last executing test programs: 7.270988339s ago: executing program 4 (id=7423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b8008"], 0x184}}, 0x0) 6.386677006s ago: executing program 4 (id=7427): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000000280)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@rodir}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_winnt}, {@utf8no}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/154, 0x9a) 6.268234975s ago: executing program 2 (id=7428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x40, 0x0, 0x0, 0x0, {[@generic={0x4, 0x3, "a4"}]}}}}}}}, 0x0) 5.321627735s ago: executing program 2 (id=7432): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="5825be57aff935e67ca2746357d1787935589db15a23319e3f64fdf5f88b2078", 0x20}], 0x1}}], 0x1, 0x840) 5.171092318s ago: executing program 4 (id=7433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.480869534s ago: executing program 2 (id=7436): syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559000905"], 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) 4.474415828s ago: executing program 1 (id=7437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b8008"], 0x184}}, 0x0) 4.44771545s ago: executing program 4 (id=7438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001000)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 4.290677932s ago: executing program 3 (id=7439): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 3.799474877s ago: executing program 0 (id=7440): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r0) 3.775345906s ago: executing program 1 (id=7441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080008000000fe001800018014000200776c616e31000000000000000000000008000900000000"], 0x3c}}, 0x0) 3.68019353s ago: executing program 4 (id=7442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r1, 0x483, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008885}, 0x4) 3.460181382s ago: executing program 3 (id=7443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0xc004) 3.004766117s ago: executing program 0 (id=7444): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 2.881995043s ago: executing program 4 (id=7445): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x20, 0xa, 0x8, {0x8, 0x9, "824037661b11"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.352639977s ago: executing program 0 (id=7446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.352524481s ago: executing program 1 (id=7447): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_helper', 0x882, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x5df5) 2.343806165s ago: executing program 3 (id=7448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000200003801c000380180001800a0002007770616e30000000070001000400000018000180140002007665746830"], 0x4c}}, 0x880) 1.953871019s ago: executing program 1 (id=7449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x90}}, 0x0) 1.903564402s ago: executing program 2 (id=7450): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x400, 0x0, 0x0, "4feda26323b172e0"}) 1.854803457s ago: executing program 0 (id=7451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 1.75294703s ago: executing program 3 (id=7452): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000140)=""/4085, 0xff5}, {&(0x7f0000001600)=""/4092, 0xffc}, {&(0x7f0000004700)=""/4110, 0x100e}], 0x3}, 0x40012022) 1.298604621s ago: executing program 0 (id=7453): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x21b, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb, 0xb}}, 0x0) 987.268829ms ago: executing program 1 (id=7454): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) close(r0) 783.820409ms ago: executing program 3 (id=7455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) 763.483429ms ago: executing program 2 (id=7465): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3}) read(r0, &(0x7f00000000c0)=""/212, 0xd4) 332.6128ms ago: executing program 1 (id=7456): mknod(&(0x7f0000000700)='./file1\x00', 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f61636c2c757365725f786174747200000000000000000000000000003c3e46dd000000000000"], 0x1, 0x18a, &(0x7f0000000440)="$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") mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='smb3\x00', 0x0, &(0x7f0000000400)) 302.772174ms ago: executing program 0 (id=7467): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000640)='./file0\x00', 0x800000, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "33fefa37"}}, {@force}, {@uid}, {@creator={'creator', 0x3d, "d1a7bc99"}}, {@nobarrier}, {@gid}, {}, {@uid}, {@nobarrier}, {@nobarrier}, {@nodecompose}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x4, 0x5f0, &(0x7f0000001980)="$eJzs3cFvHFcdB/DvbGLHDlK6TZOmIARWOYAakdjeyAQJCSgFWahClbj0aiWb2somjewtcntApuLc/gvlYM4cOKEg5cCZf8GoRwR3X5DRzM7aW3u7cRInu1Y+H2n2vTdv5s1vfpkZz8wq2gAvreX3M/UoRZavvrtZtne2W52d7da9fj3JuSSNZCZJUc7+a5Ivk630pnyz3zFQHlF8vnxr9eFnV3qtmXqqli9GrXc8+7E0e7FW5UmNt/jM4x3s4VySi3UJY7fX96+h3c94XgIAk6xIzgyb30zO1zfr5XNA7664d499qm2NOwAAAAB4AV7ZzW42c2HccQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1FPjX59LkX/9/+n63mp66fao3EHAAAAAAAAAADHNOpL+u/uZjebudBv7xXVd/5vVo1L1ec38lE20s56rmUzK+mmm/UsJGkObmRzpdtdXzjGmotD11w82X0GAAAAAAAAgJfMp1k++P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmQZGc6RXVdKlfb6ZxNslMkulyua3kYb9+mj0adwAAAADwAryym91s5kK/vVdUz/yvV8/9M/ko99PNWrrppJ3b1buA3lN/Y2e71dnZbt0rp6Pj/vy/TxRGNWJ67x6Gb3m+WuLy/hrL+VV+m6tT/fbvspJu2pnLO1VtJUWa9duLZj/O4fH+7Cut9x4X6xtVJLO5k7Uqtmu5lQ/Tye00qn2olhm9xT+U2Sl+Wjtmjm7XZblHv67Lcfjf3uE5zSojU/sZma9zX2bj1dGZGHmcTB2Zc3hLC2nsv4O69Bxyfr4uy1y/85xz/ukTLX04E4sDR9/rozORzC/+58Fq5/7d1TsbV8d1GJ2Yw5loDWTiykuViek6G72r6JCrZebyXtazNuRq+Wa17oWs5Tf5MLfTzs3M52aWciOtLOXHWRrI6+W94rHnWuPJzrXv/aCulGf9L4ee/eNS5vXVgbwOXumaVd/gnIMsXTz5K9LZb9WV8mB9e4x/BY46nImFgUy8NjoTf6r+pGx07t9dX115cMztfb8uywz8YqIyUR4vF8t/rKr11aOj7HttaN9C1Xdpv69xpO/yft/jztTp+h7u6EiLVd+VoX2tqu+Ngb5hdzkATLzzb52fnv337D9nv5j94+zq7Lszb5+7ee7b05n6x9m/nflL48+NnxRv5Yv8/uD5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHobH39yd6XTaa9PdOU7dbSTEo/K01WylUxAGCrHqIz5wgQ8d9e79x5c3/j4kx+u3Vv5oP1B+/6NhaXFGzfml3508/qdtU57vvc57jABgBM08GwGAAAAAAAAAAAAAABMqBfyv74BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeo+X3M/UoRRbmr82X7Z3tVqec+vUkRW/JmX7170m+TLbSm9IcGK74uu0Uny/fWn342ZWDsWb6yxej1jue/VjKj8ahmJ5lvHKcxWce72AP55JcrEsYu/8HAAD//4EQ/90=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 144.743527ms ago: executing program 2 (id=7457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) 0s ago: executing program 3 (id=7458): unshare(0x20040600) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0xf, &(0x7f0000000280)=0x8556d616a06ff02b) kernel console output (not intermixed with test programs): 9052][T11167] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1058.829604][T11167] usb 2-1: config 1 has no interface number 0 [ 1058.836246][T11167] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.917284][T11167] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1058.926999][T11167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.935605][T11167] usb 2-1: Product: syz [ 1058.940060][T11167] usb 2-1: Manufacturer: syz [ 1058.945209][T11167] usb 2-1: SerialNumber: syz [ 1059.054449][T11167] usb 2-1: selecting invalid altsetting 1 [ 1059.485523][T11167] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1059.492969][T11167] cdc_ncm 2-1:1.1: bind() failure [ 1059.582862][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4677'. [ 1059.585740][T11167] usb 2-1: USB disconnect, device number 16 [ 1059.604294][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1059.918768][T15880] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1059.926527][T15880] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1059.935652][T15880] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1063.407473][ T30] audit: type=1326 audit(2000000423.160:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1063.430783][ T30] audit: type=1326 audit(2000000423.160:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1065.092063][T15953] openvswitch: netlink: Tunnel attr 16 has unexpected len 596 expected 0 [ 1065.935359][T15967] netlink: 'syz.3.4723': attribute type 1 has an invalid length. [ 1065.943706][T15967] netlink: 'syz.3.4723': attribute type 2 has an invalid length. [ 1065.952184][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1067.428590][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4734'. [ 1068.854807][T16009] loop2: detected capacity change from 0 to 2048 [ 1069.033730][T16011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1069.043893][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1069.109213][T16009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1069.882032][T16023] netlink: 'syz.3.4751': attribute type 2 has an invalid length. [ 1070.140299][T16027] ieee802154 phy0 wpan0: encryption failed: -22 [ 1070.531828][T16031] netlink: 'syz.1.4754': attribute type 6 has an invalid length. [ 1070.880830][ T9585] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1071.091982][ T9585] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1071.100878][ T9585] usb 4-1: config 0 has no interface number 0 [ 1071.107371][ T9585] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1071.119428][ T9585] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1071.133551][ T9585] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1071.140981][ T9585] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1071.150787][ T9585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.254293][T16045] xt_time: unknown flags 0xf0 [ 1071.308669][ T9585] usb 4-1: config 0 descriptor?? [ 1071.351921][ T9585] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 1071.582863][ T9585] usb 4-1: USB disconnect, device number 18 [ 1072.562211][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4769'. [ 1073.399598][T16075] xt_hashlimit: max too large, truncated to 1048576 [ 1074.571004][T16092] loop3: detected capacity change from 0 to 256 [ 1076.051343][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 1077.521704][T16133] netlink: 'syz.1.4805': attribute type 21 has an invalid length. [ 1077.529924][T16133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4805'. [ 1077.648305][T16132] loop3: detected capacity change from 0 to 512 [ 1077.652950][T16137] program syz.4.4806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1077.701378][T16137] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1077.754491][T16132] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1077.793888][T16132] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1077.896859][T16132] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1077.913939][T16132] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1077.995335][T16132] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1078.082044][T16132] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4804: bg 0: block 40: padding at end of block bitmap is not set [ 1078.169627][T16132] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1078.221302][T16132] EXT4-fs (loop3): 1 truncate cleaned up [ 1078.229390][T16132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1078.314512][T16132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.780975][T16194] netlink: 'syz.0.4832': attribute type 9 has an invalid length. [ 1081.789220][T16194] netlink: 'syz.0.4832': attribute type 7 has an invalid length. [ 1081.797542][T16194] netlink: 'syz.0.4832': attribute type 8 has an invalid length. [ 1081.846599][T16196] CIFS mount error: No usable UNC path provided in device string! [ 1081.846599][T16196] [ 1081.857598][T16196] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1081.893016][T16197] autofs4:pid:16197:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 1081.906785][T16197] autofs4:pid:16197:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 1082.957485][T16211] loop1: detected capacity change from 0 to 8 [ 1083.102186][T16211] SQUASHFS error: Failed to read block 0x4de: -5 [ 1083.109607][T16211] SQUASHFS error: Failed to read block 0x4de: -5 [ 1083.117301][T16211] SQUASHFS error: Failed to read block 0x4de: -5 [ 1083.124776][T16211] SQUASHFS error: Failed to read block 0x4de: -5 [ 1083.132188][T16211] SQUASHFS error: Failed to read block 0x4de: -5 [ 1083.152817][ T30] audit: type=1800 audit(2000000442.900:105): pid=16211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4841" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1083.299201][T16215] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.4843'. [ 1085.030923][T11167] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1085.210878][T11167] usb 4-1: Using ep0 maxpacket: 8 [ 1085.264679][T11167] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1085.274606][T11167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.283177][T11167] usb 4-1: Product: syz [ 1085.287806][T11167] usb 4-1: Manufacturer: syz [ 1085.292938][T11167] usb 4-1: SerialNumber: syz [ 1085.371667][T11167] usb 4-1: config 0 descriptor?? [ 1085.397887][T11167] gspca_main: se401-2.14.0 probing 047d:5003 [ 1085.633633][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1085.863293][T11167] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1085.871545][T11167] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 1085.983877][T11167] usb 4-1: USB disconnect, device number 19 [ 1086.276539][T16255] xfrm0: entered promiscuous mode [ 1086.282403][T16255] xfrm0: entered allmulticast mode [ 1086.319180][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 1086.325699][ T9] syz0: Port: 1 Link DOWN [ 1086.972094][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1087.817479][T16275] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1087.992336][T16279] netlink: 