last executing test programs: 17m35.08498478s ago: executing program 2 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_getres(0xaf42fa16bfff5d0f, 0x0) 17m34.511818651s ago: executing program 2 (id=56): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES64], 0x2, 0x62e, &(0x7f0000000cc0)="$eJzs3c1rXNcZB+DfHcmy5ICjNLbjlkBEDGmpqK0PlFbd1C2lqBBKSBddC1vGwmMnlZSihNKoX3TbRf6AdKFdV4VuCgVDum532WoZKHSTlbqacu/cGY1seTqKJc04eR5z55wz595z3/PO/ZgZIybAl9bKbMYfpsjK7BvbZXtvd7G5t7t4v1NPcj5JIxlvFykeJMXHyc20l3y1fLIernjSfj5cX37rk8/2Pm23xuulWr/Rb7vB7NRLZpKM1eVJjXfrqccrujMsE3atkzgYtnNJWof8/MpBT38Xnvq8BUZB0b5vdrXqM3u6Os0zWb8PaN8V2/fsZ9rOsAMAAACAM/D8fvaznYvDjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeJfXv/1e/+j/ZfSrFTIrO7/9PdPrr+mgaMLKHjdMOBAAAAAAAAABO3yv72c92LnbarSKNJK9WjUvV43N5N5tZy0auZzur2cpWNjKfZLpnoInt1a2tjfkBtlw4csuFAQOeevo5AwAAAAAAAMAX0G+ycvD//wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAqKZKxdVMulTn06jfEkk0kmyvV2kn916s+yh8MOAAAAAM7A8/vZz3YudtqtovrMf6X63D+Zd/MgW1nPVppZy+3qu4D2p/7G3u5ic2938X65PD7u9/9zrDCqEdP+7uHoPV+t1pjKnaxXz1zPrbydZm6nUW1ZutqJ5+i4fl3GVHyvNmBkt+uynPkf6/L0jQ2wznSVkXPdjMzVsZXZeKF/Jg6/OjvH3dN8Gt1vfi6dQs4v1GWRPPfjM8v5IOpMvJI6Ews9R9+V/plIvv7XP//sbvPBvbt3NmdHZ0rHcL7VanXqjx4Tiz2ZeOkLn4lec1UmLnfbK/lRfprZzOTNbGQ9v8hqtrKWmfywqq3Wx3P5ON0/UzcPtd6sHqeeHMlE/bq0rx7Hi+nVatuLWc9P8nZuZy2vV/8WMp9vZylLWe55hS8PcNY3jnfWX/tGXSkn+If+Ez1jZV5fqPP6QXLomjtd9fU+c5ClFDnpa+P41+pKuY/f1uVoeDQT8z2ZeLH/8fKn6rKy2Xxwb+Pu6jsD7u+1uizPo9+P1F2iPF6+Ur5YVevw0VH2vXhk33zVd6nb13is73K37/+dqRP1e7jHR1qo+l46sm+x6rva03fU+y0ARt6Fb16YmPr31D+nPpr63dTdqTcmf3D+O+dfnsi5f5z77vjc2GuNl4u/5KP86uDzPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Pltvvf+vdVmc23jkUqr1frgCV2ftzKW42z197+d5N47v0d0gtM52crkcVZujUbMx6n8t9VqnciAO30O2hOrtGojkbohVYZ8YQJO3Y2t++/c2Hzv/W+td26RS0vLc8tLry/euLPeXJtrPw45SOBUHNz0hx0JAAAAAAAAAAAAMKiz+HOCYc8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeLatzGb8YYrMz12fK9t7u4vNcunUD9YcT9JIUvwyKT5Obqa9ZLpnuOJJ+/lwffmtTz7b+/RgrPHO+o1+2w1mp14yk2SsLk9qvFtPPV7RnWGZsGudxMGw/S8AAP//C8wPrA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 17m33.128498961s ago: executing program 2 (id=60): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x30, r1, 0x1, 0x70bd25, 0x10403, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x30}}, 0x40094) 17m32.174733539s ago: executing program 2 (id=64): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 17m31.256423288s ago: executing program 2 (id=70): unshare(0x8000400) r0 = mq_open(&(0x7f0000000680)=']\x00', 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 17m29.900242268s ago: executing program 2 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) 17m28.877440868s ago: executing program 32 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) 9m31.820313345s ago: executing program 1 (id=2475): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r1}]}, 0x24}}, 0x0) 9m31.432247342s ago: executing program 1 (id=2478): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r0 = semget$private(0x0, 0x3, 0x30) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) 9m30.969955618s ago: executing program 1 (id=2481): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b89f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 9m30.292562154s ago: executing program 1 (id=2485): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@namecase}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@gid}, {@umask={'umask', 0x3d, 0x3}}, {@errors_continue}, {}]}, 0x1, 0x1520, &(0x7f0000002280)="$eJzs3Au4TtXWOPAx5pxr23bS204umznnWLzJZdpJkkuSXJIkSZLcEpJ2ciQhscktaZOE5LJJLpuQ3GKn7X6/XxKSpJ0kIbkl8//s8Hc6db5zznf6ju/59vg9z3rM8a415hrrHet937XWg+86D6nRqGbVBkQE/xa8+EcyAMQCwAAAuA4AAgAoG182Pmt9TonJ/95O2J/rkbSrXQG7mrj/2Rv3P3vj/mdv3P/sjfufvXH/szfuf/bG/WcsO9s8rcD1vGTfhZ//Z2f8+/9/SGapMV+tLXVjF4CYfzaF+5+9cf//zwr+mY24/9kb9z+7ir3aBbD/Bfjznx3k+LtruP/ZG/efsezsaj9/vtoLRLL3e3C1zz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nDGX+FAoDL46tdF2OMMcYYY4wxxv48PsfVroAxxhhjjDHGGGP/8xAESFAQQAzkgFjICXEgAOBayA3XQQSuh3i4AfLAjZAX8kF+KAAJUBAKgQYDFghCKAxFIAo3QVG4GYpBcSgBJcFBKUiEW6A03Apl4DYoC7dDObgDykMFqAiV4E6oDHdBFbgbqsI9UA2qQw2oCfdCLbgPasP9UAcegLrwINSDh6A+PAwN4BFoCI9CI3gMGsPj0ASaQjNoDi3+W/kvQXd4GXpAT0iGXtAbXoE+0Bf6QX8YAK/CQHgNBsHrkAKDYQi8AUPhTRgGb8FwGAEj4W0YBe/AaBgDY2EcpMJ4mADvwkR4DybBZJgCUyENpsF0eB9mwEyYBR/AbPgQ5sBcmAfzYQF8BAthEaTDx7AYPoEMWAJLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHbATPoVd8Bnshj2wFz6HffDFv5h/+m/yuyAgoECBChXGYAzGYizGYRzmwlyYG3NjBCMYj/GYB/NgXsyL+TE/JmACFsJCaNAgIWFhLIxRjGJRLIrFsBiWwBLo0GEiJmJpvBXLYBksi2WxHJbD8lgBK2AlrISVsTJWwSpYFatiNayGNbAG3ov3Yi+sjbWxDtbBulj38uMpbIANsCE2xEbYCBtjY2yCTbAZNsMW2AJbYktsha2wDbbBttgW22E7TMIkbI/tsQN2wI7YETthJ+yMnbELdsWumS/lAHwZX8aeWE30wt7YG/tgSo5+2B/746s4EF/D1/B1TMHBOATfwDfwTRyGp3A4jsCROBIri3dwNI5BEuMwFVNxAk7AiTgRJ+FknIxTMQ2n4XScjjNwJs7ED3A2fogf4lyci/NxAS7AhbgI0zEdF+NpzMAluBSX4XJcgctxFa7GVbgW1+Fa3IAbcBNuwi24BbfhNtyBO/BTVAD4Ge7BPZiC+3Af7sf9eAAP4EE8iJmYiYfwEB7Gw3gEj+BRPIrH8DiewON4Ek/iKTyNZ/AMnsNzeB5fSPim4afF16SAyKKEEjEiRsSKWBEn4kQukUvkFrlFREREvIgXeUQekVfkFflFfpEgEkQhUUgYYQSJMAYARFRERVFRVBQTxQBECeGEE4kiUZQWpUUZUUaUFbeLcuIOUV5UEK1dJVFJVBZtXBVxt6gqqopqorqoIWqKmqKWqCVqi9qijqgj6oq6op54SNQXvbAfPiKyOtNIDMbGYgg2EU2FvPQN1lIMw1aitWgjnhIjcDi2Ey1dknhWtBejsYP4ixiDz4tOYhx2Fi+KLqKr6CZeEt1FK9dD9BSTsJfoLaZiH9FX9BP9xQysLj7A2TlriNdFihgshog3xHx8UwwTb4nhYoQYKd4Wo8Q7YrQYI8aKcSJVjBcTxLtionhPTBKTxRQxVaSJaWK6eF/MEDPFLPGBmC0+FHPEXDFPzBcLxEdioVgk0sXHYrH4RGSIJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosdYqf4VOwSn4ndYo/YKz4X+8QXYr/4UhwQX4mD4muRKb4Rh8S34rD4ThwR34uj4gdxTBwXJ8SP4qT4SZwSp8UZcVacEz+L8+IXcUF4ARKlkFIqGcgYmUPGypwyTl4jc8ng0rt7vYyXN8g88kaZV+aT+WUBmSALykJSSyOtJBnKwrKIjMqbZFF5sywmi8sSsqR0spRMlLfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzcRzVZXdaQNeW9Mhnuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEYmyWdle+kvnSLPy07yBdlZvii7yK6ym/xFXpBe9pA9JfQC2Vu+IvvIvrKf7C8HyFflQPmaHCRflylysBwi35BD5ZtymHxLDpcj5Ej5thwl35Gj5Rg5Vo6TqXK8nCDflRPle3KSnCynyKkyTU6T/S7NNEvKf5j/7h/kD/p175vkZrlFbpXb5Ha5Q+6Un8pdcpfcLXfLvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7Pyh/lSfmTPCVPy9PyrDwnz8nzl94DUKiEkkqpQMWoHCpW5VRx6hqVS12rcqvrVERdr+LVDSqPulHlVflUflVAJaiCqpDSyiirSIWqsCqiouomvHTCqBKqpHKqlEpUt/wr+aqoulkVU8V/k3+5vuS/U18L1UK1VC1VK9VKtVFtVFvVVrVT7VSSSlLtVXvVQXVQHVVH1Ul1Up1VZ9VFdVHdVDfVXXVXPVQPlaySVW/1iuqj+qp+qr8aoF5VA9VANUgNUikqRQ1RQ9RQNVQNU8PUcDVcjVQj1Sg1So1Wo9VYNValqlQ1QU1QE9VENUlNUlPUFJWm0tR0NV3NUDPULDVLzVaz1Rw1R81T89QCtUAtVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7VK71G61W+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyLrsC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgT3BjkDfIF+YMCQUJQMCgU6MAENhCXmh4NbgqKBjcHxYLiQYmgZOCCUkFicEtQOrg1KBPcFpQNbg/KBXcE5YMKQcWgUnBnUDm4K6gS3B1UDe4JqgXVgxpBzeDeoFZwX1A7uD+oEzwQ1A0eDOoFDwX1g4eDBsEjQcPg0aBR8FjQOHg8aBI0DZoFzYMWf+r83p/K96TroXvqZN1L99av6D66r+6n++sB+lU9UL+mB+nXdYoerIfoN/RQ/aYept/Sw/UIPVK/rUfpd/RoPUaP1eN0qh6vJ+h39UT9np6kJ+speqpO09P0dP2+nqFn6ln6Az1bf6jn6Ll6np6vF+iP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/RO/anepT/Tu/UevVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/oH/VJ/ZM+pU/rM/qsPqd/1uf1L/qC9lkX91k/70YZZWJMjIk1sSbOxJlcJpfJbXKbiImYeBNv8pg8Jq/Ja/Kb/CbBJJhCppDJQoZMYVPYRE3UFDVFTTFTzJQwJYwzziSaRFPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDuTZJJMe9PedDAdTEfT0XQynUxn09l0MV1MN9PNdDfdTQ/TwySbZNPb9DZ9TB/Tz/QzA8wAM9AMNIPMIJNiUswQM8QMNUPNMDPMDDcjzMisC1XzjhltxpixZpxJNalmgplgJpqJZpKZZKaYKSbNpJnpZrqZYWaYWWaWmW1mmzlmjpln5pkFZoFZaBaadJNuFpvFJsNkmKVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTabJNIfMIXPYHDZHzBFz1Bw1x8wxc8KcMCfNSXPKnDJnzBlzzuS79HvpTazNaePsNTaXvdbmttfZv43z2wI2wRa0hay2eW2+38TGWlvMFrclbEnrbCmbaG/5XVzeVrAVbSV7p61s77JVfhfXsvfZ2vZ+W8c+YGvae38T17UP2nr2MVsfEcA2tQ1tc9vIPmYb28dtE9vUNrPNbVv7tG1nn7FJ9lnb3j73u3ihXWRX2zV2rV1nd9s99ow9aw/b7+w5+7PtYXvaAfZVO9C+ZgfZ122KHfy7eKR9246y79jRdowda8f9Lp5ip9o0O81Ot+/bGXbm7+IF9iM726bbOXaunWfn/xpn1ZRuP7aL7Sc2wwaw1C6zy+0Ku9Ku+v+1LrMb7Ea7ye6yn9mtdpvdbnfYnZcvhO0eu9d+bvfZL+wh+609YL+yB+0Rm2m/+TXOOr4j9nt71P5gj9nj9oT90Z60P6nL2VnH/qP9xV6w3gIhAUlSFFAM5aBYyklxdA3lomspN11HEbqe4ukGykM3Ul7KR/mpACVQQSpEmgxZIgqpMBWhKN1El8srQSXJUSlKpFuoNN1KZeg2Kku3Uzm6g8pTBapIlehOqkx3URW6m6rSPVSNqlMNqkn3Ui26j2rT/VSHHqC69CDVo4eoPj1MDegRakiPUiN6jBrT49SEmlIzak4t6AlqSU9SK2pNbegpaktPUzt6hpLoWWpPz1EH+gt1pOepE71AnelF6kJdqRu9RN3pZepBPSmZelFveoX6UF/qR/1pAL1KA+k1GkSvUwoNpiH0Bg2lN2kYvUXDaQSNpLdpFL1Do2kMjaVxlErjaQK9SxPpPZpEk2kKTaU0mkbT6X2aQTNpFn1As+lDmkNzaR7NpwX0ES2kRZROH9Ni+oQyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+pR20We0m/bQXvqc9tEXtJ++pAP0FR2krymTvqFD9C0dpu/oCH3ve9IPdIyO0wn6kU7ST3SKTtMZOkvn6Gc6T7/QBfIEIYYilKEKgzAmzBHGhjnDuPCaMFd4bZh1wkTC68P48IYwT3hjmDfMF+YPC4QJYcGwUKhDE9qQwjAsHBYJo+FNYdHw5rBYWDwsEZYMXVgqTAxvCUuHt4ZlwtvCsuHtYbnwjrB8WCF87IFK4Z1h5fCusEp4d1g1vCesFlYPa4Q1w3vDWuF9Ye3w/rBO+EBYJnwwrBc+FNYPHw4bhI+EDcNHw0bhY2Hj8PGwSdg0bBY2D1uET4QtwyfDVmHrsE34VNg2fDpsFz4TJoXPhu3D535d/+Civ78+OewV9g5fCV8Jvb9fzovOjy6IfhRdGF0UTY9+HF0c/SSaEV0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+Zg5w6ISTTrnAxbgcLtbldHHuGpfLXetyu+tcxF3v4t0NLo+70eV1+Vx+V8AluIKukNPOOOvIha6wK+Ki7iZX1N3sirniroQr6Zwr5RJdc9fCtXAt3ZOulWvt2rin3FPuafe0e8Y945517d1zroP7i+vonned3AvuBfei6+K6um7uJdfdjc998TOZ7Hq73q6P6+P6uX5ugBvgBrqBbpAb5FJcihvihrihbqgb5oa54W64G+lGulFulBvtRruxbqxLdalugpvgJrqJbpKb5Ka4KS7Npbnpbrqb4Wa4yjMv7mWOm+PmuXlugVvgFrqsa8Z0t9gtdhkuwy11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XQ73S63y+32112c1O1z+91+d8AdcAfd1y7TfeMOuW/dYfedO+K+d0fdD+6YO+5OuB/dSfeTO+VOuzPurDvnfnbn3S/ugvMuNTI+MiHybmRi5L3IpMjkyJTI1EhaZFpkeuT9yIzIzMisyAeR2ZEPI3MicyPzIvMjCB9FFkYWRdIjH0cWRz6JZESWRJZGlkWWR1ZEvC+4NfSFfREf9Tf5ov5mX8wX9yV8Se98KZ/ob/Gl/a2+jL/Nl/W3+3L+Dl/eV/AV/eO+iW/qm/nmvoV/wrf0T/pWvrVv45/ybf3Tvp1/xif5Z317/5zv4P/iO/rnfSf/gu/sX/RdfFffzb/ku/uXfQ/f0yf7Xr63f8X38X19P9/fD/Cv+oH+NT/Iv+5T/GA/xL/hh/o3/TD/lh/uR/iRMW/7UZdvkWGcT/Xj/QT/rp/o3/OT/GQ/xU/1aX6an+7f9zP8TD/Lf+Bn+w/9HD/Xz/Pz/QL/kV/oF/l0/7Ff7D/xGX7J5YfKfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7HX6n/9Tv8p/53X6P3+s/9/v8F36//9If8F/5g/5rn+m/8Yd+ffr3nT/iv/dH/Q/+mD/uT/gf/Un/kz/lT/sz/qw/53/25/0v/gL/mzXGGGOMsX/K+CtD8ds1Fx/n9/qDHPFXG/cGgGu3Fcj86/VZV5Tr814c9xUJbSMA8GzPzo9cXqpVS05OvrRthoSgyNysG8or+TFwJV4CbeBpSILWUPoP6+8rup6jfzB/9HaAuL/KiYUr8ZX5vwTA5D+Y/4mnRi4sF56J/y/mnwtQrMiVnJxwJV4CbX59vtIayvyd+vO1/Af15/wqFaDVX+XkgivxlfoT4Ul4DpJ+syVjjDHGGGOMMXZRX1Gx4+X7z8t/4/OP7s8T1JWcHHAl/kf354wxxhhjjDHGGLv6nu/a7ZknkpJad/zXB1X+W1n/9KAx/E/NzIM/HHgPcPkVBQD/5oQAWQP5nzyKLf+RfaVc+uj87arlZ30A/zta+WcMrvIXE2OMMcYYY+xPd+Wi/7evq6tVEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlg39J/47sat9jIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtjV9v8CAAD//3K3/hI=") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, &(0x7f0000000180)=ANY=[@ANYBLOB='mode=']) 9m29.249422015s ago: executing program 1 (id=2491): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 9m27.578148488s ago: executing program 1 (id=2498): unshare(0x22020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, 0x4) 9m26.830744823s ago: executing program 33 (id=2498): unshare(0x22020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, 0x4) 8m33.955891619s ago: executing program 5 (id=2755): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) fchmod(r0, 0xfbffffff) write$FUSE_IOCTL(r0, &(0x7f0000000300)={0x20}, 0x20) 8m33.288920783s ago: executing program 5 (id=2757): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 8m31.800091377s ago: executing program 5 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x4) 8m31.243464838s ago: executing program 5 (id=2767): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@creator={'creator', 0x3d, "a8fa40b3"}}, {}, {@creator={'creator', 0x3d, "bd1c66f5"}}, {@nls={'nls', 0x3d, 'koi8-r'}}, {@gid}, {@part={'part', 0x3d, 0x9}}], [{@uid_eq}]}, 0x3, 0x6a6, &(0x7f0000002500)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) 8m30.291065405s ago: executing program 5 (id=2772): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000040009"], 0x184}}, 0x0) 8m29.068871737s ago: executing program 5 (id=2780): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a1000810804a7a4f6594cb92e0a28b137140000004abd6efb2503eaff0d0001", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) 8m27.679341986s ago: executing program 34 (id=2780): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a1000810804a7a4f6594cb92e0a28b137140000004abd6efb2503eaff0d0001", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) 5.107515597s ago: executing program 7 (id=5774): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r0, 0x5432, 0x0) 4.503992792s ago: executing program 7 (id=5777): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 4.449065988s ago: executing program 4 (id=5779): unshare(0x4000400) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x24, {0xa, 0x4e21, 0x7, @private0}}, 0x24) 4.031585311s ago: executing program 0 (id=5780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x6, 0x2}, {0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 4.024387802s ago: executing program 3 (id=5781): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x77359400}}, 0x0) 4.01916171s ago: executing program 4 (id=5782): set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) 3.922885351s ago: executing program 6 (id=5783): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711077000000000006000000000000009500000000ffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='-', 0x1}], 0x9) 3.734851729s ago: executing program 7 (id=5784): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 3.59187102s ago: executing program 3 (id=5785): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003c0000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000011c000/0x2000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 3.46979031s ago: executing program 4 (id=5786): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0xa00010, &(0x7f0000000140)={[{@type={'type', 0x3d, "c910f5e7"}}, {@type={'type', 0x3d, "fbf1c11e"}}, {@nodecompose}, {@type={'type', 0x3d, "9cbaae0d"}}, {@type={'type', 0x3d, "f15b3a78"}}, {@nls={'nls', 0x3d, 'maccyrillic'}}]}, 0x8a, 0x654, &(0x7f0000000640)="$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") setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.466483811s ago: executing program 6 (id=5787): request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='o`erlay\x00', 0xfffffffffffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 3.067809225s ago: executing program 0 (id=5788): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000180)=0x4, 0x4) 2.842864618s ago: executing program 7 (id=5789): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004640)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x2, 0x0) 2.804891738s ago: executing program 3 (id=5790): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$eJzs3U9oHOfZAPBn9Emxo4AJ+T7yGeM4Yzsf2HyusrtKlIoc0s1qJE0i7YrdVbEpJQmxXIyVP8SENj408SVpS0vpqcc015BLb4UeCj20PRWaQy89FAI5lRRaKC2loDKzu9ZK1j/Hkp2kv5+I3tl3nnnnmdnJPDtr7WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJE0ZiqVanIkIpbPp9trzLRbizvMH4z3iw3NDuuNSIr/4vDhONrrOvo/67MfLH6diuO9R8fjcNEcjmv3PXj/k/89OjJYfoeEPq2Te4xLIt4qkrrywurqymsHkMgd9L2f3/Ii/1grfs9lzbzTyhfrc1mad1rp9NRU5dH52U46my9knQudbraYNtpZvdtqp2caZ9Pq9PRkmk1caC0352bqC9mg84kv1SqVqfSZiaWs3u60mo8+M9FpzOcLC3lzroypVb4ZRcwTxYH4bN5Nu1l9MU0vXV5dmdwt1SKouqHn0IYD5/gj93/8+kd/vbxSHJDbDZL0D8xatVqrVacen378iUpltFapbeyobBI3ImIkoog4kIOWz5H9O3nDbRrp1f+IhcijGctxPtJIY6T8vf4zFodjJtrRisXi8e/HNs2/qf7/36N//u1O6x2u/4Mqf3R99rEo6/+J3qMT29T/4qS8OY+D+2l+0MtmuO9qvBHX4kq8EKuxGivx2h3M51P9jOzveHORRTPy6EQr8liMetmT9nvSmI6pmIpKPBfzMRudSGM28liILDpxITrRjaw8ohrRjizq0Y1WtCONM9GIs5FGNaZjOiYjjSwm4kK0YjmaMRczUS9HuRSXy/0+uSmvB7/9fPLW7z5+t5i+EVTdYUOS4sVcEfSXHYL6xfzh2FP9v7d/LG+MUP+/aA73n+e9xu/XqRtu21pZ/0fvdhoAAADAAUrKd9+TiBiLh8qp2Xwh+9rdTgsAAADYR+XfNR8vmrFi6qFIiuv/yhaRH97x3AAAAID9kZSfsUsiYjwe7k0NPi611ZsAAAAAwOdQ+e//J4pmPOLNssP1PwAAAHzBfGe7e+x/dE//Hr2dpUPJf/Wjl84/krxUL6bqL/X7+s1Xb4zYnT2WHOkPUjZTo9fuSyJitJEdTwZ3v/zXoV77STnCsfUbEG53r/+k3R5Lrm+fQOycQPkovh8nezEnL/bai4M5vbWMz+YL2USjtfBkNem/OdJ9/eXL34oo1v7d5uKRJC5dXl2ZePGV1YtlLteLUa6/1L89fHILuaz190A8tPUWj5UfxOivd7y33srw9o/0Fh/ZeZ3J8DrfjlO9mFPjvXZ84/YfLtZZnXiyGvX6kZFudr77+trQ1vezqN7mlr8dp3sxp8+c7jVbZFHbkMXLN2dRG85ib/tiz1m8e/LN83/7VSvJJnfLYvI2swC4Wy6Vd/1Zr0L3llXon2s9Rf3fVHcHdzW/pbPcpfVXGYPlh2rdaOxPdX87zvRizvReT4we26KuVLY4o796+dVf98/oj73/4598/cRvfrp9dVtLds7i/TjbC+w38cAvb8qiGKJa7tkfbKqq7xVLvLdtVe0s1JIYi5HenMHslW+svFyrTU5VHqtUHq/FWPlSod+oPQBsYdfv2NnDt/A8tvVVdQwq3gM3/qRgIl6MV2I1Lsa58tMGEfHw1qOOD/0ZwrldrlrHh77h5dwu15brsbXNsYdOJ7FN7OTQHvvfH5XN3w/uOQGAg3Zqlzq8l/p/bpfr7o21/Gzvi3MHV8exfS3fypcPeocAwH+ArP1JMt59J2m386XnqtPT1Xp3PkvbrcazaTufmcvSvNnN2o35enMuS5farW6rMXjjeCbrpJ3lpaVWu5vOttrpUquTny+/+T3tf/V7J1usN7t5o7O0kNU7WdpoNbv1RjedyTuNdGn56YW8M5+1y4U7S1kjn80b9W7eaqad1nK7kU2kaSfLhgLzmazZzWfzYrKZLrXzxXr7ekQsLC9m6UzWabTzpW6rN+BgXXlzttVeLIeduHnz/3Sn9zcAfBZcfePalRdWV1de2zixlmzu2XriD3uIuRqxdrc3EwAYMlylAQAAAAAAAAAAAACAz6abP65X9O76kb7hibG4heBNE4fi0yz1xZ34/w96T8t+DHg749y74Tm9p3+w3P39c8sTzz/11JXtYp5+8+j8H7OI3cfZ+v+Uq/fddPTGO0ci7vnZD3s9X7lTW/ph9LYiRm9p8bVkh5i7dkoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG39OwAA///BfU8u") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x6000813) 2.756936357s ago: executing program 6 (id=5791): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.685989982s ago: executing program 4 (id=5792): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000001c0)={0x6, 0xd5}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x1000) 2.206239343s ago: executing program 0 (id=5793): socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"69890100660000000000000200", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x6, 0x9, 0x6, 0x8000000000, 0x10000400, 0x8, 0x2, 0x8, 0x6, 0xfffe, 0x8000081, 0x10, 0x8de, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.043617719s ago: executing program 7 (id=5794): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x143042, 0x88) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x0) 1.976180983s ago: executing program 6 (id=5795): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.804871579s ago: executing program 3 (id=5796): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x78) 1.684618066s ago: executing program 4 (id=5797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffc3d}]}, 0x34}}, 0x4080) 1.552694154s ago: executing program 0 (id=5798): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) 1.338019042s ago: executing program 7 (id=5799): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x1) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x85, 0x7]) 1.222517597s ago: executing program 6 (id=5800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x4, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000610000006f00000000000000950000000000000099b27d7bd80ab0f67d3299cc73132e4b8b2e086076022bacbd94d13f1a0f328de3eea293eb84098a8e05e60c8e296c33d2633868db5985b39fcc83ec062acae47f78ba029ca0a69fa381ca3f6e01954b2089046764b84d4d7976ee8749e4f04949d707d3e5a88791a30847f79ae4e751a2"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x14, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.03159083s ago: executing program 0 (id=5801): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 1.010557214s ago: executing program 3 (id=5802): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$eJzs3T9rZFUYB+D3JpOZWQUnhZUIHtDCatlsazOL7IKYymUKtdDgZmHJBCWBgH/wupWtjYWFn0AQ/CA2fgPBVrBzhYUj9869eyebMJu7OBHd5ymSkzPnN+c9d4bkpsibD18+PLiT4u79L36N8biIjWlM40ER27ERra/ilOk3AQD8lz3IOf7IC31yRUSM11cWALBGF/v5P+iGP11KWQDAGt1+9723b+zu3nwnpXHcOvz6ZFb9Zl99vtIuuRfz2I9rMYmHEfWNwlbUdwvV8FbOuRykyna8dliezE5mEYcf/NyEb/weUed3YhLb9dSju406/9buzZ06nj55ocuXVR3PVfm7cW9a5a/HJF58FD6Vv55SGkVKS/uXMRvG668u8vX+V2MSv3wUH8c87tRFdPkvd1J6M3/75+fvV+VV+aI8mY3qdZ28eakvDAAAAAAAAAAAAAAAAAAAAAAA/2tXF7130ijq/j3VVNN/Z/Nh9cVWpNZyf5+y+hhNH+Dacn+gnHOZ4/u2v861lFJuFnb5Qbw0WG4sCAAAAAAAAAAAAAAAAAAAAM+u408/O9ibz/eP/pFB2w1gEBF/3Y542ueZLs28EqsXj5o99+bzjWZ4es1geSY22zVFxMoyqkM87dUYRK+zXzlTczP44ce+u4+fvGar2qvoV2HPQfvuOtgrzr+Go2hnxk0Z3w0jujXDuOBew8dn8mTxPLnXAYfnPjTpffbh8/WgXLEmilWFvfHb4so1M2depmF9Vc+NbzWDpfhj740LvZ9jvIif/V5R6NYBAAAAAAAAAAAAAAAAAABr1f317zkP3l8Z3cijtZUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJeq+///PQZlE94/Oh48YfEwjo7/5SMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwDPg7AAD//+RmV1Y=") pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 933.222676ms ago: executing program 4 (id=5803): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000600002005c"], 0xac}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 520.425606ms ago: executing program 6 (id=5804): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) 372.650848ms ago: executing program 0 (id=5805): r0 = socket$inet(0x2, 0x3, 0x6) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 0s ago: executing program 3 (id=5806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): nown-block(0,0) -6 [ 873.216736][T12374] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 873.326519][T12374] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 873.397041][T12374] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 873.489774][T12374] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 874.512921][T12374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.587250][T12374] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.636154][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.644049][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.660588][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.668472][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.046294][T12495] loop6: detected capacity change from 0 to 256 [ 877.260622][T12374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.018944][T12549] loop6: detected capacity change from 0 to 512 [ 879.412948][T12374] veth0_vlan: entered promiscuous mode [ 879.450302][T12374] veth1_vlan: entered promiscuous mode [ 879.571321][T12549] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2853: Invalid inode bitmap blk 4 in block_group 0 [ 879.647754][T12549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.714302][T12374] veth0_macvtap: entered promiscuous mode [ 879.771290][T12374] veth1_macvtap: entered promiscuous mode [ 879.847069][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.857992][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.868350][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.882151][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.892823][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.913538][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.926527][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.940801][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.951133][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.962041][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.980178][T12374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.086609][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.100738][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.117947][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.133745][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.143995][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.157956][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.168255][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.179210][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.192341][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.203339][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.229906][T12374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.256778][T12374] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.266131][T12374] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.277905][T12374] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.290688][T12374] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.353386][T12555] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 880.505601][T12549] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2853: Invalid inode bitmap blk 4 in block_group 0 [ 880.606402][T12549] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 881.122391][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.668507][T12572] tmpfs: Bad value for 'mpol' [ 883.473016][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2871'. [ 885.394386][T10573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.396119][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.402547][T10573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.410423][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.442613][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 886.154298][T12629] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 886.342677][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'. [ 886.359729][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'. [ 886.374660][T12631] netlink: 'syz.0.2883': attribute type 11 has an invalid length. [ 887.750003][T12647] loop7: detected capacity change from 0 to 1764 [ 887.762429][T12647] iso9660: Unknown parameter 'ov' [ 888.683849][T12661] netlink: 'syz.4.2897': attribute type 1 has an invalid length. [ 890.997700][T12688] devpts: called with bogus options [ 892.222749][T12707] loop7: detected capacity change from 0 to 128 [ 892.477131][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 892.740854][ T8] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 892.752741][ T8] usb 4-1: config 0 has no interface number 0 [ 892.759496][ T8] usb 4-1: config 0 interface 222 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.771202][ T8] usb 4-1: config 0 interface 222 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.787009][ T8] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 892.797404][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.851632][ T8] usb 4-1: config 0 descriptor?? [ 892.924801][T12716] netlink: 'syz.6.2924': attribute type 10 has an invalid length. [ 893.431381][ T8] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 893.447952][ T8] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 893.459298][ T8] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 893.466920][ T8] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 893.477448][ T8] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 893.604320][ T8] holtek 0003:1241:5015.0032: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input222 [ 893.616431][ T8] holtek 0003:1241:5015.0032: no inputs found [ 893.813377][ T8] usb 4-1: USB disconnect, device number 18 [ 893.980000][T12722] loop6: detected capacity change from 0 to 2048 [ 894.092491][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2931'. [ 894.129500][T12722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 895.589584][T12748] loop6: detected capacity change from 0 to 256 [ 895.629846][T12748] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 895.644360][T12748] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 895.791999][T12748] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 898.132537][T12785] loop7: detected capacity change from 0 to 512 [ 898.213845][T12785] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 898.408035][T12785] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #15: comm syz.7.2954: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 898.557958][T12785] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2954: couldn't read orphan inode 15 (err -117) [ 898.618526][T12785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.265788][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.406433][ T29] audit: type=1400 audit(1736217744.379:106): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04 [ 901.365114][T12830] loop6: detected capacity change from 0 to 4096 [ 901.545395][T12830] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 902.337670][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 902.578205][ T29] audit: type=1800 audit(1736217746.579:107): pid=12830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2975" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 902.945416][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 903.074262][T12390] IPVS: starting estimator thread 0... [ 903.165445][T12856] IPVS: using max 192 ests per chain, 9600 per kthread [ 903.167170][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 