last executing test programs: 2m31.703511043s ago: executing program 1 (id=595): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001"], 0x118}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 2m31.151941958s ago: executing program 1 (id=597): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m30.233787694s ago: executing program 1 (id=598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0xffdd) 2m29.25303602s ago: executing program 1 (id=601): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x50}, 0x1, 0x7}, 0x0) unshare(0x26020480) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x40800) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m28.48609658s ago: executing program 1 (id=604): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x7bea, 0x17, 0xfffb, 0x2, 0x7, 0x5, 0x10}, 0xc) 2m27.855826456s ago: executing program 1 (id=606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x12) close(r2) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)=ANY=[]) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x2, 0x6, 0x674, 0x128, 0x3ec, 0x0, 0x61c, 0x128, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x6, 0x3, 0x0, 0x15}, 0x0, 0xd4, 0x104, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x5, 0xf9, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2}, {0x0, 0x3}, 0xaf3f, 0xdee7}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [0xff], 'caif0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x6, 0x6f}, 0x0, 0x1a8, 0x1dc, 0x0, {}, [@common=@inet=@recent1={{0x104}, {0x0, 0x1, 0x8, 0x1, 'syz1\x00', 0x9, [0xff000000, 0xff, 0xffffffff]}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0xff}, {0x3, 0xff}, {}, 0x300}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff0000ff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa4, 0xe8, 0x48000000}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv4=@empty, 0x3c, 0xd, 0x4a9}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xff000000, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'ip6_vti0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x67, 0x6, 0x0, 0x5}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e20], [0x4e22, 0x4e21], 0x1, 0x2, 0x5, 0x81}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6d0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) 2m12.333000233s ago: executing program 32 (id=606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x12) close(r2) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)=ANY=[]) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x2, 0x6, 0x674, 0x128, 0x3ec, 0x0, 0x61c, 0x128, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x6, 0x3, 0x0, 0x15}, 0x0, 0xd4, 0x104, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x5, 0xf9, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2}, {0x0, 0x3}, 0xaf3f, 0xdee7}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [0xff], 'caif0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x6, 0x6f}, 0x0, 0x1a8, 0x1dc, 0x0, {}, [@common=@inet=@recent1={{0x104}, {0x0, 0x1, 0x8, 0x1, 'syz1\x00', 0x9, [0xff000000, 0xff, 0xffffffff]}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0xff}, {0x3, 0xff}, {}, 0x300}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff0000ff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa4, 0xe8, 0x48000000}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv4=@empty, 0x3c, 0xd, 0x4a9}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xff000000, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'ip6_vti0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x67, 0x6, 0x0, 0x5}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e20], [0x4e22, 0x4e21], 0x1, 0x2, 0x5, 0x81}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6d0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) 41.642594315s ago: executing program 5 (id=828): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x5519, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xe8) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 36.892255025s ago: executing program 5 (id=837): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000840)) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000404788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 36.238060118s ago: executing program 5 (id=839): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r3, 0x1000000000000005) 28.272932706s ago: executing program 5 (id=854): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 26.475691614s ago: executing program 5 (id=859): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 25.799275156s ago: executing program 5 (id=861): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x6a, 0xa, 0xff49}, [@call={0x69, 0x0, 0x408}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 21.547905845s ago: executing program 33 (id=861): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x6a, 0xa, 0xff49}, [@call={0x69, 0x0, 0x408}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 14.875636253s ago: executing program 4 (id=877): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 13.476129883s ago: executing program 4 (id=879): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 12.116608125s ago: executing program 4 (id=882): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102384, 0x18ff0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/17, 0x11}, 0x6}], 0x1, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) 11.076372325s ago: executing program 0 (id=885): creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") 9.834871166s ago: executing program 0 (id=889): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32], 0x20) socket(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0x200000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x403, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0xf, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.419045572s ago: executing program 3 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) 8.95434553s ago: executing program 4 (id=892): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f00000004c0)=""/115, 0x78, 0x0, &(0x7f0000000680)=""/151, 0x94}}, 0x66) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) open(0x0, 0x109042, 0x88) syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000100), &(0x7f0000000140), 0x0) 8.513754111s ago: executing program 0 (id=893): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0a7, 0x80, 0x0, 0x10f}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x220302, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 8.43979064s ago: executing program 3 (id=894): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x9}}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) open(0x0, 0x143142, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x3002, 0x10}, 0xc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) gettid() r1 = inotify_init() readv(r1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7.281370135s ago: executing program 0 (id=895): unshare(0x20000400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 6.205567242s ago: executing program 0 (id=897): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 6.20528951s ago: executing program 2 (id=898): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x282807, 0x13f) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 5.180917755s ago: executing program 2 (id=899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffb}, 0x3a, [0x8002, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x8000b, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x8, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c76, 0x80000000, 0x40000, 0x3, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x10001, 0x0, 0x4, 0x7, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000003, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x800, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8, 0x6, 0x0, 0xff, 0x1, 0x9, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x8, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x4001, 0xfe000000, 0xffff, 0xfffffffb, 0x7, 0x9, 0x5, 0x3, 0x4, 0x9b, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x8004, 0x0, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x4a61eab3, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7b, 0x8, 0x4, 0x2950bfb1, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x5, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x7, 0xd, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x3, 0x0, 0xb9, 0x8, 0x9, 0x2, 0x58, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x4, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xffffefff, 0x10003, 0x3, 0x7e, 0x5, 0x9602, 0x7, 0x8003, 0x10001, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x8d67, 0x5, 0xf40, 0x1, 0x1, 0x1000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_io_uring_setup(0x36ef, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x3, 0x0, 0xffff}}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 4.490424663s ago: executing program 3 (id=900): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) 4.484675613s ago: executing program 4 (id=901): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092fbc620ac05c2773aeb010303010902240001040020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.345608627s ago: executing program 3 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000804) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x10c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) fchown(r1, r3, 0x0) 3.339446965s ago: executing program 2 (id=903): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-', @ANYRESOCT=r0], 0x27) 2.174421426s ago: executing program 2 (id=904): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0a7, 0x80, 0x0, 0x10f}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x220302, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.824993429s ago: executing program 3 (id=905): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1d048, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x44000, 0x0) 1.711445097s ago: executing program 0 (id=906): getrandom(0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, &(0x7f0000000040)=0x4b) r1 = open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x8) close(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0xfffffffffffffe5e) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) 1.025209571s ago: executing program 2 (id=907): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, 0x0) 586.337502ms ago: executing program 3 (id=908): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45) pwrite64(r0, &(0x7f0000000180)='\x00', 0x1, 0x8080c61) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'net_prio'}]}, 0xa) 17.271032ms ago: executing program 4 (id=909): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") 0s ago: executing program 2 (id=910): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000043000000", 0x6033) kernel console output (not intermixed with test programs): face descriptor's value: 21 [ 251.500468][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.510012][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.717564][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 251.757742][ T24] usb 5-1: config 0 descriptor?? [ 251.867785][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.947428][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 251.958305][ T5078] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.994774][ T5833] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 252.073031][ T5833] usb 3-1: USB disconnect, device number 5 [ 252.364792][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 252.789581][ T6186] fido_id[6186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 252.997357][ T5078] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.787317][ T5078] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.949257][ T5078] Bluetooth: hci5: command 0x1003 tx timeout [ 253.955759][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 253.962579][ T5078] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.047939][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.622701][ T6200] loop0: detected capacity change from 0 to 256 [ 254.837827][ T10] usb 5-1: USB disconnect, device number 4 [ 255.009219][ T6200] FAT-fs (loop0): Directory bread(block 64) failed [ 255.015994][ T6200] FAT-fs (loop0): Directory bread(block 65) failed [ 255.054755][ T6200] FAT-fs (loop0): Directory bread(block 66) failed [ 255.065440][ T6202] fuse: root generation should be zero [ 255.072365][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.098344][ T6200] FAT-fs (loop0): Directory bread(block 67) failed [ 255.105297][ T6200] FAT-fs (loop0): Directory bread(block 68) failed [ 255.168044][ T6200] FAT-fs (loop0): Directory bread(block 69) failed [ 255.175021][ T6200] FAT-fs (loop0): Directory bread(block 70) failed [ 255.246320][ T6200] FAT-fs (loop0): Directory bread(block 71) failed [ 255.253707][ T6200] FAT-fs (loop0): Directory bread(block 72) failed [ 255.278663][ T6200] FAT-fs (loop0): Directory bread(block 73) failed [ 255.655299][ T6209] loop4: detected capacity change from 0 to 128 [ 255.700296][ T6209] vfat: Unknown parameter '18446744073709551615' [ 255.877877][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.029257][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.113186][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.377570][ T6212] vcan0: entered allmulticast mode [ 257.000926][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 257.187402][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 257.219630][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.293033][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 257.303148][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 257.316738][ T24] usb 4-1: Product: syz [ 257.322607][ T24] usb 4-1: Manufacturer: syz [ 257.327620][ T24] usb 4-1: SerialNumber: syz [ 257.436259][ T24] usb 4-1: config 0 descriptor?? [ 257.474097][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 257.480793][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 257.807459][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.878721][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.057760][ T30] audit: type=1326 audit(1770471359.198:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.87" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748d539 code=0x0 [ 258.232375][ T10] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 258.481855][ T10] usb 4-1: device firmware changed [ 258.496430][ T10] usb 4-1: USB disconnect, device number 5 [ 258.817386][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 258.858505][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 258.987847][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 259.022289][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.034736][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.050505][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 259.065564][ T5833] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 259.075066][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.087661][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 259.128356][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.188561][ T10] usb 4-1: string descriptor 0 read