last executing test programs: 3m50.078373664s ago: executing program 3 (id=60): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) ptrace(0x10, r0) 3m48.975630855s ago: executing program 3 (id=64): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x161702, 0x0) io_uring_setup(0x1699, &(0x7f0000000180)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m47.618665756s ago: executing program 3 (id=70): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x0) 3m46.984685648s ago: executing program 3 (id=74): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 3m45.706635192s ago: executing program 3 (id=80): r0 = epoll_create1(0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000001}) 3m44.880204673s ago: executing program 3 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050424bd7000fe5b60250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3m42.626077352s ago: executing program 32 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050424bd7000fe5b60250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2m46.091552095s ago: executing program 1 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r2, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa080001"], 0x70}}, 0x0) 2m45.601550523s ago: executing program 1 (id=333): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9, 0x9, 0xfffd}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) 2m44.785317806s ago: executing program 1 (id=338): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000300)='./file0\x00') creat(&(0x7f0000001bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m44.025270915s ago: executing program 1 (id=343): syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000014c0)={[{@test_dummy_encryption}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x6}}, {@commit={'commit', 0x3d, 0x401}}, {@orlov}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x40}}, {@data_err_ignore}, {@oldalloc}]}, 0xf, 0x5d8, &(0x7f0000001f00)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x3}}]}, 0xff, 0x4d1, &(0x7f0000000f00)="$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") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2101491, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, &(0x7f0000000140)='usrjquota=') 2m42.684010692s ago: executing program 1 (id=350): r0 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='source', 0x0, r0) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) 2m41.474482691s ago: executing program 1 (id=356): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000580)=ANY=[]) 2m39.234360854s ago: executing program 33 (id=356): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000580)=ANY=[]) 51.31082144s ago: executing program 6 (id=855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) write$binfmt_script(r0, &(0x7f0000000040), 0x4) 50.221226536s ago: executing program 6 (id=858): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x8, 0x8, 0x90, 0xffffffffffffff12, 0xc298}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x200000}}]}]}}}]}, 0xa4}}, 0x0) 49.553947524s ago: executing program 6 (id=862): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r1 = socket(0x18, 0x800, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'ip6_vti0\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 48.03563074s ago: executing program 6 (id=868): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f00000003c0)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp855,gid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x1, 0xc32, &(0x7f0000009100)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c0) getdents(r0, 0x0, 0x58) 46.816590177s ago: executing program 6 (id=874): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20028040}, 0x800) 46.073753589s ago: executing program 6 (id=880): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x100, 0x6, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 43.372057268s ago: executing program 34 (id=880): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x100, 0x6, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.227104735s ago: executing program 7 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 4.922287318s ago: executing program 0 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd2a, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 4.615943155s ago: executing program 4 (id=1095): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000040)={0x40, 0xb, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.481369904s ago: executing program 7 (id=1097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 4.229009757s ago: executing program 0 (id=1098): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r0) read(r1, &(0x7f0000000080)=""/48, 0x30) 3.768288525s ago: executing program 7 (id=1100): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f0000000080)={[{@gid}, {@codepage={'codepage', 0x3d, 'cp850'}}, {}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x2, 0x33c, &(0x7f0000001f80)="$eJzs3U9PE0EYBvBndrtlKwRXwJB4MiiJJwJ40HiRGOLFL+DBEBFKQlgxUUyUxIiejfFmYuLRm2ejX0Evxi+gJw7Gk16IB9fMu7PtbNndllJYGp5fYt125887nZ3tDKQMiOjYujb//d3Fbf1PeQBcAFcAB4APVACcxrj/cH2jbUFu40ghzql2pVlar2dl9WFyGIF+VsGQ/RodjCiKoh9tU/0+lFioPMoewRYHGDCjU877hx7ZwdiK23W8WD2sdrCDRxguMxwiIiqf+fx3zKfEkJm/Ow4waebh/f75n5rf7JQXx5HQ+Px34ueR0u/PSTml13urG2F9OV7C6d53klViVlmZ10TUfLuriK8sd9Caclm1ZJNYnNrKalif2pICnuOqYSUbk8dlJA0RedFW41QTGWvTAkVtLzYobfB0G2Zz4h8tqjFzAfzpJ15nV7fwpYOY1Gf1VS2oAG+w3Jj/VSKlu0l6KmgZKnH80/klSiuDOFWqlc3wT0klZ0wN+Pi+2cpa3vvqw9WxZNGlqNb5e5DE+aqanwsjSP9YIW7dTH7rJNcoUFGyarBzzTYS/c3MNdZaV23FC+tTS/fCvIu+tzJXdOqluqkm8AsfMG/N/x2dehL5IzM1ypWkNFdGYXsqkjKnH1NkaN7d08gkcT09XjvK8wJ3cBnDDx5vri2GYf1++QfJUOky+9kexxNfiOZy1K/o/6008PWBB6Bnlf6LoijzVAWH0QWeNPXS22aTN9cWlbnn7a8KfedsOTWXnxjAHADzSnJH6Kb2p41cA80C2+QKpK4/urflldQF6SUHSVRyKrl0D6Z3kqpSp1wMdDRSal1UeuPJ2mLY1Z2I+kyz0zF+q+xgqAx6vqDi9Z+1XpmWu45+CArWP176aW1XAqvEmZwV0Ig8nuhsBdcoNneeOJgctFlznbsAnG+p0UFS47PWYgMTJ47ibyX3/qsMNY9vuM2f/xMRERERERERERERERERERERERER9Zu9fhuhm68TpGvcPoZ/eIOIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaH+s/X8BV3aMqWbt/1u0U5Nw4x1i/F7s/+t2sP+v2urnvciIjoT/AQAA//8TP1iR") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a430, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000dc0)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@numtail}, {@fat=@discard}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_lower}, {@shortname_lower}, {@fat=@debug}, {@utf8}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) 3.704176977s ago: executing program 2 (id=1101): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 3.152626306s ago: executing program 2 (id=1103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa, 0x7fffffff, 0x1}, @nop, @generic={0xfe, 0xe, "06a193cb58eea63ec51ce5e3"}, @eol, @sack={0x5, 0x12, [0x6, 0x87f, 0x3, 0x4]}, @fastopen={0x22, 0x4, "d084"}, @sack={0x5, 0x6, [0x4]}, @mptcp=@mp_join={0x1e, 0x0, 0x7}]}}}}}}}, 0x0) 2.917229127s ago: executing program 5 (id=1104): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e22, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0xd}}}}}}}, 0x0) 2.821759808s ago: executing program 7 (id=1105): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000200)=""/153, 0x13}], 0x2) tkill(r0, 0x8) 2.705109947s ago: executing program 2 (id=1106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000087b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff7, &(0x7f00000033c0)=""/4087, 0x41100, 0xa, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.611341815s ago: executing program 5 (id=1107): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 2.386336491s ago: executing program 2 (id=1108): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) 2.260868529s ago: executing program 7 (id=1109): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@quota}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x80000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0) 2.238124888s ago: executing program 5 (id=1110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x17, 0x3, &(0x7f0000001cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x10, 0xe394, @void, @value}, 0x94) 2.104028384s ago: executing program 0 (id=1111): r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000fed000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 1.994382672s ago: executing program 4 (id=1112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x1027}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 1.752678915s ago: executing program 5 (id=1113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='netlink_extack\x00', r0}, 0xb3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.612271275s ago: executing program 4 (id=1114): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.555412977s ago: executing program 0 (id=1115): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}}, 0x0) 1.405561216s ago: executing program 7 (id=1116): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0xd0, 0x4, &(0x7f0000000080)={0x11, "42cae8b3df20afbcf8dd178c50e5d84526580489979a473f112453b228922bd31c"}}) 1.216937464s ago: executing program 2 (id=1117): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 1.038519293s ago: executing program 5 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) 999.651806ms ago: executing program 4 (id=1119): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b080001400000f9010800024000000018080001"], 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 964.118573ms ago: executing program 0 (id=1120): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 648.11505ms ago: executing program 4 (id=1121): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000090d89898e8"], 0x48}}, 0x0) 476.769353ms ago: executing program 5 (id=1122): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x1, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x9b, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 283.360697ms ago: executing program 0 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 180.291376ms ago: executing program 4 (id=1124): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0x4000, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250400000014000600fe80000000000000000000000000003008000200030000001400050000000002000000000000ffffac14140c08000400020000"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x24044810) kernel console output (not intermixed with test programs): d up [ 231.799230][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.835380][ T6087] loop4: detected capacity change from 0 to 512 [ 232.031739][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.270136][ T6080] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.42: bg 0: block 5: invalid block bitmap [ 232.291734][ T6087] EXT4-fs (loop4): shut down requested (2) [ 232.384044][ T6080] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 232.397863][ T6090] loop2: detected capacity change from 0 to 2048 [ 232.435910][ T6094] loop1: detected capacity change from 0 to 256 [ 232.648499][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.801950][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.057578][ T6097] loop0: detected capacity change from 0 to 128 [ 233.146453][ T6097] vfat: Unknown parameter '017777777777777777777770xffffffffffffffff˙˙' [ 233.401898][ T6102] usb usb8: usbfs: process 6102 (syz.1.52) did not claim interface 0 before use [ 233.505770][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 233.511351][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 233.731457][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 233.765155][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 233.774060][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 233.787208][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 233.797729][ T24] usb 1-1: config 1 has no interface number 0 [ 233.804287][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.815654][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 233.829044][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 233.838494][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.058946][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 234.405299][ T6114] loop2: detected capacity change from 0 to 1024 [ 234.583053][ T6114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.614819][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 234.896998][ T24] usb 1-1: USB disconnect, device number 2 [ 234.904917][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 235.143073][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.594263][ T6142] loop1: detected capacity change from 0 to 128 [ 236.610117][ T6142] ufs: You didn't specify the type of your ufs filesystem [ 236.610117][ T6142] [ 236.610117][ T6142] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 236.610117][ T6142] [ 236.610117][ T6142] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 236.717485][ T6142] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 237.041795][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 237.779760][ T6157] loop0: detected capacity change from 0 to 64 [ 238.076153][ T6159] loop3: detected capacity change from 0 to 512 [ 238.173807][ T6159] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.247375][ T6159] EXT4-fs (loop3): 1 truncate cleaned up [ 238.256103][ T6159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.476244][ T6165] loop0: detected capacity change from 0 to 1024 [ 238.513662][ T6165] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.719036][ T6165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.018958][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.626883][ T751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.645875][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.856665][ T751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.877419][ T5854] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 240.017314][ T751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.066873][ T6182] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.110433][ T5854] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 240.119207][ T5854] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 240.128603][ T5854] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 240.142066][ T5854] usb 1-1: config 220 has no interface number 2 [ 240.148598][ T5854] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 240.163243][ T5854] usb 1-1: config 220 interface 0 has no altsetting 0 [ 240.170292][ T5854] usb 1-1: config 220 interface 76 has no altsetting 0 [ 240.177512][ T5854] usb 1-1: config 220 interface 1 has no altsetting 0 [ 240.243331][ T751] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.276779][ T5854] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 240.286467][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.295928][ T5854] usb 1-1: Product: syz [ 240.300320][ T5854] usb 1-1: Manufacturer: syz [ 240.306188][ T5854] usb 1-1: SerialNumber: syz [ 240.600937][ T751] bridge_slave_1: left allmulticast mode [ 240.606840][ T751] bridge_slave_1: left promiscuous mode [ 240.613801][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.671802][ T751] bridge_slave_0: left allmulticast mode [ 240.677716][ T751] bridge_slave_0: left promiscuous mode [ 240.684875][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.719063][ T5854] usb 1-1: selecting invalid altsetting 0 [ 240.725610][ T5854] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 240.733871][ T5854] usb 1-1: No valid video chain found. [ 240.827031][ T5854] usb 1-1: selecting invalid altsetting 0 [ 240.834512][ T5854] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 240.863487][ T5854] usb 1-1: USB disconnect, device number 3 [ 241.452644][ T751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.502515][ T751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.535628][ T751] bond0 (unregistering): Released all slaves [ 242.201016][ T751] hsr_slave_0: left promiscuous mode [ 242.261861][ T751] hsr_slave_1: left promiscuous mode [ 242.269652][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.278246][ T751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.366480][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.374405][ T751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.522134][ T751] veth1_macvtap: left promiscuous mode [ 242.527896][ T751] veth0_macvtap: left promiscuous mode [ 242.535459][ T751] veth1_vlan: left promiscuous mode [ 242.541180][ T751] veth0_vlan: left promiscuous mode [ 243.153456][ T6205] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 243.515580][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.532096][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.543077][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.556233][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.567928][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.792894][ T751] team0 (unregistering): Port device team_slave_1 removed [ 243.912544][ T751] team0 (unregistering): Port device team_slave_0 removed [ 244.057072][ T6219] loop0: detected capacity change from 0 to 256 [ 245.025930][ T6227] loop4: detected capacity change from 0 to 128 [ 245.101355][ T6227] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.222036][ T6230] netlink: 'syz.2.100': attribute type 11 has an invalid length. [ 245.247836][ T6227] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 245.616796][ T751] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 245.665776][ T5090] Bluetooth: hci3: command tx timeout [ 245.962048][ T6211] chnl_net:caif_netlink_parms(): no params data found [ 246.180330][ T6240] loop0: detected capacity change from 0 to 128 [ 246.190993][ T6240] EXT4-fs: Ignoring removed nobh option [ 246.292742][ T6240] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.357032][ T6240] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.483535][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 246.575514][ T6240] fscrypt (loop0, inode 12): Reserved bits set in encryption policy [ 246.733144][ T5848] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 246.742783][ T5848] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 246.753477][ T5848] usb 5-1: config 220 has no interface number 2 [ 246.759996][ T5848] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 246.773640][ T5848] usb 5-1: config 220 interface 0 has no altsetting 0 [ 246.783468][ T5848] usb 5-1: config 220 interface 76 has no altsetting 0 [ 246.793535][ T5848] usb 5-1: config 220 interface 1 has no altsetting 0 [ 246.945308][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.969884][ T5848] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 246.979329][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.987968][ T5848] usb 5-1: Product: syz [ 246.994777][ T5848] usb 5-1: Manufacturer: syz [ 246.999601][ T5848] usb 5-1: SerialNumber: syz [ 247.379061][ T5848] usb 5-1: selecting invalid altsetting 0 [ 247.385874][ T5848] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 247.392816][ T5848] usb 5-1: No valid video chain found. [ 247.548724][ T5848] usb 5-1: selecting invalid altsetting 0 [ 247.554995][ T5848] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 247.639272][ T5848] usb 5-1: USB disconnect, device number 2 [ 247.743825][ T5090] Bluetooth: hci3: command tx timeout [ 247.942933][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.952446][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.960135][ T6211] bridge_slave_0: entered allmulticast mode [ 247.969480][ T6211] bridge_slave_0: entered promiscuous mode [ 248.046126][ T6263] loop2: detected capacity change from 0 to 512 [ 248.088791][ T6263] EXT4-fs: Ignoring removed bh option [ 248.089112][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.103476][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.111245][ T6211] bridge_slave_1: entered allmulticast mode [ 248.126950][ T6211] bridge_slave_1: entered promiscuous mode [ 248.140744][ T6263] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 248.213224][ T6263] EXT4-fs (loop2): invalid journal inode [ 248.219156][ T6263] EXT4-fs (loop2): can't get journal size [ 248.269215][ T6263] EXT4-fs (loop2): 1 truncate cleaned up [ 248.277411][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.508194][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.612167][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.827036][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.896664][ T6266] mmap: syz.0.108 (6266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 248.926144][ T6211] team0: Port device team_slave_0 added [ 249.000117][ T6211] team0: Port device team_slave_1 added [ 249.408689][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.417195][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.443780][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.706650][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.714213][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.740866][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.821487][ T5090] Bluetooth: hci3: command tx timeout [ 250.008304][ T6285] loop4: detected capacity change from 0 to 1024 [ 250.061913][ T6285] EXT4-fs: Ignoring removed oldalloc option [ 250.072592][ T6285] EXT4-fs: Ignoring removed i_version option [ 250.250943][ T6285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.384511][ T6211] hsr_slave_0: entered promiscuous mode [ 250.394515][ T6211] hsr_slave_1: entered promiscuous mode [ 250.403029][ T6211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.412098][ T6211] Cannot create hsr debugfs directory [ 250.687511][ T6295] netlink: 'syz.2.118': attribute type 6 has an invalid length. [ 250.695815][ T6295] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.118'. [ 250.725104][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.212505][ T6301] netlink: 'syz.4.119': attribute type 4 has an invalid length. [ 251.220483][ T6301] netlink: 72 bytes leftover after parsing attributes in process `syz.4.119'. [ 251.582229][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 251.905537][ T5090] Bluetooth: hci3: command tx timeout [ 251.935388][ T6211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.057923][ T6211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.173299][ T6211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.284968][ T6211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.232311][ T6330] loop0: detected capacity change from 0 to 128 [ 253.330833][ T6330] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 253.689380][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.728778][ T6330] FAT-fs (loop0): FAT read failed (blocknr 128) [ 253.915758][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.010359][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.017966][ T751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.172638][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.180187][ T751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.962567][ T6344] sctp: failed to load transform for md5: -2 [ 255.331258][ T6357] loop1: detected capacity change from 0 to 256 [ 255.434228][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 255.443668][ T6358] netlink: 3 bytes leftover after parsing attributes in process `syz.0.137'. [ 255.470025][ T6358] batadv1: entered promiscuous mode [ 255.475682][ T6358] batadv1: entered allmulticast mode [ 255.629236][ T6350] loop2: detected capacity change from 0 to 40427 [ 255.665685][ T6350] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 255.673861][ T6350] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.685573][ T6350] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 255.693738][ T6350] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 255.749958][ T6358] Zero length message leads to an empty skb [ 255.949425][ T6357] FAT-fs (loop1): Directory bread(block 64) failed [ 255.956667][ T6357] FAT-fs (loop1): Directory bread(block 65) failed [ 255.963750][ T6357] FAT-fs (loop1): Directory bread(block 66) failed [ 255.970701][ T6357] FAT-fs (loop1): Directory bread(block 67) failed [ 255.977579][ T6357] FAT-fs (loop1): Directory bread(block 68) failed [ 255.984482][ T6357] FAT-fs (loop1): Directory bread(block 69) failed [ 255.991502][ T6357] FAT-fs (loop1): Directory bread(block 70) failed [ 255.998252][ T6357] FAT-fs (loop1): Directory bread(block 71) failed [ 256.009624][ T6357] FAT-fs (loop1): Directory bread(block 72) failed [ 256.017916][ T6357] FAT-fs (loop1): Directory bread(block 73) failed [ 257.079511][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.817047][ T6387] loop4: detected capacity change from 0 to 1024 [ 257.921335][ T6387] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 258.088804][ T6387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.174209][ T6391] loop2: detected capacity change from 0 to 1024 [ 258.459061][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.477634][ T6391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.491493][ T6391] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.131481][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 259.258611][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.013584][ T6211] veth0_vlan: entered promiscuous mode [ 260.109678][ T6211] veth1_vlan: entered promiscuous mode [ 260.478075][ T6211] veth0_macvtap: entered promiscuous mode [ 260.556641][ T6211] veth1_macvtap: entered promiscuous mode [ 260.768051][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.779992][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.790851][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.801760][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.811911][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.825344][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.836869][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.847784][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.864054][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.002466][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.013951][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.028587][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.040684][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.051126][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.062027][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.072155][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.082928][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.097729][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.147753][ T6211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.157649][ T6211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.168083][ T6211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.177315][ T6211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.410881][ T5848] psmouse serio2: Failed to reset mouse on : -5 [ 263.102482][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.166'. [ 263.958475][ T6486] netlink: 116 bytes leftover after parsing attributes in process `syz.0.170'. [ 264.511816][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 264.688546][ T6498] syz_tun: entered promiscuous mode [ 264.703254][ T6498] syz_tun: left promiscuous mode [ 264.991539][ T5848] misc userio: Buffer overflowed, userio client isn't keeping up [ 265.471553][ T3885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.479636][ T3885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.533421][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.541587][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.564131][ T6508] loop2: detected capacity change from 0 to 1024 [ 265.683180][ T6508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.057274][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.323916][ T5848] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 266.571115][ T5848] psmouse serio2: Failed to enable mouse on [ 267.229719][ T6536] loop2: detected capacity change from 0 to 2048 [ 267.401265][ T6536] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 267.504524][ T6539] loop1: detected capacity change from 0 to 2048 [ 267.612012][ T6544] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.826660][ T6545] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 267.835717][ T6545] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 267.973352][ T6543] loop4: detected capacity change from 0 to 32768 [ 268.002249][ T6543] (syz.4.187,6543,1):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018 [ 268.006929][ T6545] Remounting filesystem read-only [ 268.011698][ T6543] (syz.4.187,6543,1):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 268.016788][ T6545] NILFS (loop2): error -5 truncating bmap (ino=15) [ 268.030238][ T6543] (syz.4.187,6543,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 268.030365][ T6543] (syz.4.187,6543,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 268.675250][ T6536] syz.2.185 (6536) used greatest stack depth: 4376 bytes left [ 268.827544][ T5796] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 269.175052][ T6557] loop4: detected capacity change from 0 to 512 [ 269.348258][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.361635][ T6557] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.608602][ T6557] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.194: corrupted inode contents [ 269.681214][ T6557] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.194: mark_inode_dirty error [ 269.758312][ T6557] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.194: corrupted inode contents [ 269.839589][ T6557] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.194: mark_inode_dirty error [ 270.223123][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.625811][ T6571] loop1: detected capacity change from 0 to 4096 [ 270.737623][ T6578] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 271.086115][ T6571] ntfs3(loop1): failed to convert "0080" to macgaelic [ 271.147150][ T6571] ntfs3(loop1): failed to convert name for inode 1e. [ 271.187481][ T6571] ntfs3(loop1): ino=1f, mi_enum_attr [ 271.193268][ T6571] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 271.700907][ T6590] loop0: detected capacity change from 0 to 512 [ 272.169717][ T6589] loop5: detected capacity change from 0 to 4096 [ 272.274163][ T6590] EXT4-fs (loop0): Test dummy encryption mode enabled [ 272.339901][ T6590] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.207: casefold flag without casefold feature [ 272.469811][ T6590] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.207: couldn't read orphan inode 15 (err -117) [ 272.553802][ T6590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.965590][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.485750][ T6612] netlink: 'syz.4.217': attribute type 4 has an invalid length. [ 273.495063][ T6612] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.217'. [ 273.791622][ T5848] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 274.013053][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 274.057643][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.069213][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.079677][ T5848] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 274.089129][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.219467][ T5848] usb 3-1: config 0 descriptor?? [ 274.755996][ T5848] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0001/input/input7 [ 274.792073][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 274.945918][ T5848] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 275.002543][ T5848] usb 3-1: USB disconnect, device number 3 [ 275.036713][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 275.043989][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0034, bcdDevice= 0.00 [ 275.056297][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.093959][ T24] usb 2-1: config 0 descriptor?? [ 275.348979][ T6633] loop5: detected capacity change from 0 to 2048 [ 275.482886][ T6633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.495884][ T6633] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.696247][ T24] wacom 0003:056A:0034.0002: probe with driver wacom failed with error -22 [ 275.717991][ T30] audit: type=1800 audit(1745913890.517:3): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.225" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 275.752899][ T24] usb 2-1: USB disconnect, device number 2 [ 275.891446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 275.901071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 276.029624][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.376714][ T30] audit: type=1326 audit(1745913891.187:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 276.480943][ T30] audit: type=1326 audit(1745913891.267:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 276.507400][ T30] audit: type=1326 audit(1745913891.267:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 276.531048][ T30] audit: type=1326 audit(1745913891.267:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 276.555595][ T30] audit: type=1326 audit(1745913891.267:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 276.577789][ T30] audit: type=1326 audit(1745913891.267:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 276.603962][ T30] audit: type=1326 audit(1745913891.267:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 277.581999][ T5887] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 277.915982][ T5887] usb 6-1: config 252 has an invalid interface number: 101 but max is 0 [ 277.929116][ T5887] usb 6-1: config 252 has no interface number 0 [ 277.937265][ T5887] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 277.946781][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.067039][ T5887] pvrusb2: Hardware description: Terratec Grabster AV400 [ 278.074557][ T5887] pvrusb2: ********** [ 278.078705][ T5887] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 278.089145][ T5887] pvrusb2: Important functionality might not be entirely working. [ 278.097217][ T5887] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 278.108830][ T5887] pvrusb2: ********** [ 278.478655][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 278.566287][ T24] usb 6-1: USB disconnect, device number 2 [ 278.573930][ T24] pvrusb2: Device being rendered inoperable [ 279.091047][ T30] audit: type=1326 audit(1745913893.907:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 279.113911][ T30] audit: type=1326 audit(1745913893.907:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 280.462424][ T6683] netlink: 124 bytes leftover after parsing attributes in process `syz.0.241'. [ 280.737760][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.744702][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.789799][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 280.789869][ T30] audit: type=1326 audit(1745913895.607:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 280.818939][ T30] audit: type=1326 audit(1745913895.607:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 280.841410][ T30] audit: type=1326 audit(1745913895.617:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 280.864062][ T30] audit: type=1326 audit(1745913895.617:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 280.891296][ T30] audit: type=1326 audit(1745913895.617:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 280.914947][ T30] audit: type=1326 audit(1745913895.617:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 280.937353][ T30] audit: type=1326 audit(1745913895.617:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 281.328476][ T30] audit: type=1326 audit(1745913895.827:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 281.352445][ T30] audit: type=1326 audit(1745913895.827:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 281.374737][ T30] audit: type=1326 audit(1745913895.827:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ff00000 [ 281.696977][ T6690] capability: warning: `syz.0.246' uses deprecated v2 capabilities in a way that may be insecure [ 281.769666][ T6691] loop2: detected capacity change from 0 to 256 [ 281.882326][ T6693] netlink: 108 bytes leftover after parsing attributes in process `syz.5.247'. [ 281.958822][ T6691] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 281.972519][ T6691] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 282.828583][ T6702] loop4: detected capacity change from 0 to 1024 [ 282.938859][ T6702] EXT4-fs: Ignoring removed nobh option [ 282.944879][ T6702] EXT4-fs: Ignoring removed bh option [ 283.210731][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.264754][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 283.384102][ T6712] loop5: detected capacity change from 0 to 16 [ 283.441060][ T6712] erofs (device loop5): mounted with root inode @ nid 36. [ 283.474787][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 283.491631][ T24] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 283.499994][ T24] usb 1-1: config 0 has no interface number 0 [ 283.507043][ T24] usb 1-1: config 0 interface 46 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 283.517301][ T24] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.527482][ T24] usb 1-1: config 0 interface 46 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 283.587145][ T6712] syz.5.255: attempt to access beyond end of device [ 283.587145][ T6712] loop5: rw=0, sector=103079215104, nr_sectors = 8 limit=16 [ 283.647873][ T24] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 283.660271][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.669716][ T24] usb 1-1: Product: syz [ 283.674419][ T24] usb 1-1: Manufacturer: syz [ 283.679241][ T24] usb 1-1: SerialNumber: syz [ 283.719766][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.756853][ T24] usb 1-1: config 0 descriptor?? [ 283.765679][ T6704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.824054][ T24] ums-karma 1-1:0.46: USB Mass Storage device detected [ 283.973279][ T24] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 284.151377][ T24] usb 1-1: USB disconnect, device number 4 [ 284.226344][ T6717] loop1: detected capacity change from 0 to 2048 [ 284.294113][ T6717] loop1: p1 < > p3 [ 284.319607][ T6717] loop1: p3 size 134217728 extends beyond EOD, truncated [ 284.811026][ T6723] loop5: detected capacity change from 0 to 256 [ 284.913008][ T6723] exfat: Deprecated parameter 'namecase' [ 284.919461][ T6723] exfat: Deprecated parameter 'utf8' [ 285.078136][ T6723] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 286.279930][ T6740] loop2: detected capacity change from 0 to 1024 [ 286.312257][ T6743] block nbd4: not configured, cannot reconfigure [ 286.960681][ T6663] udevd[6663]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 286.982774][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 287.234552][ T6753] loop0: detected capacity change from 0 to 512 [ 287.472877][ T6753] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.655943][ T6759] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 287.695465][ T6753] __quota_error: 63 callbacks suppressed [ 287.695539][ T6753] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 287.712485][ T6753] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.858336][ T6753] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 287.886938][ T6762] loop1: detected capacity change from 0 to 2048 [ 287.917000][ T6762] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.961638][ T6753] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 287.972501][ T6753] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 288.112067][ T6766] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.353578][ T5793] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 288.514984][ T6770] loop5: detected capacity change from 0 to 128 [ 288.595613][ T6770] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 288.697135][ T6770] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.074149][ T6778] loop1: detected capacity change from 0 to 128 [ 289.246801][ T6778] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.342412][ T6778] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.688037][ T5807] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.273653][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 290.283685][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.285'. [ 290.319669][ T6791] gretap1: entered promiscuous mode [ 290.932483][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 291.096542][ T6800] loop0: detected capacity change from 0 to 1024 [ 291.370121][ T6805] loop2: detected capacity change from 0 to 1024 [ 292.443736][ T6818] loop2: detected capacity change from 0 to 256 [ 292.837123][ T6818] FAT-fs (loop2): Directory bread(block 64) failed [ 292.844126][ T6818] FAT-fs (loop2): Directory bread(block 65) failed [ 292.851453][ T6818] FAT-fs (loop2): Directory bread(block 66) failed [ 292.858201][ T6818] FAT-fs (loop2): Directory bread(block 67) failed [ 292.865444][ T6818] FAT-fs (loop2): Directory bread(block 68) failed [ 292.877501][ T6818] FAT-fs (loop2): Directory bread(block 69) failed [ 292.886152][ T6818] FAT-fs (loop2): Directory bread(block 70) failed [ 292.893078][ T6818] FAT-fs (loop2): Directory bread(block 71) failed [ 292.899961][ T6818] FAT-fs (loop2): Directory bread(block 72) failed [ 292.906840][ T6818] FAT-fs (loop2): Directory bread(block 73) failed [ 294.289572][ T6837] gretap0: entered promiscuous mode [ 294.295421][ T6837] vlan2: entered promiscuous mode [ 295.001721][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.311'. [ 295.414024][ T6851] loop0: detected capacity change from 0 to 512 [ 295.479039][ T6851] EXT4-fs: Ignoring removed i_version option [ 295.485639][ T6851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.553292][ T6851] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.562846][ T6851] EXT4-fs (loop0): blocks per group (256) and clusters per group (32768) inconsistent [ 296.441322][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 296.641163][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 296.688250][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 296.700425][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 296.710616][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 296.722711][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 296.734242][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 296.921658][ T24] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 296.931289][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.939535][ T24] usb 3-1: Product: syz [ 296.944195][ T24] usb 3-1: Manufacturer: syz [ 296.949015][ T24] usb 3-1: SerialNumber: syz [ 297.076835][ T24] usb 3-1: config 0 descriptor?? [ 297.092351][ T6861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.177437][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 297.224508][ T5135] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 297.305891][ T5135] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 297.362168][ T5135] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 297.422162][ T6861] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 297.472359][ T5135] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 297.556086][ T24] usb 3-1: USB disconnect, device number 4 [ 298.818363][ T6893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.332'. [ 299.796302][ T6900] loop5: detected capacity change from 0 to 1024 [ 300.847754][ T6913] process 'syz.5.341' launched '/dev/fd/3' with NULL argv: empty string added [ 301.131460][ T6917] loop1: detected capacity change from 0 to 1024 [ 301.139768][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 301.197482][ T6922] loop2: detected capacity change from 