903.204569][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.216296][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.229675][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.313028][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 903.325973][ T8] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 903.334553][ T8] usb 4-1: Manufacturer: syz [ 903.379554][ T8] usb 4-1: config 0 descriptor?? [ 903.880343][ T8] wacom 0003:056A:0045.0033: unbalanced collection at end of report description [ 903.953109][ T8] wacom 0003:056A:0045.0033: parse failed [ 903.970302][ T8] wacom 0003:056A:0045.0033: probe with driver wacom failed with error -22 [ 904.124488][T12390] usb 4-1: USB disconnect, device number 19 [ 904.330999][T12866] loop6: detected capacity change from 0 to 4096 [ 906.846988][T12900] loop7: detected capacity change from 0 to 256 [ 906.962634][T12902] loop6: detected capacity change from 0 to 164 [ 908.417959][T12921] loop6: detected capacity change from 0 to 512 [ 908.442073][T12921] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 908.532873][T12921] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.3017: iget: bad extended attribute block 19 [ 908.556672][T12921] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3017: couldn't read orphan inode 15 (err -117) [ 908.615649][T12921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.684215][T12927] loop7: detected capacity change from 0 to 2048 [ 908.936660][T12932] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 908.940264][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.768708][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.775583][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 915.244951][ T29] audit: type=1326 audit(1736217759.249:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 915.452882][ T29] audit: type=1326 audit(1736217759.349:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 915.478617][ T29] audit: type=1326 audit(1736217759.349:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 915.501360][ T29] audit: type=1326 audit(1736217759.349:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 916.232408][T13031] loop7: detected capacity change from 0 to 512 [ 916.307426][T13031] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 916.420802][T13031] EXT4-fs (loop7): 1 truncate cleaned up [ 916.429019][T13031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.052907][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.275816][T13071] team0: Device veth0_macvtap failed to register rx_handler [ 919.881512][T13085] netlink: 'syz.7.3087': attribute type 5 has an invalid length. [ 920.168493][T13087] loop7: detected capacity change from 0 to 512 [ 920.233909][T13087] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 920.445223][T13087] EXT4-fs (loop7): orphan cleanup on readonly fs [ 920.584609][T13087] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.3089: bad orphan inode 15 [ 920.676181][T13087] ext4_test_bit(bit=14, block=18) = 1 [ 920.681960][T13087] is_bad_inode(inode)=0 [ 920.686624][T13087] NEXT_ORPHAN(inode)=1023 [ 920.691181][T13087] max_ino=32 [ 920.694938][T13087] i_nlink=0 [ 920.761144][T13087] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #15: comm syz.7.3089: corrupted xattr block 19: e_value size too large [ 920.888291][T13087] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 920.899890][T13087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 920.923689][T13087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.937593][T13124] netlink: 'syz.3.3105': attribute type 2 has an invalid length. [ 922.946232][T13124] netlink: 'syz.3.3105': attribute type 9 has an invalid length. [ 922.954604][T13124] netlink: 'syz.3.3105': attribute type 1 has an invalid length. [ 922.962607][T13124] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3105'. [ 923.798252][T13131] program syz.0.3108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.903805][T13133] pimreg3: entered allmulticast mode [ 925.107504][T13141] loop7: detected capacity change from 0 to 4096 [ 925.435860][T13153] loop6: detected capacity change from 0 to 256 [ 925.616037][T13141] ntfs3(loop7): failed to convert "0080" to cp852 [ 925.638286][T13141] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 925.692378][T13141] ntfs3(loop7): failed to convert name for inode 1e. [ 927.047707][T13172] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3129'. [ 927.406202][T12390] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 927.683460][T12390] usb 5-1: Using ep0 maxpacket: 16 [ 927.710714][T12390] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 927.723928][T12390] usb 5-1: config 0 has no interface number 0 [ 927.731992][T12390] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.743673][T12390] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.753962][T12390] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 927.763595][T12390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.848671][T12390] usb 5-1: config 0 descriptor?? [ 928.260088][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 929.011348][T12390] uclogic 0003:28BD:0071.0034: failed retrieving string descriptor #100: -71 [ 929.021117][T12390] uclogic 0003:28BD:0071.0034: failed retrieving pen parameters: -71 [ 929.029746][T12390] uclogic 0003:28BD:0071.0034: pen probing failed: -71 [ 929.037189][T12390] uclogic 0003:28BD:0071.0034: failed probing parameters: -71 [ 929.045520][T12390] uclogic 0003:28BD:0071.0034: probe with driver uclogic failed with error -71 [ 929.097068][T12390] usb 5-1: USB disconnect, device number 17 [ 930.449932][T13215] loop6: detected capacity change from 0 to 64 [ 930.498627][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3148'. [ 931.884016][T13235] dvmrp0: entered allmulticast mode [ 932.016650][T13232] loop6: detected capacity change from 0 to 2048 [ 932.031611][T13236] dvmrp0: left allmulticast mode [ 932.104581][T13237] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 932.259436][T13232] NILFS (loop6): error -2 truncating bmap (ino=16) [ 932.695001][T13237] NILFS (loop6): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 932.706777][T13237] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 932.794454][T13237] Remounting filesystem read-only [ 932.808338][T11719] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 933.212526][ T29] audit: type=1326 audit(1736217777.179:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 933.561196][T13252] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3165'. [ 933.571649][T13252] netlink: zone id is out of range [ 933.577358][T13252] netlink: zone id is out of range [ 933.583000][T13252] netlink: get zone limit has 8 unknown bytes [ 936.038460][T13286] devpts: called with bogus options [ 936.882768][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3184'. [ 936.892352][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3184'. [ 936.901982][T13295] netlink: 'syz.7.3184': attribute type 6 has an invalid length. [ 937.808360][ T5892] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 938.028731][T13312] netlink: 'syz.3.3193': attribute type 11 has an invalid length. [ 938.611584][ T5892] usb 5-1: config 0 has an invalid interface number: 26 but max is 0 [ 938.620396][ T5892] usb 5-1: config 0 has no interface number 0 [ 938.649223][ T5892] usb 5-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c [ 938.659165][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.667643][ T5892] usb 5-1: Product: syz [ 938.672102][ T5892] usb 5-1: Manufacturer: syz [ 938.681415][ T5892] usb 5-1: SerialNumber: syz [ 938.773468][ T5892] usb 5-1: config 0 descriptor?? [ 938.819105][ T5892] gspca_main: spca508-2.14.0 probing 0130:0130 [ 939.246997][ T5892] gspca_spca508: reg_read err -32 [ 939.483043][ T5892] gspca_spca508: reg_read err -71 [ 939.490372][ T5892] gspca_spca508: reg_read err -71 [ 939.517517][ T5892] gspca_spca508: reg_read err -71 [ 939.567960][ T5892] gspca_spca508: reg write: error -71 [ 939.574336][ T5892] spca508 5-1:0.26: probe with driver spca508 failed with error -71 [ 939.645396][ T5892] usb 5-1: USB disconnect, device number 18 [ 939.894655][T13335] Zero length message leads to an empty skb [ 940.499663][T13341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3208'. [ 940.797809][T13344] loop7: detected capacity change from 0 to 4096 [ 943.595015][ T5892] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 943.960166][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 943.971988][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 943.983834][ T5892] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 943.993433][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.064011][ T5892] usb 4-1: config 0 descriptor?? [ 944.073036][T13375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 944.664243][ T5892] glorious 0003:22D4:1503.0035: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0 [ 944.838351][ T5892] usb 4-1: USB disconnect, device number 20 [ 945.048811][T13397] loop7: detected capacity change from 0 to 1024 [ 945.515635][T10573] hfsplus: b-tree write err: -5, ino 4 [ 947.146850][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 949.616918][T13457] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3265'. [ 949.626450][T13457] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3265'. [ 949.641288][T13457] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3265'. [ 949.886210][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3267'. [ 950.251451][T13468] rtc_cmos 00:00: Alarms can be up to one day in the future [ 951.037708][T13478] loop7: detected capacity change from 0 to 256 [ 951.097041][T13478] exfat: Deprecated parameter 'namecase' [ 951.106804][T13478] exfat: Deprecated parameter 'utf8' [ 951.528083][T13478] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 952.034854][T13488] nbd: must specify a size in bytes for the device [ 953.487260][T13504] loop6: detected capacity change from 0 to 1024 [ 953.810414][T13504] hfsplus: small file entry [ 954.902630][T13523] loop7: detected capacity change from 0 to 4096 [ 955.004071][T13523] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 955.427333][T13528] loop6: detected capacity change from 0 to 2048 [ 955.548910][T13528] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 955.598780][T13528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 957.594614][T13559] netlink: 'syz.4.3312': attribute type 1 has an invalid length. [ 959.602972][T13586] loop6: detected capacity change from 0 to 128 [ 959.621501][T13586] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 962.763752][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3355'. [ 962.776151][T13631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 963.322818][ T29] audit: type=1326 audit(1736217807.319:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.3.3343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7fc00000 [ 963.420309][T13635] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3346'. [ 966.273411][ T29] audit: type=1326 audit(1736217810.259:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.0.3360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7fc00000 [ 966.389799][T13675] netlink: 'syz.4.3366': attribute type 2 has an invalid length. [ 967.005982][ T29] audit: type=1326 audit(1736217811.009:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.7.3368" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x0 [ 967.187257][ T29] audit: type=1326 audit(1736217811.169:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.3.3369" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 967.711938][T13695] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.721424][T13695] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.734371][T13695] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.743767][T13695] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.194640][T13699] loop6: detected capacity change from 0 to 8 [ 968.282132][T13699] squashfs image failed sanity check [ 968.931505][T13711] netlink: 'syz.3.3381': attribute type 3 has an invalid length. [ 970.047190][T13723] mkiss: ax0: crc mode is auto. [ 970.078674][ T29] audit: type=1800 audit(1736217814.079:117): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3389" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 970.919919][T13737] netlink: 'syz.3.3394': attribute type 4 has an invalid length. [ 970.928234][T13737] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3394'. [ 972.209691][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.217005][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.275108][ T9576] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 973.514421][ T9576] usb 5-1: Using ep0 maxpacket: 32 [ 973.647048][ T9576] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 973.657086][ T9576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.785722][ T9576] usb 5-1: config 0 descriptor?? [ 973.840677][ T9576] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 974.766719][ T9576] gspca_vc032x: reg_w err -71 [ 974.771681][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.777918][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.786516][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.792041][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.798704][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.804590][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.810139][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.818732][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.830882][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.838070][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.846660][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.852269][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.857993][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.863951][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.869530][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.878161][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.883839][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.892081][ T9576] gspca_vc032x: I2c Bus Busy Wait 00 [ 974.897917][ T9576] gspca_vc032x: Unknown sensor... [ 974.906537][ T9576] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 975.717878][ T9576] usb 5-1: USB disconnect, device number 19 [ 977.662007][T13774] kernel read not supported for file /eth0 (pid: 13774 comm: syz.3.3410) [ 977.681730][ T29] audit: type=1800 audit(1736217821.669:118): pid=13774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3410" name="eth0" dev="mqueue" ino=34562 res=0 errno=0 [ 977.739667][T13773] loop7: detected capacity change from 0 to 1024 [ 978.374574][T10573] hfsplus: b-tree write err: -5, ino 4 [ 978.656120][T13786] loop6: detected capacity change from 0 to 2048 [ 978.792868][T13790] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 979.396706][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3422'. [ 979.482666][ T9576] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 979.716232][ T9576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.727988][ T9576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.745181][ T9576] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 979.756638][ T9576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.869727][ T9576] usb 4-1: config 0 descriptor?? [ 980.380295][ T9576] monterey 0003:0566:3004.0036: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 980.597077][ T9576] usb 4-1: USB disconnect, device number 21 [ 981.426696][T13823] tipc: Started in network mode [ 981.431874][T13823] tipc: Node identity , cluster identity 4711 [ 981.438562][T13823] tipc: Failed to obtain node identity [ 981.444440][T13823] tipc: Enabling of bearer rejected, failed to enable media [ 982.290364][T13836] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 982.319682][T13828] loop7: detected capacity change from 0 to 2048 [ 982.539186][T13828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.782616][T13845] netlink: 536 bytes leftover after parsing attributes in process `syz.6.3442'. [ 983.446556][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.625008][T13876] loop7: detected capacity change from 0 to 1024 [ 985.248962][ T50] hfsplus: b-tree write err: -5, ino 4 [ 987.568418][T13911] loop6: detected capacity change from 0 to 2048 [ 987.810795][T13915] netlink: 'syz.7.3474': attribute type 10 has an invalid length. [ 987.847317][T13920] netlink: 'syz.7.3474': attribute type 10 has an invalid length. [ 987.868268][T13911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.968648][T13915] team0: Port device netdevsim3 added [ 988.027205][T13920] team0: Port device netdevsim3 removed [ 988.055117][T13920] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 988.707206][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.783969][ T9576] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 989.003919][ T9576] usb 5-1: Using ep0 maxpacket: 16 [ 989.071692][ T9576] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 989.086891][ T9576] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.103426][ T9576] usb 5-1: config 0 interface 0 has no altsetting 0 [ 989.112820][ T9576] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 989.125510][ T9576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.142944][ T9576] usb 5-1: config 0 descriptor?? [ 989.597497][T11530] Bluetooth: hci4: command 0x0406 tx timeout [ 989.625139][ T9576] wacom 0003:056A:0029.0037: unknown main item tag 0x0 [ 989.632479][ T9576] wacom 0003:056A:0029.0037: unknown main item tag 0x0 [ 989.645099][ T9576] wacom 0003:056A:0029.0037: unknown main item tag 0x0 [ 989.652392][ T9576] wacom 0003:056A:0029.0037: unknown main item tag 0x0 [ 989.660509][ T9576] wacom 0003:056A:0029.0037: unknown main item tag 0x0 [ 989.680506][ T9576] wacom 0003:056A:0029.0037: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 989.699829][ T9576] wacom 0003:056A:0029.0037: hidraw0: USB HID v0.40 Device [HID 056a:0029] on usb-dummy_hcd.4-1/input0 [ 989.714752][ T9576] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0029.0037/input/input25 [ 989.912237][ T5892] usb 5-1: USB disconnect, device number 20 [ 990.638127][T13943] loop7: detected capacity change from 0 to 4096 [ 991.443663][ T29] audit: type=1800 audit(1736217835.319:119): pid=13943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3485" name="bus" dev="loop7" ino=33 res=0 errno=0 [ 991.691140][T13960] PKCS8: Unsupported PKCS#8 version [ 993.698496][T13985] program syz.7.3505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 993.743685][T13985] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 994.371778][T13993] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3509'. [ 995.239861][T14008] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 995.274125][ T9576] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 995.514138][ T9576] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 998.296704][T14040] netlink: 'syz.6.3532': attribute type 8 has an invalid length. [ 1002.005852][T14092] loop7: detected capacity change from 0 to 16 [ 1002.022574][T14092] erofs (device loop7): mounted with root inode @ nid 36. [ 1002.397104][T14096] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3558'. [ 1002.989662][T14104] loop7: detected capacity change from 0 to 256 [ 1003.145144][T14104] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1003.981071][T14114] tipc: Started in network mode [ 1003.986600][T14114] tipc: Node identity ac141412, cluster identity 4711 [ 1003.994982][T14114] tipc: New replicast peer: 255.255.255.255 [ 1004.007351][T14114] tipc: Enabled bearer , priority 10 [ 1004.174673][T14116] loop7: detected capacity change from 0 to 1024 [ 1004.661795][T14120] sp0: Synchronizing with TNC [ 1004.767409][ T3689] hfsplus: b-tree write err: -5, ino 4 [ 1004.768131][T14119] [U] è [ 1005.274163][T14106] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1005.396258][ T9576] tipc: Node number set to 2886997010 [ 1005.759494][T14138] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3572'. [ 1006.448610][T14150] loop6: detected capacity change from 0 to 16 [ 1006.514035][ T9576] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1006.894087][ T9576] usb 5-1: Using ep0 maxpacket: 32 [ 1006.907889][ T9576] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.939146][ T9576] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1006.951766][ T9576] usb 5-1: New USB device strings: Mfr=10, Product=131, SerialNumber=0 [ 1006.960600][ T9576] usb 5-1: Product: syz [ 1006.965245][ T9576] usb 5-1: Manufacturer: syz [ 1007.053605][T14155] loop7: detected capacity change from 0 to 256 [ 1007.129463][ T9576] hub 5-1:4.0: bad descriptor, ignoring hub [ 1007.136039][ T9576] hub 5-1:4.0: probe with driver hub failed with error -5 [ 1007.152198][ T9576] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 1007.411626][T14161] loop6: detected capacity change from 0 to 1024 [ 1007.616177][T12390] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 1007.642521][T14161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.141705][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.488714][ T9576] usb 5-1: USB disconnect, device number 21 [ 1008.548701][T14176] vlan2: entered promiscuous mode [ 1008.554584][T14176] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1008.564186][T14176] vlan2: entered allmulticast mode [ 1008.569631][T14176] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1010.446075][T14200] loop7: detected capacity change from 0 to 1024 [ 1010.596335][T14200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.609346][T14200] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.116290][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.928155][T14223] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1011.935183][T14223] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1012.050190][T14223] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1012.057235][T14223] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1012.124600][T14223] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1012.131513][T14223] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1012.227548][T14223] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1012.234672][T14223] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1012.247907][T14225] tipc: Started in network mode [ 1012.253538][T14225] tipc: Node identity ac141412, cluster identity 4711 [ 1012.261287][T14225] tipc: New replicast peer: 255.255.255.255 [ 1012.270239][T14225] tipc: Enabled bearer , priority 10 [ 1012.326186][T14223] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1012.333279][T14223] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1012.941377][T14234] program syz.7.3619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.230702][T14236] loop6: detected capacity change from 0 to 256 [ 1013.387826][ T9576] tipc: Node number set to 2886997010 [ 1013.609915][T14236] FAT-fs (loop6): Directory bread(block 64) failed [ 1013.618010][T14236] FAT-fs (loop6): Directory bread(block 65) failed [ 1013.628413][T14236] FAT-fs (loop6): Directory bread(block 66) failed [ 1013.640116][T14236] FAT-fs (loop6): Directory bread(block 67) failed [ 1013.651293][T14236] FAT-fs (loop6): Directory bread(block 68) failed [ 1013.664900][T14236] FAT-fs (loop6): Directory bread(block 69) failed [ 1013.671918][T14236] FAT-fs (loop6): Directory bread(block 70) failed [ 1013.678964][T14236] FAT-fs (loop6): Directory bread(block 71) failed [ 1013.689070][T14236] FAT-fs (loop6): Directory bread(block 72) failed [ 1013.696112][T14236] FAT-fs (loop6): Directory bread(block 73) failed [ 1014.841901][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3627'. [ 1015.325916][T14255] loop7: detected capacity change from 0 to 1024 [ 1015.523882][T14255] hfsplus: bad catalog entry type [ 1015.757381][T14259] tipc: New replicast peer: 255.255.255.255 [ 1015.767338][T14259] tipc: Enabled bearer , priority 10 [ 1015.855476][T10573] hfsplus: b-tree write err: -5, ino 4 [ 1016.706561][ T29] audit: type=1326 audit(1736217860.699:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14266 comm="syz.3.3634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 1016.736470][ T29] audit: type=1326 audit(1736217860.699:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14266 comm="syz.3.3634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 1016.876188][ T29] audit: type=1326 audit(1736217860.789:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14266 comm="syz.3.3634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 1016.902284][ T29] audit: type=1326 audit(1736217860.789:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14266 comm="syz.3.3634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 1016.931335][ T29] audit: type=1326 audit(1736217860.789:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14266 comm="syz.3.3634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 1017.394615][T14275] syz.3.3639 uses obsolete (PF_INET,SOCK_PACKET) [ 1019.565328][T14308] tipc: Enabled bearer , priority 0 [ 1021.324870][T14333] netlink: 'syz.3.3666': attribute type 5 has an invalid length. [ 1023.222720][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3678'. [ 1024.960590][T14375] loop6: detected capacity change from 0 to 256 [ 1025.110584][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1025.138264][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1026.836643][T14401] loop7: detected capacity change from 0 to 256 [ 1027.305596][T14401] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d16cac, utbl_chksum : 0xe619d30d) [ 1028.873394][T14431] loop6: detected capacity change from 0 to 1024 [ 1029.064187][T14431] syz.6.3709: attempt to access beyond end of device [ 1029.064187][T14431] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1029.485197][ T3734] hfsplus: b-tree write err: -5, ino 8 [ 1032.508941][T14473] netdevsim netdevsim7: Direct firmware load for /card# failed with error -2 [ 1032.521439][T14473] netdevsim netdevsim7: Falling back to sysfs fallback for: /card# [ 1032.632238][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 1032.645378][T14476] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3730'. [ 1033.057146][T14480] loop6: detected capacity change from 0 to 2048 [ 1033.148783][T14480] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1033.221694][T14483] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1033.222010][T14480] syz.6.3731: attempt to access beyond end of device [ 1033.222010][T14480] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1033.620012][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.630201][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1033.737178][T12390] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1033.905726][T12390] usb 4-1: Using ep0 maxpacket: 16 [ 1033.940351][T12390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.940561][T12390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.962518][T12390] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.178132][T12390] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1034.188240][T12390] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1034.197200][T12390] usb 4-1: Manufacturer: syz [ 1034.216919][T12390] usb 4-1: config 0 descriptor?? [ 1034.912630][T12390] hid (null): invalid report_count 41615 [ 1034.929375][T12390] wacom 0003:056A:0045.0038: invalid report_count 41615 [ 1034.941921][T12390] wacom 0003:056A:0045.0038: item 0 2 1 9 parsing failed [ 1034.955857][T12390] wacom 0003:056A:0045.0038: parse failed [ 1034.962615][T12390] wacom 0003:056A:0045.0038: probe with driver wacom failed with error -22 [ 1035.225354][ T9576] usb 4-1: USB disconnect, device number 22 [ 1039.227045][T14566] loop6: detected capacity change from 0 to 128 [ 1039.251041][T14566] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1039.399612][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3771'. [ 