error: -22 [ 259.207916][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 259.217556][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 259.273824][ T6238] loop1: detected capacity change from 0 to 256 [ 259.287666][ T10] usb 4-1: config 0 descriptor?? [ 259.296582][ T5833] usb 3-1: config 0 descriptor?? [ 259.316913][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 259.323753][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 259.534951][ T6238] FAT-fs (loop1): Directory bread(block 64) failed [ 259.571514][ T6238] FAT-fs (loop1): Directory bread(block 65) failed [ 259.585934][ T6238] FAT-fs (loop1): Directory bread(block 66) failed [ 259.613551][ T6241] loop4: detected capacity change from 0 to 128 [ 259.625541][ T6238] FAT-fs (loop1): Directory bread(block 67) failed [ 259.636021][ T6238] FAT-fs (loop1): Directory bread(block 68) failed [ 259.654230][ T6238] FAT-fs (loop1): Directory bread(block 69) failed [ 259.738314][ T6241] vfat: Unknown parameter '18446744073709551615' [ 259.745818][ T6238] FAT-fs (loop1): Directory bread(block 70) failed [ 259.793409][ T6238] FAT-fs (loop1): Directory bread(block 71) failed [ 259.828865][ T24] usb 4-1: USB disconnect, device number 6 [ 259.843370][ T6238] FAT-fs (loop1): Directory bread(block 72) failed [ 259.872287][ T6238] FAT-fs (loop1): Directory bread(block 73) failed [ 260.000996][ T5833] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0003/input/input5 [ 260.047821][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 260.238525][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 260.251985][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 260.262876][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.297718][ T5833] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0003/input/input6 [ 260.505348][ T10] usb 1-1: config 0 descriptor?? [ 260.649793][ T5833] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 260.796467][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 260.803445][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 261.013286][ T10] usb 1-1: USB disconnect, device number 2 [ 261.037281][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 261.267586][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 261.327727][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 261.336431][ T24] usb 5-1: config 0 has no interface number 0 [ 261.427634][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 261.539016][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 261.548948][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.557376][ T24] usb 5-1: Product: syz [ 261.561738][ T24] usb 5-1: Manufacturer: syz [ 261.566541][ T24] usb 5-1: SerialNumber: syz [ 261.786527][ T24] usb 5-1: config 0 descriptor?? [ 261.843501][ T6247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.934926][ T5833] usb 3-1: USB disconnect, device number 6 [ 261.967466][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 262.069975][ T6251] fido_id[6251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 262.226055][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.234539][ T6247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.317678][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 262.387602][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.398526][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.570145][ T31] usb 2-1: string descriptor 0 read error: -22 [ 262.597577][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.607263][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.776621][ T31] usb 2-1: 0:2 : does not exist [ 263.027755][ T5833] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 263.208069][ T796] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 263.288330][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 263.324020][ T5833] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 263.404471][ T5833] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.416104][ T5833] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 263.430120][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.437234][ T5833] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 263.446510][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.484094][ T796] usb 1-1: config 0 interface 0 has no altsetting 0 [ 263.491290][ T796] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 263.501142][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.558464][ T796] usb 1-1: config 0 descriptor?? [ 263.614653][ T5833] usb 3-1: config 0 descriptor?? [ 264.028975][ T31] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 264.087834][ T31] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 264.296355][ T5833] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 264.303578][ T5833] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 264.310844][ T5833] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 264.317957][ T5833] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 264.324939][ T5833] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 264.367608][ T31] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 264.389209][ T796] playstation 0003:054C:09CC.0004: hidraw0: USB HID v0.00 Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 264.593542][ T31] usb 2-1: USB disconnect, device number 2 [ 264.618350][ T796] playstation 0003:054C:09CC.0004: Failed to retrieve feature with reportID 18: -71 [ 264.629030][ T796] playstation 0003:054C:09CC.0004: Failed to retrieve DualShock4 pairing info: -71 [ 264.638994][ T796] playstation 0003:054C:09CC.0004: Failed to get MAC address from DualShock4 [ 264.648227][ T796] playstation 0003:054C:09CC.0004: Failed to create dualshock4. [ 264.713086][ T5833] lua 0003:1E7D:2C2E.0005: hidraw1: USB HID v0.0b Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 264.817725][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 264.854744][ T5833] usb 3-1: USB disconnect, device number 7 [ 264.872274][ T796] playstation 0003:054C:09CC.0004: probe with driver playstation failed with error -71 [ 264.896629][ T24] asix 5-1:0.188: probe with driver asix failed with error -71 [ 265.024577][ T24] usb 5-1: USB disconnect, device number 5 [ 265.042071][ T796] usb 1-1: USB disconnect, device number 3 [ 265.573286][ T6266] fido_id[6266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 265.881576][ T6267] fido_id[6267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 266.168042][ T6275] input: syz1 as /devices/virtual/input/input7 [ 266.663358][ T5833] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 266.898501][ T5833] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 266.909766][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.987880][ T5833] usb 2-1: config 0 descriptor?? [ 267.006577][ T6283] loop0: detected capacity change from 0 to 256 [ 267.384691][ T796] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 267.401585][ T6287] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.410873][ T6283] FAT-fs (loop0): Directory bread(block 64) failed [ 267.432749][ T6283] FAT-fs (loop0): Directory bread(block 65) failed [ 267.492379][ T6283] FAT-fs (loop0): Directory bread(block 66) failed [ 267.502281][ T5833] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 267.509461][ T5833] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 267.516417][ T5833] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 267.529343][ T5833] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 267.536285][ T5833] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 267.563218][ T6283] FAT-fs (loop0): Directory bread(block 67) failed [ 267.598403][ T6283] FAT-fs (loop0): Directory bread(block 68) failed [ 267.605150][ T6283] FAT-fs (loop0): Directory bread(block 69) failed [ 267.652547][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 267.667642][ T6283] FAT-fs (loop0): Directory bread(block 70) failed [ 267.710551][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 267.718631][ T6283] FAT-fs (loop0): Directory bread(block 71) failed [ 267.723009][ T796] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 267.729091][ T5833] kye 0003:0458:0138.0006: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 267.738238][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.775469][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.783693][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.791830][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.799998][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.812839][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 267.858396][ T6283] FAT-fs (loop0): Directory bread(block 72) failed [ 267.865162][ T6283] FAT-fs (loop0): Directory bread(block 73) failed [ 267.951895][ T5833] usb 2-1: USB disconnect, device number 3 [ 268.021041][ T796] usb 3-1: config 0 descriptor?? [ 268.731504][ T6288] fido_id[6288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 268.901647][ T796] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 269.232519][ T796] usb 3-1: USB disconnect, device number 8 [ 269.938446][ T796] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 270.132173][ T6294] fido_id[6294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 270.186454][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.197900][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.211539][ T796] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 270.222094][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.459282][ T796] usb 1-1: config 0 descriptor?? [ 270.979239][ T796] hid_parser_main: 2 callbacks suppressed [ 270.979341][ T796] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 270.993117][ T796] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 271.000457][ T796] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 271.007811][ T796] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 271.015023][ T796] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 271.022331][ T796] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 271.035737][ T796] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 271.207658][ T796] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 271.321382][ T796] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 271.967929][ T796] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 272.088332][ T796] usb 1-1: USB disconnect, device number 4 [ 272.793026][ T5833] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 273.011754][ T5833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.018941][ T5833] usb 5-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 273.028452][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.126658][ T5833] usb 5-1: config 0 descriptor?? [ 273.733767][ T5833] nintendo 0003:057E:201E.0009: unknown main item tag 0x0 [ 273.741691][ T5833] nintendo 0003:057E:201E.0009: unknown main item tag 0x0 [ 273.749353][ T5833] nintendo 0003:057E:201E.0009: unknown main item tag 0x0 [ 273.852960][ T5833] nintendo 0003:057E:201E.0009: hidraw0: USB HID v80.04 Device [HID 057e:201e] on usb-dummy_hcd.4-1/input0 [ 273.938019][ T5833] nintendo 0003:057E:201E.0009: Failed to get joycon info; ret=-38 [ 273.946498][ T5833] nintendo 0003:057E:201E.0009: Failed to retrieve controller info; ret=-38 [ 273.960072][ T5833] nintendo 0003:057E:201E.0009: Failed to initialize controller; ret=-38 [ 274.077113][ T30] audit: type=1326 audit(1770471375.218:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.126" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x0 [ 274.093967][ T5833] nintendo 0003:057E:201E.0009: probe - fail = -38 [ 274.115916][ T5833] nintendo 0003:057E:201E.0009: probe with driver nintendo failed with error -38 [ 274.227395][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 274.260658][ T5833] usb 5-1: USB disconnect, device number 6 [ 274.430124][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.440423][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 274.449966][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.571428][ T10] usb 2-1: config 0 descriptor?? [ 274.695219][ T6341] fido_id[6341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 275.185186][ T10] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 275.355862][ T10] lenovo 0003:17EF:6047.000A: Failed to switch F7/9/11 mode: -71 [ 275.370657][ T10] lenovo 0003:17EF:6047.000A: Failed to switch middle button: -71 [ 275.445593][ T10] lenovo 0003:17EF:6047.000A: Fn-lock setting failed: -71 [ 275.498081][ T10] lenovo 0003:17EF:6047.000A: Sensitivity setting failed: -71 [ 275.584718][ T10] usb 2-1: USB disconnect, device number 4 [ 276.049499][ T6350] fido_id[6350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 276.064263][ T796] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 276.313143][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.326048][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.336306][ T796] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.353700][ T796] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.364160][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.541825][ T30] audit: type=1326 audit(1770471377.668:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 276.567410][ T30] audit: type=1326 audit(1770471377.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 276.590663][ T30] audit: type=1326 audit(1770471377.678:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 276.612997][ T30] audit: type=1326 audit(1770471377.