'syz.4.4875': attribute type 1 has an invalid length. [ 1089.427947][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1089.881104][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.888038][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1091.576618][T16329] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1092.373091][T16341] netlink: 'syz.2.4905': attribute type 1 has an invalid length. [ 1092.381746][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1092.391703][T16341] netlink: 'syz.2.4905': attribute type 1 has an invalid length. [ 1093.522923][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4913'. [ 1093.532825][T16356] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 1093.540286][T16356] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 1093.549023][T16356] bridge0: port 3(netdevsim3) entered disabled state [ 1093.642083][T16356] bridge_slave_1: left allmulticast mode [ 1093.648298][T16356] bridge_slave_1: left promiscuous mode [ 1093.655520][T16356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.752794][T16356] bridge_slave_0: left allmulticast mode [ 1093.758788][T16356] bridge_slave_0: left promiscuous mode [ 1093.765984][T16356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.304900][T11167] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1096.482261][T16399] netlink: 'syz.3.4934': attribute type 29 has an invalid length. [ 1096.552614][T11167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1096.563452][T11167] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1096.573972][T11167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1096.584177][T11167] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1096.747358][T11167] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1096.757081][T11167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.766092][T11167] usb 3-1: Product: syz [ 1096.770897][T11167] usb 3-1: Manufacturer: syz [ 1096.776156][T11167] usb 3-1: SerialNumber: syz [ 1096.858548][T16405] CIFS mount error: No usable UNC path provided in device string! [ 1096.858548][T16405] [ 1096.870006][T16405] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1096.903925][T11167] usb 3-1: config 0 descriptor?? [ 1096.967054][T11167] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1097.229258][T11167] scsi host1: usb-storage 3-1:0.0 [ 1097.314098][T11167] usb 3-1: USB disconnect, device number 13 [ 1097.815968][T16418] netlink: 'syz.3.4942': attribute type 4 has an invalid length. [ 1097.824410][T16418] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4942'. [ 1101.016071][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1101.331213][T11167] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1101.532573][T11167] usb 3-1: Using ep0 maxpacket: 8 [ 1101.540975][T16469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4967'. [ 1101.599162][T11167] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1101.607964][T11167] usb 3-1: config 0 has no interface number 0 [ 1101.656718][T11167] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1101.666658][T11167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.675429][T11167] usb 3-1: Product: syz [ 1101.679959][T11167] usb 3-1: Manufacturer: syz [ 1101.685143][T11167] usb 3-1: SerialNumber: syz [ 1101.753972][T11167] usb 3-1: config 0 descriptor?? [ 1102.031509][T11167] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1102.038571][T11167] usb 3-1: No valid video chain found. [ 1102.115217][T11167] usb 3-1: USB disconnect, device number 14 [ 1103.559430][T16495] loop1: detected capacity change from 0 to 512 [ 1103.743986][T16501] CIFS mount error: No usable UNC path provided in device string! [ 1103.743986][T16501] [ 1103.755666][T16501] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1103.774214][T16495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.787708][T16495] ext4 filesystem being mounted at /990/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.966389][T16495] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.4980: corrupted inode contents [ 1104.016784][T16495] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #2: comm syz.1.4980: mark_inode_dirty error [ 1104.070024][T16495] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.4980: corrupted inode contents [ 1104.131322][T16495] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4980: mark_inode_dirty error [ 1104.561441][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.971700][T16519] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1107.210427][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5005'. [ 1108.619823][T16573] tmpfs: Bad value for 'mpol' [ 1109.374914][T16585] netlink: 'syz.0.5021': attribute type 2 has an invalid length. [ 1109.946135][T16591] netlink: 'syz.2.5024': attribute type 11 has an invalid length. [ 1112.673657][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5044'. [ 1113.608075][T16647] loop3: detected capacity change from 0 to 512 [ 1113.683134][T16647] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.5051: bad orphan inode 13 [ 1113.734818][T16647] ext4_test_bit(bit=12, block=4) = 1 [ 1113.741399][T16647] is_bad_inode(inode)=0 [ 1113.745895][T16647] NEXT_ORPHAN(inode)=0 [ 1113.750197][T16647] max_ino=32 [ 1113.754081][T16647] i_nlink=1 [ 1113.759631][T16647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.879185][T16647] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.5051: Unrecognised inode hash code 20 [ 1113.891926][T16647] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5051: Corrupt directory, running e2fsck is recommended [ 1113.976029][T16647] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.5051: Unrecognised inode hash code 20 [ 1113.990801][T16647] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5051: Corrupt directory, running e2fsck is recommended [ 1114.081426][T16649] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1114.290170][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.035988][T16668] openvswitch: netlink: IP tunnel dst address not specified [ 1115.508532][T16674] netlink: 'syz.3.5063': attribute type 10 has an invalid length. [ 1115.517118][T16674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5063'. [ 1115.526758][T16674] dummy0: entered promiscuous mode [ 1115.532407][T16674] dummy0: entered allmulticast mode [ 1115.541792][T16674] bridge0: port 3(dummy0) entered blocking state [ 1115.548794][T16674] bridge0: port 3(dummy0) entered disabled state [ 1115.562884][T16674] bridge0: port 3(dummy0) entered blocking state [ 1115.570003][T16674] bridge0: port 3(dummy0) entered forwarding state [ 1116.027775][T16682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1116.037622][T16682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1116.369974][T16688] Sensor A: ================= START STATUS ================= [ 1116.378485][T16688] Sensor A: Test Pattern: 75% Colorbar [ 1116.384904][T16688] Sensor A: Show Information: All [ 1116.390374][T16688] Sensor A: Vertical Flip: false [ 1116.396102][T16688] Sensor A: Horizontal Flip: true [ 1116.401736][T16688] Sensor A: Brightness: 128 [ 1116.406672][T16688] Sensor A: Contrast: 128 [ 1116.411838][T16688] Sensor A: Hue: 0 [ 1116.416043][T16688] Sensor A: Saturation: 128 [ 1116.421123][T16688] Sensor A: ================== END STATUS ================== [ 1118.189513][T16713] openvswitch: netlink: Message has 12 unknown bytes. [ 1119.326603][T16731] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1120.040993][T16740] loop1: detected capacity change from 0 to 512 [ 1121.281735][T16756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5102'. [ 1123.031508][T16780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5114'. [ 1123.443932][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5118'. [ 1123.868821][T16792] loop1: detected capacity change from 0 to 512 [ 1123.993462][T16792] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1124.002545][T16792] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1124.081277][T16792] EXT4-fs (loop1): 1 truncate cleaned up [ 1124.089673][T16792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.115737][T16792] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 4: comm syz.1.5120: lblock 0 mapped to illegal pblock 4 (length 1) [ 1124.153274][T16792] EXT4-fs (loop1): Remounting filesystem read-only [ 1124.525102][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.822989][T16820] tracefs: Unknown parameter 'gi' [ 1126.371370][T16824] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5134'. [ 1127.042417][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5140'. [ 1131.842461][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5175'. [ 1131.963651][T16904] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1131.978394][T16904] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1131.986991][T16904] gretap3: entered promiscuous mode [ 1131.992757][T16904] gretap3: entered allmulticast mode [ 1132.813792][T16914] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1133.772543][T16932] netlink: 'syz.4.5189': attribute type 12 has an invalid length. [ 1133.781948][T16932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5189'. [ 1134.220990][T16937] netlink: 'syz.0.5192': attribute type 1 has an invalid length. [ 1134.229179][T16937] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5192'. [ 1136.041472][ T9585] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1136.274045][ T9585] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1136.282707][ T9585] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.293685][ T9585] usb 1-1: config 0 has no interface number 0 [ 1136.300140][ T9585] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1136.312440][ T9585] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1136.323955][ T9585] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1136.334235][ T9585] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1136.347862][ T9585] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1136.588404][ T9585] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1136.598308][ T9585] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1136.607215][ T9585] usb 1-1: Product: syz [ 1136.611821][ T9585] usb 1-1: SerialNumber: syz [ 1136.750334][ T9585] usb 1-1: config 0 descriptor?? [ 1137.228562][ T9585] usb 1-1: USB disconnect, device number 15 [ 1140.236578][T17014] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1141.112730][T17027] netlink: 'syz.1.5236': attribute type 1 has an invalid length. [ 1141.121584][T17027] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5236'. [ 1142.998272][T17054] loop2: detected capacity change from 0 to 256 [ 1143.243971][T17054] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 1144.765658][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5259'. [ 1145.073094][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5261'. [ 1145.114396][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1146.881368][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5274'. [ 1147.351003][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5277'. [ 1148.613808][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5286'. [ 1148.861887][T17135] openvswitch: netlink: IP tunnel dst address not specified [ 1149.273326][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5291'. [ 1150.322154][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5298'. [ 1150.898324][T17162] usb usb8: usbfs: process 17162 (syz.1.5302) did not claim interface 0 before use [ 1150.909135][T17162] usb usb8: selecting invalid altsetting 1150 [ 1151.193864][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5304'. [ 1151.331728][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.338505][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1152.009912][T17180] netlink: 'syz.4.5311': attribute type 32 has an invalid length. [ 1153.927621][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5324'. [ 1154.061456][T17205] 8: entered promiscuous mode [ 1154.782074][T17216] tmpfs: Bad value for 'mpol' [ 1155.672181][T17229] loop3: detected capacity change from 0 to 24 [ 1156.252629][T17237] xt_hashlimit: invalid rate [ 1157.716667][T17257] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5349'. [ 1157.724051][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5348'. [ 1157.726227][T17257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5349'. [ 1158.412837][T17264] xt_TCPMSS: Only works on TCP SYN packets [ 1158.770122][T17269] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1159.585854][T17281] xfrm2: entered allmulticast mode [ 1160.382585][T17292] netlink: 'syz.1.5366': attribute type 1 has an invalid length. [ 1160.938515][T17298] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5369'. [ 1161.107235][T17302] @0Ù: renamed from bond_slave_1 (while UP) [ 1162.474825][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5379'. [ 1163.108445][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5384'. [ 1163.428674][T17332] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5386'. [ 1163.903233][T17338] loop3: detected capacity change from 0 to 512 [ 1164.075747][T17338] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1164.178473][T17338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5389: bg 0: block 248: padding at end of block bitmap is not set [ 1164.196510][T17338] Quota error (device loop3): write_blk: dquota write failed [ 1164.204884][T17338] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1164.215627][T17338] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5389: Failed to acquire dquot type 