1039.492694][T14566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.638803][T14566] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 1039.653629][T14566] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1040.099612][ T29] audit: type=1326 audit(1736217884.059:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.122828][ T29] audit: type=1326 audit(1736217884.109:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.146293][ T29] audit: type=1326 audit(1736217884.119:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.171830][ T29] audit: type=1326 audit(1736217884.119:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.195317][ T29] audit: type=1326 audit(1736217884.119:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.218143][ T29] audit: type=1326 audit(1736217884.129:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.240756][ T29] audit: type=1326 audit(1736217884.139:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.266822][ T29] audit: type=1326 audit(1736217884.139:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.290153][ T29] audit: type=1326 audit(1736217884.139:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.312943][ T29] audit: type=1326 audit(1736217884.139:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.3785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 1040.483418][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3778'. [ 1042.398428][T14604] loop6: detected capacity change from 0 to 256 [ 1043.480481][T14626] netlink: 'syz.4.3799': attribute type 6 has an invalid length. [ 1043.489056][T14626] netlink: 'syz.4.3799': attribute type 6 has an invalid length. [ 1043.497325][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1043.800903][T14627] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3798'. [ 1045.335547][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3813'. [ 1046.166671][ T9576] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1046.415699][ T9576] usb 5-1: Using ep0 maxpacket: 16 [ 1046.482356][ T9576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.494118][ T9576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.511244][ T9576] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1046.526888][ T9576] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1046.539641][ T9576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.556917][ T9576] usb 5-1: config 0 descriptor?? [ 1047.011743][T14680] autofs: Bad value for 'fd' [ 1047.339204][ T9576] hid (null): invalid report_size 1675959386 [ 1047.356845][ T9576] shield 0003:0955:7214.0039: invalid report_size 1675959386 [ 1047.367997][ T9576] shield 0003:0955:7214.0039: item 0 4 1 7 parsing failed [ 1047.388497][ T9576] shield 0003:0955:7214.0039: Parse failed [ 1047.399630][ T9576] shield 0003:0955:7214.0039: probe with driver shield failed with error -22 [ 1047.655886][ T9576] usb 5-1: USB disconnect, device number 22 [ 1049.530152][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1049.752700][T14699] loop7: detected capacity change from 0 to 4096 [ 1049.925878][T14699] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1050.930583][T14724] loop6: detected capacity change from 0 to 256 [ 1051.094924][T14724] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 1051.942155][T14733] delete_channel: no stack [ 1052.682335][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'. [ 1052.888957][T14748] netlink: 'syz.3.3853': attribute type 13 has an invalid length. [ 1053.257911][T14753] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3857'. [ 1053.271416][T14753] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3857'. [ 1054.700550][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3865'. [ 1054.733018][T14778] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 4, id = 0 [ 1054.749765][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3865'. [ 1054.916811][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3868'. [ 1055.362991][T14787] program syz.4.3870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.200037][T14801] loop7: detected capacity change from 0 to 256 [ 1056.217182][T14801] exfat: Deprecated parameter 'utf8' [ 1056.307794][T14801] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1058.009584][T14827] sp0: Synchronizing with TNC [ 1058.022711][T14826] [U] è [ 1058.852338][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1058.861817][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1058.871411][T14839] netlink: 'syz.3.3894': attribute type 18 has an invalid length. [ 1070.124489][T14938] ./bus: Can't lookup blockdev [ 1070.912773][ T5892] kernel write not supported for file /input/mice (pid: 5892 comm: kworker/1:5) [ 1071.176235][T14956] loop7: detected capacity change from 0 to 256 [ 1071.194721][T14956] exfat: Deprecated parameter 'namecase' [ 1071.338783][T14956] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 1072.556615][T14975] loop7: detected capacity change from 0 to 1024 [ 1072.644800][T14975] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1072.655713][T14975] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1072.666017][T14975] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1072.816950][T14975] EXT4-fs error (device loop7): ext4_get_journal_inode:5809: inode #5: comm syz.7.3956: unexpected bad inode w/o EXT4_IGET_BAD [ 1072.892300][T14975] EXT4-fs (loop7): no journal found [ 1072.898194][T14975] EXT4-fs (loop7): can't get journal size [ 1072.966211][T14975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1073.405714][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.629727][T14994] loop7: detected capacity change from 0 to 256 [ 1073.966713][T14994] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1075.503766][T15019] tmpfs: Bad value for 'mpol' [ 1075.613793][T15024] loop6: detected capacity change from 0 to 128 [ 1075.985613][T15024] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1076.041219][T15024] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.478183][T11719] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1078.003432][T12390] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1078.266182][T12390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1078.278162][T12390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.288674][T12390] usb 5-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 1078.301595][T12390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.376144][T12390] usb 5-1: config 0 descriptor?? [ 1078.913497][T12390] wacom 0003:056A:0090.003A: ignoring exceeding usage max [ 1079.162199][T12390] wacom 0003:056A:0090.003A: hidraw0: USB HID v40.00 Device [HID 056a:0090] on usb-dummy_hcd.4-1/input0 [ 1079.205010][T12390] usb 5-1: USB disconnect, device number 23 [ 1081.595413][T15091] loop6: detected capacity change from 0 to 2048 [ 1081.687831][T15091] hpfs: hpfs_map_sector(): read error [ 1082.515839][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4016'. [ 1082.525420][T15107] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4016'. [ 1083.789755][T15123] loop7: detected capacity change from 0 to 8 [ 1085.374987][T15143] loop7: detected capacity change from 0 to 512 [ 1085.386584][T15143] EXT4-fs: Ignoring removed mblk_io_submit option [ 1085.449076][T15143] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1085.514797][T15143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 1085.562661][T15143] System zones: 1-12 [ 1085.583435][T15143] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.4036: corrupted in-inode xattr: e_value size too large [ 1085.605162][T15143] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.4036: couldn't read orphan inode 15 (err -117) [ 1085.661087][T15143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.862367][T15143] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 1085.976474][T15143] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 1085.993542][T15143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 1086.002149][T15143] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 1086.167738][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.883832][T15157] IPVS: set_ctl: invalid protocol: 46 172.20.20.29:8 [ 1086.938563][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4045'. [ 1087.007844][T15166] loop6: detected capacity change from 0 to 64 [ 1089.815649][T15196] tipc: Bearer : already 2 bearers with priority 10 [ 1089.827538][T15196] tipc: Bearer : trying with adjusted priority [ 1089.836019][T15196] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1090.473039][T15208] loop6: detected capacity change from 0 to 256 [ 1091.074555][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1091.074649][ T29] audit: type=1800 audit(1736217934.999:138): pid=15208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4064" name="file1" dev="loop6" ino=1048940 res=0 errno=0 [ 1092.163943][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1092.177973][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1092.509846][T15238] program syz.0.4080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.716256][T15236] loop6: detected capacity change from 0 to 128 [ 1092.780577][T15242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4084'. [ 1092.828870][T15236] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1093.021689][T15236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.520616][T15250] tipc: Started in network mode [ 1093.526113][T15250] tipc: Node identity ac14142a, cluster identity 4711 [ 1093.538241][T15250] tipc: Enabled bearer , priority 10 [ 1094.653387][ T9576] tipc: Node number set to 2886997034 [ 1095.076421][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.083420][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1096.174439][T15281] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1096.183946][T15281] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1096.193348][T15281] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1096.202543][T15281] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1097.138692][T15292] Process accounting resumed [ 1097.416498][T15292] Process accounting resumed [ 1101.243797][T15325] loop6: detected capacity change from 0 to 256 [ 1102.229235][T15325] FAT-fs (loop6): Directory bread(block 64) failed [ 1102.237303][T15325] FAT-fs (loop6): Directory bread(block 65) failed [ 1102.244706][T15325] FAT-fs (loop6): Directory bread(block 66) failed [ 1102.251519][T15325] FAT-fs (loop6): Directory bread(block 67) failed [ 1102.258743][T15325] FAT-fs (loop6): Directory bread(block 68) failed [ 1102.265722][T15325] FAT-fs (loop6): Directory bread(block 69) failed [ 1102.272700][T15325] FAT-fs (loop6): Directory bread(block 70) failed [ 1102.279811][T15325] FAT-fs (loop6): Directory bread(block 71) failed [ 1102.286927][T15325] FAT-fs (loop6): Directory bread(block 72) failed [ 1102.293940][T15325] FAT-fs (loop6): Directory bread(block 73) failed [ 1106.707176][ T9576] kernel write not supported for file /sg0 (pid: 9576 comm: kworker/0:2) [ 1107.971351][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4151'. [ 1108.056120][T15403] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1108.063023][T15403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1108.071683][T15403] vhci_hcd vhci_hcd.0: Device attached [ 1108.120996][T15404] vhci_hcd: connection closed [ 1108.122218][ T3474] vhci_hcd: stop threads [ 1108.132071][ T3474] vhci_hcd: release socket [ 1108.137144][ T3474] vhci_hcd: disconnect device [ 1108.511950][ T9576] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1108.708933][ T9576] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1108.721038][ T9576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1108.732892][ T9576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.744858][ T9576] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1108.760962][ T9576] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1108.774166][ T9576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.815164][ T9576] usb 5-1: config 0 descriptor?? [ 1109.651310][T15419] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1109.658211][T15419] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1109.666545][T15419] vhci_hcd vhci_hcd.0: Device attached [ 1109.719360][ T9576] hid-rmi 0003:17EF:6085.003B: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.4-1/input0 [ 1109.757169][T15422] vhci_hcd: connection closed [ 1109.758383][ T50] vhci_hcd: stop threads [ 1109.768358][ T50] vhci_hcd: release socket [ 1109.773021][ T50] vhci_hcd: disconnect device [ 1109.779239][T15429] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1109.812008][T12390] usb 5-1: USB disconnect, device number 24 [ 1110.649338][T15436] loop7: detected capacity change from 0 to 256 [ 1110.660712][T15436] exfat: Deprecated parameter 'namecase' [ 1111.029522][T15436] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1111.706757][ T29] audit: type=1326 audit(1736217955.689:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15453 comm="syz.4.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1111.804230][ T29] audit: type=1326 audit(1736217955.749:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15453 comm="syz.4.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1111.827101][ T29] audit: type=1326 audit(1736217955.759:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15453 comm="syz.4.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1111.854784][ T29] audit: type=1326 audit(1736217955.759:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15453 comm="syz.4.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1111.877460][ T29] audit: type=1326 audit(1736217955.769:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15453 comm="syz.4.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1112.094067][ T29] audit: type=1326 audit(1736217956.059:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15453 comm="syz.4.