last executing test programs: 9m32.982260662s ago: executing program 2 (id=2294): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8000000) 9m31.991575109s ago: executing program 2 (id=2299): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}}], 0x1, 0x20008000) 9m31.548822616s ago: executing program 2 (id=2302): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 9m30.870167391s ago: executing program 2 (id=2308): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000e00)={[{@orlov}, {@data_err_ignore}, {@noquota}, {@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@nodelalloc}, {@data_err_ignore}]}, 0x3, 0x47b, &(0x7f0000000980)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000020240)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 9m29.639487848s ago: executing program 2 (id=2315): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='osx.s']) 9m28.632973106s ago: executing program 2 (id=2320): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0xb, r1}) 9m26.71416018s ago: executing program 32 (id=2320): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0xb, r1}) 8m17.634662273s ago: executing program 4 (id=2701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 8m17.222845256s ago: executing program 4 (id=2703): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x28, 0x5}}], 0x58}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) 8m16.773216397s ago: executing program 4 (id=2707): r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 8m16.337815204s ago: executing program 4 (id=2709): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x6, 0x229, &(0x7f00000005c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') getxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)=@random={'user.', 'overlay\x00'}, 0x0, 0x0) 8m15.753524328s ago: executing program 4 (id=2713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="000048ff00"/14, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) 8m14.752998873s ago: executing program 4 (id=2718): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 8m12.963455522s ago: executing program 33 (id=2718): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 7m5.011854818s ago: executing program 6 (id=3076): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 7m3.81216582s ago: executing program 6 (id=3079): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0xe22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 7m3.55507942s ago: executing program 6 (id=3080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9febff0718"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) 7m3.281960167s ago: executing program 6 (id=3081): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0), 0x6, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x2004c0, 0x20) 7m2.690923831s ago: executing program 6 (id=3082): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="f8000000200001"], 0xf8}, 0x1, 0x0, 0x0, 0x20008050}, 0x800) 7m0.472828143s ago: executing program 6 (id=3086): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, r1, 0x1}}, 0x18) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080), 0x79}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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"/4097, 0x1001}], 0x3) 6m58.806497058s ago: executing program 34 (id=3086): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, r1, 0x1}}, 0x18) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080), 0x79}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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"/4097, 0x1001}], 0x3) 4m25.777404008s ago: executing program 1 (id=4046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25759b16de08000300", @ANYRES32=r2], 0x30}}, 0x80) 4m25.390784266s ago: executing program 1 (id=4050): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)=' ', 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$update(0x2, r0, &(0x7f0000000000)='E', 0x1) 4m25.03713481s ago: executing program 1 (id=4051): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000700)={0x2, @pix={0x3, 0x1ff, 0x34325241, 0x0, 0x1, 0x9, 0x9, 0x66, 0x0, 0x8, 0x2, 0x4}}) 4m24.64337537s ago: executing program 1 (id=4055): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m24.003963483s ago: executing program 1 (id=4059): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 4m23.414045154s ago: executing program 1 (id=4063): r0 = syz_io_uring_setup(0x5009, &(0x7f0000000200)={0x0, 0x84e3, 0x40, 0x1, 0x3ba}, &(0x7f0000000140), &(0x7f0000000740)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x402}, 0x1) 4m22.204762974s ago: executing program 35 (id=4063): r0 = syz_io_uring_setup(0x5009, &(0x7f0000000200)={0x0, 0x84e3, 0x40, 0x1, 0x3ba}, &(0x7f0000000140), &(0x7f0000000740)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x402}, 0x1) 3m22.898624082s ago: executing program 5 (id=4419): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r1, r0, 0x0, 0x110003) 3m19.310694795s ago: executing program 5 (id=4435): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000400)=ANY=[], 0x1, 0xf0d, &(0x7f0000001e80)="$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") chdir(&(0x7f00000001c0)='./file0\x00') mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m17.972267654s ago: executing program 5 (id=4440): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) r0 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 3m16.749948332s ago: executing program 5 (id=4447): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x4000, 0x0) fanotify_mark(r2, 0x445, 0x1003, r1, 0x0) 3m16.120213243s ago: executing program 5 (id=4451): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 3m15.667697826s ago: executing program 5 (id=4454): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m59.340289996s ago: executing program 36 (id=4454): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6.56221719s ago: executing program 3 (id=5640): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101c02, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x5516, &(0x7f0000005bc0)="$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") 6.024311963s ago: executing program 8 (id=5643): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007", @ANYRES32], 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.715507206s ago: executing program 7 (id=5645): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7, 0x2b0, &(0x7f0000000280)="$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") syz_mount_image$iso9660(&(0x7f0000000b80), &(0x7f0000000b40)='./bus/file0\x00', 0x400, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8], 0x3, 0x9dc, &(0x7f0000000140)="$eJzs3c1vHeW9B/Dv+CVxDAoBcrm5XCAn4QYM5Dq2cwk3YnMT+zgx1y9XtiMRXVWEkqSKYpUWWglQpaZS1VVRu6i6oDuWXSGxgU2VXfsXdFGp4g/oBnUVddFTzZzjN+zjY7uObcLnY43nmZnfzPN7zsyZRx6fMxO+zhqNRjVsc/rKb3czWfafi2NffPzJh+Xwkzs5kO78OJ8lfUlqSU+SY0nv6NjszFSHDd1OriW5mxRJDqY53pRrKX6Rh5en76b4TVlv5co2G8amNPhG2+vjDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qNidGxoaLjI5MT0lddr7VWPAG+3sGt5e59XT/0uPu9Yb1KUQ/r6Fh/1fezo8uInyl8n81Rz6qnqgeTpywcPPXHk1cd7uhbX3yDhrfh762HIW17x3fc/uP3mwsKNd3Yoka+bS/XpibmZiakLl+q1ibmZ2vlz54bOXB6fq41PTNbnrs7N16dqo7P1C/Mzs7WB0Rdqw+fPn63VB6/OXJm+NDY4WV+c+cp/jgwNnau9Nvh/9QuzczPTZ14bnBu9PDE5OTF9qYopF5cxr5QH4v9OzNfm6xemarWbtxZunF2V0TqHRBk03KklZdBIh5iMDI2MDA+PjAyfe/n8y68MDfUsz+hONWPoK9ausnTQlkf0ll5s9rOPupaKhzaO3NkTOPwTulr9fyYzkelcyeuprfszmrHMZiZTbZa3LPb/p87UN6x3Zf+/2MsfW178ZKr+/5nm1DPt+v82uezez7t5Px/kdt7MQhZyI++sWnpww3UPrTu30dj7Vm3+51Lqmc5E5jKTiUzlQjWn1ppTy/mcy7kM5Y1cznjmUst4JjKZeuZyNXOZT706okYzm3ouZL6n3NG1DGQ0L6SW4ZzP+ZxNLfUM5mpmciXTuZSxXKi2cjO3qtf97AY5LgUNbyZoZIOgDfr/1owt9P98Q92HszhsT6PV/x/oHDowuhsJAQAAADvu3/6Qw0cf+/2fk948XV1jBwAAAB401cf1nipHvWXp6RTjE5P1ob1OCwAAANhBRfUduyJJf443S4vfhHIRAAAAAB4Q1f//nylH/WXpeAp//wMAAMCDpvM99jtGFKdTy51yUe16M/J6K6J1n9/+8YnJ+uDozOSrw3muustA9U2DNVvrzpGk+vrBiznRjDrR3xz3r95iXxk1PPjqcPpystWQgWfL0bMD60SOlJEv5vlm5POLkX1ZE3m2jASAB93JDfrjzfb/L+Z0M+L0k9Xt23ueXKcPHtKzAsB+0fkZOx0jiv9afPxPm7//H8vN482PFAzmrbydhVzP6erbBtUnDlpbzd0iy1vtX/ExhNMdrgb0r3jCy+nF6wHHH151PeAva2JHcnrNFYF22z27C3sCAHbPyTX98Ab9f6PRLK25/r/x3//9PlIIAPvK0hPs72Nhr9sIAKy2rV66+z4mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+A3bj//74s3EmyD9L42hRuDH3/38sDZr/ks8lC3+4c4d86kOyXJu9QYa/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyGIuleb35XcjDpGUpyZvezun/u7HUCe6y4l3t5L4f3Og8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAdN6/7/XWmOH2rOSk9XcirJtST/v9c57qR7e53AHltx//9yn6dRpKe521P0jo7NzkyVuz8Hy+VffPzJh+WwnXrKDZQ1rHq4RKuG9ms9Wq3VP3bj3ds/ePt7tbGLVZIX58cnx6Yuzf7PcuATxadJLc1h0WK+PypaR/Hqln9atnRz9Y5X9Y6trfdf11t7qd5Tv/tl+7YtW07j1sKNkbKm+frr8z/87q33VgQ9lhPJswPJwOqavlMObWo6kd6N6i2+LH5WHM6vc63a/2UaRaMod9EjVfsP3by1cGPwrbcXrrfJ6UiOJ7me9G0+p+Nr98Si6qjr6i1rHaqCyl9HO2xvQw91H240mlscXr8Nhx6tDpn+LbWh1r4NlQ6ve6uNZ9u8qo/nuS3v6ec61Njyt0ZTc6r4svhTcTl/zE9XPP+jq9z/p7KZd2cZU0WuOFLat/nUcstHVi5446uRbd+V3Ac/z7fz30v7v2vF+b+1r3bnfLSixvv2viiavVBLVT76lR6pdfZpl2Urz6PNqDZ5/kteWrtehzxf6nBG2aH3/2rFl8VHxUD+mjue/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOx/RdK93vyu5FSSI0keKadrSSPpXVreu836uvqLba65HQfWzLmzi7XvH11LpeJe7uW9HN7TdAAAAAAAAADYMRfHvvj4kw/Lofp/fHf+o/gs6Wv+p78nyZHiV72jY7MzUx021JtcS3K3LPdtLYdyvTy8PH23nDq29bYAAJvzjwAAAP//JH91mg==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5.078554365s ago: executing program 8 (id=5647): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0x1002}], 0x1}, 0x0) 4.973615305s ago: executing program 7 (id=5648): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x2, 0x0, 0x2}) 4.365691076s ago: executing program 3 (id=5650): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x2}}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.200165603s ago: executing program 8 (id=5652): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000240)="e1", 0x1}], 0x1}, 0x4000004) 4.12164766s ago: executing program 7 (id=5653): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x8000400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xff}]}]}, 0x28}}, 0x0) 4.020531313s ago: executing program 9 (id=5654): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000a1) readv(r0, 0x0, 0x0) 3.64745168s ago: executing program 3 (id=5655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 3.525464293s ago: executing program 7 (id=5656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x58}}, 0x0) 3.481324213s ago: executing program 8 (id=5657): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="230029bddd00ffdbdf250e00000834002f51f8b26184d502800800084e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.323098383s ago: executing program 0 (id=5658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x1f4, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x1b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1a0, 0x1, [@m_skbedit={0xec, 0x1, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8e}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd96, 0x8, 0x6, 0xb, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x7e, 0x6, "e694237e5368d7ffa3b6902e867a74d28928d9c60c5545d197aed0ec6ae835ef8d6a9da336c44092b74bda2299f780b216b499fbe27d758019db25c266280e79bc55f4fa69e0bc5288f64828bf15b5160f77a26791ac04656dc2da929e6396a3d494a63bc9737729a32d8631b30d5dae8ad64e22cca01df471bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x4, 0x3, 0xfeb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x6, 0x0, 0x306, 0x3b7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x365, 0xfffffff9, 0x20000000, 0x3, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.242910823s ago: executing program 9 (id=5659): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}]}}]}, 0x48}}, 0x0) 3.185819453s ago: executing program 3 (id=5660): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/129, 0x81}], 0x2, 0x5, 0x0) 2.97211584s ago: executing program 7 (id=5661): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setregid(0x0, 0xee00) 2.809559289s ago: executing program 8 (id=5662): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xb}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, &(0x7f0000000500)=0x18) 2.794850424s ago: executing program 9 (id=5663): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0xc, 0x70}, {0x5c, 0xf}, {0xa, 0xff}, {0x100, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x3, 0x2, 0x2, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@pquota}, {@uqnoenforce}, {@largeio}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x6d, 0x78, 0x39]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") 2.473323529s ago: executing program 0 (id=5664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 2.408230561s ago: executing program 3 (id=5665): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 1.452378292s ago: executing program 0 (id=5666): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.062055546s ago: executing program 9 (id=5667): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x40) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 827.424376ms ago: executing program 3 (id=5668): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x3, &(0x7f00000000c0)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe35df2a1f63ef8df4077d040b"}}) 767.277855ms ago: executing program 0 (id=5669): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 695.235704ms ago: executing program 9 (id=5670): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 323.193692ms ago: executing program 0 (id=5671): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 243.576268ms ago: executing program 8 (id=5672): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x2, 0x362}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 187.048541ms ago: executing program 9 (id=5673): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/72, 0x48) 115.456976ms ago: executing program 7 (id=5674): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 0s ago: executing program 0 (id=5675): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r1, @local, @loopback}}}], 0x18}}], 0x1, 0x4000804) kernel console output (not intermixed with test programs): -2 [ 859.194774][T15226] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.4017: bad orphan inode 15 [ 859.215317][T15226] ext4_test_bit(bit=14, block=4) = 1 [ 859.225552][T15226] is_bad_inode(inode)=0 [ 859.230943][T15226] NEXT_ORPHAN(inode)=0 [ 859.235170][T15226] max_ino=32 [ 859.238538][T15226] i_nlink=1 [ 859.244453][T15226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.341037][T15226] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 859.643955][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.996754][T15235] netlink: 'syz.7.4024': attribute type 8 has an invalid length. [ 860.177506][T15239] loop3: detected capacity change from 0 to 512 [ 860.242114][T15239] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 860.281191][T15239] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 860.325490][T15239] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.4022: inode #15: comm syz.3.4022: iget: illegal inode # [ 860.433055][T15239] EXT4-fs (loop3): Remounting filesystem read-only [ 860.446474][T15239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.486036][T15239] EXT4-fs (loop3): shut down requested (1) [ 860.822082][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.701099][T15262] vlan3: entered promiscuous mode [ 861.706360][T15262] bond0: entered promiscuous mode [ 861.711944][T15262] bond_slave_0: entered promiscuous mode [ 861.723598][T15262] bond_slave_1: entered promiscuous mode [ 862.666122][ T4701] Bluetooth: hci5: Frame reassembly failed (-84) [ 862.731711][T15270] Bluetooth: hci5: Frame reassembly failed (-84) [ 862.790884][T15272] evm: overlay not supported [ 863.196409][T15279] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 863.202814][T15279] syzkaller1: linktype set to 774 [ 863.375995][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4043'. [ 863.677316][T15287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4046'. [ 864.809405][T12773] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 864.864618][T15306] loop1: detected capacity change from 0 to 512 [ 864.944271][T15306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.957729][T15306] ext4 filesystem being mounted at /822/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.989440][T15312] loop3: detected capacity change from 0 to 256 [ 865.062524][T15306] EXT4-fs (loop1): shut down requested (2) [ 865.428328][ T5792] bridge0: port 1(syz_tun) entered disabled state [ 865.458244][ T5792] syz_tun (unregistering): left allmulticast mode [ 865.471437][ T5792] syz_tun (unregistering): left promiscuous mode [ 865.491923][ T5792] bridge0: port 1(syz_tun) entered disabled state [ 865.640138][ T5846] kernel read not supported for file /dsp (pid: 5846 comm: kworker/1:5) [ 865.736073][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.008973][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 868.019009][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 868.032683][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 868.057698][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 868.078952][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 868.219885][ T5846] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 868.583562][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 868.632478][ T5846] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 868.642060][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.731415][ T5846] usb 6-1: config 0 descriptor?? [ 869.062816][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 869.096201][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 869.121993][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 869.130217][ T5846] usb 6-1: media controller created [ 869.158216][ T5842] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 869.230437][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 869.368897][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 869.393485][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 869.454942][ T5842] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 869.468909][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.483740][ T5842] usb 1-1: Product: syz [ 869.488113][ T5842] usb 1-1: Manufacturer: syz [ 869.498822][ T5842] usb 1-1: SerialNumber: syz [ 869.546348][T15343] chnl_net:caif_netlink_parms(): no params data found [ 869.586331][ T5842] usb 1-1: config 0 descriptor?? [ 869.702192][ T5842] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 869.717686][ T5842] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 869.755527][ T5846] az6027: usb out operation failed. (-71) [ 869.762274][ T5846] stb0899_attach: Driver disabled by Kconfig [ 869.768402][ T5846] az6027: no front-end attached [ 869.768402][ T5846] [ 869.825036][ T5846] az6027: usb out operation failed. (-71) [ 869.830960][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 869.841089][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37 [ 869.961328][ T5846] dvb-usb: schedule remote query interval to 400 msecs. [ 869.974037][ T5846] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 870.052939][ T5846] usb 6-1: USB disconnect, device number 10 [ 870.285564][ T5790] Bluetooth: hci3: command tx timeout [ 870.300224][ T5842] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 870.333065][ T5846] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 870.411187][T12116] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 870.591600][ T5842] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 870.595884][T12116] usb 4-1: Using ep0 maxpacket: 8 [ 870.604744][ T5842] em28xx 1-1:0.0: board has no eeprom [ 870.648971][T12116] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 870.659206][T12116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.668170][T12116] usb 4-1: Product: syz [ 870.673100][T12116] usb 4-1: Manufacturer: syz [ 870.679460][T12116] usb 4-1: SerialNumber: syz [ 870.740658][ T5842] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 870.740882][T12116] usb 4-1: config 0 descriptor?? [ 870.754543][ T5842] em28xx 1-1:0.0: dvb set to bulk mode. [ 870.770209][ T9] em28xx 1-1:0.0: Binding DVB extension [ 870.794759][ T5842] usb 1-1: USB disconnect, device number 25 [ 870.808094][ T5842] em28xx 1-1:0.0: Disconnecting em28xx [ 870.909658][T15343] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.923515][T15343] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.936144][T15343] bridge_slave_0: entered allmulticast mode [ 870.945852][T15343] bridge_slave_0: entered promiscuous mode [ 871.007132][T12116] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 871.040591][T15343] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.048331][T15343] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.061047][T15343] bridge_slave_1: entered allmulticast mode [ 871.079885][T15343] bridge_slave_1: entered promiscuous mode [ 871.184976][ T9] em28xx 1-1:0.0: Registering input extension [ 871.239269][ T5842] em28xx 1-1:0.0: Closing input extension [ 871.338597][ T5842] em28xx 1-1:0.0: Freeing device [ 871.617417][T15343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.650464][T12116] gspca_sunplus: reg_w_riv err -71 [ 871.659560][T12116] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 871.691874][T15343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.696009][T12116] usb 4-1: USB disconnect, device number 25 [ 871.839543][T15343] team0: Port device team_slave_0 added [ 871.858537][T15343] team0: Port device team_slave_1 added [ 871.937840][T15382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 872.097132][T15343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.104499][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.133695][T15343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.154762][T15343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.161905][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.188086][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.194972][T15343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.506933][T15343] hsr_slave_0: entered promiscuous mode [ 872.512746][ T5790] Bluetooth: hci3: command tx timeout [ 872.521833][T15343] hsr_slave_1: entered promiscuous mode [ 872.537995][T15343] debugfs: 'hsr0' already exists in 'hsr' [ 872.548427][T15343] Cannot create hsr debugfs directory [ 872.976037][T15394] loop5: detected capacity change from 0 to 256 [ 873.189620][T15394] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 874.413679][T15343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 874.575161][T15343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 874.684880][T15343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 874.730967][ T5790] Bluetooth: hci3: command tx timeout [ 874.738922][T15343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 875.818575][ T4701] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 876.072742][T15343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.211953][T15343] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.319533][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.327138][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.483425][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.491020][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.785951][T15343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.955202][ T5790] Bluetooth: hci3: command tx timeout [ 878.277656][T15343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.312669][T15446] netlink: 'syz.7.4116': attribute type 11 has an invalid length. [ 878.320679][T15446] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4116'. [ 878.725431][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'. [ 878.842415][T15456] loop7: detected capacity change from 0 to 8 [ 880.246854][T15475] loop5: detected capacity change from 0 to 512 [ 880.408311][T15475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.419120][T15343] veth0_vlan: entered promiscuous mode [ 880.470231][T15343] veth1_vlan: entered promiscuous mode [ 880.604606][T15482] loop3: detected capacity change from 0 to 64 [ 880.610951][ T30] audit: type=1800 audit(1760281521.700:121): pid=15475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4127" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 880.854467][T15343] veth0_macvtap: entered promiscuous mode [ 880.924819][T11185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.942579][T15343] veth1_macvtap: entered promiscuous mode [ 881.110112][T15343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.160176][T15343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.319452][ T754] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.362612][ T754] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.411747][ T754] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.439466][T15490] netlink: 'syz.0.4131': attribute type 2 has an invalid length. [ 881.456484][ T754] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.508519][T15510] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4138'. [ 884.846305][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4152'. [ 886.002041][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4161'. [ 886.109970][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4161'. [ 886.343061][T15577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4162'. [ 886.353371][T15577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4162'. [ 886.464671][T15579] program syz.3.4163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.029643][ T4203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.037974][ T4203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.170416][ T4203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.178783][ T4203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.425313][T12116] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 887.468959][T15590] loop5: detected capacity change from 0 to 256 [ 887.514679][T15590] exfat: Deprecated parameter 'namecase' [ 887.520992][T15590] exfat: Deprecated parameter 'namecase' [ 887.671595][T12116] usb 4-1: Using ep0 maxpacket: 32 [ 887.700996][T12116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.712568][T12116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.712844][T15590] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 887.722741][T12116] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 887.722890][T12116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.792640][T12116] usb 4-1: config 0 descriptor?? [ 888.082797][T12116] usbhid 4-1:0.0: can't add hid device: -71 [ 888.089547][T12116] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 888.153847][T12116] usb 4-1: USB disconnect, device number 26 [ 888.857354][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 888.879404][T15610] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.4176'. [ 889.080913][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 889.094482][ T9] usb 6-1: config 0 has no interface number 0 [ 889.105864][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 889.117869][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 889.192361][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 889.207159][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 889.208130][T15613] erspan0: entered promiscuous mode [ 889.220309][ T9] usb 6-1: Product: syz [ 889.225101][ T9] usb 6-1: SerialNumber: syz [ 889.267605][T15614] sctp: [Deprecated]: syz.7.4178 (pid 15614) Use of int in max_burst socket option deprecated. [ 889.267605][T15614] Use struct sctp_assoc_value instead [ 889.350533][ T9] usb 6-1: config 0 descriptor?? [ 889.392232][ T9] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 889.404415][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input39 [ 889.661428][ C0] cm109_urb_ctl_callback: 61 callbacks suppressed [ 889.661547][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.681860][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.694306][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.706366][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.718536][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.728547][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.740731][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.748177][ T9] usb 6-1: USB disconnect, device number 11 [ 889.759665][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 889.759796][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 889.801479][ T9] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 acpid: input device has been disconnected, fd 3 [ 890.761750][T15630] loop8: detected capacity change from 0 to 512 [ 891.029159][T12116] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 891.258135][T12116] usb 4-1: Using ep0 maxpacket: 16 [ 891.332820][T12116] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 891.340780][T12116] usb 4-1: can't read configurations, error -71 [ 892.510580][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4198'. [ 892.520843][T15660] netem: change failed [ 893.745590][T15677] loop3: detected capacity change from 0 to 1024 [ 893.837425][T15679] loop7: detected capacity change from 0 to 1024 [ 894.243468][ T5030] hfsplus: b-tree write err: -5, ino 4 [ 895.298713][T15701] loop5: detected capacity change from 0 to 512 [ 895.367331][T15701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 895.493709][T15701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.507092][T15701] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.663159][T15701] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 895.750282][T15712] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 895.763133][T15712] EXT4-fs (loop5): This should not happen!! Data will be lost [ 895.763133][T15712] [ 895.778128][T15712] EXT4-fs (loop5): Total free blocks count 0 [ 895.785897][T15712] EXT4-fs (loop5): Free/Dirty block details [ 895.792179][T15712] EXT4-fs (loop5): free_blocks=39627 [ 895.797635][T15712] EXT4-fs (loop5): dirty_blocks=1 [ 895.803270][T15712] EXT4-fs (loop5): Block reservation details [ 895.809410][T15712] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 896.169525][T11185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.430776][ T9] hid_parser_main: 8 callbacks suppressed [ 897.430876][ T9] hid-generic 0005:10CF:5505.0023: unknown main item tag 0x0 [ 897.473988][ T9] hid-generic 0005:10CF:5505.0023: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 897.730847][T15742] loop3: detected capacity change from 0 to 2048 [ 897.808799][T15742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 898.193642][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4237'. [ 899.171539][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4244'. [ 899.435392][T15764] loop0: detected capacity change from 0 to 2048 [ 899.553136][T15764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 900.934391][T15786] loop7: detected capacity change from 0 to 4096 [ 903.800971][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4279'. [ 906.596711][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 906.625181][T15882] Bluetooth: hci5: Frame reassembly failed (-84) [ 906.633015][ T4762] Bluetooth: hci5: Frame reassembly failed (-84) [ 908.770757][ T5790] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 