1 [ 1164.234306][T17338] EXT4-fs (loop3): 1 truncate cleaned up [ 1164.250255][T17338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1164.673410][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.092749][T17351] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1167.185992][T17381] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1168.498031][T17401] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1170.943101][T17437] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1172.851579][T17461] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.147022][T17465] usb usb6: usbfs: process 17465 (syz.3.5450) did not claim interface 2 before use [ 1174.263941][T17479] xt_bpf: check failed: parse error [ 1174.878646][T17487] loop1: detected capacity change from 0 to 256 [ 1174.926121][T17487] exfat: Deprecated parameter 'utf8' [ 1175.080634][T17487] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1176.021857][T17505] loop3: detected capacity change from 0 to 512 [ 1176.254193][T17505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.268602][T17505] ext4 filesystem being mounted at /1082/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.754270][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.893484][T17518] netlink: 'syz.1.5474': attribute type 1 has an invalid length. [ 1176.903131][T17518] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1178.079633][T17536] netlink: 'syz.0.5483': attribute type 10 has an invalid length. [ 1178.700086][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5485'. [ 1178.747151][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5486'. [ 1179.111863][T17547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5489'. [ 1179.122294][T17547] tc_dump_action: action bad kind [ 1179.131882][T17548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1180.441428][ T30] audit: type=1326 audit(2000000540.190:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.5497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1180.561443][ T30] audit: type=1326 audit(2000000540.240:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.5497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1180.584489][ T30] audit: type=1326 audit(2000000540.240:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.5497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1180.607480][ T30] audit: type=1326 audit(2000000540.240:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.5497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1181.282040][T17578] netlink: 'syz.3.5504': attribute type 30 has an invalid length. [ 1183.877014][T17613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1185.135675][T17632] tmpfs: Bad value for 'mpol' [ 1186.486332][T17652] netlink: 'syz.3.5540': attribute type 1 has an invalid length. [ 1186.495337][T17652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1187.958323][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5548'. [ 1188.690716][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5554'. [ 1188.813919][T17682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5555'. [ 1188.852832][T17683] x_tables: duplicate underflow at hook 2 [ 1189.557995][T17690] netlink: 'syz.4.5558': attribute type 1 has an invalid length. [ 1190.792213][T17706] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1193.092310][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1194.600935][T11167] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1194.629532][T17757] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1194.806052][T11167] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1194.818321][T11167] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1194.831038][T11167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 1194.842803][T11167] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.019461][T11167] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1195.029292][T11167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.037958][T11167] usb 2-1: Product: syz [ 1195.042659][T11167] usb 2-1: Manufacturer: syz [ 1195.047577][T11167] usb 2-1: SerialNumber: syz [ 1195.164227][T11167] usb 2-1: config 0 descriptor?? [ 1195.225300][T11167] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 1195.256510][T17764] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 1195.327426][T17766] netlink: 'syz.3.5597': attribute type 21 has an invalid length. [ 1195.643500][ T9585] usb 2-1: USB disconnect, device number 17 [ 1197.571529][T17791] netlink: 'syz.4.5609': attribute type 2 has an invalid length. [ 1199.954917][T17823] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1200.950819][T17840] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1201.642934][T17846] loop1: detected capacity change from 0 to 256 [ 1201.731371][T17846] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1201.824358][T17846] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1202.281167][T11167] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1202.529616][T11167] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1202.541914][T11167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.550262][T11167] usb 3-1: Product: syz [ 1202.556230][T11167] usb 3-1: Manufacturer: syz [ 1202.561325][T11167] usb 3-1: SerialNumber: syz [ 1202.642633][T11167] usb 3-1: config 0 descriptor?? [ 1203.197734][T11167] usb 3-1: f81604_write: reg: 105 data: cb failed: -EPROTO [ 1203.205950][T11167] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1203.214376][T11167] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1203.321370][T11167] usb 3-1: USB disconnect, device number 15 [ 1205.767984][T17888] loop2: detected capacity change from 0 to 1024 [ 1205.993756][T17888] hfsplus: invalid catalog entry type in lookup [ 1207.262545][T17908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5665'. [ 1208.278792][T17922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1208.281861][T17924] libceph: resolve '400' (ret=-3): failed [ 1208.453503][T17928] netlink: 'syz.4.5673': attribute type 1 has an invalid length. [ 1208.462155][T17928] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5673'. [ 1208.679938][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5672'. [ 1210.637186][ T30] audit: type=1326 audit(2000000570.390:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1210.660266][ T30] audit: type=1326 audit(2000000570.390:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1212.162745][T17974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1212.172764][ T9] IPVS: starting estimator thread 0... [ 1212.281715][T17976] IPVS: using max 240 ests per chain, 12000 per kthread [ 1212.757518][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.765734][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1214.412394][T18002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1214.421997][T18002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1214.571719][T18004] program syz.3.5704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1216.010203][T18023] dlm: no local IP address has been set [ 1216.016449][T18023] dlm: cannot start dlm midcomms -107 [ 1218.161387][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1218.421218][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1218.430996][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.439328][ T9] usb 5-1: Product: syz [ 1218.443987][ T9] usb 5-1: Manufacturer: syz [ 1218.448860][ T9] usb 5-1: SerialNumber: syz [ 1218.546717][ T9] usb 5-1: config 0 descriptor?? [ 1218.834978][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1219.088820][ T9] usb 5-1: USB disconnect, device number 10 [ 1221.111836][T18087] xt_hashlimit: max too large, truncated to 1048576 [ 1221.118822][T18087] xt_hashlimit: overflow, try lower: 0/0 [ 1222.921919][T18106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5756'. [ 1222.931492][T18106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5756'. [ 1223.143630][T18110] block device autoloading is deprecated and will be removed. [ 1224.591907][T18128] netlink: 'syz.1.5766': attribute type 3 has an invalid length. [ 1226.371746][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5775'. [ 1227.911157][T18174] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1228.712597][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5789'. [ 1229.399077][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5792'. [ 1230.867260][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5804'. [ 1231.592021][T18221] kAFS: No cell specified [ 1233.685908][T18250] netlink: 'syz.4.5820': attribute type 32 has an invalid length. [ 1233.694332][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5820'. [ 1233.703943][T18250] netlink: 'syz.4.5820': attribute type 32 has an invalid length. [ 1234.223268][T18253] loop2: detected capacity change from 0 to 2048 [ 1234.473146][T18261] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1234.581976][T18262] netlink: 'syz.4.5825': attribute type 2 has an invalid length. [ 1238.080909][ T37] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1238.303595][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 1238.337011][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1238.348600][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1238.359060][ T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1238.369525][ T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 92 [ 1238.386156][ T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1238.395837][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.584448][ T37] usb 3-1: config 0 descriptor?? [ 1238.600376][T18302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1239.304084][ T37] usb 3-1: USB disconnect, device number 16 [ 1239.317200][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 1241.500690][ T30] audit: type=1326 audit(2000000601.260:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18342 comm="syz.0.5864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1241.662289][ T30] audit: type=1326 audit(2000000601.290:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18342 comm="syz.0.5864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1241.685352][ T30] audit: type=1326 audit(2000000601.290:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18342 comm="syz.0.5864" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1242.254888][T18351] NILFS (nullb0): couldn't find nilfs on the device [ 1247.156560][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5895'. [ 1248.099024][T18434] loop2: detected capacity change from 0 to 128 [ 1250.236412][T18460] loop0: detected capacity change from 0 to 1024 [ 1251.214938][T18471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1251.225222][T18471] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1252.432008][T18490] netlink: 'syz.2.5924': attribute type 7 has an invalid length. [ 1252.440202][T18490] netlink: 'syz.2.5924': attribute type 8 has an invalid length. [ 1258.772431][T18574] openvswitch: netlink: Duplicate key (type 16). [ 1261.141744][T18606] netlink: 'syz.0.5973': attribute type 64 has an invalid length. [ 1261.150020][T18606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5973'. [ 1261.568102][T18610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5975'. [ 1262.711772][T18626] dlm: non-version read from control device 0 [ 1263.127349][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1263.899586][T18641] netlink: 'syz.2.5991': attribute type 2 has an invalid length. [ 1264.542773][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'. [ 1264.553809][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'. [ 1264.563329][T18646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1264.572307][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5992'. [ 1264.672034][T18649] netlink: 'syz.4.5994': attribute type 7 has an invalid length. [ 1264.680095][T18649] netlink: 'syz.4.5994': attribute type 5 has an invalid length. [ 1264.688537][T18649] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5994'. [ 1265.262091][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5998'. [ 1267.512231][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6012'. [ 1267.641226][T18687] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1267.950288][T18689] netlink: 'syz.1.6015': attribute type 10 has an invalid length. [ 1267.959001][T18689] macvtap0: entered promiscuous mode [ 1267.970240][T18689] batman_adv: batadv0: Adding interface: macvtap0 [ 1267.977150][T18689] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.003370][T18689] batman_adv: batadv0: Interface activated: macvtap0 [ 1268.419810][ T30] audit: type=1326 audit(2000000628.180:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.6018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1268.443424][ T30] audit: type=1326 audit(2000000628.180:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.6018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1270.422615][T18722] netlink: 'syz.0.6032': attribute type 12 has an invalid length. [ 1271.134385][T18733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1274.193897][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.203533][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.995064][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1275.005175][T18786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1275.018485][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1275.031148][T18786] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1275.042647][T18786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1275.821124][T18796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1275.830830][T18796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1275.873107][T18797] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1276.650768][T18807] trusted_key: encrypted_key: master key parameter '' is invalid [ 1278.309852][T18832] overlayfs: missing 'lowerdir' [ 1279.035482][T18842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.167083][T18856] loop2: detected capacity change from 0 to 64 [ 1280.292209][T18858] netlink: 'syz.4.6097': attribute type 10 has an invalid length. [ 1280.300860][T18858] ipvlan1: entered promiscuous mode [ 1280.307376][T18858] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1280.320328][T18858] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 1280.332199][T18858] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 1281.005027][T18864] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1281.769679][T18877] netlink: 'syz.0.6105': attribute type 21 has an invalid length. [ 1281.778222][T18877] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6105'. [ 1281.788042][T18877] netlink: 'syz.0.6105': attribute type 4 has an invalid length. [ 1281.796299][T18877] netlink: 'syz.0.6105': attribute type 5 has an invalid length. [ 1281.804540][T18877] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6105'. [ 1282.758378][T18892] loop2: detected capacity change from 0 to 16 [ 1282.822377][T18892] erofs (device loop2): mounted with root inode @ nid 36. [ 1282.921797][T18892] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1282.976884][T18892] erofs (device loop2): read error -117 @ 43 of nid 36 [ 1283.307064][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6117'. [ 1284.061994][T18908] loop1: detected capacity change from 0 to 16 [ 1284.111912][T18908] erofs (device loop1): mounted with root inode @ nid 36. [ 1284.124185][T18910] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1284.205996][ T5810] erofs (device loop1): failed to decompress -26 in[46, 0] out[9000] [ 1284.226384][T18908] erofs (device loop1): failed to decompress -26 in[46, 4050] out[8192] [ 1284.235721][T18908] erofs (device loop1): read error -117 @ 0 of nid 89 [ 1284.251618][ T30] audit: type=1800 audit(2000000644.010:117): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6121" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1286.050903][ T37] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1286.171529][ T5810] Bluetooth: hci4: command tx timeout [ 1286.258773][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 1286.272695][T18935] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 1286.332886][ T37] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1286.342610][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.351180][ T37] usb 4-1: Product: syz [ 1286.355634][ T37] usb 4-1: Manufacturer: syz [ 1286.360837][ T37] usb 4-1: SerialNumber: syz [ 1286.402172][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'. [ 1286.467804][ T37] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1286.476035][ T37] r8152-cfgselector 4-1: config 0 descriptor?? [ 1287.003364][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6139'. [ 1287.047530][ T37] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 1288.331869][T18959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6147'. [ 1290.312699][T18984] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1291.531863][T18999] binder: 18997:18999 ioctl c018620c 0 returned -14 [ 1291.703757][T19004] loop0: detected capacity change from 0 to 164 [ 1291.880015][T19004] rock: directory entry would overflow storage [ 1291.887834][T19004] rock: sig=0x4f50, size=4, remaining=3 [ 1291.898118][T19004] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1292.405156][T19013] loop2: detected capacity change from 0 to 16 [ 1292.491916][T19013] erofs (device loop2): mounted with root inode @ nid 36. [ 1292.615340][ T5810] erofs (device loop2): failed to decompress -26 in[46, 0] out[9000] [ 1292.625663][T19013] erofs (device loop2): failed to decompress -26 in[46, 4050] out[8192] [ 1292.634972][T19013] erofs (device loop2): read error -117 @ 0 of nid 89 [ 1292.643641][ T30] audit: type=1800 audit(2000000652.410:118): pid=19013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6173" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1293.742835][T19028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6179'. [ 1295.416496][T19049] xfrm0 speed is unknown, defaulting to 1000 [ 1298.511690][T19083] cgroup: Name too long [ 1300.281455][T19104] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6215'. [ 1303.256841][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1303.628477][T19150] netlink: 12320 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1304.752159][T19164] netlink: 'syz.4.6245': attribute type 3 has an invalid length. [ 1304.943582][T19166] loop2: detected capacity change from 0 to 1024 [ 1305.328406][T19171] binder: 19170:19171 ioctl c00c6211 0 returned -14 [ 1306.259738][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1310.190798][T19238] netlink: 'syz.2.6281': attribute type 4 has an invalid length. [ 1310.697061][T19240] loop3: detected capacity change from 0 to 1024 [ 1311.013712][T19248] loop2: detected capacity change from 0 to 512 [ 1311.119195][T19248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1311.324428][T19248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.340159][T19248] ext4 filesystem being mounted at /1255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.727416][T19257] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1311.791687][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.072804][T19259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6290'. [ 1312.481209][T19259] Zero length message leads to an empty skb [ 1313.022849][T19262] loop0: detected capacity change from 0 to 4096 [ 1313.507300][T19262] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1313.884523][T19278] netlink: 'syz.2.6299': attribute type 29 has an invalid length. [ 1313.964733][T19278] netlink: 'syz.2.6299': attribute type 29 has an invalid length. [ 1314.355282][T19284] loop3: detected capacity change from 0 to 512 [ 1314.563190][T19284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.577802][T19284] ext4 filesystem being mounted at /1221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1314.794599][T19284] fscrypt (loop3, inode 15): Error -61 getting encryption context [ 1314.913421][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6304'. [ 1315.187038][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.848314][T19303] loop3: detected capacity change from 0 to 128 [ 1316.014029][T19303] syz.3.6308: attempt to access beyond end of device [ 1316.014029][T19303] loop3: rw=0, sector=2065, nr_sectors = 6 limit=128 [ 1316.028342][ T30] audit: type=1800 audit(2000000675.770:119): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6308" name="file2" dev="loop3" ino=1048627 res=0 errno=0 [ 1316.768807][ T37] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1316.960874][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 1317.022265][ T37] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1317.032417][ T37] usb 3-1: config 0 has no interface number 0 [ 1317.102492][ T37] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1317.112412][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.121257][ T37] usb 3-1: Product: syz [ 1317.128084][ T37] usb 3-1: Manufacturer: syz [ 1317.133179][ T37] usb 3-1: SerialNumber: syz [ 1317.184259][ T37] usb 3-1: config 0 descriptor?? [ 1317.640969][ T37] radio-si470x 3-1:0.35: DeviceID=0x3fee ChipID=0x6570 [ 1317.847290][ T37] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1317.856358][ T37] radio-si470x 3-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 1317.866992][ T37] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1317.929552][ T37] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1317.947052][T19325] loop3: detected capacity change from 0 to 64 [ 1318.002352][ T37] usb 3-1: USB disconnect, device number 17 [ 1318.034350][T19323] veth5: entered promiscuous mode [ 1318.908766][T19336] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6325'. [ 1319.635565][T19347] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 1320.327871][T19355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6333'. [ 1320.394256][ T30] audit: type=1326 audit(2000000680.160:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19354 comm="syz.1.6335" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86539 code=0x0 [ 1321.562824][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1321.813787][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.825503][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.836119][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1321.845611][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.023900][ T9] usb 3-1: config 0 descriptor?? [ 1322.538586][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 1322.546022][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 1322.553432][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 1322.560747][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 1322.568020][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 1322.575591][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 1322.583018][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 1322.706899][ T9] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1322.780584][ T9] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 1322.788609][ T9] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 1322.838212][ T9] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 1322.856665][ T9] usb 3-1: USB disconnect, device number 18 [ 1323.586105][T19389] IPVS: ip_vs_add_dest(): server weight less than zero [ 1323.737685][T19385] fido_id[19385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1325.964723][T19417] loop2: detected capacity change from 0 to 512 [ 1326.143988][T19417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1326.157938][T19417] ext4 filesystem being mounted at /1267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.401570][ T30] audit: type=1326 audit(2000000686.150:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.2.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1326.425125][ T30] audit: type=1326 audit(2000000686.150:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.2.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1326.651013][ T30] audit: type=1326 audit(2000000686.240:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.2.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1326.844291][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.177615][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1327.391656][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1327.444039][ T9] usb 4-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config [ 1327.455197][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1327.467332][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 216, changing to 11 [ 1327.479152][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 33435, setting to 1024 [ 1327.490982][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1327.711705][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1327.721441][ T9] usb 4-1: New USB device strings: Mfr=1, Product=24, SerialNumber=222 [ 1327.730159][ T9] usb 4-1: Product: syz [ 1327.735027][ T9] usb 4-1: Manufacturer: syz [ 1327.739974][ T9] usb 4-1: SerialNumber: syz [ 1327.860324][ T9] usb 4-1: config 0 descriptor?? [ 1327.991836][ T37] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1328.145654][ T9] radio-si470x 4-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 1328.174284][ T37] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1328.184216][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.294914][ T37] usb 1-1: config 0 descriptor?? [ 1328.340159][ T37] cp210x 1-1:0.0: cp210x converter detected [ 1328.366116][ T9] radio-si470x 4-1:0.0: software version 100, hardware version 101 [ 