last executing test programs: 2m54.887400216s ago: executing program 2 (id=603): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x100007, 0x7fff, 0x3, 0x47, "0000080100", 0x5, 0x8ea1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 2m54.455815517s ago: executing program 2 (id=606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="fe", 0x1, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/68, 0x44, 0x43, 0x0, 0x0) 2m53.969715451s ago: executing program 2 (id=609): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030008ac0f"], 0x58}}, 0x0) 2m53.19375788s ago: executing program 2 (id=613): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@usrjquota}, {@lazytime}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x58f, &(0x7f0000000cc0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x1400) mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x28a0b1, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) 2m52.166652457s ago: executing program 2 (id=621): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) 2m51.45997524s ago: executing program 2 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m49.821621613s ago: executing program 32 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1m53.592255577s ago: executing program 4 (id=925): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x4, @desc3}) 1m52.473269338s ago: executing program 4 (id=930): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 1m51.780660375s ago: executing program 4 (id=933): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x71b2, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1m50.927202274s ago: executing program 4 (id=937): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@errors_remount}, {@acl}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m49.847213876s ago: executing program 4 (id=945): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m49.228539105s ago: executing program 4 (id=949): userfaultfd(0x80001) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40000000, 0x100000}, 0x0, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 1m46.912652675s ago: executing program 33 (id=949): userfaultfd(0x80001) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40000000, 0x100000}, 0x0, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 39.713280842s ago: executing program 3 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)="b1"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 39.054563434s ago: executing program 3 (id=1329): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0x228, &(0x7f00000004c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 38.220365231s ago: executing program 3 (id=1335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 37.516377832s ago: executing program 3 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 36.971490858s ago: executing program 3 (id=1344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @random="abcc5e3ccfa0", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @private1, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e29305c93a072528230718"}]}}}}}}}}, 0x0) 36.297058185s ago: executing program 3 (id=1347): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="0021ec", 0x3}], 0x1, 0x7, 0x7) 33.547444055s ago: executing program 34 (id=1347): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000640)="0021ec", 0x3}], 0x1, 0x7, 0x7) 24.582629829s ago: executing program 5 (id=1394): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x100, &(0x7f0000001dc0)={0xf, 0x8, 0x20000}, 0x20) 23.711991191s ago: executing program 5 (id=1397): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 22.876931385s ago: executing program 5 (id=1401): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0xeeef4001, 0x115000}) 6.947967102s ago: executing program 7 (id=1455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="3800308014000400403a18d713459a7a180001800c000380060001"], 0x54}}, 0x0) 5.983695793s ago: executing program 1 (id=1457): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x1882, 0x3, 0x2}, 0x70, 0x0) landlock_restrict_self(r1, 0x5) tkill(r0, 0x18) 5.950794174s ago: executing program 0 (id=1459): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009041800010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macic,\x00'], 0x4, 0x339, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.750106516s ago: executing program 7 (id=1460): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.173806556s ago: executing program 1 (id=1462): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r0, 0x402, 0x2e) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 4.979574367s ago: executing program 6 (id=1463): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 4.571728617s ago: executing program 6 (id=1464): socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x20fe, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)) unshare(0x28020480) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x800, 0xc2cb, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.99543351s ago: executing program 1 (id=1465): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0xf, 0x2a4, &(0x7f0000000480)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000300)=ANY=[], 0x1, 0x1235, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2c400}], 0x14, 0x7800, 0x0, 0x3) 3.800043656s ago: executing program 6 (id=1466): unshare(0x40060480) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@grpquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x1200}}, {@quota}]}, 0x1, 0x7c0, &(0x7f0000000380)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 2.846851902s ago: executing program 0 (id=1467): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r2, 0x0, 0x0}, 0x10) 2.525089238s ago: executing program 6 (id=1468): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7e}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 2.117361582s ago: executing program 7 (id=1469): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x2005, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.032346171s ago: executing program 0 (id=1470): unshare(0x20000400) r0 = socket$key(0xf, 0x3, 0x2) setfsuid(0xee00) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 1.854735531s ago: executing program 1 (id=1471): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000300)=0x95, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) 1.743604112s ago: executing program 6 (id=1472): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 1.438456224s ago: executing program 5 (id=1401): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0xeeef4001, 0x115000}) 1.41317223s ago: executing program 0 (id=1473): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r1, 0x6, &(0x7f0000000240)={0x0, 0x2, 0x8b98, 0x2}) 1.354118619s ago: executing program 1 (id=1474): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1, 0x9e18, &(0x7f000000a040)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) 1.236513919s ago: executing program 7 (id=1475): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000002640)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.197764398s ago: executing program 6 (id=1476): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}}) 874.534825ms ago: executing program 0 (id=1477): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 638.967184ms ago: executing program 7 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x54, r1, 0xd55319eec59dfa33, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0xc804}, 0x82010) 595.035787ms ago: executing program 5 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000ff8000020002000008000300", @ANYRES32=r2, @ANYBLOB="08000100e000000108000200e0"], 0x34}}, 0xea5bc50b6199d77e) 329.012215ms ago: executing program 1 (id=1480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 121.281464ms ago: executing program 0 (id=1481): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 46.421894ms ago: executing program 7 (id=1482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 0s ago: executing program 5 (id=1483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_getoverrun(0x0) kernel console output (not intermixed with test programs): ecutor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 299.190151][ T30] audit: type=1326 audit(1760387113.968:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 299.212579][ T30] audit: type=1326 audit(1760387113.968:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 299.237852][ T30] audit: type=1326 audit(1760387113.968:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 299.260187][ T30] audit: type=1326 audit(1760387113.978:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 299.290148][ T30] audit: type=1326 audit(1760387113.978:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 299.770131][ T6817] loop3: detected capacity change from 0 to 8 [ 299.830277][ T11] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 299.897330][ T11] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.624906][ T6820] fido_id[6820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.728363][ T6828] capability: warning: `syz.2.377' uses deprecated v2 capabilities in a way that may be insecure [ 301.340780][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 301.561743][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 301.586827][ T6835] loop4: detected capacity change from 0 to 512 [ 301.606493][ T11] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 301.615149][ T11] usb 1-1: config 0 has no interface number 0 [ 301.621733][ T11] usb 1-1: config 0 interface 48 has no altsetting 0 [ 301.661849][ T6835] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.741040][ T6835] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 301.758621][ T11] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 301.768448][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.777059][ T11] usb 1-1: Product: syz [ 301.781615][ T11] usb 1-1: Manufacturer: syz [ 301.786422][ T11] usb 1-1: SerialNumber: syz [ 301.845841][ T11] usb 1-1: config 0 descriptor?? [ 301.848769][ T6835] EXT4-fs (loop4): 1 truncate cleaned up [ 301.859180][ T6835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.030285][ T30] audit: type=1800 audit(1760387116.928:12): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.380" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 302.190792][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.200810][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.277290][ T5802] Bluetooth: hci1: Unknown advertising packet type: 0x35 [ 302.277464][ T5802] Bluetooth: hci1: Malformed LE Event: 0x0d [ 302.315559][ T11] usb 1-1: USB disconnect, device number 4 [ 302.442958][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.052817][ T6849] loop4: detected capacity change from 0 to 64 [ 303.200702][ T6850] loop2: detected capacity change from 0 to 128 [ 303.230491][ T6850] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 303.314782][ T6850] hpfs: filesystem error: improperly stopped [ 303.321386][ T6850] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 303.329718][ T6850] hpfs: You really don't want any checks? You are crazy... [ 303.391243][ T6850] hpfs: hpfs_map_sector(): read error [ 303.396825][ T6850] hpfs: code page support is disabled [ 303.491070][ T6850] hpfs: hpfs_map_4sectors(): unaligned read [ 303.497523][ T6850] hpfs: hpfs_map_4sectors(): unaligned read [ 303.503915][ T6850] hpfs: filesystem error: unable to find root dir [ 305.923686][ T6878] Bluetooth: MGMT ver 1.23 [ 306.510844][ T6886] loop4: detected capacity change from 0 to 256 [ 306.548078][ T6886] exfat: Deprecated parameter 'utf8' [ 306.556417][ T6886] exfat: Deprecated parameter 'namecase' [ 306.563337][ T6886] exfat: Deprecated parameter 'utf8' [ 306.732616][ T6889] loop2: detected capacity change from 0 to 256 [ 306.778926][ T6891] loop0: detected capacity change from 0 to 128 [ 306.797166][ T6886] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 307.148365][ T6895] loop1: detected capacity change from 0 to 64 [ 309.869166][ T6924] loop6: detected capacity change from 0 to 524287999 [ 311.700086][ T6944] loop2: detected capacity change from 0 to 2048 [ 311.744351][ T6944] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 311.856666][ T6944] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 311.939548][ T6944] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 312.027515][ T6944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.874272][ T6956] loop3: detected capacity change from 0 to 512 [ 312.948732][ T6956] EXT4-fs: Ignoring removed bh option [ 312.955090][ T6956] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.040950][ T6956] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 313.184592][ T6956] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 313.207915][ T6956] EXT4-fs (loop3): orphan cleanup on readonly fs [ 313.232040][ T6956] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 313.242775][ T6956] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 313.253416][ T6956] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.434: Failed to acquire dquot type 1 [ 313.309230][ T6965] loop1: detected capacity change from 0 to 512 [ 313.325961][ T6956] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.434: Invalid block bitmap block 0 in block_group 0 [ 313.486397][ T6956] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.434: Invalid block bitmap block 0 in block_group 0 [ 313.599124][ T6965] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 313.663160][ T6956] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.434: Invalid block bitmap block 0 in block_group 0 [ 313.704020][ T6965] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.438: bad orphan inode 15 [ 313.727952][ T6956] Quota error (device loop3): write_blk: dquota write failed [ 313.737537][ T6956] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 313.747924][ T6956] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.434: Failed to acquire dquot type 1 [ 313.782650][ T6965] ext4_test_bit(bit=14, block=5) = 0 [ 313.824382][ T6965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.843916][ T6956] Quota error (device loop3): write_blk: dquota write failed [ 313.854041][ T6956] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 313.864642][ T6956] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.434: Failed to acquire dquot type 1 [ 314.012206][ T6956] EXT4-fs (loop3): 1 orphan inode deleted [ 