+0xb4/0xe0 [ 415.636104][ C1] ? __warn+0x2c7/0x780 [ 415.640547][ C1] ? invalidate_bh_lru+0x1c2/0x280 [ 415.645997][ C1] ? report_bug+0x929/0xbd0 [ 415.650785][ C1] ? invalidate_bh_lru+0x1c2/0x280 [ 415.656228][ C1] ? handle_bug+0x6d/0x90 [ 415.660823][ C1] ? exc_invalid_op+0x1f/0x50 [ 415.665840][ C1] ? asm_exc_invalid_op+0x1f/0x30 [ 415.671229][ C1] ? __warn_printk+0x43f/0x470 [ 415.676318][ C1] ? __warn_printk+0x449/0x470 [ 415.681359][ C1] ? invalidate_bh_lru+0x1c2/0x280 [ 415.686775][ C1] ? invalidate_bh_lru+0x1c1/0x280 [ 415.692196][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 415.697992][ C1] __flush_smp_call_function_queue+0x3af/0x1800 [ 415.704603][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 415.711876][ C1] __sysvec_call_function_single+0x45/0x360 [ 415.718085][ C1] sysvec_call_function_single+0x7b/0x90 [ 415.724048][ C1] [ 415.727212][ C1] [ 415.730367][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 415.736705][ C1] RIP: 0010:virt_to_page_or_null+0x54/0x150 [ 415.742903][ C1] Code: d6 48 d3 ee 48 85 f6 74 1a 31 c0 5d c3 cc cc cc cc 48 3d ff ff ff 1f 77 f0 48 8b 15 c6 3d 13 0f 48 01 c2 65 ff 05 74 ed b5 7d <31> c9 48 89 d6 48 c1 ee 2e 0f 85 91 00 00 00 48 8b 0d 0e 88 0d 12 [ 415.762856][ C1] RSP: 0018:ffff88811989fb68 EFLAGS: 00000282 [ 415.769314][ C1] RAX: ffff888186dd2a40 RBX: ffff888106dd2a40 RCX: 000000000000002e [ 415.777560][ C1] RDX: 0000000106dd2a40 RSI: 0000000000000000 RDI: ffff888106dd2a40 [ 415.785777][ C1] RBP: ffff88811989fb68 R08: ffffea000000000f R09: 0000000000000000 [ 415.793996][ C1] R10: ffff8881065d2088 R11: 0000000000000004 R12: ffff888106dd3018 [ 415.802241][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888106dd2a40 [ 415.810490][ C1] kmsan_get_metadata+0x13e/0x1c0 [ 415.815803][ C1] kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.821717][ C1] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 415.827938][ C1] rb_next+0x1e4/0x210 [ 415.832351][ C1] kernfs_fop_readdir+0x14d3/0x1aa0 [ 415.837875][ C1] ? __pfx_kernfs_fop_readdir+0x10/0x10 [ 415.843722][ C1] iterate_dir+0x5b3/0x9e0 [ 415.848442][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.853938][ C1] __se_sys_getdents64+0x170/0x540 [ 415.859374][ C1] ? __pfx_filldir64+0x10/0x10 [ 415.864446][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.870563][ C1] __x64_sys_getdents64+0x96/0xe0 [ 415.875954][ C1] x64_sys_call+0x3b0f/0x3c30 [ 415.880986][ C1] do_syscall_64+0xcd/0x1e0 [ 415.885796][ C1] ? clear_bhb_loop+0x25/0x80 [ 415.890800][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.897006][ C1] RIP: 0033:0x7f49c1cf9910 [ 415.901656][ C1] Code: 87 43 04 ff c8 7e 08 48 89 ef e8 4d 0e fc ff 4c 89 e0 5b 5d 41 5c c3 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e9 74 0f 00 f7 d8 64 89 02 48 83 [ 415.921570][ C1] RSP: 002b:00007ffecf12f3a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 415.930294][ C1] RAX: ffffffffffffffda RBX: 0000555707b9b300 RCX: 00007f49c1cf9910 [ 415.938530][ C1] RDX: 0000000000008000 RSI: 0000555707b9b330 RDI: 000000000000000d [ 415.946742][ C1] RBP: 0000555707b9b304 R08: 0000555707b9b300 R09: 0000000010000000 [ 415.954979][ C1] R10: 0000000000000812 R11: 0000000000000293 R12: 0000555707a69080 [ 415.963194][ C1] R13: fffffffffffffe60 R14: 0000000000000002 R15: 0000555707b9b330 [ 415.971474][ C1] [ 415.974786][ C1] ---[ end trace 0000000000000000 ]--- [ 415.980733][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.251101][ T5140] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 417.456357][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 417.661035][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 417.931795][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 417.979436][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.990187][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.054429][ T5140] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 418.063359][ T5140] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.073751][ T5140] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.083974][ T5140] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.094400][ T5140] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.108047][ T5140] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.117619][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.174123][ T5834] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.183713][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.192255][ T5834] usb 5-1: Product: syz [ 418.196708][ T5834] usb 5-1: Manufacturer: syz [ 418.201836][ T5834] usb 5-1: SerialNumber: syz [ 418.293072][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 418.504664][ T5834] usb 5-1: 0:2 : does not exist [ 418.538830][ T7259] capability: warning: `syz.3.390' uses deprecated v2 capabilities in a way that may be insecure [ 418.613033][ T5834] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 418.655862][ T5140] usb 1-1: usb_control_msg returned -32 [ 418.662227][ T5140] usbtmc 1-1:16.0: can't read capabilities [ 418.814164][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 418.883143][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.894688][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.905445][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.915007][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.917587][ T5834] usb 5-1: USB disconnect, device number 7 [ 419.069251][ T25] usb 7-1: config 0 descriptor?? [ 419.093488][ T25] hub 7-1:0.0: USB hub found [ 419.571492][ T25] hub 7-1:0.0: 1 port detected [ 419.948487][ T5841] usb 1-1: USB disconnect, device number 7 [ 420.315849][ T2151] hub 7-1:0.0: activate --> -90 [ 420.591854][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.757034][ T5834] usb 7-1: USB disconnect, device number 2 [ 420.981340][ T2151] usb 7-1-port1: config error [ 422.567735][ T7293] loop0: detected capacity change from 0 to 4096 [ 423.174458][ T7300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.252480][ T7293] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 423.512470][ T7293] Remounting filesystem read-only [ 423.517934][ T7293] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 423.581475][ T2151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 423.988197][ T2151] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.038233][ T7308] loop3: detected capacity change from 0 to 1024 [ 424.076226][ T7308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.086163][ T7308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.178071][ T7308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.433840][ T2151] kernel write not supported for file /uhid (pid: 2151 comm: kworker/1:2) [ 425.435564][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.683578][ T7344] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12 [ 427.998181][ T7346] loop6: detected capacity change from 0 to 512 [ 428.700758][ T7358] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 428.771389][ T7346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.791133][ T7346] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.970164][ T7355] loop3: detected capacity change from 0 to 1024 [ 429.077414][ T7355] EXT4-fs: Ignoring removed i_version option [ 429.088228][ T7355] EXT4-fs: Ignoring removed orlov option [ 429.095974][ T7355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 429.652557][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.743192][ T7370] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 429.847326][ T7355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.681992][ T7379] loop5: detected capacity change from 0 to 2048 [ 430.752506][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.844527][ T7384] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.393497][ T7384] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 431.405049][ T7384] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 431.438305][ T7384] Remounting filesystem read-only [ 431.450957][ T7386] NILFS (loop5): mounting fs with errors [ 431.465722][ T7379] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 431.476099][ T7379] Remounting filesystem read-only [ 431.481594][ T7379] NILFS (loop5): error -5 reading inode: ino=18 [ 431.488141][ T7379] NILFS (loop5): cannot mark inode dirty (ino=18): error -5 loading inode block [ 431.499901][ T7379] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 431.510858][ T7379] NILFS (loop5): error -5 reading inode: ino=18 [ 431.517412][ T7379] NILFS (loop5): cannot mark inode dirty (ino=18): error -5 loading inode block [ 431.803946][ T7379] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 431.817846][ T7379] NILFS (loop5): error -5 reading inode: ino=18 [ 431.833943][ T7379] NILFS (loop5): cannot mark inode dirty (ino=18): error -5 loading inode block [ 431.901581][ T7379] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 431.912009][ T7379] NILFS (loop5): error -5 reading inode: ino=18 [ 431.921672][ T7379] NILFS (loop5): cannot mark inode dirty (ino=18): error -5 loading inode block [ 431.991822][ T7379] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 432.002045][ T7379] NILFS (loop5): error -5 reading inode: ino=18 [ 432.008600][ T7379] NILFS (loop5): cannot mark inode dirty (ino=18): error -5 loading inode block [ 432.442632][ T6490] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 432.456102][ T6490] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 433.125984][ T5834] IPVS: starting estimator thread 0... [ 433.241643][ T7406] IPVS: using max 192 ests per chain, 9600 per kthread [ 435.418216][ T7438] loop6: detected capacity change from 0 to 512 [ 435.742574][ T7449] loop4: detected capacity change from 0 to 128 [ 435.753725][ T7438] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 435.862990][ T7447] loop5: detected capacity change from 0 to 512 [ 436.031202][ T7438] EXT4-fs (loop6): 1 truncate cleaned up [ 436.099989][ T7447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.154396][ T7438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.284721][ T29] audit: type=1800 audit(1735923101.559:9): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.444" name="bus" dev="loop4" ino=1048616 res=0 errno=0 [ 436.325914][ T7454] syz.3.445: attempt to access beyond end of device [ 436.325914][ T7454] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 436.339215][ T7454] exFAT-fs (nbd3): unable to read boot sector [ 436.345772][ T7454] exFAT-fs (nbd3): failed to read boot sector [ 436.356767][ T7454] exFAT-fs (nbd3): failed to recognize exfat type [ 436.591645][ T29] audit: type=1800 audit(1735923101.869:10): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.439" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 436.626875][ T7438] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.439: corrupted in-inode xattr: overlapping e_value [ 436.699650][ T7447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.713315][ T7447] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.752853][ T7438] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1772: inode #15: comm syz.6.439: unable to update i_inline_off [ 436.918193][ T7463] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.439: corrupted in-inode xattr: overlapping e_value [ 437.739033][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.781509][ T5841] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 438.075116][ T5841] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 438.084844][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.098113][ T5841] usb 1-1: Product: syz [ 438.103840][ T5841] usb 1-1: Manufacturer: syz [ 438.108803][ T5841] usb 1-1: SerialNumber: syz [ 438.254476][ T5841] usb 1-1: config 0 descriptor?? [ 438.542161][ T7477] loop6: detected capacity change from 0 to 128 [ 438.609649][ T6490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.630257][ T7477] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 438.806486][ T7477] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.900246][ T7477] ext2 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 440.066594][ T5841] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 440.097754][ T5841] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 440.122425][ T5841] usb 1-1: USB disconnect, device number 8 [ 440.148330][ T5841] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 440.274911][ T5841] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 440.761050][ T5834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 440.783304][ T6739] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.970935][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 440.998999][ T5834] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 441.008692][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.017291][ T5834] usb 6-1: Product: syz [ 441.021920][ T5834] usb 6-1: Manufacturer: syz [ 441.026789][ T5834] usb 6-1: SerialNumber: syz [ 441.130386][ T5834] usb 6-1: config 0 descriptor?? [ 441.650995][ T5834] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 441.703682][ T5834] gspca_sunplus: reg_w_riv err -71 [ 441.709391][ T5834] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 441.824163][ T5834] usb 6-1: USB disconnect, device number 2 [ 442.202293][ T29] audit: type=1326 audit(2000000005.130:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.331210][ T29] audit: type=1326 audit(2000000005.