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1112.238210][T15456] loop6: detected capacity change from 0 to 1024 [ 1112.325482][T15456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.419501][T15465] usb usb5: usbfs: process 15465 (syz.0.4180) did not claim interface 0 before use [ 1112.926678][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.556980][T15483] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4188'. [ 1119.032177][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'. [ 1119.474358][ T29] audit: type=1326 audit(1736217963.469:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.496831][ T29] audit: type=1326 audit(1736217963.469:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.525752][ T29] audit: type=1326 audit(1736217963.469:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.548258][ T29] audit: type=1326 audit(1736217963.469:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.570811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.579517][ T29] audit: type=1326 audit(1736217963.469:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.602911][ T29] audit: type=1326 audit(1736217963.469:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.628901][ T29] audit: type=1326 audit(1736217963.469:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.652258][ T29] audit: type=1326 audit(1736217963.469:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.674312][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.684536][ T29] audit: type=1326 audit(1736217963.469:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1119.706486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.713372][ T29] audit: type=1326 audit(1736217963.469:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15567 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 1121.744724][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4240'. [ 1123.036631][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4247'. [ 1123.144934][ T5892] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1123.345687][ T5892] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 1123.357238][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.367604][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 1123.381136][ T5892] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1123.390859][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.780431][ T5892] usb 4-1: config 0 descriptor?? [ 1124.580484][ T5892] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.003C/input/input31 [ 1124.581818][T15629] loop6: detected capacity change from 0 to 256 [ 1124.602185][T15629] exfat: Deprecated parameter 'namecase' [ 1124.679475][ T5892] uclogic 0003:28BD:0933.003C: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 1124.749988][ T5892] usb 4-1: USB disconnect, device number 23 [ 1124.823605][T15629] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 1126.855609][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4273'. [ 1126.864980][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4273'. [ 1126.874883][T15661] netlink: 'syz.6.4273': attribute type 14 has an invalid length. [ 1127.112706][T15663] loop6: detected capacity change from 0 to 256 [ 1127.366618][T15663] FAT-fs (loop6): Directory bread(block 64) failed [ 1127.373859][T15663] FAT-fs (loop6): Directory bread(block 65) failed [ 1127.380864][T15663] FAT-fs (loop6): Directory bread(block 66) failed [ 1127.388133][T15663] FAT-fs (loop6): Directory bread(block 67) failed [ 1127.395324][T15663] FAT-fs (loop6): Directory bread(block 68) failed [ 1127.406040][T15663] FAT-fs (loop6): Directory bread(block 69) failed [ 1127.414321][T15663] FAT-fs (loop6): Directory bread(block 70) failed [ 1127.421176][T15663] FAT-fs (loop6): Directory bread(block 71) failed [ 1127.428406][T15663] FAT-fs (loop6): Directory bread(block 72) failed [ 1127.435464][T15663] FAT-fs (loop6): Directory bread(block 73) failed [ 1128.982535][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4286'. [ 1129.045264][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4286'. [ 1131.762455][T15727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4307'. [ 1132.035257][T15731] veth0_to_team: entered promiscuous mode [ 1132.041456][T15731] veth0_to_team: entered allmulticast mode [ 1132.849942][T15739] loop6: detected capacity change from 0 to 2048 [ 1133.003857][T15739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1133.547320][T15747] [U] ©ÃÇJ: already 2 bearers with priority 10 [ 1220.516366][T16917] tipc: Bearer : trying with adjusted priority [ 1220.523843][T16917] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1221.786348][T16914] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x6dfb6af6, utbl_chksum : 0xe619d30d) [ 1223.220519][T16945] loop6: detected capacity change from 0 to 512 [ 1223.296750][T16945] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 1223.377092][T16945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 1223.426575][T16945] System zones: 1-12 [ 1223.524255][T16945] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1223.531253][T16945] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.4856: Inode bitmap for bg 0 marked uninitialized [ 1223.594299][T16945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1224.101401][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.153750][T16958] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4861'. [ 1224.322095][T16961] loop7: detected capacity change from 0 to 1024 [ 1224.477659][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4864'. [ 1224.519545][ T29] audit: type=1800 audit(1736218068.519:558): pid=16961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4863" name="bus" dev="loop7" ino=25 res=0 errno=0 [ 1224.557713][T16961] syz.7.4863: attempt to access beyond end of device [ 1224.557713][T16961] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1224.641412][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4865'. [ 1225.393354][ T5892] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1225.424938][T16977] netlink: 'syz.6.4871': attribute type 29 has an invalid length. [ 1225.500695][T16977] netlink: 'syz.6.4871': attribute type 29 has an invalid length. [ 1225.714472][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.725220][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1225.734616][ T5892] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.105685][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.118431][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1226.127882][ T5892] usb 5-1: Product: syz [ 1226.132365][ T5892] usb 5-1: SerialNumber: syz [ 1226.157205][ T5892] cdc_ncm 5-1:1.0: skipping garbage [ 1226.162852][ T5892] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1226.170213][ T5892] cdc_ncm 5-1:1.0: bind() failure [ 1226.249693][ T5892] hid-generic 0000:0000:0000.0042: item fetching failed at offset 0/1 [ 1226.279162][ T5892] hid-generic 0000:0000:0000.0042: probe with driver hid-generic failed with error -22 [ 1227.732819][T17010] netlink: 'syz.0.4888': attribute type 322 has an invalid length. [ 1228.104354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1228.265192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1228.518390][ T5892] usb 5-1: USB disconnect, device number 28 [ 1230.706471][T17054] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4907'. [ 1231.053723][T17057] dlm: non-version read from control device 0 [ 1231.161437][T17060] can0: slcan on pty27. [ 1231.304417][T17059] can0 (unregistered): slcan off pty27. [ 1231.427363][T17062] loop6: detected capacity change from 0 to 512 [ 1231.465279][T17062] EXT4-fs: inline encryption not supported [ 1231.562538][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 1231.732391][T17062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.749740][T17062] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.033898][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.958852][T17086] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4922'. [ 1232.968734][T17086] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4922'. [ 1233.716197][T17092] loop6: detected capacity change from 0 to 1024 [ 1233.758377][T17092] EXT4-fs: Ignoring removed nobh option [ 1233.764595][T17092] EXT4-fs: Ignoring removed bh option [ 1233.937075][T17092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.043314][ T9576] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1234.220158][ T9576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1234.231741][ T9576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.242657][ T9576] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1234.252275][ T9576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.351210][ T9576] usb 4-1: config 0 descriptor?? [ 1234.452221][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.790766][ T9576] ortek 0003:1223:3F07.0043: unknown main item tag 0x0 [ 1234.802381][ T9576] ortek 0003:1223:3F07.0043: unknown main item tag 0x0 [ 1234.809969][ T9576] ortek 0003:1223:3F07.0043: unknown main item tag 0x0 [ 1234.823569][ T9576] ortek 0003:1223:3F07.0043: unknown main item tag 0x0 [ 1234.832029][ T9576] ortek 0003:1223:3F07.0043: unknown main item tag 0x0 [ 1234.839511][ T9576] ortek 0003:1223:3F07.0043: unknown main item tag 0x0 [ 1234.846986][ T9576] ortek 0003:1223:3F07.0043: unknown main item tag 0x0 [ 1234.908551][ T9576] ortek 0003:1223:3F07.0043: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.3-1/input0 [ 1235.416762][ T9576] usb 4-1: USB disconnect, device number 27 [ 1237.549220][T17148] sp0: Synchronizing with TNC [ 1238.597089][T17168] loop7: detected capacity change from 0 to 1024 [ 1238.983805][T17168] hfsplus: can't free extent [ 1239.439164][ T3498] hfsplus: b-tree write err: -5, ino 4 [ 1239.546303][T17178] loop6: detected capacity change from 0 to 1024 [ 1239.728352][T17178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.333840][ T9576] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1240.362835][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.513644][ T9576] usb 5-1: Using ep0 maxpacket: 16 [ 1240.783999][ T9576] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1240.792555][ T9576] usb 5-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 1240.804292][ T9576] usb 5-1: config 0 has no interface number 0 [ 1240.956627][ T9576] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1240.969779][ T9576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.979203][ T9576] usb 5-1: Product: syz [ 1240.983923][ T9576] usb 5-1: Manufacturer: syz [ 1240.988800][ T9576] usb 5-1: SerialNumber: syz [ 1241.076483][ T9576] usb 5-1: config 0 descriptor?? [ 1241.229449][T17204] loop7: detected capacity change from 0 to 256 [ 1241.239345][T17204] exfat: Deprecated parameter 'utf8' [ 1241.245425][T17204] exfat: Deprecated parameter 'utf8' [ 1241.251208][T17204] exfat: Deprecated parameter 'namecase' [ 1241.257406][T17204] exfat: Deprecated parameter 'utf8' [ 1241.375274][T17204] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1241.399496][ T9576] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1241.406384][ T9576] usb 5-1: No valid video chain found. [ 1241.694852][ T9576] usb 5-1: USB disconnect, device number 29 [ 1241.972485][T17215] sock: sock_timestamping_bind_phc: sock not bind to device [ 1242.952316][T17233] loop6: detected capacity change from 0 to 64 [ 1244.762449][T17257] loop6: detected capacity change from 0 to 1024 [ 1244.786930][T17257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c02c, mo2=0003] [ 1244.836948][T17257] System zones: 0-1, 3-36 [ 1245.001385][T17257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1245.116174][T17257] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.4995: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1245.153718][T17257] EXT4-fs (loop6): Remounting filesystem read-only [ 1245.398711][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.435024][T17271] netlink: del zone limit has 4 unknown bytes [ 1245.700448][T17276] netlink: 'syz.3.5004': attribute type 4 has an invalid length. [ 1245.709511][T17276] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1246.112316][T17280] loop6: detected capacity change from 0 to 16 [ 1246.308752][T17280] erofs (device loop6): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1246.420103][T17280] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1246.446626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.454040][T17280] CIFS mount error: No usable UNC path provided in device string! [ 1246.454040][T17280] [ 1246.464530][T17280] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1247.145328][T17291] netlink: 'syz.0.5012': attribute type 178 has an invalid length. [ 1248.779419][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5025'. [ 1248.816195][T17316] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5025'. [ 1248.825879][T17316] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5025'. [ 1249.574431][T17336] 9p: Unknown Cache mode or invalid value f [ 1250.027387][ T29] audit: type=1326 audit(1736218094.029:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17342 comm="syz.4.5034" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 1250.049124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.618703][T17348] loop7: detected capacity change from 0 to 2048 [ 1250.713278][T17348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1251.172746][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.870622][T17370] loop7: detected capacity change from 0 to 1024 [ 1251.962672][T17370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.209471][T17376] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1252.545326][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.739441][T17384] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 1252.748323][T17384] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1252.756621][T17384] veth0_virt_wifi: entered allmulticast mode [ 1252.766211][T17384] veth0_virt_wifi: entered promiscuous mode [ 1252.775168][T17384] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 1252.783259][T17384] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 