last executing test programs: 3m29.827387072s ago: executing program 32 (id=9454): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) 2m49.650305823s ago: executing program 3 (id=9962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 2m49.27036941s ago: executing program 3 (id=9967): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000680), 0x900, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000006c0)) 2m48.897246766s ago: executing program 3 (id=9974): r0 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r0, 0xc) 2m48.64424664s ago: executing program 3 (id=9976): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x30) 2m48.300553657s ago: executing program 3 (id=9983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m47.983110213s ago: executing program 3 (id=9987): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) 2m36.987454599s ago: executing program 5 (id=10106): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m36.745893313s ago: executing program 5 (id=10111): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,,:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 2m36.493897676s ago: executing program 5 (id=10115): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 2m36.225908259s ago: executing program 5 (id=10120): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m35.736426074s ago: executing program 5 (id=10126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x84}, 0x1, 0xbb1414ac}, 0x0) 2m35.373881181s ago: executing program 5 (id=10132): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xff, 0x7, 0xb) 2m34.820678102s ago: executing program 33 (id=10132): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xff, 0x7, 0xb) 2m31.786518373s ago: executing program 34 (id=9987): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) 2m22.654495452s ago: executing program 0 (id=10238): r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 2m22.348408099s ago: executing program 0 (id=10240): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x9, @pix={0x0, 0xfffffffc, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) 2m22.207745501s ago: executing program 0 (id=10242): r0 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='uid', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) 2m21.997609922s ago: executing program 0 (id=10244): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000240)={[{@dmask={'dmask', 0x3d, 0x1}}, {@sys_tz}, {}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@zero_size_dir}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@sys_tz}]}, 0x4, 0x152f, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) 2m21.618732555s ago: executing program 0 (id=10248): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 2m21.141279322s ago: executing program 0 (id=10251): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0x4, 0xffff9491, 0x9, 0x47425247, [0xa, 0x62a3ccb0], [0x3, 0x401], 0x1}}) 2m20.525797695s ago: executing program 35 (id=10251): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0x4, 0xffff9491, 0x9, 0x47425247, [0xa, 0x62a3ccb0], [0x3, 0x401], 0x1}}) 2m11.091798034s ago: executing program 2 (id=10347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000300)) 2m10.750991358s ago: executing program 2 (id=10351): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000002000)={[{@map_off}, {@check_relaxed, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 2m10.409084345s ago: executing program 2 (id=10353): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 2m10.162512602s ago: executing program 2 (id=10357): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 2m10.060256503s ago: executing program 2 (id=10359): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000001840)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0, 0x0, 0x11000}}], 0x1, 0x40004) 2m8.141039654s ago: executing program 2 (id=10369): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040)=0x2, 0x4) 2m7.684973298s ago: executing program 36 (id=10369): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040)=0x2, 0x4) 3.527866188s ago: executing program 8 (id=11895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x42, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0xb, 0x70bd2d, 0x25dfdbff, {}, [{0x64, 0x1, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x9, 0x8, 0x8, 0xfffffff6}}, @TCA_GACT_PROB={0x0, 0x3, {0x3, 0x1124, 0x5}}]}, {0x4, 0x6, "f1264d5c4f6a24cc77ac4f6c8150a62f4527ca2a201638fb630002a62339f42edcf88b803626a3e27a5227110e1816ed770e5a2dce3c9120f5e84103d19e9799fad076eaca6ba940f11fe9b6eb3d42d062d0fba7e7efe1eac99518621cca7b544f9165605ab5983f31199444641561894af40c59de80451c8c70d9ae943fd4789ef500"/142}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}}, 0x44) 3.116079407s ago: executing program 8 (id=11903): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402"], 0x0) 2.917063692s ago: executing program 1 (id=11907): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000540)) 2.58383388s ago: executing program 1 (id=11911): r0 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x18120, 0x0) 2.391953955s ago: executing program 1 (id=11915): r0 = io_uring_setup(0x7eba, &(0x7f0000001980)={0x0, 0x4615, 0x100, 0xfffffffb, 0x20}) io_uring_enter(r0, 0x0, 0xc7, 0x4b, 0x0, 0x0) 2.145866021s ago: executing program 1 (id=11919): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000480)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000400)="a7afb9be42997cdf6b920e8e95b03dedda03f63fe5bd1e338fbd55c6c3d5a1b01b973277", 0x24}], 0x2) 1.919818339s ago: executing program 1 (id=11924): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 1.713828902s ago: executing program 7 (id=11927): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000001000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000300d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1.579285258s ago: executing program 7 (id=11930): madvise(&(0x7f0000fae000/0x1000)=nil, 0x1000, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.469117498s ago: executing program 4 (id=11932): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="800004000000c3", 0x7}, {&(0x7f0000000180)="b1", 0x1}], 0x2, &(0x7f0000000180)=ANY=[], 0x30}}], 0x1, 0x0) 1.370319802s ago: executing program 6 (id=11933): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x11e}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 1.352444931s ago: executing program 9 (id=11934): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0xb, 0x6, {{0x5, 0x4, 0x3, 0xb, 0x14, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) 1.330926533s ago: executing program 4 (id=11935): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) 1.283474799s ago: executing program 7 (id=11936): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="a403", 0x2}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x4, 0x8, 0x2, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x38, 0x40}, 0x40000) 1.179564483s ago: executing program 9 (id=11937): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x1d, &(0x7f0000000480)=0x1, 0x4) 1.16785225s ago: executing program 6 (id=11938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 1.138139274s ago: executing program 4 (id=11939): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 1.023494858s ago: executing program 8 (id=11940): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b23520887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d190890e0878f0e1ac6e7049b3360959bfc9a240d2567f3988f7ef319520100ffe8d178708c503c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) 1.007022114s ago: executing program 7 (id=11941): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34, 0x700}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) 936.187043ms ago: executing program 6 (id=11942): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) 881.220502ms ago: executing program 9 (id=11943): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23}, 0x94) 880.996414ms ago: executing program 4 (id=11944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000032680)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) 864.018783ms ago: executing program 1 (id=11945): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x7ffffffc, 0x7ec, 0x200000fffe, 0xfffffffffffffffc, 0xff, 0x1, 0x7ff3}) 779.729304ms ago: executing program 7 (id=11946): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 682.702135ms ago: executing program 8 (id=11947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellinkprop={0x34, 0x6d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2101a, 0x2800}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gretap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044064}, 0x4000840) 681.639485ms ago: executing program 9 (id=11948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1b4}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 596.369537ms ago: executing program 6 (id=11949): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 585.98299ms ago: executing program 4 (id=11950): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x162, &(0x7f00000005c0)="$eJzs2rFKw0AYB/BPGi3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BHyOimi4MvEUlzhCQWzSDkhP9vyR++NPlyV77pOv7U67KgQ7Q/uzv92PKnXrNnHw1Zlw0o0SeiZhzCKHrQ6Zu3tB5GpK+4oVo7n8m1tTcWJzfM5Y5VdUsAAAAAAAAAAAAAAAAAAAAAAFBSuyFDYyK8a+Zyp5upBi3tfMC54wcVtVe5dlOe4SIm+GO8Pnb+hrNNGVxx7Md1M//7exl2J4K/F9fXuPRmRjBfdFxvMHbGzoVl2T3zwDQPLWP5LKP4xPaT7InC6NnUKZLSeua82WuZ82Zy/7VtV9xeFd8WzBdy/xUIa2q0UTLUiEiBNlQKfU2xf9S/CTVSoo1MSEfExsqpov06d1TRWE+uo7rdeonnnz6c8pEsLr+1Tn+0ZvJNlC9V9eEA8LOvAAAA//8Jlzfq") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) 540.739027ms ago: executing program 8 (id=11951): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2) 369.212566ms ago: executing program 9 (id=11952): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x9, 0x2, 0x1, "d55600e1dd2f1a078be8d0931af4003bb7a9c01f88920f00001e00000400", 0x30395056}) 316.539773ms ago: executing program 6 (id=11953): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, {0x0, 0xfbff, 0x9, 0x0, 0x0, 0xffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8d1, 0x0, "d20bddda7d1db9342de76eec7967fe97752251560ed100"}}) 260.470815ms ago: executing program 8 (id=11954): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22a00) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000000c0)={0x3, 0x6, 0x511}) 259.700243ms ago: executing program 7 (id=11955): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08010000000000002900000002000000", @ANYRESHEX], 0x108}}], 0x2, 0x0) 201.918317ms ago: executing program 4 (id=11956): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1005, 0xe0882) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 34.480508ms ago: executing program 9 (id=11957): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) acct(0x0) 0s ago: executing program 6 (id=11958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fcffffea0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): 968.899265][T30137] loop1: detected capacity change from 0 to 1024 [ 968.921935][T30137] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 969.218197][T29735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.309589][T30146] netlink: 'syz.1.10397': attribute type 4 has an invalid length. [ 969.309655][T18174] Bluetooth: hci3: command tx timeout [ 969.317444][T30146] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10397'. [ 969.402598][ T3478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.419751][T30148] loop6: detected capacity change from 0 to 128 [ 969.440474][T29522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.526150][T30068] chnl_net:caif_netlink_parms(): no params data found [ 969.680063][ T3478] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode [ 969.708592][ T3478] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 969.721360][ T3478] bridge0: port 1(netdevsim2) entered disabled state [ 969.744301][ T3478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.805384][T29459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.033890][ T3478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.047873][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.047943][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.049364][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.049395][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.049836][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.049864][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.050215][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.050243][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.050585][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 970.126376][T29735] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.292765][ T3478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.526332][T21961] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.533570][T21961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.572740][T21961] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.579920][T21961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.622585][T30068] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.667494][T30068] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.688996][T30068] bridge_slave_0: entered allmulticast mode [ 970.713987][T30068] bridge_slave_0: entered promiscuous mode [ 970.758655][T30068] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.778140][T30068] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.791636][T30068] bridge_slave_1: entered allmulticast mode [ 970.813868][T30068] bridge_slave_1: entered promiscuous mode [ 970.993517][T30193] loop6: detected capacity change from 0 to 256 [ 971.045919][T30068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.085599][T30068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.505192][T30068] team0: Port device team_slave_0 added [ 971.533352][T18174] Bluetooth: hci3: command tx timeout [ 971.632248][T30068] team0: Port device team_slave_1 added [ 971.685465][T29522] veth0_vlan: entered promiscuous mode [ 971.812463][T30068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.819452][T30068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.883880][T30068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.973669][T30068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.980667][T30068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.047116][T30068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.076095][T29522] veth1_vlan: entered promiscuous mode [ 972.085556][T29459] veth0_vlan: entered promiscuous mode [ 972.166816][ T3478] bond_slave_0: left promiscuous mode [ 972.172635][ T3478] bond_slave_1: left promiscuous mode [ 972.719974][ T30] audit: type=1326 audit(2000000734.108:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30240 comm="syz.6.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 972.742445][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.753640][ T30] audit: type=1326 audit(2000000734.126:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30240 comm="syz.6.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 972.776081][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.783385][ T30] audit: type=1326 audit(2000000734.126:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30240 comm="syz.6.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 972.809987][ T30] audit: type=1326 audit(2000000734.126:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30240 comm="syz.6.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 972.832458][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.849261][ T30] audit: type=1326 audit(2000000734.126:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30240 comm="syz.6.