314.070098][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.117611][ T6965] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 314.140338][ T6965] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.438: bit already cleared for inode 13 [ 314.164952][ T6971] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.438: reserved inode found cleared - inode=1 [ 314.286309][ T6956] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 314.476809][ T6956] syz.3.434 (6956) used greatest stack depth: 2616 bytes left [ 314.559089][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.583498][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.652255][ T6974] loop4: detected capacity change from 0 to 2048 [ 314.697843][ T6974] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 314.789640][ T6974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.660883][ T7000] loop4: detected capacity change from 0 to 512 [ 316.718524][ T7000] EXT4-fs: Ignoring removed i_version option [ 316.903966][ T7000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.919050][ T7000] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.153830][ T7008] devtmpfs: Cannot disable swap on remount [ 317.270020][ T7000] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.4.450: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 317.320553][ T7000] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: comm syz.4.450: directory missing '.' [ 317.720664][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.737333][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 318.368517][ T7014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.457'. [ 319.430064][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 319.448665][ T7025] loop2: detected capacity change from 0 to 64 [ 319.667857][ T7025] syz.2.464: attempt to access beyond end of device [ 319.667857][ T7025] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 319.683078][ T7025] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 319.797302][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 320.523515][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 320.533597][ T7036] netlink: 104 bytes leftover after parsing attributes in process `syz.3.467'. [ 321.161363][ T7044] loop1: detected capacity change from 0 to 256 [ 321.259636][ T7046] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 321.380794][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 321.469966][ T5889] IPVS: starting estimator thread 0... [ 321.478009][ T7044] FAT-fs (loop1): Directory bread(block 64) failed [ 321.485325][ T7044] FAT-fs (loop1): Directory bread(block 65) failed [ 321.495958][ T7044] FAT-fs (loop1): Directory bread(block 66) failed [ 321.503958][ T7044] FAT-fs (loop1): Directory bread(block 67) failed [ 321.511116][ T7044] FAT-fs (loop1): Directory bread(block 68) failed [ 321.517861][ T7044] FAT-fs (loop1): Directory bread(block 69) failed [ 321.525321][ T7044] FAT-fs (loop1): Directory bread(block 70) failed [ 321.532273][ T7044] FAT-fs (loop1): Directory bread(block 71) failed [ 321.539196][ T7044] FAT-fs (loop1): Directory bread(block 72) failed [ 321.546209][ T7044] FAT-fs (loop1): Directory bread(block 73) failed [ 321.631038][ T7053] IPVS: using max 192 ests per chain, 9600 per kthread [ 322.208187][ T7056] vlan2: entered promiscuous mode [ 322.224613][ T7056] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 322.453392][ T7059] loop0: detected capacity change from 0 to 256 [ 322.771665][ T7059] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 323.612383][ T7065] loop3: detected capacity change from 0 to 4096 [ 323.654709][ T7065] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 323.682706][ T7072] loop1: detected capacity change from 0 to 164 [ 323.756335][ T7072] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 323.860170][ T7072] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 324.000398][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 324.007843][ T5096] Bluetooth: hci1: command 0x0406 tx timeout [ 324.013250][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 324.014666][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 324.028595][ T5096] Bluetooth: hci3: command 0x0406 tx timeout [ 324.107938][ T7065] ntfs3(loop3): ino=1a, mi_enum_attr [ 324.113846][ T7065] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 324.298668][ T7065] ntfs3(loop3): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 324.983194][ T7085] loop2: detected capacity change from 0 to 1024 [ 325.541767][ T58] hfsplus: b-tree write err: -5, ino 4 [ 326.330139][ T7101] loop1: detected capacity change from 0 to 1024 [ 326.794790][ T7100] loop2: detected capacity change from 0 to 4096 [ 326.844379][ T7100] ntfs3(loop2): ino=3, Correct links count -> 2. [ 327.033605][ T156] hfsplus: b-tree write err: -5, ino 4 [ 327.205184][ T7100] ntfs3(loop2): ino=1a, mi_enum_attr [ 327.211051][ T7100] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 327.463170][ T7100] ntfs3(loop2): failed to convert "0080" to cp863 [ 327.498657][ T7100] ntfs3(loop2): failed to convert name for inode 1e. [ 327.545934][ T7100] ntfs3(loop2): ino=1f, mi_enum_attr [ 328.584501][ T7123] loop3: detected capacity change from 0 to 128 [ 329.577523][ T7133] loop1: detected capacity change from 0 to 512 [ 329.622658][ T7133] EXT4-fs: Ignoring removed oldalloc option [ 329.673915][ T7133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.765889][ T7133] EXT4-fs (loop1): 1 truncate cleaned up [ 329.774271][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.996151][ T30] audit: type=1800 audit(1760387144.898:13): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.514" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 330.218608][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.075093][ T7152] loop3: detected capacity change from 0 to 512 [ 331.159114][ T7152] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 331.206878][ T7152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 331.256729][ T7152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 331.263732][ T7152] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.522: bad orphan inode 267 [ 331.370159][ T7152] EXT4-fs (loop3): Remounting filesystem read-only [ 331.379129][ T7152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 331.550271][ T7152] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.522: dx entry: limit 0 != root limit 125 [ 331.562466][ T7152] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.522: Corrupt directory, running e2fsck is recommended [ 331.993117][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 333.651601][ T7181] loop4: detected capacity change from 0 to 1024 [ 333.711720][ T7181] EXT4-fs: Ignoring removed orlov option [ 333.761400][ T7181] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 333.921995][ T7181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.114979][ T7190] loop3: detected capacity change from 0 to 512 [ 334.209715][ T7190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 334.338063][ T7190] EXT4-fs (loop3): 1 truncate cleaned up [ 334.346410][ T7190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.658745][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.708358][ T7198] loop2: detected capacity change from 0 to 64 [ 334.758530][ T7198] minix: Unknown parameter '1' [ 334.904404][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.608437][ T7210] loop0: detected capacity change from 0 to 1024 [ 335.813642][ T7210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.851173][ T5858] Process accounting resumed [ 335.972735][ T7210] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.547: missing EA_INODE flag [ 336.011449][ T7210] EXT4-fs (loop0): Remounting filesystem read-only [ 336.294759][ T7216] Process accounting resumed [ 336.566785][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.551298][ T7226] loop3: detected capacity change from 0 to 4096 [ 337.670270][ T7226] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 337.751933][ T7226] ntfs3(loop3): ino=3, mi_enum_attr [ 338.260169][ T7226] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 341.574852][ T7281] loop0: detected capacity change from 0 to 4096 [ 341.756729][ T7286] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.815290][ T7281] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=3, rec_len=16, name_len=1 [ 341.886846][ T7281] Remounting filesystem read-only [ 342.083639][ T11] kernel write not supported for file bpf-map (pid: 11 comm: kworker/0:1) [ 342.340497][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 342.529802][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 342.550526][ T5858] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 342.559010][ T5858] usb 5-1: config 0 has no interface number 0 [ 342.566035][ T5858] usb 5-1: config 0 interface 12 has no altsetting 0 [ 342.619529][ T7301] program syz.1.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.637859][ T5858] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 342.647803][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.656360][ T5858] usb 5-1: Product: syz [ 342.660880][ T5858] usb 5-1: Manufacturer: syz [ 342.665689][ T5858] usb 5-1: SerialNumber: syz [ 342.697393][ T5858] usb 5-1: config 0 descriptor?? [ 343.606238][ T5858] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 343.619076][ T5858] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 343.627833][ T5858] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 343.636166][ T5858] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 343.659076][ T5858] usb 5-1: USB disconnect, device number 2 [ 344.024872][ T7319] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 344.054625][ T7318] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 344.562763][ T7317] loop0: detected capacity change from 0 to 32768 [ 344.623616][ T7317] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.590 (7317) [ 344.696511][ T7317] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 344.707226][ T7317] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 345.012959][ T7317] BTRFS info (device loop0): enabling ssd optimizations [ 345.020469][ T7317] BTRFS info (device loop0): using spread ssd allocation scheme [ 345.028329][ T7317] BTRFS info (device loop0): turning on sync discard [ 345.035496][ T7317] BTRFS info (device loop0): enabling free space tree [ 345.143464][ T5797] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 345.223819][ T7343] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 345.317894][ T7347] loop4: detected capacity change from 0 to 16 [ 345.400162][ T7347] erofs (device loop4): mounted with root inode @ nid 36. [ 345.740178][ T7352] program syz.2.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.000654][ T5889] kernel write not supported for file [eventfd] (pid: 5889 comm: kworker/1:5) [ 347.683188][ T7373] loop3: detected capacity change from 0 to 512 [ 347.774111][ T7373] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 348.562765][ T7385] loop2: detected capacity change from 0 to 1024 [ 348.679216][ T7385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.778899][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 348.897351][ T7385] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 348.966729][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 349.035082][ T7397] loop1: detected capacity change from 0 to 16 [ 349.151692][ T7397] erofs (device loop1): mounted with root inode @ nid 36. [ 349.209583][ T5801] EXT4-fs error (device loop2): __ext4_iget:5435: inode #11: block 127754: comm syz-executor: invalid block [ 349.270422][ T5801] EXT4-fs error (device loop2): __ext4_iget:5435: inode #11: block 127754: comm syz-executor: invalid block [ 349.794372][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.848038][ T3841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.077982][ T3841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.253189][ T3841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.416589][ T3841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.748585][ T3841] bridge_slave_1: left allmulticast mode [ 350.755317][ T3841] bridge_slave_1: left promiscuous mode [ 350.762403][ T3841] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.790276][ T3841] bridge_slave_0: left allmulticast mode [ 350.796164][ T3841] bridge_slave_0: left promiscuous mode [ 350.803156][ T3841] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.262873][ T3841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.282176][ T3841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.308213][ T3841] bond0 (unregistering): Released all slaves [ 351.787620][ T3841] hsr_slave_0: left promiscuous mode [ 351.809764][ T3841] hsr_slave_1: left promiscuous mode [ 351.817990][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.827032][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.913316][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.921165][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.993094][ T3841] veth1_macvtap: left promiscuous mode [ 351.999141][ T3841] veth0_macvtap: left promiscuous mode [ 352.013657][ T3841] veth1_vlan: left promiscuous mode [ 352.019535][ T3841] veth0_vlan: left promiscuous mode [ 352.953974][ T3841] team0 (unregistering): Port device team_slave_1 removed [ 352.990892][ T3841] team0 (unregistering): Port device team_slave_0 removed [ 353.050161][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.059962][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.070372][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.085061][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.096769][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.530517][ T7436] loop3: detected capacity change from 0 to 4096 [ 354.541295][ T7436] ntfs3: Unknown parameter 'ÿÿÿÿ0x000000000000000018446744073709551615' [ 354.613271][ T7427] chnl_net:caif_netlink_parms(): no params data found [ 355.077005][ T7449] loop1: detected capacity change from 0 to 1024 [ 355.199622][ T5813] Bluetooth: hci2: command tx timeout [ 355.215228][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 355.231585][ T7449] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.401811][ T7449] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.642: lblock 3 mapped to illegal pblock 3 (length 3) [ 355.452553][ T7449] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 355.466343][ T7449] EXT4-fs (loop1): This should not happen!! Data will be lost [ 355.466343][ T7449] [ 355.866921][ T59] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 355.911573][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 355.925737][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 355.925737][ T59] [ 355.953188][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 356.033464][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.041291][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.049073][ T7427] bridge_slave_0: entered allmulticast mode [ 356.058990][ T7427] bridge_slave_0: entered promiscuous mode [ 356.082261][ T7427] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.094007][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.102073][ T7427] bridge_slave_1: entered allmulticast mode [ 356.117053][ T7427] bridge_slave_1: entered promiscuous mode [ 356.257478][ T7468] loop0: detected capacity change from 0 to 1024 [ 356.296133][ T7427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.334498][ T7427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.419921][ T7468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.432776][ T7468] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.457273][ T7473] loop3: detected capacity change from 0 to 256 [ 356.644639][ T7473] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 356.711719][ T7427] team0: Port device team_slave_0 added [ 356.782667][ T7427] team0: Port device team_slave_1 added [ 357.008067][ T7456] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 357.055377][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.070062][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.097460][ T7427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.100724][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.132644][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.140059][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.166611][ T7427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.319972][ T5813] Bluetooth: hci2: command tx timeout [ 357.466991][ T7427] hsr_slave_0: entered promiscuous mode [ 357.478159][ T7427] hsr_slave_1: entered promiscuous mode [ 357.487859][ T7427] debugfs: 'hsr0' already exists in 'hsr' [ 357.493920][ T7427] Cannot create hsr debugfs directory [ 357.863001][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.869955][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.265343][ T7490] loop3: detected capacity change from 0 to 128 [ 358.327401][ T7491] netlink: 56 bytes leftover after parsing attributes in process `syz.1.654'. [ 358.351483][ T7490] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 358.519808][ T7427] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.546491][ T7427] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.601417][ T7427] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.652955][ T7427] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 359.014990][ T7501] loop4: detected capacity change from 0 to 128 [ 359.043336][ T7501] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 359.134943][ T7501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.359974][ T5813] Bluetooth: hci2: command tx timeout [ 359.456480][ T7507] overlayfs: workdir and upperdir must be separate subtrees [ 359.818177][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.042024][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.139514][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.147083][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.231530][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.239059][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.749878][ T7427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.004031][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 361.051167][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 361.442383][ T5813] Bluetooth: hci2: command tx timeout [ 362.202646][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.390243][ T7542] netlink: 68 bytes leftover after parsing attributes in process `syz.4.675'. [ 362.479999][ T7541] loop1: detected capacity change from 0 to 1024 [ 362.728725][ T7541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.302871][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.376991][ T7427] veth0_vlan: entered promiscuous mode [ 364.462553][ T7567] loop4: detected capacity change from 0 to 4096 [ 364.474031][ T7427] veth1_vlan: entered promiscuous mode [ 364.501416][ T7567] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 364.614998][ T7573] loop0: detected capacity change from 0 to 256 [ 364.667551][ T7573] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.685776][ T7572] loop1: detected capacity change from 0 to 2048 [ 364.690176][ T30] audit: type=1800 audit(1760387179.588:14): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.686" name=3830322E31352E34204D4143 dev="loop0" ino=1048634 res=0 errno=0 [ 364.770772][ T7427] veth0_macvtap: entered promiscuous mode [ 364.792050][ T7572] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 364.802340][ T7572] NILFS (loop1): mounting unchecked fs [ 364.868166][ T7427] veth1_macvtap: entered promiscuous mode [ 365.011097][ T7572] NILFS (loop1): recovery complete [ 365.036246][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.076780][ T7576] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.164395][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.277773][ T156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.334103][ T7578] Invalid ELF header magic: != ELF [ 365.355014][ T3841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.393933][ T3841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.412750][ T3841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.638125][ T7599] input: syz0 as /devices/virtual/input/input8 [ 367.074380][ T7603] input: syz1 as /devices/virtual/input/input9 [ 367.954661][ T7619] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.703'. [ 367.964366][ T7619] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.703'. [ 367.973859][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 368.175294][ T7617] loop1: detected capacity change from 0 to 4096 [ 368.311323][ T7624] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.468438][ T7627] loop5: detected capacity change from 0 to 7 [ 368.478475][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 370.175422][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.183669][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.390585][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.398765][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.055912][ T7627] Dev loop5: unable to read RDB block 7 [ 371.062144][ T7627] loop5: unable to read partition table [ 371.101112][ T7627] loop5: partition table beyond EOD, truncated [ 371.107761][ T7627] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 372.363386][ T5858] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 372.557901][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 372.610436][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.622295][ T5858] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 372.631957][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.700793][ T5858] usb 4-1: config 0 descriptor?? [ 372.856973][ T7682] loop5: detected capacity change from 0 to 256 [ 372.870923][ T7682] exfat: Deprecated parameter 'namecase' [ 372.994867][ T7682] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 373.182656][ T5858] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 373.572843][ T5860] usb 4-1: USB disconnect, device number 3 [ 373.970560][ T5813] Bluetooth: hci0: unexpected event for opcode 0x080d [ 376.667626][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 376.706822][ T7722] loop5: detected capacity change from 0 to 256 [ 376.747296][ T7726] loop3: detected capacity change from 0 to 128 [ 376.784367][ T7722] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 376.900965][ T30] audit: type=1800 audit(1760387191.798:15): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.743" name="file1" dev="loop5" ino=1048656 res=0 errno=0 [ 376.921993][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.209581][ T5860] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 377.337320][ T7731] loop1: detected capacity change from 0 to 1024 [ 377.416988][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.428526][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.439476][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.452889][ T5860] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.462316][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.548943][ T5860] usb 1-1: config 0 descriptor?? [ 377.616729][ T30] audit: type=1800 audit(1760387192.498:16): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.748" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 377.655145][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 377.872972][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 377.901795][ T11] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 377.911457][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.934500][ T3801] hfsplus: b-tree write err: -5, ino 4 [ 377.972806][ T11] usb 6-1: config 0 descriptor?? [ 377.979918][ T7742] tap0: tun_chr_ioctl cmd 1074025677 [ 377.986443][ T7742] tap0: linktype set to 805 [ 378.000936][ T5813] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 378.009961][ T5813] Bluetooth: hci0: Injecting HCI hardware error event [ 378.032735][ T5860] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 378.045620][ T5813] Bluetooth: hci0: hardware error 0x00 [ 378.057408][ T5860] plantronics 0003:047F:FFFF.0006: parse failed [ 378.064534][ T5860] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 378.258676][ T5860] usb 1-1: USB disconnect, device number 5 [ 378.299174][ T11] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 378.907156][ T11] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 378.917876][ T11] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 378.963670][ T11] asix 6-1:0.0: probe with driver asix failed with error -71 [ 379.037675][ T11] usb 6-1: USB disconnect, device number 2 [ 379.589627][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 379.884509][ T11] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 379.894095][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.902489][ T11] usb 4-1: Product: syz [ 379.906850][ T11] usb 4-1: Manufacturer: syz [ 379.911899][ T11] usb 4-1: SerialNumber: syz [ 380.087039][ T7760] loop4: detected capacity change from 0 to 4096 [ 380.101464][ T7760] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 380.160839][ T5813] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 380.690683][ T11] rtl8150 4-1:1.0: eth5: rtl8150 is detected [ 380.933550][ T11] usb 4-1: USB disconnect, device number 4 [ 381.210632][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 381.650668][ T7776] loop5: detected capacity change from 0 to 4096 [ 382.240541][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 382.429947][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 382.449947][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.461344][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.471584][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.484960][ T11] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.494832][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.623050][ T11] usb 4-1: config 0 descriptor?? [ 382.701803][ T7792] bridge0: port 3(batadv1) entered blocking state [ 382.708827][ T7792] bridge0: port 3(batadv1) entered disabled state [ 382.716191][ T7792] batadv1: entered allmulticast mode [ 382.726451][ T7792] batadv1: entered promiscuous mode [ 383.161055][ T11] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 383.173070][ T11] microsoft 0003:045E:07DA.0007: no inputs found [ 383.186045][ T11] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 383.204988][ T58] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 383.214668][ T58] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 383.329587][ T5860] usb 4-1: USB disconnect, device number 5 [ 383.422701][ T7791] loop4: detected capacity change from 0 to 8192 [ 383.507787][ T7791] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.465792][ T7820] loop1: detected capacity change from 0 to 8192 [ 386.051348][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.795'. [ 386.113408][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.795'. [ 386.355442][ T7838] loop3: detected capacity change from 0 to 1024 [ 386.370245][ T7840] loop1: detected capacity change from 0 to 64 [ 386.512882][ T7838] hfsplus: request for non-existent node 16777216 in B*Tree [ 386.522934][ T7838] hfsplus: request for non-existent node 16777216 in B*Tree [ 386.577828][ T7838] hfsplus: request for non-existent node 16777216 in B*Tree [ 386.585673][ T7838] hfsplus: request for non-existent node 16777216 in B*Tree [ 386.816060][ T3801] hfsplus: request for non-existent node 16777216 in B*Tree [ 386.820885][ T7847] loop0: detected capacity change from 0 to 1024 [ 386.830835][ T3801] hfsplus: request for non-existent node 16777216 in B*Tree [ 387.081517][ T7850] netlink: 196 bytes leftover after parsing attributes in process `syz.1.800'. [ 387.091266][ T7850] NCSI netlink: No device for ifindex 0 [ 387.213515][ T7847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.226297][ T7847] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.377559][ T30] audit: type=1800 audit(1760387202.278:17): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.808" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 387.383313][ T7858] loop3: detected capacity change from 0 to 512 [ 387.482519][ T7858] EXT4-fs (loop3): orphan cleanup on readonly fs [ 387.515167][ T7858] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.801: bg 0: block 248: padding at end of block bitmap is not set [ 387.586874][ T7858] Quota error (device loop3): write_blk: dquota write failed [ 387.595670][ T7858] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 387.606142][ T7858] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.801: Failed to acquire dquot type 1 [ 387.668634][ T7858] EXT4-fs (loop3): 1 truncate cleaned up [ 387.691860][ T7858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.739769][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.770360][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 387.782775][ T7858] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 387.815655][ T7858] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 387.988521][ T11] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 387.998438][ T11] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 388.007046][ T11] usb 2-1: Product: syz [ 388.011630][ T11] usb 2-1: Manufacturer: syz [ 388.016451][ T11] usb 2-1: SerialNumber: syz [ 388.068225][ T11] usb 2-1: config 0 descriptor?? [ 388.104279][ T11] ch341 2-1:0.0: ch341-uart converter detected [ 388.117910][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.125578][ T7866] loop0: detected capacity change from 0 to 512 [ 388.208114][ T7866] vfat: Unknown parameter '0xffffffffffffffff' [ 388.924477][ T11] usb 2-1: failed to send control message: -71 [ 388.931459][ T11] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 388.998018][ T11] usb 2-1: USB disconnect, device number 3 [ 389.006691][ T11] ch341 2-1:0.0: device disconnected [ 390.093788][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.103836][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.113547][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.121410][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.129103][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.136924][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.144930][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.152847][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.163140][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.171129][ T11] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 390.321709][ T11] hid-generic 0006:0004:0009.