909.004734][ T4762] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 910.465628][T15949] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4327'. [ 910.670352][T15951] loop8: detected capacity change from 0 to 22 [ 910.680550][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.774068][T15951] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 911.272340][T15957] loop5: detected capacity change from 0 to 4096 [ 912.679065][T15983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4342'. [ 912.949372][T12116] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 913.149703][T12116] usb 9-1: Using ep0 maxpacket: 16 [ 913.166487][T12116] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.184733][T12116] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 913.195587][T12116] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.271310][T12116] usb 9-1: config 0 descriptor?? [ 913.843340][T12116] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 914.006533][T16003] loop0: detected capacity change from 0 to 256 [ 914.248628][ T9] usb 9-1: USB disconnect, device number 2 [ 914.687949][T16013] Bluetooth: MGMT ver 1.23 [ 914.692805][T16013] Bluetooth: hci1: too big key_count value 18182 [ 915.223323][T16017] loop3: detected capacity change from 0 to 1024 [ 915.309087][T16017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 915.323256][T16017] System zones: 0-1, 3-36 [ 915.413166][T16017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.522081][T16017] EXT4-fs (loop3): shut down requested (2) [ 915.691656][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 915.744342][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.791740][T16030] loop8: detected capacity change from 0 to 2048 [ 915.891249][T16032] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 915.943912][ T30] audit: type=1800 audit(1760281810.762:122): pid=16030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4361" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 915.955588][ T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 915.982306][ T9] usb 6-1: config 1 has no interface number 0 [ 915.993174][ T9] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 916.011518][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 916.027361][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 916.047081][ T9] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.163941][T16032] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 916.179988][T16032] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 916.252503][T16036] loop7: detected capacity change from 0 to 7 [ 916.266247][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.275846][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.289201][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 916.303145][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.304759][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.312282][ T9] usb 6-1: Product: syz [ 916.320991][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.335579][ T9] usb 6-1: Manufacturer: syz [ 916.336798][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.345032][ T9] usb 6-1: SerialNumber: syz [ 916.349895][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.355539][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.370399][T16032] Remounting filesystem read-only [ 916.372404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.386748][T15343] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 916.404665][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.414253][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.427998][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.437651][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.449930][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.459612][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.468138][T16036] ldm_validate_partition_table(): Disk read failed. [ 916.481820][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.491470][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.533314][T16037] Invalid logical block size (6) [ 916.542108][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 916.588133][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.597698][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.610973][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 916.611098][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.627800][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.645825][T16036] Dev loop7: unable to read RDB block 0 [ 916.696269][T16036] loop7: unable to read partition table [ 916.713080][T16036] loop7: partition table beyond EOD, truncated [ 916.719645][T16036] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 916.914144][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 916.929382][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 917.288321][T16045] loop0: detected capacity change from 0 to 256 [ 917.397610][T16045] MINIX-fs: mounting file system with errors, running fsck is recommended [ 917.491160][ T9] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 917.691248][ T9] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 917.703413][ T9] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 917.758706][ T9] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 917.766716][ T9] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 917.796949][ T9] usb 6-1: USB disconnect, device number 12 [ 917.810764][ T9] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 917.950593][T16053] loop7: detected capacity change from 0 to 512 [ 918.005042][T16053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 918.062088][T16053] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.4371: invalid block [ 918.064661][ T9] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 918.142275][T16053] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4371: invalid indirect mapped block 4294967295 (level 1) [ 918.163061][T16053] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4371: invalid indirect mapped block 4294967295 (level 1) [ 918.203200][T16053] EXT4-fs (loop7): 2 truncates cleaned up [ 918.215400][T16053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.257586][T16053] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.7.4371: path /228/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 918.488802][T13085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.778435][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4376'. [ 918.787864][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4376'. [ 918.797270][T16063] netlink: 'syz.8.4376': attribute type 18 has an invalid length. [ 920.259026][T16077] loop7: detected capacity change from 0 to 4096 [ 920.469060][T16077] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 920.502969][T16077] ntfs3(loop7): Failed to load $Extend (-22). [ 920.515292][T16077] ntfs3(loop7): Failed to initialize $Extend. [ 920.546520][T16087] loop5: detected capacity change from 0 to 512 [ 920.609817][T16087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.627616][T16087] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.218383][T11185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.208982][T16101] loop5: detected capacity change from 0 to 4096 [ 922.239170][T16101] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 922.676481][T16101] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 922.706938][T16121] netlink: 'syz.7.4398': attribute type 1 has an invalid length. [ 923.099139][T16114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 923.111693][T16114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 923.126135][T16114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 923.137942][T16114] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 923.221891][T16114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 923.238141][T16114] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 923.302936][T16114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 923.309982][T16114] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 923.370443][T16114] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 923.590293][T16114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 923.868414][T12116] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 924.078337][T12116] usb 6-1: Using ep0 maxpacket: 8 [ 924.131155][T12116] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 924.140629][T12116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.149107][T12116] usb 6-1: Product: syz [ 924.153771][T12116] usb 6-1: Manufacturer: syz [ 924.158550][T12116] usb 6-1: SerialNumber: syz [ 924.249768][T12116] usb 6-1: config 0 descriptor?? [ 924.267171][T12116] gspca_main: se401-2.14.0 probing 047d:5003 [ 924.393026][T16140] loop8: detected capacity change from 0 to 128 [ 924.467692][T16140] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 924.502381][T16140] hpfs: filesystem error: improperly stopped [ 924.513856][T16140] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 924.531810][T16140] hpfs: You really don't want any checks? You are crazy... [ 924.578521][T16140] hpfs: hpfs_map_sector(): read error [ 924.589423][T16140] hpfs: code page support is disabled [ 924.608593][T16140] hpfs: hpfs_map_4sectors(): unaligned read [ 924.616143][T16140] hpfs: hpfs_map_4sectors(): unaligned read [ 924.622525][T16140] hpfs: filesystem error: unable to find root dir [ 924.772998][T12773] Bluetooth: hci0: command 0x0406 tx timeout [ 924.785377][T12116] gspca_se401: ExtraFeatures: 16 [ 924.790498][T12116] gspca_se401: Too many frame sizes [ 924.830691][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 925.010630][T12116] usb 6-1: USB disconnect, device number 13 [ 925.054998][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 925.113878][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 925.122556][ T9] usb 1-1: config 0 has no interface number 0 [ 925.133427][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 925.248143][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 925.262444][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.275298][T12773] Bluetooth: hci4: command 0x0406 tx timeout [ 925.275426][T12773] Bluetooth: hci1: command 0x0406 tx timeout [ 925.292184][ T9] usb 1-1: Product: syz [ 925.303525][ T9] usb 1-1: Manufacturer: syz [ 925.313084][ T9] usb 1-1: SerialNumber: syz [ 925.338224][ T9] usb 1-1: config 0 descriptor?? [ 925.456085][ T5790] Bluetooth: hci2: command 0x0405 tx timeout [ 925.464092][ T5790] Bluetooth: hci3: command 0x0405 tx timeout [ 926.267237][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 926.280983][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 926.291624][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 926.304985][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 926.424028][ T9] usb 1-1: USB disconnect, device number 26 [ 926.986263][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 927.384376][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4424'. [ 927.498972][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 927.674147][ T5790] Bluetooth: hci3: command 0x0405 tx timeout [ 927.680888][T12773] Bluetooth: hci2: command 0x0405 tx timeout [ 928.646667][T16188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 928.905034][T16189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 928.961194][T16191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.085761][T16191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.302270][T16191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.444793][T16191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.721445][ T4701] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.815679][ T4203] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.826619][ T4203] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.837828][ T4203] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.896331][ T5790] Bluetooth: hci3: command 0x0405 tx timeout [ 930.761935][T16202] loop5: detected capacity change from 0 to 4096 [ 930.973995][T16204] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 933.282571][ T5846] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 933.478059][ T5846] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.489064][ T5846] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 933.502360][ T5846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 933.511341][ T5846] usb 9-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 933.521291][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.637712][ T5846] usb 9-1: config 0 descriptor?? [ 934.202352][ T5846] a4tech 0003:09DA:000A.0025: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.8-1/input0 [ 934.373742][ T5846] usb 9-1: USB disconnect, device number 3 [ 936.993318][T16269] loop0: detected capacity change from 0 to 128 [ 937.320644][ T30] audit: type=1326 audit(1760281830.761:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.8.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 937.399222][ T30] audit: type=1326 audit(1760281830.789:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.8.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 937.422027][ T30] audit: type=1326 audit(1760281830.789:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.8.