0 to 64 [ 301.208735][ T6917] EXT4-fs: Ignoring removed orlov option [ 301.215259][ T6917] EXT4-fs: Ignoring removed oldalloc option [ 301.223322][ T6921] netlink: 104 bytes leftover after parsing attributes in process `syz.4.342'. [ 301.234166][ T6921] netlink: 104 bytes leftover after parsing attributes in process `syz.4.342'. [ 301.272440][ T6917] EXT4-fs: Mount option(s) incompatible with ext2 [ 301.475304][ T6917] loop1: detected capacity change from 0 to 512 [ 301.511232][ T6917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.654299][ T6917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.669094][ T6917] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.815157][ T6917] EXT4-fs: Cannot change quota options when quota turned on [ 302.046937][ T5807] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 302.096312][ T5807] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 302.216428][ T5807] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz-executor: bit already cleared for inode 16 [ 302.301907][ T5807] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 302.417602][ T5807] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 302.986386][ T5807] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.988165][ T3885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.175698][ T3885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.356427][ T3885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.557861][ T3885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.041221][ T3885] bridge_slave_1: left allmulticast mode [ 304.047133][ T3885] bridge_slave_1: left promiscuous mode [ 304.053790][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.181015][ T3885] bridge_slave_0: left allmulticast mode [ 304.186916][ T3885] bridge_slave_0: left promiscuous mode [ 304.193657][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.772930][ T3885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.809089][ T3885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.831925][ T3885] bond0 (unregistering): Released all slaves [ 305.282067][ T3885] hsr_slave_0: left promiscuous mode [ 305.292941][ T3885] hsr_slave_1: left promiscuous mode [ 305.300959][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.310417][ T3885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.343385][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.351243][ T3885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.401241][ T3885] veth1_macvtap: left promiscuous mode [ 305.407012][ T3885] veth0_macvtap: left promiscuous mode [ 305.414261][ T3885] veth1_vlan: left promiscuous mode [ 305.419803][ T3885] veth0_vlan: left promiscuous mode [ 306.254167][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.271555][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.291720][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.329231][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.342424][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.805184][ T3885] team0 (unregistering): Port device team_slave_1 removed [ 306.882640][ T3885] team0 (unregistering): Port device team_slave_0 removed [ 308.380903][ T5808] Bluetooth: hci4: command tx timeout [ 308.449109][ T6957] chnl_net:caif_netlink_parms(): no params data found [ 308.579855][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'. [ 309.604378][ T6991] loop5: detected capacity change from 0 to 128 [ 309.697941][ T6991] EXT4-fs: Ignoring removed nobh option [ 309.755060][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.762728][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.776562][ T6957] bridge_slave_0: entered allmulticast mode [ 309.814283][ T6957] bridge_slave_0: entered promiscuous mode [ 309.833005][ T6991] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.850807][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.858444][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.872432][ T6957] bridge_slave_1: entered allmulticast mode [ 309.881963][ T6957] bridge_slave_1: entered promiscuous mode [ 309.922407][ T6991] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.015692][ T6957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.052224][ T6994] loop0: detected capacity change from 0 to 1024 [ 310.068437][ T6991] fscrypt (loop5, inode 12): Unsupported log2_data_unit_size in encryption policy: 133 [ 310.082211][ T6994] EXT4-fs: Ignoring removed bh option [ 310.128214][ T6957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.160196][ T6994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.462097][ T5808] Bluetooth: hci4: command tx timeout [ 310.472392][ T6211] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.679904][ T6957] team0: Port device team_slave_0 added [ 310.742126][ T6957] team0: Port device team_slave_1 added [ 310.873422][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 310.955228][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.046025][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.053431][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.079928][ T6957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.255607][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.263543][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.289901][ T6957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.820799][ T7012] netlink: 64 bytes leftover after parsing attributes in process `syz.5.380'. [ 311.847991][ T6957] hsr_slave_0: entered promiscuous mode [ 311.857984][ T6957] hsr_slave_1: entered promiscuous mode [ 311.866684][ T6957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.874687][ T6957] Cannot create hsr debugfs directory [ 312.345091][ T7020] netlink: 56 bytes leftover after parsing attributes in process `syz.4.381'. [ 312.541268][ T5808] Bluetooth: hci4: command tx timeout [ 312.888753][ T7022] loop5: detected capacity change from 0 to 4096 [ 313.008336][ T7023] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.339629][ T6957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.492002][ T6957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.593442][ T6957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.652102][ T6957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.667400][ T7025] loop4: detected capacity change from 0 to 1024 [ 314.126684][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree [ 314.134741][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree [ 314.621032][ T5808] Bluetooth: hci4: command tx timeout [ 314.670122][ T6957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.814447][ T7033] loop0: detected capacity change from 0 to 2048 [ 314.848479][ T3831] hfsplus: request for non-existent node 16777216 in B*Tree [ 314.856316][ T3831] hfsplus: request for non-existent node 16777216 in B*Tree [ 314.908894][ T7033] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 314.948198][ T6957] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.008954][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.016550][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.078365][ T7034] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.103651][ T5962] udevd[5962]: incorrect nilfs2 checksum on /dev/loop0 [ 315.195139][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.202719][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.657905][ T7040] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.391'. [ 316.429253][ T7050] kvm: apic: phys broadcast and lowest prio [ 317.152183][ T6957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.179796][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 317.263689][ T7058] netlink: 104 bytes leftover after parsing attributes in process `syz.2.398'. [ 317.273404][ T7058] netlink: 104 bytes leftover after parsing attributes in process `syz.2.398'. [ 317.476506][ T7060] ALSA: seq fatal error: cannot create timer (-22) [ 317.971296][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 317.980379][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.401'. [ 318.436626][ T7076] loop4: detected capacity change from 0 to 24 [ 318.585263][ T7076] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 319.369510][ T6957] veth0_vlan: entered promiscuous mode [ 319.501601][ T6957] veth1_vlan: entered promiscuous mode [ 319.839255][ T6957] veth0_macvtap: entered promiscuous mode [ 319.888326][ T6957] veth1_macvtap: entered promiscuous mode [ 320.053009][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.063776][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.073907][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.084665][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.095110][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.110267][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.121905][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.132707][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.147709][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.484886][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.495922][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.506387][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.522035][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.533640][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.550251][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.560440][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.571221][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.586010][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.652906][ T7096] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 320.794787][ T6957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.804029][ T6957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.815259][ T6957] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.829190][ T6957] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.022477][ T7109] netlink: 248 bytes leftover after parsing attributes in process `syz.5.416'. [ 322.031899][ T7109] netlink: 248 bytes leftover after parsing attributes in process `syz.5.416'. [ 322.935237][ T7124] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 323.095569][ T7127] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 323.152772][ T7124] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 324.461986][ T5854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 324.641337][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 324.668313][ T5854] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 324.676945][ T5854] usb 6-1: config 0 has no interface number 0 [ 324.683745][ T5854] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 324.694064][ T5854] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 324.744578][ T7147] loop4: detected capacity change from 0 to 1764 [ 324.779342][ T5854] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 324.789362][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.797727][ T5854] usb 6-1: Product: syz [ 324.802225][ T5854] usb 6-1: Manufacturer: syz [ 324.807027][ T5854] usb 6-1: SerialNumber: syz [ 324.871670][ T5854] usb 6-1: config 0 descriptor?? [ 324.882874][ T7143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 324.891024][ T7143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 325.192216][ T7143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 325.199992][ T7143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 325.680963][ T5854] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 325.692385][ T5854] asix 6-1:0.251: probe with driver asix failed with error -524 [ 325.905081][ T24] usb 6-1: USB disconnect, device number 3 [ 326.063041][ T751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.071529][ T751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.079585][ T30] audit: type=1326 audit(1745913940.877:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.2.434" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x0 [ 326.152842][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.161502][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.447530][ T7167] loop6: detected capacity change from 0 to 4096 [ 327.634577][ T7167] EXT4-fs (loop6): Test dummy encryption mode enabled [ 327.732465][ T7167] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 327.789640][ T7167] System zones: 0-5 [ 327.860364][ T7167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.047005][ T24] kernel write not supported for file [eventfd] (pid: 24 comm: kworker/1:0) [ 328.452938][ T6957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.875177][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 328.885181][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 328.891663][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 331.122322][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.458'. [ 331.195824][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.458'. [ 332.120045][ T7234] loop6: detected capacity change from 0 to 1024 [ 332.207164][ T7236] netlink: 100 bytes leftover after parsing attributes in process `syz.4.465'. [ 332.216737][ T7236] netlink: 'syz.4.465': attribute type 3 has an invalid length. [ 332.282934][ T7234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.733621][ T6957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.441693][ T7255] loop0: detected capacity change from 0 to 764 [ 334.075862][ T7261] loop2: detected capacity change from 0 to 2048 [ 334.132580][ T7261] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 334.255849][ T7261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.318419][ T7267] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 334.815575][ T7271] loop6: detected capacity change from 0 to 128 [ 334.888190][ T7271] EXT4-fs (loop6): Test dummy encryption mode enabled [ 334.924681][ T7271] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.967752][ T7271] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.881825][ T7271] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 336.308294][ T6957] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.119425][ T7300] loop5: detected capacity change from 0 to 512 [ 337.393354][ T7300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.974040][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.052461][ T7314] loop2: detected capacity change from 0 to 128 [ 338.105789][ T7314] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 338.160716][ T7314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.282809][ T7314] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 338.303814][ T5854] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 