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 391.418183][ T7915] loop1: detected capacity change from 0 to 512 [ 391.467286][ T7915] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 391.552245][ T7915] EXT4-fs (loop1): 1 truncate cleaned up [ 391.560529][ T7915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.612177][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 391.772386][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 391.795392][ T11] usb 4-1: config 0 has no interfaces? [ 391.801405][ T11] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.810841][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.882956][ T11] usb 4-1: config 0 descriptor?? [ 391.959126][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.132756][ T11] usb 4-1: USB disconnect, device number 6 [ 392.617744][ T5860] hid-generic 0006:0004:0009.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 393.388393][ T7937] loop4: detected capacity change from 0 to 2048 [ 393.418823][ T7937] EXT4-fs: Ignoring removed i_version option [ 393.555287][ T7937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.568363][ T7937] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.083220][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.455703][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 395.505812][ T7970] loop4: detected capacity change from 0 to 2048 [ 395.700739][ T7970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.713907][ T7970] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 396.128607][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.513671][ T8002] loop5: detected capacity change from 0 to 128 [ 397.583359][ T8002] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.655939][ T8002] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.706861][ T8002] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes [ 397.932788][ T7427] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.559659][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 398.729701][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 398.857363][ T11] kernel read not supported for file /vcs (pid: 11 comm: kworker/0:1) [ 398.892493][ T5860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 398.921962][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 398.930253][ T5860] usb 2-1: can't read configurations, error -71 [ 399.023263][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 399.042572][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.375216][ T8032] loop5: detected capacity change from 0 to 512 [ 399.435847][ T8032] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.875: casefold flag without casefold feature [ 399.469930][ T8032] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.875: couldn't read orphan inode 15 (err -117) [ 399.485547][ T8032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.499006][ T30] audit: type=1326 audit(1760387214.368:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7fc00000 [ 399.638197][ T7427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.267960][ T8034] loop3: detected capacity change from 0 to 8192 [ 400.769085][ T8046] loop0: detected capacity change from 0 to 512 [ 401.118342][ T8046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.132366][ T8046] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.732661][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.937346][ T8059] loop5: detected capacity change from 0 to 512 [ 401.963526][ T8059] EXT4-fs: Ignoring removed i_version option [ 402.000177][ T8059] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 402.035036][ T8059] EXT4-fs (loop5): 1 truncate cleaned up [ 402.043267][ T8059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.480431][ T7427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.297333][ T8082] loop3: detected capacity change from 0 to 128 [ 403.348129][ T8082] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 403.382860][ T8082] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 403.673181][ T59] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.198036][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.902'. [ 404.762747][ T8107] netlink: 288 bytes leftover after parsing attributes in process `syz.4.908'. [ 404.809656][ T5889] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 404.855068][ T8109] loop0: detected capacity change from 0 to 64 [ 404.988880][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.997904][ T5889] usb 4-1: config 0 has no interface number 0 [ 405.071779][ T5889] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 405.081517][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.089931][ T5889] usb 4-1: Product: syz [ 405.094299][ T5889] usb 4-1: Manufacturer: syz [ 405.099111][ T5889] usb 4-1: SerialNumber: syz [ 405.168123][ T5889] usb 4-1: config 0 descriptor?? [ 405.417659][ T5889] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 405.452581][ T5889] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.472632][ T5889] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 405.483323][ T5889] usb 4-1: media controller created [ 405.559768][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.709087][ T30] audit: type=1326 audit(1760387220.608:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 405.796430][ T30] audit: type=1326 audit(1760387220.648:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 405.819629][ T30] audit: type=1326 audit(1760387220.658:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 405.842045][ T30] audit: type=1326 audit(1760387220.658:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 405.864607][ T30] audit: type=1326 audit(1760387220.658:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 405.888550][ T30] audit: type=1326 audit(1760387220.668:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 405.889969][ T5889] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 405.911916][ T30] audit: type=1326 audit(1760387220.668:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 406.008989][ T8115] loop5: detected capacity change from 0 to 4096 [ 406.257389][ T8122] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.414372][ T8125] loop1: detected capacity change from 0 to 256 [ 406.529765][ T5889] usb 4-1: USB disconnect, device number 7 [ 406.687826][ T8125] FAT-fs (loop1): Directory bread(block 64) failed [ 406.701758][ T8125] FAT-fs (loop1): Directory bread(block 65) failed [ 406.710719][ T8125] FAT-fs (loop1): Directory bread(block 66) failed [ 406.717478][ T8125] FAT-fs (loop1): Directory bread(block 67) failed [ 406.724736][ T8125] FAT-fs (loop1): Directory bread(block 68) failed [ 406.731745][ T8125] FAT-fs (loop1): Directory bread(block 69) failed [ 406.738642][ T8125] FAT-fs (loop1): Directory bread(block 70) failed [ 406.745585][ T8125] FAT-fs (loop1): Directory bread(block 71) failed [ 406.752856][ T8125] FAT-fs (loop1): Directory bread(block 72) failed [ 406.759730][ T8125] FAT-fs (loop1): Directory bread(block 73) failed [ 407.806297][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 407.864677][ T8147] loop3: detected capacity change from 0 to 1024 [ 408.000302][ T8150] loop4: detected capacity change from 0 to 128 [ 408.047019][ T11] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 408.056670][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.090604][ T11] usb 1-1: config 0 descriptor?? [ 408.112165][ T8150] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.138331][ T11] cp210x 1-1:0.0: cp210x converter detected [ 408.222728][ T8150] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.275393][ T3841] hfsplus: b-tree write err: -5, ino 4 [ 408.422958][ T8150] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 408.812866][ T11] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 408.821312][ T11] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 408.875310][ T11] usb 1-1: cp210x converter now attached to ttyUSB0 [ 408.879981][ T5805] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.914258][ T11] usb 1-1: USB disconnect, device number 6 [ 408.944502][ T11] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 408.954608][ T11] cp210x 1-1:0.0: device disconnected [ 408.976075][ T8160] loop5: detected capacity change from 0 to 256 [ 408.986686][ T8160] exfat: Deprecated parameter 'utf8' [ 409.004658][ T5889] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 409.094542][ T8160] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 409.212318][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 409.258535][ T30] audit: type=1800 audit(1760387224.138:26): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.929" name="file1" dev="loop5" ino=1048684 res=0 errno=0 [ 409.283089][ T5889] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 409.293021][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.301617][ T5889] usb 4-1: Product: syz [ 409.305995][ T5889] usb 4-1: Manufacturer: syz [ 409.310983][ T5889] usb 4-1: SerialNumber: syz [ 409.427108][ T8164] TCP: TCP_TX_DELAY enabled [ 409.432396][ T5889] usb 4-1: config 0 descriptor?? [ 409.749968][ T5889] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 410.410073][ T5889] gspca_sunplus: reg_w_riv err -71 [ 410.415758][ T5889] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 410.439142][ T5889] usb 4-1: USB disconnect, device number 8 [ 410.723068][ T8179] loop1: detected capacity change from 0 to 256 [ 410.771594][ T8178] loop4: detected capacity change from 0 to 512 [ 410.783897][ T8178] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 410.828798][ T8179] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 410.880185][ T8178] EXT4-fs (loop4): 1 truncate cleaned up [ 410.891860][ T8178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.059405][ T8178] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.937: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 411.079130][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.125766][ T8178] EXT4-fs (loop4): Remounting filesystem read-only [ 411.171867][ T8178] overlayfs: failed to create directory ./bus/work (errno: 30); mounting read-only [ 411.182190][ T8178] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null. [ 411.521903][ T8188] Falling back ldisc for ttyS3. [ 412.008570][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.071070][ T3841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.263336][ T3841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.445257][ T3841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.598117][ T3841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.208945][ T3841] bridge_slave_1: left allmulticast mode [ 413.215616][ T3841] bridge_slave_1: left promiscuous mode [ 413.222429][ T3841] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.310605][ T3841] bridge_slave_0: left allmulticast mode [ 413.316489][ T3841] bridge_slave_0: left promiscuous mode [ 413.323392][ T3841] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.001159][ T3841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.045146][ T3841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.085819][ T3841] bond0 (unregistering): Released all slaves [ 414.728052][ T3841] hsr_slave_0: left promiscuous mode [ 414.752884][ T3841] hsr_slave_1: left promiscuous mode [ 414.761340][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.769035][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.781404][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.789009][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.906402][ T3841] veth1_macvtap: left promiscuous mode [ 414.912407][ T3841] veth0_macvtap: left promiscuous mode [ 414.918343][ T3841] veth1_vlan: left promiscuous mode [ 414.924169][ T3841] veth0_vlan: left promiscuous mode [ 415.636047][ T8213] loop1: detected capacity change from 0 to 4096 [ 415.647482][ T8213] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 415.913223][ T3841] team0 (unregistering): Port device team_slave_1 removed [ 415.940717][ T3841] team0 (unregistering): Port device team_slave_0 removed [ 415.990275][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.084578][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.095308][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.111166][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.154455][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.559930][ T8213] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 417.470656][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 418.276953][ T8238] loop1: detected capacity change from 0 to 8192 [ 418.319647][ T5808] Bluetooth: hci3: command tx timeout [ 418.374139][ T8238] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 418.691729][ T8238] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 418.701123][ T8238] FAT-fs (loop1): Filesystem has been set read-only [ 418.734542][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.744109][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.752041][ T8218] bridge_slave_0: entered allmulticast mode [ 418.761986][ T8218] bridge_slave_0: entered promiscuous mode [ 418.800301][ T8238] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 418.817654][ T8247] loop3: detected capacity change from 0 to 2048 [ 418.827226][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.835079][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.843023][ T8218] bridge_slave_1: entered allmulticast mode [ 418.853052][ T8218] bridge_slave_1: entered promiscuous mode [ 418.864943][ T8238] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 418.985244][ T8247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.105046][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.229067][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.257229][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.264405][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.331938][ T5798] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 419.541058][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.595060][ T8218] team0: Port device team_slave_0 added [ 419.645489][ T8218] team0: Port device team_slave_1 added [ 419.902247][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.909535][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.936132][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.965579][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.973165][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.000023][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.403066][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 420.420111][ T5808] Bluetooth: hci3: command tx timeout [ 420.492398][ T8218] hsr_slave_0: entered promiscuous mode [ 420.503008][ T8218] hsr_slave_1: entered promiscuous mode [ 420.513296][ T8218] debugfs: 'hsr0' already exists in 'hsr' [ 420.519775][ T8218] Cannot create hsr debugfs directory [ 421.426963][ T8279] loop1: detected capacity change from 0 to 8 [ 421.473422][ T8279] squashfs: Unknown parameter 'euid' [ 421.723811][ T8218] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.781129][ T8218] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.817497][ T8218] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.872870][ T8218] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.877941][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.978'. [ 422.490093][ T5808] Bluetooth: hci3: command tx timeout [ 422.678085][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.824366][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.861036][ T8289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.980'. [ 422.905975][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.913791][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.990422][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.997979][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.570940][ T5808] Bluetooth: hci3: command tx timeout [ 424.701902][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.507595][ T8218] veth0_vlan: entered promiscuous mode [ 426.570934][ T8218] veth1_vlan: entered promiscuous mode [ 426.795631][ T8218] veth0_macvtap: entered promiscuous mode [ 426.889093][ T8218] veth1_macvtap: entered promiscuous mode [ 427.018885][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.103662][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.205723][ T3801] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.230088][ T3801] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.262833][ T3801] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.321738][ T5086] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.372788][ T8351] loop3: detected capacity change from 0 to 128 [ 427.392094][ T8350] netlink: 'syz.1.1003': attribute type 8 has an invalid length. [ 427.473115][ T8351] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 427.558416][ T8351] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 427.884745][ T8361] mmap: syz.1.1006 (8361) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 428.191323][ T3841] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 428.636937][ T8369] loop1: detected capacity change from 0 to 512 [ 428.669089][ T8369] EXT4-fs: Ignoring removed nobh option [ 428.730301][ T8369] EXT4-fs (loop1): Test dummy encryption mode enabled [ 428.835262][ T8369] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1009: iget: bad i_size value: 38620345925642 [ 428.908868][ T8369] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1009: couldn't read orphan inode 15 (err -117) [ 428.984959][ T8369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.372344][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.336661][ T8418] loop0: detected capacity change from 0 to 256 [ 431.467199][ T8418] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 431.874217][ T8429] team_slave_0: entered promiscuous mode [ 431.880353][ T8429] team_slave_1: entered promiscuous mode [ 431.895729][ T8429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.344614][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.353292][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.422196][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.430841][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.572788][ T11] kernel read not supported for file /dsp (pid: 11 comm: kworker/0:1) [ 433.471788][ T8454] loop3: detected capacity change from 0 to 512 [ 433.488618][ T8454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.526052][ T8454] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1040: invalid block [ 433.548276][ T8454] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1040: invalid indirect mapped block 4294967295 (level 1) [ 433.567103][ T8454] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1040: invalid indirect mapped block 4294967295 (level 1) [ 433.583806][ T8454] EXT4-fs (loop3): 2 truncates cleaned up [ 433.593039][ T8454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.661635][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 433.746784][ T8454] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.3.1040: path /211/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 433.890319][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 433.912972][ T5889] usb 7-1: config 0 has no interfaces? [ 433.947407][ T5889] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 433.957610][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 433.966139][ T5889] usb 7-1: Product: syz [ 433.970612][ T5889] usb 7-1: SerialNumber: syz [ 433.985657][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 433.986286][ T5889] usb 7-1: config 0 descriptor?? [ 433.996249][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 434.051941][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.287214][ T5860] usb 7-1: USB disconnect, device number 2 [ 434.505420][ T8470] loop0: detected capacity change from 0 to 8 [ 434.526550][ T8468] loop1: detected capacity change from 0 to 512 [ 434.568502][ T8468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 434.658768][ T8468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 434.690077][ T8468] System zones: 1-12 [ 434.701790][ T8468] EXT4-fs (loop1): 1 truncate cleaned up [ 434.710055][ T8468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.880232][ T30] audit: type=1800 audit(1760387249.778:27): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1044" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 435.288534][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.550733][ T8482] tap0: tun_chr_ioctl cmd 1074025672 [ 435.556509][ T8482] tap0: ignored: set checksum enabled [ 436.444655][ T8494] loop6: detected capacity change from 0 to 2048 [ 436.514042][ T8494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.529671][ T8498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 436.980975][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1061'. [ 437.357232][ T8506] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1062'. [ 437.431845][ T8506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 437.577113][ T8515] overlayfs: invalid origin (0000) [ 439.002153][ T8534] macvlan0: entered promiscuous mode [ 439.015625][ T8534] macvlan1: entered promiscuous mode [ 439.026663][ T8534] hsr1: entered promiscuous mode [ 439.372884][ T8537] loop0: detected capacity change from 0 to 64 [ 439.420897][ T8537] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 439.481813][ T8531] loop6: detected capacity change from 0 to 8192 [ 439.503069][ T8531] msdos: Unknown parameter 'audit' [ 439.588828][ T8541] input: syz1 as /devices/virtual/input/input10 [ 439.613066][ T8539] loop3: detected capacity change from 0 to 512 [ 439.755362][ T8539] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1077: corrupted in-inode xattr: invalid ea_ino [ 439.896510][ T8539] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1077: couldn't read orphan inode 15 (err -117) [ 439.933426][ T8539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.037664][ T8539] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6325: inode #18: comm syz.3.1077: bad extra_isize 6 (inode size 256) [ 440.402258][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.856341][ T8566] loop0: detected capacity change from 0 to 512 [ 441.916042][ T8566] FAT-fs (loop0): bogus number of FAT sectors [ 441.923013][ T8566] FAT-fs (loop0): Can't find a valid FAT filesystem [ 442.504092][ T8577] loop5: detected capacity change from 0 to 1024 [ 443.326559][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 444.622968][ T8607] loop1: detected capacity change from 0 to 512 [ 444.653890][ T8607] FAT-fs (loop1): bogus number of FAT sectors [ 444.660866][ T8607] FAT-fs (loop1): Can't find a valid FAT filesystem [ 444.984731][ T8613] loop3: detected capacity change from 0 to 512 [ 445.081929][ T5860] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 445.171385][ T8613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.184813][ T8613] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.290183][ T30] audit: type=1800 audit(1760387260.188:28): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1110" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 445.318157][ T8613] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 32: comm syz.3.1110: path /228/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 445.358294][ T5860] usb 7-1: Using ep0 maxpacket: 16 [ 445.405349][ T5860] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.413866][ T8613] EXT4-fs (loop3): Remounting filesystem read-only [ 445.416197][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.433533][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.443734][ T5860] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 445.453812][ T5860] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.483733][ T5860] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.493718][ T5860] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.508275][ T5860] usb 7-1: Manufacturer: syz [ 445.536074][ T5860] usb 7-1: config 0 descriptor?? [ 445.813877][ T8609] loop6: detected capacity change from 0 to 8 [ 446.122406][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.182299][ T5860] rc_core: IR keymap rc-hauppauge not found [ 446.188580][ T5860] Registered IR keymap rc-empty [ 446.194369][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.268639][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.296634][ T5860] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 446.313231][ T5860] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 446.381514][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.493388][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.521018][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.560211][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.580513][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.637202][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.672661][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.705371][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.740017][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.779905][ T5860] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 446.812497][ T5860] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 446.820990][ T5860] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 447.011052][ T5860] usb 7-1: USB disconnect, device number 3 [ 447.194859][ T5858] kernel write not supported for file /snd/seq (pid: 5858 comm: kworker/0:4) [ 447.750446][ T8653] loop3: detected capacity change from 0 to 512 [ 447.790021][ T8653] FAT-fs (loop3): bogus number of FAT sectors [ 447.796542][ T8653] FAT-fs (loop3): Can't find a valid FAT filesystem [ 447.849707][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 447.895069][ T8651] loop5: detected capacity change from 0 to 4096 [ 447.915685][ T8657] loop0: detected capacity change from 0 to 128 [ 448.021022][ T8658] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 448.100777][ T5860] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.112418][ T5860] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 448.123122][ T5860] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.132541][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.225840][ T8652] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 448.272305][ T5860] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.617282][ T5858] usb 2-1: USB disconnect, device number 6 [ 450.408908][ T30] audit: type=1326 audit(1760387266.299:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 450.431111][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.500070][ T30] audit: type=1326 audit(1760387266.359:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 450.523881][ T30] audit: type=1326 audit(1760387266.389:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 450.545940][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.553040][ T30] audit: type=1326 audit(1760387266.389:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 450.577071][ T30] audit: type=1326 audit(1760387266.409:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 450.599250][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.606271][ T30] audit: type=1326 audit(1760387266.409:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 450.628408][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.636061][ T30] audit: type=1326 audit(1760387266.409:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 451.056766][ T8705] input: syz1 as /devices/virtual/input/input12 [ 451.074636][ T8704] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1146'. [ 451.128457][ T8699] loop0: detected capacity change from 0 to 4096 [ 451.281612][ T8706] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.889562][ T8721] loop5: detected capacity change from 0 to 512 [ 452.912152][ T8721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.012597][ T8721] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1154: invalid block [ 453.115065][ T8721] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1154: invalid indirect mapped block 4294967295 (level 1) [ 453.132956][ T11] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 453.177760][ T8721] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1154: invalid indirect mapped block 4294967295 (level 1) [ 453.238260][ T8721] EXT4-fs (loop5): 2 truncates cleaned up [ 453.246747][ T8721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.322016][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.332631][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 453.344049][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 453.355418][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 453.463746][ T11] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.473410][ T11] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.481868][ T11] usb 4-1: Manufacturer: syz [ 453.496056][ T11] usb 4-1: config 0 descriptor?? [ 453.535754][ T7427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.021679][ T11] rc_core: IR keymap rc-hauppauge not found [ 454.027791][ T11] Registered IR keymap rc-empty [ 454.063294][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.092372][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.122868][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 454.137463][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 454.221352][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.326179][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.351048][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.380792][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.405231][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.447611][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.492513][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.530928][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.561854][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.589707][ T11] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 454.614459][ T11] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 454.624371][ T11] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 454.672444][ T11] usb 4-1: USB disconnect, device number 9 [ 455.044576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.969494][ T8763] netlink: 'syz.3.1172': attribute type 2 has an invalid length. [ 456.001783][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1173'. [ 456.070743][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1173'. [ 456.756737][ T8777] loop6: detected capacity change from 0 to 128 [ 456.795014][ T8777] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 456.860201][ T8777] hpfs: filesystem error: improperly stopped [ 456.867936][ T8777] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 456.876329][ T8777] hpfs: You really don't want any checks? You are crazy... [ 456.918610][ T8777] hpfs: hpfs_map_sector(): read error [ 456.924700][ T8777] hpfs: code page support is disabled [ 456.956359][ T8777] hpfs: hpfs_map_4sectors(): unaligned read [ 456.975221][ T8777] hpfs: hpfs_map_4sectors(): unaligned read [ 456.982186][ T8777] hpfs: filesystem error: unable to find root dir [ 458.749701][ T8811] loop5: detected capacity change from 0 to 512 [ 458.848281][ T8811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.890595][ T11] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 458.948523][ T8811] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 459.109106][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 459.132485][ T8811] EXT4-fs: Ignoring sb option on remount [ 459.138546][ T8811] EXT4-fs: Ignoring removed orlov option [ 459.145162][ T8811] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 459.155035][ T8811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.171061][ T11] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 459.180781][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.189005][ T11] usb 7-1: Product: syz [ 459.193704][ T11] usb 7-1: Manufacturer: syz [ 459.198578][ T11] usb 7-1: SerialNumber: syz [ 459.256094][ T11] usb 7-1: config 0 descriptor?? [ 459.271566][ T8811] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 459.597056][ T8826] loop0: detected capacity change from 0 to 256 [ 459.656875][ T7427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.765400][ T8828] loop3: detected capacity change from 0 to 128 [ 459.880509][ T8826] FAT-fs (loop0): Directory bread(block 64) failed [ 459.887419][ T8826] FAT-fs (loop0): Directory bread(block 65) failed [ 459.895013][ T8826] FAT-fs (loop0): Directory bread(block 66) failed [ 459.901993][ T8826] FAT-fs (loop0): Directory bread(block 67) failed [ 459.908909][ T8826] FAT-fs (loop0): Directory bread(block 68) failed [ 459.915906][ T8826] FAT-fs (loop0): Directory bread(block 69) failed [ 459.923059][ T8826] FAT-fs (loop0): Directory bread(block 70) failed [ 459.930055][ T8826] FAT-fs (loop0): Directory bread(block 71) failed [ 459.945065][ T8826] FAT-fs (loop0): Directory bread(block 72) failed [ 459.954552][ T8826] FAT-fs (loop0): Directory bread(block 73) failed [ 459.959388][ T30] audit: type=1800 audit(1760387275.859:36): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1199" name="file2" dev="loop3" ino=1048696 res=0 errno=0 [ 460.002876][ T11] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 460.003674][ T8828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 460.014565][ T11] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 460.021956][ T8828] FAT-fs (loop3): Filesystem has been set read-only [ 460.028649][ T11] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 460.035312][ T8828] syz.3.1199: attempt to access beyond end of device [ 460.035312][ T8828] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 460.066798][ T8828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 460.075080][ T8828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 460.125498][ T8828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 460.134163][ T8828] syz.3.1199: attempt to access beyond end of device [ 460.134163][ T8828] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 460.149796][ T8828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 460.151146][ T8832] syz.3.1199: attempt to access beyond end of device [ 460.151146][ T8832] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 460.158661][ T8828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 460.176640][ T8832] syz.3.1199: attempt to access beyond end of device [ 460.176640][ T8832] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 460.209470][ T8828] syz.3.1199: attempt to access beyond end of device [ 460.209470][ T8828] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 460.228993][ T11] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 460.256802][ T11] usb 7-1: USB disconnect, device number 4 [ 460.265610][ T8832] syz.3.1199: attempt to access beyond end of device [ 460.265610][ T8832] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 460.279987][ T8832] syz.3.1199: attempt to access beyond end of device [ 460.279987][ T8832] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 460.293933][ T8828] syz.3.1199: attempt to access beyond end of device [ 460.293933][ T8828] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 460.382142][ T8828] syz.3.1199: attempt to access beyond end of device [ 460.382142][ T8828] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 460.435280][ T8828] syz.3.1199: attempt to access beyond end of device [ 460.435280][ T8828] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 461.338868][ T8846] loop6: detected capacity change from 0 to 512 [ 461.438440][ T8846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.452196][ T8846] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.584097][ T8851] dvmrp1: tun_chr_ioctl cmd 35108 [ 461.936790][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.237861][ T8855] loop5: detected capacity change from 0 to 4096 [ 462.331313][ T8855] ntfs3(loop5): ino=3, Correct links count -> 2. [ 462.495595][ T8863] loop6: detected capacity change from 0 to 2048 [ 462.533082][ T8863] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 462.543859][ T8863] NILFS (loop6): mounting unchecked fs [ 462.637318][ T8863] NILFS (loop6): recovery complete [ 462.669498][ T8869] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.771208][ T8870] loop3: detected capacity change from 0 to 128 [ 462.918169][ T8870] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 462.930424][ T8870] FAT-fs (loop3): Filesystem has been set read-only [ 462.970525][ T8871] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 463.530348][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1220'. [ 463.578205][ T8879] loop3: detected capacity change from 0 to 512 [ 463.810057][ T8881] loop6: detected capacity change from 0 to 1024 [ 463.826542][ T8881] EXT4-fs: inline encryption not supported [ 463.840455][ T8881] EXT4-fs: Ignoring removed i_version option [ 463.911262][ T8881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.434625][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.800408][ T8892] loop5: detected capacity change from 0 to 4096 [ 465.036127][ T8892] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 465.064567][ T8898] loop3: detected capacity change from 0 to 4096 [ 465.076686][ T8892] ntfs3(loop5): ino=1a, mi_enum_attr [ 465.083220][ T8892] ntfs3(loop5): ino=1a, mi_enum_attr [ 465.088825][ T8892] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 465.173586][ T8902] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.496235][ T8920] loop6: detected capacity change from 0 to 128 [ 466.496643][ T8918] loop1: detected capacity change from 0 to 2048 [ 466.563040][ T8920] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 466.635390][ T8920] hpfs: filesystem error: improperly stopped [ 466.645684][ T8920] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 466.654105][ T8920] hpfs: You really don't want any checks? You are crazy... [ 466.693598][ T8920] hpfs: hpfs_map_sector(): read error [ 466.700950][ T8920] hpfs: code page support is disabled [ 466.715445][ T8918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.747917][ T8920] hpfs: hpfs_map_4sectors(): unaligned read [ 466.754876][ T8920] hpfs: hpfs_map_4sectors(): unaligned read [ 466.761275][ T8920] hpfs: filesystem error: unable to find root dir [ 467.500382][ T8926] loop0: detected capacity change from 0 to 4096 [ 467.526287][ T8926] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 467.764961][ T8926] ntfs3(loop0): ino=19, mi_enum_attr [ 467.772229][ T8926] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 467.998425][ T8935] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1243'. [ 469.112660][ T30] audit: type=1326 audit(1760387284.999:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.0.1248" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x0 [ 469.412942][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1251'. [ 469.734998][ T8964] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 470.477746][ T8976] loop5: detected capacity change from 0 to 512 [ 470.556645][ T8976] EXT4-fs: Ignoring removed orlov option [ 470.598024][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1260'. [ 470.619924][ T8976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.661568][ T8976] EXT4-fs (loop5): orphan cleanup on readonly fs [ 470.720322][ T8976] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1258: bg 0: block 248: padding at end of block bitmap is not set [ 470.802742][ T8976] Quota error (device loop5): write_blk: dquota write failed [ 470.812852][ T8976] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 470.823730][ T8976] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1258: Failed to acquire dquot type 1 [ 470.930250][ T8976] EXT4-fs (loop5): 1 truncate cleaned up [ 470.984061][ T8976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.177072][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 471.306698][ T7427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.585848][ T8991] loop0: detected capacity change from 0 to 256 [ 472.313534][ T8998] syz.5.1267 (8998) used greatest stack depth: 2344 bytes left [ 472.396910][ T9007] loop6: detected capacity change from 0 to 128 [ 472.600240][ T9009] loop0: detected capacity change from 0 to 512 [ 472.666838][ T9009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 472.682553][ T9002] loop1: detected capacity change from 0 to 4096 [ 472.727907][ T9002] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 472.779967][ T9009] EXT4-fs (loop0): 1 truncate cleaned up [ 472.788030][ T9009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.067367][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.186705][ T11] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 473.379660][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 473.412084][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.423120][ T11] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 473.432658][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.506031][ T11] usb 4-1: config 0 descriptor?? [ 473.534896][ T11] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 473.947779][ T9027] syz.5.1281 uses obsolete (PF_INET,SOCK_PACKET) [ 474.148164][ T11] gspca_vc032x: reg_r err -71 [ 474.153751][ T11] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 474.200771][ T11] usb 4-1: USB disconnect, device number 10 [ 477.600923][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 477.757540][ T9066] loop0: detected capacity change from 0 to 1024 [ 477.957526][ T9070] loop3: detected capacity change from 0 to 256 [ 478.143578][ T9070] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 478.188931][ T156] hfsplus: b-tree write err: -5, ino 4 [ 478.859677][ T9084] loop6: detected capacity change from 0 to 128 [ 478.911489][ T9084] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 478.979647][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 