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 276.739926][ T796] usb 1-1: config 0 descriptor?? [ 276.987821][ T30] audit: type=1326 audit(1770471377.828:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 277.010553][ T30] audit: type=1326 audit(1770471377.828:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 277.033796][ T30] audit: type=1326 audit(1770471377.878:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 277.056163][ T30] audit: type=1326 audit(1770471377.878:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 277.087785][ T30] audit: type=1326 audit(1770471377.898:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 277.356119][ T796] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 277.505653][ T796] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 277.651677][ T796] usb 1-1: USB disconnect, device number 5 [ 278.014356][ T6371] fido_id[6371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 279.104680][ T6386] syzkaller0: entered promiscuous mode [ 279.110750][ T6386] syzkaller0: entered allmulticast mode [ 279.399030][ T796] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 279.635110][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.652742][ T796] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.666311][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.837914][ T796] usb 5-1: config 0 descriptor?? [ 280.316223][ T796] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 280.453918][ T796] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000C/input/input9 [ 280.881863][ T796] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 281.070716][ T10] usb 5-1: USB disconnect, device number 7 [ 281.181377][ T6410] loop3: detected capacity change from 0 to 256 [ 281.566444][ T6410] FAT-fs (loop3): Directory bread(block 64) failed [ 281.616450][ T6410] FAT-fs (loop3): Directory bread(block 65) failed [ 281.637605][ T6410] FAT-fs (loop3): Directory bread(block 66) failed [ 281.644365][ T6410] FAT-fs (loop3): Directory bread(block 67) failed [ 281.668643][ T6411] fido_id[6411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 281.685033][ T6410] FAT-fs (loop3): Directory bread(block 68) failed [ 281.685164][ T6410] FAT-fs (loop3): Directory bread(block 69) failed [ 281.685435][ T6410] FAT-fs (loop3): Directory bread(block 70) failed [ 281.685556][ T6410] FAT-fs (loop3): Directory bread(block 71) failed [ 281.685814][ T6410] FAT-fs (loop3): Directory bread(block 72) failed [ 281.685926][ T6410] FAT-fs (loop3): Directory bread(block 73) failed [ 282.871243][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 282.871324][ T30] audit: type=1326 audit(1770471383.988:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 282.899869][ T30] audit: type=1326 audit(1770471383.988:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 282.928740][ T30] audit: type=1326 audit(1770471383.988:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 282.951012][ T30] audit: type=1326 audit(1770471383.998:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 284.199149][ T6434] syzkaller0: entered promiscuous mode [ 284.205002][ T6434] syzkaller0: entered allmulticast mode [ 284.888911][ T796] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 285.127571][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 285.197517][ T796] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 285.205976][ T796] usb 5-1: config 0 has no interface number 0 [ 285.247182][ T796] usb 5-1: config 0 interface 184 has no altsetting 0 [ 285.303959][ T796] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.313705][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.322354][ T796] usb 5-1: Product: syz [ 285.326747][ T796] usb 5-1: Manufacturer: syz [ 285.331763][ T796] usb 5-1: SerialNumber: syz [ 285.418922][ T6449] loop3: detected capacity change from 0 to 512 [ 285.477323][ T796] usb 5-1: config 0 descriptor?? [ 285.501362][ T796] smsc75xx v1.0.0 [ 286.868100][ T796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 286.879293][ T796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 286.988020][ T796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 287.005156][ T796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 287.017452][ T796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 287.028269][ T796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 287.178259][ T796] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 287.298380][ T796] usb 5-1: USB disconnect, device number 8 [ 289.141420][ T6476] syzkaller0: entered promiscuous mode [ 289.153635][ T6476] syzkaller0: entered allmulticast mode [ 289.259755][ T6479] evm: overlay not supported [ 289.906138][ T6483] loop3: detected capacity change from 0 to 512 [ 291.034310][ T30] audit: type=1326 audit(1770471392.178:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.144601][ T30] audit: type=1326 audit(1770471392.178:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.169600][ T30] audit: type=1326 audit(1770471392.178:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.193399][ T30] audit: type=1326 audit(1770471392.208:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.220399][ T30] audit: type=1326 audit(1770471392.208:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.244499][ T30] audit: type=1326 audit(1770471392.218:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.266759][ T30] audit: type=1326 audit(1770471392.218:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.289233][ T30] audit: type=1326 audit(1770471392.238:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.316099][ T30] audit: type=1326 audit(1770471392.238:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 291.340305][ T30] audit: type=1326 audit(1770471392.238:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f06567 code=0x7ffc0000 [ 292.489846][ T6518] syzkaller0: entered promiscuous mode [ 292.495542][ T6518] syzkaller0: entered allmulticast mode [ 292.603566][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 293.446534][ T6528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.194'. [ 293.488137][ T6527] loop1: detected capacity change from 0 to 512 [ 293.518843][ T6532] netlink: 36 bytes leftover after parsing attributes in process `syz.2.194'. [ 294.278260][ T6537] process 'syz.1.197' launched '/dev/fd/5' with NULL argv: empty string added [ 294.513521][ T6539] syz.2.198 uses obsolete (PF_INET,SOCK_PACKET) [ 294.674095][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 296.315258][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.326058][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.492955][ T6552] syzkaller0: entered promiscuous mode [ 296.498876][ T6552] syzkaller0: entered allmulticast mode [ 296.689614][ T6552] tipc: Enabling of bearer rejected, failed to enable media [ 296.992412][ T6561] loop0: detected capacity change from 0 to 256 [ 297.008321][ T6559] kvm: user requested TSC rate below hardware speed [ 297.388916][ T6561] FAT-fs (loop0): Directory bread(block 64) failed [ 297.437477][ T6561] FAT-fs (loop0): Directory bread(block 65) failed [ 297.517838][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.208'. [ 297.523407][ T6561] FAT-fs (loop0): Directory bread(block 66) failed [ 297.575987][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.208'. [ 297.607583][ T6561] FAT-fs (loop0): Directory bread(block 67) failed [ 297.614520][ T6561] FAT-fs (loop0): Directory bread(block 68) failed [ 297.677477][ T6561] FAT-fs (loop0): Directory bread(block 69) failed [ 297.718264][ T6561] FAT-fs (loop0): Directory bread(block 70) failed [ 297.725019][ T6561] FAT-fs (loop0): Directory bread(block 71) failed [ 297.777764][ T6561] FAT-fs (loop0): Directory bread(block 72) failed [ 297.784512][ T6561] FAT-fs (loop0): Directory bread(block 73) failed [ 298.659149][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 298.662456][ T30] audit: type=1326 audit(1770471399.808:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 298.822538][ T30] audit: type=1326 audit(1770471399.808:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 298.845253][ T30] audit: type=1326 audit(1770471399.848:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=350 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 298.867827][ T30] audit: type=1326 audit(1770471399.848:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 298.894827][ T30] audit: type=1326 audit(1770471399.848:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 298.920280][ T30] audit: type=1326 audit(1770471399.808:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 298.943348][ T30] audit: type=1326 audit(1770471399.868:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 298.965691][ T30] audit: type=1326 audit(1770471399.868:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 300.029945][ T6593] syzkaller0: entered promiscuous mode [ 300.035876][ T6593] syzkaller0: entered allmulticast mode [ 300.408394][ T6593] tipc: Enabling of bearer rejected, failed to enable media [ 301.428980][ T6601] kvm: user requested TSC rate below hardware speed [ 301.487871][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.223'. [ 301.548893][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.223'. [ 302.433907][ T6615] loop1: detected capacity change from 0 to 256 [ 302.693184][ T6615] FAT-fs (loop1): Directory bread(block 64) failed [ 302.722938][ T6615] FAT-fs (loop1): Directory bread(block 65) failed [ 302.792978][ T6615] FAT-fs (loop1): Directory bread(block 66) failed [ 302.833845][ T6615] FAT-fs (loop1): Directory bread(block 67) failed [ 302.877491][ T6615] FAT-fs (loop1): Directory bread(block 68) failed [ 302.905351][ T6615] FAT-fs (loop1): Directory bread(block 69) failed [ 302.942088][ T6615] FAT-fs (loop1): Directory bread(block 70) failed [ 302.966259][ T6615] FAT-fs (loop1): Directory bread(block 71) failed [ 303.021719][ T6615] FAT-fs (loop1): Directory bread(block 72) failed [ 303.112832][ T6615] FAT-fs (loop1): Directory bread(block 73) failed [ 304.350450][ T6634] syzkaller0: entered promiscuous mode [ 304.356163][ T6634] syzkaller0: entered allmulticast mode [ 304.528416][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 305.282071][ T6638] overlayfs: overlapping lowerdir path [ 305.928438][ T6642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.237'. [ 305.992064][ T6642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.237'. [ 306.379817][ T30] audit: type=1326 audit(1770471407.528:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.472003][ T30] audit: type=1326 audit(1770471407.618:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.631208][ T30] audit: type=1326 audit(1770471407.658:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.653829][ T30] audit: type=1326 audit(1770471407.668:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.681006][ T30] audit: type=1326 audit(1770471407.668:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.704896][ T30] audit: type=1326 audit(1770471407.668:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.727320][ T30] audit: type=1326 audit(1770471407.688:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.749561][ T30] audit: type=1326 audit(1770471407.688:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 306.776532][ T30] audit: type=1326 audit(1770471407.688:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 307.703293][ T6660] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 308.350919][ T6672] overlayfs: overlapping lowerdir path [ 308.492333][ T6673] syzkaller0: entered promiscuous mode [ 308.498665][ T6673] syzkaller0: entered allmulticast mode [ 308.684825][ T6673] tipc: Enabling of bearer rejected, failed to enable media [ 309.432957][ T30] audit: type=1326 audit(1770471410.578:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 312.059151][ T6713] syzkaller0: entered promiscuous mode [ 312.064876][ T6713] syzkaller0: entered allmulticast mode [ 312.168912][ T6713] tipc: Enabling of bearer rejected, failed to enable media [ 312.598085][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 315.547680][ T6751] syzkaller0: entered promiscuous mode [ 315.553583][ T6751] syzkaller0: entered allmulticast mode [ 315.618025][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 315.660938][ T6755] ======================================================= [ 315.660938][ T6755] WARNING: The mand mount option has been deprecated and [ 315.660938][ T6755] and is ignored by this kernel. Remove the mand [ 315.660938][ T6755] option from the mount to silence this warning. [ 315.660938][ T6755] ======================================================= [ 315.741541][ T6751] tipc: Enabling of bearer rejected, failed to enable media [ 315.846507][ T6759] loop4: detected capacity change from 0 to 256 [ 316.061338][ T6759] FAT-fs (loop4): Directory bread(block 64) failed [ 316.090960][ T6759] FAT-fs (loop4): Directory bread(block 65) failed [ 316.124440][ T6759] FAT-fs (loop4): Directory bread(block 66) failed [ 316.157209][ T6759] FAT-fs (loop4): Directory bread(block 67) failed [ 316.188257][ T6759] FAT-fs (loop4): Directory bread(block 68) failed [ 316.195008][ T6759] FAT-fs (loop4): Directory bread(block 69) failed [ 316.268644][ T6759] FAT-fs (loop4): Directory bread(block 70) failed [ 316.327465][ T6759] FAT-fs (loop4): Directory bread(block 71) failed [ 316.334410][ T6759] FAT-fs (loop4): Directory bread(block 72) failed [ 316.377518][ T6759] FAT-fs (loop4): Directory bread(block 73) failed [ 317.704588][ T6777] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.549163][ T6786] Bluetooth: MGMT ver 1.23 [ 318.831622][ T6791] syzkaller0: entered promiscuous mode [ 318.837552][ T6791] syzkaller0: entered allmulticast mode [ 319.025369][ T6791] tipc: Enabling of bearer rejected, failed to enable media [ 320.243887][ T6810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 320.779229][ T6817] pim6reg1: entered allmulticast mode [ 320.858076][ T6820] pim6reg1: left allmulticast mode [ 321.016853][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 321.065037][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 321.942237][ T6832] syzkaller0: entered promiscuous mode [ 321.948607][ T6832] syzkaller0: entered allmulticast mode [ 322.048680][ T6832] tipc: Enabling of bearer rejected, failed to enable media [ 323.436715][ T6852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.010447][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 324.046370][ T6863] veth0_to_bond: entered allmulticast mode [ 324.108905][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 324.196481][ T6861] program syz.0.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.327756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 325.573442][ T6878] syzkaller0: entered promiscuous mode [ 325.579220][ T6878] syzkaller0: entered allmulticast mode [ 326.604620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.768582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 327.158004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.452331][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 327.479528][ T6901] veth0_to_bond: entered allmulticast mode [ 327.595892][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 327.673266][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 330.237856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 330.421255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 330.857700][ T6928] bridge0: port 3(ip6gretap0) entered blocking state [ 330.864868][ T6928] bridge0: port 3(ip6gretap0) entered disabled state [ 330.977301][ T6928] ip6gretap0: entered allmulticast mode [ 331.087994][ T6928] ip6gretap0: entered promiscuous mode [ 331.137478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 331.189046][ T6928] bridge0: port 3(ip6gretap0) entered blocking state [ 331.196391][ T6928] bridge0: port 3(ip6gretap0) entered forwarding state [ 331.218135][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 331.259521][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 334.405614][ T6958] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 334.471202][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 334.471282][ T30] audit: type=1326 audit(1770471435.608:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.3.372" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x0 [ 334.792806][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 334.803422][ T6968] veth0_to_bond: entered allmulticast mode [ 334.849524][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 335.940360][ T6981] loop4: detected capacity change from 0 to 512 [ 336.198870][ T6984] loop1: detected capacity change from 0 to 512 [ 336.289673][ T6981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.303436][ T6984] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 336.351603][ T6981] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.661645][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 337.614064][ T7000] loop2: detected capacity change from 0 to 512 [ 337.737490][ T7000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 337.788134][ T7000] System zones: 1-20 [ 