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 938.326026][T16281] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 938.582928][T16283] loop8: detected capacity change from 0 to 256 [ 939.367323][T16291] loop3: detected capacity change from 0 to 64 [ 939.376976][T16291] hfs: Unknown parameter '0xffffffffffffffffÿÿ' [ 940.205141][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4480'. [ 941.192836][T16311] loop0: detected capacity change from 0 to 256 [ 941.510483][T16307] loop7: detected capacity change from 0 to 8192 [ 941.748195][T16315] loop3: detected capacity change from 0 to 1024 [ 941.956637][T16307] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 941.970037][T16307] FAT-fs (loop7): Filesystem has been set read-only [ 942.269437][ T4203] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 943.317629][T16341] loop3: detected capacity change from 0 to 128 [ 943.432150][T16341] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 943.499797][T16341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 944.458904][T16351] loop0: detected capacity change from 0 to 2048 [ 944.535120][T16351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.627389][T16351] EXT4-fs (loop0): shut down requested (2) [ 944.907227][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.336939][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 945.381912][ T5846] kernel read not supported for file /media0 (pid: 5846 comm: kworker/1:5) [ 945.582765][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 945.591210][ T9] usb 9-1: config 0 has no interface number 0 [ 945.669846][ T9] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 945.683992][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.693012][ T9] usb 9-1: Product: syz [ 945.702369][ T9] usb 9-1: Manufacturer: syz [ 945.711815][ T9] usb 9-1: SerialNumber: syz [ 945.800699][ T9] usb 9-1: config 0 descriptor?? [ 946.094609][ T9] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 946.142473][ T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 946.157878][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 946.169270][ T9] usb 9-1: media controller created [ 946.290547][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.630284][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 946.993303][ T9] usb 9-1: USB disconnect, device number 4 [ 948.094706][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 948.274974][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 948.299304][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.315367][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 948.322242][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 948.336969][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.363286][ T9] usb 1-1: config 0 descriptor?? [ 948.908828][ T9] nzxt-smart2 0003:1E71:2009.0026: item fetching failed at offset 2/5 [ 948.937729][ T5846] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 948.995535][ T9] nzxt-smart2 0003:1E71:2009.0026: probe with driver nzxt-smart2 failed with error -22 [ 949.134322][T12116] usb 1-1: USB disconnect, device number 27 [ 949.220413][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.231050][ T5846] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 949.240625][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.314254][ T5846] usb 9-1: config 0 descriptor?? [ 949.341148][ T5846] pwc: Askey VC010 type 2 USB webcam detected. [ 949.542003][T16388] erspan0: entered promiscuous mode [ 949.875144][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 950.117218][ T5846] pwc: recv_control_msg error -71 req 02 val 2c00 [ 950.163112][ T5846] pwc: recv_control_msg error -71 req 04 val 1000 [ 950.199993][ T5846] pwc: recv_control_msg error -71 req 04 val 1300 [ 950.233930][ T5846] pwc: recv_control_msg error -71 req 04 val 1400 [ 950.280651][ T5846] pwc: recv_control_msg error -71 req 02 val 2000 [ 950.355716][ T5846] pwc: recv_control_msg error -71 req 02 val 2100 [ 950.373467][ T5846] pwc: recv_control_msg error -71 req 04 val 1500 [ 950.414725][ T5846] pwc: recv_control_msg error -71 req 02 val 2500 [ 950.416262][T16394] loop7: detected capacity change from 0 to 64 [ 950.457572][ T5846] pwc: recv_control_msg error -71 req 02 val 2400 [ 950.510708][ T5846] pwc: recv_control_msg error -71 req 02 val 2600 [ 950.547832][ T5846] pwc: recv_control_msg error -71 req 02 val 2900 [ 950.589032][ T5846] pwc: recv_control_msg error -71 req 02 val 2800 [ 950.622852][ T5846] pwc: recv_control_msg error -71 req 04 val 1100 [ 950.672244][ T5846] pwc: recv_control_msg error -71 req 04 val 1200 [ 950.696734][T16394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4515'. [ 950.712797][ T5846] pwc: Registered as video103. [ 950.725974][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input40 [ 950.827515][ T5846] usb 9-1: USB disconnect, device number 5 [ 951.408156][T12773] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.422170][T16400] overlayfs: failed to resolve './bus/file0': -89 [ 951.474327][T12773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.497299][T12773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.529510][T12773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.547900][T12773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.318522][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4520'. [ 952.332559][T16410] netlink: 34 bytes leftover after parsing attributes in process `syz.8.4520'. [ 952.753803][T16401] chnl_net:caif_netlink_parms(): no params data found [ 953.699221][T16425] netlink: 'syz.7.4525': attribute type 4 has an invalid length. [ 953.763270][T12773] Bluetooth: hci5: command tx timeout [ 953.903970][T16429] loop3: detected capacity change from 0 to 1024 [ 954.055995][T16429] hfsplus: xattr searching failed [ 954.100061][T16429] hfsplus: xattr searching failed [ 954.130834][ T30] audit: type=1800 audit(1760281846.457:126): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4528" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 954.491593][T16334] hfsplus: b-tree write err: -5, ino 3 [ 954.719383][T16401] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.726881][T16401] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.735136][T16401] bridge_slave_0: entered allmulticast mode [ 954.747259][T16401] bridge_slave_0: entered promiscuous mode [ 954.865246][T11482] bridge0: port 3(syz_tun) entered disabled state [ 955.052386][T16442] loop3: detected capacity change from 0 to 16 [ 955.087234][T11482] syz_tun (unregistering): left allmulticast mode [ 955.092083][T16442] erofs (device loop3): mounted with root inode @ nid 36. [ 955.100185][T11482] syz_tun (unregistering): left promiscuous mode [ 955.117203][T11482] bridge0: port 3(syz_tun) entered disabled state [ 955.186148][T16401] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.193987][T16401] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.201966][T16401] bridge_slave_1: entered allmulticast mode [ 955.217426][T16401] bridge_slave_1: entered promiscuous mode [ 955.364661][T16328] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.833772][T16328] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.981630][T16401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.001492][T12773] Bluetooth: hci5: command tx timeout [ 956.019541][T16401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.197276][T16328] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.222921][ T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 956.275590][T16401] team0: Port device team_slave_0 added [ 956.359992][T16328] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.443135][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.458123][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.461537][T16401] team0: Port device team_slave_1 added [ 956.571543][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.585898][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.595045][ T9] usb 1-1: Product: syz [ 956.599542][ T9] usb 1-1: Manufacturer: syz [ 956.604331][ T9] usb 1-1: SerialNumber: syz [ 956.713957][T12773] Bluetooth: unknown link type 128 [ 956.831697][T16401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.839405][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.871666][T16401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.899953][T16454] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 956.907119][T16454] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 956.914481][T16454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 956.975503][T16401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.984830][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.012414][T16401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.025785][T16454] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 957.032685][T16454] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 957.039580][T16454] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 957.067114][ T9] usb 1-1: 0:2 : does not exist [ 957.102005][T16328] bridge_slave_1: left allmulticast mode [ 957.108040][T16328] bridge_slave_1: left promiscuous mode [ 957.116083][T16328] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.117820][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 957.202993][T16328] bridge_slave_0: left allmulticast mode [ 957.209887][T16328] bridge_slave_0: left promiscuous mode [ 957.212526][ T9] usb 1-1: USB disconnect, device number 28 [ 957.216412][T16328] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.235664][T16454] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 957.409679][T16328] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 957.738752][T16328] batman_adv: batadv0: Removing interface: ip6gretap1 [ 958.240275][T16328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.276216][T16463] loop0: detected capacity change from 0 to 64 [ 958.306034][T16328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.336813][T16328] bond0 (unregistering): Released all slaves [ 958.425637][ T30] audit: type=1800 audit(1760281850.498:127): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4543" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 958.783913][T16401] hsr_slave_0: entered promiscuous mode [ 958.797703][T16401] hsr_slave_1: entered promiscuous mode [ 958.806836][T16401] debugfs: 'hsr0' already exists in 'hsr' [ 958.812886][T16401] Cannot create hsr debugfs directory [ 958.891934][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 958.905141][T16452] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 959.168986][ T5790] Bluetooth: hci2: command 0x0405 tx timeout [ 959.180049][T12773] Bluetooth: hci1: command 0x0406 tx timeout [ 959.236256][ T5790] Bluetooth: hci5: command 0x0419 tx timeout [ 959.247953][T12773] Bluetooth: hci3: command 0x0405 tx timeout [ 959.257041][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4544'. [ 959.337221][T16470] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4544'. [ 959.348238][T16470] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4544'. [ 959.779427][T16328] hsr_slave_0: left promiscuous mode [ 959.782070][T16474] loop0: detected capacity change from 0 to 64 [ 959.802552][T16328] hsr_slave_1: left promiscuous mode [ 959.818302][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.825886][T16328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.903157][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.910962][T16328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.965463][T16474] syz.0.4546: attempt to access beyond end of device [ 959.965463][T16474] loop0: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 959.980337][T16474] syz.0.4546: attempt to access beyond end of device [ 959.980337][T16474] loop0: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 959.992979][ T30] audit: type=1800 audit(1760281851.939:128): pid=16474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4546" name="file2" dev="loop0" ino=22 res=0 errno=0 [ 959.995005][T16474] syz.0.4546: attempt to access beyond end of device [ 959.995005][T16474] loop0: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 960.035766][T16474] syz.0.4546: attempt to access beyond end of device [ 960.035766][T16474] loop0: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 960.063180][T16474] syz.0.4546: attempt to access beyond end of device [ 960.063180][T16474] loop0: rw=34817, sector=179, nr_sectors = 263 limit=64 [ 960.155560][T16328] veth1_macvtap: left promiscuous mode [ 960.165886][T16328] veth0_macvtap: left promiscuous mode [ 960.176465][T16328] veth1_vlan: left promiscuous mode [ 960.187005][T16328] veth0_vlan: left promiscuous mode [ 960.578650][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4551'. [ 961.153398][T12773] Bluetooth: hci0: command 0x0406 tx timeout [ 961.273967][T16328] team0 (unregistering): Port device team_slave_1 removed [ 961.308556][T16328] team0 (unregistering): Port device team_slave_0 removed [ 961.537179][T12773] Bluetooth: hci5: command 0x0419 tx timeout [ 961.697543][T16485] mkiss: ax0: crc mode is auto. [ 962.759487][T16401] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 962.800167][T16401] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 962.889050][T16401] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 962.994823][T16401] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 963.766733][T12773] Bluetooth: hci5: command 0x0419 tx timeout [ 964.171204][T16401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.334378][T16401] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.422373][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.430020][T16335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.545676][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.553220][T16335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.990721][T12773] Bluetooth: hci5: command 0x0419 tx timeout [ 966.335261][T16401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.909360][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 967.116803][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 967.188895][T16438] kernel read not supported for file /vcs (pid: 16438 comm: kworker/0:3) [ 967.252031][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 967.293667][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 967.306015][ T9] usb 1-1: can't read configurations, error -71 [ 967.438489][T16558] loop7: detected capacity change from 0 to 16 [ 967.510703][T16558] erofs (device loop7): mounted with root inode @ nid 36. [ 967.530997][ T30] audit: type=1800 audit(1760281859.020:129): pid=16558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4581" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 968.305059][T16401] veth0_vlan: entered promiscuous mode [ 968.415502][T16401] veth1_vlan: entered promiscuous mode [ 968.791422][T16401] veth0_macvtap: entered promiscuous mode [ 968.870426][T16401] veth1_macvtap: entered promiscuous mode [ 969.019085][T16401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.110861][T16401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.229594][T16335] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.293845][T16335] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.328656][T16342] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.367880][T16342] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.570790][T16577] loop0: detected capacity change from 0 to 512 [ 969.622741][T16577] EXT4-fs: Ignoring removed bh option [ 969.735841][T16577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.784833][T16577] ext4 filesystem being mounted at /958/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 970.041140][T16586] loop3: detected capacity change from 0 to 256 [ 970.236133][T16586] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 970.395072][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.433778][ T30] audit: type=1800 audit(1760281861.714:130): pid=16586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4590" name="file1" dev="loop3" ino=1048901 res=0 errno=0 [ 971.868841][T16603] loop3: detected capacity change from 0 to 1024 [ 972.011617][T16603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.548002][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.609000][T16615] loop7: detected capacity change from 0 to 2048 [ 972.738659][T16615] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 972.803548][T16615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 973.174824][T16615] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 110592 lbcount: 114688 extent 129+78848 [ 974.592093][ T5030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.600140][ T5030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.942816][ T5030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.951049][ T5030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.473977][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4613'. [ 975.528525][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4613'. [ 976.377639][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 977.004588][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4622'. [ 977.567207][T16691] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4626'. [ 977.668329][ T30] audit: type=1326 audit(1760281868.477:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.0.4628" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 978.255561][T16702] loop9: detected capacity change from 0 to 512 [ 978.296798][T16702] EXT4-fs: Ignoring removed orlov option [ 978.315655][T16702] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 978.556638][T16702] EXT4-fs (loop9): 1 orphan inode deleted [ 978.574602][T16702] EXT4-fs (loop9): 1 truncate cleaned up [ 978.586962][T16702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.669416][T16705] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 978.713324][T16706] netlink: 'syz.3.4633': attribute type 3 has an invalid