1328.566475][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1328.581673][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.589030][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.597064][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.607273][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.620808][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.630687][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.640281][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.648963][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.657251][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.665725][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.673260][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.680377][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.687536][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.694665][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.701857][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.709023][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.716155][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.723536][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.730759][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.737959][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.745254][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.752631][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.759831][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.766954][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.774063][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.781583][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.788689][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.795912][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.803045][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.810155][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.817291][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.824560][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.831670][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.838780][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.846086][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1328.855074][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.855749][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.856399][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.863638][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.864304][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.871455][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.872128][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.879166][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.879850][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.886991][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.887668][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.894923][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.895567][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.902703][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.903366][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.910402][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.911954][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.912629][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.919674][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.920340][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.920990][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.927979][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.928649][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.935843][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.936522][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.943768][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.944431][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.951563][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.952215][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.959363][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.960103][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.960841][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1328.961315][ T37] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1328.967977][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1329.043559][T19447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6377'. [ 1329.112032][T19447] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1329.160294][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1329.172163][ T37] usb 1-1: USB disconnect, device number 16 [ 1329.262223][ T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1329.282771][ T9] usb 4-1: USB disconnect, device number 21 [ 1329.352583][ T37] cp210x 1-1:0.0: device disconnected [ 1330.579766][T19464] loop3: detected capacity change from 0 to 256 [ 1330.776653][T19464] overlay: filesystem on ./bus not supported [ 1332.687899][T19487] loop2: detected capacity change from 0 to 2048 [ 1332.797159][T19487] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1332.991696][T19492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1334.951797][ T37] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1335.201937][ T37] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.213789][ T37] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.224609][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1335.231743][ T37] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 1335.241304][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.368017][ T37] usb 3-1: config 0 descriptor?? [ 1335.651946][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.658907][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.860233][ T37] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 1335.868048][ T37] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 1335.876403][ T37] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 1335.884043][ T37] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 1335.892031][ T37] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 1335.899489][ T37] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 1335.907152][ T37] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 1336.133605][ T37] semitek 0003:1EA7:0907.0002: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.2-1/input0 [ 1336.242284][ T37] usb 3-1: USB disconnect, device number 19 [ 1336.988324][T19538] fido_id[19538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1337.344464][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6422'. [ 1338.389788][T19561] vivid-007: ================= START STATUS ================= [ 1338.398781][T19561] vivid-007: Enable Output Cropping: true [ 1338.405239][T19561] vivid-007: Enable Output Composing: true [ 1338.411859][T19561] vivid-007: Enable Output Scaler: true [ 1338.417868][T19561] vivid-007: Tx RGB Quantization Range: Automatic [ 1338.424936][T19561] vivid-007: Transmit Mode: HDMI [ 1338.430290][T19561] vivid-007: Hotplug Present: 0x00000000 [ 1338.436586][T19561] vivid-007: RxSense Present: 0x00000000 [ 1338.443039][T19561] vivid-007: EDID Present: 0x00000000 [ 1338.448830][T19561] vivid-007: ================== END STATUS ================== [ 1338.532243][T19563] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6428'. [ 1339.153374][T19573] futex_wake_op: syz.1.6432 tries to shift op by 35; fix this program [ 1339.357035][T19578] loop3: detected capacity change from 0 to 256 [ 1340.120798][ T37] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1340.363383][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1340.375164][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1340.387951][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 1340.402251][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.491870][T19590] CIFS: Unable to determine destination address [ 1340.579079][ T37] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1340.588928][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.597479][ T37] usb 3-1: Product: syz [ 1340.602067][ T37] usb 3-1: Manufacturer: syz [ 1340.606970][ T37] usb 3-1: SerialNumber: syz [ 1340.699993][ T37] usb 3-1: config 0 descriptor?? [ 1340.710058][T19582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1341.050224][T19582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1341.057129][T19582] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1341.065725][T19582] vhci_hcd vhci_hcd.0: Device attached [ 1341.147087][T19598] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 1341.154001][T19598] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1341.163266][T19598] vhci_hcd vhci_hcd.0: Device attached [ 1341.222939][ T37] rc_core: IR keymap rc-imon-rsc not found [ 1341.229276][ T37] Registered IR keymap rc-empty [ 1341.237755][ T37] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1341.252643][ T37] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 1341.301845][ T9] vhci_hcd: vhci_device speed not set [ 1341.313696][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1341.351178][T19599] vhci_hcd: connection closed [ 1341.357150][ T57] vhci_hcd: stop threads [ 1341.367226][ T57] vhci_hcd: release socket [ 1341.372120][ T57] vhci_hcd: disconnect device [ 1341.378136][T19596] vhci_hcd: connection closed [ 1341.425756][ T37] usb 3-1: USB disconnect, device number 20 [ 1341.442397][ T9] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1341.452039][T19597] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1341.471229][ T4341] vhci_hcd: stop threads [ 1341.475814][ T4341] vhci_hcd: release socket [ 1341.480816][ T4341] vhci_hcd: disconnect device [ 1343.694048][T19630] loop2: detected capacity change from 0 to 2048 [ 1343.807616][T19630] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1343.891570][T19636] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1344.050015][ T30] audit: type=1800 audit(2000000703.790:124): pid=19630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6457" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1344.060648][T19630] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.082306][T19630] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.253054][T19630] Remounting filesystem read-only [ 1344.307262][T19639] syz.3.6460 (19639) used obsolete PPPIOCDETACH ioctl [ 1345.081793][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6466'. [ 1345.091539][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6466'. [ 1345.101198][T19653] netlink: 'syz.3.6466': attribute type 18 has an invalid length. [ 1345.109468][T19653] netlink: 'syz.3.6466': attribute type 18 has an invalid length. [ 1346.064012][T19658] loop2: detected capacity change from 0 to 2048 [ 1346.186427][T19658] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1346.196620][T19658] NILFS (loop2): mounting unchecked fs [ 1346.321435][ T37] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1346.404402][T19658] NILFS (loop2): recovery complete [ 1346.447177][T19667] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1346.554802][ T37] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1346.567319][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1346.579017][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1346.593780][ T9] vhci_hcd: vhci_device speed not set [ 1346.709937][ T37] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1346.719661][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.728308][ T37] usb 4-1: Product: syz [ 1346.733033][ T37] usb 4-1: Manufacturer: syz [ 1346.737956][ T37] usb 4-1: SerialNumber: syz [ 1346.854122][ T37] usb 4-1: config 0 descriptor?? [ 1346.895490][ T37] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1347.125787][ T37] usb 4-1: USB disconnect, device number 22 [ 1347.561299][T19679] syz.1.6479 (19679): /proc/19679/oom_adj is deprecated, please use /proc/19679/oom_score_adj instead. [ 1347.961564][T11167] usb usb38-port2: attempt power cycle [ 1348.632879][T11167] usb usb38-port2: unable to enumerate USB device [ 1349.001490][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1349.204870][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1349.214471][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.288803][ T9] usb 1-1: config 0 descriptor?? [ 1349.375944][ T9] cp210x 1-1:0.0: cp210x converter detected [ 1349.941447][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1349.949381][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1350.003125][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1350.050777][ T9] usb 1-1: USB disconnect, device number 17 [ 1350.133042][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1350.135948][T11167] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1350.146147][ T9] cp210x 1-1:0.0: device disconnected [ 1350.370756][T11167] usb 5-1: Using ep0 maxpacket: 8 [ 1350.403591][T11167] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1350.414176][T11167] usb 5-1: config 0 has no interface number 0 [ 1350.421228][T11167] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1350.432807][T11167] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1350.445021][T11167] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1350.457500][T11167] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1350.741688][T11167] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1350.751873][T11167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.760237][T11167] usb 5-1: Product: syz [ 1350.772118][T11167] usb 5-1: Manufacturer: syz [ 1350.777021][T11167] usb 5-1: SerialNumber: syz [ 1350.873377][T11167] usb 5-1: config 0 descriptor?? [ 1351.134222][T11167] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1351.418592][ T9] usb 5-1: USB disconnect, device number 11 [ 1351.962061][T19727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6500'. [ 1351.966399][T19725] loop3: detected capacity change from 0 to 1024 [ 1351.985332][T19725] EXT4-fs: Ignoring removed nobh option [ 1351.991734][T19725] EXT4-fs: Ignoring removed bh option [ 1352.105481][T19725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.278444][T19725] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 1352.760725][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.180967][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1354.399362][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1354.433235][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.444809][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.455162][ T9] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1354.464726][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.581501][ T9] usb 1-1: config 0 descriptor?? [ 1355.183315][ T9] razer 0003:1532:011B.0003: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 1355.364838][ T9] usb 1-1: USB disconnect, device number 18 [ 1355.932449][T19765] fido_id[19765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1356.021793][T11167] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1356.260893][T11167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.272619][T11167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.283072][T11167] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1356.292825][T11167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.355923][T11167] usb 4-1: config 0 descriptor?? [ 1356.931493][T11167] kye 0003:0458:0087.0004: item