337.862376][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.464846][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.591432][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.387'. [ 338.998045][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 339.070510][ T7013] veth0_to_bond: entered allmulticast mode [ 339.094570][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 339.833440][ T7020] loop2: detected capacity change from 0 to 256 [ 339.860529][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.301658][ T7020] FAT-fs (loop2): Directory bread(block 64) failed [ 340.358423][ T7020] FAT-fs (loop2): Directory bread(block 65) failed [ 340.365373][ T7020] FAT-fs (loop2): Directory bread(block 66) failed [ 340.418923][ T7020] FAT-fs (loop2): Directory bread(block 67) failed [ 340.425863][ T7020] FAT-fs (loop2): Directory bread(block 68) failed [ 340.477593][ T7020] FAT-fs (loop2): Directory bread(block 69) failed [ 340.562201][ T7020] FAT-fs (loop2): Directory bread(block 70) failed [ 340.637251][ T7020] FAT-fs (loop2): Directory bread(block 71) failed [ 340.644213][ T7020] FAT-fs (loop2): Directory bread(block 72) failed [ 340.697593][ T7020] FAT-fs (loop2): Directory bread(block 73) failed [ 340.799627][ T7026] syzkaller0: entered promiscuous mode [ 340.805332][ T7026] syzkaller0: entered allmulticast mode [ 341.078802][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 342.029503][ T7042] pim6reg1: entered promiscuous mode [ 342.035280][ T7042] pim6reg1: entered allmulticast mode [ 342.919139][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 342.970390][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 343.021500][ T796] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 343.289152][ T796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.299743][ T796] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.365788][ T796] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.375277][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.383722][ T796] usb 3-1: SerialNumber: syz [ 343.809349][ T796] usb 3-1: 0:2 : does not exist [ 343.964276][ T796] usb 3-1: USB disconnect, device number 9 [ 344.186797][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.863105][ T7066] loop1: detected capacity change from 0 to 512 [ 344.939910][ T7066] EXT4-fs: Ignoring removed oldalloc option [ 345.007471][ T7068] syzkaller0: entered promiscuous mode [ 345.013158][ T7068] syzkaller0: entered allmulticast mode [ 345.038151][ T7066] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.222775][ T7066] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 345.337923][ T7066] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.407: bg 0: block 248: padding at end of block bitmap is not set [ 345.360288][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 345.492557][ T7066] Quota error (device loop1): write_blk: dquota write failed [ 345.500845][ T7066] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 345.603158][ T7066] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.407: Failed to acquire dquot type 1 [ 345.705461][ T7066] EXT4-fs (loop1): 1 truncate cleaned up [ 345.741571][ T7066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 345.902959][ T7066] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 345.913798][ T7066] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 345.924432][ T7066] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.407: Failed to acquire dquot type 1 [ 346.382453][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 346.408431][ T36] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 346.418614][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 346.559940][ T7089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.727960][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.414'. [ 346.774382][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.414'. [ 347.396873][ T7100] netlink: 'syz.4.417': attribute type 4 has an invalid length. [ 347.404901][ T7100] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 347.412955][ T7100] netlink: 15314 bytes leftover after parsing attributes in process `syz.4.417'. [ 347.676211][ T7104] loop2: detected capacity change from 0 to 512 [ 348.009745][ T7104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.538684][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.504802][ T7115] syzkaller0: entered promiscuous mode [ 349.510668][ T7115] syzkaller0: entered allmulticast mode [ 350.535743][ T7121] loop0: detected capacity change from 0 to 512 [ 350.597957][ T7121] EXT4-fs: Ignoring removed i_version option [ 350.674614][ T7121] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 351.326100][ T30] audit: type=1326 audit(1770471452.468:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 351.348782][ T30] audit: type=1326 audit(1770471452.468:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 351.472841][ T30] audit: type=1326 audit(1770471452.548:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 351.495299][ T30] audit: type=1326 audit(1770471452.548:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 351.521127][ T30] audit: type=1326 audit(1770471452.548:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 351.544517][ T30] audit: type=1326 audit(1770471452.568:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 351.568377][ T30] audit: type=1326 audit(1770471452.568:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 351.590986][ T30] audit: type=1326 audit(1770471452.568:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 352.217720][ T7131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.428'. [ 352.274179][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.428'. [ 353.950984][ T7146] syzkaller0: entered promiscuous mode [ 353.956691][ T7146] syzkaller0: entered allmulticast mode [ 354.955003][ T7157] overlayfs: missing 'lowerdir' [ 355.544549][ T7164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.441'. [ 355.614963][ T7164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.441'. [ 355.706846][ T7166] loop0: detected capacity change from 0 to 128 [ 355.888883][ T7166] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.973427][ T7166] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.362225][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.807878][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 357.059860][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.070906][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.116313][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.126104][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.134516][ T10] usb 3-1: SerialNumber: syz [ 357.431626][ T10] usb 3-1: 0:2 : does not exist [ 357.582392][ T10] usb 3-1: USB disconnect, device number 10 [ 357.676505][ T7179] syzkaller0: entered promiscuous mode [ 357.685964][ T7179] syzkaller0: entered allmulticast mode [ 357.768317][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.775000][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.936792][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.420266][ T7195] overlay: Unknown parameter '/' [ 358.877977][ T7200] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 358.889868][ T7200] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 358.899191][ T7200] netlink: 15314 bytes leftover after parsing attributes in process `syz.1.455'. [ 361.192112][ T7228] loop2: detected capacity change from 0 to 512 [ 361.318742][ T7228] EXT4-fs error (device loop2): ext4_quota_enable:7177: comm syz.2.467: inode #234881024: comm syz.2.467: iget: illegal inode # [ 361.325649][ C1] hrtimer: interrupt took 595100 ns [ 361.479922][ T7228] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.467: Bad quota inode: 234881024, type: 2 [ 361.549481][ T7228] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=234881024). Please run e2fsck to fix. [ 361.621478][ T7228] EXT4-fs (loop2): mount failed [ 361.879624][ T7236] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.470'. [ 363.176383][ T7251] capability: warning: `syz.0.476' uses deprecated v2 capabilities in a way that may be insecure [ 363.865536][ T7257] loop1: detected capacity change from 0 to 128 [ 363.923144][ T7257] EXT4-fs (loop1): Test dummy encryption mode enabled [ 364.013742][ T7257] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.053311][ T7257] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.084022][ T7259] syzkaller0: entered promiscuous mode [ 364.089937][ T7259] syzkaller0: entered allmulticast mode [ 364.663573][ T7257] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 364.815714][ T7263] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 364.899270][ T50] Bluetooth: unknown link type 128 [ 365.187447][ T7271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.277370][ T7271] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.284171][ T7271] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.359989][ T7277] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 365.380366][ T7271] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.391288][ T5790] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.515639][ T7277] loop4: detected capacity change from 0 to 256 [ 365.866800][ T7277] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 366.014882][ T7282] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.484'. [ 366.883995][ T7286] netlink: 180 bytes leftover after parsing attributes in process `syz.4.482'. [ 366.905848][ T7286] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 366.997590][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.171410][ T30] audit: type=1800 audit(1770471468.318:88): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.482" name="file1" dev="loop4" ino=1048618 res=0 errno=0 [ 367.317815][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.324213][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.467243][ T5078] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.852574][ T7303] syzkaller0: entered promiscuous mode [ 369.858427][ T7303] syzkaller0: entered allmulticast mode [ 370.107514][ T5078] Bluetooth: unknown link type 128 [ 370.430091][ T7309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.466418][ T7309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.501745][ T7309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.543606][ T7309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.586366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 371.689140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 371.719306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 372.271289][ T5078] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.510025][ T5078] Bluetooth: hci2: command 0x0c1a tx timeout [ 372.517495][ T5078] Bluetooth: hci0: command 0x0c1a tx timeout [ 372.587234][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.799285][ T7334] loop1: detected capacity change from 0 to 256 [ 372.848693][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 372.868664][ T7334] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.159280][ T50] Bluetooth: unknown link type 128 [ 375.367757][ T7353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.428730][ T7353] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.469850][ T7353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.498136][ T7353] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.327863][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.467998][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.548968][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.551090][ T5078] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.370340][ T7375] loop4: detected capacity change from 0 to 2048 [ 378.414332][ T7375] EXT4-fs: Ignoring removed oldalloc option [ 378.608415][ T7375] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 378.706845][ T7375] System zones: 0-7 [ 378.720494][ T7375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.948370][ T7375] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.514: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 379.048540][ T7375] EXT4-fs (loop4): Remounting filesystem read-only [ 379.520556][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.811186][ T5078] Bluetooth: unknown link type 128 [ 379.991550][ T7390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.013317][ T7396] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.521'. [ 380.045244][ T7390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.073466][ T7397] loop4: detected capacity change from 0 to 128 [ 380.118543][ T7390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.125289][ T7390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.144790][ T7397] EXT4-fs (loop4): Test dummy encryption mode enabled [ 380.230590][ T7397] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.299434][ T7397] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.429373][ T7397] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 380.936211][ T5794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.877661][ T5078] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.096241][ T7419] loop1: detected capacity change from 0 to 128 [ 382.107344][ T5078] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.197225][ T5078] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.203461][ T5078] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.958890][ T7423] syzkaller0: entered promiscuous mode [ 382.964685][ T7423] syzkaller0: entered allmulticast mode [ 383.600006][ T7432] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.534'. [ 384.047668][ T5078] Bluetooth: unknown link type 128 [ 384.237604][ T7435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.269231][ T7435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.298114][ T7435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.342858][ T7435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.562765][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 384.628399][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 386.107703][ T5078] Bluetooth: hci1: command 0x0c1a tx timeout [ 386.179279][ T7458] loop0: detected capacity change from 0 to 256 [ 386.239592][ T7459] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.545'. [ 386.347903][ T5078] Bluetooth: hci3: command 0x0c1a tx timeout [ 386.354168][ T5078] Bluetooth: hci2: command 0x0c1a tx timeout [ 386.360960][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.411031][ T7458] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 388.338041][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.550'. [ 388.448455][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.550'. [ 390.502015][ T7491] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.557'. [ 392.570940][ T7504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.562'. [ 392.640163][ T7505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.562'. [ 392.885057][ T7507] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.580182][ T7514] loop4: detected capacity change from 0 to 512 [ 393.614113][ T7514] EXT4-fs: Ignoring removed i_version option [ 393.690910][ T7514] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 395.055396][ T7526] loop1: detected capacity change from 0 to 512 [ 395.064744][ T7527] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 395.072954][ T7527] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 395.080913][ T7527] netlink: 15262 bytes leftover after parsing attributes in process `syz.2.570'. [ 395.280967][ T7526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.318609][ T7532] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 395.410368][ T7526] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.513869][ T7534] loop4: detected capacity change from 0 to 256 [ 395.675568][ T7534] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 396.257691][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 396.481717][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 396.505317][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.516220][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.614267][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.623972][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.632368][ T10] usb 3-1: Product: syz [ 396.636712][ T10] usb 3-1: Manufacturer: syz [ 396.641674][ T10] usb 3-1: SerialNumber: syz [ 396.663019][ T7532] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 397.820338][ T10] usb 3-1: 0:2 : does not exist [ 398.596839][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 398.875384][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.147119][ T10] usb 3-1: USB disconnect, device number 11 [ 399.361032][ T7540] loop0: detected capacity change from 0 to 128 [ 399.453478][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.525684][ T7540] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.667100][ T7540] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 399.953478][ T7549] loop4: detected capacity change from 0 to 256 [ 400.418770][ T7549] FAT-fs (loop4): Directory bread(block 64) failed [ 400.487685][ T7549] FAT-fs (loop4): Directory bread(block 65) failed [ 400.494641][ T7549] FAT-fs (loop4): Directory bread(block 66) failed [ 400.549149][ T7549] FAT-fs (loop4): Directory bread(block 67) failed [ 400.588327][ T7549] FAT-fs (loop4): Directory bread(block 68) failed [ 400.616679][ T7549] FAT-fs (loop4): Directory bread(block 69) failed [ 400.645802][ T7549] FAT-fs (loop4): Directory bread(block 70) failed [ 400.680095][ T7549] FAT-fs (loop4): Directory bread(block 71) failed [ 400.705072][ T7549] FAT-fs (loop4): Directory bread(block 72) failed [ 400.728286][ T7549] FAT-fs (loop4): Directory bread(block 73) failed [ 402.582963][ T7567] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 402.591233][ T7567] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 402.599359][ T7567] netlink: 15262 bytes leftover after parsing attributes in process `syz.2.582'. [ 402.620297][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 402.911024][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 403.033953][ T7573] Zero length message leads to an empty skb [ 403.099010][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 403.159713][ T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 403.168389][ T10] usb 5-1: config 1 has no interface number 0 [ 403.190060][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 403.200669][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 403.211199][ T10] usb 5-1: config 1 interface 105 has no altsetting 0 [ 403.305032][ T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 403.314731][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.323213][ T10] usb 5-1: Product: syz [ 403.332259][ T10] usb 5-1: Manufacturer: syz [ 403.338855][ T10] usb 5-1: SerialNumber: syz [ 403.365995][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.758937][ T7571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 403.766818][ T7571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.343242][ T7571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.388371][ T7571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.849643][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 405.123278][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 405.207841][ T10] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ea:9b:aa:c8:bc:66 [ 405.258448][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 405.328081][ T10] usb 5-1: USB disconnect, device number 9 [ 405.362282][ T10] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 405.428021][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 405.629970][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 405.667527][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 405.738857][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 406.305898][ T7602] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 406.314017][ T7602] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 406.322093][ T7602] netlink: 15262 bytes leftover after parsing attributes in process `syz.1.595'. [ 406.779340][ T7604] loop4: detected capacity change from 0 to 1024 [ 406.806472][ T7604] EXT4-fs: Ignoring removed bh option [ 406.889973][ T7604] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 407.079234][ T7604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.822918][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.258507][ T7642] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 410.266507][ T7642] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 410.274722][ T7642] netlink: 15262 bytes leftover after parsing attributes in process `syz.3.607'. [ 411.120362][ T7648] netlink: 136 bytes leftover after parsing attributes in process `syz.0.608'. [ 412.907078][ T7645] program syz.1.606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.061279][ T7650] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 413.255822][ T7650] loop3: detected capacity change from 0 to 256 [ 413.371959][ T7654] loop2: detected capacity change from 0 to 256 [ 413.486225][ T7654] exfat: Deprecated parameter 'namecase' [ 413.547461][ T7654] exfat: Deprecated parameter 'namecase' [ 413.553263][ T7654] exfat: Bad value for 'namecase' [ 413.581669][ T7650] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 414.305292][ T7650] netlink: 180 bytes leftover after parsing attributes in process `syz.3.609'. [ 417.057271][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 417.249643][ T7670] loop0: detected capacity change from 0 to 256 [ 417.302152][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 417.310623][ T10] usb 3-1: config 0 has no interface number 0 [ 417.347607][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 417.411215][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 417.420706][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.429196][ T10] usb 3-1: Product: syz [ 417.433565][ T10] usb 3-1: Manufacturer: syz [ 417.438527][ T10] usb 3-1: SerialNumber: syz [ 417.533132][ T10] usb 3-1: config 0 descriptor?? [ 417.634200][ T7670] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xfdb20923, utbl_chksum : 0xe619d30d) [ 417.732411][ T7670] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 417.795862][ T7670] exFAT-fs (loop0): failed to load alloc-bitmap [ 417.802663][ T7670] exFAT-fs (loop0): failed to recognize exfat type [ 418.567664][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 418.827603][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 418.838606][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 418.936307][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 419.037635][ T10] usb 3-1: USB disconnect, device number 12 [ 419.177908][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.184727][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.184760][ T7678] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 419.184859][ T7678] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 419.212999][ T7678] netlink: 15262 bytes leftover after parsing attributes in process `syz.0.619'. [ 420.059600][ T7684] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 420.245574][ T7684] loop0: detected capacity change from 0 to 256 [ 420.484350][ T7684] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 421.364332][ T7687] netlink: 180 bytes leftover after parsing attributes in process `syz.0.622'. [ 423.318422][ T7690] loop2: detected capacity change from 0 to 256 [ 423.537285][ T7690] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xfdb20923, utbl_chksum : 0xe619d30d) [ 423.587381][ T7690] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 423.691114][ T7690] exFAT-fs (loop2): failed to load alloc-bitmap [ 423.697858][ T7690] exFAT-fs (loop2): failed to recognize exfat type [ 423.871869][ T7694] loop4: detected capacity change from 0 to 512 [ 423.902332][ T7694] EXT4-fs: inline encryption not supported [ 424.007957][ T7694] EXT4-fs: Ignoring removed oldalloc option [ 424.161334][ T7694] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 424.171228][ T7694] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.626: invalid indirect mapped block 2683928664 (level 1) [ 424.197597][ T7694] EXT4-fs (loop4): Remounting filesystem read-only [ 424.204883][ T7694] EXT4-fs (loop4): 1 truncate cleaned up [ 424.311580][ T7694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.587287][ T5833] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 424.823403][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.843050][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.855031][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.868417][ T5833] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.877922][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.959979][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.050917][ T5833] usb 4-1: config 0 descriptor?? [ 425.709744][ T5833] hid_parser_main: 2 callbacks suppressed [ 425.709843][ T5833] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x1 [ 425.723848][ T5833] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x2 [ 425.731640][ T5833] plantronics 0003:047F:FFFF.000D: item fetching failed at offset 14/15 [ 425.852357][ T5833] plantronics 0003:047F:FFFF.000D: parse failed [ 425.867994][ T5833] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 426.033150][ T5833] usb 4-1: USB disconnect, device number 7 [ 426.969108][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.008969][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.029223][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.077845][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.099934][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.372159][ T7711] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 427.380684][ T7711] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 427.390946][ T7711] netlink: 15262 bytes leftover after parsing attributes in process `syz.3.632'. [ 428.644234][ T7718] netlink: 180 bytes leftover after parsing attributes in process `syz.0.635'. [ 429.147694][ T5787] Bluetooth: hci5: command tx timeout [ 430.041149][ T7708] chnl_net:caif_netlink_parms(): no params data found [ 430.933088][ T7688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.945677][ T796] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 431.102914][ T7688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.160930][ T796] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 431.189343][ T796] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.203004][ T796] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 431.212816][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.228417][ T5787] Bluetooth: hci5: command tx timeout [ 431.341306][ T7688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.480336][ T7688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.551078][ T796] usb 1-1: language id specifier not provided by device, defaulting to English [ 431.775272][ T796] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 431.867712][ T796] usb 1-1: USB disconnect, device number 6 [ 432.344851][ T7688] bridge_slave_1: left allmulticast mode [ 432.351168][ T7688] bridge_slave_1: left promiscuous mode [ 432.358201][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.434221][ T7688] bridge_slave_0: left allmulticast mode [ 432.440285][ T7688] bridge_slave_0: left promiscuous mode [ 432.447383][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.312122][ T5787] Bluetooth: hci5: command tx timeout [ 433.883193][ T7688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.925911][ T7688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.964008][ T7688] bond0 (unregistering): Released all slaves [ 434.114295][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.121982][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.169878][ T7708] bridge_slave_0: entered allmulticast mode [ 434.183520][ T7708] bridge_slave_0: entered promiscuous mode [ 434.404885][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.413002][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.446454][ T7708] bridge_slave_1: entered allmulticast mode [ 434.461996][ T7708] bridge_slave_1: entered promiscuous mode [ 434.891395][ T7688] hsr_slave_0: left promiscuous mode [ 434.909753][ T7688] hsr_slave_1: left promiscuous mode [ 434.920215][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.928092][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.959873][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.972241][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.029854][ T7688] veth1_macvtap: left promiscuous mode [ 435.035607][ T7688] veth0_macvtap: left promiscuous mode [ 435.045365][ T7688] veth1_vlan: left promiscuous mode [ 435.051331][ T7688] veth0_vlan: left promiscuous mode [ 435.390537][ T5787] Bluetooth: hci5: command tx timeout [ 435.957138][ T7688] team0 (unregistering): Port device team_slave_1 removed [ 436.048868][ T7688] team0 (unregistering): Port device team_slave_0 removed [ 436.432264][ T7688] vcan0 (unregistering): left allmulticast mode [ 436.568479][ T7708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.644145][ T7708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.284778][ T7708] team0: Port device team_slave_0 added [ 437.372976][ T7708] team0: Port device team_slave_1 added [ 437.814535][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.823244][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.855108][ T7708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.086269][ T7768] netlink: 'syz.0.648': attribute type 4 has an invalid length. [ 438.310770][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.323137][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.353967][ T7708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.120915][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.130956][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.797720][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.864228][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.977569][ T7688] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.347159][ T7688] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.403107][ T7688] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.480615][ T7708] hsr_slave_0: entered promiscuous mode [ 441.511291][ T7708] hsr_slave_1: entered promiscuous mode [ 441.517954][ T7797] loop0: detected capacity change from 0 to 512 [ 441.555555][ T7708] debugfs: 'hsr0' already exists in 'hsr' [ 441.561678][ T7708] Cannot create