338.470761][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 338.493041][ T5854] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 338.501680][ T5854] usb 5-1: config 0 has no interface number 0 [ 338.508068][ T5854] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 338.534354][ T7320] bridge0: port 3(syz_tun) entered blocking state [ 338.546668][ T7320] bridge0: port 3(syz_tun) entered disabled state [ 338.554323][ T7320] syz_tun: entered allmulticast mode [ 338.563117][ T7320] syz_tun: entered promiscuous mode [ 338.570383][ T7320] bridge0: port 3(syz_tun) entered blocking state [ 338.577383][ T7320] bridge0: port 3(syz_tun) entered forwarding state [ 338.667847][ T5854] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 338.677359][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.688223][ T5854] usb 5-1: Product: syz [ 338.692858][ T5854] usb 5-1: Manufacturer: syz [ 338.697688][ T5854] usb 5-1: SerialNumber: syz [ 338.759042][ T5796] UDF-fs: warning (device loop2): udf_evict_inode: Inode 94 (mode 100755) has inode size 36865 different from extent length 37376. Filesystem need not be standards compliant. [ 338.843789][ T5854] usb 5-1: config 0 descriptor?? [ 339.162010][ T7326] syz.2.503 uses obsolete (PF_INET,SOCK_PACKET) [ 339.509521][ T5854] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 339.547720][ T5854] usb 5-1: USB disconnect, device number 3 [ 340.301902][ T5854] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 340.510861][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 340.608714][ T5854] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 340.618322][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.629311][ T5854] usb 1-1: Product: syz [ 340.633828][ T5854] usb 1-1: Manufacturer: syz [ 340.638672][ T5854] usb 1-1: SerialNumber: syz [ 340.743588][ T5854] usb 1-1: config 0 descriptor?? [ 340.789366][ T5854] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 341.142590][ T11] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 341.372031][ T11] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.386208][ T11] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.396634][ T11] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.409815][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.544965][ T7347] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 341.563757][ T11] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.984167][ T11] usb 3-1: USB disconnect, device number 5 [ 342.169774][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.176612][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.357055][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.519'. [ 342.396125][ T5854] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 342.439808][ T5854] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 342.456682][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.519'. [ 342.504235][ T5854] usb 1-1: USB disconnect, device number 5 [ 342.525260][ T6665] udevd[6665]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.479048][ T7369] loop0: detected capacity change from 0 to 8 [ 343.717547][ T7369] SQUASHFS error: Failed to read block 0x4e8: -5 [ 343.724933][ T7369] SQUASHFS error: Failed to read block 0x4de: -5 [ 343.732140][ T7369] SQUASHFS error: Failed to read block 0x4de: -5 [ 343.739176][ T7369] SQUASHFS error: Failed to read block 0x4de: -5 [ 343.790857][ T30] audit: type=1800 audit(1745913958.587:248): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.524" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 344.083848][ T7378] loop6: detected capacity change from 0 to 2048 [ 344.099367][ T7378] EXT4-fs: inline encryption not supported [ 344.205192][ T7378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.351205][ T7378] EXT4-fs error (device loop6): ext4_ext_precache:631: inode #2: comm syz.6.528: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 344.445393][ T7385] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.528: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 344.504010][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 344.944454][ T6957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.742349][ T7402] netlink: 72 bytes leftover after parsing attributes in process `syz.2.537'. [ 345.778456][ T7404] loop4: detected capacity change from 0 to 64 [ 345.890964][ T7404] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 347.547952][ T7430] smc: net device bond0 applied user defined pnetid SYZ2 [ 347.588432][ T7430] smc: net device bond0 erased user defined pnetid SYZ2 [ 347.599904][ T7425] loop2: detected capacity change from 0 to 2048 [ 347.697682][ T7425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.724421][ T7441] fuse: Invalid gid '00000000000037777777777' [ 350.128668][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 350.158698][ T7463] loop0: detected capacity change from 0 to 1024 [ 350.177622][ T7463] EXT4-fs: Ignoring removed bh option [ 350.307606][ T7463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.434939][ T7468] loop5: detected capacity change from 0 to 1024 [ 350.456227][ T7468] EXT4-fs (loop5): Test dummy encryption mode enabled [ 350.467788][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.486600][ T7468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.591739][ T7468] EXT4-fs (loop5): shut down requested (1) [ 350.740041][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.267034][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.568'. [ 351.483011][ T7483] loop2: detected capacity change from 0 to 128 [ 351.540005][ T7483] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 351.617824][ T7483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.891067][ T7477] loop4: detected capacity change from 0 to 4096 [ 352.549087][ T7492] loop2: detected capacity change from 0 to 1024 [ 352.594391][ T7492] EXT4-fs: Ignoring removed orlov option [ 352.600701][ T7492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.819825][ T7492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.244205][ T7503] netlink: 'syz.5.580': attribute type 3 has an invalid length. [ 353.361054][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.895445][ T7505] loop4: detected capacity change from 0 to 2048 [ 353.969054][ T7512] /dev/loop4: Can't open blockdev [ 354.050766][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 354.124024][ T7505] Alternate GPT is invalid, using primary GPT. [ 354.132078][ T7505] loop4: p1 p2 p3 [ 354.270418][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.281055][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 354.290365][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.429780][ T24] usb 7-1: config 0 descriptor?? [ 354.882609][ T24] lg-g15 0003:046D:C222.0003: unbalanced collection at end of report description [ 354.955885][ T24] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -22 [ 355.137142][ T24] usb 7-1: USB disconnect, device number 2 [ 355.592892][ T7532] loop2: detected capacity change from 0 to 64 [ 355.662556][ T7532] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 356.194922][ T7538] lo: entered promiscuous mode [ 356.207013][ T7538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.142388][ T7553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.600'. [ 357.448120][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 358.269021][ T7559] loop4: detected capacity change from 0 to 32768 [ 358.284636][ T7559] (syz.4.593,7559,1):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018 [ 358.294129][ T7559] (syz.4.593,7559,1):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 358.311984][ T7559] (syz.4.593,7559,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 358.322211][ T7559] (syz.4.593,7559,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 358.517698][ T7561] netlink: 'syz.2.602': attribute type 5 has an invalid length. [ 358.592320][ T7561] netlink: 'syz.2.602': attribute type 5 has an invalid length. [ 359.569528][ T7572] loop2: detected capacity change from 0 to 256 [ 360.792415][ T7586] loop2: detected capacity change from 0 to 64 [ 360.857848][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 360.868688][ T6669] udevd[6669]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 360.893380][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 362.484008][ T7605] o2cb: This node has not been configured. [ 362.490137][ T7605] o2cb: Cluster check failed. Fix errors before retrying. [ 362.497719][ T7605] (syz.0.622,7605,1):user_dlm_register:674 ERROR: status = -22 [ 362.509626][ T7605] (syz.0.622,7605,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 362.902252][ T7610] loop4: detected capacity change from 0 to 1024 [ 362.946058][ T7610] EXT4-fs: Ignoring removed nobh option [ 362.973399][ T7610] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 363.111778][ T7610] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.624: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 363.232254][ T7610] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.624: couldn't read orphan inode 11 (err -117) [ 363.333918][ T7610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.519115][ T7610] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.624: Invalid block bitmap block 0 in block_group 0 [ 363.581358][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 363.619013][ T7610] Quota error (device loop4): write_blk: dquota write failed [ 363.631615][ T7610] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 363.643505][ T7610] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.624: Failed to acquire dquot type 0 [ 363.788299][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 363.797456][ T7610] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.624: Invalid inode table block 8589934593 in block_group 0 [ 363.862764][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.876177][ T11] usb 1-1: config 0 has no interfaces? [ 363.883643][ T11] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 363.893178][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.999100][ T11] usb 1-1: config 0 descriptor?? [ 364.101853][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.631'. [ 364.159137][ T4308] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm kworker/u8:24: Invalid inode table block 8589934593 in block_group 0 [ 364.224524][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.268724][ T11] usb 1-1: USB disconnect, device number 6 [ 365.498605][ T7640] netlink: 144 bytes leftover after parsing attributes in process `syz.0.637'. [ 365.616540][ T7644] loop4: detected capacity change from 0 to 256 [ 366.047053][ T7644] FAT-fs (loop4): Directory bread(block 64) failed [ 366.058508][ T7644] FAT-fs (loop4): Directory bread(block 65) failed [ 366.065657][ T7644] FAT-fs (loop4): Directory bread(block 66) failed [ 366.072543][ T7644] FAT-fs (loop4): Directory bread(block 67) failed [ 366.079426][ T7644] FAT-fs (loop4): Directory bread(block 68) failed [ 366.090926][ T7644] FAT-fs (loop4): Directory bread(block 69) failed [ 366.097841][ T7644] FAT-fs (loop4): Directory bread(block 70) failed [ 366.106140][ T7644] FAT-fs (loop4): Directory bread(block 71) failed [ 366.113221][ T7644] FAT-fs (loop4): Directory bread(block 72) failed [ 366.119987][ T7644] FAT-fs (loop4): Directory bread(block 73) failed [ 367.060932][ T7656] loop2: detected capacity change from 0 to 4096 [ 367.797007][ T7670] loop0: detected capacity change from 0 to 1024 [ 368.062926][ T7670] hfsplus: request for non-existent node 16777216 in B*Tree [ 368.073169][ T7670] hfsplus: request for non-existent node 16777216 in B*Tree [ 368.406853][ T7674] macvtap1: entered promiscuous mode [ 368.413382][ T7674] macvtap1: entered allmulticast mode [ 368.418955][ T7674] veth1_vlan: entered allmulticast mode [ 368.565821][ T751] hfsplus: request for non-existent node 16777216 in B*Tree [ 368.573626][ T751] hfsplus: request for non-existent node 16777216 in B*Tree [ 368.597520][ T7674] veth1_vlan: left allmulticast mode [ 369.504500][ T7693] loop4: detected capacity change from 0 to 128 [ 369.531495][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 369.562861][ T7693] vfat: Unknown parameter '017777777777777777777770xffffffffffffffff˙˙' [ 369.736780][ T11] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.748246][ T11] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.758476][ T11] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.774101][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.823832][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 369.836359][ T7691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 369.930832][ T5854] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 370.004055][ T11] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.201116][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 370.289304][ T5854] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 370.298195][ T5854] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 370.307786][ T5854] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 370.319565][ T5854] usb 5-1: config 1 has no interface number 0 [ 370.326172][ T5854] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.337767][ T5854] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 370.353692][ T5854] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 370.363102][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.406462][ T11] usb 6-1: USB disconnect, device number 4 [ 370.637288][ T5854] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 370.847888][ T6669] udevd[6669]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.186750][ T5854] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 371.473888][ T5854] usb 5-1: USB disconnect, device number 4 [ 371.481818][ T5854] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 373.396239][ T7722] loop6: detected capacity change from 0 to 128 [ 373.642924][ T7722] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.741991][ T7722] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 374.253304][ T6957] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.709017][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 375.952240][ T7750] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 375.958701][ T7750] syzkaller0: linktype set to 776 [ 376.933056][ T7764] loop5: detected capacity change from 0 to 256 [ 377.811806][ T7777] loop5: detected capacity change from 0 to 256 [ 380.182330][ T7806] Bluetooth: MGMT ver 1.23 [ 380.749669][ T7809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.310417][ T7819] serio: Serial port ttyS3 [ 