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 972.996232][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.013378][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.025608][ T3478] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 973.037686][ T3478] bond0 (unregistering): Released all slaves [ 973.757042][T18174] Bluetooth: hci3: command tx timeout [ 973.874002][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.889612][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.906638][ T3478] bond0 (unregistering): Released all slaves [ 974.022476][ T3478] bond1 (unregistering): Released all slaves [ 974.255779][T29459] veth1_vlan: entered promiscuous mode [ 974.365137][T30068] hsr_slave_0: entered promiscuous mode [ 974.401074][T30068] hsr_slave_1: entered promiscuous mode [ 974.433582][T30068] debugfs: 'hsr0' already exists in 'hsr' [ 974.439354][T30068] Cannot create hsr debugfs directory [ 974.500856][T29522] veth0_macvtap: entered promiscuous mode [ 974.715291][T29522] veth1_macvtap: entered promiscuous mode [ 975.068101][T30298] netlink: 'syz.1.10452': attribute type 29 has an invalid length. [ 975.099038][T30298] __nla_validate_parse: 164 callbacks suppressed [ 975.099061][T30298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10452'. [ 975.271437][T30306] loop1: detected capacity change from 0 to 1024 [ 975.307496][ T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 975.376663][T30306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.439027][T30306] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 33: comm syz.1.10454: bad entry in directory: rec_len % 4 != 0 - offset=1024, inode=0, rec_len=2874, size=1024 fake=0 [ 975.483174][T29735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.494059][T29459] veth0_macvtap: entered promiscuous mode [ 975.503992][T29522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.533812][ T10] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 975.558943][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.568122][ T10] usb 7-1: config 0 has no interface number 0 [ 975.575487][ T10] usb 7-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 975.590764][ T10] usb 7-1: config 0 interface 235 has no altsetting 0 [ 975.617154][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 975.627247][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.649648][ T10] usb 7-1: Product: syz [ 975.653890][ T10] usb 7-1: Manufacturer: syz [ 975.658494][ T10] usb 7-1: SerialNumber: syz [ 975.703320][ T10] usb 7-1: config 0 descriptor?? [ 975.726290][ T10] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected [ 975.729764][T29459] veth1_macvtap: entered promiscuous mode [ 975.736599][ T10] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87 [ 975.763009][ T10] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7 [ 975.766447][T29522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.789751][ T10] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81 [ 975.830861][ T10] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1 [ 975.838806][ T10] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85 [ 975.891604][ T10] keyspan 7-1:0.235: unsupported endpoint type 0 [ 975.908983][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 975.950488][ T10] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 975.980236][ T10] usb 7-1: USB disconnect, device number 5 [ 975.980658][T18174] Bluetooth: hci3: command tx timeout [ 976.039174][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 976.070872][ T10] keyspan 7-1:0.235: device disconnected [ 976.088532][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.106401][T29459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.139857][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.160763][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.192856][T29459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.252904][ T3478] hsr_slave_0: left promiscuous mode [ 976.278362][ T3478] hsr_slave_1: left promiscuous mode [ 976.285989][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.295146][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.305773][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.315663][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.337253][ T3478] hsr_slave_0: left promiscuous mode [ 976.346421][ T3478] hsr_slave_1: left promiscuous mode [ 976.352665][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.360588][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.370265][ T3478] batman_adv: batadv0: Interface deactivated: 26±ÿ [ 976.377921][ T3478] batman_adv: batadv0: Removing interface: 26±ÿ [ 976.430722][ T3478] veth1_vlan: left allmulticast mode [ 976.436228][ T3478] veth1_vlan: left promiscuous mode [ 976.444807][ T3478] veth1_macvtap: left promiscuous mode [ 976.450473][ T3478] veth0_macvtap: left promiscuous mode [ 976.457719][ T3478] veth1_vlan: left promiscuous mode [ 976.465141][ T3478] veth0_vlan: left promiscuous mode [ 976.966809][ T3478] team0 (unregistering): Port device macvlan1 removed [ 977.156538][T30346] loop6: detected capacity change from 0 to 512 [ 977.192247][T30346] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.10462: inode has both inline data and extents flags [ 977.211964][T30346] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.10462: couldn't read orphan inode 15 (err -117) [ 977.243964][T30346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.369878][T27740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.515083][T30351] loop1: detected capacity change from 0 to 4096 [ 977.529588][T30351] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 977.583509][T30351] ntfs3(loop1): ino=19, mi_enum_attr [ 977.637661][T30351] ntfs3(loop1): failed to convert "c46c" to iso8859-3 [ 977.671331][T30351] ntfs3(loop1): ino=20, mi_enum_attr [ 978.085475][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 978.133288][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 978.300552][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 978.480679][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 978.494041][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 978.503147][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.517114][ T24] usb 2-1: config 0 descriptor?? [ 978.527169][T30365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 978.765250][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 978.772497][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 978.789964][ T24] usb 2-1: USB disconnect, device number 8 [ 978.968330][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 979.011405][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 979.493423][T30369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10473'. [ 979.528606][ T3478] lo (unregistering): left allmulticast mode [ 979.544985][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.755970][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.775651][ T2939] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.979917][ T2939] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.060312][ T2939] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.404085][T29735] veth0_vlan: entered promiscuous mode [ 980.661138][T29735] veth1_vlan: entered promiscuous mode [ 980.736010][T21961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.767812][T21961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.811963][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.830799][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.138409][T29735] veth0_macvtap: entered promiscuous mode [ 981.139695][T30386] loop6: detected capacity change from 0 to 32768 [ 981.197364][T30386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10478 (30386) [ 981.277546][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.310980][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.319573][T29735] veth1_macvtap: entered promiscuous mode [ 981.331478][T30386] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 981.362884][T30386] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 981.539859][T30068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 981.595473][T30068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 981.617404][T30386] BTRFS info (device loop6): enabling ssd optimizations [ 981.647053][T30386] BTRFS info (device loop6): turning on async discard [ 981.654310][T30386] BTRFS info (device loop6): enabling free space tree [ 981.683468][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.701028][T29735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.720695][ T3478] IPVS: stop unused estimator thread 0... [ 981.723989][T30068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 981.733447][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.741090][T30422] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10166'. [ 981.790600][T30068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 981.833339][T29735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.961167][ T2939] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.990917][T27740] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 982.051452][ T2939] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.097156][ T2939] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.183877][T30398] loop1: detected capacity change from 0 to 40427 [ 982.227414][T30398] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 982.280687][ T2939] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.330739][T30398] F2FS-fs (loop1): invalid crc value [ 982.824843][T30398] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 982.898015][T21961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.913301][T30398] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 982.943290][T21961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.029766][T30068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.228766][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.236678][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.243596][T30068] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.263060][T30457] netlink: 'syz.8.10489': attribute type 39 has an invalid length. [ 983.344366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.351624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.403237][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.410464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.644869][T30466] loop6: detected capacity change from 0 to 128 [ 983.740106][T30466] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 983.804673][T30466] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 984.151946][T27740] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 984.364768][T30068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.196854][T30522] netlink: 'syz.7.10509': attribute type 11 has an invalid length. [ 985.204837][T30522] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10509'. [ 985.534570][T30535] program syz.9.10515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.649665][T30068] veth0_vlan: entered promiscuous mode [ 985.711104][T30068] veth1_vlan: entered promiscuous mode [ 985.902233][T30068] veth0_macvtap: entered promiscuous mode [ 985.950440][T30068] veth1_macvtap: entered promiscuous mode [ 986.071076][T30068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.130725][T30068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.203812][ T2939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.256998][ T2939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.270898][T30561] overlayfs: conflicting options: userxattr,metacopy=on [ 986.290674][ T2939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.300239][ T1204] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 986.348262][ T2939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.489465][ T8814] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 986.510883][ T1204] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 986.519030][ T1204] usb 7-1: config 0 has no interface number 0 [ 986.568402][ T1204] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 986.580336][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.603849][ T1204] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 986.607962][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.624239][T30572] qrtr: Invalid version 0 [ 986.635027][ T1204] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 986.660915][ T1204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.703356][ T8814] usb 10-1: Using ep0 maxpacket: 16 [ 986.714614][ T1204] usb 7-1: Product: syz [ 986.718815][ T1204] usb 7-1: Manufacturer: syz [ 986.756024][ T1204] usb 7-1: SerialNumber: syz [ 986.770939][ T8814] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 986.790262][ T1204] usb 7-1: config 0 descriptor?? [ 986.795346][ T8814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.811706][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.819552][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.829671][T30552] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 986.838735][ T8814] usb 10-1: Product: syz [ 986.859499][ T1204] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 986.870536][ T8814] usb 10-1: Manufacturer: syz [ 986.875928][ T8814] usb 10-1: SerialNumber: syz [ 986.923888][ T8814] usb 10-1: config 0 descriptor?? [ 986.939773][ T1204] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 986.959325][ T8814] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 987.341784][ T5910] usb 7-1: USB disconnect, device number 6 [ 987.394295][ T5910] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 987.408356][ T8814] ssu100 10-1:0.0: probe with driver ssu100 failed with error -71 [ 987.418425][T30564] loop1: detected capacity change from 0 to 32768 [ 987.458921][ T5910] cyberjack 7-1:0.69: device disconnected [ 987.469110][ T8814] usb 10-1: USB disconnect, device number 2 [ 987.500398][T30591] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.10534'. [ 987.532474][T30591] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 987.551145][T30564] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 987.630228][T30564] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 987.648256][T30597] sctp: [Deprecated]: syz.4.10536 (pid 30597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 987.648256][T30597] Use struct sctp_sack_info instead [ 987.922506][ T5975] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 987.934569][ T5837] ocfs2: Unmounting device (7,1) on (node local) [ 988.139058][ T5975] usb 9-1: Using ep0 maxpacket: 16 [ 988.170790][ T5975] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 988.202599][ T5975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.203456][T30607] loop4: detected capacity change from 0 to 2048 [ 988.244599][ T5975] usb 9-1: Product: syz [ 988.330819][ T5975] usb 9-1: Manufacturer: syz [ 988.335486][ T5975] usb 9-1: SerialNumber: syz [ 988.343527][T30617] loop6: detected capacity change from 0 to 512 [ 988.363339][T30607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.415762][T30617] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 988.428312][ T5975] usb 9-1: config 0 descriptor?? [ 988.472758][ T5975] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 988.517897][T30617] EXT4-fs (loop6): 1 truncate cleaned up [ 988.578371][T30617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.683162][T30617] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.10545: bg 0: block 4: invalid block bitmap [ 988.770904][ T5975] usb 9-1: USB disconnect, device number 2 [ 988.853054][T30633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 988.883346][T30625] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 988.958023][T30639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10547'. [ 988.993099][T30625] bond1 (unregistering): Released all slaves [ 989.015091][T27740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.046801][T30639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10547'. [ 989.361048][T30650] netlink: 'syz.4.10553': attribute type 16 has an invalid length. [ 989.409546][T30650] netlink: 'syz.4.10553': attribute type 3 has an invalid length. [ 989.417410][T30650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10553'. [ 989.568346][T30658] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10555'. [ 990.125501][T30681] loop9: detected capacity change from 0 to 512 [ 990.154429][T30681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 990.192345][T30681] EXT4-fs: Ignoring removed bh option [ 990.294122][T30681] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 990.315096][T30681] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #11: comm syz.9.10567: corrupted inode contents [ 990.348763][ T5975] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 990.356605][T30681] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #11: comm syz.9.10567: mark_inode_dirty error [ 990.381515][T30681] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.10567: invalid indirect mapped block 1 (level 1) [ 990.405717][T30688] loop1: detected capacity change from 0 to 4096 [ 990.432107][T30681] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #11: comm syz.9.10567: corrupted inode contents [ 990.508772][T30690] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.516352][T30681] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 990.549012][ T5975] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 