length. [ 978.728507][T16706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4633'. [ 978.774272][T16702] EXT4-fs error (device loop9): empty_inline_dir:1760: inode #12: block 7: comm syz.9.4631: bad entry in directory: rec_len is too small for name_len - offset=4, inode=13, rec_len=16, size=60 fake=0 [ 978.799177][T16702] EXT4-fs warning (device loop9): empty_inline_dir:1767: bad inline directory (dir #12) - inode 13, rec_len 16, name_len 53inline size 60 [ 979.276164][T16401] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.623107][T16719] loop7: detected capacity change from 0 to 128 [ 979.684944][T16719] EXT4-fs (loop7): Test dummy encryption mode enabled [ 979.705041][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4638'. [ 979.790229][T16719] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 979.860171][T16719] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 979.905365][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4641'. [ 980.218186][T13085] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 980.650710][T16738] bridge0: port 3(syz_tun) entered blocking state [ 980.662525][T16738] bridge0: port 3(syz_tun) entered disabled state [ 980.670632][T16738] syz_tun: entered allmulticast mode [ 980.679289][T16738] syz_tun: entered promiscuous mode [ 980.686952][T16738] bridge0: port 3(syz_tun) entered blocking state [ 980.693817][T16738] bridge0: port 3(syz_tun) entered forwarding state [ 981.175668][T16742] loop9: detected capacity change from 0 to 128 [ 981.257330][T16742] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 981.308103][T16742] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 981.407045][T16742] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.4649: No space for directory leaf checksum. Please run e2fsck -D. [ 981.423095][T16742] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.4649: checksumming directory block 0 [ 981.666704][T16401] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 981.861882][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4654'. [ 982.061692][T16758] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4655'. [ 982.203773][T16760] loop3: detected capacity change from 0 to 2048 [ 982.212704][T16760] EXT4-fs: Ignoring removed bh option [ 982.236413][T16762] loop8: detected capacity change from 0 to 512 [ 982.303776][T16760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.318176][T16762] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.334277][T16762] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.641795][T15343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.670036][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.831494][T16774] input: syz1 as /devices/virtual/input/input43 [ 983.056235][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4666'. [ 983.080753][T16781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4663'. [ 983.121630][T16782] loop8: detected capacity change from 0 to 1024 [ 983.311839][T16782] hfsplus: xattr searching failed [ 983.330449][T16782] hfsplus: catalog searching failed [ 983.545072][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4668'. [ 983.562652][T16328] hfsplus: b-tree write err: -5, ino 3 [ 984.189483][T16795] loop0: detected capacity change from 0 to 4096 [ 984.425254][T16795] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 984.432325][T16795] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 984.508485][T16804] pimreg3: entered allmulticast mode [ 984.577833][T16803] pimreg3: left allmulticast mode [ 984.646157][T16335] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 984.670446][ T5784] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 984.679206][ T5784] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 984.687978][ T5784] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 984.712447][T16328] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 985.680885][T16821] netlink: 'syz.0.4685': attribute type 49 has an invalid length. [ 987.015026][T16844] overlayfs: upper fs does not support file handles, falling back to index=off. [ 987.024855][T16844] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 987.242234][T16846] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4697'. [ 987.252445][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4697'. [ 987.965154][T16860] loop9: detected capacity change from 0 to 512 [ 988.025840][T16860] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.4702: casefold flag without casefold feature [ 988.070309][T16860] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4702: couldn't read orphan inode 15 (err -117) [ 988.088552][T16860] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.221839][T16859] geneve0: entered promiscuous mode [ 988.227273][T16859] geneve0: entered allmulticast mode [ 988.565216][T16401] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.012703][ T5846] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 989.215603][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 989.241314][ T5846] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 989.250883][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.263026][ T5846] usb 1-1: Product: syz [ 989.267399][ T5846] usb 1-1: Manufacturer: syz [ 989.273630][ T5846] usb 1-1: SerialNumber: syz [ 989.325330][ T5846] usb 1-1: config 0 descriptor?? [ 989.353488][ T5846] gspca_main: se401-2.14.0 probing 047d:5003 [ 989.943026][ T5846] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 990.598391][ T5846] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 990.606339][ T5846] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 990.657336][ T5846] usb 1-1: USB disconnect, device number 31 [ 991.856972][ T5846] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 992.083228][ T5846] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.094829][ T5846] usb 10-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 992.108101][ T5846] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.164291][ T5846] usb 10-1: config 0 descriptor?? [ 992.631002][ T5846] hid (null): nested delimiters [ 992.668309][ T5846] itetech 0003:06CB:73F4.0027: nested delimiters [ 992.675498][ T5846] itetech 0003:06CB:73F4.0027: item 0 4 2 10 parsing failed [ 992.719780][ T5846] itetech 0003:06CB:73F4.0027: probe with driver itetech failed with error -22 [ 992.908792][ T5842] usb 10-1: USB disconnect, device number 2 [ 993.173455][T16920] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4728'. [ 993.183332][T16920] 0ªX¹¦D: renamed from gretap0 (while UP) [ 993.221935][T16920] 0ªX¹¦D: entered allmulticast mode [ 993.230015][T16920] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 994.301056][T16335] Bluetooth: hci4: Frame reassembly failed (-84) [ 994.852534][T16950] loop0: detected capacity change from 0 to 64 [ 994.884478][T16950] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 995.291767][T16958] bond0: option arp_interval: invalid value (18446744071578845184) [ 995.303644][T16958] bond0: option arp_interval: allowed values 0 - 2147483647 [ 996.194202][T16976] loop3: detected capacity change from 0 to 512 [ 996.198700][T16971] loop7: detected capacity change from 0 to 4096 [ 996.213807][T16976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 996.272783][T16976] EXT4-fs (loop3): 1 truncate cleaned up [ 996.280919][T16976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.517726][T12773] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 996.519269][ T5790] Bluetooth: hci4: command 0xfc11 tx timeout [ 996.592112][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.205147][ T5842] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 997.415613][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 997.443403][ T5842] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 997.452484][ T5842] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 997.461756][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 997.472704][ T5842] usb 4-1: config 1 has no interface number 0 [ 997.479691][ T5842] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.491230][ T5842] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 997.504583][ T5842] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 997.514048][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.702693][ T5842] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 997.964609][ T5842] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 998.161423][T17005] loop8: detected capacity change from 0 to 512 [ 998.200723][T17005] EXT4-fs: Ignoring removed mblk_io_submit option [ 998.313331][T17005] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4768: Invalid inode bitmap blk 4 in block_group 0 [ 998.415345][T17005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.468626][ T5842] usb 4-1: USB disconnect, device number 29 [ 998.476600][ T5842] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 998.531785][T17005] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 998.649355][T17015] loop9: detected capacity change from 0 to 256 [ 998.774911][T15343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.803272][T17015] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 999.160672][T12773] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 999.414121][T17030] loop3: detected capacity change from 0 to 16 [ 999.439986][T17028] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4777'. [ 999.492054][T17030] erofs (device loop3): mounted with root inode @ nid 36. [ 1000.573673][T17036] loop9: detected capacity change from 0 to 32768 [ 1000.585843][T17036] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4782 (17036) [ 1000.610899][T17036] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1000.622640][T17036] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 1000.813873][T17036] BTRFS info (device loop9): enabling ssd optimizations [ 1000.821454][T17036] BTRFS info (device loop9): using spread ssd allocation scheme [ 1000.835589][T17036] BTRFS info (device loop9): turning on sync discard [ 1000.842742][T17036] BTRFS info (device loop9): enabling free space tree [ 1000.971273][T17063] sctp: Trying to GSO but underlying device doesn't support it. [ 1000.974738][T16401] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1001.205422][T17065] netlink: 'syz.7.4790': attribute type 1 has an invalid length. [ 1001.214493][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1001.799267][T17075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4794'. [ 1002.161856][ C0] hrtimer: interrupt took 200935 ns [ 1002.656118][T17088] netlink: 144 bytes leftover after parsing attributes in process `syz.8.4799'. [ 1003.752033][T17103] loop8: detected capacity change from 0 to 1024 [ 1006.273019][T17144] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4823'. [ 1006.282596][T17144] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4823'. [ 1006.292386][T17144] netlink: 'syz.3.4823': attribute type 5 has an invalid length. [ 1006.300425][T17144] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4823'. [ 1006.570820][T17146] loop8: detected capacity change from 0 to 64 [ 1006.591800][T17146] hfs: Bad value for 'part' [ 1006.639482][T17146] gfs2: gfs2 mount does not exist [ 1007.195736][T17156] loop8: detected capacity change from 0 to 1024 [ 1007.237953][T17158] loop3: detected capacity change from 0 to 512 [ 1007.273365][T17158] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1007.342131][T17156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.388681][ T30] audit: type=1800 audit(1760281896.295:132): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4830" name="file1" dev="loop3" ino=1048909 res=0 errno=0 [ 1007.514375][T17156] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 1007.810599][T15343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.623126][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4838'. [ 1008.995850][T17187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1009.540538][T17195] input: syz0 as /devices/virtual/input/input44 [ 1009.892038][ T5846] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1010.097709][ T5846] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.109023][ T5846] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.120534][ T5846] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1010.281271][ T5846] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1010.291614][ T5846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.300181][ T5846] usb 10-1: Product: syz [ 1010.304613][ T5846] usb 10-1: Manufacturer: syz [ 1010.309585][ T5846] usb 10-1: SerialNumber: syz [ 1010.980515][ T5842] usb 10-1: USB disconnect, device number 3 [ 1011.173607][T17216] loop8: detected capacity change from 0 to 512 [ 1011.244804][T17218] loop3: detected capacity change from 0 to 512 [ 1011.298023][T17218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.311515][T17218] ext4 filesystem being mounted at /982/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.472709][T17218] EXT4-fs (loop3): shut down requested (0) [ 1011.720504][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.130672][T17247] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4865'. [ 1013.999983][ T5846] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1014.211502][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 1014.258038][ T5846] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1014.266906][ T5846] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1014.276144][ T5846] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1014.285413][ T5846] usb 1-1: config 1 has no interface number 0 [ 1014.291689][ T5846] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1014.303768][ T5846] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1014.317868][ T5846] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1014.330804][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.390488][ T5846] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1014.399312][T17258] loop9: detected capacity change from 0 to 512 [ 1014.416666][T17258] EXT4-fs: Ignoring removed i_version option [ 1014.453620][T17258] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1014.508005][T17258] EXT4-fs (loop9): 1 truncate cleaned up [ 1014.519900][T17258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.608855][ T5842] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1014.658429][ T5846] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1014.805758][ T5842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1014.817442][ T5842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.827913][ T5842] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1014.837434][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.939510][ T5842] usb 9-1: config 0 descriptor?? [ 1015.109374][T16401] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.185201][ T9] usb 1-1: USB disconnect, device number 32 [ 1015.194184][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1015.447638][ T5842] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 1015.455169][ T5842] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 1015.462635][ T5842] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 1015.469701][ T5842] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 1015.477044][ T5842] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 1015.484550][ T5842] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 1015.491706][ T5842] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 1015.579646][ T5842] isku 0003:1E7D:319C.