hsr debugfs directory [ 441.585062][ T7688] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.607875][ T7797] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 441.621541][ T7797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 441.754721][ T7800] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 441.762844][ T7800] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 441.770861][ T7800] netlink: 15262 bytes leftover after parsing attributes in process `syz.2.656'. [ 441.833942][ T7797] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 441.948238][ T7797] EXT4-fs (loop0): 1 truncate cleaned up [ 441.998502][ T7797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.676004][ T7708] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.794265][ T7708] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.937696][ T7708] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 444.038850][ T7708] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 444.158159][ T796] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 444.399586][ T796] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 444.411512][ T796] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 444.421863][ T796] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 444.432335][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.666714][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.273113][ T7827] loop2: detected capacity change from 0 to 512 [ 445.458631][ T796] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 445.510945][ T7827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.544623][ T796] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input11 [ 445.628119][ T7827] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.677617][ T796] input: failed to attach handler kbd to device input11, error: -5 [ 445.770716][ T30] audit: type=1800 audit(1770471546.918:89): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.663" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 445.884324][ T796] usb 5-1: USB disconnect, device number 10 [ 446.168308][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.408327][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.760818][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.774376][ T7841] netlink: 'syz.4.666': attribute type 1 has an invalid length. [ 446.782643][ T7841] netlink: 'syz.4.666': attribute type 1 has an invalid length. [ 446.791209][ T7841] netlink: 15262 bytes leftover after parsing attributes in process `syz.4.666'. [ 446.915363][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.923045][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.037425][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.044966][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.758076][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 448.860648][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 449.759972][ T7873] loop3: detected capacity change from 0 to 512 [ 449.908928][ T7873] EXT4-fs (loop3): orphan cleanup on readonly fs [ 449.915710][ T7873] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.675: Bad quota inum: 262148, type: 1 [ 449.943828][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.029240][ T7873] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=262148). Please run e2fsck to fix. [ 450.082401][ T7873] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 450.139892][ T7873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.590980][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.259478][ T7889] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 451.267605][ T7889] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 451.275548][ T7889] netlink: 15262 bytes leftover after parsing attributes in process `syz.3.677'. [ 453.099809][ T7708] veth0_vlan: entered promiscuous mode [ 453.136482][ T7708] veth1_vlan: entered promiscuous mode [ 453.557634][ T7708] veth0_macvtap: entered promiscuous mode [ 453.660513][ T7708] veth1_macvtap: entered promiscuous mode [ 454.009281][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.130224][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.309341][ T7658] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.395571][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.439537][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.477808][ T7658] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.281468][ T7921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 457.072250][ T7940] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 457.080409][ T7940] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 457.091747][ T7940] netlink: 15262 bytes leftover after parsing attributes in process `syz.3.688'. [ 458.694497][ T7953] loop0: detected capacity change from 0 to 1024 [ 458.818063][ T7953] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 458.963269][ T7953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 459.107408][ T7953] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.690: lblock 2 mapped to illegal pblock 2 (length 1) [ 459.217188][ T7953] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 459.277465][ T7953] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.690: lblock 0 mapped to illegal pblock 48 (length 1) [ 459.398861][ T7953] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 459.408243][ T7953] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.690: Failed to acquire dquot type 0 [ 459.519052][ T7953] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 459.570782][ T7953] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.690: mark_inode_dirty error [ 459.644373][ T7953] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 459.717211][ T7953] EXT4-fs (loop0): 1 orphan inode deleted [ 459.725565][ T7953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.785653][ T7658] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 459.856431][ T7658] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 459.865453][ T7658] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 460.323274][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.333390][ T7658] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.439742][ T7658] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 460.448600][ T7658] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 460.515912][ T5781] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 460.587761][ T5781] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 460.642289][ T5781] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 461.202082][ T7688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.210457][ T7688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.546553][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.554978][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.985737][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 462.590483][ T7991] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 462.598740][ T7991] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 462.606555][ T7991] netlink: 15262 bytes leftover after parsing attributes in process `syz.4.698'. [ 468.559399][ T8035] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 468.567441][ T8035] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 468.575265][ T8035] netlink: 15262 bytes leftover after parsing attributes in process `syz.4.711'. [ 469.469594][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 469.618303][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 469.677315][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 469.799439][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 469.809035][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.817466][ T10] usb 6-1: Product: syz [ 469.821842][ T10] usb 6-1: Manufacturer: syz [ 469.826644][ T10] usb 6-1: SerialNumber: syz [ 469.945347][ T10] usb 6-1: config 0 descriptor?? [ 470.021142][ T10] usb-storage 6-1:0.0: USB Mass Storage device detected [ 470.074266][ T10] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 470.082282][ T10] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 470.082282][ T10] Please send a copy of this message to and [ 470.315703][ T10] usb 6-1: USB disconnect, device number 2 [ 471.292425][ T8061] loop4: detected capacity change from 0 to 128 [ 471.415911][ T8061] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 471.428193][ T8061] FAT-fs (loop4): Filesystem has been set read-only [ 471.497931][ T8065] loop5: detected capacity change from 0 to 16 [ 471.579764][ T8065] erofs (device loop5): mounted with root inode @ nid 36. [ 475.436480][ T8102] loop0: detected capacity change from 0 to 512 [ 475.676223][ T8102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.752370][ T8102] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.501124][ T8113] loop2: detected capacity change from 0 to 512 [ 476.596735][ T8113] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 476.909605][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.500781][ T8122] loop4: detected capacity change from 0 to 512 [ 477.575346][ T8122] EXT4-fs: Ignoring removed i_version option [ 477.599815][ T8127] loop0: detected capacity change from 0 to 256 [ 477.693737][ T8122] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 477.757911][ T8127] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0xb6b62a4a, utbl_chksum : 0xe619d30d) [ 477.915837][ T8127] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 477.925417][ T8127] exFAT-fs (loop0): Filesystem has been set read-only [ 478.187892][ T30] audit: type=1326 audit(1770471579.318:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.210637][ T30] audit: type=1326 audit(1770471579.318:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.232923][ T30] audit: type=1326 audit(1770471579.318:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.255322][ T30] audit: type=1326 audit(1770471579.318:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.277738][ T30] audit: type=1326 audit(1770471579.318:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.303195][ T30] audit: type=1326 audit(1770471579.318:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.326686][ T30] audit: type=1326 audit(1770471579.318:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.349091][ T30] audit: type=1326 audit(1770471579.318:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.371312][ T30] audit: type=1326 audit(1770471579.318:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 478.396736][ T30] audit: type=1326 audit(1770471579.318:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 479.176709][ T8137] loop5: detected capacity change from 0 to 128 [ 479.242837][ T8139] loop0: detected capacity change from 0 to 128 [ 479.293252][ T8137] EXT4-fs (loop5): Test dummy encryption mode enabled [ 479.326818][ T8139] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.363492][ T8139] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.444900][ T8137] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.589396][ T8137] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.644596][ T8144] loop2: detected capacity change from 0 to 256 [ 480.003392][ T8144] FAT-fs (loop2): Directory bread(block 64) failed [ 480.054077][ T8144] FAT-fs (loop2): Directory bread(block 65) failed [ 480.077632][ T8144] FAT-fs (loop2): Directory bread(block 66) failed [ 480.120680][ T8144] FAT-fs (loop2): Directory bread(block 67) failed [ 480.143785][ T8144] FAT-fs (loop2): Directory bread(block 68) failed [ 480.151054][ T8144] FAT-fs (loop2): Directory bread(block 69) failed [ 480.160895][ T8144] FAT-fs (loop2): Directory bread(block 70) failed [ 480.184091][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.197732][ T8144] FAT-fs (loop2): Directory bread(block 71) failed [ 480.248781][ T8144] FAT-fs (loop2): Directory bread(block 72) failed [ 480.255607][ T8144] FAT-fs (loop2): Directory bread(block 73) failed [ 480.552457][ T8144] syz.2.742: attempt to access beyond end of device [ 480.552457][ T8144] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 480.619999][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.626812][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.951581][ T8153] loop0: detected capacity change from 0 to 1024 [ 481.010795][ T8153] EXT4-fs: Ignoring removed orlov option [ 481.181652][ T8153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.194607][ T8158] tmpfs: Unknown parameter '0177777777777777777777701777777777777777777777Xcv:Q' [ 481.304811][ T7708] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.839844][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.018876][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 483.225402][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 483.308718][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.337175][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 483.350496][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 483.359947][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.493129][ T10] usb 5-1: config 0 descriptor?? [ 483.588492][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 484.602908][ T8191] loop5: detected capacity change from 0 to 1024 [ 484.651026][ T8191] EXT4-fs: Ignoring removed i_version option [ 484.705802][ T8191] EXT4-fs: inline encryption not supported [ 484.745613][ T8191] EXT4-fs (loop5): unable to read superblock [ 485.828373][ T10] usb 5-1: USB disconnect, device number 11 [ 486.282602][ T8203] loop5: detected capacity change from 0 to 128 [ 486.535039][ T8203] EXT4-fs (loop5): Test dummy encryption mode enabled [ 488.199630][ T8203] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 488.310368][ T8203] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 488.708602][ T8203] fscrypt (loop5): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 489.211946][ T7708] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.658700][ T8219] fuse: Unknown parameter '0x0000000000000004' [ 490.887242][ T796] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 491.087465][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 491.153037][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.195486][ T796] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.207333][ T796] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.207486][ T796] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 491.207700][ T796] usb 6-1: config 0 interface 0 has no altsetting 0 [ 491.237862][ T796] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 491.247404][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.394329][ T796] usb 6-1: config 0 descriptor?? [ 491.783390][ T8231] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 491.791796][ T8231] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 491.808839][ T8231] netlink: 15262 bytes leftover after parsing attributes in process `syz.2.764'. [ 491.929538][ T796] hid-thrustmaster 0003:044F:B65D.000E: item fetching failed at offset 1/5 [ 491.983895][ T796] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 491.992918][ T796] hid-thrustmaster 0003:044F:B65D.000E: probe with driver hid-thrustmaster failed with error -22 [ 492.099439][ T796] usb 6-1: USB disconnect, device number 3 [ 493.304058][ T8240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 493.351782][ T8240] netlink: 