990.567801][T30681] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #11: comm syz.9.10567: corrupted inode contents [ 990.569499][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.632417][T30681] EXT4-fs error (device loop9): ext4_truncate:4637: inode #11: comm syz.9.10567: mark_inode_dirty error [ 990.681273][T30681] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 990.721331][ T5975] usb 5-1: config 0 descriptor?? [ 990.739017][T30681] EXT4-fs (loop9): 1 truncate cleaned up [ 990.747650][ T5975] cp210x 5-1:0.0: cp210x converter detected [ 990.748820][T30645] loop7: detected capacity change from 0 to 32768 [ 990.802693][T30681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.874439][T30645] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 990.896886][T30681] EXT4-fs error (device loop9): ext4_find_dest_de:2052: inode #2: block 13: comm syz.9.10567: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 990.990494][ T5975] usb 5-1: cp210x converter now attached to ttyUSB0 [ 991.004138][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10572'. [ 991.204727][T29459] ocfs2: Unmounting device (7,7) on (node local) [ 991.255896][T25474] usb 5-1: USB disconnect, device number 121 [ 991.273024][T29735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.338598][T25474] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 991.372337][T25474] cp210x 5-1:0.0: device disconnected [ 991.919443][T30728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10584'. [ 992.264611][T30745] loop8: detected capacity change from 0 to 8 [ 992.272307][T30745] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 993.052814][T30773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10603'. [ 993.171523][T25474] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 993.375525][T25474] usb 2-1: Using ep0 maxpacket: 16 [ 993.417146][T25474] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 993.425378][T25474] usb 2-1: config 0 has no interface number 0 [ 993.480480][T25474] usb 2-1: config 0 interface 237 has no altsetting 0 [ 993.526220][T25474] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 993.567302][T25474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.619882][T25474] usb 2-1: Product: syz [ 993.630663][T25474] usb 2-1: Manufacturer: syz [ 993.641691][T25474] usb 2-1: SerialNumber: syz [ 993.675014][T25474] usb 2-1: config 0 descriptor?? [ 993.730566][T25474] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 993.872249][T30791] loop6: detected capacity change from 0 to 4096 [ 993.928924][T30791] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 993.979836][T25474] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 994.005319][T25474] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 994.055095][T25474] snd_usb_podhd 2-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 994.188342][T30791] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 994.235831][T25474] usb 2-1: USB disconnect, device number 9 [ 994.246547][T30791] ntfs3(loop6): ino=19, mi_enum_attr [ 994.250900][T30811] netlink: 260 bytes leftover after parsing attributes in process `syz.9.10619'. [ 994.340888][T30791] ntfs3(loop6): failed to convert "c46c" to cp863 [ 994.375867][T30791] ntfs3(loop6): ino=20, mi_enum_attr [ 994.592304][T30819] loop7: detected capacity change from 0 to 256 [ 994.662228][T30822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.734113][T30819] FAT-fs (loop7): Directory bread(block 64) failed [ 994.791447][T30819] FAT-fs (loop7): Directory bread(block 65) failed [ 994.856343][T30819] FAT-fs (loop7): Directory bread(block 66) failed [ 994.925571][T30819] FAT-fs (loop7): Directory bread(block 67) failed [ 994.932232][T30819] FAT-fs (loop7): Directory bread(block 68) failed [ 995.021745][T30819] FAT-fs (loop7): Directory bread(block 69) failed [ 995.028509][T30819] FAT-fs (loop7): Directory bread(block 70) failed [ 995.093369][T30819] FAT-fs (loop7): Directory bread(block 71) failed [ 995.136687][T30819] FAT-fs (loop7): Directory bread(block 72) failed [ 995.179613][T30819] FAT-fs (loop7): Directory bread(block 73) failed [ 995.373258][T30844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10631'. [ 995.400916][T30845] loop1: detected capacity change from 0 to 256 [ 995.446686][T30845] exfat: Deprecated parameter 'utf8' [ 995.566621][T30845] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 995.965076][T30862] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.654288][T30888] loop4: detected capacity change from 0 to 764 [ 996.701550][T30888] rock: directory entry would overflow storage [ 996.733786][T30888] rock: sig=0x4654, size=5, remaining=4 [ 997.014108][ T5824] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 997.245037][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 997.275742][ T5824] usb 7-1: unable to get BOS descriptor or descriptor too short [ 997.329518][ T5824] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 997.371108][ T5824] usb 7-1: config 13 has no interface number 0 [ 997.392732][ T5824] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 997.414410][ T5824] usb 7-1: config 13 interface 50 has no altsetting 0 [ 997.461587][ T5824] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 997.492732][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.526208][ T5824] usb 7-1: Product: syz [ 997.530439][ T5824] usb 7-1: Manufacturer: syz [ 997.559973][ T5824] usb 7-1: SerialNumber: syz [ 997.591935][T30925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.601635][T30895] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 997.698554][T30926] ALSA: mixer_oss: invalid OSS volume 'u' [ 997.857979][ T5824] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.874776][ T5824] usb 7-1: MIDIStreaming interface descriptor not found [ 998.014233][ T5824] usb 7-1: USB disconnect, device number 7 [ 998.205310][ T6092] udevd[6092]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 998.270318][T30899] loop1: detected capacity change from 0 to 32768 [ 998.306743][T30899] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10654 (30899) [ 998.442129][T30899] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 998.501342][T30899] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 998.661433][T30958] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10679'. [ 998.852186][T30899] BTRFS info (device loop1): enabling ssd optimizations [ 998.901127][T30899] BTRFS info (device loop1): turning on async discard [ 998.925101][T30899] BTRFS info (device loop1): enabling free space tree [ 998.931974][T30899] BTRFS info (device loop1): use lzo compression, level 1 [ 999.136657][T30990] loop6: detected capacity change from 0 to 512 [ 999.311518][ T5837] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 999.336794][T30990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.374477][T30991] loop9: detected capacity change from 0 to 4096 [ 999.389262][T30991] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 999.389304][T30990] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.425697][T30999] loop8: detected capacity change from 0 to 128 [ 999.434882][T30990] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz.6.10686: invalid size [ 999.648833][T30991] ntfs3(loop9): ino=19, mi_enum_attr [ 999.706763][T30991] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 999.749763][T27740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.815512][T30991] ntfs3(loop9): failed to convert "076c" to cp949 [ 999.907127][T30991] ntfs3(loop9): ino=20, mi_enum_attr [ 1000.100924][T31010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10691'. [ 1000.212120][T31014] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10693'. [ 1000.382158][T31021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10696'. [ 1000.415026][T31021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10696'. [ 1000.840752][T31037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10701'. [ 1001.158184][T30986] loop7: detected capacity change from 0 to 32768 [ 1001.294749][T30986] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1001.514397][T30986] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1001.607817][T30986] XFS (loop7): Starting recovery (logdev: internal) [ 1001.718445][T30986] XFS (loop7): Ending recovery (logdev: internal) [ 1001.801708][T31072] loop4: detected capacity change from 0 to 1764 [ 1001.839557][T30986] XFS (loop7): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 1001.910064][T30986] XFS (loop7): Unmount and run xfs_repair [ 1002.005195][T30986] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1002.054765][T30986] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 1002.063707][T30986] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 1002.153684][T30986] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1002.173889][T30986] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 1002.182863][T30986] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1002.241977][T30986] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1002.300662][T30986] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1002.360801][T30986] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1002.407637][T30986] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117 [ 1002.856369][T31064] loop6: detected capacity change from 0 to 32768 [ 1002.939811][T31065] loop1: detected capacity change from 0 to 32768 [ 1003.434554][T31111] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10729'. [ 1003.465441][T29459] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1003.485239][T29459] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair. [ 1003.923932][T31120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10732'. [ 1004.228214][T31126] loop4: detected capacity change from 0 to 128 [ 1004.302508][T31126] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1004.369952][T31126] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1004.475056][T31126] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz.4.10734: No space for directory leaf checksum. Please run e2fsck -D. [ 1004.556398][T31126] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #11: comm syz.4.10734: checksumming directory block 0 [ 1004.753761][T30068] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1004.803134][T31141] snd_dummy snd_dummy.0: control 4:4:4:syz0:4096 is already present [ 1004.903444][T31145] loop6: detected capacity change from 0 to 1764 [ 1005.024647][T31117] loop8: detected capacity change from 0 to 32768 [ 1005.057220][T31117] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.10731 (31117) [ 1005.157178][T31117] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1005.195641][T31152] xt_TCPMSS: Only works on TCP SYN packets [ 1005.246153][T31117] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1005.578857][T31117] BTRFS info (device loop8): enabling ssd optimizations [ 1005.608083][T31117] BTRFS info (device loop8): turning on async discard [ 1005.651529][T31117] BTRFS info (device loop8): enabling free space tree [ 1005.942270][T31187] trusted_key: encrypted_key: keylen parameter is missing [ 1006.005575][T29522] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1006.470579][T31210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10756'. [ 1007.343722][T31233] loop6: detected capacity change from 0 to 1024 [ 1007.908459][T31258] loop1: detected capacity change from 0 to 512 [ 1008.035455][T31258] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.10778: bad orphan inode 15 [ 1008.124568][T31258] ext4_test_bit(bit=14, block=5) = 0 [ 1008.160979][T31258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.431900][T31274] wireguard0: entered promiscuous mode [ 1008.448872][T31274] wireguard0: entered allmulticast mode [ 1008.618507][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.805204][T31241] loop9: detected capacity change from 0 to 32768 [ 1008.864040][T31293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1008.893618][T31241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.10771 (31241) [ 1008.954177][T31293] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1008.991711][T31293] gretap1: entered promiscuous mode [ 1009.013919][T31241] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1009.036035][T31293] gretap1: entered allmulticast mode [ 1009.036171][T31300] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1009.036171][T31300] SÃȘØÈžZ§6ŸÂ' [ 1009.132217][T31241] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1009.456801][T31326] loop4: detected capacity change from 0 to 256 [ 1009.526474][T31241] BTRFS info (device loop9): enabling ssd optimizations [ 1009.568114][T31241] BTRFS info (device loop9): turning on async discard [ 1009.639258][T31241] BTRFS info (device loop9): enabling free space tree [ 1009.902224][T29735] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1010.654491][T31370] loop6: detected capacity change from 0 to 256 [ 1010.785243][T31370] FAT-fs (loop6): Directory bread(block 64) failed [ 1010.822618][T31370] FAT-fs (loop6): Directory bread(block 65) failed [ 1010.906097][T31370] FAT-fs (loop6): Directory bread(block 66) failed [ 1010.960101][T31370] FAT-fs (loop6): Directory bread(block 67) failed [ 1011.024331][T31370] FAT-fs (loop6): Directory bread(block 68) failed [ 1011.030918][T31370] FAT-fs (loop6): Directory bread(block 69) failed [ 1011.092477][T31370] FAT-fs (loop6): Directory bread(block 70) failed [ 1011.122478][T31370] FAT-fs (loop6): Directory bread(block 71) failed [ 1011.152547][T31370] FAT-fs (loop6): Directory bread(block 72) failed [ 1011.168848][T31386] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10823'. [ 1011.203283][T31370] FAT-fs (loop6): Directory bread(block 73) failed [ 1011.234785][T31386] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10823'. [ 1011.573600][T31393] loop7: detected capacity change from 0 to 4096 [ 1011.587503][T31397] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1011.637078][T31401] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1012.334243][T31420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10837'. [ 1012.419621][T31425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.714035][T31434] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10842'. [ 1013.203493][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10850'. [ 1013.255791][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10850'. [ 1013.499684][T31465] comedi comedi0: Minor 128 is invalid! [ 1013.528196][T31466] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.10853'. [ 1013.581545][T31466] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1014.536273][T31509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10875'. [ 1014.583415][T31509] netlink: 312 bytes leftover after parsing attributes in process `syz.1.10875'. [ 1014.802145][T31519] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10879'. [ 1014.887831][T31524] loop6: detected capacity change from 0 to 256 [ 1015.029850][T31524] FAT-fs (loop6): Directory bread(block 64) failed [ 1015.071849][T31524] FAT-fs (loop6): Directory bread(block 65) failed [ 1015.082699][T31524] FAT-fs (loop6): Directory bread(block 66) failed [ 1015.118921][T31524] FAT-fs (loop6): Directory bread(block 67) failed [ 1015.125609][T31524] FAT-fs (loop6): Directory bread(block 68) failed [ 1015.189676][T31524] FAT-fs (loop6): Directory bread(block 69) failed [ 1015.239226][T31524] FAT-fs (loop6): Directory bread(block 70) failed [ 1015.245820][T31524] FAT-fs (loop6): Directory bread(block 71) failed [ 1015.304566][T31524] FAT-fs (loop6): Directory bread(block 72) failed [ 1015.343265][T31524] FAT-fs (loop6): Directory bread(block 73) failed [ 1015.508049][ T30] audit: type=1800 audit(2000000774.124:245): pid=31524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10880" name="file7" dev="loop6" ino=1048748 res=0 errno=0 [ 1015.542331][T31545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10888'. [ 1015.835372][ T5967] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1015.925973][T31513] loop7: detected capacity change from 0 to 32768 [ 1016.017188][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 1016.028990][ T5967] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1016.038839][T31513] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1016.049381][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.059150][ T5967] usb 2-1: Product: syz [ 1016.078566][ T5967] usb 2-1: Manufacturer: syz [ 1016.079311][T31513] (syz.7.10873,31513,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 1016.083348][ T5967] usb 2-1: SerialNumber: syz [ 1016.086389][ T5967] usb 2-1: config 0 descriptor?? [ 1016.114860][ T5967] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1016.198607][T31513] (syz.7.10873,31513,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 1016.207437][T31513] (syz.7.10873,31513,1):ocfs2_mknod:301 ERROR: status = -2 [ 1016.282133][T31513] (syz.7.10873,31513,0):ocfs2_mknod:505 ERROR: status = -2 [ 1016.352894][T31513] (syz.7.10873,31513,1):ocfs2_create:678 ERROR: status = -2 [ 1016.559210][ T5967] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1016.596210][ T5967] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1016.633481][ T5967] usb 2-1: USB disconnect, device number 10 [ 1016.651673][T29459] ocfs2: Unmounting device (7,7) on (node local) [ 1016.719255][ T30] audit: type=1326 audit(2000000775.265:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.4.10901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1016.852420][ T30] audit: type=1326 audit(2000000775.293:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.4.10901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1017.075175][ T30] audit: type=1326 audit(2000000775.602:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.4.10901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1017.223408][ T30] audit: type=1326 audit(2000000775.602:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.4.10901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1018.338049][T31587] loop9: detected capacity change from 0 to 32768 [ 1018.438495][T31587] ialloc: diAlloc returned -17! [ 1018.566368][ T30] audit: type=1326 audit(2000000776.996:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.6.