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 1015.913355][ T5842] usb 9-1: USB disconnect, device number 6 [ 1016.654415][T17284] loop9: detected capacity change from 0 to 1024 [ 1017.015651][T16342] hfsplus: b-tree write err: -5, ino 4 [ 1018.821339][T17313] tap0: tun_chr_ioctl cmd 2147767517 [ 1021.502630][T12773] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1022.886272][T17377] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1023.764275][T17400] loop8: detected capacity change from 0 to 16 [ 1023.989982][T17400] erofs (device loop8): mounted with root inode @ nid 36. [ 1024.747974][T17408] loop3: detected capacity change from 0 to 64 [ 1024.772803][ T5846] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1024.985057][ T5846] usb 10-1: Using ep0 maxpacket: 8 [ 1025.063498][ T5846] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1025.074556][ T5846] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.202751][ T5846] usb 10-1: config 0 descriptor?? [ 1025.754870][ T5846] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1025.762511][ T5846] logitech 0003:046D:C294.0029: unknown main item tag 0x0 [ 1025.790170][ T5846] logitech 0003:046D:C294.0029: hidraw0: USB HID v0.08 Device [HID 046d:c294] on usb-dummy_hcd.9-1/input0 [ 1025.803644][ T5846] logitech 0003:046D:C294.0029: no inputs found [ 1026.053054][ T5842] usb 10-1: USB disconnect, device number 4 [ 1026.164010][T17426] netlink: 'syz.0.4945': attribute type 6 has an invalid length. [ 1027.699860][T17453] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1028.111563][T17457] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4960'. [ 1030.396748][ T5846] kernel write not supported for file /dsp (pid: 5846 comm: kworker/1:5) [ 1030.661114][T17507] loop8: detected capacity change from 0 to 256 [ 1030.698720][T17507] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1031.050815][T17510] loop3: detected capacity change from 0 to 16 [ 1031.089907][T17510] erofs (device loop3): mounted with root inode @ nid 36. [ 1031.507557][T17515] dummy0: entered promiscuous mode [ 1031.645327][T17518] loop0: detected capacity change from 0 to 512 [ 1031.809625][T17518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.824660][T17518] ext4 filesystem being mounted at /1054/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.198429][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.757875][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5004'. [ 1033.849864][ T5846] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1034.053955][ T5846] usb 9-1: Using ep0 maxpacket: 32 [ 1034.079348][ T5846] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1034.088128][ T5846] usb 9-1: config 0 has no interface number 0 [ 1034.094662][ T5846] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1034.106303][ T5846] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1034.169248][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5007'. [ 1034.188012][ T5846] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1034.197672][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.206184][ T5846] usb 9-1: Product: syz [ 1034.210529][ T5846] usb 9-1: Manufacturer: syz [ 1034.215454][ T5846] usb 9-1: SerialNumber: syz [ 1034.290752][ T5846] usb 9-1: config 0 descriptor?? [ 1034.640510][T17570] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1034.668203][T17572] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 2 [ 1034.678233][T17571] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 1 [ 1034.695385][T17573] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 3 [ 1035.195426][ T5846] appletouch 9-1:0.85: Geyser mode initialized. [ 1035.207931][ T5846] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input45 [ 1035.222992][ C1] appletouch 9-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1035.287247][T17583] loop9: detected capacity change from 0 to 16 [ 1035.340483][T17583] erofs (device loop9): mounted with root inode @ nid 36. [ 1035.462302][ T5842] usb 9-1: USB disconnect, device number 7 [ 1035.502691][ T5842] appletouch 9-1:0.85: input: appletouch disconnected [ 1039.371464][T17663] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5051'. [ 1039.380949][T17663] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5051'. [ 1039.622503][ T5842] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1039.724132][T17670] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5053'. [ 1039.786454][T17672] netlink: 92 bytes leftover after parsing attributes in process `syz.9.5054'. [ 1039.796169][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5054'. [ 1039.811710][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 1039.839853][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1039.852121][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1039.896211][ T5842] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1039.905886][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.916132][ T5842] usb 4-1: Product: syz [ 1039.921279][ T5842] usb 4-1: Manufacturer: syz [ 1039.926221][ T5842] usb 4-1: SerialNumber: syz [ 1040.008820][ T5842] usb 4-1: config 0 descriptor?? [ 1040.030695][ T5842] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1040.040465][ T5842] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1040.629451][T17679] kvm: kvm [17678]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 1040.785524][ T5842] em28xx 4-1:0.0: chip ID is em2870 [ 1040.903837][ T5846] kernel read not supported for file /audio (pid: 5846 comm: kworker/1:5) [ 1041.022471][ T5846] usb 4-1: USB disconnect, device number 30 [ 1041.030275][ T5846] em28xx 4-1:0.0: Disconnecting em28xx [ 1041.091622][ T5846] em28xx 4-1:0.0: Freeing device [ 1042.061984][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1042.383876][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5070'. [ 1042.790794][T17720] loop0: detected capacity change from 0 to 1024 [ 1042.847982][T17720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.864012][T17720] ext4 filesystem being mounted at /1070/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.051600][ T30] audit: type=1800 audit(1760281929.642:133): pid=17720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5074" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1043.247092][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1044.211014][T17750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5085'. [ 1044.658270][ T5846] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1044.877845][ T5846] usb 10-1: Using ep0 maxpacket: 32 [ 1044.900351][ T5846] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1044.909620][ T5846] usb 10-1: config 0 has no interface number 0 [ 1044.963643][ T5846] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1044.973297][ T5846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.984477][ T5846] usb 10-1: Product: syz [ 1044.989786][ T5846] usb 10-1: Manufacturer: syz [ 1044.994658][ T5846] usb 10-1: SerialNumber: syz [ 1045.032655][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1045.048969][ T5846] usb 10-1: config 0 descriptor?? [ 1045.079944][ T5846] smsc95xx v2.0.0 [ 1045.096167][T17763] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1045.105424][T17763] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1045.544845][ T5846] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1045.556332][ T5846] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1045.625722][T17776] loop8: detected capacity change from 0 to 256 [ 1045.786588][ T30] audit: type=1800 audit(1760281932.205:134): pid=17776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5096" name="file1" dev="loop8" ino=1048911 res=0 errno=0 [ 1045.815457][ T5846] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1045.828607][ T5846] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1045.878553][ T5846] usb 10-1: USB disconnect, device number 5 [ 1048.796753][T17841] loop3: detected capacity change from 0 to 16 [ 1048.854501][T17841] erofs (device loop3): mounted with root inode @ nid 36. [ 1048.902858][T17835] loop0: detected capacity change from 0 to 4096 [ 1048.932393][T17835] ntfs3: Invalid value for dmask. [ 1049.290219][T17847] netlink: 360 bytes leftover after parsing attributes in process `syz.3.5126'. [ 1049.890137][T17860] loop8: detected capacity change from 0 to 256 [ 1049.946242][T17860] exfat: Deprecated parameter 'namecase' [ 1049.952641][T17860] exfat: Deprecated parameter 'namecase' [ 1050.043751][T17860] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1050.145376][T17862] loop9: detected capacity change from 0 to 128 [ 1050.155404][T17862] hpfs: Unknown parameter 'uid<00000000000000000000' [ 1051.581592][T17885] netlink: 360 bytes leftover after parsing attributes in process `syz.0.5140'. [ 1052.006248][T17890] loop0: detected capacity change from 0 to 128 [ 1052.033242][T17890] EXT4-fs: Ignoring removed nobh option [ 1052.105511][T17890] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1052.130818][T17890] ext4 filesystem being mounted at /1086/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.162350][T16438] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1052.267524][T17890] fscrypt (loop0, inode 12): Reserved bits set in encryption policy [ 1052.341279][T16438] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1052.350230][T16438] usb 4-1: config 1 has no interface number 0 [ 1052.356851][T16438] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1052.400800][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5144'. [ 1052.441466][T16438] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1052.451289][T16438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.459552][T16438] usb 4-1: Product: syz [ 1052.464343][T16438] usb 4-1: Manufacturer: syz [ 1052.469113][T16438] usb 4-1: SerialNumber: syz [ 1052.519366][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1053.184026][T16438] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1053.199267][T16438] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1053.249950][T16438] usb 4-1: USB disconnect, device number 31 [ 1053.584530][ T5846] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1053.797538][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 1053.825570][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.837078][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.849889][ T5846] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1053.860070][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.919581][ T5846] usb 1-1: config 0 descriptor?? [ 1054.187890][T17901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.197751][T17901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.500605][ T5846] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 1054.512903][ T5846] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 1054.521747][ T5846] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 1054.529514][ T5846] hid-picolcd 0003:04D8:F002.002A: item fetching failed at offset 10/11 [ 1054.617623][ T5846] hid-picolcd 0003:04D8:F002.002A: device report parse failed [ 1054.626793][ T5846] hid-picolcd 0003:04D8:F002.002A: probe with driver hid-picolcd failed with error -22 [ 1054.644081][T17922] Bluetooth: MGMT ver 1.23 [ 1054.714873][ T5846] usb 1-1: USB disconnect, device number 33 [ 1054.865159][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5159'. [ 1055.247266][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5163'. [ 1056.137666][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5170'. [ 1056.150872][T17953] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 1056.592677][T17955] loop3: detected capacity change from 0 to 4096 [ 1057.034783][T17955] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1057.327495][T17973] netlink: 'syz.8.5180': attribute type 21 has an invalid length. [ 1057.335759][T17973] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5180'. [ 1057.390287][T17976] netlink: 'syz.8.5180': attribute type 21 has an invalid length. [ 1057.398479][T17976] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5180'. [ 1057.644807][T17981] loop3: detected capacity change from 0 to 2048 [ 1057.685184][T17981] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1057.726472][T17982] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1057.776921][T17981] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1057.803227][T17981] Remounting filesystem read-only [ 1058.334615][ T5846] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1058.518784][ T5846] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.531710][ T5846] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.542075][ T5846] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1058.554217][ T5846] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.691556][ T5846] usb 10-1: config 0 descriptor?? [ 1059.210946][ T5846] playstation 0003:054C:0DF2.002B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 1059.309948][T18006] loop0: detected capacity change from 0 to 2048 [ 1059.387001][ T5846] playstation 0003:054C:0DF2.002B: Invalid byte count transferred, expected 20 got 0 [ 1059.397110][ T5846] playstation 0003:054C:0DF2.002B: Failed to retrieve DualSense pairing info: -22 [ 1059.408717][ T5846] playstation 0003:054C:0DF2.002B: Failed to get MAC address from DualSense [ 1059.417800][ T5846] playstation 0003:054C:0DF2.002B: Failed to create dualsense. [ 1059.435979][ T5846] playstation 0003:054C:0DF2.002B: probe with driver playstation failed with error -22 [ 1059.458413][T18006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.471165][T18006] ext4 filesystem being mounted at /1097/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.615298][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.624160][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.671892][T16438] usb 10-1: USB disconnect, device number 6 [ 1059.746902][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.064612][T18019] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1060.617130][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1061.365236][T18048] loop3: detected capacity change from 0 to 64 [ 1061.499967][T18048] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1062.326857][T18061] sctp: [Deprecated]: syz.7.5218 (pid 18061) Use of int in maxseg socket option. [ 1062.326857][T18061] Use struct sctp_assoc_value instead [ 1062.362415][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5219'. [ 1062.763710][T18067] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5221'. [ 1062.774159][T18067] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5221'. [ 1063.688855][T18088] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1064.792819][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.801536][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.809438][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.817087][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.824979][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.832945][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.843508][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.854993][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.862813][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.870469][ T5846] hid-generic 0006:0004:0009.002C: unknown main item tag 0x0 [ 1064.919379][ T5846] hid-generic 0006:0004:0009.002C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1065.448042][T18124] loop3: detected capacity change from 0 to 4096 [ 1065.522748][T18129] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5250'. [ 1065.550096][T18129] bond0: entered promiscuous mode [ 1065.557438][T18129] bond_slave_0: entered promiscuous mode [ 