fetching failed at offset 3/5 [ 1356.988897][T11167] kye 0003:0458:0087.0004: parse failed [ 1356.995626][T11167] kye 0003:0458:0087.0004: probe with driver kye failed with error -22 [ 1357.151379][ T9] usb 4-1: USB disconnect, device number 23 [ 1359.404777][T19811] sp0: Synchronizing with TNC [ 1360.012271][T19819] Bluetooth: MGMT ver 1.23 [ 1360.194717][T19822] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1360.204923][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1361.014854][T19831] loop0: detected capacity change from 0 to 764 [ 1361.133491][T19831] rock: directory entry would overflow storage [ 1361.140086][T19831] rock: sig=0x4654, size=5, remaining=4 [ 1361.338149][T19834] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1361.348770][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1362.472762][T19851] loop2: detected capacity change from 0 to 22 [ 1362.521874][T19846] loop1: detected capacity change from 0 to 2048 [ 1362.552034][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6556'. [ 1362.590821][T19851] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1362.666852][T19846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.852099][T19866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1364.346607][T19870] loop2: detected capacity change from 0 to 2048 [ 1364.537350][T19870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1364.672044][T19876] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6568'. [ 1364.742798][T19877] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1364.749679][T19877] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1364.758979][T19877] vhci_hcd vhci_hcd.0: Device attached [ 1364.852020][T19879] vhci_hcd: connection closed [ 1364.853484][ T12] vhci_hcd: stop threads [ 1364.864335][ T12] vhci_hcd: release socket [ 1364.869033][ T12] vhci_hcd: disconnect device [ 1365.346379][ T30] audit: type=1326 audit(2000000725.110:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.0.6571" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae539 code=0x0 [ 1366.188072][T19896] veth1_macvtap: left promiscuous mode [ 1366.194193][T19896] macsec0: entered promiscuous mode [ 1366.282242][T19898] veth1_macvtap: entered promiscuous mode [ 1366.289675][T19898] macsec0: left promiscuous mode [ 1367.189759][T19906] loop0: detected capacity change from 0 to 512 [ 1367.352052][T19906] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1367.385759][T19906] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1367.398256][T19906] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6578: invalid indirect mapped block 2683928664 (level 1) [ 1367.505395][T19906] EXT4-fs (loop0): Remounting filesystem read-only [ 1367.514968][T19906] EXT4-fs (loop0): 1 truncate cleaned up [ 1367.524133][T19906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1367.831853][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.914702][T19918] tmpfs: Cannot enable quota on remount [ 1368.289976][T19921] Bluetooth: MGMT ver 1.23 [ 1369.012717][T19931] loop0: detected capacity change from 0 to 16 [ 1369.091943][T19931] erofs (device loop0): mounted with root inode @ nid 36. [ 1370.527512][T19951] sp0: Synchronizing with TNC [ 1370.573732][T19954] sp0: Found TNC [ 1370.655269][T19950] [U] è` [ 1370.666332][T19953] loop0: detected capacity change from 0 to 512 [ 1371.894452][T19968] loop0: detected capacity change from 0 to 64 [ 1372.013390][T19968] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1372.022210][T19967] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6608'. [ 1374.149378][T19998] mkiss: ax0: crc mode is auto. [ 1374.758283][T20003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1374.841043][T20007] program syz.0.6625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1374.981226][T20005] loop2: detected capacity change from 0 to 1764 [ 1375.165275][T20009] loop1: detected capacity change from 0 to 256 [ 1375.606341][T20009] FAT-fs (loop1): Directory bread(block 64) failed [ 1375.614297][T20009] FAT-fs (loop1): Directory bread(block 65) failed [ 1375.621825][T20009] FAT-fs (loop1): Directory bread(block 66) failed [ 1375.628643][T20009] FAT-fs (loop1): Directory bread(block 67) failed [ 1375.636090][T20009] FAT-fs (loop1): Directory bread(block 68) failed [ 1375.643184][T20009] FAT-fs (loop1): Directory bread(block 69) failed [ 1375.650267][T20009] FAT-fs (loop1): Directory bread(block 70) failed [ 1375.657633][T20009] FAT-fs (loop1): Directory bread(block 71) failed [ 1375.665147][T20009] FAT-fs (loop1): Directory bread(block 72) failed [ 1375.672445][T20009] FAT-fs (loop1): Directory bread(block 73) failed [ 1375.995525][T20018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1376.810105][T20028] loop1: detected capacity change from 0 to 64 [ 1376.979138][ T30] audit: type=1800 audit(2000000736.740:126): pid=20028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6634" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1378.085141][T20045] loop1: detected capacity change from 0 to 1024 [ 1378.293064][T20045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.501710][ T30] audit: type=1800 audit(2000000738.240:127): pid=20045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6641" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1378.522402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.921824][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.594506][T20065] loop1: detected capacity change from 0 to 1024 [ 1379.651500][ T30] audit: type=1326 audit(2000000739.370:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20057 comm="syz.2.6646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7fc00000 [ 1379.753617][T20065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.766523][T20065] ext4 filesystem being mounted at /1332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1380.246361][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1380.335704][T20076] 9p: Unknown access argument 18446744073709551615: -34 [ 1380.547691][T20078] netlink: 'syz.0.6653': attribute type 28 has an invalid length. [ 1380.871983][T20082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6654'. [ 1381.793679][T20096] hsr0: entered promiscuous mode [ 1384.277013][T20124] loop3: detected capacity change from 0 to 256 [ 1386.298873][T20143] loop0: detected capacity change from 0 to 2048 [ 1386.401794][T20143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1386.461042][ T30] audit: type=1326 audit(2000000746.200:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.3.6686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1386.553415][ T30] audit: type=1326 audit(2000000746.260:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.3.6686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1386.576581][ T30] audit: type=1326 audit(2000000746.260:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.3.6686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1388.793812][T20174] usb usb1: check_ctrlrecip: process 20174 (syz.2.6696) requesting ep 01 but needs 81 [ 1391.222260][T20196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.344309][T20199] loop2: detected capacity change from 0 to 512 [ 1391.419645][T20199] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1391.428073][T20199] UDF-fs: Scanning with blocksize 512 failed [ 1391.471572][T20199] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1391.479549][T20199] UDF-fs: Scanning with blocksize 1024 failed [ 1391.539101][T20199] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1391.547726][T20199] UDF-fs: Scanning with blocksize 2048 failed [ 1391.609856][T20199] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1391.689646][T20199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1392.617439][T20211] loop2: detected capacity change from 0 to 128 [ 1392.883562][T20211] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1392.942975][T20211] ext4 filesystem being mounted at /1332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.014520][T20216] usb usb7: usbfs: process 20216 (syz.3.6717) did not claim interface 0 before use [ 1393.050985][ T30] audit: type=1800 audit(2000000752.780:132): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6715" name="file0" dev="loop2" ino=12 res=0 errno=0 [ 1393.316924][ T5800] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1393.732010][ T30] audit: type=1326 audit(2000000753.470:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.3.6722" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1393.837989][ T30] audit: type=1326 audit(2000000753.530:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.3.6722" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1393.860935][ T30] audit: type=1326 audit(2000000753.530:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.3.6722" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1393.883983][ T30] audit: type=1326 audit(2000000753.530:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.3.6722" exe="/root/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1393.906217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1393.913118][ T30] audit: type=1326 audit(2000000753.530:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20225 comm="syz.3.6722" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1393.967701][T20228] loop2: detected capacity change from 0 to 64 [ 1394.034016][T20228] hfs: unable to locate alternate MDB [ 1394.040000][T20228] hfs: continuing without an alternate MDB [ 1394.157859][T20228] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1395.707978][T20252] binder: 20250:20252 ioctl c0306201 80000940 returned -22 [ 1396.521923][T20262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6738'. [ 1396.532029][T20262] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1397.078015][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.085203][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.772720][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'. [ 1398.841519][T20291] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6752'. [ 1398.851226][T20291] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6752'. [ 1399.489766][T20297] loop0: detected capacity change from 0 to 1024 [ 1399.631842][T20297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.787854][T20306] loop2: detected capacity change from 0 to 256 [ 1400.165057][T20306] FAT-fs (loop2): Directory bread(block 64) failed [ 1400.172513][T20306] FAT-fs (loop2): Directory bread(block 65) failed [ 1400.179520][T20306] FAT-fs (loop2): Directory bread(block 66) failed [ 1400.189726][T20306] FAT-fs (loop2): Directory bread(block 67) failed [ 1400.197186][T20306] FAT-fs (loop2): Directory bread(block 68) failed [ 1400.204199][T20306] FAT-fs (loop2): Directory bread(block 69) failed [ 1400.214343][T20306] FAT-fs (loop2): Directory bread(block 70) failed [ 1400.221435][T20306] FAT-fs (loop2): Directory bread(block 71) failed [ 1400.228456][T20306] FAT-fs (loop2): Directory bread(block 72) failed [ 1400.235486][T20306] FAT-fs (loop2): Directory bread(block 73) failed [ 1400.449035][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.636146][T20336] loop1: detected capacity change from 0 to 256 [ 1402.892802][T20336] overlay: filesystem on ./bus not supported [ 1403.837933][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'. [ 1404.224540][T20354] netlink: 'syz.4.6779': attribute type 142 has an invalid length. [ 1405.134559][T20367] loop1: detected capacity change from 0 to 256 [ 1405.319446][ T30] audit: type=1800 audit(2000000765.070:138): pid=20367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6786" name="bus" dev="loop1" ino=1048653 res=0 errno=0 [ 1405.964449][ T30] audit: type=1326 audit(2000000765.710:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20371 comm="syz.4.6788" exe="/root/syz-executor" sig=31 arch=40000003 syscall=267 compat=1 ip=0xf7f16539 code=0x0 [ 1405.987955][ T30] audit: type=1326 audit(2000000765.710:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20371 comm="syz.4.6788" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x0 [ 1406.932770][T20386] loop3: detected capacity change from 0 to 64 [ 1408.595807][T20400] loop2: detected capacity change from 0 to 1024 [ 1408.725036][T20400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.420968][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.237500][T20446] loop2: detected capacity change from 0 to 256 [ 1412.645059][T20446] FAT-fs (loop2): Directory bread(block 64) failed [ 1412.652256][T20446] FAT-fs (loop2): Directory bread(block 65) failed [ 1412.659382][T20446] FAT-fs (loop2): Directory bread(block 66) failed [ 1412.670095][T20446] FAT-fs (loop2): Directory bread(block 67) failed [ 1412.677632][T20446] FAT-fs (loop2): Directory bread(block 68) failed [ 1412.684625][T20446] FAT-fs (loop2): Directory bread(block 69) failed [ 1412.694728][T20446] FAT-fs (loop2): Directory bread(block 70) failed [ 1412.701895][T20446] FAT-fs (loop2): Directory bread(block 71) failed [ 1412.708874][T20446] FAT-fs (loop2): Directory bread(block 72) failed [ 1412.715902][T20446] FAT-fs (loop2): Directory bread(block 73) failed [ 1413.473261][T20457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6826'. [ 1414.293829][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6832'. [ 1414.303384][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6832'. [ 1414.313020][T20467] netlink: 'syz.4.6832': attribute type 18 has an invalid length. [ 1414.321337][T20467] netlink: 'syz.4.6832': attribute type 18 has an invalid length. [ 1414.415734][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6831'. [ 1415.069993][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6846'. [ 