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 1018.710915][ T30] audit: type=1326 audit(2000000776.996:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.6.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 1018.860517][ T30] audit: type=1326 audit(2000000777.024:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.6.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 1018.978014][ T30] audit: type=1326 audit(2000000777.024:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.6.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 1019.052846][ T30] audit: type=1326 audit(2000000777.024:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.6.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058efc9 code=0x7ffc0000 [ 1019.352902][T31670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10938'. [ 1019.497045][T31674] loop1: detected capacity change from 0 to 64 [ 1019.636546][T31674] Trying to free block not in datazone [ 1020.109579][T31702] mac80211_hwsim hwsim34 4: renamed from wlan1 (while UP) [ 1020.568031][T31713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.858178][T31693] loop6: detected capacity change from 0 to 32768 [ 1020.903702][T31693] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10946 (31693) [ 1021.030463][T31693] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1021.102426][T31693] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1021.339591][T31693] BTRFS info (device loop6): turning off barriers [ 1021.415659][T31693] BTRFS info (device loop6): enabling free space tree [ 1021.809588][T27740] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1021.921202][T31705] loop8: detected capacity change from 0 to 32768 [ 1021.989861][T31768] loop7: detected capacity change from 0 to 2048 [ 1022.044197][T31705] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1022.065327][T31768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1022.261388][ T5967] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1022.424356][T31705] XFS (loop8): Ending clean mount [ 1022.452867][ T5824] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1022.484784][ T5967] usb 2-1: Using ep0 maxpacket: 32 [ 1022.500976][T31705] XFS (loop8): Quotacheck needed: Please wait. [ 1022.533282][ T5967] usb 2-1: config 1 has an invalid interface number: 232 but max is 0 [ 1022.573448][ T5967] usb 2-1: config 1 has no interface number 0 [ 1022.579607][ T5967] usb 2-1: config 1 interface 232 has no altsetting 0 [ 1022.660538][ T5824] usb 8-1: config index 0 descriptor too short (expected 539, got 27) [ 1022.687188][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 4 [ 1022.704444][ T5967] usb 2-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=fd.d5 [ 1022.741634][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.756537][T31705] XFS (loop8): Quotacheck: Done. [ 1022.774075][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1023 [ 1022.814052][ T5967] usb 2-1: Product: syz [ 1022.837517][ T5967] usb 2-1: Manufacturer: syz [ 1022.843957][ T5967] usb 2-1: SerialNumber: syz [ 1022.917481][ T5824] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1022.941855][ T5967] uvcvideo 2-1:1.232: Found Unit with invalid ID 0 [ 1022.952838][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.993728][ T5824] usb 8-1: Product: syz [ 1023.004297][ T5824] usb 8-1: Manufacturer: syz [ 1023.019178][ T5824] usb 8-1: SerialNumber: syz [ 1023.048963][ T5824] usb 8-1: config 0 descriptor?? [ 1023.083745][ T1204] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1023.097628][ T5824] hub 8-1:0.0: bad descriptor, ignoring hub [ 1023.098005][T29522] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1023.103576][ T5824] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1023.174139][ T5967] uvcvideo 2-1:1.232: Found UVC 0.00 device syz (174f:8a34) [ 1023.187995][ T5824] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input71 [ 1023.208791][ T5967] uvcvideo 2-1:1.232: No valid video chain found. [ 1023.230195][ T5824] usbtouchscreen 8-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 1023.297934][ T5824] usbtouchscreen 8-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 1023.308029][ T1204] usb 5-1: Using ep0 maxpacket: 32 [ 1023.332954][ T1204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.372061][ T1204] usb 5-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 0.08 [ 1023.418866][ T5824] usb 8-1: USB disconnect, device number 2 [ 1023.433920][ T1204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.488751][ T10] usb 2-1: USB disconnect, device number 11 [ 1023.508368][ T1204] usb 5-1: config 0 descriptor?? [ 1023.598995][ T1204] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1023.646955][ T1204] usb 5-1: Detected SIO [ 1023.674005][ T1204] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 1 [ 1023.695241][ T1204] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1023.794376][ T5824] usb 5-1: USB disconnect, device number 122 [ 1023.853738][ T5824] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1023.880194][ T5824] ftdi_sio 5-1:0.0: device disconnected [ 1024.206309][T31804] loop9: detected capacity change from 0 to 32768 [ 1024.284748][T31819] geneve2: entered promiscuous mode [ 1024.344497][T31819] geneve2: entered allmulticast mode [ 1024.637965][T25474] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1024.836922][T25474] usb 8-1: Using ep0 maxpacket: 32 [ 1024.855241][T25474] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.905533][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10993'. [ 1024.938184][T31843] netlink: 220 bytes leftover after parsing attributes in process `syz.9.10994'. [ 1024.945346][T25474] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1024.979495][T25474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.011556][T25474] usb 8-1: Product: syz [ 1025.029874][T25474] usb 8-1: Manufacturer: syz [ 1025.038481][T25474] usb 8-1: SerialNumber: syz [ 1025.071324][T25474] usb 8-1: config 0 descriptor?? [ 1025.140451][T25474] usb 8-1: bad CDC descriptors [ 1025.172596][T25474] usb 8-1: unsupported MDLM descriptors [ 1025.348160][T25474] usb 8-1: USB disconnect, device number 3 [ 1025.372540][ T30] audit: type=1326 audit(2000000783.366:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.9.10999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a11f8efc9 code=0x7ffc0000 [ 1025.507467][ T30] audit: type=1326 audit(2000000783.366:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.9.10999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f1a11f8efc9 code=0x7ffc0000 [ 1025.568550][T31856] loop1: detected capacity change from 0 to 4096 [ 1025.595717][ T30] audit: type=1326 audit(2000000783.366:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.9.10999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a11f8efc9 code=0x7ffc0000 [ 1025.715187][T31856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.734605][ T30] audit: type=1326 audit(2000000783.366:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.9.10999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a11f8efc9 code=0x7ffc0000 [ 1025.772646][T31871] loop4: detected capacity change from 0 to 1764 [ 1026.107650][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.876555][T31911] loop7: detected capacity change from 0 to 1024 [ 1026.913039][T31911] EXT4-fs: Ignoring removed oldalloc option [ 1026.973826][T31911] EXT4-fs: Ignoring removed bh option [ 1027.052255][T31911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.320800][T29459] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.893073][T31953] loop9: detected capacity change from 0 to 64 [ 1027.963304][T31953] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1028.049920][T31953] minix_free_inode: bit 5 already cleared [ 1028.931666][T31999] loop7: detected capacity change from 0 to 8 [ 1029.566385][T32033] loop4: detected capacity change from 0 to 256 [ 1029.691987][T32033] FAT-fs (loop4): Directory bread(block 64) failed [ 1029.723996][T32037] netlink: 830 bytes leftover after parsing attributes in process `syz.7.11074'. [ 1029.727063][T32033] FAT-fs (loop4): Directory bread(block 65) failed [ 1029.782136][T32033] FAT-fs (loop4): Directory bread(block 66) failed [ 1029.857568][T32033] FAT-fs (loop4): Directory bread(block 67) failed [ 1029.894738][T32033] FAT-fs (loop4): Directory bread(block 68) failed [ 1029.901448][T32033] FAT-fs (loop4): Directory bread(block 69) failed [ 1029.967372][T32033] FAT-fs (loop4): Directory bread(block 70) failed [ 1030.021124][T32033] FAT-fs (loop4): Directory bread(block 71) failed [ 1030.052489][T32033] FAT-fs (loop4): Directory bread(block 72) failed [ 1030.092824][T32033] FAT-fs (loop4): Directory bread(block 73) failed [ 1030.582389][T32071] netlink: 'syz.7.11087': attribute type 21 has an invalid length. [ 1030.637032][T32071] netlink: 164 bytes leftover after parsing attributes in process `syz.7.11087'. [ 1031.164638][T32094] loop4: detected capacity change from 0 to 1024 [ 1031.387025][T32101] loop8: detected capacity change from 0 to 64 [ 1031.949273][T32122] gre1: entered promiscuous mode [ 1031.954278][T32122] gre1: entered allmulticast mode [ 1032.305250][T32137] netlink: 'syz.1.11115': attribute type 8 has an invalid length. [ 1032.800491][T32154] loop9: detected capacity change from 0 to 128 [ 1032.854565][ T30] audit: type=1326 audit(2000000790.353:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32155 comm="syz.4.11123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1032.904223][T32154] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1032.977230][ T30] audit: type=1326 audit(2000000790.353:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32155 comm="syz.4.11123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1033.000543][ T30] audit: type=1326 audit(2000000790.381:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32155 comm="syz.4.11123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1033.024185][ T30] audit: type=1326 audit(2000000790.381:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32155 comm="syz.4.11123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1033.087064][ T30] audit: type=1326 audit(2000000790.381:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32155 comm="syz.4.11123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1033.333109][T29735] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1033.682210][T32189] loop7: detected capacity change from 0 to 1024 [ 1034.010788][ T5824] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1034.265610][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 1034.305419][ T5824] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 1034.340539][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.391452][ T5824] usb 5-1: config 0 descriptor?? [ 1034.414375][T32213] loop9: detected capacity change from 0 to 4096 [ 1034.426963][ T5975] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1034.461130][T32213] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1034.621041][T32213] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1034.637345][ T5824] usb 5-1: USB disconnect, device number 123 [ 1034.644019][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 1034.677018][ T5975] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 1034.695340][T32213] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 1034.705176][ T5975] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.733735][ T5975] usb 2-1: config 4 has no interface number 0 [ 1034.789613][ T5975] usb 2-1: config 4 interface 9 altsetting 2 endpoint 0x4 has invalid maxpacket 3840, setting to 64 [ 1034.838738][ T5975] usb 2-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.878028][ T5975] usb 2-1: config 4 interface 9 has no altsetting 0 [ 1034.909662][ T5975] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1034.934697][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.946564][ T12] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1034.970751][ T5975] usb 2-1: Product: syz [ 1034.985214][T29735] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1034.992899][T29735] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1035.012983][ T5975] usb 2-1: Manufacturer: syz [ 1035.018516][T29735] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1035.028885][ T5975] usb 2-1: SerialNumber: syz [ 1035.064960][ T12] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1035.123550][ T5975] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1035.294113][ T5975] usb 2-1: USB disconnect, device number 12 [ 1035.305877][ T3478] usb 2-1: Failed to submit usb control message: -71 [ 1035.330699][ T3478] usb 2-1: unable to send the bmi data to the device: -71 [ 1035.361531][ T3478] usb 2-1: unable to get target info from device [ 1035.398763][ T3478] usb 2-1: could not get target info (-71) [ 1035.405102][ T3478] usb 2-1: could not probe fw (-71) [ 1035.790024][T32268] dvmrp9: entered allmulticast mode [ 1035.803705][T32271] loop8: detected capacity change from 0 to 8 [ 1035.953182][T32271] SQUASHFS error: Corrupted symlink [ 1036.936614][T32312] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11186'. [ 1037.013844][T32312] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11186'. [ 1037.357530][T32328] loop4: detected capacity change from 0 to 24 [ 1037.388798][T32328] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1037.451493][T32334] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11193'. [ 1037.460899][T32333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11194'. [ 1037.476614][T32328] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1037.480448][T32335] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11195'. [ 1037.570859][T32328] romfs: read error for inode 0x70040 [ 1037.827234][T32344] loop9: detected capacity change from 0 to 16 [ 1037.844479][T32346] syz.7.11199: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1037.902410][T32346] CPU: 0 UID: 0 PID: 32346 Comm: syz.7.11199 Not tainted syzkaller #0 PREEMPT(full) [ 1037.902448][T32346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1037.902466][T32346] Call Trace: [ 1037.902477][T32346] [ 1037.902489][T32346] dump_stack_lvl+0x189/0x250 [ 1037.902538][T32346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1037.902577][T32346] ? __pfx__printk+0x10/0x10 [ 1037.902606][T32346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1037.902645][T32346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1037.902685][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.902717][T32346] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1037.902759][T32346] warn_alloc+0x214/0x310 [ 1037.902800][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.902831][T32346] ? stack_depot_save_flags+0x41b/0x860 [ 1037.902879][T32346] ? __pfx_warn_alloc+0x10/0x10 [ 1037.902923][T32346] ? kasan_save_track+0x3e/0x80 [ 1037.902960][T32346] ? __kasan_kmalloc+0x93/0xb0 [ 1037.903002][T32346] ? xsk_setsockopt+0x4dc/0x8d0 [ 1037.903030][T32346] ? do_sock_setsockopt+0x17c/0x1b0 [ 1037.903055][T32346] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1037.903080][T32346] ? do_syscall_64+0xfa/0xfa0 [ 1037.903121][T32346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.903159][T32346] __vmalloc_node_range_noprof+0x125/0x12d0 [ 1037.903237][T32346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1037.903282][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.903312][T32346] ? __kasan_kmalloc+0x93/0xb0 [ 1037.903355][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.903391][T32346] vmalloc_user_noprof+0xad/0xf0 [ 1037.903435][T32346] ? xskq_create+0xbf/0x170 [ 1037.903470][T32346] xskq_create+0xbf/0x170 [ 1037.903507][T32346] xsk_init_queue+0xb0/0x110 [ 1037.903542][T32346] xsk_setsockopt+0x4dc/0x8d0 [ 1037.903576][T32346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.903610][T32346] ? __pfx_aa_sk_perm+0x10/0x10 [ 1037.903646][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.903682][T32346] ? aa_sock_opt_perm+0xff/0x1b0 [ 1037.903727][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.903757][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.903788][T32346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.903820][T32346] do_sock_setsockopt+0x17c/0x1b0 [ 1037.903852][T32346] __x64_sys_setsockopt+0x13f/0x1b0 [ 1037.903886][T32346] do_syscall_64+0xfa/0xfa0 [ 1037.903920][T32346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1037.903956][T32346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.903981][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.904011][T32346] ? exc_page_fault+0xab/0x100 [ 1037.904049][T32346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.904075][T32346] RIP: 0033:0x7f8afbf8efc9 [ 1037.904100][T32346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.904129][T32346] RSP: 002b:00007f8afcd4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1037.904157][T32346] RAX: ffffffffffffffda RBX: 00007f8afc1e5fa0 RCX: 00007f8afbf8efc9 [ 1037.904177][T32346] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1037.904194][T32346] RBP: 00007f8afc011f91 R08: 0000000000000004 R09: 0000000000000000 [ 1037.904212][T32346] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.904230][T32346] R13: 00007f8afc1e6038 R14: 00007f8afc1e5fa0 R15: 00007ffdf55f1098 [ 1037.904272][T32346] [ 1037.938998][T32294] loop1: detected capacity change from 0 to 32768 [ 1037.942720][T32346] Mem-Info: [ 1038.104016][T32344] erofs (device loop9): mounted with root inode @ nid 36. [ 1038.125714][T32346] active_anon:13382 inactive_anon:0 isolated_anon:0 [ 1038.125714][T32346] active_file:14229 inactive_file:40722 isolated_file:0 [ 1038.125714][T32346] unevictable:768 dirty:485 writeback:0 [ 1038.125714][T32346] slab_reclaimable:7720 slab_unreclaimable:104686 [ 1038.125714][T32346] mapped:36170 shmem:5533 pagetables:1987 [ 1038.125714][T32346] sec_pagetables:0 bounce:0 [ 1038.125714][T32346] kernel_misc_reclaimable:0 [ 1038.125714][T32346] free:1284178 free_pcp:12904 free_cma:0 [ 1038.440499][T32294] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1038.453561][T32346] Node 0 active_anon:53648kB inactive_anon:0kB active_file:56916kB inactive_file:162704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144792kB dirty:1948kB writeback:0kB shmem:20600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13000kB pagetables:7436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1038.574119][T32294] (syz.1.11178,32294,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 1038.638124][T32346] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1038.751107][T32346] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.842171][ T5910] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1038.952855][ T5837] ocfs2: Unmounting device (7,1) on (node local) [ 1038.976254][T32346] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 1039.007666][T32346] Node 0 DMA32 free:1214792kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54748kB inactive_anon:0kB active_file:56916kB inactive_file:162704kB unevictable:1536kB writepending:1948kB zspages:0kB present:3129332kB managed:2565184kB mlocked:0kB bounce:0kB free_pcp:40456kB local_pcp:24736kB free_cma:0kB [ 1039.065827][ T5910] usb 9-1: Using ep0 maxpacket: 32 [ 1039.097441][ T5910] usb 9-1: config 0 has an invalid interface number: 244 but max is 0 [ 1039.140597][ T5910] usb 9-1: config 0 has no interface number 0 [ 1039.146764][ T5910] usb 9-1: config 0 interface 244 has no altsetting 0 [ 1039.204801][T32346] lowmem_reserve[]: 0 0 0 0 0 [ 1039.209603][T32346] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1039.231731][ T5910] usb 9-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1039.269982][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.289060][ T5910] usb 9-1: Product: syz [ 1039.310647][ T5910] usb 9-1: Manufacturer: syz [ 1039.321421][ T5910] usb 9-1: SerialNumber: syz [ 1039.328587][T32346] lowmem_reserve[]: 0 0 0 0 0 [ 1039.340699][ T5910] usb 9-1: config 0 descriptor?? [ 1039.361277][T32346] Node 1 Normal free:3905880kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9888kB local_pcp:0kB free_cma:0kB [ 1039.403510][ T5910] snd_usb_toneport 9-1:0.244: Line 6 GuitarPort found [ 1039.487450][T32346] lowmem_reserve[]: 0 0 0 0 0 [ 1039.492290][T32346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1039.563555][T32346] Node 0 DMA32: 1734*4kB (UME) 777*8kB (UME) 616*16kB (UME) 451*32kB (UME) 257*64kB (UME) 152*128kB (UME) 433*256kB (UME) 394*512kB (UME) 218*1024kB (UME) 9*2048kB (UM) 146*4096kB (UM) = 1225600kB [ 1039.602019][ T5910] snd_usb_toneport 9-1:0.244: cannot get proper max packet size [ 1039.629033][ T5910] snd_usb_toneport 9-1:0.244: Line 6 GuitarPort now disconnected [ 1039.645480][ T5910] snd_usb_toneport 9-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1039.655369][T32346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1039.661129][T32392] loop4: detected capacity change from 0 to 4096 [ 1039.696563][T32346] Node 1 Normal: 178*4kB (UME) 48*8kB (UME) 39*16kB (UME) 233*32kB (UME) 100*64kB (UME) 27*128kB (UME) 7*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UME) 945*4096kB (M) = 3905880kB [ 1039.726975][T32346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1039.741983][T32346] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1039.771365][T32346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1039.847073][T32346] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1039.856443][T32346] 56698 total pagecache pages [ 1039.897452][T30566] usb 9-1: USB disconnect, device number 3 [ 1039.956601][T32346] 0 pages in swap cache [ 1039.981076][T32392] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1039.983275][T32346] Free swap = 124996kB [ 1040.003340][T32392] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1040.038989][T32346] Total swap = 124996kB [ 1040.043818][T32346] 2097051 pages RAM [ 1040.050710][T32346] 0 pages HighMem/MovableOnly [ 1040.077983][T32402] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.085014][T32346] 424113 pages reserved [ 1040.147524][T32346] 0 pages cma reserved [ 1040.434300][T32392] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1040.535550][T32392] Remounting filesystem read-only [ 1040.783029][T32417] loop9: detected capacity change from 0 to 1764 [ 1041.044265][T32428] loop1: detected capacity change from 0 to 8 [ 1041.092400][T32428] cramfs: empty filesystem [ 1041.116691][ T5823] udevd[5823]: incorrect cramfs checksum on /dev/loop1 [ 1041.349773][T32443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11236'. [ 1041.386065][T32443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11236'. [ 1041.594510][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1042.541680][T30566] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1042.673095][T32493] loop7: detected capacity change from 0 to 2048 [ 1042.730986][T30566] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1042.731718][T32493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.777059][T30566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1042.830756][T30566] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1042.852437][T30566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.907141][T30566] usb 2-1: Product: syz [ 1042.933323][T30566] usb 2-1: Manufacturer: syz [ 1042.945797][T30566] usb 2-1: SerialNumber: syz [ 1042.965186][T30566] usb 2-1: config 0 descriptor?? [ 1043.195122][T30566] powermate: unknown product id 0240 [ 1043.244358][T30566] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input72 [ 1043.304969][ C1] powermate: config urb returned -71 [ 1043.310620][ C1] powermate: config urb returned -71 [ 1043.316820][ C1] powermate: config urb returned -71 [ 1043.322339][ C1] powermate: config urb returned -71 [ 1043.346936][T30566] usb 2-1: USB disconnect, device number 13 [ 1043.347002][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1043.675386][T32526] loop4: detected capacity change from 0 to 2048 [ 1043.705456][T32526] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1043.791114][ T5824] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1043.815111][T32530] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1043.994192][ T5824] usb 8-1: Using ep0 maxpacket: 32 [ 1044.001511][ T5824] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1044.019528][ T5824] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1044.049390][ T5824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.127674][ T5824] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1044.182529][ T5824] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1044.231736][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.301943][ T5824] usb 8-1: config 0 descriptor?? [ 1044.617287][ T5910] usb 8-1: USB disconnect, device number 4 [ 1044.762029][T32562] ieee802154 phy1 wpan1: encryption failed: -22 [ 1044.822964][T32565] netlink: 'syz.6.11289': attribute type 2 has an invalid length. [ 1044.862468][T32565] netlink: 'syz.6.11289': attribute type 1 has an invalid length. [ 1045.093087][T32572] loop8: detected capacity change from 0 to 2048 [ 1045.142315][T32572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.946211][T32603] xt_limit: Overflow, try lower: 167772/2147483648 [ 1046.000659][T32604] loop6: detected capacity change from 0 to 512 [ 1046.049296][T32604] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00007272 (sector = 1) [ 1046.109105][T32604] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1046.139587][T32608] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 1046.262791][T32608] bond4 (unregistering): Released all slaves [ 1046.352499][ T64] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00007272 (sector = 1) [ 1046.630781][T32622] loop6: detected capacity change from 0 to 1024 [ 1046.663112][T32628] loop4: detected capacity change from 0 to 512 [ 1046.759032][T32631] ubi31: attaching mtd0 [ 1046.777296][T32631] ubi31: scanning is finished [ 1046.840947][T32631] ubi31: empty MTD device detected [ 1047.264090][T32631] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1047.305430][T32631] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1047.340246][T32631] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1047.404880][T32631] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1047.468928][T32631] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1047.476535][T32631] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1047.558645][T32631] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1260018843 [ 1047.640196][T32631] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1047.720373][T32647] ubi31: background thread "ubi_bgt31d" started, PID 32647 [ 1048.039492][T32670] program syz.9.11329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.929865][T32700] loop8: detected capacity change from 0 to 4096 [ 1048.934383][T32704] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1048.962389][T32708] loop7: detected capacity change from 0 to 64 [ 1049.237938][T32713] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11348'. [ 1049.402988][T32719] loop7: detected capacity change from 0 to 136 [ 1049.473234][T32722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.564068][T32724] loop8: detected capacity change from 0 to 64 [ 1049.614590][T32669] loop1: detected capacity change from 0 to 32768 [ 1049.693453][T32669] (syz.1.11330,32669,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1049.806806][T32669] (syz.1.11330,32669,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1050.053810][T32669] JBD2: Ignoring recovery information on journal [ 1050.165542][T32744] netlink: 'syz.9.11360': attribute type 12 has an invalid length. [ 1050.215504][T32744] netlink: 'syz.9.11360': attribute type 4 has an invalid length. [ 1050.239196][T32669] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1050.344221][ T5824] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1050.510454][T32751] netlink: 'syz.4.11364': attribute type 1 has an invalid length. [ 1050.549769][ T5824] usb 7-1: Using ep0 maxpacket: 8 [ 1050.558341][T32751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11364'. [ 1050.563897][ T5824] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1050.605828][ T5824] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 1050.619915][ T5824] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1050.639804][ T5824] usb 7-1: config 4 has no interface number 0 [ 1050.708876][ T5824] usb 7-1: string descriptor 0 read error: -22 [ 1050.711612][ T5837] ocfs2: Unmounting device (7,1) on (node local) [ 1050.715588][ T5824] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1050.811274][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.873383][T32763] loop8: detected capacity change from 0 to 512 [ 1050.886193][ T5824] uvcvideo 7-1:4.147: Found UVC 0.02 device (04f2:b746) [ 1050.922774][ T5824] uvcvideo 7-1:4.147: No valid video chain found. [ 1051.052307][T32763] EXT4-fs error (device loop8): __ext4_fill_super:5512: inode #2: comm syz.8.11370: iget: checksum invalid [ 1051.089222][T32763] EXT4-fs (loop8): get root inode failed [ 1051.103794][T32763] EXT4-fs (loop8): mount failed [ 1051.136132][T30566] usb 7-1: USB disconnect, device number 8 [ 1051.155547][ T308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1051.880855][ T337] loop7: detected capacity change from 0 to 128 [ 1052.177158][ T350] netlink: 'syz.9.11387': attribute type 15 has an invalid length. [ 1052.215367][ T350] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11387'. [ 1052.520433][ T361] loop8: detected capacity change from 0 to 1024 [ 1052.572159][ T363] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11395'. [ 1052.611179][ T363] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11395'. [ 1052.822918][ T2939] hfsplus: b-tree write err: -5, ino 4 [ 1053.986318][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11421'. [ 1054.005725][ T423] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1054.076344][ T423] overlayfs: missing 'lowerdir' [ 1054.235804][T25474] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1054.271225][ T434] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11425'. [ 1054.407040][ T440] loop1: detected capacity change from 0 to 256 [ 1054.455416][T25474] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1054.470249][T25474] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.524456][T25474] usb 10-1: config 220 has no interface number 2 [ 1054.556556][ T440] FAT-fs (loop1): Directory bread(block 64) failed [ 1054.569679][T25474] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1054.609895][ T440] FAT-fs (loop1): Directory bread(block 65) failed [ 1054.638562][ T440] FAT-fs (loop1): Directory bread(block 66) failed [ 1054.645990][ T448] loop6: detected capacity change from 0 to 256 [ 1054.652762][T25474] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1054.671981][ T448] exfat: Deprecated parameter 'utf8' [ 1054.684926][ T440] FAT-fs (loop1): Directory bread(block 67) failed [ 1054.700441][T25474] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1054.728737][ T440] FAT-fs (loop1): Directory bread(block 68) failed [ 1054.739522][T25474] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1054.760021][ T440] FAT-fs (loop1): Directory bread(block 69) failed [ 1054.772528][ T448] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1054.801528][ T440] FAT-fs (loop1): Directory bread(block 70) failed [ 1054.812578][T25474] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1054.841631][T25474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.857318][ T440] FAT-fs (loop1): Directory bread(block 71) failed [ 1054.873315][T25474] usb 10-1: Product: syz [ 1054.882578][ T440] FAT-fs (loop1): Directory bread(block 72) failed [ 1054.887236][T25474] usb 10-1: Manufacturer: syz [ 1054.908856][T25474] usb 10-1: SerialNumber: syz [ 1054.918019][ T440] FAT-fs (loop1): Directory bread(block 73) failed [ 1055.062554][ T30] audit: type=1800 audit(2000000811.138:264): pid=440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11427" name="cpu.stat" dev="loop1" ino=1048752 res=0 errno=0 [ 1055.207293][T25474] usb 10-1: selecting invalid altsetting 0 [ 1055.228176][T25474] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1055.290494][T25474] uvcvideo 10-1:220.0: No valid video chain found. [ 1055.341756][T25474] usb 10-1: selecting invalid altsetting 0 [ 1055.378592][T25474] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1055.426011][T25474] usb 10-1: USB disconnect, device number 3 [ 1055.616909][ T431] loop7: detected capacity change from 0 to 32768 [ 1055.726699][ T431] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1055.746734][T30566] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1055.859759][ T431] (syz.7.11424,431,1):ocfs2_find_entry:1094 ERROR: status = -117 [ 1055.913339][ T431] (syz.7.11424,431,0):ocfs2_find_entry:1094 ERROR: status = -117 [ 1055.944565][ T431] (syz.7.11424,431,0):ocfs2_mknod:505 ERROR: status = -117 [ 1055.992393][T30566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1056.000757][ T431] (syz.7.11424,431,0):ocfs2_create:678 ERROR: status = -117 [ 1056.037161][T30566] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1056.079868][T30566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1056.142091][T30566] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1056.189762][T30566] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1056.237739][T30566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.242207][T29459] ocfs2: Unmounting device (7,7) on (node local) [ 1056.288210][ T5824] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1056.289937][T30566] usb 5-1: config 0 descriptor?? [ 1056.519312][ T5824] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1056.549592][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.577093][T30566] hdpvr 5-1:0.0: firmware version 0xd dated Dõ)ŸR'ÚCåZÑšV+|ùQl•;îÊ’#Ö ùÇå[¬Ük41Ïz ÷š§½ [ 1056.601740][ T5824] usb 2-1: config 0 descriptor?? [ 1056.691623][ T5824] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1056.792360][T30566] hdpvr 5-1:0.0: device init failed [ 1056.801572][T30566] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1056.877159][T30566] usb 5-1: USB disconnect, device number 124 [ 1057.059384][ T5824] gspca_sunplus: reg_w_riv err -71 [ 1057.067713][ T5824] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1057.123116][ T5824] usb 2-1: USB disconnect, device number 14 [ 1057.503096][ T533] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11460'. [ 1057.553018][ T538] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11461'. [ 1058.257057][ T561] tmpfs: Bad value for 'mpol' [ 1058.581754][ T572] loop8: detected capacity change from 0 to 128 [ 1058.646377][ T574] netlink: 'syz.4.11476': attribute type 32 has an invalid length. [ 1058.703387][ T572] syz.8.11475: attempt to access beyond end of device [ 1058.703387][ T572] loop8: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 1058.778298][ T524] loop9: detected capacity change from 0 to 32768 [ 1058.804101][ T572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000819) [ 1058.860314][ T572] FAT-fs (loop8): Filesystem has been set read-only [ 1058.894344][ T524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.11456 (524) [ 1058.955881][ T572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000819) [ 1059.003824][ T572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000819) [ 1059.019750][ T524] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1059.073492][ T524] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1059.412823][ T524] BTRFS info (device loop9): enabling ssd optimizations [ 1059.466588][ T524] BTRFS info (device loop9): turning on async discard [ 1059.473423][ T524] BTRFS info (device loop9): enabling free space tree [ 1059.719687][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1059.841560][T29735] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1059.944477][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1060.008832][ T10] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1060.018212][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.070145][ T10] usb 7-1: Product: syz [ 1060.086473][ T10] usb 7-1: Manufacturer: syz [ 1060.112900][ T10] usb 7-1: SerialNumber: syz [ 1060.126531][T30566] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1060.350661][T30566] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1060.373254][T30566] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.409060][ T638] loop4: detected capacity change from 0 to 1764 [ 1060.423278][T30566] usb 8-1: config 0 has no interface number 0 [ 1060.440666][T30566] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1060.489848][T30566] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.556727][T30566] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1060.571862][ T10] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1060.595354][T30566] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.618531][ T10] mxuport 7-1:254.0: probe with driver mxuport failed with error -5 [ 1060.632640][T30566] usb 8-1: Product: syz [ 1060.636828][T30566] usb 8-1: Manufacturer: syz [ 1060.685782][T30566] usb 8-1: SerialNumber: syz [ 1060.687451][ T10] usb 7-1: USB disconnect, device number 9 [ 1060.750896][T30566] usb 8-1: config 0 descriptor?? [ 1060.990406][ T655] netlink: 'syz.1.11502': attribute type 1 has an invalid length. [ 1061.018678][ T655] netlink: 4260 bytes leftover after parsing attributes in process `syz.1.11502'. [ 1061.255767][T25474] usb 8-1: USB disconnect, device number 5 [ 1061.333944][ T667] loop4: detected capacity change from 0 to 256 [ 1061.341207][T30566] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1061.416517][ T662] loop9: detected capacity change from 0 to 4096 [ 1061.523333][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11509'. [ 1061.554458][T30566] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1061.572665][ T667] FAT-fs (loop4): Directory bread(block 64) failed [ 1061.580134][T30566] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.605297][ T667] FAT-fs (loop4): Directory bread(block 65) failed [ 1061.613098][ T667] FAT-fs (loop4): Directory bread(block 66) failed [ 1061.620020][ T667] FAT-fs (loop4): Directory bread(block 67) failed [ 1061.630023][ T667] FAT-fs (loop4): Directory bread(block 68) failed [ 1061.636992][ T667] FAT-fs (loop4): Directory bread(block 69) failed [ 1061.643702][ T667] FAT-fs (loop4): Directory bread(block 70) failed [ 1061.651465][ T667] FAT-fs (loop4): Directory bread(block 71) failed [ 1061.658460][ T667] FAT-fs (loop4): Directory bread(block 72) failed [ 1061.665100][ T667] FAT-fs (loop4): Directory bread(block 73) failed [ 1061.666815][T30566] usb 9-1: config 0 descriptor?? [ 1061.743121][ T30] audit: type=1800 audit(2000000817.368:265): pid=667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11507" name="file1" dev="loop4" ino=1048754 res=0 errno=0 [ 1061.830542][ T674] bond1: option ad_actor_sys_prio: invalid value (0) [ 1061.910748][ T674] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1061.938570][ T674] bond1 (unregistering): Released all slaves [ 1062.128407][ T30] audit: type=1326 audit(2000000817.742:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1062.228864][T30566] ath6kl: Failed to submit usb control message: -71 [ 1062.251242][T30566] ath6kl: unable to send the bmi data to the device: -71 [ 1062.294912][T30566] ath6kl: Unable to send get target info: -71 [ 1062.298914][ T30] audit: type=1326 audit(2000000817.742:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1062.339416][ T30] audit: type=1326 audit(2000000817.742:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1062.373750][T30566] ath6kl: Failed to init ath6kl core: -71 [ 1062.381110][T30566] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1062.413933][ T30] audit: type=1326 audit(2000000817.742:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1062.483486][T30566] usb 9-1: USB disconnect, device number 4 [ 1062.525140][ T30] audit: type=1326 audit(2000000817.742:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.11511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe31d8efc9 code=0x7ffc0000 [ 1062.670183][ T701] loop4: detected capacity change from 0 to 512 [ 1062.800692][ T701] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.11518: inode has both inline data and extents flags [ 1062.802004][ T701] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.11518: couldn't read orphan inode 15 (err -117) [ 1062.804251][ T701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.836052][ T712] loop6: detected capacity change from 0 to 256 [ 1062.848702][ T30] audit: type=1326 audit(2000000818.415:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=713 comm="syz.1.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b18efc9 code=0x7ffc0000 [ 1062.848766][ T30] audit: type=1326 audit(2000000818.415:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=713 comm="syz.1.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b18efc9 code=0x7ffc0000 [ 1062.884478][ T30] audit: type=1326 audit(2000000818.443:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=713 comm="syz.1.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f440b18efc9 code=0x7ffc0000 [ 1062.884544][ T30] audit: type=1326 audit(2000000818.443:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=713 comm="syz.1.11523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b18efc9 code=0x7ffc0000 [ 1063.085355][ T712] FAT-fs (loop6): Directory bread(block 64) failed [ 1063.085400][ T712] FAT-fs (loop6): Directory bread(block 65) failed [ 1063.085491][ T712] FAT-fs (loop6): Directory bread(block 66) failed [ 1063.085521][ T712] FAT-fs (loop6): Directory bread(block 67) failed [ 1063.085610][ T712] FAT-fs (loop6): Directory bread(block 68) failed [ 1063.085642][ T712] FAT-fs (loop6): Directory bread(block 69) failed [ 1063.085731][ T712] FAT-fs (loop6): Directory bread(block 70) failed [ 1063.085762][ T712] FAT-fs (loop6): Directory bread(block 71) failed [ 1063.085848][ T712] FAT-fs (loop6): Directory bread(block 72) failed [ 1063.085878][ T712] FAT-fs (loop6): Directory bread(block 73) failed [ 1063.101652][T30068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.251523][ T722] loop1: detected capacity change from 0 to 256 [ 1063.294826][ T722] exfat: Deprecated parameter 'utf8' [ 1063.416039][ T719] loop7: detected capacity change from 0 to 4096 [ 1063.417734][ T722] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 1063.769373][ T731] usb usb1: usbfs: process 731 (syz.4.11530) did not claim interface 0 before use [ 1063.791898][ T735] loop8: detected capacity change from 0 to 64 [ 1064.143195][ T747] loop6: detected capacity change from 0 to 16 [ 1064.166199][ T745] loop7: detected capacity change from 0 to 512 [ 1064.878273][ T747] erofs (device loop6): mounted with root inode @ nid 36. [ 1064.936680][T18174] erofs (device loop6): failed to decompress -4045 in[4096, 0] out[9000] [ 1064.947949][ T747] erofs (device loop6): failed to decompress -4045 in[4096, 0] out[8192] [ 1065.030218][ T747] erofs (device loop6): read error -117 @ 1 of nid 89 [ 1065.038630][ T740] loop4: detected capacity change from 0 to 32768 [ 1065.097334][ T740] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11534 (740) [ 1065.143942][ T740] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1065.174148][ T740] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1065.494388][ T740] BTRFS info (device loop4): enabling ssd optimizations [ 1065.504641][ T784] loop1: detected capacity change from 0 to 2048 [ 1065.534283][ T740] BTRFS info (device loop4): turning on async discard [ 1065.572000][ T740] BTRFS info (device loop4): enabling free space tree [ 1065.608040][ T784] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1065.618775][ T791] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11546'. [ 1065.860320][ T755] loop7: detected capacity change from 0 to 32768 [ 1065.899638][T30068] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1065.979772][ T755] [ 1065.979772][ T755] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1065.979772][ T755] [ 1066.044630][ T798] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1066.119629][ T755] find_entry called with index = 0 [ 1066.193787][ T755] read_mapping_page failed! [ 1066.219958][ T755] ERROR: (device loop7): txCommit: [ 1066.219958][ T755] [ 1066.260151][ T755] ERROR: (device loop7): remounting filesystem as read-only [ 1066.612620][ T807] loop4: detected capacity change from 0 to 2048 [ 1066.762755][ T807] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1066.929111][ T825] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1066.962573][ T821] loop1: detected capacity change from 0 to 1024 [ 1066.989948][ T827] netlink: 'syz.6.11558': attribute type 21 has an invalid length. [ 1067.032445][ T827] netlink: 'syz.6.11558': attribute type 1 has an invalid length. [ 1067.086461][ T821] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1067.117324][ T827] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11558'. [ 1067.362877][ T821] EXT4-fs (loop1): 1 truncate cleaned up [ 1067.467071][ T821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1067.637460][ T821] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1067.803985][ T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1067.919045][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.050777][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1068.083188][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.145826][ T10] usb 5-1: config 0 descriptor?? [ 1068.293356][ T869] loop8: detected capacity change from 0 to 512 [ 1068.331076][ T869] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1068.391535][ T869] EXT4-fs (loop8): invalid journal inode [ 1068.397301][ T869] EXT4-fs (loop8): can't get journal size [ 1068.416976][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1068.475587][ T869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1068.483761][ T869] System zones: 1-12, 13-13 [ 1068.631984][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1068.652502][ T869] EXT4-fs (loop8): 1 truncate cleaned up [ 1068.719321][ T869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.720732][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1068.806656][ T10] [drm] Initialized udl on minor 2 [ 1068.818097][T30566] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1068.847428][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1068.936631][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1068.978590][ T5824] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1068.987456][ T5824] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1069.010934][ T10] usb 5-1: USB disconnect, device number 125 [ 1069.026059][T30566] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1069.062084][T29522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.080269][T30566] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.120751][T30566] usb 10-1: Product: syz [ 1069.134778][T30566] usb 10-1: Manufacturer: syz [ 1069.178919][T30566] usb 10-1: SerialNumber: syz [ 1069.239476][T30566] usb 10-1: config 0 descriptor?? [ 1069.314456][ T897] netlink: 'syz.7.11586': attribute type 1 has an invalid length. [ 1069.350815][ T900] vivid-000: disconnect [ 1069.384450][ T897] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11586'. [ 1069.397385][ T898] vivid-000: reconnect [ 1069.470126][T30566] hso 10-1:0.0: Failed to find INT IN ep [ 1069.494081][T30566] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1069.689720][ T24] usb 10-1: USB disconnect, device number 4 [ 1069.765945][ T910] loop1: detected capacity change from 0 to 8192 [ 1069.846992][ T910] loop1: p1 < > p3 < > p4 < > [ 1069.859317][ T910] loop1: partition table partially beyond EOD, truncated [ 1069.902827][ T910] loop1: p3 start 327168 is beyond EOD, truncated [ 1069.972531][T25474] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1070.007063][ T5824] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1070.033578][ T939] loop4: detected