'syz.5.768': attribute type 12 has an invalid length. [ 493.360245][ T8240] netlink: 'syz.5.768': attribute type 29 has an invalid length. [ 493.368672][ T8240] netlink: 148 bytes leftover after parsing attributes in process `syz.5.768'. [ 493.378281][ T8240] netlink: 'syz.5.768': attribute type 2 has an invalid length. [ 493.386356][ T8240] netlink: 'syz.5.768': attribute type 3 has an invalid length. [ 493.394443][ T8240] netlink: 15 bytes leftover after parsing attributes in process `syz.5.768'. [ 494.939372][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 494.987819][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 496.378523][ T8259] netlink: 'syz.5.778': attribute type 4 has an invalid length. [ 496.675279][ T8264] loop4: detected capacity change from 0 to 128 [ 496.833366][ T8264] EXT4-fs (loop4): Test dummy encryption mode enabled [ 496.969195][ T8264] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 497.037975][ T8264] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 497.405121][ T8272] loop5: detected capacity change from 0 to 256 [ 497.586278][ T8272] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 497.998442][ T8264] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 498.335299][ T5794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.697090][ T8278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.251858][ T8286] loop4: detected capacity change from 0 to 256 [ 499.456239][ T8286] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 499.905545][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 500.145109][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.155928][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.222822][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 500.233014][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.241445][ T10] usb 4-1: SerialNumber: syz [ 500.618931][ T10] usb 4-1: 0:2 : does not exist [ 500.740722][ T10] usb 4-1: USB disconnect, device number 8 [ 500.939373][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.880533][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 502.525290][ T8305] loop3: detected capacity change from 0 to 256 [ 502.574176][ T8305] exfat: Invalid uid '0x00000000ffffffff' [ 503.754850][ T8318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.800'. [ 504.418621][ T8325] loop2: detected capacity change from 0 to 128 [ 504.488252][ T8325] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 505.027737][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.804'. [ 508.472212][ T8338] loop4: detected capacity change from 0 to 16 [ 508.524487][ T8336] loop0: detected capacity change from 0 to 2048 [ 508.556380][ T8338] erofs (device loop4): mounted with root inode @ nid 36. [ 508.641756][ T8336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.092901][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.267048][ T5833] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 509.527235][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.538311][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.640642][ T5833] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 509.650201][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 509.658879][ T5833] usb 4-1: SerialNumber: syz [ 509.836385][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.812'. [ 510.060239][ T5833] usb 4-1: 0:2 : does not exist [ 510.204084][ T5833] usb 4-1: USB disconnect, device number 9 [ 510.516728][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.748956][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 511.372341][ T8358] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 511.447592][ T8358] loop3: detected capacity change from 0 to 256 [ 511.672364][ T8358] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 512.407525][ T5833] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 512.620431][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 513.592213][ T5833] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.602699][ T5833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.631960][ T5833] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.641475][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.650208][ T5833] usb 3-1: Product: syz [ 513.654572][ T5833] usb 3-1: Manufacturer: syz [ 513.659467][ T5833] usb 3-1: SerialNumber: syz [ 515.142409][ T8376] loop0: detected capacity change from 0 to 512 [ 515.289577][ T5833] usb 3-1: 0:2 : does not exist [ 515.329115][ T5833] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 515.347510][ T8376] EXT4-fs: old and new quota format mixing [ 515.439559][ T5833] usb 3-1: USB disconnect, device number 13 [ 515.943907][ T8380] loop3: detected capacity change from 0 to 128 [ 516.081642][ T8380] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 516.089718][ T8380] FAT-fs (loop3): Filesystem has been set read-only [ 516.136280][ T8380] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 516.328707][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.138112][ T8390] netlink: 'syz.3.829': attribute type 8 has an invalid length. [ 517.146098][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.829'. [ 517.947109][ T5078] Bluetooth: hci5: command 0x0405 tx timeout [ 518.147599][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 518.147681][ T30] audit: type=1400 audit(1770471875.296:102): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8397 comm="syz.4.832" [ 518.252323][ T8396] loop3: detected capacity change from 0 to 512 [ 518.356160][ T8396] EXT4-fs: Ignoring removed nobh option [ 518.508614][ T8396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 518.607744][ T8396] System zones: 1-12 [ 518.659070][ T8396] EXT4-fs (loop3): orphan cleanup on readonly fs [ 518.710643][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 518.774439][ T8396] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 518.893465][ T8396] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.831: corrupted inode contents [ 518.991716][ T8396] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.831: mark_inode_dirty error [ 519.101742][ T8396] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.831: corrupted inode contents [ 519.164677][ T8396] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.831: mark_inode_dirty error [ 519.397221][ T8396] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.831: mark inode dirty (error -117) [ 519.564295][ T8396] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 519.626418][ T8396] EXT4-fs (loop3): 1 orphan inode deleted [ 519.657968][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 519.741802][ T8396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 521.707424][ T797] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 521.936355][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.947988][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.958179][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.971463][ T797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.980906][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.062423][ T797] usb 3-1: config 0 descriptor?? [ 522.613758][ T797] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x1 [ 522.627397][ T797] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x2 [ 522.635097][ T797] plantronics 0003:047F:FFFF.000F: item fetching failed at offset 14/15 [ 522.721943][ T797] plantronics 0003:047F:FFFF.000F: parse failed [ 522.735337][ T797] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 522.843623][ T797] usb 3-1: USB disconnect, device number 14 [ 523.599976][ T8427] netlink: 60 bytes leftover after parsing attributes in process `syz.4.840'. [ 523.921189][ T8429] netlink: 'syz.2.841': attribute type 8 has an invalid length. [ 523.929622][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 525.320578][ T8437] loop2: detected capacity change from 0 to 512 [ 525.337768][ T5833] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 525.393210][ T8437] ext4: Unknown parameter 'nouser_xattr' [ 525.530303][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 525.598505][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.608989][ T5833] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.704127][ T5833] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 525.713829][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.722711][ T5833] usb 1-1: Product: syz [ 525.727230][ T5833] usb 1-1: Manufacturer: syz [ 525.732042][ T5833] usb 1-1: SerialNumber: syz [ 525.919612][ T5833] usb 1-1: config 0 descriptor?? [ 526.143507][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.368368][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 526.416536][ T5833] usb 1-1: USB disconnect, device number 7 [ 526.952469][ T8448] binder: 8447:8448 ioctl c0306201 800003c0 returned -14 [ 527.721827][ T8455] loop3: detected capacity change from 0 to 512 [ 527.752942][ T8453] loop0: detected capacity change from 0 to 512 [ 527.794429][ T8455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 527.827357][ T8453] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 527.977608][ T8455] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.850: invalid indirect mapped block 83886080 (level 1) [ 528.070220][ T8455] EXT4-fs (loop3): Remounting filesystem read-only [ 528.118611][ T8455] EXT4-fs (loop3): 1 orphan inode deleted [ 528.124719][ T8455] EXT4-fs (loop3): 1 truncate cleaned up [ 528.225293][ T8455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.397828][ T30] audit: type=1400 audit(1770471885.546:103): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8451 comm="syz.3.850" [ 528.719757][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.348648][ T8463] netlink: 'syz.4.853': attribute type 8 has an invalid length. [ 529.356631][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.853'. [ 529.857101][ T8466] loop5: detected capacity change from 0 to 512 [ 529.923145][ T8466] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 530.026169][ T8466] EXT4-fs (loop5): 1 truncate cleaned up [ 530.036987][ T8469] Illegal XDP return value 4294967274 on prog (id 24) dev syz_tun, expect packet loss! [ 530.050399][ T8466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.446292][ T30] audit: type=1800 audit(1770471887.596:104): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.854" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 530.834339][ T8474] loop3: detected capacity change from 0 to 256 [ 530.894201][ T8474] FAT-fs (loop3): count of clusters too big (63439870) [ 530.901447][ T8474] FAT-fs (loop3): Can't find a valid FAT filesystem [ 531.070692][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 531.651337][ T7708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.662401][ T7658] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.883434][ T7658] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.120131][ T7658] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.296048][ T8485] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 532.308294][ T7658] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.449003][ T8486] loop2: detected capacity change from 0 to 256 [ 532.703051][ T8486] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 533.078979][ T7658] bridge_slave_1: left allmulticast mode [ 533.084877][ T7658] bridge_slave_1: left promiscuous mode [ 533.091957][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.409779][ T7658] bridge_slave_0: left allmulticast mode [ 533.415667][ T7658] bridge_slave_0: left promiscuous mode [ 533.422692][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.674281][ T8489] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 535.137528][ T7658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.200597][ T7658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.253606][ T7658] bond0 (unregistering): Released all slaves [ 535.344252][ T8485] netlink: 180 bytes leftover after parsing attributes in process `syz.2.863'. [ 536.301112][ T7658] hsr_slave_0: left promiscuous mode [ 536.337301][ T7658] hsr_slave_1: left promiscuous mode [ 536.376071][ T7658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.384180][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.477760][ T7658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.485379][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.539066][ T8498] loop4: detected capacity change from 0 to 512 [ 536.598635][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'. [ 536.634187][ T8498] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 536.669033][ T7658] veth1_macvtap: left promiscuous mode [ 536.674796][ T7658] veth0_macvtap: left promiscuous mode [ 536.712352][ T7658] veth1_vlan: left promiscuous mode [ 536.733061][ T7658] veth0_vlan: left promiscuous mode [ 537.326107][ T5078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 537.343055][ T5078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 537.363681][ T5078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 537.395322][ T5078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 537.423285][ T5078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 538.614209][ T7658] team0 (unregistering): Port device team_slave_1 removed [ 538.681398][ T7658] team0 (unregistering): Port device team_slave_0 removed [ 539.569917][ T5078] Bluetooth: hci3: command tx timeout [ 540.991357][ T8507] chnl_net:caif_netlink_parms(): no params data found [ 541.627520][ T5078] Bluetooth: hci3: command tx timeout [ 541.954242][ T8549] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 542.028353][ T8549] loop3: detected capacity change from 0 to 256 [ 542.057909][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.064911][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.236220][ T8549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 543.253432][ T8556] netlink: 180 bytes leftover after parsing attributes in process `syz.3.876'. [ 543.275751][ T8556] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 543.707527][ T5078] Bluetooth: hci3: command tx timeout [ 544.749079][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.757046][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.878002][ T8507] bridge_slave_0: entered allmulticast mode [ 544.969664][ T8507] bridge_slave_0: entered promiscuous mode [ 545.171807][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.179588][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.270486][ T8507] bridge_slave_1: entered allmulticast mode [ 545.337985][ T8507] bridge_slave_1: entered promiscuous mode [ 545.790421][ T5078] Bluetooth: hci3: command tx timeout [ 546.012297][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.061019][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.881'. [ 546.160567][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.652782][ T8507] team0: Port device team_slave_0 added [ 546.776791][ T8507] team0: Port device team_slave_1 added [ 547.081851][ T8585] loop0: detected capacity change from 0 to 128 [ 547.183554][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.191560][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.221365][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.299198][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.314129][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.340697][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.936319][ T8594] loop2: detected capacity change from 0 to 256 [ 548.226183][ T8507] hsr_slave_0: entered promiscuous mode [ 548.274894][ T8507] hsr_slave_1: entered promiscuous mode [ 548.318980][ T8507] debugfs: 'hsr0' already exists in 'hsr' [ 548.328340][ T8507] Cannot create hsr debugfs directory [ 549.459891][ T8607] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 549.719626][ T8610] loop4: detected capacity change from 0 to 256 [ 549.761584][ T8613] loop3: detected capacity change from 0 to 1024 [ 549.827995][ T8613] EXT4-fs: Ignoring removed bh option [ 549.903397][ T8610] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 549.947584][ T8613] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 550.260171][ T8613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.896747][ T8625] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 551.904193][ T8607] netlink: 180 bytes leftover after parsing attributes in process `syz.4.892'. [ 553.123665][ T8507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.156135][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.247492][ T8507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.292858][ T8507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.386695][ T8507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.363872][ T796] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 554.587365][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 554.645246][ T796] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 554.654150][ T796] usb 5-1: config 4 has no interface number 0 [ 554.701176][ T796] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 554.711926][ T796] usb 5-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.722771][ T796] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 554.733086][ T796] usb 5-1: config 4 interface 196 has no altsetting 0 [ 554.847735][ T8647] overlayfs: missing 'workdir' [ 554.938784][ T796] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 554.948530][ T796] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 554.956767][ T796] usb 5-1: Product: syz [ 554.962226][ T796] usb 5-1: Manufacturer: syz [ 554.967206][ T796] usb 5-1: SerialNumber: syz [ 555.024856][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.094201][ T8643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 555.293746][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.424453][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.432145][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.656400][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.664100][ T7658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.855557][ T796] ipheth 5-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 555.927527][ T796] ipheth 5-1:4.196: probe with driver ipheth failed with error -22 [ 556.147971][ T796] usb 5-1: USB disconnect, device number 12 [ 557.588049][ T8668] loop3: detected capacity change from 0 to 128 [ 557.637548][ T8668] EXT4-fs (loop3): Test dummy encryption mode enabled [ 557.729761][ T8668] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.803498][ T8668] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 557.895094][ T8672] loop4: detected capacity change from 0 to 512 [ 558.002148][ T8672] EXT4-fs: Ignoring removed orlov option [ 558.037473][ T8668] ===================================================== [ 558.044771][ T8668] BUG: KMSAN: uninit-value in aes_encrypt+0x1239/0x1960 [ 558.052013][ T8668] aes_encrypt+0x1239/0x1960 [ 558.056818][ T8668] aesti_encrypt+0x3d/0xa0 [ 558.061502][ T8668] crypto_ecb_encrypt2+0x142/0x300 [ 558.066845][ T8668] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 558.072743][ T8668] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 558.078651][ T8668] crypto_skcipher_encrypt+0x111/0x1e0 [ 558.084298][ T8668] xts_encrypt+0x2e1/0x570 [ 558.088905][ T8668] crypto_skcipher_encrypt+0x18a/0x1e0 [ 558.094575][ T8668] fscrypt_crypt_data_unit+0x38e/0x590 [ 558.100250][ T8668] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 558.106899][ T8668] ext4_bio_write_folio+0x1383/0x30b0 [ 558.112476][ T8668] mpage_submit_folio+0x399/0x3d0 [ 558.117749][ T8668] ext4_do_writepages+0x3c61/0x7770 [ 558.123177][ T8668] ext4_writepages+0x337/0x870 [ 558.128175][ T8668] do_writepages+0x3f2/0x860 [ 558.132957][ T8668] file_write_and_wait_range+0x6f0/0x7d0 [ 558.138929][ T8668] generic_buffers_fsync_noflush+0x7a/0x3f0 [ 558.145077][ T8668] ext4_sync_file+0x586/0x12f0 [ 558.150066][ T8668] vfs_fsync_range+0x1a1/0x250 [ 558.155075][ T8668] ext4_buffered_write_iter+0xae9/0xce0 [ 558.160844][ T8668] ext4_file_write_iter+0x25fa/0x3eb0 [ 558.166471][ T8668] vfs_write+0xbe1/0x15c0 [ 558.171013][ T8668] ksys_pwrite64+0x1d6/0x2a0 [ 558.175828][ T8668] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 558.181532][ T8668] ia32_sys_call+0x3b7e/0x4340 [ 558.186552][ T8668] __do_fast_syscall_32+0x14a/0x310 [ 558.192119][ T8668] do_fast_syscall_32+0x37/0x80 [ 558.197206][ T8668] do_SYSENTER_32+0x1f/0x30 [ 558.201915][ T8668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.208481][ T8668] [ 558.210913][ T8668] Uninit was stored to memory at: [ 558.216216][ T8668] xts_xor_tweak+0x576/0xa90 [ 558.220982][ T8668] xts_encrypt+0x278/0x570 [ 558.225582][ T8668] crypto_skcipher_encrypt+0x18a/0x1e0 [ 558.231252][ T8668] fscrypt_crypt_data_unit+0x38e/0x590 [ 558.236937][ T8668] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 558.243419][ T8668] ext4_bio_write_folio+0x1383/0x30b0 [ 558.249084][ T8668] mpage_submit_folio+0x399/0x3d0 [ 558.254360][ T8668] ext4_do_writepages+0x3c61/0x7770 [ 558.259751][ T8668] ext4_writepages+0x337/0x870 [ 558.264787][ T8668] do_writepages+0x3f2/0x860 [ 558.269576][ T8668] file_write_and_wait_range+0x6f0/0x7d0 [ 558.275452][ T8668] generic_buffers_fsync_noflush+0x7a/0x3f0 [ 558.281594][ T8668] ext4_sync_file+0x586/0x12f0 [ 558.286585][ T8668] vfs_fsync_range+0x1a1/0x250 [ 558.291587][ T8668] ext4_buffered_write_iter+0xae9/0xce0 [ 558.297349][ T8668] ext4_file_write_iter+0x25fa/0x3eb0 [ 558.302937][ T8668] vfs_write+0xbe1/0x15c0 [ 558.307484][ T8668] ksys_pwrite64+0x1d6/0x2a0 [ 558.312318][ T8668] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 558.318029][ T8668] ia32_sys_call+0x3b7e/0x4340 [ 558.323043][ T8668] __do_fast_syscall_32+0x14a/0x310 [ 558.328488][ T8668] do_fast_syscall_32+0x37/0x80 [ 558.333571][ T8668] do_SYSENTER_32+0x1f/0x30 [ 558.338293][ T8668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.344863][ T8668] [ 558.347278][ T8668] Uninit was created at: [ 558.351821][ T8668] __alloc_frozen_pages_noprof+0x6df/0xf50 [ 558.357876][ T8668] alloc_pages_mpol+0x328/0x860 [ 558.362966][ T8668] folio_alloc_noprof+0x108/0x360 [ 558.368176][ T8668] filemap_alloc_folio_noprof+0xd9/0x480 [ 558.374030][ T8668] __filemap_get_folio_mpol+0xb43/0x1960 [ 558.379917][ T8668] ext4_write_begin+0x6dd/0x2d50 [ 558.385079][ T8668] ext4_da_write_begin+0x75e/0x1420 [ 558.390509][ T8668] generic_perform_write+0x364/0x1050 [ 558.396077][ T8668] ext4_buffered_write_iter+0x61a/0xce0 [ 558.401842][ T8668] ext4_file_write_iter+0x25fa/0x3eb0 [ 558.407431][ T8668] vfs_write+0xbe1/0x15c0 [ 558.411963][ T8668] ksys_pwrite64+0x1d6/0x2a0 [ 558.416804][ T8668] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 558.422509][ T8668] ia32_sys_call+0x3b7e/0x4340 [ 558.427491][ T8668] __do_fast_syscall_32+0x14a/0x310 [ 558.432925][ T8668] do_fast_syscall_32+0x37/0x80 [ 558.437971][ T8668] do_SYSENTER_32+0x1f/0x30 [ 558.442663][ T8668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.449194][ T8668] [ 558.451634][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.3.908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 558.461436][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 558.471621][ T8668] ===================================================== [ 558.478645][ T8668] Disabling lock debugging due to kernel taint [ 558.484886][ T8674] ===================================================== [ 558.484897][ T8668] Kernel panic - not syncing: kmsan.panic set ... [ 558.498416][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.3.908 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 558.509770][ T8668] Tainted: [B]=BAD_PAGE [ 558.514007][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 558.524197][ T8668] Call Trace: [ 558.527650][ T8668] [ 558.530666][ T8668] __dump_stack+0x26/0x30 [ 558.535156][ T8668] dump_stack_lvl+0x50/0x1c0 [ 558.539918][ T8668] ? dump_stack+0x12/0x25 [ 558.544397][ T8668] dump_stack+0x1e/0x25 [ 558.548707][ T8668] vpanic+0x435/0xd40 [ 558.552873][ T8668] panic+0x15d/0x160 [ 558.556965][ T8668] kmsan_report+0x31a/0x320 [ 558.561656][ T8668] ? __msan_warning+0x1b/0x30 [ 558.566502][ T8668] ? aes_encrypt+0x1239/0x1960 [ 558.571402][ T8668] ? aesti_encrypt+0x3d/0xa0 [ 558.576140][ T8668] ? crypto_ecb_encrypt2+0x142/0x300 [ 558.581600][ T8668] ? crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 558.587643][ T8668] ? crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 558.593659][ T8668] ? crypto_skcipher_encrypt+0x111/0x1e0 [ 558.599514][ T8668] ? xts_encrypt+0x2e1/0x570 [ 558.604239][ T8668] ? crypto_skcipher_encrypt+0x18a/0x1e0 [ 558.610023][ T8668] ? fscrypt_crypt_data_unit+0x38e/0x590 [ 558.615827][ T8668] ? fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 558.622505][ T8668] ? ext4_bio_write_folio+0x1383/0x30b0 [ 558.628214][ T8668] ? mpage_submit_folio+0x399/0x3d0 [ 558.633593][ T8668] ? ext4_do_writepages+0x3c61/0x7770 [ 558.639124][ T8668] ? ext4_writepages+0x337/0x870 [ 558.644234][ T8668] ? do_writepages+0x3f2/0x860 [ 558.649151][ T8668] ? file_write_and_wait_range+0x6f0/0x7d0 [ 558.655136][ T8668] ? generic_buffers_fsync_noflush+0x7a/0x3f0 [ 558.661400][ T8668] ? ext4_sync_file+0x586/0x12f0 [ 558.666495][ T8668] ? vfs_fsync_range+0x1a1/0x250 [ 558.671599][ T8668] ? ext4_buffered_write_iter+0xae9/0xce0 [ 558.677471][ T8668] ? ext4_file_write_iter+0x25fa/0x3eb0 [ 558.683170][ T8668] ? vfs_write+0xbe1/0x15c0 [ 558.687840][ T8668] ? ksys_pwrite64+0x1d6/0x2a0 [ 558.692765][ T8668] ? __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 558.698580][ T8668] ? ia32_sys_call+0x3b7e/0x4340 [ 558.703698][ T8668] ? __do_fast_syscall_32+0x14a/0x310 [ 558.709249][ T8668] ? do_fast_syscall_32+0x37/0x80 [ 558.714476][ T8668] ? do_SYSENTER_32+0x1f/0x30 [ 558.719316][ T8668] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.726025][ T8668] ? __schedule+0x26ee/0x8180 [ 558.730872][ T8668] ? stack_depot_save_flags+0x35/0x790 [ 558.736492][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.741790][ T8668] __msan_warning+0x1b/0x30 [ 558.746455][ T8668] aes_encrypt+0x1239/0x1960 [ 558.751313][ T8668] aesti_encrypt+0x3d/0xa0 [ 558.755881][ T8668] crypto_ecb_encrypt2+0x142/0x300 [ 558.761171][ T8668] ? __pfx_aesti_encrypt+0x10/0x10 [ 558.766453][ T8668] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 558.772293][ T8668] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 558.778156][ T8668] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 558.783993][ T8668] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 558.789851][ T8668] crypto_skcipher_encrypt+0x111/0x1e0 [ 558.795487][ T8668] xts_encrypt+0x2e1/0x570 [ 558.800056][ T8668] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 558.806070][ T8668] ? __pfx_xts_encrypt+0x10/0x10 [ 558.811161][ T8668] crypto_skcipher_encrypt+0x18a/0x1e0 [ 558.816793][ T8668] fscrypt_crypt_data_unit+0x38e/0x590 [ 558.822442][ T8668] ? __alloc_frozen_pages_noprof+0x6df/0xf50 [ 558.828610][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.833896][ T8668] ? __pfx_xts_encrypt_done+0x10/0x10 [ 558.839425][ T8668] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 558.845456][ T8668] ? alloc_pages_mpol+0x52c/0x860 [ 558.850844][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.856146][ T8668] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 558.862174][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.867511][ T8668] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 558.873544][ T8668] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 558.880003][ T8668] ext4_bio_write_folio+0x1383/0x30b0 [ 558.885617][ T8668] mpage_submit_folio+0x399/0x3d0 [ 558.891034][ T8668] ext4_do_writepages+0x3c61/0x7770 [ 558.896413][ T8668] ? ext4_fc_track_range+0x149/0xe90 [ 558.901870][ T8668] ? ext4_inode_block_valid+0x5c2/0x660 [ 558.907689][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.913138][ T8668] ext4_writepages+0x337/0x870 [ 558.918091][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.923397][ T8668] ? __pfx_ext4_writepages+0x10/0x10 [ 558.928860][ T8668] do_writepages+0x3f2/0x860 [ 558.933633][ T8668] ? _raw_spin_unlock+0x30/0x50 [ 558.938623][ T8668] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 558.944846][ T8668] file_write_and_wait_range+0x6f0/0x7d0 [ 558.950718][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.956036][ T8668] generic_buffers_fsync_noflush+0x7a/0x3f0 [ 558.962130][ T8668] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 558.968245][ T8668] ext4_sync_file+0x586/0x12f0 [ 558.973185][ T8668] ? __pfx_ext4_sync_file+0x10/0x10 [ 558.978546][ T8668] vfs_fsync_range+0x1a1/0x250 [ 558.983489][ T8668] ext4_buffered_write_iter+0xae9/0xce0 [ 558.989190][ T8668] ? aa_file_perm+0x532/0x27c0 [ 558.994108][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 558.999420][ T8668] ext4_file_write_iter+0x25fa/0x3eb0 [ 559.004948][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 559.010282][ T8668] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 559.016283][ T8668] ? vfs_write+0x501/0x15c0 [ 559.020936][ T8668] ? filter_irq_stacks+0x49/0x190 [ 559.026140][ T8668] ? stack_depot_save_flags+0x35/0x790 [ 559.031761][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 559.037076][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 559.042376][ T8668] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 559.049196][ T8668] ? kmsan_get_metadata+0xf1/0x160 [ 559.054527][ T8668] vfs_write+0xbe1/0x15c0 [ 559.059087][ T8668] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 559.064976][ T8668] ksys_pwrite64+0x1d6/0x2a0 [ 559.069747][ T8668] __ia32_sys_ia32_pwrite64+0xf0/0x150 [ 559.075440][ T8668] ia32_sys_call+0x3b7e/0x4340 [ 559.080400][ T8668] __do_fast_syscall_32+0x14a/0x310 [ 559.085789][ T8668] do_fast_syscall_32+0x37/0x80 [ 559.090811][ T8668] do_SYSENTER_32+0x1f/0x30 [ 559.095475][ T8668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.101983][ T8668] RIP: 0023:0xf7f06539 [ 559.106181][ T8668] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 559.125949][ T8668] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 00000000000000b5 [ 559.134526][ T8668] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 559.142637][ T8668] RDX: 0000000000000001 RSI: 0000000008080c61 RDI: 0000000000000000 [ 559.150716][ T8668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.158788][ T8668] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 559.166889][ T8668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.174999][ T8668] [ 561.035400][ T8668] Shutting down cpus with NMI [ 561.040822][ T8668] Kernel Offset: disabled [ 561.045226][ T8668] Rebooting in 86400 seconds..