last executing test programs: 9m0.596323169s ago: executing program 3 (id=7676): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f00007ee000/0x2000)=nil, 0x2000}) 8m59.974983607s ago: executing program 3 (id=7678): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c000480050003000100000005000300000000000500030000000000050003000500000005000300800000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 8m59.31544425s ago: executing program 3 (id=7682): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0xbb) 8m57.933111316s ago: executing program 3 (id=7690): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) 8m56.799320872s ago: executing program 3 (id=7697): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 8m56.023806007s ago: executing program 3 (id=7699): setreuid(0x0, 0xee01) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) 8m40.665858307s ago: executing program 32 (id=7699): setreuid(0x0, 0xee01) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) 8m37.972546817s ago: executing program 2 (id=7805): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "e4fed400"}, @local=@item_4={0x3, 0x2, 0xa, "000100"}, @local=@item_4={0x3, 0x2, 0xa, "b784d248"}]}}, 0x0}, 0x0) 8m35.047533712s ago: executing program 2 (id=7818): unshare(0x6020480) r0 = socket(0x2a, 0x2, 0x0) connect$x25(r0, &(0x7f0000000440), 0x12) 8m34.551487495s ago: executing program 2 (id=7820): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@errors_remount}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000240)={0x8, 0x100000000, 0x0, 0x74}) 8m33.633528253s ago: executing program 2 (id=7824): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201809a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 8m33.034039186s ago: executing program 2 (id=7825): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 8m32.264528536s ago: executing program 2 (id=7829): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000000c0)=0xfc) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x2201) 8m30.76605841s ago: executing program 33 (id=7829): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000000c0)=0xfc) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x2201) 2m10.016260288s ago: executing program 4 (id=9872): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000340)={0x40, 0xe, 0x5, "5dd4eff4f4"}, 0x0, 0x0}) 2m7.599311877s ago: executing program 4 (id=9881): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @loopback, 0x10}, 0x59) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @local, 0x6}, 0x1c) 2m6.923657817s ago: executing program 4 (id=9884): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x200, &(0x7f0000019900)="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"}) 2m6.130374226s ago: executing program 4 (id=9888): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x300800c, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x1, 0x249, &(0x7f0000006840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2m5.158131401s ago: executing program 4 (id=9893): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 2m4.759087541s ago: executing program 4 (id=9895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440000080010800074000000001080002400000001208563b40000000090900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) 2m2.535192113s ago: executing program 34 (id=9895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440000080010800074000000001080002400000001208563b40000000090900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) 6.695358996s ago: executing program 5 (id=10439): syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 6.388473514s ago: executing program 6 (id=10440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4040) 5.78693507s ago: executing program 6 (id=10443): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000280)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) 5.718067117s ago: executing program 5 (id=10444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000700)=""/132, 0x84}, {&(0x7f0000000100)=""/57, 0x39}], 0x7}, 0xffbfff81}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}], 0x5, 0x40020060, 0x0) 5.086123148s ago: executing program 6 (id=10447): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005afb0040bd28420000000000000109022400010000000009040800020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000280)={0x0, 0xf, 0x7, {0x7, 0x0, "eb7327ea4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.910052571s ago: executing program 7 (id=10449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) 4.458514575s ago: executing program 5 (id=10450): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000598000/0x1000)=nil, 0x0, 0x0, 0x0, 0x200000000000cbfb, 0x1, 0x78}) 4.40642925s ago: executing program 1 (id=10451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x20000010) 4.209617988s ago: executing program 7 (id=10453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1}) 3.608361397s ago: executing program 1 (id=10454): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000b80)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYBLOB="a8cc8ef9f9253b216b1b0d18fac16bdd73a57826ac4b044ee988b7973d2250d39ebc1ecad595e5d7f9842d81192403ac80f2871fbf276d3aeb7f16ecb08a9161416f6512dbe50d75806bb46b66b14cc1e731effccd47569f9c206d778ae1220d73ee793b6ec3aa711dc84cc47dc497317105fdd4ccfec870ab06fd40c8ef081a1a7ba424a854bc50cd2cfedd", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x21, 0x1508, &(0x7f0000001f80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0x8001}}, 0x0, 0x200) 3.447906772s ago: executing program 0 (id=10455): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtclass={0x38, 0x28, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0xffe0, 0x10}, {0xffff, 0xb}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x38}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.339141367s ago: executing program 7 (id=10456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7a6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4004840}, 0x24044010) 2.790776892s ago: executing program 5 (id=10457): socket$tipc(0x1e, 0x2, 0x0) unshare(0x60400) pselect6(0x40, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x2, 0x1009, 0x7, 0x6, 0xfffffffffffffff9}, 0x0, &(0x7f00000000c0)={0x8, 0x3, 0x5, 0xa, 0x8, 0x6, 0x20000000000000, 0x8}, &(0x7f0000000140), 0x0) 2.742577213s ago: executing program 0 (id=10458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000081c000180090001006d617371"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 2.559775621s ago: executing program 7 (id=10459): ioprio_set$pid(0x3, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x1e) 2.385094299s ago: executing program 6 (id=10460): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 2.267749511s ago: executing program 1 (id=10461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x1, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x976d9017086ab917}, 0x38) 1.930143156s ago: executing program 0 (id=10462): unshare(0x20000400) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, 0x0) 1.828587253s ago: executing program 7 (id=10463): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {}, {@nobarrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 1.52630993s ago: executing program 6 (id=10464): pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x200000009, 0x1, 0x1, 0x7fffffff}, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.498854129s ago: executing program 1 (id=10465): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffffffff80700000001000000000002000000000000000000", 0x24) 1.369276608s ago: executing program 5 (id=10466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="37000e0080000000ffffffffffff0802114840000000ffffffffffff00000000000000000000ff07011f"], 0x6c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 1.198867706s ago: executing program 0 (id=10467): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0xfc, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="438d7acda0b2", 0x0, 0xa, 0x20021, 0x0, 0x0}) 850.326069ms ago: executing program 7 (id=10468): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 839.418812ms ago: executing program 1 (id=10469): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) setpriority(0x1, 0x0, 0x44) 509.76733ms ago: executing program 0 (id=10470): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r1}}, 0x120) 174.782071ms ago: executing program 6 (id=10471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 78.693516ms ago: executing program 0 (id=10472): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000700)=""/132, 0x84}, {&(0x7f0000000100)=""/57, 0x39}], 0x7}, 0xffbfff81}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}], 0x5, 0x40020060, 0x0) 78.514119ms ago: executing program 5 (id=10473): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 0s ago: executing program 1 (id=10474): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x224064, 0x0) kernel console output (not intermixed with test programs): [ 1563.598752][T29465] uclogic 0003:145F:0212.0026: pen probing failed: -71 [ 1563.617839][T29465] uclogic 0003:145F:0212.0026: failed probing parameters: -71 [ 1563.676204][T29465] uclogic 0003:145F:0212.0026: probe with driver uclogic failed with error -71 [ 1563.758525][T29465] usb 7-1: USB disconnect, device number 7 [ 1564.073940][ T1045] loop1: detected capacity change from 0 to 512 [ 1564.099023][ T1045] EXT4-fs: inline encryption not supported [ 1564.133816][ T1045] EXT4-fs: Ignoring removed mblk_io_submit option [ 1564.191444][ T1045] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1564.225824][ T1045] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1564.290790][ T1053] loop4: detected capacity change from 0 to 2048 [ 1564.299597][ T1045] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.8976: inode #13: comm syz.1.8976: iget: illegal inode # [ 1564.371680][ T1045] loop1: lost filesystem error report for type 5 error -117 [ 1564.381018][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1564.395291][ C1] EXT4-fs (loop1): initial error at time 1773006473: ext4_orphan_get:1391 [ 1564.404163][ C1] EXT4-fs (loop1): last error at time 1773006473: ext4_orphan_get:1391 [ 1564.415335][ T1045] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8976: couldn't read orphan inode 13 (err -117) [ 1564.438833][ T1062] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1564.458835][ T1045] loop1: lost filesystem error report for type 5 error -117 [ 1564.474488][ T1045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1565.017348][ T1068] pim6reg: entered allmulticast mode [ 1565.176171][ T1077] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 1565.182914][ T1077] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1565.263957][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.301539][ T1074] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1565.308320][ T1074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1565.338728][ T1077] vhci_hcd vhci_hcd.0: Device attached [ 1565.383792][ T1074] vhci_hcd vhci_hcd.0: Device attached [ 1565.396690][ T1082] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 1565.403434][ T1082] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1565.418676][ T1082] vhci_hcd vhci_hcd.0: Device attached [ 1565.515324][ T1083] vhci_hcd: connection closed [ 1565.529428][ T5905] vhci_hcd vhci_hcd.0: stop threads [ 1565.540251][ T1075] vhci_hcd: connection closed [ 1565.540761][ T1078] vhci_hcd: connection closed [ 1565.571337][ T5905] vhci_hcd vhci_hcd.0: release socket [ 1565.637343][ T5905] vhci_hcd vhci_hcd.0: disconnect device [ 1565.643799][T29465] usb 33-2: new low-speed USB device number 2 using vhci_hcd [ 1565.672069][ T1079] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1565.685248][ T5905] vhci_hcd vhci_hcd.0: stop threads [ 1565.690685][ T5905] vhci_hcd vhci_hcd.0: release socket [ 1565.740396][ T5905] vhci_hcd vhci_hcd.0: disconnect device [ 1565.762682][ T5905] vhci_hcd vhci_hcd.0: stop threads [ 1565.768279][ T5905] vhci_hcd vhci_hcd.0: release socket [ 1565.801535][ T5905] vhci_hcd vhci_hcd.0: disconnect device [ 1566.006608][ T1096] loop1: detected capacity change from 0 to 256 [ 1566.209812][ T1096] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1567.761755][T21071] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1567.971178][T21071] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1567.980474][T21071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.043709][T21071] usb 5-1: config 0 descriptor?? [ 1568.080176][T21071] cp210x 5-1:0.0: cp210x converter detected [ 1568.312717][T21071] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1568.498935][ T1159] loop6: detected capacity change from 0 to 256 [ 1568.505501][T20998] usb 5-1: USB disconnect, device number 42 [ 1568.514956][T20998] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1568.573361][T20998] cp210x 5-1:0.0: device disconnected [ 1568.624489][ T1159] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1569.669416][ T1191] loop6: detected capacity change from 0 to 512 [ 1569.831859][ T1191] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1569.962608][ T1191] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1569.981292][ T1191] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.9007: Corrupt directory, running e2fsck is recommended [ 1570.057444][ T1191] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1570.098410][ T1191] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.9007: corrupted in-inode xattr: e_name out of bounds [ 1570.155843][ T1191] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1570.157335][ T1191] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.9007: couldn't read orphan inode 15 (err -117) [ 1570.167096][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1570.167186][ C1] EXT4-fs (loop6): initial error at time 1773006479: ext4_iget_extra_inode:5025: inode 15 [ 1570.167349][ C1] EXT4-fs (loop6): last error at time 1773006479: ext4_iget_extra_inode:5025: inode 15 [ 1570.225627][ T1191] loop6: lost filesystem error report for type 5 error -117 [ 1570.258710][ T1191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.602657][ T29] audit: type=1326 audit(1773006479.882:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1213 comm="syz.4.9013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1570.642236][T28260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.672038][ T29] audit: type=1326 audit(1773006479.882:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1213 comm="syz.4.9013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1570.750553][ T1222] mkiss: ax0: crc mode is auto. [ 1570.799010][T29465] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1572.641259][T21071] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1572.814989][T21071] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1572.840710][ T1266] loop1: detected capacity change from 0 to 512 [ 1572.851051][T21071] usb 6-1: config 0 has no interface number 0 [ 1572.882097][T21071] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1572.906124][T21071] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.925039][T21071] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1572.942479][T21071] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1572.949728][T21071] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1572.962434][T21071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.986521][T21071] usb 6-1: config 0 descriptor?? [ 1572.994291][ T1266] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.9025: corrupted in-inode xattr: invalid ea_ino [ 1573.047619][ T1266] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1573.051010][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1573.067095][ C1] EXT4-fs (loop1): initial error at time 1773006482: ext4_iget_extra_inode:5025: inode 15 [ 1573.077428][ C1] EXT4-fs (loop1): last error at time 1773006482: ext4_iget_extra_inode:5025: inode 15 [ 1573.091893][ T1266] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9025: couldn't read orphan inode 15 (err -117) [ 1573.104915][ T1266] loop1: lost filesystem error report for type 5 error -117 [ 1573.122082][ T1266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1573.550241][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1573.641366][T21071] uclogic 0003:145F:0212.0027: failed retrieving string descriptor #100: -71 [ 1573.705711][T21071] uclogic 0003:145F:0212.0027: failed retrieving pen parameters: -71 [ 1573.735140][ T5428] kernel write not supported for file /amidi2 (pid: 5428 comm: kworker/1:3) [ 1573.745097][T21071] uclogic 0003:145F:0212.0027: pen probing failed: -71 [ 1573.776172][T21071] uclogic 0003:145F:0212.0027: failed probing parameters: -71 [ 1573.804052][T21071] uclogic 0003:145F:0212.0027: probe with driver uclogic failed with error -71 [ 1573.866879][T21071] usb 6-1: USB disconnect, device number 9 [ 1574.627998][T21071] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1574.821498][T21071] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.875916][T21071] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.937689][T21071] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1574.973674][T21071] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.012512][T21071] usb 7-1: config 0 descriptor?? [ 1575.143388][ T3080] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1575.303690][ T3080] usb 5-1: Using ep0 maxpacket: 8 [ 1575.321177][ T3080] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1575.356637][ T3080] usb 5-1: config 179 has no interface number 0 [ 1575.382190][ T3080] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1575.405259][ T3080] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1575.797444][ T1339] loop1: detected capacity change from 0 to 1024 [ 1575.853120][T21071] hid-led 0003:1D34:000A.0028: probe with driver hid-led failed with error -71 [ 1575.897247][ T3080] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1575.916211][ T3080] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1575.931373][ T3080] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1575.961407][ T3080] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1575.970743][ T3080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.984909][T21071] usb 7-1: USB disconnect, device number 8 [ 1576.138153][ T1326] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1577.156943][ T5831] usb 5-1: USB disconnect, device number 43 [ 1577.163268][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1577.163477][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1577.509830][ T1380] loop1: detected capacity change from 0 to 736 [ 1578.101598][ T5831] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1578.287545][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.335890][ T5831] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1578.375384][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.428660][ T5831] usb 1-1: config 0 descriptor?? [ 1578.836636][ T1409] loop5: detected capacity change from 0 to 256 [ 1578.962394][ T5831] kye 0003:0458:5005.0029: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1579.079897][ T5831] kye 0003:0458:5005.0029: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0 [ 1579.143439][ T5831] kye 0003:0458:5005.0029: tablet-enabling feature report not found [ 1579.176590][ T5831] kye 0003:0458:5005.0029: tablet enabling failed [ 1579.216586][ T1409] FAT-fs (loop5): Directory bread(block 64) failed [ 1579.244236][ T1409] FAT-fs (loop5): Directory bread(block 65) failed [ 1579.271494][ T1409] FAT-fs (loop5): Directory bread(block 66) failed [ 1579.289890][ T5831] usb 1-1: USB disconnect, device number 40 [ 1579.301511][ T1409] FAT-fs (loop5): Directory bread(block 67) failed [ 1579.308421][ T1409] FAT-fs (loop5): Directory bread(block 68) failed [ 1579.334851][ T1409] FAT-fs (loop5): Directory bread(block 69) failed [ 1579.354861][ T1409] FAT-fs (loop5): Directory bread(block 70) failed [ 1579.380152][ T1426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1579.393687][ T1409] FAT-fs (loop5): Directory bread(block 71) failed [ 1579.393983][ T1409] FAT-fs (loop5): Directory bread(block 72) failed [ 1579.394097][ T1409] FAT-fs (loop5): Directory bread(block 73) failed [ 1579.416898][ T1409] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1579.528915][ T1426] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1580.172863][ T1434] fido_id[1434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1580.806904][ T1455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1580.864493][ T1455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1581.554058][ T1467] sp0: Synchronizing with TNC [ 1581.592062][ T1467] sp0: Found TNC [ 1581.617815][ T1466] [U] ` [ 1581.743402][ T1477] xt_limit: Overflow, try lower: 271964/0 [ 1582.132876][ T1478] loop6: detected capacity change from 0 to 1024 [ 1582.384379][ T1478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.846710][ T1498] team0: Port device veth3 added [ 1582.916203][T28260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.383936][ T1526] netlink: 'syz.4.9079': attribute type 3 has an invalid length. [ 1584.759721][ T1558] loop5: detected capacity change from 0 to 512 [ 1584.917755][ T1558] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #11: comm syz.5.9088: unexpected EA_INODE flag [ 1584.964238][ T1558] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1584.971020][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1584.987059][ C0] EXT4-fs (loop5): initial error at time 1773006494: ext4_orphan_get:1391: inode 11 [ 1584.996945][ C0] EXT4-fs (loop5): last error at time 1773006494: ext4_orphan_get:1391: inode 11 [ 1585.009537][ T1558] EXT4-fs (loop5): Remounting filesystem read-only [ 1585.023078][ T1558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1585.162853][ T1569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9091'. [ 1585.308305][ T1572] loop1: detected capacity change from 0 to 256 [ 1585.343942][ T1572] exfat: Deprecated parameter 'utf8' [ 1585.356854][ T1572] exfat: Deprecated parameter 'namecase' [ 1585.412146][ T1572] exfat: Deprecated parameter 'namecase' [ 1585.450684][ T1572] exfat: Deprecated parameter 'utf8' [ 1585.513763][T27896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.712510][ T1572] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1585.747274][ T1572] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 1585.915058][ T29] audit: type=1800 audit(1773006495.192:320): pid=1572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9092" name="file1" dev="loop1" ino=1048906 res=0 errno=0 [ 1586.075000][ T1586] loop4: detected capacity change from 0 to 2048 [ 1586.075000][ T1588] loop5: detected capacity change from 0 to 64 [ 1586.254534][ T1586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1587.228550][ T1616] loop4: detected capacity change from 0 to 128 [ 1587.288089][ T1616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1587.338205][ T1616] hpfs: filesystem error: improperly stopped [ 1587.389912][ T1616] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1587.437608][ T1616] hpfs: You really don't want any checks? You are crazy... [ 1587.498088][ T1616] hpfs: hpfs_map_sector(): read error [ 1587.539263][ T1616] hpfs: code page support is disabled [ 1587.570355][ T1616] hpfs: hpfs_map_4sectors(): unaligned read [ 1587.584122][ T1616] hpfs: hpfs_map_4sectors(): unaligned read [ 1587.590193][ T1616] hpfs: filesystem error: unable to find root dir [ 1587.854713][ T1624] IPVS: Error connecting to the multicast addr [ 1588.161663][ T1631] loop1: detected capacity change from 0 to 256 [ 1588.192002][ T1631] exfat: Deprecated parameter 'utf8' [ 1588.197718][ T1631] exfat: Deprecated parameter 'utf8' [ 1588.261935][ T1631] exfat: Deprecated parameter 'utf8' [ 1588.348024][ T1631] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1589.205819][ T1653] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1590.029990][ T1671] loop4: detected capacity change from 0 to 256 [ 1590.272204][ T1671] FAT-fs (loop4): Directory bread(block 64) failed [ 1590.318862][ T1671] FAT-fs (loop4): Directory bread(block 65) failed [ 1590.362527][ T1671] FAT-fs (loop4): Directory bread(block 66) failed [ 1590.369294][ T1671] FAT-fs (loop4): Directory bread(block 67) failed [ 1590.427696][ T1671] FAT-fs (loop4): Directory bread(block 68) failed [ 1590.447719][ T1671] FAT-fs (loop4): Directory bread(block 69) failed [ 1590.475784][ T1671] FAT-fs (loop4): Directory bread(block 70) failed [ 1590.511511][ T1671] FAT-fs (loop4): Directory bread(block 71) failed [ 1590.518429][ T1671] FAT-fs (loop4): Directory bread(block 72) failed [ 1590.563063][ T1671] FAT-fs (loop4): Directory bread(block 73) failed [ 1590.679620][ T1682] loop5: detected capacity change from 0 to 64 [ 1590.699868][ T1671] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1591.724912][ T1706] tipc: Enabling of bearer rejected, failed to enable media [ 1592.237749][ T1717] loop1: detected capacity change from 0 to 128 [ 1592.292141][ T1717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1592.364116][ T1717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1592.710105][ T1729] loop6: detected capacity change from 0 to 256 [ 1592.751218][ T1729] exfat: Unknown parameter '01777777777777777777777' [ 1595.424067][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9153'. [ 1595.480730][ T1788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9153'. [ 1596.558274][ T1813] loop4: detected capacity change from 0 to 512 [ 1596.590520][ T1813] EXT4-fs: Ignoring removed orlov option [ 1596.686711][ T1813] EXT4-fs (loop4): 1 truncate cleaned up [ 1596.712195][ T1813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.843252][ T29] audit: type=1800 audit(1773006506.122:321): pid=1813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9163" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1597.189247][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.833073][ T1841] loop9: detected capacity change from 0 to 7 [ 1598.029278][ T1841] Dev loop9: unable to read RDB block 7 [ 1598.061803][ T1841] loop9: unable to read partition table [ 1598.081792][ T1841] loop9: partition table beyond EOD, truncated [ 1598.121834][ T1841] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 1598.676897][ T1856] sg_write: data in/out 262115/14 bytes for SCSI command 0x0-- guessing data in; [ 1598.676897][ T1856] program syz.0.9173 not setting count and/or reply_len properly [ 1598.892826][ T1865] bond0: option resend_igmp: invalid value (18446744073709551361) [ 1598.930645][ T1865] bond0: option resend_igmp: allowed values 0 - 255 [ 1598.951987][ T1866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9176'. [ 1599.600231][ T1875] loop1: detected capacity change from 0 to 2048 [ 1599.728403][ T1875] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1599.794313][ T1875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1600.242734][ T1897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9186'. [ 1600.279660][ T1897] netlink: 'syz.6.9186': attribute type 2 has an invalid length. [ 1600.301176][ T1897] netlink: 'syz.6.9186': attribute type 1 has an invalid length. [ 1600.340097][ T1897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9186'. [ 1600.458625][ T1902] sg_write: data in/out 3984/14 bytes for SCSI command 0x7-- guessing data in; [ 1600.458625][ T1902] program syz.0.9188 not setting count and/or reply_len properly [ 1600.670390][ T1905] loop1: detected capacity change from 0 to 8 [ 1600.836894][ T5974] udevd[5974]: incorrect cramfs checksum on /dev/loop1 [ 1601.133472][ T1913] tipc: Enabling of bearer rejected, failed to enable media [ 1601.525228][ T5428] kernel write not supported for file /snd/midiC2D0 (pid: 5428 comm: kworker/1:3) [ 1602.371185][ T5428] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1602.551530][ T5428] usb 7-1: Using ep0 maxpacket: 32 [ 1602.582117][ T5428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.625808][ T5428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.678793][ T5428] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1602.731136][ T5428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.756706][ T1950] [U]  [ 1602.765901][ T5428] usb 7-1: config 0 descriptor?? [ 1602.795146][ T1950] [U] K{ [ 1602.798664][ T1950] [U] T 1ŠFFˊ`GJǘGO/MC [ 1602.809436][ T5428] hub 7-1:0.0: USB hub found [ 1602.835929][ T1950] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1602.919998][ T1950] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1602.966533][ T1950] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1603.081962][ T5428] hub 7-1:0.0: 29 ports detected [ 1603.095303][ T5428] hub 7-1:0.0: insufficient power available to use all downstream ports [ 1603.129227][ T1950] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1603.193359][ T1950] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1603.292092][ T1950] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1603.364232][ T1950] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1603.567417][ T1964] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9204'. [ 1603.604040][ T1950] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1603.645775][ T5428] usb 7-1: USB disconnect, device number 9 [ 1603.677874][ T1950] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1603.746883][ T1950] [U] 22Ʃ۩X?0;3U [ 1603.780158][ T1950] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1603.853084][ T1950] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1603.874984][ T1950] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1603.923965][ T1950] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1603.947382][ T1950] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1603.984604][ T1950] [U] EC [ 1603.988399][ T1950] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1604.060113][ T1950] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1604.921181][ T3080] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1605.123749][ T2006] loop6: detected capacity change from 0 to 64 [ 1605.134894][ T3080] usb 2-1: Using ep0 maxpacket: 32 [ 1605.158333][ T3080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.224015][ T3080] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 1605.261179][ T3080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.319543][ T3080] usb 2-1: Product: syz [ 1605.351080][ T3080] usb 2-1: Manufacturer: syz [ 1605.371981][ T3080] usb 2-1: SerialNumber: syz [ 1605.426774][ T3080] usb 2-1: config 0 descriptor?? [ 1605.686192][ T3080] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro FD v0 fw v0.0.0 (2 channels) [ 1605.900069][ T3080] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1605.930252][ T3080] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1605.967057][ T3080] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1606.102032][ T2034] openvswitch: netlink: Actions may not be safe on all matching packets [ 1606.205346][ T3080] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1606.302229][ T3080] usb 2-1: USB disconnect, device number 43 [ 1606.394285][ T2041] loop5: detected capacity change from 0 to 1024 [ 1606.435586][ T2041] EXT4-fs: Ignoring removed i_version option [ 1606.461591][ T2041] EXT4-fs: inline encryption not supported [ 1606.497802][ T2041] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1606.619910][ T2041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1606.716498][ T2054] usb usb8: usbfs: process 2054 (syz.0.9223) did not claim interface 0 before use [ 1606.753878][ T2052] tipc: Enabling of bearer rejected, failed to enable media [ 1607.145524][T27896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.468988][ T2069] loop6: detected capacity change from 0 to 256 [ 1607.490335][ T2069] exfat: Deprecated parameter 'utf8' [ 1607.529298][ T2069] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1607.627977][ T2069] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1607.654013][ T5428] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1607.858992][ T5428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.885625][ T5428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.911050][ T5428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1607.974150][ T5428] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1608.021404][ T5428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.059691][ T5428] usb 1-1: config 0 descriptor?? [ 1608.127165][ T2085] loop1: detected capacity change from 0 to 128 [ 1608.580600][ T5428] hid_parser_main: 59 callbacks suppressed [ 1608.580700][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.633812][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.649848][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.689187][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.759233][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.832910][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.850642][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.875807][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.887960][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.952397][ T5428] nti 0003:0757:0A00.002A: unknown main item tag 0x0 [ 1608.959157][ T2104] loop5: detected capacity change from 0 to 512 [ 1609.047601][ T5428] nti 0003:0757:0A00.002A: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0 [ 1609.071336][ T2104] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1609.092758][ T5428] usb 1-1: USB disconnect, device number 41 [ 1609.196317][ T2104] EXT4-fs (loop5): 1 orphan inode deleted [ 1609.277967][ T2104] EXT4-fs (loop5): 1 truncate cleaned up [ 1609.364878][ T2104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1610.021980][T27896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.090230][ T2129] fido_id[2129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1612.938353][ T3080] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1613.131274][ T3080] usb 6-1: Using ep0 maxpacket: 16 [ 1613.160462][ T3080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.217626][ T3080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.253956][ T5428] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1613.261041][ T3080] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1613.304804][ T3080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.343057][ T3080] usb 6-1: config 0 descriptor?? [ 1613.498108][ T5428] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1613.541943][ T5428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.577401][ T5428] usb 1-1: Product: syz [ 1613.595192][ T5428] usb 1-1: Manufacturer: syz [ 1613.610708][ T5428] usb 1-1: SerialNumber: syz [ 1613.709358][ T2223] loop1: detected capacity change from 0 to 128 [ 1613.759724][ T2223] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1613.825828][ T2223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1613.908558][ T3080] hid-multitouch 0003:1FD2:6007.002B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1614.113679][ T3080] usb 6-1: USB disconnect, device number 10 [ 1614.166052][ T2237] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9270'. [ 1614.268922][ T2236] loop4: detected capacity change from 0 to 512 [ 1614.322152][ T5428] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1614.365148][ T5428] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1614.415579][ T5428] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1614.467084][ T5428] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1614.582781][ T5428] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1614.606639][ T2236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-00000e000000 r/w without journal. Quota mode: writeback. [ 1614.706738][ T2236] ext4 filesystem being mounted at /1860/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1614.779880][ T5428] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1614.893832][ T2236] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.9269: path /1860/file0: bad entry in directory: directory entry overrun - offset=0, inode=651313666, rec_len=65592, size=2048 fake=1 [ 1614.942906][ T5428] usb 1-1: USB disconnect, device number 42 [ 1615.047413][ T2236] EXT4-fs (loop4): Remounting filesystem read-only [ 1615.235408][ T2269] netlink: 64691 bytes