1252.807034][T17386] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1252.915443][T12390] IPVS: starting estimator thread 0... [ 1253.003504][T17388] IPVS: using max 240 ests per chain, 12000 per kthread [ 1253.723893][T17399] can0: slcan on ptm0. [ 1253.800768][ T29] audit: type=1326 audit(1736218097.799:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1253.824449][ T29] audit: type=1326 audit(1736218097.799:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1253.846683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.878632][T17398] can0 (unregistered): slcan off ptm0. [ 1253.913541][ T29] audit: type=1326 audit(1736218097.869:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1253.936295][ T29] audit: type=1326 audit(1736218097.869:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17400 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1254.735170][ T9576] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1255.007432][ T9576] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1255.016726][ T9576] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.027438][ T9576] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1255.038258][ T9576] usb 5-1: config 1 has no interface number 1 [ 1255.044883][ T9576] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1255.058208][ T9576] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 38, changing to 4 [ 1255.183181][ T9576] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1255.196550][ T9576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.206220][ T9576] usb 5-1: Product: syz [ 1255.212900][ T9576] usb 5-1: Manufacturer: syz [ 1255.218061][ T9576] usb 5-1: SerialNumber: syz [ 1255.226475][T14508] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1255.393966][T14508] usb 4-1: Using ep0 maxpacket: 32 [ 1255.418988][T14508] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1255.428043][T14508] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1255.437404][T14508] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1255.447114][T14508] usb 4-1: config 1 has no interface number 0 [ 1255.453936][T14508] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.465590][T14508] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1255.479970][T14508] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1255.489863][T14508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.572432][T14508] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1255.659828][ T9576] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1255.801723][T14508] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1255.836005][ T9576] usb 5-1: USB disconnect, device number 30 [ 1256.373815][T12390] usb 4-1: USB disconnect, device number 28 [ 1256.381662][T12390] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1258.488925][T17457] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1258.549987][T17455] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1258.859049][T17464] loop7: detected capacity change from 0 to 64 [ 1259.371958][T17472] netlink: 'syz.4.5088': attribute type 29 has an invalid length. [ 1259.386166][T17472] netlink: 'syz.4.5088': attribute type 29 has an invalid length. [ 1260.945066][T17494] ptrace attach of "./syz-executor exec"[5786] was attempted by " [ 1261.425341][T17503] loop7: detected capacity change from 0 to 128 [ 1261.516747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.640458][T17503] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 1262.164756][T12374] sysv_free_block: trying to free block not in datazone [ 1262.198182][T12374] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1262.359828][T17517] loop6: detected capacity change from 0 to 2048 [ 1264.714502][ T9576] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1265.171902][ T9576] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 182 [ 1265.185583][ T9576] usb 4-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 1265.197433][ T9576] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1265.422165][ T9576] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1265.437764][ T9576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.447185][ T9576] usb 4-1: Product: syz [ 1265.451658][ T9576] usb 4-1: Manufacturer: syz [ 1265.456965][ T9576] usb 4-1: SerialNumber: syz [ 1265.676686][ T9576] usb 4-1: config 0 descriptor?? [ 1265.759772][ T9576] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1265.810704][ T9576] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1265.969314][ T9576] usb 4-1: USB disconnect, device number 29 [ 1266.331933][T17564] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5133'. [ 1266.628986][T17566] netlink: 'syz.4.5134': attribute type 6 has an invalid length. [ 1268.147923][T17585] atomic_op ffff88802539c528 conn xmit_atomic 0000000000000000 [ 1269.661039][T17608] loop6: detected capacity change from 0 to 164 [ 1269.957191][T17608] rock: directory entry would overflow storage [ 1269.964308][T17608] rock: sig=0x4f50, size=4, remaining=3 [ 1269.970153][T17608] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1270.317334][T17618] tipc: Started in network mode [ 1270.322846][T17618] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1270.331519][T17618] tipc: Enabled bearer , priority 0 [ 1271.444366][ T5892] tipc: Node number set to 11578026 [ 1272.047955][T17640] loop6: detected capacity change from 0 to 164 [ 1273.335029][T17662] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5181'. [ 1274.126883][T17675] netlink: 'syz.3.5186': attribute type 4 has an invalid length. [ 1274.136419][T17675] netlink: 'syz.3.5186': attribute type 2 has an invalid length. [ 1275.450093][ T5892] kernel write not supported for file /sysvipc/msg (pid: 5892 comm: kworker/1:5) [ 1276.600268][T17709] lo: entered allmulticast mode [ 1276.617484][T17709] lo: left allmulticast mode [ 1277.164020][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5205'. [ 1277.251787][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5205'. [ 1277.487661][T17722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1278.449285][T17735] loop7: detected capacity change from 0 to 2048 [ 1278.579941][T17735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1279.397320][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1279.404545][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1281.179714][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'. [ 1281.325814][T17771] loop6: detected capacity change from 0 to 256 [ 1281.356444][T17771] exfat: Deprecated parameter 'utf8' [ 1281.362427][T17771] exfat: Deprecated parameter 'utf8' [ 1281.523286][T17771] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 1282.285209][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5242'. [ 1282.850182][T17800] loop7: detected capacity change from 0 to 512 [ 1283.127270][T17800] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.5247: corrupted in-inode xattr: invalid ea_ino [ 1283.254901][T17800] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5247: couldn't read orphan inode 15 (err -117) [ 1283.280518][T17800] EXT4-fs (loop7): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.475300][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5250'. [ 1283.503912][ T5892] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1283.681806][ T5892] usb 4-1: config 0 has no interfaces? [ 1283.687992][ T5892] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1283.697709][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.811654][ T5892] usb 4-1: config 0 descriptor?? [ 1283.837404][T12374] EXT4-fs (loop7): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1284.041463][ T5892] usb 4-1: USB disconnect, device number 30 [ 1284.681298][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5254'. [ 1285.936806][T17836] loop7: detected capacity change from 0 to 256 [ 1285.983666][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5264'. [ 1286.821846][T17849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1286.831723][T17849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1287.114272][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 1288.610833][T17870] loop7: detected capacity change from 0 to 1024 [ 1288.651513][T17870] EXT4-fs: Ignoring removed i_version option [ 1288.715307][T17870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1289.401259][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.333823][ T9576] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1291.530684][ T9576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.544308][ T9576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.559335][ T9576] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1291.568893][ T9576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.607062][ T9576] usb 4-1: config 0 descriptor?? [ 1291.967898][T17917] loop7: detected capacity change from 0 to 2048 [ 1291.970605][T17924] program syz.0.5302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1292.174907][ T9576] steelseries 0003:1038:12B6.0044: item fetching failed at offset 5/7 [ 1292.189183][ T9576] steelseries 0003:1038:12B6.0044: probe with driver steelseries failed with error -22 [ 1292.299095][T17917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1292.427021][ T9576] usb 4-1: USB disconnect, device number 31 [ 1293.723559][T17946] loop7: detected capacity change from 0 to 8 [ 1294.542702][T17951] loop7: detected capacity change from 0 to 8192 [ 1296.037453][T17973] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5325'. [ 1296.047250][T17973] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5325'. [ 1298.448619][T18007] tipc: Enabling of bearer rejected, already enabled [ 1299.037242][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5345'. [ 1299.526646][T18026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5348'. [ 1299.615341][T18025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5348'. [ 1299.638721][T18028] loop7: detected capacity change from 0 to 512 [ 1300.077253][T18028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1300.090911][T18028] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1300.242902][T18028] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1300.301548][T18028] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 28 [ 1300.316781][T18028] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1300.316781][T18028] [ 1300.327734][T18028] EXT4-fs (loop7): Total free blocks count 0 [ 1300.334219][T18028] EXT4-fs (loop7): Free/Dirty block details [ 1300.340407][T18028] EXT4-fs (loop7): free_blocks=39626 [ 1300.346297][T18028] EXT4-fs (loop7): dirty_blocks=1 [ 1300.356337][T18028] EXT4-fs (loop7): Block reservation details [ 1300.363975][T18028] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 1300.818579][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.884979][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5364'. [ 1302.101592][T18064] loop6: detected capacity change from 0 to 512 [ 1302.171473][T18064] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1302.425072][T18064] EXT4-fs (loop6): 1 orphan inode deleted [ 1302.431251][T18064] EXT4-fs (loop6): 1 truncate cleaned up [ 1302.439238][T18064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.493911][T18073] CIFS mount error: No usable UNC path provided in device string! [ 1302.493911][T18073] [ 1302.508378][T18073] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1302.988221][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.148547][T18095] program syz.6.5378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1305.705953][T18121] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1306.651974][T18138] mkiss: ax0: crc mode is auto. [ 1307.455155][T18148] trusted_key: encrypted_key: insufficient parameters specified [ 1307.698316][T18154] loop6: detected capacity change from 0 to 256 [ 1308.625577][T18169] netlink: 'syz.3.5409': attribute type 6 has an invalid length. [ 1309.073913][T18172] team0: Device gtp0 is of different type [ 1309.203397][T18180] fuse: Bad value for 'user_id' [ 1309.208725][T18180] fuse: Bad value for 'user_id' [ 1310.749294][ T52] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1311.302216][T18196] loop7: detected capacity change from 0 to 256 [ 1311.425165][T18196] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1311.480942][T18198] team0: entered promiscuous mode [ 1311.486831][T18198] team_slave_0: entered promiscuous mode [ 1311.494667][T18198] team_slave_1: entered promiscuous mode [ 1311.553766][T18198] team0: Cannot enslave team device to itself [ 1311.563502][ T29] audit: type=1800 audit(1736218155.529:564): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5423" name="file1" dev="loop7" ino=1049026 res=0 errno=0 [ 1311.651260][T18196] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 1311.660106][T18196] exFAT-fs (loop7): Filesystem has been set read-only [ 1312.621341][T18212] loop7: detected capacity change from 0 to 1024 [ 1313.101517][ T3689] hfsplus: b-tree write err: -5, ino 4 [ 1313.374221][T18222] tipc: Invalid UDP bearer configuration [ 1313.374456][T18222] tipc: Enabling of bearer rejected, failed to enable media [ 1313.844697][T18230] netlink: 'syz.4.5441': attribute type 29 has an invalid length. [ 1313.890111][T18230] netlink: 'syz.4.5441': attribute type 29 has an invalid length. [ 1315.727506][T18262] loop6: detected capacity change from 0 to 64 [ 1315.773977][T12390] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1315.951065][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5456'. [ 1315.977181][T18264] gretap0: entered promiscuous mode [ 1316.072767][T18264] gretap0: left promiscuous mode [ 1316.299023][T12390] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.310175][T12390] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1316.320710][T12390] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1316.422844][T12390] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1316.435798][T12390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.445429][T12390] usb 