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.353732][ T29] audit: type=1326 audit(2000000005.170:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.378035][ T29] audit: type=1326 audit(2000000005.180:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.403942][ T29] audit: type=1326 audit(2000000005.180:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.427547][ T29] audit: type=1326 audit(2000000005.200:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.449992][ T29] audit: type=1326 audit(2000000005.200:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.473133][ T29] audit: type=1326 audit(2000000005.210:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.499476][ T29] audit: type=1326 audit(2000000005.210:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.522858][ T29] audit: type=1326 audit(2000000005.230:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 442.676305][ T7515] loop0: detected capacity change from 0 to 2048 [ 443.058244][ T7506] loop6: detected capacity change from 0 to 8192 [ 443.148893][ T7515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.376430][ T7519] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 443.839096][ T7525] serio: Serial port ptm0 [ 444.129169][ T7513] loop3: detected capacity change from 0 to 8192 [ 444.292021][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.659375][ T7538] loop5: detected capacity change from 0 to 128 [ 444.671696][ T7538] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 444.987057][ T7538] netlink: 52 bytes leftover after parsing attributes in process `syz.5.470'. [ 445.760965][ T5834] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 445.961377][ T7547] loop3: detected capacity change from 0 to 1024 [ 446.034219][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.044996][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.163560][ T5834] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.174482][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.183072][ T5834] usb 5-1: Product: syz [ 446.191530][ T5834] usb 5-1: Manufacturer: syz [ 446.196439][ T5834] usb 5-1: SerialNumber: syz [ 446.397736][ T7547] hfsplus: xattr searching failed [ 446.441535][ T7547] hfsplus: xattr searching failed [ 446.684507][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 446.838062][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 446.882952][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 446.906113][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 446.930531][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 446.945486][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 446.983446][ T5834] usb 5-1: 0:2 : does not exist [ 447.023380][ T75] hfsplus: bad catalog file entry [ 447.028804][ T75] hfsplus: b-tree write err: -5, ino 3 [ 447.061230][ T5834] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 447.366760][ T7562] loop3: detected capacity change from 0 to 256 [ 447.416268][ T5834] usb 5-1: USB disconnect, device number 8 [ 448.541324][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.079437][ T2151] kernel read not supported for file /audio (pid: 2151 comm: kworker/1:2) [ 450.621252][ T2151] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 450.861062][ T2151] usb 7-1: Using ep0 maxpacket: 16 [ 450.954315][ T2151] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 450.964115][ T2151] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.974860][ T2151] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.131050][ T2151] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.141062][ T2151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.149391][ T2151] usb 7-1: Product: syz [ 451.154057][ T2151] usb 7-1: Manufacturer: syz [ 451.158951][ T2151] usb 7-1: SerialNumber: syz [ 451.987139][ T7614] loop3: detected capacity change from 0 to 1024 [ 452.032241][ T2151] usb 7-1: 0:2 : does not exist [ 452.133638][ T2151] usb 7-1: USB disconnect, device number 3 [ 452.434213][ T7620] input: syz0 as /devices/virtual/input/input13 [ 452.707189][ T34] hfsplus: b-tree write err: -5, ino 4 [ 452.764388][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.276313][ T2151] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 454.713593][ T2151] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.724672][ T2151] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.853273][ T2151] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.863805][ T2151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.872388][ T2151] usb 6-1: SerialNumber: syz [ 455.052715][ T5140] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 455.233683][ T2151] usb 6-1: 0:2 : does not exist [ 455.381170][ T2151] usb 6-1: USB disconnect, device number 3 [ 455.394983][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 455.623254][ T5140] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 455.635957][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.801170][ T5140] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 455.814257][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.824173][ T5140] usb 5-1: Product: syz [ 455.828657][ T5140] usb 5-1: Manufacturer: syz [ 455.833846][ T5140] usb 5-1: SerialNumber: syz [ 455.874175][ T5140] usb 5-1: config 0 descriptor?? [ 455.899224][ T5140] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 455.914722][ T5140] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 458.138796][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 458.213360][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.661407][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 458.712673][ T5834] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.724249][ T5834] usb 1-1: config 0 interface 0 has no altsetting 0 [ 458.731476][ T5834] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 458.741060][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.889958][ T5140] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 458.915214][ T5140] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 458.967703][ T5140] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 458.969021][ T5834] usb 1-1: config 0 descriptor?? [ 458.975151][ T5140] em28xx 5-1:0.0: No AC97 audio processor [ 459.044856][ T5140] usb 5-1: USB disconnect, device number 9 [ 459.052919][ T5140] em28xx 5-1:0.0: Disconnecting em28xx [ 459.143692][ T5140] em28xx 5-1:0.0: Freeing device [ 459.611385][ T5834] apple 0003:05AC:0219.0004: report_id 41360 is invalid [ 459.618678][ T5834] apple 0003:05AC:0219.0004: item 0 2 1 8 parsing failed [ 459.688882][ T5834] apple 0003:05AC:0219.0004: parse failed [ 459.703414][ T5834] apple 0003:05AC:0219.0004: probe with driver apple failed with error -22 [ 459.945151][ T5140] usb 1-1: USB disconnect, device number 9 [ 459.958155][ T7678] loop5: detected capacity change from 0 to 512 [ 460.187547][ T7678] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 460.257686][ T7678] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.509: attempt to clear invalid blocks 1024 len 1 [ 460.288266][ T7678] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.509: invalid indirect mapped block 1819239214 (level 0) [ 460.341684][ T7678] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.509: invalid indirect mapped block 33554432 (level 2) [ 460.487866][ T7678] EXT4-fs (loop5): 1 truncate cleaned up [ 460.496212][ T7678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.776700][ T7690] Bluetooth: MGMT ver 1.23 [ 461.602987][ T6490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.016598][ T7706] netlink: 'syz.4.517': attribute type 10 has an invalid length. [ 462.126127][ T7706] bond0: (slave netdevsim3): no link monitoring support [ 462.138392][ T7706] bond0: (slave netdevsim3): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 462.173594][ T7706] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 462.472434][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.519'. [ 462.612008][ T7715] loop3: detected capacity change from 0 to 256 [ 462.645767][ T7715] exfat: Deprecated parameter 'namecase' [ 462.652625][ T7715] exfat: Deprecated parameter 'utf8' [ 462.797057][ T7715] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 465.713247][ T7746] loop5: detected capacity change from 0 to 2048 [ 465.772703][ T7746] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=4096, location=4096 [ 465.783245][ T7746] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 465.802260][ T7746] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 465.814203][ T7746] UDF-fs: Scanning with blocksize 512 failed [ 466.123155][ T7746] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 466.132414][ T7746] UDF-fs: Scanning with blocksize 1024 failed [ 466.334382][ T7746] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 466.345089][ T7746] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 466.358105][ T7746] UDF-fs: Scanning with blocksize 2048 failed [ 466.550450][ T7746] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 466.619610][ T7746] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 466.629849][ T7746] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 466.638034][ T7746] UDF-fs: Scanning with blocksize 4096 failed [ 466.644741][ T7746] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 466.975949][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 469.676893][ T7801] loop6: detected capacity change from 0 to 47 [ 472.313317][ T7834] loop3: detected capacity change from 0 to 8 [ 472.532702][ T7834] SQUASHFS error: Failed to read block 0x62b: -5 [ 472.539357][ T7834] SQUASHFS error: Unable to read metadata cache entry [629] [ 472.547884][ T7834] SQUASHFS error: Unable to read inode 0x11f [ 472.711857][ T7839] raw_sendmsg: syz.4.560 forgot to set AF_INET. Fix it! [ 473.877332][ T7844] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð#>÷‰r¹[›5´ [ 475.096412][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 475.096503][ T29] audit: type=1326 audit(2000000038.020:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 475.149887][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.157502][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.248740][ T29] audit: type=1326 audit(2000000038.110:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 475.276059][ T29] audit: type=1326 audit(2000000038.110:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 475.299097][ T29] audit: type=1326 audit(2000000038.110:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 476.755273][ T7879] loop6: detected capacity change from 0 to 512 [ 477.351973][ T7879] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 477.360327][ T7879] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 477.461734][ T7879] System zones: 0-2, 18-18, 34-35 [ 477.671474][ T7899] loop4: detected capacity change from 0 to 1024 [ 477.683858][ T7899] EXT4-fs: Ignoring removed orlov option [ 477.689939][ T7899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 478.038393][ T7879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.065431][ T7905] loop5: detected capacity change from 0 to 256 [ 478.203715][ T7899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.228455][ T7905] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 479.078220][ T7921] loop3: detected capacity change from 0 to 512 [ 479.273810][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.364727][ T7921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 479.435209][ T7921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.448588][ T7921] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.122549][ T7932] loop0: detected capacity change from 0 to 512 [ 480.136249][ T7932] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 480.144412][ T7932] UDF-fs: Scanning with blocksize 512 failed [ 480.185314][ T7921] syz.3.585 (7921) used greatest stack depth: 3168 bytes left [ 480.318871][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.342866][ T7932] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 480.350540][ T7932] UDF-fs: Scanning with blocksize 1024 failed [ 480.405657][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.416960][ T7935] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 480.656206][ T7932] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 480.664218][ T7932] UDF-fs: Scanning with blocksize 2048 failed [ 480.761508][ T7932] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.038402][ T7932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.461242][ T5140] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 484.640491][ T5140] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 484.654822][ T5140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 484.666560][ T5140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 484.942008][ T5140] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 484.952049][ T5140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.960389][ T5140] usb 6-1: Product: syz [ 484.965107][ T5140] usb 6-1: Manufacturer: syz [ 484.969995][ T5140] usb 6-1: SerialNumber: syz [ 485.354192][ T5140] usb 6-1: config 0 descriptor?? [ 485.524318][ T7969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 485.548046][ T5140] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 486.144109][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 486.575039][ C0] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 486.583475][ T5841] usb 6-1: USB disconnect, device number 4 [ 488.709792][ T8106] loop4: detected capacity change from 0 to 128 [ 489.536676][ T8106] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 489.636326][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 