479.192213][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 479.233375][ T11] usb 2-1: config 0 has no interfaces? [ 479.239580][ T11] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 479.248991][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.312233][ T11] usb 2-1: config 0 descriptor?? [ 479.566234][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.575955][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.643054][ T11] usb 2-1: USB disconnect, device number 7 [ 480.041713][ T9099] batadv_slave_0: Caught tx_queue_len zero misconfig [ 480.110969][ T11] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 480.334075][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.345612][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.355934][ T11] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 480.365413][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.474225][ T11] usb 2-1: config 0 descriptor?? [ 480.537990][ T11] yurex 2-1:0.0: Could not submitting URB [ 480.545492][ T11] yurex 2-1:0.0: probe with driver yurex failed with error -5 [ 480.696150][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.703149][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.760434][ T11] usb 2-1: USB disconnect, device number 8 [ 482.711677][ T9140] loop3: detected capacity change from 0 to 256 [ 482.793396][ T9140] MINIX-fs: mounting file system with errors, running fsck is recommended [ 482.997931][ T9144] loop0: detected capacity change from 0 to 64 [ 483.449057][ T9147] loop5: detected capacity change from 0 to 512 [ 483.534644][ T9147] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 483.543293][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 483.584952][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 483.636974][ T9151] loop0: detected capacity change from 0 to 16 [ 484.433543][ T9161] loop0: detected capacity change from 0 to 512 [ 484.613147][ T9161] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 484.634483][ T9161] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 484.698605][ T9161] EXT4-fs (loop0): mount failed [ 484.735812][ T9170] loop1: detected capacity change from 0 to 256 [ 484.747556][ T9170] exFAT-fs (loop1): bogus fat length [ 484.753383][ T9170] exFAT-fs (loop1): failed to read boot sector [ 484.760845][ T9170] exFAT-fs (loop1): failed to recognize exfat type [ 484.945967][ T5860] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 485.139391][ T3841] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.155625][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 485.211445][ T5860] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 485.221610][ T5860] usb 6-1: config 0 has no interface number 0 [ 485.227947][ T5860] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.246742][ T5860] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.259844][ T5860] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 485.269152][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.502171][ T5860] usb 6-1: config 0 descriptor?? [ 485.660740][ T9170] loop1: detected capacity change from 0 to 32768 [ 485.725249][ T9170] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1345 (9170) [ 485.786665][ T9170] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 485.797492][ T9170] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 485.877671][ T3841] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.947913][ T163] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe8eebe8b8f887954dcf8153692d8edda437b01b76cd961dce965fb2cf766bf1e found 0x26c1dceeecb313153f2690130e1debb5ace334e08c217869dfce4b04a84b603c level 0 [ 485.971964][ T9170] BTRFS error (device loop1): failed to load root extent [ 486.020302][ T3841] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.045280][ T9170] BTRFS error (device loop1): open_ctree failed: -5 [ 486.226353][ T3841] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.250027][ T5860] uclogic 0003:28BD:0094.000A: pen parameters not found [ 486.268059][ T5860] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 486.495990][ T5860] usb 6-1: USB disconnect, device number 3 [ 486.800050][ T3841] bridge_slave_1: left allmulticast mode [ 486.806202][ T3841] bridge_slave_1: left promiscuous mode [ 486.815400][ T3841] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.845566][ T3841] bridge_slave_0: left allmulticast mode [ 486.851927][ T3841] bridge_slave_0: left promiscuous mode [ 486.858690][ T3841] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.377897][ T3841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.402765][ T3841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.424896][ T3841] bond0 (unregistering): Released all slaves [ 487.602684][ T3841] IPVS: stopping master sync thread 6446 ... [ 487.762966][ T3841] hsr_slave_0: left promiscuous mode [ 487.779634][ T3841] hsr_slave_1: left promiscuous mode [ 487.800453][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.808368][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.819127][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.826878][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.853054][ T3841] veth1_macvtap: left promiscuous mode [ 487.858822][ T3841] veth0_macvtap: left promiscuous mode [ 487.865134][ T3841] veth1_vlan: left promiscuous mode [ 487.871725][ T3841] veth0_vlan: left promiscuous mode [ 488.808485][ T3841] team0 (unregistering): Port device team_slave_1 removed [ 488.933320][ T3841] team0 (unregistering): Port device team_slave_0 removed [ 489.252488][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.341308][ T9203] lo: Caught tx_queue_len zero misconfig [ 489.361210][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.371216][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.558397][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.574130][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.667133][ T9213] loop6: detected capacity change from 0 to 4096 [ 490.862505][ T9200] chnl_net:caif_netlink_parms(): no params data found [ 491.563906][ T9230] loop1: detected capacity change from 0 to 256 [ 491.679730][ T5813] Bluetooth: hci4: command tx timeout [ 492.008454][ T9236] loop0: detected capacity change from 0 to 256 [ 492.196850][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.205635][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.213566][ T9200] bridge_slave_0: entered allmulticast mode [ 492.223531][ T9200] bridge_slave_0: entered promiscuous mode [ 492.306955][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.314898][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.323018][ T9200] bridge_slave_1: entered allmulticast mode [ 492.333047][ T9200] bridge_slave_1: entered promiscuous mode [ 492.614079][ T9200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.663448][ T9200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.937076][ T9200] team0: Port device team_slave_0 added [ 492.957865][ T9200] team0: Port device team_slave_1 added [ 493.309831][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.316987][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.346134][ T9200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.410072][ T9252] loop6: detected capacity change from 0 to 512 [ 493.418054][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.426562][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.453527][ T9200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.484898][ T9252] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 493.505687][ T9252] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1375: invalid indirect mapped block 2683928664 (level 1) [ 493.584281][ T9252] EXT4-fs (loop6): Remounting filesystem read-only [ 493.601314][ T9252] EXT4-fs (loop6): 1 truncate cleaned up [ 493.609771][ T9252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.765361][ T5813] Bluetooth: hci4: command tx timeout [ 493.915524][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.955523][ T9200] hsr_slave_0: entered promiscuous mode [ 493.974602][ T9200] hsr_slave_1: entered promiscuous mode [ 493.984630][ T9200] debugfs: 'hsr0' already exists in 'hsr' [ 493.990773][ T9200] Cannot create hsr debugfs directory [ 494.517754][ T9269] loop0: detected capacity change from 0 to 128 [ 495.186816][ T9200] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 495.240854][ T9200] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 495.321437][ T9200] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 495.357218][ T9278] loop6: detected capacity change from 0 to 1024 [ 495.374983][ T9200] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 495.384934][ T9278] EXT4-fs: Ignoring removed orlov option [ 495.391200][ T9278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.457331][ T9282] can0: slcan on ttyS3. [ 495.526953][ T9278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.673846][ T9282] can0 (unregistered): slcan off ttyS3. [ 495.840059][ T5813] Bluetooth: hci4: command tx timeout [ 496.063762][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.313295][ T9200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.774105][ T9200] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.886388][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.894152][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.042029][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.049727][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.306869][ T9200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.920057][ T5813] Bluetooth: hci4: command tx timeout [ 498.398756][ T9311] loop6: detected capacity change from 0 to 2048 [ 498.423338][ T163] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.466863][ T9311] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.578720][ T9311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.642850][ T163] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.755269][ T163] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.924348][ T163] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.092645][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.125045][ T9200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.269947][ T163] bridge_slave_1: left allmulticast mode [ 499.275853][ T163] bridge_slave_1: left promiscuous mode [ 499.283282][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.387061][ T163] bridge_slave_0: left allmulticast mode [ 499.393373][ T163] bridge_slave_0: left promiscuous mode [ 499.400222][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.998244][ T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.025322][ T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.040985][ T163] bond0 (unregistering): Released all slaves [ 500.533603][ T163] hsr_slave_0: left promiscuous mode [ 500.562037][ T163] hsr_slave_1: left promiscuous mode [ 500.570491][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.578132][ T163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.592530][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.607257][ T163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.690396][ T163] team_slave_0: left promiscuous mode [ 500.696166][ T163] team_slave_1: left promiscuous mode [ 500.702247][ T163] veth1_macvtap: left promiscuous mode [ 500.707975][ T163] veth0_macvtap: left promiscuous mode [ 500.714071][ T163] veth1_vlan: left promiscuous mode [ 500.719792][ T163] veth0_vlan: left promiscuous mode [ 500.787415][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 501.793370][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.796889][ T163] team0 (unregistering): Port device team_slave_1 removed [ 501.851670][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.879024][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.890761][ T163] team0 (unregistering): Port device team_slave_0 removed [ 502.019707][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.032464][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.552391][ T9337] overlayfs: statfs failed on './file0' [ 503.333163][ T9200] veth0_vlan: entered promiscuous mode [ 503.486551][ T9200] veth1_vlan: entered promiscuous mode [ 503.501279][ T5429] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 503.641553][ T9338] chnl_net:caif_netlink_parms(): no params data found [ 503.669751][ T5429] usb 2-1: Using ep0 maxpacket: 8 [ 503.712105][ T5429] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 503.722247][ T5429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.730926][ T5429] usb 2-1: Product: syz [ 503.735304][ T5429] usb 2-1: Manufacturer: syz [ 503.740403][ T5429] usb 2-1: SerialNumber: syz [ 503.822376][ T9200] veth0_macvtap: entered promiscuous mode [ 503.845018][ T5429] usb 2-1: config 0 descriptor?? [ 503.972627][ T9200] veth1_macvtap: entered promiscuous mode [ 504.100467][ T5429] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 504.108270][ T5429] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 504.159997][ T5813] Bluetooth: hci2: command tx timeout [ 504.170826][ T5429] usb 2-1: USB disconnect, device number 9 [ 504.220279][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.290469][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.350094][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.384174][ T163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.444112][ T9359] loop6: detected capacity change from 0 to 512 [ 504.451435][ T163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.462359][ T163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.478239][ T9359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 504.524880][ T9359] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1415: invalid block [ 504.551677][ T9359] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1415: invalid indirect mapped block 4294967295 (level 1) [ 504.573009][ T9359] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1415: invalid indirect mapped block 4294967295 (level 1) [ 504.730753][ T9359] EXT4-fs (loop6): 2 truncates cleaned up [ 504.739483][ T9359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.878757][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.890860][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.898642][ T9338] bridge_slave_0: entered allmulticast mode [ 504.908461][ T9338] bridge_slave_0: entered promiscuous mode [ 504.980529][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.988283][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.003275][ T9338] bridge_slave_1: entered allmulticast mode [ 505.013607][ T9338] bridge_slave_1: entered promiscuous mode [ 505.075925][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.389938][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.460910][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.574820][ T9374] loop6: detected capacity change from 0 to 47 [ 505.707484][ T9338] team0: Port device team_slave_0 added [ 505.755589][ T9338] team0: Port device team_slave_1 added [ 506.062161][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.070733][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.098434][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.164634][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.172035][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.198676][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.254898][ T5813] Bluetooth: hci2: command tx timeout [ 506.268767][ T9383] loop6: detected capacity change from 0 to 256 [ 506.535230][ T9338] hsr_slave_0: entered promiscuous mode [ 506.545916][ T9338] hsr_slave_1: entered promiscuous mode [ 506.555335][ T9338] debugfs: 'hsr0' already exists in 'hsr' [ 506.561707][ T9338] Cannot create hsr debugfs directory [ 507.303115][ T9396] loop0: detected capacity change from 0 to 16 [ 507.345456][ T9396] erofs (device loop0): mounted with root inode @ nid 36. [ 507.416491][ T9396] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 507.428522][ T5813] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 507.448344][ T9396] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 507.550298][ T9396] erofs (device loop0): read error -117 @ 1 of nid 89 [ 507.563908][ T30] audit: type=1800 audit(1760387323.469:38): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1425" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 507.651022][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1426'. [ 508.198778][ T9338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 508.224062][ T9338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 508.320020][ T5813] Bluetooth: hci2: command tx timeout [ 508.324328][ T9338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 508.461230][ T9338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 509.001730][ T9419] loop6: detected capacity change from 0 to 1024 [ 509.158861][ T9419] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 509.204357][ T9422] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 509.211512][ T9422] hfsplus: xattr searching failed [ 509.377208][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.542358][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.594989][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.602659][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.709904][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.717465][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.403157][ T5813] Bluetooth: hci2: command tx timeout [ 510.785753][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.794122][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.897226][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.905610][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.941384][ T9439] loop6: detected capacity change from 0 to 1024 [ 511.114465][ T9444] loop1: detected capacity change from 0 to 256 [ 511.141517][ T9444] exfat: Deprecated parameter 'utf8' [ 511.286333][ T9444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 511.703744][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.127769][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 512.589894][ T9465] loop6: detected capacity change from 0 to 16 [ 512.666236][ T9465] erofs (device loop6): mounted with root inode @ nid 36. [ 513.617549][ T9338] veth0_vlan: entered promiscuous mode [ 513.682035][ T9338] veth1_vlan: entered promiscuous mode [ 513.754030][ T9471] loop7: detected capacity change from 0 to 8192 [ 513.947394][ T9338] veth0_macvtap: entered promiscuous mode [ 513.998904][ T9338] veth1_macvtap: entered promiscuous mode [ 514.092476][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.348269][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.468784][ T9485] loop1: detected capacity change from 0 to 512 [ 514.554734][ T156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.627454][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.723352][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.794907][ T9485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.808452][ T9485] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.843354][ T3801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.879820][ T9487] loop0: detected capacity change from 0 to 2048 [ 514.946003][ T9487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.061743][ T30] audit: type=1800 audit(1760387330.949:39): pid=9485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1453" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 515.083232][ T30] audit: type=1800 audit(1760387330.959:40): pid=9485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1453" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 515.430955][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.089657][ T5429] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 516.156839][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1461'. [ 516.249676][ T5429] usb 1-1: Using ep0 maxpacket: 16 [ 516.272279][ T5429] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 516.283205][ T5429] usb 1-1: config 0 has no interface number 0 [ 516.290554][ T5429] usb 1-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.301983][ T5429] usb 1-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.312360][ T5429] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 516.321892][ T5429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.405651][ T5429] usb 1-1: config 0 descriptor?? [ 516.696493][ T9515] loop1: detected capacity change from 0 to 1024 [ 516.795922][ T9515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.847302][ T9503] loop0: detected capacity change from 0 to 64 [ 517.223110][ T9503] hfs: unable to load iocharset "macic" [ 517.274694][ T5429] hid (null): unknown global tag 0xe [ 517.280763][ T5429] hid (null): invalid report_size -442896115 [ 517.287085][ T5429] hid (null): unknown global tag 0xc [ 517.293404][ T5429] hid (null): unknown global tag 0xc [ 517.299282][ T5429] hid (null): invalid report_size 22015 [ 517.307761][ T5429] hid (null): report_id 49240 is invalid [ 517.402420][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.480552][ T5889] usb 1-1: USB disconnect, device number 7 [ 517.843056][ T9532] loop1: detected capacity change from 0 to 256 [ 518.097703][ T9534] loop6: detected capacity change from 0 to 2048 [ 518.176843][ T9534] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.1466: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 518.275835][ T9534] EXT4-fs (loop6): get root inode failed [ 518.285175][ T9534] EXT4-fs (loop6): mount failed [ 518.561199][ T9533] netlink: 'syz.6.1466': attribute type 6 has an invalid length. [ 519.121986][ T30] audit: type=1800 audit(1760387335.019:41): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1465" name="file1" dev="loop1" ino=1048715 res=0 errno=0 [ 519.137596][ T9532] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 519.153602][ T9532] FAT-fs (loop1): Filesystem has been set read-only [ 519.370516][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.378720][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.623250][ T5086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.631461][ T5086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.414121][ T9562] loop1: detected capacity change from 0 to 128 [ 520.497329][ T9562] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 520.511053][ T9562] hpfs: filesystem error: improperly stopped [ 520.517314][ T9562] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 520.525618][ T9562] hpfs: You really don't want any checks? You are crazy... [ 520.534450][ T9562] hpfs: hpfs_map_sector(): read error [ 520.540239][ T9562] hpfs: code page support is disabled [ 520.554840][ T9562] hpfs: hpfs_map_4sectors(): unaligned read [ 520.608456][ T9562] hpfs: hpfs_map_4sectors(): unaligned read [ 520.615302][ T9562] hpfs: filesystem error: unable to find root dir [ 520.719645][ T5889] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 520.921775][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 520.943894][ T5889] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 520.957038][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.005173][ T5889] usb 7-1: config 0 descriptor?? [ 521.255716][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 521.290551][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.353307][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 521.362453][ T5889] usb 7-1: media controller created [ 521.380069][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 521.439374][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 521.440799][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.499927][ T9566] ===================================================== [ 521.510056][ T9566] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 521.517382][ T9566] _copy_to_user+0xcc/0x120 [ 521.522585][ T9566] i2cdev_ioctl_smbus+0x586/0x660 [ 521.527784][ T9566] compat_i2cdev_ioctl+0x48f/0xb40 [ 521.533281][ T9566] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 521.539046][ T9566] ia32_sys_call+0x2d5f/0x4310 [ 521.544195][ T9566] __do_fast_syscall_32+0xb0/0x150 [ 521.549796][ T9566] do_fast_syscall_32+0x38/0x80 [ 521.555422][ T9566] do_SYSENTER_32+0x1f/0x30 [ 521.560373][ T9566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.566940][ T9566] [ 521.569787][ T9566] Uninit was stored to memory at: [ 521.575065][ T9566] __i2c_smbus_xfer+0x2561/0x2f60 [ 521.581793][ T9566] i2c_smbus_xfer+0x31d/0x4d0 [ 521.586690][ T9566] i2cdev_ioctl_smbus+0x4a1/0x660 [ 521.592076][ T9566] compat_i2cdev_ioctl+0x48f/0xb40 [ 521.597557][ T9566] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 521.606916][ T9566] ia32_sys_call+0x2d5f/0x4310 [ 521.614906][ T9566] __do_fast_syscall_32+0xb0/0x150 [ 521.621073][ T9566] do_fast_syscall_32+0x38/0x80 [ 521.626189][ T9566] do_SYSENTER_32+0x1f/0x30 [ 521.631116][ T9566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.637700][ T9566] [ 521.640313][ T9566] Local variable msgbuf1.i created at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 521.645864][ T9566] __i2c_smbus_xfer+0x86a/0x2f60 [ 521.651189][ T9566] i2c_smbus_xfer+0x31d/0x4d0 [ 521.656055][ T9566] [ 521.658470][ T9566] Byte 0 of 1 is uninitialized [ 521.663565][ T9566] Memory access of size 1 starts at ffff888066303c76 [ 521.670566][ T9566] Data copied to user address 0000000080000040 [ 521.676926][ T9566] [ 521.680283][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.6.1476 Not tainted syzkaller #0 PREEMPT(none) [ 521.690983][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.701423][ T9566] ===================================================== [ 521.710482][ T9566] Disabling lock debugging due to kernel taint [ 521.717415][ T9566] Kernel panic - not syncing: kmsan.panic set ... [ 521.724019][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.6.1476 Tainted: G B syzkaller #0 PREEMPT(none) [ 521.735074][ T9566] Tainted: [B]=BAD_PAGE [ 521.739326][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.749546][ T9566] Call Trace: [ 521.752946][ T9566] [ 521.755967][ T9566] __dump_stack+0x26/0x30 [ 521.760483][ T9566] dump_stack_lvl+0x53/0x270 [ 521.765258][ T9566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 521.771253][ T9566] dump_stack+0x1e/0x25 [ 521.775587][ T9566] vpanic+0x435/0xd30 [ 521.779766][ T9566] panic+0x15d/0x160 [ 521.783893][ T9566] kmsan_report+0x31c/0x320 [ 521.788578][ T9566] ? kmsan_internal_check_memory+0x1e1/0x230 [ 521.794944][ T9566] ? kmsan_copy_to_user+0xf1/0x190 [ 521.800346][ T9566] ? _copy_to_user+0xcc/0x120 [ 521.805239][ T9566] ? i2cdev_ioctl_smbus+0x586/0x660 [ 521.810601][ T9566] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 521.816118][ T9566] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 521.822049][ T9566] ? ia32_sys_call+0x2d5f/0x4310 [ 521.827291][ T9566] ? __do_fast_syscall_32+0xb0/0x150 [ 521.832798][ T9566] ? do_fast_syscall_32+0x38/0x80 [ 521.838122][ T9566] ? do_SYSENTER_32+0x1f/0x30 [ 521.843003][ T9566] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.849721][ T9566] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 521.855237][ T9566] ? __i2c_transfer+0x11cd/0x3110 [ 521.860478][ T9566] ? kmsan_get_metadata+0xfb/0x160 [ 521.865770][ T9566] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 521.872349][ T9566] ? kmsan_get_metadata+0xfb/0x160 [ 521.877661][ T9566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 521.883669][ T9566] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 521.889070][ T9566] ? kmsan_get_metadata+0xfb/0x160 [ 521.894986][ T9566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 521.900998][ T9566] kmsan_internal_check_memory+0x1e1/0x230 [ 521.907060][ T9566] kmsan_copy_to_user+0xf1/0x190 [ 521.912165][ T9566] _copy_to_user+0xcc/0x120 [ 521.916861][ T9566] i2cdev_ioctl_smbus+0x586/0x660 [ 521.922073][ T9566] compat_i2cdev_ioctl+0x48f/0xb40 [ 521.927524][ T9566] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 521.933469][ T9566] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 521.939238][ T9566] ? kmsan_get_metadata+0xfb/0x160 [ 521.944535][ T9566] ? kmsan_get_metadata+0xfb/0x160 [ 521.949835][ T9566] ia32_sys_call+0x2d5f/0x4310 [ 521.954824][ T9566] __do_fast_syscall_32+0xb0/0x150 [ 521.960190][ T9566] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 521.966127][ T9566] do_fast_syscall_32+0x38/0x80 [ 521.971193][ T9566] do_SYSENTER_32+0x1f/0x30 [ 521.975898][ T9566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.982435][ T9566] RIP: 0023:0xf704d539 [ 521.986624][ T9566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 522.006498][ T9566] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 522.015099][ T9566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 522.023228][ T9566] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.031332][ T9566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.039433][ T9566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 522.047532][ T9566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.055691][ T9566] [ 522.059214][ T9566] Kernel Offset: disabled [ 522.063616][ T9566] Rebooting in 86400 seconds..