5-1: Product: syz [ 1316.449898][T12390] usb 5-1: Manufacturer: syz [ 1316.454967][T12390] usb 5-1: SerialNumber: syz [ 1316.777139][T12390] cdc_ncm 5-1:1.0: skipping garbage [ 1316.782683][T12390] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1316.790114][T12390] cdc_ncm 5-1:1.0: bind() failure [ 1316.815532][T18274] loop6: detected capacity change from 0 to 512 [ 1316.917102][T14508] usb 5-1: USB disconnect, device number 31 [ 1316.989560][T18274] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5459: bg 0: block 393: padding at end of block bitmap is not set [ 1317.049607][T18274] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1317.108286][T18274] EXT4-fs (loop6): 2 truncates cleaned up [ 1317.116625][T18274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.515901][T11719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.255195][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5479'. [ 1320.289573][T18319] xt_CT: No such helper "netbios-ns" [ 1322.534061][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5496'. [ 1323.667485][T18375] loop6: detected capacity change from 0 to 2048 [ 1323.791896][T18375] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1325.448843][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1325.828981][T18405] loop7: detected capacity change from 0 to 2048 [ 1325.902827][T18405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.005306][T18405] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1326.242022][T12374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.356117][T18416] netlink: 'syz.4.5522': attribute type 29 has an invalid length. [ 1326.429175][T18419] netlink: 'syz.4.5522': attribute type 29 has an invalid length. [ 1328.079657][T18437] devpts: called with bogus options [ 1328.625323][T18442] loop7: detected capacity change from 0 to 1024 [ 1329.003901][ T29] audit: type=1326 audit(1736218172.989:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18453 comm="syz.6.5540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1329.026176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.037625][ T29] audit: type=1326 audit(1736218172.989:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18453 comm="syz.6.5540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1329.059845][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.066652][ T29] audit: type=1326 audit(1736218172.989:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18453 comm="syz.6.5540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=96 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1329.089307][ T29] audit: type=1326 audit(1736218172.989:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18453 comm="syz.6.5540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1329.111512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.118304][ T29] audit: type=1326 audit(1736218172.999:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18453 comm="syz.6.5540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1329.140542][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.977870][T18465] loop6: detected capacity change from 0 to 1024 [ 1330.755934][T18479] loop7: detected capacity change from 0 to 128 [ 1330.894572][T18479] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1331.385240][T18479] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1331.406331][T18479] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.920950][T12374] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1332.724747][T18510] loop7: detected capacity change from 0 to 128 [ 1334.692501][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1335.164689][T18542] mkiss: ax0: crc mode is auto. [ 1335.368715][T18545] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1335.382932][T18545] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1335.947166][T18553] nbd: must specify a device to reconfigure [ 1336.169812][T18555] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1337.917957][T18579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5599'. [ 1340.872853][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.881810][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1342.116635][T18639] loop7: detected capacity change from 0 to 1024 [ 1342.765947][ T3498] hfsplus: b-tree write err: -5, ino 4 [ 1343.229676][T18652] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.5628'. [ 1343.274133][T18650] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.5628'. [ 1343.850025][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1343.860582][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1343.869977][T18663] netlink: 'syz.0.5633': attribute type 12 has an invalid length. [ 1343.882716][T18663] netlink: 'syz.0.5633': attribute type 13 has an invalid length. [ 1348.100592][T18728] netlink: 'syz.4.5664': attribute type 3 has an invalid length. [ 1348.999931][T18743] program syz.7.5670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1350.313695][T18764] loop7: detected capacity change from 0 to 64 [ 1350.875786][ T29] audit: type=1326 audit(1736218194.859:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18766 comm="syz.0.5684" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe0579 code=0x0 [ 1351.217448][T18774] loop7: detected capacity change from 0 to 2048 [ 1351.327747][T18774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1355.687232][T18116] kernel write not supported for file /snd/seq (pid: 18116 comm: kworker/1:1) [ 1357.162622][T18865] overlayfs: lower data-only dirs require metacopy support. [ 1359.715562][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5743'. [ 1360.004032][T18904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5743'. [ 1360.333306][T18116] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1360.504675][T18116] usb 4-1: Using ep0 maxpacket: 8 [ 1360.561083][T18116] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.576127][T18116] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.587500][T18116] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.601033][T18116] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1360.608219][T18116] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1360.612743][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5750'. [ 1360.617686][T18116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.641439][T18915] loop7: detected capacity change from 0 to 1024 [ 1360.845771][T18116] usb 4-1: config 0 descriptor?? [ 1361.036045][ T3498] hfsplus: b-tree write err: -5, ino 4 [ 1361.528360][T18116] hid_mf 0003:0079:1846.0045: unbalanced collection at end of report description [ 1361.543554][T18116] hid_mf 0003:0079:1846.0045: HID parse failed. [ 1361.550380][T18116] hid_mf 0003:0079:1846.0045: probe with driver hid_mf failed with error -22 [ 1361.871505][T18116] usb 4-1: USB disconnect, device number 32 [ 1362.219568][T18936] loop7: detected capacity change from 0 to 1024 [ 1362.289182][T18936] hfsplus: walked past end of dir [ 1362.863795][ T9576] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 1363.231049][ T9576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1363.242820][ T9576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.253630][ T9576] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1363.263167][ T9576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.355661][ T9576] usb 5-1: config 0 descriptor?? [ 1363.515759][T18954] loop7: detected capacity change from 0 to 64 [ 1363.810660][ T9576] aquacomputer_d5next 0003:0C70:F0BD.0046: unknown main item tag 0xe [ 1363.868822][ T9576] aquacomputer_d5next 0003:0C70:F0BD.0046: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 1364.040100][ T9576] usb 5-1: USB disconnect, device number 32 [ 1365.238520][T18976] ipvlan2: entered promiscuous mode [ 1365.997301][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5780'. [ 1366.006850][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5780'. [ 1366.016299][T18988] netlink: 'syz.0.5780': attribute type 12 has an invalid length. [ 1366.924621][T19000] syz_tun: entered allmulticast mode [ 1369.477937][T19034] ===================================================== [ 1369.485651][T19034] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x971/0xb90 [ 1369.493716][T19034] ieee802154_hdr_push+0x971/0xb90 [ 1369.499110][T19034] ieee802154_header_create+0x9bc/0xc70 [ 1369.505246][T19034] dgram_sendmsg+0xd5a/0x15a0 [ 1369.510171][T19034] ieee802154_sock_sendmsg+0x96/0xd0 [ 1369.516167][T19034] __sock_sendmsg+0x30f/0x380 [ 1369.521184][T19034] __sys_sendto+0x594/0x750 [ 1369.526063][T19034] __se_compat_sys_socketcall+0xceb/0x1a20 [ 1369.532605][T19034] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1369.539295][T19034] ia32_sys_call+0x3827/0x4180 [ 1369.544453][T19034] __do_fast_syscall_32+0xb0/0x110 [ 1369.549821][T19034] do_fast_syscall_32+0x38/0x80 [ 1369.555210][T19034] do_SYSENTER_32+0x1f/0x30 [ 1369.559959][T19034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1369.568006][T19034] [ 1369.570662][T19034] Local variable hdr created at: [ 1369.581686][T19034] ieee802154_header_create+0x4e/0xc70 [ 1369.588733][T19034] dgram_sendmsg+0xd5a/0x15a0 [ 1369.594079][T19034] [ 1369.596612][T19034] CPU: 0 UID: 0 PID: 19034 Comm: syz.6.5804 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1369.607842][T19034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1369.618284][T19034] ===================================================== [ 1369.625808][T19034] Disabling lock debugging due to kernel taint [ 1369.632161][T19034] Kernel panic - not syncing: kmsan.panic set ... [ 1369.638759][T19034] CPU: 0 UID: 0 PID: 19034 Comm: syz.6.5804 Tainted: G B 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1369.651252][T19034] Tainted: [B]=BAD_PAGE [ 1369.655535][T19034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1369.665778][T19034] Call Trace: [ 1369.669196][T19034] [ 1369.672264][T19034] dump_stack_lvl+0x216/0x2d0 [ 1369.677199][T19034] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1369.683257][T19034] dump_stack+0x1e/0x24 [ 1369.687662][T19034] panic+0x4e2/0xcf0 [ 1369.691782][T19034] ? kmsan_get_metadata+0x81/0x1c0 [ 1369.697171][T19034] kmsan_report+0x2c7/0x2d0 [ 1369.701906][T19034] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 1369.707973][T19034] ? __msan_warning+0x95/0x120 [ 1369.712992][T19034] ? ieee802154_hdr_push+0x971/0xb90 [ 1369.718549][T19034] ? ieee802154_header_create+0x9bc/0xc70 [ 1369.724488][T19034] ? dgram_sendmsg+0xd5a/0x15a0 [ 1369.729556][T19034] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 1369.735246][T19034] ? __sock_sendmsg+0x30f/0x380 [ 1369.740339][T19034] ? __sys_sendto+0x594/0x750 [ 1369.745215][T19034] ? __se_compat_sys_socketcall+0xceb/0x1a20 [ 1369.751464][T19034] ? __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1369.757618][T19034] ? ia32_sys_call+0x3827/0x4180 [ 1369.762769][T19034] ? __do_fast_syscall_32+0xb0/0x110 [ 1369.768272][T19034] ? do_fast_syscall_32+0x38/0x80 [ 1369.773535][T19034] ? do_SYSENTER_32+0x1f/0x30 [ 1369.778423][T19034] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1369.785240][T19034] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1369.792029][T19034] ? __sys_sendto+0x594/0x750 [ 1369.796917][T19034] ? __se_compat_sys_socketcall+0xceb/0x1a20 [ 1369.803166][T19034] ? __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1369.809335][T19034] ? kmsan_get_metadata+0x13e/0x1c0 [ 1369.814740][T19034] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1369.820801][T19034] ? ieee802154_hdr_push+0x4c/0xb90 [ 1369.826268][T19034] ? filter_irq_stacks+0x60/0x1a0 [ 1369.831545][T19034] ? stack_depot_save_flags+0x2c/0x750 [ 1369.837350][T19034] ? kmsan_get_metadata+0x13e/0x1c0 [ 1369.842763][T19034] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1369.849360][T19034] ? kmsan_get_metadata+0x13e/0x1c0 [ 1369.854764][T19034] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1369.860785][T19034] __msan_warning+0x95/0x120 [ 1369.865627][T19034] ieee802154_hdr_push+0x971/0xb90 [ 1369.871009][T19034] ieee802154_header_create+0x9bc/0xc70 [ 1369.876804][T19034] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1369.883103][T19034] dgram_sendmsg+0xd5a/0x15a0 [ 1369.888039][T19034] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1369.893397][T19034] ieee802154_sock_sendmsg+0x96/0xd0 [ 1369.898946][T19034] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1369.905177][T19034] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1369.911410][T19034] __sock_sendmsg+0x30f/0x380 [ 1369.916351][T19034] __sys_sendto+0x594/0x750 [ 1369.921070][T19034] ? filter_irq_stacks+0x164/0x1a0 [ 1369.926433][T19034] ? stack_depot_save_flags+0x2c/0x750 [ 1369.932242][T19034] __se_compat_sys_socketcall+0xceb/0x1a20 [ 1369.938336][T19034] ? kmsan_get_metadata+0x13e/0x1c0 [ 1369.943746][T19034] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1369.949777][T19034] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1369.955768][T19034] ia32_sys_call+0x3827/0x4180 [ 1369.960744][T19034] __do_fast_syscall_32+0xb0/0x110 [ 1369.966068][T19034] ? irqentry_exit+0x16/0x60 [ 1369.970913][T19034] do_fast_syscall_32+0x38/0x80 [ 1369.976055][T19034] do_SYSENTER_32+0x1f/0x30 [ 1369.980760][T19034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1369.987384][T19034] RIP: 0023:0xf707d579 [ 1369.991638][T19034] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1370.011490][T19034] RSP: 002b:00000000f506e430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1370.020123][T19034] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f506e444 [ 1370.028273][T19034] RDX: 0000000000000000 RSI: 00000000f506e560 RDI: 00000000f73b3ff4 [ 1370.036435][T19034] RBP: 00000000f506e560 R08: 0000000000000000 R09: 0000000000000000 [ 1370.044578][T19034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1370.052727][T19034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1370.060914][T19034] [ 1370.064402][T19034] Kernel Offset: disabled [ 1370.068822][T19034] Rebooting in 86400 seconds..