capacity change from 0 to 256 [ 1070.087135][ T939] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1070.146039][T25474] usb 8-1: config 0 has an invalid interface number: 176 but max is 2 [ 1070.157587][ T939] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 1070.168654][T25474] usb 8-1: config 0 has no interface number 1 [ 1070.180441][T25474] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1070.200416][ T5824] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1070.225229][ T5824] usb 2-1: config 0 has an invalid descriptor of length 178, skipping remainder of the config [ 1070.226260][T25474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.260827][ T5824] usb 2-1: config 0 has no interface number 0 [ 1070.279774][ T5824] usb 2-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 1070.320951][T25474] usb 8-1: config 0 descriptor?? [ 1070.327856][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.396149][ T5824] usb 2-1: Product: syz [ 1070.417753][ T5824] usb 2-1: Manufacturer: syz [ 1070.431919][ T5824] usb 2-1: SerialNumber: syz [ 1070.463938][ T5824] usb 2-1: config 0 descriptor?? [ 1070.495439][ T5824] cdc_acm 2-1:0.123: skipping garbage [ 1070.526499][ T5824] cdc_acm 2-1:0.123: skipping garbage [ 1070.561627][T25474] qcserial 8-1:0.2: Qualcomm USB modem converter detected [ 1070.767176][ T5824] usb 2-1: USB disconnect, device number 15 [ 1070.889332][T30566] usb 8-1: USB disconnect, device number 6 [ 1070.904002][T30566] qcserial 8-1:0.2: device disconnected [ 1071.185376][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 1071.321026][ T979] loop8: detected capacity change from 0 to 64 [ 1071.752818][ T997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11626'. [ 1071.756270][ T995] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11625'. [ 1071.790234][ T994] loop4: detected capacity change from 0 to 2048 [ 1071.800741][ T997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11626'. [ 1071.836037][ T998] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1071.887487][ T994] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 1071.895072][ T1001] netlink: 60 bytes leftover after parsing attributes in process `syz.7.11627'. [ 1071.926238][ T992] loop1: detected capacity change from 0 to 4096 [ 1071.959254][ T992] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1072.018055][ T994] Remounting filesystem read-only [ 1072.107577][ T992] ntfs3(loop1): ino=19, mi_enum_attr [ 1072.153796][ T992] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1072.251263][ T992] ntfs3(loop1): failed to convert "c46c" to cp775 [ 1072.287184][ T992] ntfs3(loop1): ino=20, mi_enum_attr [ 1072.602562][ T1023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1073.043871][ T1050] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1073.536048][ T1072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.555029][ T1074] loop7: detected capacity change from 0 to 8 [ 1073.597718][ T1074] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1073.643444][ T1074] SQUASHFS error: Failed to read block 0x91: -5 [ 1073.675946][ T1074] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1073.719502][ T1074] SQUASHFS error: Unable to read inode 0x11f [ 1074.102494][ T1096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11660'. [ 1074.141321][ T1098] xt_l2tp: v2 doesn't support IP mode [ 1074.697517][T30566] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1074.889480][T30566] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1074.920584][T30566] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1074.981230][T30566] usb 10-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1075.034081][T30566] usb 10-1: config 1 interface 0 has no altsetting 1 [ 1075.081269][T30566] usb 10-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1075.123786][T30566] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.178208][T30566] usb 10-1: Product: syz [ 1075.199779][T30566] usb 10-1: Manufacturer: syz [ 1075.208086][T30566] usb 10-1: SerialNumber: syz [ 1075.235571][ T10] IPVS: starting estimator thread 0... [ 1075.258849][T30566] smsusb:smsusb_probe: board id=8, interface number 0 [ 1075.371272][ T1146] IPVS: using max 29 ests per chain, 69600 per kthread [ 1075.476170][T30566] smsusb:smsusb_probe: Device initialized with return code -19 [ 1075.702404][T30566] usb 10-1: USB disconnect, device number 5 [ 1075.713284][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1075.838350][ T1170] loop7: detected capacity change from 0 to 64 [ 1075.918304][ T1170] hfs: unable to locate alternate MDB [ 1075.924679][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1075.940852][ T1170] hfs: continuing without an alternate MDB [ 1075.958358][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1075.984988][ T10] usb 9-1: config 0 has no interface number 0 [ 1076.012420][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1076.066266][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1076.099502][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1076.109596][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1076.120218][ T10] usb 9-1: Product: syz [ 1076.124401][ T10] usb 9-1: SerialNumber: syz [ 1076.177733][ T10] usb 9-1: config 0 descriptor?? [ 1076.207527][ T10] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1076.271145][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input75 [ 1076.370559][ T1181] openvswitch: netlink: Missing valid actions attribute. [ 1076.393957][ T1181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.451306][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1076.650478][T18174] Bluetooth: hci6: command 0x0406 tx timeout [ 1076.692784][ T5975] usb 9-1: USB disconnect, device number 5 [ 1076.766880][ T5975] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1076.786972][ T1156] loop6: detected capacity change from 0 to 32768 [ 1076.862273][ T1156] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11686 (1156) [ 1076.943839][ T1156] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1077.034833][ T1156] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 1077.368479][ T1156] BTRFS info (device loop6): enabling ssd optimizations [ 1077.381087][ T1156] BTRFS info (device loop6): turning off barriers [ 1077.421992][ T1156] BTRFS info (device loop6): disabling tree log [ 1077.474271][ T1156] BTRFS info (device loop6): turning on async discard [ 1077.518477][ T1156] BTRFS info (device loop6): enabling free space tree [ 1077.550140][ T1156] BTRFS info (device loop6): max_inline set to 4096 [ 1077.718318][ T1156] BTRFS info (device loop6 state M): max_inline set to 4096 [ 1077.800980][ T1197] loop4: detected capacity change from 0 to 32768 [ 1077.894579][T27740] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1077.929347][ T1197] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1078.003065][ T1197] (syz.4.11701,1197,1):ocfs2_mknod:505 ERROR: status = -2 [ 1078.010278][ T1197] (syz.4.11701,1197,1):ocfs2_mkdir:661 ERROR: status = -2 [ 1078.288198][ T1257] loop1: detected capacity change from 0 to 1024 [ 1078.335576][T30068] (syz-executor,30068,0):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode. [ 1078.434167][T30068] ocfs2: Unmounting device (7,4) on (node local) [ 1079.073373][ T1283] CIFS mount error: No usable UNC path provided in device string! [ 1079.073373][ T1283] [ 1079.116406][ T1283] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1079.166253][ T1284] QAT: failed to copy from user cfg_data. [ 1079.472767][ T1294] loop1: detected capacity change from 0 to 1024 [ 1079.619962][ T5855] Bluetooth: hci2: unexpected cc 0x202f length: 1 < 9 [ 1079.786257][T25474] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1079.943439][ T1318] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11735'. [ 1079.960341][ T1316] loop7: detected capacity change from 0 to 256 [ 1079.977748][T25474] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1080.012423][T25474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.020490][T25474] usb 7-1: Product: syz [ 1080.053277][ T1316] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 1080.094945][T25474] usb 7-1: Manufacturer: syz [ 1080.106086][T25474] usb 7-1: SerialNumber: syz [ 1080.168019][T25474] usb 7-1: config 0 descriptor?? [ 1080.217250][T25474] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1080.417108][ T1330] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1080.675699][T25474] gspca_sunplus: reg_w_riv err -71 [ 1080.682186][T25474] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1080.735074][T25474] usb 7-1: USB disconnect, device number 10 [ 1080.889521][ T1352] netlink: 3 bytes leftover after parsing attributes in process `syz.8.11748'. [ 1080.922748][ T1352] 0ªX¹¦À: renamed from caif0 [ 1081.024976][ T1352] 0ªX¹¦À: entered allmulticast mode [ 1081.038809][ T1352] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1081.086390][ T1358] binder: 1356:1358 ioctl 400c620e 200000000240 returned -22 [ 1081.315480][ T1362] loop7: detected capacity change from 0 to 128 [ 1081.363412][ T1362] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1081.429171][ T1362] hpfs: filesystem error: improperly stopped [ 1081.461492][ T1362] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1081.497907][ T1362] hpfs: You really don't want any checks? You are crazy... [ 1081.527645][ T1362] hpfs: hpfs_map_sector(): read error [ 1081.571553][ T1362] hpfs: code page support is disabled [ 1081.577098][ T1362] hpfs: hpfs_map_4sectors(): unaligned read [ 1081.619294][ T1362] hpfs: hpfs_map_4sectors(): unaligned read [ 1081.674202][ T1374] netlink: 'syz.6.11761': attribute type 1 has an invalid length. [ 1081.687530][ T1362] hpfs: filesystem error: unable to find root dir [ 1081.716226][ T1374] netlink: 'syz.6.11761': attribute type 2 has an invalid length. [ 1081.846464][ T1379] loop4: detected capacity change from 0 to 1024 [ 1081.915263][ T1379] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1082.008429][ T1379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.130193][ T1379] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.11762: missing EA_INODE flag [ 1082.199001][ T1379] EXT4-fs (loop4): Remounting filesystem read-only [ 1082.220475][ T1359] loop9: detected capacity change from 0 to 32768 [ 1082.275430][ T1359] ialloc: diAlloc returned -5! [ 1082.279152][ T1385] loop8: detected capacity change from 0 to 4096 [ 1082.443232][T30068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.555131][ T5967] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1082.795463][ T5967] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 1082.833013][ T5967] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 1082.875531][ T5967] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1082.906354][ T5967] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1082.948447][ T1409] loop9: detected capacity change from 0 to 128 [ 1082.974983][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1083.014021][ T5967] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1083.084018][ T5967] usb 8-1: string descriptor 0 read error: -22 [ 1083.092703][ T5967] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1083.123568][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.152384][ T1417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.207321][ T5967] usb 8-1: config 0 descriptor?? [ 1083.240482][ T5967] hub 8-1:0.0: bad descriptor, ignoring hub [ 1083.281991][ T5967] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1083.343701][ T1423] 9pnet_fd: p9_fd_create_tcp (1423): problem connecting socket to 127.0.0.1 [ 1083.407921][ T1425] xt_ipcomp: unknown flags 1D [ 1083.518113][ T1427] loop8: detected capacity change from 0 to 256 [ 1083.547795][ T1427] exfat: Deprecated parameter 'namecase' [ 1083.567114][ T1427] exfat: Deprecated parameter 'namecase' [ 1083.592160][ T1427] exfat: Deprecated parameter 'namecase' [ 1083.615541][ T1433] netlink: 'syz.4.11787': attribute type 10 has an invalid length. [ 1083.623655][ T1427] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1083.635092][T25474] usb 8-1: USB disconnect, device number 7 [ 1083.663250][ T1433] team0: Device ipvlan1 failed to register rx_handler [ 1083.697395][ T1427] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1083.729844][ T1435] netlink: 'syz.9.11788': attribute type 30 has an invalid length. [ 1084.086739][ T1449] netlink: 264 bytes leftover after parsing attributes in process `syz.9.11795'. [ 1084.183724][ T1443] loop4: detected capacity change from 0 to 4096 [ 1084.202346][ T1443] ntfs3(loop4): ino=3, Correct links count -> 2. [ 1084.311458][ T1455] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1084.726977][ T1468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.853498][ T1473] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 1085.215948][ T1479] loop9: detected capacity change from 0 to 4096 [ 1085.237930][ T1479] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 1085.409541][ T5967] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1085.435080][ T1479] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 1085.620693][ T1451] loop1: detected capacity change from 0 to 32768 [ 1085.623980][ T5967] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1085.661911][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.708342][ T5967] usb 7-1: config 0 descriptor?? [ 1085.807597][ T1451] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1085.957924][ T1451] XFS (loop1): Ending clean mount [ 1086.033897][ T1451] XFS (loop1): Quotacheck needed: Please wait. [ 1086.147571][ T1517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.169059][ T1451] XFS (loop1): Quotacheck: Done. [ 1086.228400][ T5967] ath6kl: Failed to read usb control message: -71 [ 1086.254272][ T5967] ath6kl: Unable to read the bmi data from the device: -71 [ 1086.261525][ T5967] ath6kl: Unable to recv target info: -71 [ 1086.306143][ T5967] ath6kl: Failed to init ath6kl core: -71 [ 1086.307897][ T5837] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1086.326503][ T1523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11826'. [ 1086.365355][ T5967] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1086.447907][ T5967] usb 7-1: USB disconnect, device number 11 [ 1086.689933][ T1532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.778321][ T1534] netlink: 'syz.7.11833': attribute type 2 has an invalid length. [ 1086.872703][ T1537] netlink: 44 bytes leftover after parsing attributes in process `syz.9.11834'. [ 1086.898810][ T1538] nfs: Deprecated parameter 'nointr' [ 1086.917572][ T1537] netlink: 43 bytes leftover after parsing attributes in process `syz.9.11834'. [ 1086.926661][ T1537] netlink: 'syz.9.11834': attribute type 6 has an invalid length. [ 1086.986097][ T1537] netlink: 'syz.9.11834': attribute type 5 has an invalid length. [ 1086.999739][ T1537] netlink: 43 bytes leftover after parsing attributes in process `syz.9.11834'. [ 1087.219612][ T1546] loop7: detected capacity change from 0 to 1024 [ 1087.439341][ T1556] bond4: entered promiscuous mode [ 1087.602578][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 1087.787582][ T1572] loop4: detected capacity change from 0 to 512 [ 1087.876499][ T1580] loop1: detected capacity change from 0 to 512 [ 1087.887090][ T1572] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1087.986371][ T1572] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1088.013130][ T1580] EXT4-fs: Ignoring removed nobh option [ 1088.042790][ T1572] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.11849: Corrupt directory, running e2fsck is recommended [ 1088.134690][ T1572] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1088.139197][ T1580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.158293][ T1588] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11857'. [ 1088.167406][ T1588] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11857'. [ 1088.199319][ T1572] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.11849: corrupted in-inode xattr: invalid ea_ino [ 1088.216885][ T1580] ext4 filesystem being mounted at /1987/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.274779][ T1572] EXT4-fs (loop4): Remounting filesystem read-only [ 1088.296117][ T1596] netlink: 'syz.6.11859': attribute type 29 has an invalid length. [ 1088.312684][ T1572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.314085][ T1580] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.11852: corrupted xattr block 33: bad e_name length [ 1088.393508][ T1598] netlink: 'syz.9.11861': attribute type 21 has an