490.824240][ T8126] loop5: detected capacity change from 0 to 512 [ 490.911293][ T8126] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 491.021065][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.037807][ T5834] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 491.048530][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.082323][ T5834] usb 1-1: config 0 descriptor?? [ 491.242535][ T8126] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 491.330476][ T8126] EXT4-fs (loop5): 1 truncate cleaned up [ 491.345593][ T8126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.836653][ T8136] syz_tun: entered promiscuous mode [ 492.021762][ T8136] syz_tun: left promiscuous mode [ 492.324362][ T5834] usb 1-1: can't set config #0, error -71 [ 492.416356][ T5834] usb 1-1: USB disconnect, device number 10 [ 492.628441][ T8144] loop3: detected capacity change from 0 to 1024 [ 492.754548][ T8144] EXT4-fs: Ignoring removed nobh option [ 492.760472][ T8144] EXT4-fs: Ignoring removed bh option [ 493.368600][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.374218][ T6490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.676976][ T29] audit: type=1800 audit(2000000056.460:26): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.612" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 494.969199][ T8177] Illegal XDP return value 1029879926 on prog (id 60) dev N/A, expect packet loss! [ 495.158655][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.424057][ T8188] loop0: detected capacity change from 0 to 1024 [ 496.624152][ T8188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.937340][ T8199] loop5: detected capacity change from 0 to 2048 [ 497.276097][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.303961][ T8199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.414286][ T29] audit: type=1804 audit(2000000060.350:27): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.628" name="/newroot/71/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 497.560112][ T8199] Invalid ELF header magic: != ELF [ 498.253154][ T6490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.818891][ T8222] loop3: detected capacity change from 0 to 128 [ 498.907676][ T8222] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 499.308167][ T8234] loop0: detected capacity change from 0 to 64 [ 499.628563][ T8234] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 499.717610][ T8235] syz.3.632: attempt to access beyond end of device [ 499.717610][ T8235] loop3: rw=2049, sector=216, nr_sectors = 1 limit=128 [ 499.732696][ T8235] Buffer I/O error on dev loop3, logical block 216, lost async page write [ 499.931951][ T3060] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 499.971447][ T8235] syz.3.632: attempt to access beyond end of device [ 499.971447][ T8235] loop3: rw=2049, sector=217, nr_sectors = 824 limit=128 [ 500.093414][ T8240] overlayfs: upper fs needs to support d_type. [ 500.110346][ T3060] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 500.120118][ T3060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.204083][ T3060] usb 6-1: config 0 descriptor?? [ 500.214782][ T8240] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 500.223107][ T8240] overlayfs: failed to set xattr on upper [ 500.229078][ T8240] overlayfs: ...falling back to redirect_dir=nofollow. [ 500.236504][ T8240] overlayfs: ...falling back to index=off. [ 500.242758][ T8240] overlayfs: ...falling back to uuid=null. [ 500.604904][ T60] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 501.346251][ T3060] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 501.566040][ T3060] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 501.576630][ T3060] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 501.594369][ T3060] asix 6-1:0.0: probe with driver asix failed with error -71 [ 501.843711][ T3060] usb 6-1: USB disconnect, device number 5 [ 502.515377][ T8260] vlan2: entered allmulticast mode [ 502.522039][ T8260] bridge0: port 3(vlan2) entered blocking state [ 502.529106][ T8260] bridge0: port 3(vlan2) entered disabled state [ 502.540368][ T8260] vlan2: entered promiscuous mode [ 502.548339][ T8260] bridge0: mtu less than device minimum [ 503.073924][ T8265] loop6: detected capacity change from 0 to 256 [ 503.682441][ T8270] loop5: detected capacity change from 0 to 1024 [ 503.692499][ T8270] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 504.880856][ T3060] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 505.088915][ T8283] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 505.106163][ T8283] netlink: 'syz.3.653': attribute type 10 has an invalid length. [ 505.140213][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.150776][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.197700][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.205815][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.215110][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.223270][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.243550][ T8283] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 505.303810][ T8116] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 505.662002][ T3060] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 505.672391][ T3060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.782805][ T3060] usb 1-1: config 0 descriptor?? [ 507.209959][ T3060] usb 1-1: Cannot set autoneg [ 507.224571][ T3060] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 507.383041][ T3060] usb 1-1: USB disconnect, device number 11 [ 508.908559][ T8320] loop5: detected capacity change from 0 to 512 [ 509.110913][ T8320] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.660: corrupted in-inode xattr: e_value size too large [ 509.172637][ T8320] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.660: couldn't read orphan inode 15 (err -117) [ 509.282493][ T8320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.220100][ T6490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.382111][ T8368] loop3: detected capacity change from 0 to 8 [ 514.618014][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.629250][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.640068][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.656058][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.670199][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 514.680944][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.079725][ T8404] loop3: detected capacity change from 0 to 1024 [ 516.415516][ T8381] chnl_net:caif_netlink_parms(): no params data found [ 516.491709][ T8411] macvlan0: entered promiscuous mode [ 516.539131][ T8404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.562369][ T8418] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 516.588901][ T8411] ipvlan0: entered promiscuous mode [ 516.600153][ T8411] ipvlan0: left promiscuous mode [ 516.709371][ T8411] macvlan0: left promiscuous mode [ 516.868953][ T8404] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 516.881784][ T8404] EXT4-fs (loop3): This should not happen!! Data will be lost [ 516.881784][ T8404] [ 516.891970][ T8404] EXT4-fs (loop3): Total free blocks count 0 [ 516.898251][ T8404] EXT4-fs (loop3): Free/Dirty block details [ 516.904823][ T8404] EXT4-fs (loop3): free_blocks=68451041280 [ 516.911167][ T8404] EXT4-fs (loop3): dirty_blocks=80 [ 516.916637][ T8404] EXT4-fs (loop3): Block reservation details [ 516.923156][ T8404] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 516.932365][ T5780] Bluetooth: hci3: command tx timeout [ 517.534433][ T8408] loop5: detected capacity change from 0 to 8192 [ 518.423457][ T8116] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 518.506248][ T8408] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.745523][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 519.014088][ T5780] Bluetooth: hci3: command tx timeout [ 519.463242][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.472643][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.481072][ T8381] bridge_slave_0: entered allmulticast mode [ 519.491191][ T8381] bridge_slave_0: entered promiscuous mode [ 519.624429][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.632804][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.640989][ T8381] bridge_slave_1: entered allmulticast mode [ 519.650547][ T8381] bridge_slave_1: entered promiscuous mode [ 520.104052][ T8450] loop3: detected capacity change from 0 to 16 [ 520.179479][ T8450] erofs (device loop3): mounted with root inode @ nid 36. [ 520.494449][ T29] audit: type=1326 audit(2000000083.420:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.6.697" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x0 [ 520.585909][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.654678][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.879638][ T8381] team0: Port device team_slave_0 added [ 520.996233][ T8381] team0: Port device team_slave_1 added [ 521.103850][ T5780] Bluetooth: hci3: command tx timeout [ 521.805677][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.813300][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.825612][ T8462] loop0: detected capacity change from 0 to 1024 [ 521.839611][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.966885][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.975058][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.001589][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.706036][ T8381] hsr_slave_0: entered promiscuous mode [ 522.763673][ T8381] hsr_slave_1: entered promiscuous mode [ 522.869310][ T8381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.882762][ T8381] Cannot create hsr debugfs directory [ 523.174854][ T5780] Bluetooth: hci3: command tx timeout [ 523.462078][ T8480] binder: 8479:8480 ioctl 400c620e 20000200 returned -22 [ 523.535698][ T8483] 9pnet: p9_errstr2errno: server reported unknown error œæçâ̼§6†Gµ)D»Éoè”[ [ 524.918383][ T8495] loop6: detected capacity change from 0 to 8 [ 525.011790][ T8381] bond0: (slave netdevsim3): Releasing backup interface [ 525.079481][ T8381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.317624][ T8381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.566693][ T8381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.857322][ T8381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.057818][ T8381] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 527.219158][ T8381] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 527.389582][ T8381] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 527.533146][ T8512] vivid-001: disconnect [ 527.665508][ T8381] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.522006][ T5841] vivid-001: reconnect [ 530.237183][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.307830][ T8381] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.501034][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.508830][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.737309][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.745231][ T8101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.212864][ T8381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.043178][ T8561] loop0: detected capacity change from 0 to 256 [ 533.465055][ T8561] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 533.481160][ T3060] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 533.638503][ T29] audit: type=1800 audit(2000000096.570:29): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.731" name="file1" dev="loop0" ino=1048628 res=0 errno=0 [ 533.666590][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.675896][ T3060] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.687634][ T3060] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.698104][ T3060] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.707655][ T3060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.924339][ T8574] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 533.933120][ T8574] exFAT-fs (loop0): Filesystem has been set read-only [ 534.011851][ T8567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 534.063304][ T3060] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.652769][ T8578] loop5: detected capacity change from 0 to 2048 [ 535.081239][ T8578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.179683][ T8578] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 535.207299][ T2151] usb 4-1: USB disconnect, device number 6 [ 535.465004][ T8561] ===================================================== [ 535.478134][ T8561] BUG: KMSAN: uninit-value in ima_add_template_entry+0x52b/0x880 [ 535.487526][ T8561] ima_add_template_entry+0x52b/0x880 [ 535.494098][ T8561] ima_store_measurement+0x36b/0x8d0 [ 535.499685][ T8561] process_measurement+0x2c13/0x3f30 [ 535.505826][ T8561] ima_file_check+0x8e/0xd0 [ 535.510696][ T8561] security_file_post_open+0xc6/0x540 [ 535.516329][ T8561] path_openat+0x58cc/0x6200 [ 535.521767][ T8561] do_filp_open+0x268/0x600 [ 535.526550][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 535.531706][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 535.537530][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 535.542698][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 535.548049][ T8561] do_fast_syscall_32+0x38/0x80 [ 535.553377][ T8561] do_SYSENTER_32+0x1f/0x30 [ 535.558115][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.564944][ T8561] [ 535.567411][ T8561] [ 535.567411][ T8561] [ 535.582884][ T8561] Uninit was stored to memory at: [ 535.588296][ T8561] sha256_transform_blocks+0x2dbf/0x2e90 [ 535.595844][ T8561] sha256_update+0x2ff/0x340 [ 535.602569][ T8561] crypto_sha256_update+0x37/0x60 [ 535.607872][ T8561] crypto_shash_update+0x79/0xa0 [ 535.613258][ T8561] ima_calc_file_hash+0x1804/0x3c90 [ 535.618731][ T8561] ima_collect_measurement+0x464/0xd20 [ 535.624600][ T8561] process_measurement+0x294a/0x3f30 [ 535.630158][ T8561] ima_file_check+0x8e/0xd0 [ 535.635143][ T8561] security_file_post_open+0xc6/0x540 [ 535.640946][ T8561] path_openat+0x58cc/0x6200 [ 535.645797][ T8561] do_filp_open+0x268/0x600 [ 535.650740][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 535.655694][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 535.661660][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 535.666654][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 535.672102][ T8561] do_fast_syscall_32+0x38/0x80 [ 535.682960][ T8561] do_SYSENTER_32+0x1f/0x30 [ 535.687704][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.695828][ T8561] [ 535.698297][ T8561] Uninit was stored to memory at: [ 535.703779][ T8561] sha256_transform_blocks+0x2dbf/0x2e90 [ 535.709703][ T8561] sha256_update+0x2ff/0x340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 535.714743][ T8561] crypto_sha256_update+0x37/0x60 [ 535.720066][ T8561] crypto_shash_update+0x79/0xa0 [ 535.725439][ T8561] ima_calc_file_hash+0x1804/0x3c90 [ 535.732210][ T8561] ima_collect_measurement+0x464/0xd20 [ 535.737966][ T8561] process_measurement+0x294a/0x3f30 [ 535.743640][ T8561] ima_file_check+0x8e/0xd0 [ 535.748424][ T8561] security_file_post_open+0xc6/0x540 [ 535.754874][ T8561] path_openat+0x58cc/0x6200 [ 535.759743][ T8561] do_filp_open+0x268/0x600 [ 535.764670][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 535.769581][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 535.775609][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 535.785523][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 535.792283][ T8561] do_fast_syscall_32+0x38/0x80 [ 535.797358][ T8561] do_SYSENTER_32+0x1f/0x30 [ 535.802294][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.808924][ T8561] [ 535.813038][ T8561] Uninit was stored to memory at: [ 535.818412][ T8561] sha256_transform_blocks+0xf33/0x2e90 [ 535.824467][ T8561] sha256_update+0x2ff/0x340 [ 535.829317][ T8561] crypto_sha256_update+0x37/0x60 [ 535.834790][ T8561] crypto_shash_update+0x79/0xa0 [ 535.839988][ T8561] ima_calc_file_hash+0x1804/0x3c90 [ 535.846154][ T8561] ima_collect_measurement+0x464/0xd20 [ 535.852198][ T8561] process_measurement+0x294a/0x3f30 [ 535.857789][ T8561] ima_file_check+0x8e/0xd0 [ 535.862704][ T8561] security_file_post_open+0xc6/0x540 [ 535.868349][ T8561] path_openat+0x58cc/0x6200 [ 535.873328][ T8561] do_filp_open+0x268/0x600 [ 535.878078][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 535.888013][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 535.895965][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 535.901087][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 535.906429][ T8561] do_fast_syscall_32+0x38/0x80 [ 535.911834][ T8561] do_SYSENTER_32+0x1f/0x30 [ 535.916572][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.923329][ T8561] [ 535.923596][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.925706][ T8561] Uninit was stored to memory at: [ 535.925927][ T8561] sha256_transform_blocks+0xf7d/0x2e90 [ 535.952705][ T8561] sha256_update+0x2ff/0x340 [ 535.957565][ T8561] crypto_sha256_update+0x37/0x60 [ 535.963025][ T8561] crypto_shash_update+0x79/0xa0 [ 535.968235][ T8561] ima_calc_file_hash+0x1804/0x3c90 [ 535.976086][ T8561] ima_collect_measurement+0x464/0xd20 [ 535.981992][ T8561] process_measurement+0x294a/0x3f30 [ 535.992626][ T8561] ima_file_check+0x8e/0xd0 [ 535.997393][ T8561] security_file_post_open+0xc6/0x540 [ 536.004512][ T8561] path_openat+0x58cc/0x6200 [ 536.009364][ T8561] do_filp_open+0x268/0x600 [ 536.014288][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 536.019201][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 536.025129][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 536.030141][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 536.035588][ T8561] do_fast_syscall_32+0x38/0x80 [ 536.040793][ T8561] do_SYSENTER_32+0x1f/0x30 [ 536.045504][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.052321][ T8561] [ 536.054767][ T8561] Uninit was stored to memory at: [ 536.060111][ T8561] sha256_transform_blocks+0xfb5/0x2e90 [ 536.066333][ T8561] sha256_update+0x2ff/0x340 [ 536.071305][ T8561] crypto_sha256_update+0x37/0x60 [ 536.076584][ T8561] crypto_shash_update+0x79/0xa0 [ 536.081893][ T8561] ima_calc_file_hash+0x1804/0x3c90 [ 536.092307][ T8561] ima_collect_measurement+0x464/0xd20 [ 536.098072][ T8561] process_measurement+0x294a/0x3f30 [ 536.105096][ T8561] ima_file_check+0x8e/0xd0 [ 536.109854][ T8561] security_file_post_open+0xc6/0x540 [ 536.115594][ T8561] path_openat+0x58cc/0x6200 [ 536.120471][ T8561] do_filp_open+0x268/0x600 [ 536.126109][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 536.131405][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 536.137236][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 536.142346][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 536.147688][ T8561] do_fast_syscall_32+0x38/0x80 [ 536.152864][ T8561] do_SYSENTER_32+0x1f/0x30 [ 536.157580][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.164442][ T8561] [ 536.166890][ T8561] Uninit was stored to memory at: [ 536.172358][ T8561] sha256_transform_blocks+0x2c35/0x2e90 [ 536.178262][ T8561] sha256_update+0x2ff/0x340 [ 536.183241][ T8561] crypto_sha256_update+0x37/0x60 [ 536.188534][ T8561] crypto_shash_update+0x79/0xa0 [ 536.198787][ T8561] ima_calc_file_hash+0x1804/0x3c90 [ 536.205697][ T8561] ima_collect_measurement+0x464/0xd20 [ 536.211601][ T8561] process_measurement+0x294a/0x3f30 [ 536.217172][ T8561] ima_file_check+0x8e/0xd0 [ 536.222124][ T8561] security_file_post_open+0xc6/0x540 [ 536.227762][ T8561] path_openat+0x58cc/0x6200 [ 536.232747][ T8561] do_filp_open+0x268/0x600 [ 536.237511][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 536.242606][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 536.248425][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 536.253574][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 536.258939][ T8561] do_fast_syscall_32+0x38/0x80 [ 536.264222][ T8561] do_SYSENTER_32+0x1f/0x30 [ 536.268955][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.275729][ T8561] [ 536.278187][ T8561] Uninit was stored to memory at: [ 536.283844][ T8561] _copy_to_iter+0x1248/0x2b30 [ 536.288871][ T8561] copy_page_to_iter+0x419/0x880 [ 536.298999][ T8561] filemap_read+0xc65/0x1560 [ 536.305197][ T8561] generic_file_read_iter+0x136/0xad0 [ 536.310949][ T8561] __kernel_read+0x726/0xd30 [ 536.315813][ T8561] integrity_kernel_read+0x77/0x90 [ 536.321283][ T8561] ima_calc_file_hash+0x1731/0x3c90 [ 536.326752][ T8561] ima_collect_measurement+0x464/0xd20 [ 536.332592][ T8561] process_measurement+0x294a/0x3f30 [ 536.338162][ T8561] ima_file_check+0x8e/0xd0 [ 536.343144][ T8561] security_file_post_open+0xc6/0x540 [ 536.348769][ T8561] path_openat+0x58cc/0x6200 [ 536.353783][ T8561] do_filp_open+0x268/0x600 [ 536.358552][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 536.363621][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 536.369456][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 536.374564][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 536.379908][ T8561] do_fast_syscall_32+0x38/0x80 [ 536.385141][ T8561] do_SYSENTER_32+0x1f/0x30 [ 536.389871][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.401541][ T8561] [ 536.404006][ T8561] Uninit was created at: [ 536.408545][ T8561] __alloc_pages_noprof+0x9a7/0xe00 [ 536.415494][ T8561] alloc_pages_mpol_noprof+0x299/0x990 [ 536.421359][ T8561] folio_alloc_noprof+0x1db/0x310 [ 536.426630][ T8561] filemap_alloc_folio_noprof+0xa6/0x440 [ 536.432659][ T8561] __filemap_get_folio+0xac4/0x1550 [ 536.438137][ T8561] block_write_begin+0x6e/0x2b0 [ 536.443389][ T8561] exfat_write_begin+0xfb/0x400 [ 536.448754][ T8561] exfat_file_write_iter+0x771/0x12a0 [ 536.454496][ T8561] do_iter_readv_writev+0x88a/0xa30 [ 536.459974][ T8561] vfs_writev+0x56a/0x14f0 [ 536.464775][ T8561] __se_compat_sys_pwritev2+0x282/0x480 [ 536.470876][ T8561] __ia32_compat_sys_pwritev2+0x11d/0x1a0 [ 536.476888][ T8561] ia32_sys_call+0x3587/0x4180 [ 536.482051][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 536.487427][ T8561] do_fast_syscall_32+0x38/0x80 [ 536.492615][ T8561] do_SYSENTER_32+0x1f/0x30 [ 536.502293][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.508940][ T8561] [ 536.512643][ T8561] CPU: 0 UID: 0 PID: 8561 Comm: syz.0.731 Tainted: G W 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 536.525115][ T8561] Tainted: [W]=WARN [ 536.529069][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 536.584766][ T8561] ===================================================== [ 536.595524][ T8561] Disabling lock debugging due to kernel taint [ 536.607182][ T8561] Kernel panic - not syncing: kmsan.panic set ... [ 536.613812][ T8561] CPU: 0 UID: 0 PID: 8561 Comm: syz.0.731 Tainted: G B W 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 536.626204][ T8561] Tainted: [B]=BAD_PAGE, [W]=WARN [ 536.631375][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 536.641613][ T8561] Call Trace: [ 536.645042][ T8561] [ 536.648146][ T8561] dump_stack_lvl+0x216/0x2d0 [ 536.653111][ T8561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 536.659171][ T8561] dump_stack+0x1e/0x24 [ 536.663586][ T8561] panic+0x4e2/0xcf0 [ 536.667753][ T8561] ? kmsan_get_metadata+0xd1/0x1c0 [ 536.673131][ T8561] kmsan_report+0x2c7/0x2d0 [ 536.677860][ T8561] ? crypto_shash_final+0x72/0xa0 [ 536.683196][ T8561] ? ima_calc_field_array_hash_tfm+0x7d8/0x810 [ 536.689652][ T8561] ? __msan_warning+0x95/0x120 [ 536.694717][ T8561] ? ima_add_template_entry+0x52b/0x880 [ 536.700565][ T8561] ? ima_store_measurement+0x36b/0x8d0 [ 536.706328][ T8561] ? process_measurement+0x2c13/0x3f30 [ 536.712086][ T8561] ? ima_file_check+0x8e/0xd0 [ 536.717017][ T8561] ? security_file_post_open+0xc6/0x540 [ 536.722832][ T8561] ? path_openat+0x58cc/0x6200 [ 536.727867][ T8561] ? do_filp_open+0x268/0x600 [ 536.732836][ T8561] ? do_sys_openat2+0x1bf/0x2f0 [ 536.737934][ T8561] ? __ia32_compat_sys_openat+0x298/0x300 [ 536.743931][ T8561] ? ia32_sys_call+0x2fb4/0x4180 [ 536.749100][ T8561] ? __do_fast_syscall_32+0xb0/0x110 [ 536.754624][ T8561] ? do_fast_syscall_32+0x38/0x80 [ 536.759893][ T8561] ? do_SYSENTER_32+0x1f/0x30 [ 536.764796][ T8561] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.771620][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.777063][ T8561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 536.783105][ T8561] ? ima_add_template_entry+0x9b/0x880 [ 536.788840][ T8561] ? filter_irq_stacks+0x60/0x1a0 [ 536.794131][ T8561] ? stack_depot_save_flags+0x2c/0x750 [ 536.799867][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.805310][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.810750][ T8561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 536.816827][ T8561] __msan_warning+0x95/0x120 [ 536.821711][ T8561] ima_add_template_entry+0x52b/0x880 [ 536.827387][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.832834][ T8561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 536.838899][ T8561] ima_store_measurement+0x36b/0x8d0 [ 536.844511][ T8561] process_measurement+0x2c13/0x3f30 [ 536.850125][ T8561] ? filter_irq_stacks+0x60/0x1a0 [ 536.855413][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.860866][ T8561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 536.866920][ T8561] ? end_current_label_crit_section+0x124/0x2a0 [ 536.873459][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.878891][ T8561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 536.884955][ T8561] ima_file_check+0x8e/0xd0 [ 536.889725][ T8561] security_file_post_open+0xc6/0x540 [ 536.895406][ T8561] path_openat+0x58cc/0x6200 [ 536.900275][ T8561] ? filter_irq_stacks+0x164/0x1a0 [ 536.905666][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.911110][ T8561] ? kmsan_get_metadata+0x13e/0x1c0 [ 536.916585][ T8561] do_filp_open+0x268/0x600 [ 536.921397][ T8561] do_sys_openat2+0x1bf/0x2f0 [ 536.926345][ T8561] __ia32_compat_sys_openat+0x298/0x300 [ 536.932171][ T8561] ia32_sys_call+0x2fb4/0x4180 [ 536.937182][ T8561] __do_fast_syscall_32+0xb0/0x110 [ 536.942530][ T8561] ? irqentry_exit+0x16/0x60 [ 536.947911][ T8561] do_fast_syscall_32+0x38/0x80 [ 536.953022][ T8561] do_SYSENTER_32+0x1f/0x30 [ 536.957738][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.964393][ T8561] RIP: 0023:0xf70ed579 [ 536.968635][ T8561] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 536.988519][ T8561] RSP: 002b:00000000f50df55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 536.997188][ T8561] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 537.005368][ T8561] RDX: 0000000000101042 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.013537][ T8561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.021708][ T8561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 537.029883][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.038074][ T8561] [ 537.041574][ T8561] Kernel Offset: disabled [ 537.046011][ T8561] Rebooting in 86400 seconds..