leftover after parsing attributes in process `syz.6.9272'. [ 1615.243449][ T2253] fido_id[2253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1615.498383][ T2274] loop1: detected capacity change from 0 to 16 [ 1615.515244][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-00000e000000. [ 1615.582396][ T2274] erofs (device loop1): mounted with root inode @ nid 36. [ 1615.668120][ T2278] [U]  [ 1615.693828][ T2278] [U] K{ [ 1615.697263][ T2278] [U] T 1ŠFFˊ`GJǘGO/MC [ 1615.754601][ T2278] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1615.900609][ T2278] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1616.065546][ T2278] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1616.215282][ T2278] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1616.365591][ T2278] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1616.406935][ T2293] loop1: detected capacity change from 0 to 512 [ 1616.454821][ T2278] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1616.535566][ T2278] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< not permitted [ 1691.470631][ T4049] tipc: Enabling of bearer rejected, failed to enable media [ 1691.960437][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1692.094527][ T4061] loop4: detected capacity change from 0 to 512 [ 1692.211120][ T4061] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1692.220539][ T4061] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1692.357126][ T4061] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1692.442358][ T4061] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1692.527683][ T4061] System zones: 0-2, 18-18, 34-35 [ 1692.595338][ T4061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1692.767494][ T29] audit: type=1800 audit(1773006602.032:323): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9695" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1693.086085][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.228278][ T4107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9705'. [ 1695.004790][ T4118] loop4: detected capacity change from 0 to 256 [ 1695.027537][ T4118] exfat: Deprecated parameter 'utf8' [ 1695.124430][ T4118] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1696.101561][ T5831] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1696.296716][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 1696.323214][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 1696.352173][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34618, setting to 1024 [ 1696.370087][ T5831] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1696.397082][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.450702][ T5831] usb 7-1: config 0 descriptor?? [ 1696.463799][ T4136] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1696.999173][ T5831] ntrig 0003:1B96:0008.002F: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.6-1/input0 [ 1697.165958][ T5831] usb 7-1: USB disconnect, device number 14 [ 1697.686570][ T4175] netlink: 204 bytes leftover after parsing attributes in process `syz.1.9720'. [ 1697.914227][ T4165] fido_id[4165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1698.068108][ T4183] loop5: detected capacity change from 0 to 64 [ 1698.170105][ T4180] loop4: detected capacity change from 0 to 2048 [ 1698.285977][ T4180] NILFS (loop4): invalid segment: Inconsistency found [ 1698.361243][ T4180] NILFS (loop4): trying rollback from an earlier position [ 1698.437229][ T4180] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 1699.255232][ T4201] loop5: detected capacity change from 0 to 4096 [ 1699.377700][ T4210] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1700.167404][ T4221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9734'. [ 1701.414748][ T4243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9738'. [ 1701.700140][ T4241] loop4: detected capacity change from 0 to 4096 [ 1701.889436][ T4255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1702.151728][ T4260] loop5: detected capacity change from 0 to 64 [ 1703.049241][ T4272] loop4: detected capacity change from 0 to 1764 [ 1703.129741][ T4279] loop5: detected capacity change from 0 to 128 [ 1704.074165][ T4297] loop1: detected capacity change from 0 to 512 [ 1704.289733][ T4297] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.9752: invalid indirect mapped block 256 (level 2) [ 1704.316701][ T4297] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1704.322499][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1704.338554][ C0] EXT4-fs (loop1): initial error at time 1773006613: ext4_free_branches:1023: inode 11 [ 1704.348547][ C0] EXT4-fs (loop1): last error at time 1773006613: ext4_free_branches:1023: inode 11 [ 1704.378069][ T4297] EXT4-fs (loop1): 2 truncates cleaned up [ 1704.453999][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1704.525006][ T4304] loop5: detected capacity change from 0 to 1764 [ 1704.751135][ T29] audit: type=1800 audit(1773006614.022:324): pid=4297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9752" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1705.211558][ T5831] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1705.421038][ T5831] usb 7-1: Using ep0 maxpacket: 8 [ 1705.445632][ T5831] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1705.505808][ T5831] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1705.534808][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.560779][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.579604][ T5831] usb 7-1: Product: syz [ 1705.611540][ T5831] usb 7-1: Manufacturer: syz [ 1705.623710][ T5831] usb 7-1: SerialNumber: syz [ 1705.665593][ T5831] usb 7-1: config 0 descriptor?? [ 1705.719431][ T5831] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1705.745819][ T5831] usb 7-1: setting power ON [ 1705.756289][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 1705.790205][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1705.834765][ T5831] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1705.877334][ T5831] usb 7-1: media controller created [ 1705.924523][ T4313] dvb-usb: bulk message failed: -22 (3/0) [ 1705.930498][ T4313] dvb-usb: bulk message failed: -22 (5/0) [ 1706.115332][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1706.375794][ T5831] usb 7-1: selecting invalid altsetting 6 [ 1706.420951][ T5831] usb 7-1: digital interface selection failed (-22) [ 1706.451257][ T5831] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1706.499141][ T5831] usb 7-1: setting power OFF [ 1706.509085][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 1706.522090][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1706.551277][ T5831] (NULL device *): no alternate interface [ 1707.127728][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1707.239644][ T5831] usb 7-1: USB disconnect, device number 15 [ 1707.866779][ T4378] tipc: Started in network mode [ 1707.912427][ T4378] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1707.955291][ T4378] tipc: Enabling of bearer rejected, failed to enable media [ 1710.750189][ T4432] loop6: detected capacity change from 0 to 256 [ 1711.007877][ T4432] FAT-fs (loop6): Directory bread(block 64) failed [ 1711.032589][ T4432] FAT-fs (loop6): Directory bread(block 65) failed [ 1711.039570][ T4432] FAT-fs (loop6): Directory bread(block 66) failed [ 1711.049719][ T4439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9792'. [ 1711.104114][ T4432] FAT-fs (loop6): Directory bread(block 67) failed [ 1711.118696][ T4432] FAT-fs (loop6): Directory bread(block 68) failed [ 1711.160693][ T4429] loop5: detected capacity change from 0 to 4096 [ 1711.163924][ T4432] FAT-fs (loop6): Directory bread(block 69) failed [ 1711.164226][ T4432] FAT-fs (loop6): Directory bread(block 70) failed [ 1711.247660][ T4432] FAT-fs (loop6): Directory bread(block 71) failed [ 1711.323926][ T4432] FAT-fs (loop6): Directory bread(block 72) failed [ 1711.330669][ T4432] FAT-fs (loop6): Directory bread(block 73) failed [ 1712.505876][ T4457] ptrace attach of ""[4461] was attempted by "./syz-executor exec"[4457] [ 1716.499242][ T4523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9815'. [ 1716.524932][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9818'. [ 1717.139019][ T4536] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9821'. [ 1717.659140][ T29] audit: type=1326 audit(1773006626.932:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1717.726274][ T4535] loop5: detected capacity change from 0 to 4096 [ 1717.731123][ T29] audit: type=1326 audit(1773006626.982:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1717.819675][ T4543] loop1: detected capacity change from 0 to 1024 [ 1718.058676][ T4554] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1718.159128][ T4543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1718.468126][ T29] audit: type=1326 audit(1773006627.732:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1718.643769][ T29] audit: type=1326 audit(1773006627.782:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1718.689798][ T4556] loop6: detected capacity change from 0 to 2048 [ 1718.741255][ T29] audit: type=1326 audit(1773006627.802:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1718.841661][ T4556] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1719.054315][ T4567] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1719.210724][ T4569] ptrace attach of "./syz-executor exec"[27896] was attempted by ""[4569] [ 1719.334804][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.265899][ T4586] ieee802154 phy0 wpan0: encryption failed: -22 [ 1722.272966][ T4620] pim6reg: entered allmulticast mode [ 1722.325924][ T4625] pim6reg: left allmulticast mode [ 1722.636555][ T4630] loop1: detected capacity change from 0 to 256 [ 1722.982345][ T4639] loop4: detected capacity change from 0 to 64 [ 1723.126974][ T4645] proc: Bad value for 'gid' [ 1723.637576][ T4630] FAT-fs (loop1): Directory bread(block 64) failed [ 1723.681570][ T4630] FAT-fs (loop1): Directory bread(block 65) failed [ 1723.688503][ T4630] FAT-fs (loop1): Directory bread(block 66) failed [ 1723.801242][ T4630] FAT-fs (loop1): Directory bread(block 67) failed [ 1723.882432][ T4630] FAT-fs (loop1): Directory bread(block 68) failed [ 1723.889172][ T4630] FAT-fs (loop1): Directory bread(block 69) failed [ 1723.982449][ T4630] FAT-fs (loop1): Directory bread(block 70) failed [ 1724.001250][ T4630] FAT-fs (loop1): Directory bread(block 71) failed [ 1724.008131][ T4630] FAT-fs (loop1): Directory bread(block 72) failed [ 1724.174065][ T4630] FAT-fs (loop1): Directory bread(block 73) failed [ 1724.373115][ T4665] netlink: 'syz.6.9854': attribute type 2 has an invalid length. [ 1724.526462][ T4666] loop4: detected capacity change from 0 to 2048 [ 1724.634912][ T4666] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1724.743410][ T4666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1727.348674][ T4707] loop1: detected capacity change from 0 to 2048 [ 1727.402140][ T4711] bridge0: entered promiscuous mode [ 1727.418305][ T4707] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1727.498239][ T4711] bridge0: port 3(macvlan3) entered blocking state [ 1727.551639][ T4711] bridge0: port 3(macvlan3) entered disabled state [ 1727.571898][ T4711] macvlan3: entered allmulticast mode [ 1727.577483][ T4711] bridge0: entered allmulticast mode [ 1727.716734][ T4711] macvlan3: left allmulticast mode [ 1727.730998][ T5974] udevd[5974]: incorrect nilfs2 checksum on /dev/loop1 [ 1727.738197][ T4721] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1727.767117][ T4711] bridge0: left allmulticast mode [ 1727.803196][ T4711] bridge0: left promiscuous mode [ 1727.953456][ T5831] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1728.149305][ T5831] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1728.193410][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.265947][ T5831] usb 5-1: config 0 descriptor?? [ 1728.347322][ T5831] cp210x 5-1:0.0: cp210x converter detected [ 1728.962077][ T5831] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1729.000588][ T5831] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1729.057240][ T5831] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1729.159934][ T5831] usb 5-1: USB disconnect, device number 48 [ 1729.224185][ T5831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1729.257294][ T5831] cp210x 5-1:0.0: device disconnected [ 1730.159540][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9880'. [ 1730.350468][ T4776] bridge0: port 3(macvlan2) entered blocking state [ 1730.401952][ T4776] bridge0: port 3(macvlan2) entered disabled state [ 1730.442683][ T4776] macvlan2: entered allmulticast mode [ 1730.487376][ T4776] macvlan2: left allmulticast mode [ 1731.193282][ T4793] bridge0: port 3(macvlan2) entered blocking state [ 1731.236843][ T4793] bridge0: port 3(macvlan2) entered disabled state [ 1731.292928][ T4793] macvlan2: entered allmulticast mode [ 1731.319555][ T4793] bridge0: entered allmulticast mode [ 1731.415715][ T4793] macvlan2: left allmulticast mode [ 1731.465902][ T4793] bridge0: left allmulticast mode [ 1731.524737][ T4802] loop4: detected capacity change from 0 to 16 [ 1731.575532][ T4802] erofs (device loop4): mounted with root inode @ nid 36. [ 1733.518349][ T53] bridge_slave_1: left allmulticast mode [ 1733.566501][ T53] bridge_slave_1: left promiscuous mode [ 1733.585745][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.626764][ T53] bridge_slave_0: left allmulticast mode [ 1733.661298][ T53] bridge_slave_0: left promiscuous mode [ 1733.667784][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.438069][ T53] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1734.554708][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.584149][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.606873][ T53] bond0 (unregistering): (slave team0): Releasing backup interface [ 1734.667781][ T53] bond0 (unregistering): Released all slaves [ 1734.689940][ T53] bond1 (unregistering): Released all slaves [ 1734.714957][ T53] bond2 (unregistering): Released all slaves [ 1734.790802][ T53] bond3 (unregistering): Released all slaves [ 1735.023382][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9899'. [ 1735.149090][ T4858] overlayfs: workdir and upperdir must be separate subtrees [ 1735.342190][ T53] tipc: Left network mode [ 1736.058115][ T4870] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9904'. [ 1736.188590][ T4870] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9904'. [ 1736.442697][ T4880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1736.462150][ T4880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1736.479214][ T4880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1736.505763][ T4880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1736.539451][ T4880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1736.694123][T27902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1736.706101][T27902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1736.735381][T27902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1736.761281][T27902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1736.786104][T27902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1737.824466][ T4949] netlink: 'syz.5.9910': attribute type 3 has an invalid length. [ 1737.878490][ T4949] netlink: 'syz.5.9910': attribute type 1 has an invalid length. [ 1737.936060][ T4949] netlink: 232 bytes leftover after parsing attributes in process `syz.5.9910'. [ 1738.369143][ T53] hsr_slave_0: left promiscuous mode [ 1738.462107][ T53] hsr_slave_1: left promiscuous mode [ 1738.469903][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1738.528291][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.612516][ T4966] loop6: detected capacity change from 0 to 256 [ 1738.629622][ T4970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9914'. [ 1738.758966][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9915'. [ 1738.860147][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9915'. [ 1738.886458][ T4880] Bluetooth: hci2: command tx timeout [ 1738.888714][ T4966] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1739.880075][ T53] team_slave_1 (unregistering): left allmulticast mode [ 1739.949395][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.959537][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.005679][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1740.039041][ T53] team_slave_0 (unregistering): left allmulticast mode [ 1740.095198][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1740.879459][ T4993] loop1: detected capacity change from 0 to 256 [ 1740.961942][ T4880] Bluetooth: hci2: command tx timeout [ 1741.060548][ T4993] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1742.198271][ T53] IPVS: stop unused estimator thread 0... [ 1742.302817][ T5051] loop1: detected capacity change from 0 to 128 [ 1742.400080][ T5051] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1742.416585][ T5051] ext4 filesystem being mounted at /1969/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1742.474856][ T5037] loop6: detected capacity change from 0 to 2048 [ 1742.549663][ T4878] chnl_net:caif_netlink_parms(): no params data found [ 1742.598820][ T5037] EXT4-fs: Ignoring removed oldalloc option [ 1743.028493][ T5037] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 1743.043677][ T4880] Bluetooth: hci2: command tx timeout [ 1743.073504][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1743.160678][ T5037] System zones: 0-7 [ 1743.240177][ T5037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1743.368278][ T5061] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 1743.509810][ T5037] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.9923: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1743.677783][ T5037] EXT4-fs (loop6): Remounting filesystem read-only [ 1744.244986][ T5428] hid_parser_main: 28 callbacks suppressed [ 1744.245092][ T5428] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1744.290482][T28260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.363057][ T5428] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1745.110529][ T5137] fido_id[5137]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1745.135124][ T4880] Bluetooth: hci2: command tx timeout [ 1745.307450][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.357975][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.405862][ T4878] bridge_slave_0: entered allmulticast mode [ 1745.457428][ T4878] bridge_slave_0: entered promiscuous mode [ 1745.566792][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.603851][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.651465][ T4878] bridge_slave_1: entered allmulticast mode [ 1745.703074][ T4878] bridge_slave_1: entered promiscuous mode [ 1745.946819][ T5174] sp0: Synchronizing with TNC [ 1745.995888][ T5172] [U] [ 1746.281460][ T4878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.380253][ T4878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.944125][ T5428] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1747.017912][ T4878] team0: Port device team_slave_0 added [ 1747.085313][ T4878] team0: Port device team_slave_1 added [ 1747.126602][ T5428] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.154318][ T5428] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1747.196756][ T5428] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1747.231341][ T5428] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 29285, setting to 64 [ 1747.283853][ T5428] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1747.300428][ T5428] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1747.342330][ T5428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1747.350575][ T5428] usb 2-1: SerialNumber: syz [ 1747.420597][ T5218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1747.474912][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.486879][ T5428] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1747.530740][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.633442][ T4878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.707585][T29520] usb 2-1: USB disconnect, device number 45 [ 1747.750554][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.795549][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.863150][ T4878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.955336][ T5273] loop5: detected capacity change from 0 to 1024 [ 1748.034261][ T5270] tipc: Started in network mode [ 1748.039396][ T5270] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1748.148066][ T5270] tipc: Enabling of bearer rejected, failed to enable media [ 1748.328479][ T4904] hfsplus: b-tree write err: -5, ino 25 [ 1748.366292][ T4904] hfsplus: b-tree write err: -5, ino 4 [ 1748.381182][ T4904] hfsplus: b-tree write err: -5, ino 2 [ 1748.548690][ T4878] hsr_slave_0: entered promiscuous mode [ 1748.598251][ T4878] hsr_slave_1: entered promiscuous mode [ 1748.694842][ T4878] debugfs: 'hsr0' already exists in 'hsr' [ 1748.700760][ T4878] Cannot create hsr debugfs directory [ 1750.029305][ T5368] tipc: Started in network mode [ 1750.067520][ T5368] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1750.134697][ T5368] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1750.195643][ T5368] tipc: Enabled bearer , priority 17 [ 1750.848197][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9957'. [ 1750.921728][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9957'. [ 1751.313683][T29520] tipc: Node number set to 1 [ 1751.341574][ T4878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1751.499649][ T4878] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1751.640158][ T4878] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1751.780678][ T4878] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1751.905983][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9963'. [ 1752.906594][ T5459] loop1: detected capacity change from 0 to 2048 [ 1752.955244][ T5459] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1753.031436][ T5459] NILFS (loop1): mounting unchecked fs [ 1753.179528][ T5459] NILFS (loop1): recovery complete [ 1753.252265][ T5470] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1753.623147][ T4878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.840437][ T4878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1753.967815][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.975442][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.110576][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.118343][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.541591][ T5831] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1755.759590][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 1755.800576][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.865274][ T5831] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1755.924874][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.053283][ T5831] usb 2-1: config 0 descriptor?? [ 1756.107478][ T5831] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1756.760718][ T5831] gspca_vc032x: reg_r err -71 [ 1756.766023][ T5831] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1756.910780][ T5831] usb 2-1: USB disconnect, device number 46 [ 1756.997144][ T4878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.420206][ T29] audit: type=1326 audit(1773006666.692:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.5.9984" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707ef6c code=0x0 [ 1759.970018][ T4878] veth0_vlan: entered promiscuous mode [ 1760.107350][ T4878] veth1_vlan: entered promiscuous mode [ 1760.644267][ T4878] veth0_macvtap: entered promiscuous mode [ 1760.795211][ T4878] veth1_macvtap: entered promiscuous mode [ 1761.050675][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.260549][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.513355][ T4914] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.546976][ T4914] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.640261][ T4914] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.675423][ T4914] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.808424][ T5625] netlink: 'syz.5.10003': attribute type 1 has an invalid length. [ 1762.523916][ T5626] loop1: detected capacity change from 0 to 4096 [ 1764.121759][ T5659] netlink: 'syz.1.10012': attribute type 4 has an invalid length. [ 1764.698547][ T5668] loop5: detected capacity change from 0 to 256 [ 1764.762256][ T5668] exfat: Deprecated parameter 'utf8' [ 1764.768272][ T5668] exfat: Deprecated parameter 'namecase' [ 1764.818029][ T5668] exfat: Deprecated parameter 'namecase' [ 1764.884138][ T5428] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1764.953694][ T5668] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1765.098583][ T5428] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.137785][ T5428] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.190274][ T5428] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1765.236224][ T5428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.991848][ T5428] hid-led 0003:27B8:01ED.0031: probe with driver hid-led failed with error -71 [ 1766.060607][ T5428] usb 7-1: USB disconnect, device number 16 [ 1767.555938][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10027'. [ 1767.826592][ T5742] loop6: detected capacity change from 0 to 256 [ 1767.884118][ T5742] exfat: Deprecated parameter 'utf8' [ 1767.890101][ T5742] exfat: Deprecated parameter 'namecase' [ 1767.963792][ T5742] exfat: Deprecated parameter 'namecase' [ 1768.191363][ T5742] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1768.487360][ T5758] ptrace attach of "./syz-executor exec"[5789] was attempted by " [ 1769.940266][ T5792] loop6: detected capacity change from 0 to 164 [ 1770.038387][ T5792] Unable to read rock-ridge attributes [ 1770.121178][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.124414][ T5792] Unable to read rock-ridge attributes [ 1770.129164][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.561223][ T4724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.616817][ T4724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.690371][ T5812] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1771.376347][ T5825] : renamed from vlan0 [ 1772.983153][ T5832] loop6: detected capacity change from 0 to 8192 [ 1774.052480][ T5860] loop7: detected capacity change from 0 to 2048 [ 1774.139300][ T5860] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd9 != 0xd4 [ 1774.236189][ T5860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1774.873563][T21071] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1775.082702][T21071] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1775.115851][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1775.180239][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1775.262404][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1775.316582][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1775.382464][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1775.461632][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1775.486029][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1775.524417][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1775.604735][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1775.669417][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1775.679610][ T5891] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10062'. [ 1775.743843][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1775.851166][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1775.888358][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1775.943862][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1775.971264][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1776.035148][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1776.073783][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1776.154074][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1776.175812][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1776.235581][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1776.279600][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1776.307525][T21071] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1776.335755][ T5615] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1776.374610][T21071] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1776.401374][T21071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1776.477664][T21071] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1776.493800][T21071] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1776.511269][T20998] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1776.526478][T21071] usb 2-1: Product: syz [ 1776.546385][ T5615] usb 6-1: Using ep0 maxpacket: 16 [ 1776.568895][T21071] usb 2-1: Manufacturer: syz [ 1776.574061][ T5615] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.574199][ T5615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1776.574350][ T5615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1776.574478][ T5615] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1776.574610][ T5615] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1776.581568][ T5615] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1776.633885][T21071] usb 2-1: SerialNumber: syz [ 1776.677309][T21071] usb 2-1: config 0 descriptor?? [ 1776.740515][T21071] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1776.769605][T20998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.794097][T20998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1776.832134][T20998] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1776.864636][ T5615] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1776.894299][T20998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.909724][ T5615] usb 6-1: Manufacturer: syz [ 1776.984036][T20998] usb 7-1: config 0 descriptor?? [ 1777.013752][ T5615] usb 6-1: config 0 descriptor?? [ 1777.067750][T20998] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1777.116365][T21071] usb 2-1: USB disconnect, device number 47 [ 1777.135594][T20998] dvb-usb: bulk message failed: -22 (3/0) [ 1777.163639][T21071] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1777.224046][T20998] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1777.285409][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 1777.328970][T20998] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1777.383673][T20998] usb 7-1: media controller created [ 1777.448024][T20998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1777.561532][T20998] dvb-usb: bulk message failed: -22 (6/0) [ 1777.567689][T20998] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1777.675681][T20998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input45 [ 1777.742004][ T5615] rc_core: IR keymap rc-hauppauge not found [ 1777.748171][ T5615] Registered IR keymap rc-empty [ 1777.780527][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1777.795540][T20998] dvb-usb: schedule remote query interval to 150 msecs. [ 1777.819606][T20998] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1777.854255][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1777.919502][ T5615] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1777.944866][T20998] usb 7-1: USB disconnect, device number 17 [ 1777.978282][ T3080] dvb-usb: bulk message failed: -22 (1/0) [ 1777.984911][ T3080] dvb-usb: error while querying for an remote control event. [ 1778.050647][ T5615] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 1778.177954][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.277712][T20998] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1778.334767][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.422216][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.463038][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.533935][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.583014][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.653643][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.694258][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10071'. [ 1778.748134][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.812381][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.859814][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1778.960434][ T5615] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1779.051153][ T5615] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1779.157043][ T5615] usb 6-1: USB disconnect, device number 14 [ 1780.266045][ T6003] loop1: detected capacity change from 0 to 4096 [ 1780.333140][ T6003] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 1780.966429][ T6027] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10080'. [ 1781.975124][T21071] IPVS: starting estimator thread 0... [ 1782.083621][ T6051] IPVS: using max 240 ests per chain, 12000 per kthread [ 1783.839381][ T6084] loop5: detected capacity change from 0 to 256 [ 1784.203845][ T6091] loop1: detected capacity change from 0 to 128 [ 1784.287040][ T6091] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1784.382375][ T6091] hpfs: filesystem error: improperly stopped [ 1784.388621][ T6091] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1784.466791][ T6091] hpfs: You really don't want any checks? You are crazy... [ 1784.490448][ T6092] loop6: detected capacity change from 0 to 2048 [ 1784.512341][ T6091] hpfs: hpfs_map_sector(): read error [ 1784.517894][ T6091] hpfs: code page support is disabled [ 1784.569840][ T6091] hpfs: hpfs_map_4sectors(): unaligned read [ 1784.595032][ T6091] hpfs: hpfs_map_4sectors(): unaligned read [ 1784.634812][ T6091] hpfs: filesystem error: unable to find root dir [ 1784.667793][ T6092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1784.684178][ T6092] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1784.809495][ T6091] hpfs: hpfs_map_4sectors(): unaligned read [ 1785.389242][T28260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.175639][ T6156] loop7: detected capacity change from 0 to 256 [ 1787.228509][ T6156] exfat: Deprecated parameter 'namecase' [ 1787.272127][ T6156] exfat: Deprecated parameter 'namecase' [ 1787.426025][ T6156] exFAT-fs (loop7): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 1787.834031][ T6165] loop1: detected capacity change from 0 to 256 [ 1787.938402][ T6168] netlink: 'syz.6.10113': attribute type 5 has an invalid length. [ 1787.979422][ T6168] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10113'. [ 1788.124411][ T6171] loop5: detected capacity change from 0 to 128 [ 1788.247492][ T6171] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1788.391034][ T6171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1788.881894][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10117'. [ 1790.073304][ T6207] vivid-002: ================= START STATUS ================= [ 1790.132710][ T6207] vivid-002: Radio HW Seek Mode: Bounded [ 1790.167493][ T6207] vivid-002: Radio Programmable HW Seek: false [ 1790.231284][ T6207] vivid-002: RDS Rx I/O Mode: Block I/O [ 1790.247841][ T6209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1790.284401][ T6207] vivid-002: Generate RBDS Instead of RDS: false [ 1790.324078][ T6207] vivid-002: RDS Reception: true [ 1790.344027][ T6207] vivid-002: RDS Program Type: 0 inactive [ 1790.375290][ T6207] vivid-002: RDS PS Name: inactive [ 1790.423921][ T6207] vivid-002: RDS Radio Text: inactive [ 1790.440802][ T6207] vivid-002: RDS Traffic Announcement: false inactive [ 1790.491768][ T6207] vivid-002: RDS Traffic Program: false inactive [ 1790.528632][ T6207] vivid-002: RDS Music: false inactive [ 1790.570246][ T6207] vivid-002: ================== END STATUS ================== [ 1791.024110][ T6225] mmap: syz.0.10128 (6225): VmData 37384192 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 1792.381268][ T6265] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1794.643455][ T5831] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1794.854295][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 1794.888344][ T5831] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1794.934923][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.965398][ T6311] netlink: 