invalid length. [ 1088.426698][ T1598] IPv6: NLM_F_CREATE should be specified when creating new route [ 1088.457998][ T1580] EXT4-fs error (device loop1): ext4_get_inode_usage:888: inode #15: comm syz.1.11852: corrupted xattr block 33: bad e_name length [ 1088.479324][ T1598] IPv6: Can't replace route, no match found [ 1088.488175][ T1572] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1088.601765][ T1604] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1088.710596][T30068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.753715][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.045982][ T1618] loop1: detected capacity change from 0 to 16 [ 1089.076493][T25474] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1089.093899][ T1618] erofs (device loop1): mounted with root inode @ nid 36. [ 1089.143195][ T1618] syz.1.11868: attempt to access beyond end of device [ 1089.143195][ T1618] loop1: rw=0, sector=301990144, nr_sectors = 2 limit=16 [ 1089.175416][ T1618] erofs (device loop1): read error -5 @ 0 of nid 36 [ 1089.292945][T25474] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1089.341470][T25474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.374912][T25474] usb 8-1: Product: syz [ 1089.409111][T25474] usb 8-1: Manufacturer: syz [ 1089.413775][T25474] usb 8-1: SerialNumber: syz [ 1089.456056][T25474] usb 8-1: config 0 descriptor?? [ 1089.555924][ T1635] loop9: detected capacity change from 0 to 128 [ 1089.621226][ T1635] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1089.662327][ T1638] Zero length message leads to an empty skb [ 1089.665403][ T1635] hpfs: filesystem error: improperly stopped [ 1089.690303][ T1635] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1089.743365][ T1635] hpfs: You really don't want any checks? You are crazy... [ 1089.757370][ T1635] hpfs: hpfs_map_sector(): read error [ 1089.773131][ T1635] hpfs: code page support is disabled [ 1089.791396][ T1635] hpfs: hpfs_map_4sectors(): unaligned read [ 1089.801501][ T1644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1089.821566][ T1635] hpfs: hpfs_map_4sectors(): unaligned read [ 1089.864733][ T1635] hpfs: filesystem error: unable to find root dir [ 1089.938764][T25474] airspy 8-1:0.0: usb_control_msg() failed -71 request 0a [ 1089.974679][T25474] airspy 8-1:0.0: Could not detect board [ 1089.980495][T25474] airspy 8-1:0.0: probe with driver airspy failed with error -71 [ 1090.020360][T25474] usb 8-1: USB disconnect, device number 8 [ 1090.030297][ T1651] x_tables: duplicate underflow at hook 2 [ 1090.355941][ T1659] tmpfs: Bad value for 'nr_blocks' [ 1090.444363][ T1665] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11895'. [ 1090.508626][ T1665] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11895'. [ 1090.560313][ T1665] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11895'. [ 1090.907054][ T1683] loop8: detected capacity change from 0 to 512 [ 1090.973223][ T1685] xt_cgroup: xt_cgroup: no path or classid specified [ 1091.055501][ T1683] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.11903: Bad quota inum: 1, type: 2 [ 1091.127121][ T1683] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 1091.144445][ T1683] EXT4-fs (loop8): mount failed [ 1091.503211][ T5967] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1091.740603][ T5967] usb 9-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 1091.769744][ T5967] usb 9-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1091.781263][ T5967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.869003][ T5967] usb 9-1: config 0 descriptor?? [ 1091.891018][ T5967] usb 9-1: bad CDC descriptors [ 1092.169788][T25474] usb 9-1: USB disconnect, device number 6 [ 1093.262582][ T1775] loop7: detected capacity change from 0 to 512 [ 1093.333989][ T1775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.363512][ T1775] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.445323][ T1783] loop4: detected capacity change from 0 to 24 [ 1093.622560][T29459] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.901260][ T1794] ================================================================== [ 1093.901282][ T1794] BUG: KASAN: slab-out-of-bounds in fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.901319][ T1794] Read of size 1 at addr ffff88807df91010 by task syz.4.11956/1794 [ 1093.901341][ T1794] [ 1093.901356][ T1794] CPU: 0 UID: 0 PID: 1794 Comm: syz.4.11956 Not tainted syzkaller #0 PREEMPT(full) [ 1093.901385][ T1794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1093.901401][ T1794] Call Trace: [ 1093.901412][ T1794] [ 1093.901423][ T1794] dump_stack_lvl+0x189/0x250 [ 1093.901460][ T1794] ? __kasan_check_byte+0x12/0x40 [ 1093.901486][ T1794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1093.901520][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.901551][ T1794] ? lock_release+0x4b/0x3e0 [ 1093.901580][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.901610][ T1794] ? __virt_addr_valid+0x4a5/0x5c0 [ 1093.901647][ T1794] print_report+0xca/0x240 [ 1093.901677][ T1794] ? fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.901703][ T1794] kasan_report+0x118/0x150 [ 1093.901724][ T1794] ? queue_work_on+0x115/0x270 [ 1093.901753][ T1794] ? fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.901784][ T1794] fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.901818][ T1794] bit_putcs+0xa65/0x1bc0 [ 1093.901846][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.901884][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.901930][ T1794] ? __pfx_bit_putcs+0x10/0x10 [ 1093.901964][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902001][ T1794] ? fb_get_color_depth+0x162/0x280 [ 1093.902029][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902062][ T1794] fbcon_putcs+0x3a6/0x580 [ 1093.902087][ T1794] ? __pfx_bit_putcs+0x10/0x10 [ 1093.902118][ T1794] do_update_region+0x21c/0x440 [ 1093.902155][ T1794] update_region+0x1ce/0x490 [ 1093.902183][ T1794] vcs_write+0xd65/0x1260 [ 1093.902215][ T1794] ? iovec_from_user+0x87/0x250 [ 1093.902260][ T1794] ? __pfx_vcs_write+0x10/0x10 [ 1093.902290][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902320][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902349][ T1794] ? iov_iter_iovec_advance+0x1e0/0x290 [ 1093.902385][ T1794] vfs_writev+0x4b6/0x960 [ 1093.902414][ T1794] ? __pfx_vcs_write+0x10/0x10 [ 1093.902448][ T1794] ? __pfx_vfs_writev+0x10/0x10 [ 1093.902482][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902514][ T1794] ? __fget_files+0x2a/0x420 [ 1093.902541][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902570][ T1794] ? __fget_files+0x3a0/0x420 [ 1093.902593][ T1794] ? __fget_files+0x2a/0x420 [ 1093.902620][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902652][ T1794] do_writev+0x14d/0x2d0 [ 1093.902680][ T1794] ? __pfx_do_writev+0x10/0x10 [ 1093.902710][ T1794] ? do_syscall_64+0xbe/0xfa0 [ 1093.902747][ T1794] do_syscall_64+0xfa/0xfa0 [ 1093.902779][ T1794] ? lockdep_hardirqs_on+0x9c/0x150 [ 1093.902812][ T1794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.902837][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.902867][ T1794] ? exc_page_fault+0xab/0x100 [ 1093.902900][ T1794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.902926][ T1794] RIP: 0033:0x7efe31d8efc9 [ 1093.902947][ T1794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.902970][ T1794] RSP: 002b:00007efe32bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1093.903005][ T1794] RAX: ffffffffffffffda RBX: 00007efe31fe5fa0 RCX: 00007efe31d8efc9 [ 1093.903025][ T1794] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003 [ 1093.903043][ T1794] RBP: 00007efe31e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1093.903061][ T1794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.903078][ T1794] R13: 00007efe31fe6038 R14: 00007efe31fe5fa0 R15: 00007ffe3d1a1538 [ 1093.903109][ T1794] [ 1093.903120][ T1794] [ 1093.903128][ T1794] Allocated by task 23460: [ 1093.903142][ T1794] kasan_save_track+0x3e/0x80 [ 1093.903178][ T1794] __kasan_kmalloc+0x93/0xb0 [ 1093.903215][ T1794] __kmalloc_noprof+0x411/0x7f0 [ 1093.903250][ T1794] fbcon_set_font+0x54d/0xec0 [ 1093.903274][ T1794] con_font_op+0xc08/0xfd0 [ 1093.903310][ T1794] vt_ioctl+0x1a89/0x1f20 [ 1093.903337][ T1794] tty_ioctl+0x929/0xde0 [ 1093.903370][ T1794] __se_sys_ioctl+0xfc/0x170 [ 1093.903402][ T1794] do_syscall_64+0xfa/0xfa0 [ 1093.903434][ T1794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.903459][ T1794] [ 1093.903466][ T1794] The buggy address belongs to the object at ffff88807df90000 [ 1093.903466][ T1794] which belongs to the cache kmalloc-8k of size 8192 [ 1093.903489][ T1794] The buggy address is located 0 bytes to the right of [ 1093.903489][ T1794] allocated 4112-byte region [ffff88807df90000, ffff88807df91010) [ 1093.903516][ T1794] [ 1093.903524][ T1794] The buggy address belongs to the physical page: [ 1093.903537][ T1794] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7df90 [ 1093.903560][ T1794] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1093.903582][ T1794] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1093.903607][ T1794] page_type: f5(slab) [ 1093.903630][ T1794] raw: 00fff00000000040 ffff88801a027280 ffffea0000bab600 dead000000000003 [ 1093.903653][ T1794] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1093.903679][ T1794] head: 00fff00000000040 ffff88801a027280 ffffea0000bab600 dead000000000003 [ 1093.903703][ T1794] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1093.903727][ T1794] head: 00fff00000000003 ffffea0001f7e401 00000000ffffffff 00000000ffffffff [ 1093.903750][ T1794] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1093.903765][ T1794] page dumped because: kasan: bad access detected [ 1093.903779][ T1794] page_owner tracks the page as allocated [ 1093.903789][ T1794] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5567, tgid 5567 (start-stop-daem), ts 55083093422, free_ts 55082818661 [ 1093.903833][ T1794] post_alloc_hook+0x240/0x2a0 [ 1093.903868][ T1794] get_page_from_freelist+0x2365/0x2440 [ 1093.903892][ T1794] __alloc_frozen_pages_noprof+0x181/0x370 [ 1093.903916][ T1794] alloc_pages_mpol+0x232/0x4a0 [ 1093.903938][ T1794] allocate_slab+0x96/0x350 [ 1093.903966][ T1794] ___slab_alloc+0xe94/0x18a0 [ 1093.903997][ T1794] __slab_alloc+0x65/0x100 [ 1093.904019][ T1794] __kmalloc_cache_noprof+0x411/0x6f0 [ 1093.904054][ T1794] tomoyo_init_log+0x111f/0x1f70 [ 1093.904092][ T1794] tomoyo_supervisor+0x340/0x1480 [ 1093.904129][ T1794] tomoyo_env_perm+0x149/0x1e0 [ 1093.904157][ T1794] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 1093.904185][ T1794] tomoyo_bprm_check_security+0x11c/0x180 [ 1093.904209][ T1794] security_bprm_check+0x89/0x270 [ 1093.904243][ T1794] bprm_execve+0x8ee/0x1450 [ 1093.904275][ T1794] do_execveat_common+0x510/0x6a0 [ 1093.904311][ T1794] page last free pid 5567 tgid 5567 stack trace: [ 1093.904326][ T1794] __free_frozen_pages+0xbc4/0xd30 [ 1093.904363][ T1794] __put_partials+0x146/0x170 [ 1093.904387][ T1794] put_cpu_partial+0x1f2/0x2e0 [ 1093.904414][ T1794] __slab_free+0x2b9/0x390 [ 1093.904441][ T1794] qlist_free_all+0x97/0x140 [ 1093.904475][ T1794] kasan_quarantine_reduce+0x148/0x160 [ 1093.904509][ T1794] __kasan_slab_alloc+0x22/0x80 [ 1093.904546][ T1794] __kmalloc_noprof+0x3c3/0x7f0 [ 1093.904579][ T1794] tomoyo_supervisor+0xbd5/0x1480 [ 1093.904617][ T1794] tomoyo_env_perm+0x149/0x1e0 [ 1093.904644][ T1794] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 1093.904672][ T1794] tomoyo_bprm_check_security+0x11c/0x180 [ 1093.904696][ T1794] security_bprm_check+0x89/0x270 [ 1093.904730][ T1794] bprm_execve+0x8ee/0x1450 [ 1093.904763][ T1794] do_execveat_common+0x510/0x6a0 [ 1093.904797][ T1794] __x64_sys_execve+0x94/0xb0 [ 1093.904831][ T1794] [ 1093.904838][ T1794] Memory state around the buggy address: [ 1093.904853][ T1794] ffff88807df90f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1093.904872][ T1794] ffff88807df90f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1093.904891][ T1794] >ffff88807df91000: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1093.904906][ T1794] ^ [ 1093.904920][ T1794] ffff88807df91080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1093.904939][ T1794] ffff88807df91100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1093.904954][ T1794] ================================================================== [ 1093.905005][ T1794] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1093.905023][ T1794] CPU: 0 UID: 0 PID: 1794 Comm: syz.4.11956 Not tainted syzkaller #0 PREEMPT(full) [ 1093.905053][ T1794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1093.905069][ T1794] Call Trace: [ 1093.905079][ T1794] [ 1093.905090][ T1794] dump_stack_lvl+0x99/0x250 [ 1093.905129][ T1794] ? __asan_memcpy+0x40/0x70 [ 1093.905166][ T1794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1093.905210][ T1794] ? __pfx__printk+0x10/0x10 [ 1093.905243][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.905279][ T1794] vpanic+0x237/0x6d0 [ 1093.905318][ T1794] ? __pfx_vpanic+0x10/0x10 [ 1093.905355][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.905389][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.905426][ T1794] panic+0xb9/0xc0 [ 1093.905464][ T1794] ? __pfx_panic+0x10/0x10 [ 1093.905503][ T1794] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1093.905538][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.905570][ T1794] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1093.905607][ T1794] ? fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.905637][ T1794] check_panic_on_warn+0x89/0xb0 [ 1093.905678][ T1794] ? fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.905707][ T1794] end_report+0x78/0x160 [ 1093.905732][ T1794] kasan_report+0x129/0x150 [ 1093.905756][ T1794] ? queue_work_on+0x115/0x270 [ 1093.905789][ T1794] ? fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.905825][ T1794] fb_pad_unaligned_buffer+0x22e/0x500 [ 1093.905862][ T1794] bit_putcs+0xa65/0x1bc0 [ 1093.905894][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.905934][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.905987][ T1794] ? __pfx_bit_putcs+0x10/0x10 [ 1093.906024][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906056][ T1794] ? fb_get_color_depth+0x162/0x280 [ 1093.906087][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906121][ T1794] fbcon_putcs+0x3a6/0x580 [ 1093.906148][ T1794] ? __pfx_bit_putcs+0x10/0x10 [ 1093.906181][ T1794] do_update_region+0x21c/0x440 [ 1093.906219][ T1794] update_region+0x1ce/0x490 [ 1093.906251][ T1794] vcs_write+0xd65/0x1260 [ 1093.906284][ T1794] ? iovec_from_user+0x87/0x250 [ 1093.906331][ T1794] ? __pfx_vcs_write+0x10/0x10 [ 1093.906363][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906395][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906426][ T1794] ? iov_iter_iovec_advance+0x1e0/0x290 [ 1093.906463][ T1794] vfs_writev+0x4b6/0x960 [ 1093.906494][ T1794] ? __pfx_vcs_write+0x10/0x10 [ 1093.906530][ T1794] ? __pfx_vfs_writev+0x10/0x10 [ 1093.906566][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906601][ T1794] ? __fget_files+0x2a/0x420 [ 1093.906628][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906660][ T1794] ? __fget_files+0x3a0/0x420 [ 1093.906685][ T1794] ? __fget_files+0x2a/0x420 [ 1093.906712][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906747][ T1794] do_writev+0x14d/0x2d0 [ 1093.906777][ T1794] ? __pfx_do_writev+0x10/0x10 [ 1093.906808][ T1794] ? do_syscall_64+0xbe/0xfa0 [ 1093.906847][ T1794] do_syscall_64+0xfa/0xfa0 [ 1093.906882][ T1794] ? lockdep_hardirqs_on+0x9c/0x150 [ 1093.906916][ T1794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.906943][ T1794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.906980][ T1794] ? exc_page_fault+0xab/0x100 [ 1093.907016][ T1794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.907042][ T1794] RIP: 0033:0x7efe31d8efc9 [ 1093.907064][ T1794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.907088][ T1794] RSP: 002b:00007efe32bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1093.907117][ T1794] RAX: ffffffffffffffda RBX: 00007efe31fe5fa0 RCX: 00007efe31d8efc9 [ 1093.907138][ T1794] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003 [ 1093.907157][ T1794] RBP: 00007efe31e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1093.907176][ T1794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.907194][ T1794] R13: 00007efe31fe6038 R14: 00007efe31fe5fa0 R15: 00007ffe3d1a1538 [ 1093.907227][ T1794] [ 1093.907475][ T1794] Kernel Offset: disabled