382.363508][ T7831] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.720'. [ 382.507206][ T7834] loop0: detected capacity change from 0 to 256 [ 383.303821][ T7840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.318205][ T7840] bond0: (slave bond1): Enslaving as an active interface with an up link [ 383.485904][ T7847] netlink: 'syz.0.728': attribute type 11 has an invalid length. [ 383.498758][ T7847] netlink: 44 bytes leftover after parsing attributes in process `syz.0.728'. [ 384.061984][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 384.232279][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 384.276071][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.315948][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 384.325496][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.333873][ T24] usb 5-1: Product: syz [ 384.338255][ T24] usb 5-1: Manufacturer: syz [ 384.343302][ T24] usb 5-1: SerialNumber: syz [ 384.464837][ T7855] loop6: detected capacity change from 0 to 512 [ 384.467349][ T7857] sock: sock_set_timeout: `syz.5.734' (pid 7857) tries to set negative timeout [ 384.493371][ T24] usb 5-1: config 0 descriptor?? [ 384.641071][ T7855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 384.654963][ T7855] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.941107][ T24] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 385.367356][ T24] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 385.399361][ T24] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 385.410985][ T24] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 385.531152][ T6957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 385.561153][ T24] usb 5-1: USB disconnect, device number 5 [ 385.619674][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 385.690216][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 387.167769][ T7888] loop4: detected capacity change from 0 to 256 [ 387.555600][ T7888] FAT-fs (loop4): Directory bread(block 64) failed [ 387.562871][ T7888] FAT-fs (loop4): Directory bread(block 65) failed [ 387.569761][ T7888] FAT-fs (loop4): Directory bread(block 66) failed [ 387.577261][ T7888] FAT-fs (loop4): Directory bread(block 67) failed [ 387.585202][ T7888] FAT-fs (loop4): Directory bread(block 68) failed [ 387.597361][ T7888] FAT-fs (loop4): Directory bread(block 69) failed [ 387.605793][ T7888] FAT-fs (loop4): Directory bread(block 70) failed [ 387.612747][ T7888] FAT-fs (loop4): Directory bread(block 71) failed [ 387.619643][ T7888] FAT-fs (loop4): Directory bread(block 72) failed [ 387.626765][ T7888] FAT-fs (loop4): Directory bread(block 73) failed [ 387.951479][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 388.142862][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 388.183552][ T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.195008][ T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.208709][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 388.216937][ T24] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 388.228938][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.267795][ T7897] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 388.275326][ T7897] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 388.405545][ T24] usb 6-1: config 0 descriptor?? [ 388.676731][ T7900] macsec0: entered promiscuous mode [ 388.683774][ T7900] macsec1: entered allmulticast mode [ 388.689463][ T7900] macsec0: entered allmulticast mode [ 388.695546][ T7900] veth1_macvtap: entered allmulticast mode [ 388.839072][ T24] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 388.846734][ T24] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 388.854112][ T24] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 388.861650][ T24] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 388.868916][ T24] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 389.028071][ T24] ortek 0003:1223:3F07.0004: hidraw0: USB HID v0.05 Device [HID 1223:3f07] on usb-dummy_hcd.5-1/input0 [ 389.134585][ T24] usb 6-1: USB disconnect, device number 5 [ 389.261105][ T5090] Bluetooth: hci4: command tx timeout [ 389.709083][ T7909] loop2: detected capacity change from 0 to 2048 [ 389.912532][ T7909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.117169][ T7913] Falling back ldisc for ptm0. [ 392.319871][ T7945] dccp_invalid_packet: P.Data Offset(127) too large [ 393.397313][ T7956] loop5: detected capacity change from 0 to 64 [ 394.095476][ T6211] hfs: node 4:3 still has 1 user(s)! [ 394.852713][ T5090] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 395.356158][ T7970] netlink: 'syz.6.783': attribute type 32 has an invalid length. [ 396.715982][ T5854] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 396.890970][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 396.964045][ T5854] usb 1-1: config 2 has an invalid interface number: 66 but max is 0 [ 396.972513][ T5854] usb 1-1: config 2 has no interface number 0 [ 396.978839][ T5854] usb 1-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 397.093243][ T5854] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 397.093405][ T7992] loop6: detected capacity change from 0 to 2048 [ 397.102631][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.102749][ T5854] usb 1-1: Product: syz [ 397.102836][ T5854] usb 1-1: Manufacturer: syz [ 397.134721][ T5854] usb 1-1: SerialNumber: syz [ 397.211960][ T5854] usb 1-1: Found UVC 0.00 device syz (046d:08c6) [ 397.222942][ T5854] usb 1-1: No valid video chain found. [ 397.243768][ T7998] loop4: detected capacity change from 0 to 1024 [ 397.340779][ T7997] loop2: detected capacity change from 0 to 2048 [ 397.497367][ T7998] hfsplus: walked past end of dir [ 397.509409][ T7999] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.545581][ T24] usb 1-1: USB disconnect, device number 7 [ 398.365691][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 398.560859][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 398.629069][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.639644][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.654771][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.666146][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 398.676564][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.996374][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 399.006103][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 399.014504][ T24] usb 5-1: Manufacturer: syz [ 399.045779][ T8015] netlink: 188 bytes leftover after parsing attributes in process `syz.6.801'. [ 399.058072][ T8015] netlink: 'syz.6.801': attribute type 1 has an invalid length. [ 399.083390][ T5854] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 399.083716][ T24] usb 5-1: config 0 descriptor?? [ 399.333979][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 399.402796][ T5854] usb 1-1: config 0 has no interfaces? [ 399.493636][ T5854] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 399.505629][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.514093][ T5854] usb 1-1: Product: syz [ 399.518468][ T5854] usb 1-1: Manufacturer: syz [ 399.523360][ T5854] usb 1-1: SerialNumber: syz [ 399.530979][ T24] rc_core: IR keymap rc-hauppauge not found [ 399.537174][ T24] Registered IR keymap rc-empty [ 399.542944][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 399.611464][ T5854] usb 1-1: config 0 descriptor?? [ 399.627860][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 399.660250][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 399.683353][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 399.832218][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 399.885915][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 399.957733][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.001024][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.041546][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.070193][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.120885][ T5848] usb 1-1: USB disconnect, device number 8 [ 400.143340][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.172030][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.196172][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.226927][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.281157][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.339041][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 400.348709][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 400.412146][ T24] usb 5-1: USB disconnect, device number 6 [ 400.542798][ T8030] netlink: 'syz.6.807': attribute type 6 has an invalid length. [ 401.264765][ T8036] loop6: detected capacity change from 0 to 256 [ 401.325645][ T8036] exfat: Deprecated parameter 'utf8' [ 401.333884][ T8036] exfat: Deprecated parameter 'utf8' [ 401.339986][ T8036] exfat: Deprecated parameter 'utf8' [ 401.433259][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 401.555582][ T8036] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 401.699489][ T8043] input: syz1 as /devices/virtual/input/input13 [ 403.304443][ T8059] loop5: detected capacity change from 0 to 4096 [ 403.437372][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 403.448454][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 403.456896][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 403.469761][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 403.481958][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00 [ 403.490192][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00 [ 403.498683][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00 [ 403.509507][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00 [ 403.517858][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00 [ 403.526149][ T8059] ntfs3(loop5): try to read out of volume at offset 0x3fffffe0c00 [ 403.610282][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.250909][ T8077] loop0: detected capacity change from 0 to 512 [ 404.335504][ T8077] EXT4-fs (loop0): Invalid default hash set in the superblock [ 404.728430][ T8080] loop2: detected capacity change from 0 to 8 [ 404.771671][ T8080] SQUASHFS error: zlib decompression failed, data probably corrupt [ 404.779993][ T8080] SQUASHFS error: Failed to read block 0x9b: -5 [ 404.789046][ T8080] SQUASHFS error: Unable to read metadata cache entry [99] [ 404.800947][ T8080] SQUASHFS error: Unable to read inode 0x127 [ 405.391810][ T8087] block nbd5: shutting down sockets [ 406.221899][ T8096] netlink: 184 bytes leftover after parsing attributes in process `syz.5.835'. [ 406.236127][ T8096] netlink: 48 bytes leftover after parsing attributes in process `syz.5.835'. [ 408.805943][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.841'. [ 412.437044][ T8135] loop6: detected capacity change from 0 to 512 [ 412.599293][ T8135] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #17: comm syz.6.851: iget: bogus i_mode (0) [ 412.696869][ T8135] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.851: couldn't read orphan inode 17 (err -117) [ 412.863040][ T8135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.877613][ T8137] loop4: detected capacity change from 0 to 1024 [ 412.940975][ T8137] /dev/loop4: Can't open blockdev [ 413.336219][ T6957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.158290][ T8155] netlink: 'syz.2.859': attribute type 8 has an invalid length. [ 417.035726][ T8092] Set syz1 is full, maxelem 65536 reached [ 417.292982][ T8174] loop6: detected capacity change from 0 to 2048 [ 417.401080][ T8174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.641047][ T8180] loop2: detected capacity change from 0 to 256 [ 417.844328][ T8180] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd137a500, utbl_chksum : 0xe619d30d) [ 417.862121][ T6957] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 417.896571][ T6957] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 418.475467][ T751] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.562933][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 418.701448][ T751] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.882366][ T751] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.219460][ T751] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.395718][ T8189] loop5: detected capacity change from 0 to 4096 [ 419.983930][ T751] bridge_slave_1: left allmulticast mode [ 419.989845][ T751] bridge_slave_1: left promiscuous mode [ 419.996578][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.081273][ T751] bridge_slave_0: left allmulticast mode [ 420.087163][ T751] bridge_slave_0: left promiscuous mode [ 420.093850][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.000244][ T751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.048307][ T751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.069838][ T751] bond0 (unregistering): Released all slaves [ 421.658209][ T751] hsr_slave_0: left promiscuous mode [ 421.685582][ T751] hsr_slave_1: left promiscuous mode [ 421.697074][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.704931][ T751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.829473][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.838089][ T751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.923144][ T751] macsec0: left allmulticast mode [ 421.928429][ T751] veth1_macvtap: left allmulticast mode [ 421.935366][ T751] veth1_macvtap: left promiscuous mode [ 421.941209][ T751] veth0_macvtap: left promiscuous mode [ 421.947081][ T751] veth1_vlan: left promiscuous mode [ 421.952896][ T751] veth0_vlan: left promiscuous mode [ 422.348445][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.368461][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.392901][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.489937][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.534343][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.768068][ T751] team0 (unregistering): Port device team_slave_1 removed [ 422.819944][ T751] team0 (unregistering): Port device team_slave_0 removed [ 423.147841][ T8215] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 423.758896][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 424.026265][ T8226] netlink: 60 bytes leftover after parsing attributes in process `syz.5.891'. [ 424.058914][ T8228] loop0: detected capacity change from 0 to 512 [ 424.261332][ T8228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.276999][ T8228] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.517536][ T8212] chnl_net:caif_netlink_parms(): no params data found [ 424.707411][ T5808] Bluetooth: hci4: command tx timeout [ 424.762643][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.715966][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.724239][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.742500][ T8212] bridge_slave_0: entered allmulticast mode [ 425.752123][ T8212] bridge_slave_0: entered promiscuous mode [ 425.819134][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.829237][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.843085][ T8212] bridge_slave_1: entered allmulticast mode [ 425.908893][ T8212] bridge_slave_1: entered promiscuous mode [ 426.363908][ T8212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.477286][ T8212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.811326][ T5808] Bluetooth: hci4: command tx timeout [ 426.868291][ T8262] veth1_to_batadv: entered promiscuous mode [ 426.875008][ T8262] macsec2: entered promiscuous mode [ 426.898156][ T8212] team0: Port device team_slave_0 added [ 426.970695][ T8212] team0: Port device team_slave_1 added [ 427.188118][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 427.235566][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.249178][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.277425][ T8212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.398239][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.406388][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.432590][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.442560][ T8212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.769814][ T8271] Set syz1 is full, maxelem 65536 reached [ 427.826752][ T8212] hsr_slave_0: entered promiscuous mode [ 427.840307][ T8212] hsr_slave_1: entered promiscuous mode [ 427.849012][ T8212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.856948][ T8212] Cannot create hsr debugfs directory [ 428.861000][ T5808] Bluetooth: hci4: command tx timeout [ 429.155558][ T8212] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 429.259052][ T8212] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 429.346581][ T8212] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 429.465004][ T8212] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 429.565632][ T30] audit: type=1326 audit(1745918139.454:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 429.701575][ T30] audit: type=1326 audit(1745918139.504:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 429.724272][ T30] audit: type=1326 audit(1745918139.514:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 429.746725][ T30] audit: type=1326 audit(1745918139.514:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 429.769265][ T30] audit: type=1326 audit(1745918139.514:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 429.793889][ T30] audit: type=1326 audit(1745918139.514:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 429.815870][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.823297][ T30] audit: type=1326 audit(1745918139.524:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 430.732477][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.883061][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.941819][ T5808] Bluetooth: hci4: command tx timeout [ 430.980290][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.987871][ T3885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.139685][ T3885] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.147287][ T3885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.312749][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.929'. [ 432.325345][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 432.538054][ T8319] loop5: detected capacity change from 0 to 2048 [ 432.592325][ T8319] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 432.720908][ T8325] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.868996][ T8319] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 3044605952 [ 432.879224][ T8319] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 432.929355][ T8319] Remounting filesystem read-only [ 432.936805][ T8319] NILFS (loop5): error -5 truncating bmap (ino=15) [ 433.146045][ T6211] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 433.174237][ T8212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.269569][ T8350] loop4: detected capacity change from 0 to 128 [ 434.403959][ T8350] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 434.457897][ T8350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.986627][ T8212] veth0_vlan: entered promiscuous mode [ 435.071847][ T8212] veth1_vlan: entered promiscuous mode [ 435.329576][ T8212] veth0_macvtap: entered promiscuous mode [ 435.353164][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 435.388418][ T8212] veth1_macvtap: entered promiscuous mode [ 435.551148][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.562263][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.572510][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.583365][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.593639][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.604428][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.617604][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.629249][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.644322][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.796657][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.810171][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.824835][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.840099][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.852375][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.865767][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.875924][ T8212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.886684][ T8212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.905946][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.972989][ T8212] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.985706][ T8212] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.994824][ T8212] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.003969][ T8212] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.803577][ T5851] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 436.981117][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 437.012683][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.024884][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.037435][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.044588][ T5851] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 437.057535][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.108861][ T8389] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 437.173192][ T5851] usb 3-1: config 0 descriptor?? [ 437.646562][ T8382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.656432][ T8382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.976914][ T5900] usb 3-1: USB disconnect, device number 6 [ 438.714948][ T8413] loop0: detected capacity change from 0 to 128 [ 438.759935][ T8413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.768014][ T8413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.871046][ T8413] EXT4-fs (loop0): Test dummy encryption mode enabled [ 439.082859][ T8413] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.159114][ T8413] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 439.704532][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.370119][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.378645][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.505572][ T5900] kernel read not supported for file /adsp1 (pid: 5900 comm: kworker/1:6) [ 440.609245][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.619907][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.500517][ T8450] rtc_cmos 00:00: Alarms can be up to one day in the future [ 441.524520][ T8453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 441.639908][ T8456] loop7: detected capacity change from 0 to 128 [ 441.870168][ T8460] loop0: detected capacity change from 0 to 512 [ 441.881604][ T8460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.966333][ T8460] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 441.976219][ T8460] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 442.046542][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.096241][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 442.104205][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 442.112150][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 442.119896][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 442.125408][ T8460] EXT4-fs (loop0): 1 truncate cleaned up [ 442.127464][ T5900] rtc rtc0: __rtc_set_alarm: err=-22 [ 442.135560][ T8460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.478720][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.107463][ T5808] Bluetooth: hci1: adv larger than maximum supported [ 443.107577][ T5808] Bluetooth: hci1: Malformed LE Event: 0x0d [ 443.593218][ T8484] netlink: 64 bytes leftover after parsing attributes in process `syz.4.990'. [ 444.713964][ T8488] loop2: detected capacity change from 0 to 8192 [ 444.971775][ T8495] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 444.979691][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.995'. [ 446.083265][ T8510] loop4: detected capacity change from 0 to 256 [ 446.128005][ T8510] exfat: Deprecated parameter 'namecase' [ 446.137292][ T8510] exfat: Deprecated parameter 'utf8' [ 446.287391][ T8510] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 446.514204][ T8516] loop7: detected capacity change from 0 to 64 [ 446.827235][ T8518] loop5: detected capacity change from 0 to 512 [ 446.989020][ T8518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.003369][ T8518] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.156471][ T30] audit: type=1800 audit(1745918157.054:256): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1006" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 447.375468][ T8524] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 447.471785][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.780134][ T8533] loop2: detected capacity change from 0 to 512 [ 447.846230][ T8533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 447.977644][ T8533] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.1010: corrupted xattr entries [ 448.111215][ T8533] EXT4-fs (loop2): Remounting filesystem read-only [ 448.119618][ T8533] EXT4-fs (loop2): 1 truncate cleaned up [ 448.128006][ T8533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.571181][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.743151][ T8545] netlink: 'syz.4.1015': attribute type 30 has an invalid length. [ 448.751459][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1015'. [ 449.283165][ T8554] mkiss: ax0: crc mode is auto. [ 449.586943][ T8558] bond1: entered promiscuous mode [ 449.592468][ T8558] bond1: entered allmulticast mode [ 449.599567][ T8558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.738169][ T8558] bond1 (unregistering): Released all slaves [ 450.105997][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1024'. [ 450.169474][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 450.714191][ T8577] loop7: detected capacity change from 0 to 256 [ 450.804551][ T8577] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.067430][ T8582] loop0: detected capacity change from 0 to 128 [ 451.119734][ T8582] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 451.172963][ T8582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.244575][ T8582] ------------[ cut here ]------------ [ 451.250392][ T8582] WARNING: CPU: 0 PID: 8582 at fs/udf/truncate.c:224 udf_truncate_extents+0x7a1/0x1d50 [ 451.261613][ T30] audit: type=1800 audit(1745918161.134:257): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1032" name="file1" dev="loop0" ino=104 res=0 errno=0 [ 451.263284][ T8582] Modules linked in: [ 451.298114][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.0.1032 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 451.310781][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 451.323721][ T8582] RIP: 0010:udf_truncate_extents+0x7a1/0x1d50 [ 451.330154][ T8582] Code: ff 44 89 ff 48 89 d3 e8 1d 69 62 fe 89 03 e9 58 fd ff ff 44 89 e7 e8 2e 6d 62 fe 4d 85 ff 0f 84 38 fe ff ff e8 f0 ab c1 fd 90 <0f> 0b 90 e9 37 14 00 00 44 89 f7 e8 0f 6d 62 fe 45 85 ff 0f 84 7e [ 451.350261][ T8582] RSP: 0018:ffff88813f0637b0 EFLAGS: 00010287 [ 451.359216][ T8582] RAX: ffffffff84300520 RBX: ffffffffffffffff RCX: 0000000000080000 [ 451.367585][ T8582] RDX: ffffc90008828000 RSI: 00000000000005e1 RDI: 00000000000005e2 [ 451.376263][ T8582] RBP: ffff88813f063908 R08: ffffea000000000f R09: 0000000000000002 [ 451.393195][ T8582] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 451.402561][ T8582] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000000a [ 451.411169][ T8582] FS: 0000000000000000(0000) GS:ffff8881aaac5000(0063) knlGS:00000000f511eb40 [ 451.423658][ T8582] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 451.430606][ T8582] CR2: 000000002e01cffc CR3: 000000012dece000 CR4: 00000000003526f0 [ 451.438811][ T8582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 451.447143][ T8582] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 451.457989][ T8582] Call Trace: [ 451.461666][ T8582] [ 451.464860][ T8582] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 451.473795][ T8582] ? kmsan_get_metadata+0x105/0x1b0 [ 451.479346][ T8582] udf_write_failed+0x321/0x3d0 [ 451.491782][ T8582] udf_direct_IO+0x338/0x360 [ 451.499091][ T8582] ? __pfx_udf_direct_IO+0x10/0x10 [ 451.504950][ T8582] generic_file_direct_write+0x2b9/0x720 [ 451.513518][ T8582] __generic_file_write_iter+0x25b/0x460 [ 451.519467][ T8582] udf_file_write_iter+0x53f/0xdb0 [ 451.525090][ T8582] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 451.531835][ T8582] ? __pfx_udf_file_write_iter+0x10/0x10 [ 451.540847][ T8582] do_iter_readv_writev+0x93b/0xb90 [ 451.548649][ T8582] ? udf_ioctl+0x751/0x810 [ 451.555995][ T8582] ? __pfx_udf_file_write_iter+0x10/0x10 [ 451.562031][ T8582] vfs_writev+0x51c/0x1420 [ 451.566761][ T8582] ? __fget_files+0x3b9/0x4a0 [ 451.571860][ T8582] ? kmsan_get_metadata+0x105/0x1b0 [ 451.577349][ T8582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 451.586477][ T8582] __ia32_compat_sys_pwritev2+0x43d/0x6b0 [ 451.598989][ T8582] ia32_sys_call+0x2f92/0x42c0 [ 451.606477][ T8582] __do_fast_syscall_32+0xb0/0x110 [ 451.612334][ T8582] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 