'syz.7.10150': attribute type 30 has an invalid length. [ 1795.046966][ T5831] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1795.270580][ T6319] loop5: detected capacity change from 0 to 256 [ 1795.346306][ T6319] exfat: Deprecated parameter 'namecase' [ 1795.392026][ T6319] exfat: Deprecated parameter 'utf8' [ 1795.510683][ T6319] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1795.676670][ T5831] gspca_nw80x: reg_w err -71 [ 1795.704908][ T5831] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 1795.752400][ T5831] usb 2-1: USB disconnect, device number 48 [ 1797.026318][ T6358] loop6: detected capacity change from 0 to 512 [ 1797.175506][ T6358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1797.180692][ T6361] mkiss: ax0: crc mode is auto. [ 1797.234200][ T6358] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1797.504461][T28260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.680000][ T6395] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1798.718399][ T6395] macvtap1: entered promiscuous mode [ 1798.762402][ T6395] macvtap1: entered allmulticast mode [ 1798.786987][ T6395] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1798.867297][ T6395] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1799.006100][ T6395] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1801.076143][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10183'. [ 1801.174476][ T6448] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10183'. [ 1801.398541][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.423497][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.406630][ T4880] Bluetooth: hci2: command tx timeout [ 1802.448523][ T6462] loop6: detected capacity change from 0 to 4096 [ 1802.483369][ T6462] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1803.927250][ T6500] loop1: detected capacity change from 0 to 256 [ 1804.237662][ T6500] FAT-fs (loop1): Directory bread(block 64) failed [ 1804.296416][ T6500] FAT-fs (loop1): Directory bread(block 65) failed [ 1804.344365][ T6500] FAT-fs (loop1): Directory bread(block 66) failed [ 1804.389683][ T6500] FAT-fs (loop1): Directory bread(block 67) failed [ 1804.414958][ T6500] FAT-fs (loop1): Directory bread(block 68) failed [ 1804.450003][ T6500] FAT-fs (loop1): Directory bread(block 69) failed [ 1804.509259][ T6500] FAT-fs (loop1): Directory bread(block 70) failed [ 1804.566614][ T6500] FAT-fs (loop1): Directory bread(block 71) failed [ 1804.600227][ T6500] FAT-fs (loop1): Directory bread(block 72) failed [ 1804.661218][ T6500] FAT-fs (loop1): Directory bread(block 73) failed [ 1804.780356][ T6516] netlink: 316 bytes leftover after parsing attributes in process `syz.5.10202'. [ 1805.464234][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10205'. [ 1805.498685][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10205'. [ 1806.320608][ T6537] loop6: detected capacity change from 0 to 4096 [ 1806.405967][ T6537] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1807.226069][ T6560] sg_write: data in/out 1062856226/14 bytes for SCSI command 0x2-- guessing data in; [ 1807.226069][ T6560] program syz.5.10212 not setting count and/or reply_len properly [ 1809.497788][ T6595] loop7: detected capacity change from 0 to 128 [ 1809.628163][ T6595] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1809.649503][ T6595] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1810.050553][ T4878] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1810.131127][T21071] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1810.335828][T21071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.400354][T21071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.496781][T21071] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1810.544545][T21071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.643688][ T5831] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1810.663205][T21071] usb 6-1: config 0 descriptor?? [ 1810.846375][ T5831] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1810.901522][ T5831] usb 2-1: config 1 has no interface number 0 [ 1810.944033][ T5831] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1811.011682][ T5831] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1811.039148][ T5831] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.139023][ T5831] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1811.174600][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.201389][ T5831] usb 2-1: Product: syz [ 1811.205771][ T5831] usb 2-1: Manufacturer: syz [ 1811.224499][ T5831] usb 2-1: SerialNumber: syz [ 1811.229653][T21071] hid-led 0003:27B8:01ED.0032: item fetching failed at offset 1/5 [ 1811.255995][ T6617] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1811.307059][T21071] hid-led 0003:27B8:01ED.0032: probe with driver hid-led failed with error -22 [ 1811.455532][T21071] usb 6-1: USB disconnect, device number 15 [ 1811.779912][ T6617] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1812.048366][ T5831] usb 2-1: Incompatible driver and firmware versions [ 1812.149607][ T5831] usb 2-1: USB disconnect, device number 49 [ 1813.451219][ T6683] tc_dump_action: action bad kind [ 1814.119212][ T6685] loop6: detected capacity change from 0 to 4096 [ 1814.254201][ T6687] loop7: detected capacity change from 0 to 4096 [ 1815.743890][ T6734] loop5: detected capacity change from 0 to 512 [ 1815.859242][ T6734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1815.884232][ T6734] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.10255: Unimplemented hash flags: 0x0001 [ 1815.896798][ T6734] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10255: Corrupt directory, running e2fsck is recommended [ 1815.913197][ T6734] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.10255: path /470/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 1816.427987][T27896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.488325][ T6746] loop7: detected capacity change from 0 to 64 [ 1816.714427][ T6741] loop6: detected capacity change from 0 to 4096 [ 1816.952191][ T6741] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1817.010436][ T6756] loop5: detected capacity change from 0 to 256 [ 1817.084002][ T29] audit: type=1800 audit(1773006726.362:331): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10254" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 1817.292142][ T6749] loop1: detected capacity change from 0 to 4096 [ 1817.380014][ T6749] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1817.464587][ T6749] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1817.547315][ T6749] System zones: 0-5 [ 1817.591609][ T6749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1818.075894][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1818.299927][ T6772] netlink: 'syz.5.10262': attribute type 12 has an invalid length. [ 1818.374440][ T6772] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10262'. [ 1819.596305][ T6801] loop6: detected capacity change from 0 to 256 [ 1821.195056][ T6830] loop7: detected capacity change from 0 to 1024 [ 1821.394802][ T6830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1821.955030][ T4878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.553545][ T29] audit: type=1326 audit(1773006731.812:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.10286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1822.673565][ T29] audit: type=1326 audit(1773006731.812:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.10286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1822.818159][ T29] audit: type=1326 audit(1773006731.882:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.10286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1822.959736][ T29] audit: type=1326 audit(1773006731.882:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.10286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1825.447267][ T6913] loop7: detected capacity change from 0 to 764 [ 1825.555860][ T6913] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1826.925647][ T6940] Cannot find add_set index 46338 as target [ 1827.740632][ T6960] loop1: detected capacity change from 0 to 64 [ 1828.826914][ T6977] loop7: detected capacity change from 0 to 512 [ 1828.889839][ T6977] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1829.028636][ T6984] loop5: detected capacity change from 0 to 256 [ 1829.112561][ T6984] exfat: Deprecated parameter 'namecase' [ 1829.150708][ T6984] exfat: Deprecated parameter 'utf8' [ 1829.235999][ T6984] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1830.257235][ T7009] loop7: detected capacity change from 0 to 256 [ 1830.567914][ T7009] FAT-fs (loop7): Directory bread(block 64) failed [ 1830.609527][ T7009] FAT-fs (loop7): Directory bread(block 65) failed [ 1830.629918][ T7009] FAT-fs (loop7): Directory bread(block 66) failed [ 1830.667831][ T7009] FAT-fs (loop7): Directory bread(block 67) failed [ 1830.731377][ T7009] FAT-fs (loop7): Directory bread(block 68) failed [ 1830.738123][ T7009] FAT-fs (loop7): Directory bread(block 69) failed [ 1830.789435][ T7009] FAT-fs (loop7): Directory bread(block 70) failed [ 1830.813803][ T7009] FAT-fs (loop7): Directory bread(block 71) failed [ 1830.820706][ T7009] FAT-fs (loop7): Directory bread(block 72) failed [ 1830.896195][ T7009] FAT-fs (loop7): Directory bread(block 73) failed [ 1832.830222][ T7048] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1834.355138][ T7076] [U] bmtk}UH\؉Hn;} [ 1836.558059][ T7122] loop6: detected capacity change from 0 to 256 [ 1836.843723][ T7122] FAT-fs (loop6): Directory bread(block 64) failed [ 1836.893878][ T7122] FAT-fs (loop6): Directory bread(block 65) failed [ 1836.900798][ T7122] FAT-fs (loop6): Directory bread(block 66) failed [ 1836.978724][ T7122] FAT-fs (loop6): Directory bread(block 67) failed [ 1837.027130][ T7122] FAT-fs (loop6): Directory bread(block 68) failed [ 1837.081525][ T7122] FAT-fs (loop6): Directory bread(block 69) failed [ 1837.131407][ T7122] FAT-fs (loop6): Directory bread(block 70) failed [ 1837.138330][ T7122] FAT-fs (loop6): Directory bread(block 71) failed [ 1837.234316][ T7122] FAT-fs (loop6): Directory bread(block 72) failed [ 1837.314350][ T7122] FAT-fs (loop6): Directory bread(block 73) failed [ 1838.567029][ T7157] loop6: detected capacity change from 0 to 128 [ 1838.765561][ T7161] netlink: 148 bytes leftover after parsing attributes in process `syz.7.10376'. [ 1838.842634][ T7151] loop5: detected capacity change from 0 to 4096 [ 1838.956703][ T7151] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1839.044701][ T7151] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1839.103290][ T7151] System zones: 0-5 [ 1839.142036][ T7151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1839.726513][T27896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.445671][ T7190] loop5: detected capacity change from 0 to 256 [ 1840.514110][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10385'. [ 1840.717863][ T7190] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1840.719505][ T7198] loop6: detected capacity change from 0 to 256 [ 1840.958679][ T7190] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 1841.023135][ T7190] exFAT-fs (loop5): Filesystem has been set read-only [ 1842.705450][ T7233] loop6: detected capacity change from 0 to 1024 [ 1843.186775][T27941] hfsplus: b-tree write err: -5, ino 25 [ 1843.234326][T27941] hfsplus: b-tree write err: -5, ino 4 [ 1843.240377][T27941] hfsplus: b-tree write err: -5, ino 2 [ 1843.445678][ T7247] netlink: 348 bytes leftover after parsing attributes in process `syz.1.10400'. [ 1844.709930][ T7262] loop5: detected capacity change from 0 to 4096 [ 1844.743609][ T7262] EXT4-fs: inline encryption not supported [ 1844.788605][ T7262] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1844.888243][ T7268] loop1: detected capacity change from 0 to 4096 [ 1844.896735][ T7262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.201194][ T7283] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1845.356404][T27896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.287184][ T7305] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1846.856923][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10417'. [ 1846.910003][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10417'. [ 1847.360478][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10419'. [ 1848.287437][ T7339] [U] V3Fپ"S/4:XTZWTLW= [ 1848.345265][ T7339] [U] J"E:" [ 1848.378406][ T7339] [U] [ 1848.815643][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10428'. [ 1849.202737][ T7352] loop6: detected capacity change from 0 to 2048 [ 1849.413939][ T7352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1849.935903][T28260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1849.943395][ T7368] loop7: detected capacity change from 0 to 128 [ 1850.522095][ T7384] netlink: 'syz.6.10436': attribute type 11 has an invalid length. [ 1850.549828][ T7384] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10436'. [ 1852.761556][ T3080] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1852.947889][ T3080] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1852.985187][ T3080] usb 7-1: config 0 has no interface number 0 [ 1853.020513][ T3080] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.117777][ T3080] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.176810][ T3080] usb 7-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1853.228699][ T3080] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1853.263867][ T3080] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.286702][ T3080] usb 7-1: config 0 descriptor?? [ 1853.634241][ T7444] binder: 7441:7444 ioctl c018620c 80000080 returned -22 [ 1853.824359][ T3080] uclogic 0003:28BD:0042.0033: interface is invalid, ignoring [ 1854.037192][ T3080] usb 7-1: USB disconnect, device number 18 [ 1854.155361][ T7453] loop1: detected capacity change from 0 to 256 [ 1854.194349][ T7453] exfat: Deprecated parameter 'utf8' [ 1854.244184][ T7453] exfat: Deprecated parameter 'namecase' [ 1854.284334][ T7453] exfat: Deprecated parameter 'namecase' [ 1854.311316][ T7453] exfat: Deprecated parameter 'utf8' [ 1854.350503][ T7464] netlink: 822 bytes leftover after parsing attributes in process `syz.0.10455'. [ 1854.428743][ T7453] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1854.506376][ T7453] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 1854.634306][ T7453] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 1854.898942][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10458'. [ 1854.939702][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10458'. [ 1855.416829][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10460'. [ 1855.496380][ T7485] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1855.976406][ T7490] loop7: detected capacity change from 0 to 1024 [ 1856.444782][ T53] hfsplus: b-tree write err: -5, ino 25 [ 1856.479242][ T53] hfsplus: b-tree write err: -5, ino 4 [ 1856.526131][ T53] hfsplus: b-tree write err: -5, ino 2 [ 1857.046796][ T7511] loop7: detected capacity change from 0 to 512 [ 1857.284628][ T7511] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.10468: Directory hole found for htree index block 0 [ 1857.371924][ T7511] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1857.375434][ T7511] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1857.384871][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1857.384964][ C0] EXT4-fs (loop7): initial error at time 1773006766: dx_probe:791: inode 2 [ 1857.385123][ C0] EXT4-fs (loop7): last error at time 1773006766: dx_probe:791: inode 2 [ 1857.575300][ T7511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1857.867785][ T7529] ===================================================== [ 1857.875363][ T7529] BUG: KMSAN: uninit-value in nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 1857.886234][ T7529] nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 1857.892243][ T7529] nl80211_send_wiphy+0x1464/0x96d0 [ 1857.897677][ T7529] nl80211_dump_wiphy+0x5b6/0xc80 [ 1857.905726][ T7529] genl_dumpit+0x14e/0x2a0 [ 1857.910397][ T7529] netlink_dump+0xbaa/0x1800 [ 1857.917196][ T7529] netlink_recvmsg+0xc8a/0xfe0 [ 1857.925509][ T7529] sock_recvmsg_nosec+0x1e2/0x270 [ 1857.934881][ T7529] ____sys_recvmsg+0x4e5/0x620 [ 1857.939805][ T7529] ___sys_recvmsg+0x20b/0x850 [ 1857.950776][ T7529] do_recvmmsg+0x50b/0xdf0 [ 1857.955527][ T7529] __sys_recvmmsg+0xf3/0x450 [ 1857.960261][ T7529] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1857.970027][ T7529] ia32_sys_call+0x3ec3/0x4360 [ 1857.975279][ T7529] __do_fast_syscall_32+0x17f/0x3f0 [ 1857.980724][ T7529] do_fast_syscall_32+0x37/0x80 [ 1857.989853][ T7529] do_SYSENTER_32+0x1f/0x30 [ 1857.994854][ T7529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1858.004072][ T7529] [ 1858.006481][ T7529] Uninit was stored to memory at: [ 1858.011977][ T7529] mac80211_hwsim_new_radio+0x60b8/0x7e20 [ 1858.019298][ T7529] hwsim_new_radio_nl+0x1839/0x3160 [ 1858.028051][ T7529] genl_family_rcv_msg_doit+0x338/0x3f0 [ 1858.033980][ T7529] genl_rcv_msg+0xac5/0xc00 [ 1858.038656][ T7529] netlink_rcv_skb+0x54d/0x680 [ 1858.046236][ T7529] genl_rcv+0x41/0x60 [ 1858.050391][ T7529] netlink_unicast+0xf04/0x12b0 [ 1858.056581][ T7529] netlink_sendmsg+0x10b2/0x1250 [ 1858.064411][ T7529] ____sys_sendmsg+0xf37/0xfd0 [ 1858.069322][ T7529] ___sys_sendmsg+0x271/0x3b0 [ 1858.074348][ T7529] __sys_sendmsg+0x1aa/0x300 [ 1858.079078][ T7529] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1858.087517][ T7529] ia32_sys_call+0x1e4a/0x4360 [ 1858.092662][ T7529] __do_fast_syscall_32+0x17f/0x3f0 [ 1858.098025][ T7529] do_fast_syscall_32+0x37/0x80 [ 1858.105794][ T7529] do_SYSENTER_32+0x1f/0x30 [ 1858.110461][ T7529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1858.117129][ T7529] [ 1858.121033][ T7529] Uninit was created at: [ 1858.125616][ T7529] __kmalloc_cache_noprof+0x35e/0x1260 [ 1858.134464][ T7529] hwsim_new_radio_nl+0x1705/0x3160 [ 1858.139848][ T7529] genl_family_rcv_msg_doit+0x338/0x3f0 [ 1858.145915][ T7529] genl_rcv_msg+0xac5/0xc00 [ 1858.150591][ T7529] netlink_rcv_skb+0x54d/0x680 [ 1858.158207][ T7529] genl_rcv+0x41/0x60 [ 1858.162626][ T7529] netlink_unicast+0xf04/0x12b0 [ 1858.167677][ T7529] netlink_sendmsg+0x10b2/0x1250 [ 1858.175476][ T7529] ____sys_sendmsg+0xf37/0xfd0 [ 1858.180396][ T7529] ___sys_sendmsg+0x271/0x3b0 [ 1858.185427][ T7529] __sys_sendmsg+0x1aa/0x300 [ 1858.190155][ T7529] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1858.198617][ T7529] ia32_sys_call+0x1e4a/0x4360 [ 1858.203874][ T7529] __do_fast_syscall_32+0x17f/0x3f0 [ 1858.209232][ T7529] do_fast_syscall_32+0x37/0x80 [ 1858.216948][ T7529] do_SYSENTER_32+0x1f/0x30 [ 1858.223148][ T7529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1858.229662][ T7529] [ 1858.235457][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.0.10472 Tainted: G L syzkaller #0 PREEMPT(full) [ 1858.246827][ T7529] Tainted: [L]=SOFTLOCKUP [ 1858.253963][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1858.264370][ T7529] ===================================================== [ 1858.274137][ T7529] Disabling lock debugging due to kernel taint [ 1858.309120][ T7529] Kernel panic - not syncing: kmsan.panic set ... [ 1858.315702][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.0.10472 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1858.326850][ T7529] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1858.332490][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1858.342685][ T7529] Call Trace: [ 1858.346089][ T7529] [ 1858.349107][ T7529] __dump_stack+0x26/0x30 [ 1858.353611][ T7529] dump_stack_lvl+0x50/0x1c0 [ 1858.358364][ T7529] ? dump_stack+0x12/0x25 [ 1858.362846][ T7529] dump_stack+0x1e/0x25 [ 1858.367143][ T7529] vpanic+0x7b4/0x1430 [ 1858.371390][ T7529] panic+0x15d/0x160 [ 1858.375489][ T7529] kmsan_report+0x31a/0x320 [ 1858.380162][ T7529] ? __msan_warning+0x1b/0x30 [ 1858.384995][ T7529] ? nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 1858.390786][ T7529] ? nl80211_send_wiphy+0x1464/0x96d0 [ 1858.396300][ T7529] ? nl80211_dump_wiphy+0x5b6/0xc80 [ 1858.401664][ T7529] ? genl_dumpit+0x14e/0x2a0 [ 1858.406406][ T7529] ? netlink_dump+0xbaa/0x1800 [ 1858.411283][ T7529] ? netlink_recvmsg+0xc8a/0xfe0 [ 1858.416351][ T7529] ? sock_recvmsg_nosec+0x1e2/0x270 [ 1858.421694][ T7529] ? ____sys_recvmsg+0x4e5/0x620 [ 1858.426753][ T7529] ? ___sys_recvmsg+0x20b/0x850 [ 1858.431720][ T7529] ? do_recvmmsg+0x50b/0xdf0 [ 1858.436425][ T7529] ? __sys_recvmmsg+0xf3/0x450 [ 1858.441315][ T7529] ? __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1858.447960][ T7529] ? ia32_sys_call+0x3ec3/0x4360 [ 1858.453023][ T7529] ? __do_fast_syscall_32+0x17f/0x3f0 [ 1858.458546][ T7529] ? do_fast_syscall_32+0x37/0x80 [ 1858.463714][ T7529] ? do_SYSENTER_32+0x1f/0x30 [ 1858.468518][ T7529] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1858.475182][ T7529] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1858.481843][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.487143][ T7529] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1858.493654][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.498951][ T7529] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1858.504939][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.510244][ T7529] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1858.516741][ T7529] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1858.522962][ T7529] ? __msan_memcpy+0x61/0x1c0 [ 1858.527800][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.533091][ T7529] __msan_warning+0x1b/0x30 [ 1858.537783][ T7529] nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 1858.543408][ T7529] ? __msan_memcpy+0x105/0x1c0 [ 1858.548324][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.553625][ T7529] nl80211_send_wiphy+0x1464/0x96d0 [ 1858.559116][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.564435][ T7529] nl80211_dump_wiphy+0x5b6/0xc80 [ 1858.569657][ T7529] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 1858.575392][ T7529] genl_dumpit+0x14e/0x2a0 [ 1858.579972][ T7529] ? __pfx_genl_dumpit+0x10/0x10 [ 1858.585061][ T7529] netlink_dump+0xbaa/0x1800 [ 1858.589842][ T7529] netlink_recvmsg+0xc8a/0xfe0 [ 1858.594777][ T7529] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1858.600192][ T7529] sock_recvmsg_nosec+0x1e2/0x270 [ 1858.605392][ T7529] ____sys_recvmsg+0x4e5/0x620 [ 1858.610284][ T7529] ? import_iovec+0xaf/0xe0 [ 1858.615044][ T7529] ? get_compat_msghdr+0x673/0x740 [ 1858.620313][ T7529] ___sys_recvmsg+0x20b/0x850 [ 1858.625141][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.630435][ T7529] ? kmsan_internal_check_memory+0x9f/0x240 [ 1858.636581][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.641863][ T7529] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1858.647859][ T7529] do_recvmmsg+0x50b/0xdf0 [ 1858.652531][ T7529] ? stack_depot_save_flags+0x35/0x790 [ 1858.658239][ T7529] ? kmsan_get_metadata+0xf1/0x160 [ 1858.663561][ T7529] __sys_recvmmsg+0xf3/0x450 [ 1858.668383][ T7529] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1858.674421][ T7529] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1858.680933][ T7529] ia32_sys_call+0x3ec3/0x4360 [ 1858.685825][ T7529] __do_fast_syscall_32+0x17f/0x3f0 [ 1858.691201][ T7529] do_fast_syscall_32+0x37/0x80 [ 1858.696192][ T7529] do_SYSENTER_32+0x1f/0x30 [ 1858.700827][ T7529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1858.707340][ T7529] RIP: 0023:0xf70cef6c [ 1858.711527][ T7529] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1858.731363][ T7529] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1858.739927][ T7529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800011c0 [ 1858.748002][ T7529] RDX: 0000000000000005 RSI: 0000000040020060 RDI: 0000000000000000 [ 1858.756085][ T7529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1858.764162][ T7529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1858.772244][ T7529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1858.780438][ T7529] [ 1858.783891][ T7529] Kernel Offset: disabled [ 1858.788266][ T7529] Rebooting in 86400 seconds..