1065.564995][T18129] bond_slave_1: entered promiscuous mode [ 1065.585775][T18124] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1065.596355][T18131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1065.610187][T18124] Remounting filesystem read-only [ 1065.652714][T18129] bond0: left promiscuous mode [ 1065.657950][T18129] bond_slave_0: left promiscuous mode [ 1065.668145][T18129] bond_slave_1: left promiscuous mode [ 1065.678232][T18134] loop9: detected capacity change from 0 to 128 [ 1066.120025][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5254'. [ 1067.120777][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5265'. [ 1067.441562][ T30] audit: type=1326 audit(1760281952.476:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.533335][ T30] audit: type=1326 audit(1760281952.513:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.560690][ T30] audit: type=1326 audit(1760281952.513:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.583230][ T30] audit: type=1326 audit(1760281952.513:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.606099][ T30] audit: type=1326 audit(1760281952.513:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.628540][ T30] audit: type=1326 audit(1760281952.513:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.654955][ T30] audit: type=1326 audit(1760281952.513:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.680324][ T30] audit: type=1326 audit(1760281952.522:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1067.702834][ T30] audit: type=1326 audit(1760281952.522:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz.0.5268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1068.020976][T18176] loop9: detected capacity change from 0 to 256 [ 1069.208726][T18196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5282'. [ 1069.237932][T18198] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5281'. [ 1070.015913][T18211] loop9: detected capacity change from 0 to 2048 [ 1070.063230][T18211] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=26504, location=26504 [ 1070.186304][T18211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.666523][T18225] loop0: detected capacity change from 0 to 128 [ 1070.731876][T18225] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1070.765419][T18225] hpfs: filesystem error: improperly stopped [ 1070.771909][T18225] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1070.780394][T18225] hpfs: You really don't want any checks? You are crazy... [ 1070.849652][T18225] hpfs: hpfs_map_sector(): read error [ 1070.855329][T18225] hpfs: code page support is disabled [ 1070.885720][T18225] hpfs: hpfs_map_4sectors(): unaligned read [ 1070.908647][T18225] hpfs: hpfs_map_4sectors(): unaligned read [ 1070.915667][T18225] hpfs: filesystem error: unable to find root dir [ 1070.972743][T18227] loop8: detected capacity change from 0 to 1024 [ 1070.986777][T18225] hpfs: hpfs_map_4sectors(): unaligned read [ 1070.994005][T18225] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1071.110713][T18227] hfsplus: request for non-existent node 211 in B*Tree [ 1071.118784][T18227] hfsplus: request for non-existent node 211 in B*Tree [ 1071.344610][ T5030] hfsplus: b-tree write err: -5, ino 8 [ 1072.881874][ T5846] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1073.069177][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 1073.099585][ T5846] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1073.111575][ T5846] usb 1-1: config 0 has no interface number 0 [ 1073.167308][ T5846] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1073.176740][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.185218][ T5846] usb 1-1: Product: syz [ 1073.189548][ T5846] usb 1-1: Manufacturer: syz [ 1073.195088][ T5846] usb 1-1: SerialNumber: syz [ 1073.271847][ T5846] usb 1-1: config 0 descriptor?? [ 1073.285203][T18273] loop8: detected capacity change from 0 to 1024 [ 1073.297688][ T5846] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1073.307981][ T5846] usb 1-1: selecting invalid altsetting 1 [ 1073.313916][ T5846] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1073.427766][ T5846] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1073.443033][ T5846] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1073.452666][ T5846] usb 1-1: media controller created [ 1073.534055][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1074.160605][T16438] kernel read not supported for file /488/net/netlink (pid: 16438 comm: kworker/0:3) [ 1074.689747][T18260] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1074.731111][ T5846] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1074.738382][ T5846] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1074.843168][ T5846] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1075.111248][ T5846] usb 1-1: USB disconnect, device number 34 [ 1075.212780][T18295] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5328'. [ 1075.264600][T12116] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1075.478694][T12116] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 1075.487351][T12116] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1075.498597][T12116] usb 4-1: config 150 has no interface number 0 [ 1075.506261][T12116] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1075.561273][T12116] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1075.570928][T12116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.579452][T12116] usb 4-1: Product: syz [ 1075.583802][T12116] usb 4-1: Manufacturer: syz [ 1075.588953][T12116] usb 4-1: SerialNumber: syz [ 1075.964716][T12116] xr_serial 4-1:150.204: skipping garbage [ 1075.971266][T12116] xr_serial 4-1:150.204: xr_serial converter detected [ 1076.628627][T12116] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1076.635615][T12116] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1076.672447][T12116] usb 4-1: USB disconnect, device number 32 [ 1076.681314][T12116] xr_serial 4-1:150.204: device disconnected [ 1079.535563][T18369] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5363'. [ 1079.540071][T18361] loop9: detected capacity change from 0 to 4096 [ 1079.589366][T18361] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1079.625073][T18361] ntfs3(loop9): ino=3, mi_enum_attr [ 1080.194919][T18378] netlink: 'syz.8.5368': attribute type 3 has an invalid length. [ 1080.204104][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5368'. [ 1080.258704][T18382] netem: incorrect ge model size [ 1080.264021][T18382] netem: change failed [ 1081.738331][T18409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5381'. [ 1083.313792][T18431] loop9: detected capacity change from 0 to 4096 [ 1083.419377][T18437] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1084.093768][T18445] loop0: detected capacity change from 0 to 2048 [ 1084.146811][T18445] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1084.267562][T18451] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1084.611042][T18460] sit1: entered promiscuous mode [ 1084.616281][T18460] sit1: entered allmulticast mode [ 1085.028709][T18464] loop3: detected capacity change from 0 to 1024 [ 1085.172920][T18464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.186151][T18464] ext4 filesystem being mounted at /1093/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.584092][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.729809][T16438] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1087.810700][T18506] tap0: tun_chr_ioctl cmd 1074025677 [ 1087.817013][T18506] tap0: linktype set to 778 [ 1087.933458][T16438] usb 9-1: Using ep0 maxpacket: 32 [ 1087.958763][T16438] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1087.969572][T16438] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.012596][T16438] usb 9-1: config 0 descriptor?? [ 1088.263220][T16438] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1088.280805][T16438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1088.299106][T16438] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1088.309798][T16438] usb 9-1: media controller created [ 1088.361860][T16438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1088.984973][T16438] az6027: usb out operation failed. (-71) [ 1088.991117][T16438] stb0899_attach: Driver disabled by Kconfig [ 1088.997332][T16438] az6027: no front-end attached [ 1088.997332][T16438] [ 1089.036440][T16438] az6027: usb out operation failed. (-71) [ 1089.042478][T16438] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1089.052555][T16438] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input46 [ 1089.121065][T16438] dvb-usb: schedule remote query interval to 400 msecs. [ 1089.128430][T16438] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1089.169497][T16438] usb 9-1: USB disconnect, device number 8 [ 1089.388706][T18524] loop0: detected capacity change from 0 to 4096 [ 1089.432393][T16438] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1089.928201][T18538] loop3: detected capacity change from 0 to 256 [ 1090.018793][T16335] ntfs3(loop0): ino=5, mi_enum_attr [ 1090.278531][T18538] FAT-fs (loop3): Directory bread(block 64) failed [ 1090.285579][T18538] FAT-fs (loop3): Directory bread(block 65) failed [ 1090.292874][T18538] FAT-fs (loop3): Directory bread(block 66) failed [ 1090.303080][T18538] FAT-fs (loop3): Directory bread(block 67) failed [ 1090.311047][T18538] FAT-fs (loop3): Directory bread(block 68) failed [ 1090.318070][T18538] FAT-fs (loop3): Directory bread(block 69) failed [ 1090.324921][T18538] FAT-fs (loop3): Directory bread(block 70) failed [ 1090.332045][T18538] FAT-fs (loop3): Directory bread(block 71) failed [ 1090.339817][T18538] FAT-fs (loop3): Directory bread(block 72) failed [ 1090.346556][T18538] FAT-fs (loop3): Directory bread(block 73) failed [ 1090.433561][T18546] loop8: detected capacity change from 0 to 256 [ 1090.610253][T18546] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1bc7c44b, utbl_chksum : 0xe619d30d) [ 1090.689180][T18546] exFAT-fs (loop8): valid_size(150994954) is greater than size(10) [ 1091.384177][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5447'. [ 1092.967253][T18587] loop3: detected capacity change from 0 to 8192 [ 1093.710697][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5465'. [ 1094.637842][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5469'. [ 1094.827041][T17211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1094.843107][T17211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1094.864431][T17211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1094.886794][T17211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1094.902173][T17211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1095.246125][T12116] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1095.259553][T18613] loop9: detected capacity change from 0 to 4096 [ 1095.389692][T18620] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1095.446394][T12116] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 1095.455202][T12116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 1095.528718][T18613] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1095.578244][T18613] Remounting filesystem read-only [ 1095.583787][T18613] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1095.586468][T12116] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1095.594147][T18613] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1095.603137][T12116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.621247][T12116] usb 4-1: Product: syz [ 1095.625600][T12116] usb 4-1: Manufacturer: syz [ 1095.630533][T12116] usb 4-1: SerialNumber: syz [ 1095.645302][ T30] audit: type=1800 audit(1760281978.835:144): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5470" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1095.684301][T12116] usb 4-1: config 0 descriptor?? [ 1095.692099][T18615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1095.712030][T12116] hub 4-1:0.0: bad descriptor, ignoring hub [ 1095.719347][T12116] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1095.735010][T12116] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 1095.760613][T18610] chnl_net:caif_netlink_parms(): no params data found [ 1095.816970][T18613] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1096.112150][T17211] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 1096.133765][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1096.143249][T12116] usb 4-1: USB disconnect, device number 33 [ 1097.079766][T18610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.090100][T18610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.098170][T18610] bridge_slave_0: entered allmulticast mode [ 1097.107869][T18610] bridge_slave_0: entered promiscuous mode [ 1097.143131][T18610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.150999][T18610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.159263][T18610] bridge_slave_1: entered allmulticast mode [ 1097.172170][T18610] bridge_slave_1: entered promiscuous mode [ 1097.177551][T18638] loop9: detected capacity change from 0 to 256 [ 1097.204798][T17211] Bluetooth: hci0: command tx timeout [ 1097.249019][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1097.259603][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1097.290512][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1097.299870][T18610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.301503][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1097.325463][T18610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.369846][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1097.380232][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1097.398749][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1097.409837][T18639] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1097.422915][T18639] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1097.503461][T18610] team0: Port device team_slave_0 added [ 1097.536610][T18610] team0: Port device team_slave_1 added [ 1097.710673][T18610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.720180][T18610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.746851][T18610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.879610][T18610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.887117][T18610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.913535][T18610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.260920][T18610] hsr_slave_0: entered promiscuous mode [ 1098.274522][T18610] hsr_slave_1: entered promiscuous mode [ 1098.283705][T18610] debugfs: 'hsr0' already exists in 'hsr' [ 1098.292962][T18610] Cannot create hsr debugfs directory [ 1098.315449][T18651] overlayfs: missing 'workdir' [ 1099.206442][T18610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.354175][T18610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.406154][T17211] Bluetooth: hci0: command tx timeout [ 1099.508187][T18668] loop9: detected capacity change from 0 to 512 [ 1099.519973][T18668] EXT4-fs: Ignoring removed nobh option [ 1099.538608][T18610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.579780][T18668] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1099.635169][T18668] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5491: invalid indirect mapped block 2683928664 (level 1) [ 1099.640056][T18610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.743152][T18668] EXT4-fs (loop9): Remounting filesystem read-only [ 1099.786480][T18668] EXT4-fs (loop9): 1 truncate cleaned up [ 