451.621039][ T8582] do_fast_syscall_32+0x38/0x80 [ 451.626278][ T8582] do_SYSENTER_32+0x1f/0x30 [ 451.631206][ T8582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.637832][ T8582] RIP: 0023:0xf712e539 [ 451.643840][ T8582] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 451.666391][ T8582] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 000000000000017b [ 451.675228][ T8582] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 451.683839][ T8582] RDX: 0000000000000001 RSI: 0000000000007800 RDI: 0000000000000000 [ 451.699548][ T8582] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 451.710585][ T8582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 451.719268][ T8582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.730163][ T8582] [ 451.733510][ T8582] ---[ end trace 0000000000000000 ]--- [ 451.988213][ T8596] loop2: detected capacity change from 0 to 512 [ 452.003494][ T8596] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.012018][ T8596] EXT4-fs: inline encryption not supported [ 452.018263][ T8596] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.098651][ T8596] EXT4-fs (loop2): Test dummy encryption mode enabled [ 452.108547][ T8596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 452.388366][ T8596] EXT4-fs (loop2): 1 truncate cleaned up [ 452.397188][ T8596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.798481][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.961944][ T8636] hsr0: entered promiscuous mode [ 454.996708][ T8635] hsr0: left promiscuous mode [ 455.330867][ T30] audit: type=1326 audit(1745918165.224:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.356453][ T30] audit: type=1326 audit(1745918165.224:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.409857][ T30] audit: type=1326 audit(1745918165.294:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.436765][ T30] audit: type=1326 audit(1745918165.304:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.459622][ T30] audit: type=1326 audit(1745918165.304:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.552519][ T30] audit: type=1326 audit(1745918165.404:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.578934][ T30] audit: type=1326 audit(1745918165.404:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.609702][ T30] audit: type=1326 audit(1745918165.404:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 455.854922][ T8648] loop4: detected capacity change from 0 to 64 [ 455.910719][ T8651] vivid-000: disconnect [ 455.952497][ T8649] vivid-000: reconnect [ 457.079391][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1072'. [ 457.091610][ T8671] bond0: invalid ARP target 0.0.0.0 specified for addition [ 457.099137][ T8671] bond0: option arp_ip_target: invalid value (0) [ 457.555955][ T8678] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1075'. [ 458.016831][ T8683] netlink: 'syz.5.1078': attribute type 4 has an invalid length. [ 458.077476][ T8686] loop0: detected capacity change from 0 to 256 [ 458.088009][ T8686] FAT-fs (loop0): bogus number of FAT sectors [ 458.094858][ T8686] FAT-fs (loop0): Can't find a valid FAT filesystem [ 458.615838][ T8694] loop5: detected capacity change from 0 to 256 [ 458.815552][ T8694] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 458.829837][ T8694] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 458.966755][ T8694] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000006) [ 458.983395][ T8694] exFAT-fs (loop5): Filesystem has been set read-only [ 459.288349][ T8706] loop0: detected capacity change from 0 to 512 [ 459.329788][ T8706] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.336795][ T8706] EXT4-fs: inline encryption not supported [ 459.343321][ T8706] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.405036][ T8706] EXT4-fs (loop0): Test dummy encryption mode enabled [ 459.412181][ T8706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 459.510094][ T8706] EXT4-fs (loop0): 1 truncate cleaned up [ 459.518079][ T8706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.701986][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.359919][ T8721] bond_slave_0: entered promiscuous mode [ 460.366081][ T8721] bond_slave_1: entered promiscuous mode [ 460.372566][ T8721] macsec1: entered promiscuous mode [ 460.378013][ T8721] bond0: entered promiscuous mode [ 460.385260][ T8721] bond1: entered promiscuous mode [ 460.480138][ T8721] bond0: left promiscuous mode [ 460.487361][ T8721] bond1: left promiscuous mode [ 460.494148][ T8721] bond_slave_0: left promiscuous mode [ 460.499802][ T8721] bond_slave_1: left promiscuous mode [ 460.662960][ T5851] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 460.698324][ T5854] hid-generic 0009:0006:0010.0006: hidraw0: HID v10.00 Device [syz1] on syz0 [ 460.820939][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 460.876314][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 460.888348][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.921068][ T11] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 460.964188][ T5851] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.973649][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.982259][ T5851] usb 5-1: Product: syz [ 460.987075][ T5851] usb 5-1: Manufacturer: syz [ 460.994524][ T5851] usb 5-1: SerialNumber: syz [ 461.022467][ T5851] usb 5-1: config 0 descriptor?? [ 461.057020][ T5851] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.069245][ T5851] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 461.093191][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 461.107372][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 461.122941][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 461.139759][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.202021][ T11] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 461.211595][ T11] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 461.223964][ T11] usb 1-1: Product: syz [ 461.228355][ T11] usb 1-1: Manufacturer: syz [ 461.238456][ T11] usb 1-1: SerialNumber: syz [ 461.334010][ T8736] loop7: detected capacity change from 0 to 64 [ 461.342520][ T11] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 461.361911][ T8734] tun0: tun_chr_ioctl cmd 2147767517 [ 461.573777][ T11] usb 1-1: USB disconnect, device number 9 [ 461.580725][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 461.644055][ T11] appletouch 1-1:1.0: input: appletouch disconnected [ 461.723877][ T5851] em28xx 5-1:0.0: chip ID is em28174 [ 461.935315][ T5848] usb 5-1: USB disconnect, device number 7 [ 461.943790][ T5848] em28xx 5-1:0.0: Disconnecting em28xx [ 462.008826][ T5848] em28xx 5-1:0.0: Freeing device [ 462.767065][ T8754] loop7: detected capacity change from 0 to 512 [ 462.826317][ T8754] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 462.928916][ T8754] EXT4-fs (loop7): 1 truncate cleaned up [ 462.937461][ T8754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.089911][ T8754] EXT4-fs (loop7): shut down requested (1) [ 463.186271][ T8212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.258024][ T8763] loop4: detected capacity change from 0 to 1024 [ 463.644200][ T1861] hfsplus: b-tree write err: -5, ino 4 [ 463.669209][ T8769] loop2: detected capacity change from 0 to 1024 [ 463.791891][ T8769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.941329][ T5848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 464.041837][ T8769] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 464.067004][ T8769] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 464.082035][ T8769] EXT4-fs (loop2): This should not happen!! Data will be lost [ 464.082035][ T8769] [ 464.092686][ T8769] EXT4-fs (loop2): Total free blocks count 0 [ 464.098902][ T8769] EXT4-fs (loop2): Free/Dirty block details [ 464.106053][ T8769] EXT4-fs (loop2): free_blocks=68451041280 [ 464.112700][ T8769] EXT4-fs (loop2): dirty_blocks=64 [ 464.118023][ T8769] EXT4-fs (loop2): Block reservation details [ 464.124490][ T8769] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 464.210755][ T5848] usb 8-1: Using ep0 maxpacket: 32 [ 464.235424][ T5848] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 464.245196][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.282211][ T5848] usb 8-1: config 0 descriptor?? [ 464.531813][ T5848] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 464.560620][ T8785] dvmrp5: entered allmulticast mode [ 464.575956][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 464.626337][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.643099][ T5848] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 464.651038][ T5848] usb 8-1: media controller created [ 464.684296][ T8785] pimreg: entered allmulticast mode [ 464.736421][ T8770] ===================================================== [ 464.744135][ T8770] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 464.754160][ T8770] _copy_to_user+0xcc/0x120 [ 464.758871][ T8770] i2cdev_ioctl_smbus+0x586/0x660 [ 464.764185][ T8770] compat_i2cdev_ioctl+0x48f/0xb40 [ 464.768477][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.769446][ T8770] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 464.786380][ T8770] ia32_sys_call+0x2d07/0x42c0 [ 464.791438][ T8789] pimreg: left allmulticast mode [ 464.791987][ T8789] dvmrp5: left allmulticast mode [ 464.801039][ T8770] __do_fast_syscall_32+0xb0/0x110 [ 464.808505][ T8770] do_fast_syscall_32+0x38/0x80 [ 464.818893][ T8770] do_SYSENTER_32+0x1f/0x30 [ 464.824829][ T8770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.831512][ T8770] [ 464.833928][ T8770] Uninit was stored to memory at: [ 464.839152][ T8770] __i2c_smbus_xfer+0x254d/0x2f60 [ 464.848492][ T8770] i2c_smbus_xfer+0x31d/0x4d0 [ 464.853576][ T8770] i2cdev_ioctl_smbus+0x4a1/0x660 [ 464.858806][ T8770] compat_i2cdev_ioctl+0x48f/0xb40 [ 464.864264][ T8770] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 464.869999][ T8770] ia32_sys_call+0x2d07/0x42c0 [ 464.877476][ T8770] __do_fast_syscall_32+0xb0/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 464.882910][ T8770] do_fast_syscall_32+0x38/0x80 [ 464.887962][ T8770] do_SYSENTER_32+0x1f/0x30 [ 464.892771][ T8770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.903348][ T8770] [ 464.905801][ T8770] Local variable msgbuf1.i created at: [ 464.915642][ T8770] __i2c_smbus_xfer+0x86a/0x2f60 [ 464.922518][ T8770] i2c_smbus_xfer+0x31d/0x4d0 [ 464.927377][ T8770] [ 464.929799][ T8770] Bytes 0-1 of 2 are uninitialized [ 464.935722][ T8770] Memory access of size 2 starts at ffff88811696fc86 [ 464.945232][ T8770] Data copied to user address 0000000080000080 [ 464.951659][ T8770] [ 464.954120][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.7.1116 Tainted: G W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 464.968134][ T8770] Tainted: [W]=WARN [ 464.974671][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 464.985001][ T8770] ===================================================== [ 464.992146][ T8770] Disabling lock debugging due to kernel taint [ 464.998418][ T8770] Kernel panic - not syncing: kmsan.panic set ... [ 465.004976][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.7.1116 Tainted: G B W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 465.018840][ T8770] Tainted: [B]=BAD_PAGE, [W]=WARN [ 465.023983][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 465.034190][ T8770] Call Trace: [ 465.037584][ T8770] [ 465.040636][ T8770] __dump_stack+0x26/0x30 [ 465.045160][ T8770] dump_stack_lvl+0x53/0x270 [ 465.049931][ T8770] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.055942][ T8770] dump_stack+0x1e/0x25 [ 465.060259][ T8770] panic+0x4bd/0xd50 [ 465.064427][ T8770] kmsan_report+0x29d/0x2a0 [ 465.069123][ T8770] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 465.075640][ T8770] ? kmsan_internal_check_memory+0x496/0x570 [ 465.081787][ T8770] ? kmsan_copy_to_user+0xca/0xe0 [ 465.086979][ T8770] ? _copy_to_user+0xcc/0x120 [ 465.091836][ T8770] ? i2cdev_ioctl_smbus+0x586/0x660 [ 465.097223][ T8770] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 465.102700][ T8770] ? __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 465.108578][ T8770] ? ia32_sys_call+0x2d07/0x42c0 [ 465.113673][ T8770] ? __do_fast_syscall_32+0xb0/0x110 [ 465.119162][ T8770] ? do_fast_syscall_32+0x38/0x80 [ 465.124381][ T8770] ? do_SYSENTER_32+0x1f/0x30 [ 465.129231][ T8770] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.135944][ T8770] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 465.141428][ T8770] ? __i2c_transfer+0x11ca/0x30e0 [ 465.146637][ T8770] ? kmsan_get_metadata+0x105/0x1b0 [ 465.152031][ T8770] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 465.158549][ T8770] ? kmsan_get_metadata+0x105/0x1b0 [ 465.163933][ T8770] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.169941][ T8770] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 465.175319][ T8770] ? kmsan_get_metadata+0x105/0x1b0 [ 465.180701][ T8770] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.186716][ T8770] kmsan_internal_check_memory+0x496/0x570 [ 465.192736][ T8770] kmsan_copy_to_user+0xca/0xe0 [ 465.197754][ T8770] ? should_fail_usercopy+0x2e/0x40 [ 465.203159][ T8770] _copy_to_user+0xcc/0x120 [ 465.207868][ T8770] i2cdev_ioctl_smbus+0x586/0x660 [ 465.213130][ T8770] compat_i2cdev_ioctl+0x48f/0xb40 [ 465.218487][ T8770] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 465.224335][ T8770] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 465.230060][ T8770] ? kmsan_get_metadata+0x105/0x1b0 [ 465.235439][ T8770] ? kmsan_get_metadata+0x105/0x1b0 [ 465.240851][ T8770] ia32_sys_call+0x2d07/0x42c0 [ 465.245765][ T8770] __do_fast_syscall_32+0xb0/0x110 [ 465.251067][ T8770] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 465.256984][ T8770] do_fast_syscall_32+0x38/0x80 [ 465.262017][ T8770] do_SYSENTER_32+0x1f/0x30 [ 465.266695][ T8770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.273213][ T8770] RIP: 0023:0xf7fb3539 [ 465.277417][ T8770] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 465.297206][ T8770] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 465.305797][ T8770] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 465.313907][ T8770] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.322021][ T8770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.330113][ T8770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 465.338216][ T8770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.346372][ T8770] [ 465.349768][ T8770] Kernel Offset: disabled [ 465.354160][ T8770] Rebooting in 86400 seconds..