1099.795655][T18668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.958633][T18610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1099.989699][T18610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1100.047478][T18610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1100.154503][T18610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1100.172605][T16401] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.803271][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5500'. [ 1101.159970][T18610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.368374][T18610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.443750][T16344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.451408][T16344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.536256][T16344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.543865][T16344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.630090][T17211] Bluetooth: hci0: command tx timeout [ 1101.797818][T18610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1101.920293][T18704] loop9: detected capacity change from 0 to 512 [ 1102.731919][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5509'. [ 1103.386403][T18610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.785491][T18721] loop9: detected capacity change from 0 to 8192 [ 1103.851922][T17211] Bluetooth: hci0: command tx timeout [ 1103.962453][T18610] veth0_vlan: entered promiscuous mode [ 1104.060090][T18610] veth1_vlan: entered promiscuous mode [ 1104.359928][T18610] veth0_macvtap: entered promiscuous mode [ 1104.428705][T18610] veth1_macvtap: entered promiscuous mode [ 1104.536179][T18734] nbd1: detected capacity change from 0 to 127 [ 1104.579157][T17211] block nbd1: Receive control failed (result -32) [ 1104.781909][T18610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.847338][T18610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.004647][T16342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.044100][T16342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.081473][T18740] binder: 18738:18740 ioctl c0306201 800002c0 returned -14 [ 1105.100411][T16342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.133208][T16342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.871500][T18743] loop3: detected capacity change from 0 to 4096 [ 1105.881098][T18743] ntfs3: Unknown parameter 'ÿÿÿÿ0x000000000000000018446744073709551615' [ 1106.264336][T18758] loop8: detected capacity change from 0 to 128 [ 1106.345881][T18758] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1106.405329][T18758] hpfs: filesystem error: improperly stopped [ 1106.412063][T18758] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1106.420982][T18758] hpfs: You really don't want any checks? You are crazy... [ 1106.487764][T18758] hpfs: hpfs_map_sector(): read error [ 1106.494217][T18758] hpfs: code page support is disabled [ 1106.553780][T18758] hpfs: hpfs_map_4sectors(): unaligned read [ 1106.627596][T18758] hpfs: hpfs_map_4sectors(): unaligned read [ 1106.633941][T18758] hpfs: filesystem error: unable to find root dir [ 1107.331251][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5530'. [ 1107.724133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.765282][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1107.933664][T18779] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5532'. [ 1107.968520][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5533'. [ 1108.044492][T17211] Bluetooth: hci1: ISO packet too small [ 1108.591729][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5538'. [ 1108.695359][T18793] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1109.279424][T18801] loop3: detected capacity change from 0 to 1024 [ 1109.422489][T18801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.525678][T18811] loop8: detected capacity change from 0 to 512 [ 1109.582774][T18811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.694489][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.010071][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 1110.060193][T15343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.410045][T16335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.419320][T16335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.593970][T16334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.604917][T16334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.273654][ T9] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1111.309189][T18840] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5553'. [ 1111.478052][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1111.506104][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 1111.554189][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.567573][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1111.632542][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1111.642473][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.653663][ T9] usb 10-1: Product: syz [ 1111.661675][ T9] usb 10-1: Manufacturer: syz [ 1111.666759][ T9] usb 10-1: SerialNumber: syz [ 1112.426115][ T9] usb 10-1: USB disconnect, device number 7 [ 1112.892306][ T30] audit: type=1326 audit(1760281994.989:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1112.953223][ T30] audit: type=1326 audit(1760281995.027:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1112.981814][ T30] audit: type=1326 audit(1760281995.036:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1113.006901][ T30] audit: type=1326 audit(1760281995.036:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1113.029502][ T30] audit: type=1326 audit(1760281995.036:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1113.051668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.062618][ T30] audit: type=1326 audit(1760281995.036:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1113.090376][ T30] audit: type=1326 audit(1760281995.036:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1113.114063][ T30] audit: type=1326 audit(1760281995.036:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96567 code=0x7ffc0000 [ 1113.138989][ T30] audit: type=1326 audit(1760281995.046:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1113.163510][ T30] audit: type=1326 audit(1760281995.046:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.0.5564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1114.012631][T18871] loop0: detected capacity change from 0 to 8192 [ 1117.915394][T18950] loop9: detected capacity change from 0 to 128 [ 1119.764582][T18981] serio: Serial port ptm0 [ 1120.040011][T18990] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1120.282153][T18986] loop9: detected capacity change from 0 to 4096 [ 1120.319203][T18986] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1120.388466][T18995] netlink: 830 bytes leftover after parsing attributes in process `syz.7.5618'. [ 1120.895122][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5623'. [ 1120.992514][T19005] loop3: detected capacity change from 0 to 128 [ 1120.994179][T19004] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 1121.071668][T19005] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1121.104572][T19005] ext4 filesystem being mounted at /1148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.454190][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.430356][ T5846] kernel write not supported for file /sequencer2 (pid: 5846 comm: kworker/1:5) [ 1123.738271][T19048] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5643'. [ 1123.790663][T19042] loop3: detected capacity change from 0 to 40427 [ 1123.807340][T19042] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 1123.815784][T19042] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1123.830548][T19042] F2FS-fs (loop3): build fault injection rate: 771 [ 1123.848007][T19042] F2FS-fs (loop3): invalid crc_offset: 16781308 [ 1123.908162][T19042] F2FS-fs (loop3): invalid crc value [ 1123.913737][T19042] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1124.209843][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1124.336458][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1124.652685][T19057] loop9: detected capacity change from 0 to 512 [ 1124.699637][T19057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.921875][T19057] overlayfs: invalid origin (0000) [ 1125.440343][T16401] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.111797][T19086] bond1 (unregistering): Released all slaves [ 1127.328748][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1127.475917][T19099] loop9: detected capacity change from 0 to 32768 [ 1127.540819][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1127.612447][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.624032][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1127.826052][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1127.835905][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.844373][ T9] usb 9-1: Product: syz [ 1127.852354][ T9] usb 9-1: Manufacturer: syz [ 1127.857213][ T9] usb 9-1: SerialNumber: syz [ 1128.247765][ T9] cdc_ncm 9-1:1.0: bind() failure [ 1128.268751][ T9] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1128.275828][ T9] cdc_ncm 9-1:1.1: bind() failure [ 1128.344429][ T9] usb 9-1: USB disconnect, device number 9 [ 1128.800267][ T5846] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1128.995850][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 1129.031019][ T5846] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1129.040702][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.106983][ T5846] usb 4-1: config 0 descriptor?? [ 1129.108372][ T9] IPVS: starting estimator thread 0... [ 1129.210739][T19119] IPVS: using max 240 ests per chain, 12000 per kthread [ 1129.353174][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1129.383592][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1129.417505][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1129.425583][ T5846] usb 4-1: media controller created [ 1129.505206][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1129.585865][T19112] ===================================================== [ 1129.593135][T19112] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1129.606372][T19112] _copy_to_user+0xcc/0x120 [ 1129.611083][T19112] i2cdev_ioctl_smbus+0x586/0x660 [ 1129.620866][T19112] compat_i2cdev_ioctl+0x48f/0xb40 [ 1129.627040][T19112] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1129.632815][T19112] ia32_sys_call+0x2d5f/0x4310 [ 1129.638039][T19112] __do_fast_syscall_32+0xb0/0x150 [ 1129.643801][T19112] do_fast_syscall_32+0x38/0x80 [ 1129.649064][T19112] do_SYSENTER_32+0x1f/0x30 [ 1129.653768][T19112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1129.660783][T19112] [ 1129.663191][T19112] Uninit was stored to memory at: [ 1129.668455][T19112] __i2c_smbus_xfer+0x254d/0x2f60 [ 1129.673824][T19112] i2c_smbus_xfer+0x31d/0x4d0 [ 1129.678698][T19112] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1129.684900][T19112] compat_i2cdev_ioctl+0x48f/0xb40 [ 1129.690649][T19112] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1129.696405][T19112] ia32_sys_call+0x2d5f/0x4310 [ 1129.703031][T19112] __do_fast_syscall_32+0xb0/0x150 [ 1129.712369][T19112] do_fast_syscall_32+0x38/0x80 [ 1129.718542][T19112] do_SYSENTER_32+0x1f/0x30 [ 1129.723517][T19112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1129.730059][T19112] [ 1129.732489][T19112] Local variable msgbuf1.i created at: [ 1129.738319][T19112] __i2c_smbus_xfer+0x86a/0x2f60 [ 1129.743625][T19112] i2c_smbus_xfer+0x31d/0x4d0 [ 1129.748488][T19112] [ 1129.750907][T19112] Bytes 0-1 of 2 are uninitialized [ 1129.756328][T19112] Memory access of size 2 starts at ffff888039143c76 [ 1129.763132][T19112] Data copied to user address 00000000800000c0 [ 1129.770108][T19112] [ 1129.772563][T19112] CPU: 1 UID: 0 PID: 19112 Comm: syz.3.5668 Tainted: G W syzkaller #0 PREEMPT(none) [ 1129.783884][T19112] Tainted: [W]=WARN [ 1129.788015][T19112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1129.799691][T19112] ===================================================== [ 1129.808332][T19112] Disabling lock debugging due to kernel taint [ 1129.814665][T19112] Kernel panic - not syncing: kmsan.panic set ... [ 1129.821221][T19112] CPU: 1 UID: 0 PID: 19112 Comm: syz.3.5668 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1129.832372][T19112] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1129.837484][T19112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1129.847643][T19112] Call Trace: [ 1129.851004][T19112] [ 1129.854009][T19112] __dump_stack+0x26/0x30 [ 1129.858497][T19112] dump_stack_lvl+0x53/0x270 [ 1129.863237][T19112] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1129.869208][T19112] dump_stack+0x1e/0x25 [ 1129.873514][T19112] vpanic+0x435/0xd30 [ 1129.877676][T19112] panic+0x15d/0x160 [ 1129.881787][T19112] kmsan_report+0x31c/0x320 [ 1129.886475][T19112] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1129.892652][T19112] ? kmsan_copy_to_user+0xf1/0x190 [ 1129.897899][T19112] ? _copy_to_user+0xcc/0x120 [ 1129.902726][T19112] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1129.908080][T19112] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1129.913568][T19112] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1129.919469][T19112] ? ia32_sys_call+0x2d5f/0x4310 [ 1129.924599][T19112] ? __do_fast_syscall_32+0xb0/0x150 [ 1129.930073][T19112] ? do_fast_syscall_32+0x38/0x80 [ 1129.935280][T19112] ? do_SYSENTER_32+0x1f/0x30 [ 1129.940143][T19112] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1129.946843][T19112] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1129.952332][T19112] ? __i2c_transfer+0x11cd/0x3110 [ 1129.957541][T19112] ? kmsan_get_metadata+0xfb/0x160 [ 1129.962818][T19112] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1129.969351][T19112] ? kmsan_get_metadata+0xfb/0x160 [ 1129.974611][T19112] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1129.980592][T19112] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1129.985958][T19112] ? kmsan_get_metadata+0xfb/0x160 [ 1129.991244][T19112] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1129.997212][T19112] kmsan_internal_check_memory+0x1e1/0x230 [ 1130.003239][T19112] kmsan_copy_to_user+0xf1/0x190 [ 1130.008319][T19112] _copy_to_user+0xcc/0x120 [ 1130.012991][T19112] i2cdev_ioctl_smbus+0x586/0x660 [ 1130.018182][T19112] compat_i2cdev_ioctl+0x48f/0xb40 [ 1130.023507][T19112] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1130.029337][T19112] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1130.035088][T19112] ? kmsan_get_metadata+0xfb/0x160 [ 1130.040357][T19112] ? kmsan_get_metadata+0xfb/0x160 [ 1130.045638][T19112] ia32_sys_call+0x2d5f/0x4310 [ 1130.050598][T19112] __do_fast_syscall_32+0xb0/0x150 [ 1130.055917][T19112] do_fast_syscall_32+0x38/0x80 [ 1130.060945][T19112] do_SYSENTER_32+0x1f/0x30 [ 1130.065641][T19112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1130.072142][T19112] RIP: 0023:0xf70ed539 [ 1130.076313][T19112] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1130.096077][T19112] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1130.104650][T19112] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1130.112735][T19112] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 1130.120815][T19112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1130.128886][T19112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1130.136954][T19112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1130.145160][T19112] [ 1130.148584][T19112] Kernel Offset: disabled [ 1130.152964][T19112] Rebooting in 86400 seconds..