1415.080188][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6846'. [ 1415.089623][T20476] netlink: 'syz.0.6846': attribute type 18 has an invalid length. [ 1415.101205][T20476] netlink: 'syz.0.6846': attribute type 18 has an invalid length. [ 1416.000005][T20488] loop1: detected capacity change from 0 to 1024 [ 1416.134326][T20488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1416.895671][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.540750][T20508] loop2: detected capacity change from 0 to 256 [ 1417.735983][ T30] audit: type=1800 audit(2000000777.490:141): pid=20508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6849" name="bus" dev="loop2" ino=1048654 res=0 errno=0 [ 1417.757049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.460597][T20517] netlink: 'syz.3.6852': attribute type 142 has an invalid length. [ 1419.231940][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6856'. [ 1419.791848][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6868'. [ 1419.991808][T20535] loop3: detected capacity change from 0 to 1024 [ 1420.204391][T20535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1420.806224][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.765380][T20566] loop0: detected capacity change from 0 to 2048 [ 1423.000981][T20566] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1423.008967][T20566] UDF-fs: Scanning with blocksize 512 failed [ 1423.374719][T20566] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1423.383199][T20566] UDF-fs: Scanning with blocksize 1024 failed [ 1423.725247][T20566] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=515, location=515 [ 1423.735460][T20566] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1423.743617][T20566] UDF-fs: Scanning with blocksize 2048 failed [ 1423.801548][T20566] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=259, location=259 [ 1423.882138][T20566] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=515, location=515 [ 1423.892801][T20566] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1423.901039][T20566] UDF-fs: Scanning with blocksize 4096 failed [ 1423.907367][T20566] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1428.094273][T20629] fuse: Invalid rootmode [ 1429.893102][T20650] netlink: 'syz.0.6910': attribute type 3 has an invalid length. [ 1430.640077][T20657] loop1: detected capacity change from 0 to 1024 [ 1430.738484][T20657] EXT4-fs: Ignoring removed nobh option [ 1430.744670][T20657] EXT4-fs: Ignoring removed bh option [ 1430.869506][T20663] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6917'. [ 1430.879916][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6917'. [ 1430.934400][T20657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.154952][T20657] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 1431.511399][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.107346][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1433.076795][T20687] [U] [ 1433.080043][T20687] [U] [ 1433.083149][T20687] [U] [ 1433.086243][T20687] [U] [ 1433.089352][T20687] [U] [ 1433.092449][T20687] [U] [ 1433.095537][T20687] [U] [ 1433.098653][T20687] [U] [ 1433.250240][T20687] [U] [ 1433.253404][T20687] [U] [ 1433.256500][T20687] [U] [ 1433.279233][T20684] [U] [ 1433.344903][T20692] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6928'. [ 1435.373751][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1435.550727][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1435.575952][ T9] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1435.584917][ T9] usb 2-1: config 0 has no interface number 0 [ 1435.594567][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1435.606292][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1435.618539][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1435.633190][ T9] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1435.670476][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1435.679902][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.688537][ T9] usb 2-1: Product: syz [ 1435.696641][ T9] usb 2-1: Manufacturer: syz [ 1435.701669][ T9] usb 2-1: SerialNumber: syz [ 1435.743968][ T9] usb 2-1: config 0 descriptor?? [ 1436.031910][ T9] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1436.315512][T19974] usb 2-1: USB disconnect, device number 18 [ 1436.794780][T20730] netlink: 'syz.2.6946': attribute type 3 has an invalid length. [ 1438.494789][T20750] fuse: Invalid rootmode [ 1440.549413][T20773] loop1: detected capacity change from 0 to 512 [ 1443.357203][T20807] loop1: detected capacity change from 0 to 2048 [ 1443.473008][T20807] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1443.481630][T20807] UDF-fs: Scanning with blocksize 512 failed [ 1443.587425][T20807] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1443.598797][T20807] UDF-fs: Scanning with blocksize 1024 failed [ 1443.690782][T20813] mkiss: ax0: crc mode is auto. [ 1443.738539][T20807] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 1443.755991][T20807] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1443.764161][T20807] UDF-fs: Scanning with blocksize 2048 failed [ 1443.862001][T20807] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=259, location=259 [ 1443.944203][T20807] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 1443.957459][T20807] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1443.966637][T20807] UDF-fs: Scanning with blocksize 4096 failed [ 1443.973887][T20807] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1444.488243][T20819] program syz.3.6987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1446.111174][T19974] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1446.301603][T19974] usb 2-1: Using ep0 maxpacket: 32 [ 1446.337624][T19974] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1446.346638][T19974] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1446.356119][T19974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1446.365814][T19974] usb 2-1: config 1 has no interface number 0 [ 1446.372408][T19974] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1446.384009][T19974] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1446.397612][T19974] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1446.407321][T19974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.734053][T19974] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1446.923045][T19974] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1447.389351][ T9] usb 2-1: USB disconnect, device number 19 [ 1447.397681][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1448.117311][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7008'. [ 1448.525227][T20859] Bluetooth: MGMT ver 1.23 [ 1449.724984][T20876] 9p: Unknown access argument 18446744073709551615: -34 [ 1451.579239][T20897] loop3: detected capacity change from 0 to 1024 [ 1451.705008][T20897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.718508][T20897] ext4 filesystem being mounted at /1372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1452.130021][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1452.249484][T20907] netlink: 'syz.1.7031': attribute type 28 has an invalid length. [ 1453.032616][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1455.245949][T20941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7046'. [ 1455.574214][T20946] loop0: detected capacity change from 0 to 512 [ 1455.669219][T20946] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1455.679049][T20946] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1455.817226][T20946] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 1455.994141][T20946] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.7050: iget: bad i_size value: 360287970189639680 [ 1456.070863][T20946] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7050: couldn't read orphan inode 15 (err -117) [ 1456.156959][T20946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1456.426631][ T5155] udevd[5155]: worker [6020] terminated by signal 33 (Unknown signal 33) [ 1456.470762][ T5155] udevd[5155]: worker [6020] failed while handling '/devices/virtual/block/loop0' [ 1457.449825][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7059'. [ 1457.459770][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7059'. [ 1457.469640][T20971] netlink: 'syz.4.7059': attribute type 7 has an invalid length. [ 1457.766601][T20974] loop1: detected capacity change from 0 to 1024 [ 1457.798887][T20974] EXT4-fs: inline encryption not supported [ 1457.805507][T20974] EXT4-fs: Ignoring removed i_version option [ 1457.872898][T20974] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1457.987404][T20974] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.7060: lblock 2 mapped to illegal pblock 2 (length 1) [ 1458.046066][T20974] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1458.056974][T20974] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.7060: lblock 0 mapped to illegal pblock 48 (length 1) [ 1458.082378][T20974] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1458.092867][T20974] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7060: Failed to acquire dquot type 0 [ 1458.133976][T20974] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 1458.169013][T20974] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.7060: mark_inode_dirty error [ 1458.195803][T20974] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1458.206983][T20974] EXT4-fs (loop1): 1 orphan inode deleted [ 1458.215891][T20974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1458.238458][ T57] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1458.259836][ T57] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1458.272457][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 1458.524243][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.531393][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.601662][T20974] EXT4-fs: Ignoring removed orlov option [ 1458.608053][T20974] EXT4-fs (loop1): stripe (16) is not aligned with cluster size (4096), stripe is disabled [ 1458.634171][T20974] EXT4-fs (loop1): can't enable nombcache during remount [ 1458.805822][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.077220][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.192940][ T5802] EXT4-fs error (device loop1): __ext4_get_inode_loc:4787: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1459.253432][ T5802] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 1459.308080][ T5802] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 1460.907452][T21012] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1461.413385][T21018] loop3: detected capacity change from 0 to 1024 [ 1461.454195][T21018] EXT4-fs: inline encryption not supported [ 1461.460602][T21018] EXT4-fs: Ignoring removed i_version option [ 1461.541696][T21018] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1461.751230][T21018] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.7080: lblock 2 mapped to illegal pblock 2 (length 1) [ 1461.870594][T21018] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1461.879281][T21018] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.7080: lblock 0 mapped to illegal pblock 48 (length 1) [ 1461.961103][T21018] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1461.970225][T21018] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.7080: Failed to acquire dquot type 0 [ 1462.048704][T21018] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 1462.121554][T21018] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.7080: mark_inode_dirty error [ 1462.175210][T21018] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1462.186209][T21018] EXT4-fs (loop3): 1 orphan inode deleted [ 1462.195176][T21018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1462.208634][ T12] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1462.256910][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1462.265967][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 1462.509791][T21018] EXT4-fs: Ignoring removed orlov option [ 1462.516922][T21018] EXT4-fs (loop3): stripe (16) is not aligned with cluster size (4096), stripe is disabled [ 1462.620614][T21018] EXT4-fs (loop3): can't enable nombcache during remount [ 1462.862943][T21035] veth1_macvtap: left promiscuous mode [ 1462.868766][T21035] macsec0: entered promiscuous mode [ 1462.993088][T21036] veth1_macvtap: entered promiscuous mode [ 1463.001129][T21036] macsec0: left promiscuous mode [ 1463.057573][T21038] loop2: detected capacity change from 0 to 128 [ 1463.064145][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.101391][ T5801] EXT4-fs error (device loop3): __ext4_get_inode_loc:4787: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1463.185137][ T5801] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 1463.220849][ T5801] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 1463.907200][T21045] loop3: detected capacity change from 0 to 512 [ 1463.987572][T21045] EXT4-fs: Ignoring removed orlov option [ 1464.038254][T21045] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1464.091885][T21049] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7093'. [ 1464.176487][T21045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1464.276059][T21045] EXT4-fs error (device loop3): ext4_iget_extra_inode:5030: inode #15: comm syz.3.7090: corrupted in-inode xattr: e_value size too large [ 1464.395110][T21045] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7090: couldn't read orphan inode 15 (err -117) [ 1464.473390][T21045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1464.941195][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.130836][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1467.166731][T21077] loop3: detected capacity change from 0 to 128 [ 1467.189598][T21076] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1467.202395][T21076] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1468.141229][T21088] loop2: detected capacity change from 0 to 512 [ 1468.182137][T21088] EXT4-fs: Ignoring removed orlov option [ 1468.211814][T21088] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1468.318697][T21088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1468.445143][T21088] EXT4-fs error (device loop2): ext4_iget_extra_inode:5030: inode #15: comm syz.2.7112: corrupted in-inode xattr: e_value size too large [ 1468.528013][T21088] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7112: couldn't read orphan inode 15 (err -117) [ 1468.593516][T21088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.751180][T19377] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1468.921409][T19377] usb 2-1: Using ep0 maxpacket: 8 [ 1468.958322][T19377] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1468.967501][T19377] usb 2-1: config 179 has no interface number 0 [ 1468.977933][T19377] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1468.989556][T19377] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1469.005343][T19377] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1469.017672][T19377] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1469.029701][T19377] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1469.046819][T19377] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1469.056571][T19377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.233492][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.349693][T21092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1469.898074][T19377] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input26 [ 1470.030631][ T9] usb 2-1: USB disconnect, device number 20 [ 1470.031000][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1470.045731][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1471.799673][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1472.974816][T21136] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7134'. [ 1473.176481][T21139] openvswitch: netlink: Message has 1255 unknown bytes. [ 1473.184227][T21139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.840723][T19974] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1475.031764][T19974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.043073][T19974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.055096][T19974] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1475.065344][T19974] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1475.075597][T19974] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.120699][T21162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7147'. [ 1475.233705][T19974] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1475.243370][T19974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.252094][T19974] usb 4-1: Product: syz [ 1475.256565][T19974] usb 4-1: Manufacturer: syz [ 1475.261826][T19974] usb 4-1: SerialNumber: syz [ 1475.389476][T19974] cdc_mbim 4-1:1.0: skipping garbage [ 1475.594267][T21164] loop0: detected capacity change from 0 to 1024 [ 1475.732085][T21164] hfsplus: bad catalog entry type [ 1476.021204][T19974] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 1476.027916][T19974] cdc_mbim 4-1:1.0: bind() failure [ 1476.046103][ T4044] hfsplus: b-tree write err: -5, ino 4 [ 1476.046475][T19974] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1476.059075][T19974] cdc_ncm 4-1:1.1: bind() failure [ 1476.261800][T19974] usb 4-1: USB disconnect, device number 24 [ 1478.829708][T21190] loop0: detected capacity change from 0 to 4096 [ 1479.023234][T21199] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1479.212947][T21192] loop1: detected capacity change from 0 to 4096 [ 1479.310865][T21192] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1479.351068][T21192] ntfs3(loop1): It is recommened to use chkdsk. [ 1479.663112][T21201] tipc: Started in network mode [ 1479.668429][T21201] tipc: Node identity e0000002, cluster identity 4711 [ 1479.675931][T21201] tipc: Enabling of bearer rejected, failed to enable media [ 1479.938800][T21192] ntfs3(loop1): ino=1b, "file0" ntfs_readdir [ 1480.363588][T21196] loop3: detected capacity change from 0 to 8192 [ 1480.618867][ T30] audit: type=1800 audit(2000000840.360:142): pid=21196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7165" name="file2" dev="loop3" ino=1048655 res=0 errno=0 [ 1480.759914][T21207] loop2: detected capacity change from 0 to 64 [ 1481.047328][T21207] Trying to free block not in datazone [ 1481.991446][T21222] netlink: 'syz.2.7176': attribute type 4 has an invalid length. [ 1481.999754][T21222] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7176'. [ 1482.830258][T21230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7181'. [ 1483.669832][T21240] loop1: detected capacity change from 0 to 1024 [ 1483.968537][T21240] hfsplus: bad catalog entry type [ 1484.401502][ T4044] hfsplus: b-tree write err: -5, ino 4 [ 1484.831405][T21252] netlink: 'syz.1.7192': attribute type 4 has an invalid length. [ 1484.839592][T21252] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1485.785416][T21266] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1485.954618][ T30] audit: type=1326 audit(2000000845.690:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1485.977687][ T30] audit: type=1326 audit(2000000845.720:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1486.003961][ T30] audit: type=1326 audit(2000000845.730:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1486.026842][ T30] audit: type=1326 audit(2000000845.730:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1486.052723][ T30] audit: type=1326 audit(2000000845.730:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1486.075588][ T30] audit: type=1326 audit(2000000845.750:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1486.101295][ T30] audit: type=1326 audit(2000000845.750:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1486.124030][ T30] audit: type=1326 audit(2000000845.750:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21268 comm="syz.3.7199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1488.170654][ T30] audit: type=1326 audit(2000000847.930:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.0.7213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1488.303022][ T30] audit: type=1326 audit(2000000847.970:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.0.7213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1488.357399][T21298] tipc: Started in network mode [ 1488.363114][T21298] tipc: Node identity e0000002, cluster identity 4711 [ 1488.371836][T21298] tipc: Enabling of bearer rejected, failed to enable media [ 1488.691113][T21302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1488.722664][T19974] IPVS: starting estimator thread 0... [ 1488.844757][T21303] IPVS: using max 192 ests per chain, 9600 per kthread [ 1491.350166][T21336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7231'. [ 1491.426379][T21337] loop0: detected capacity change from 0 to 736 [ 1491.732765][T21341] tipc: Enabling of bearer rejected, failed to enable media [ 1492.427941][T21347] loop2: detected capacity change from 0 to 64 [ 1495.051815][T21380] netlink: 'syz.1.7251': attribute type 29 has an invalid length. [ 1495.124550][T21380] netlink: 'syz.1.7251': attribute type 29 has an invalid length. [ 1497.148242][T21408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1497.634717][T21412] netlink: 'syz.0.7265': attribute type 29 has an invalid length. [ 1497.693675][T21412] netlink: 'syz.0.7265': attribute type 29 has an invalid length. [ 1498.325334][T21420] ptrace attach of "./syz-executor exec"[5813] was attempted by ""[21420] [ 1498.646040][T21416] loop1: detected capacity change from 0 to 4096 [ 1498.699052][T21416] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1499.145224][T21416] ntfs3(loop1): ino=19, mi_enum_attr [ 1499.151333][T21416] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1499.290941][T21416] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1501.017571][T21449] ptrace attach of "./syz-executor exec"[5800] was attempted by ""[21449] [ 1502.592114][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7290'. [ 1502.621339][T21467] macvlan2: entered promiscuous mode [ 1502.626972][T21467] macvlan2: entered allmulticast mode [ 1502.632883][T21467] erspan0: entered allmulticast mode [ 1503.164342][T21477] pim6reg527: entered allmulticast mode [ 1503.702540][T21484] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1503.715474][T21484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1505.307402][T21493] loop3: detected capacity change from 0 to 4096 [ 1505.337794][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7306'. [ 1505.347432][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7306'. [ 1505.357069][T21502] netlink: 'syz.0.7306': attribute type 6 has an invalid length. [ 1505.363773][T21493] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1505.963149][T21493] ntfs3(loop3): failed to convert "076c" to cp932 [ 1506.370581][T21513] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7310'. [ 1506.380603][T21513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7310'. [ 1508.076756][T21531] sp0: Synchronizing with TNC [ 1508.187315][T21530] [U] è [ 1509.227360][T21541] loop1: detected capacity change from 0 to 4096 [ 1509.286622][T21541] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1509.688072][T21541] ntfs3(loop1): failed to convert "076c" to cp932 [ 1510.952725][T19974] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1511.152094][T19974] usb 2-1: Using ep0 maxpacket: 16 [ 1511.214840][T19974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.225891][T19974] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1511.237509][T19974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1511.384914][T19974] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1511.395002][T19974] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1511.403639][T19974] usb 2-1: Manufacturer: syz [ 1511.463612][T19974] usb 2-1: config 0 descriptor?? [ 1511.783195][T21562] netlink: 'syz.1.7333': attribute type 3 has an invalid length. [ 1511.791856][T21562] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7333'. [ 1511.892318][T19974] usb 2-1: USB disconnect, device number 21 [ 1512.297395][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7340'. [ 1512.307173][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7340'. [ 1512.316833][T21577] netlink: 'syz.3.7340': attribute type 6 has an invalid length. [ 1513.810610][T21588] loop1: detected capacity change from 0 to 4096 [ 1513.878942][T21591] loop2: detected capacity change from 0 to 4096 [ 1513.945123][T21588] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1513.953756][T21588] NILFS (loop1): trying rollback from an earlier position [ 1514.001216][T21591] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1514.080800][T21588] NILFS (loop1): recovery complete [ 1514.154361][T21598] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1514.680869][T21591] ntfs3(loop2): failed to convert "076c" to cp932 [ 1515.542041][T21611] loop1: detected capacity change from 0 to 64 [ 1515.824364][T21614] pim6reg527: entered allmulticast mode [ 1517.301966][T21629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7366'. [ 1518.559655][T21645] loop3: detected capacity change from 0 to 64 [ 1519.607981][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7378'. [ 1519.705065][T21655] loop3: detected capacity change from 0 to 256 [ 1519.764492][T21655] exfat: Deprecated parameter 'namecase' [ 1519.771387][T21655] exfat: Deprecated parameter 'utf8' [ 1519.974946][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1520.086203][T21655] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1521.361497][T21677] netlink: 'syz.1.7388': attribute type 1 has an invalid length. [ 1522.985996][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7399'. [ 1523.259589][T21701] loop0: detected capacity change from 0 to 16 [ 1523.318692][T21701] erofs (device loop0): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1523.405108][T21701] CIFS mount error: No usable UNC path provided in device string! [ 1523.405108][T21701] [ 1523.415710][T21701] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1523.596673][ T5155] udevd[5155]: worker [6314] terminated by signal 33 (Unknown signal 33) [ 1523.652235][ T5155] udevd[5155]: worker [6314] failed while handling '/devices/virtual/block/loop0' [ 1525.705692][T21734] tmpfs: Cannot disable swap on remount [ 1526.600904][T19974] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1526.809139][T19974] usb 2-1: Using ep0 maxpacket: 16 [ 1526.852315][T19974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1526.874540][T19974] usb 2-1: config 9 has an invalid interface number: 48 but max is 0 [ 1526.883359][T19974] usb 2-1: config 9 has no interface number 0 [ 1526.889759][T19974] usb 2-1: config 9 interface 48 has no altsetting 0 [ 1526.927119][T19974] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 1526.937017][T19974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.945784][T19974] usb 2-1: Product: syz [ 1526.950824][T19974] usb 2-1: Manufacturer: syz [ 1526.955712][T19974] usb 2-1: SerialNumber: syz [ 1527.126640][T21749] netlink: 328 bytes leftover after parsing attributes in process `syz.4.7423'. [ 1527.283936][T19974] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1527.700920][T19974] gspca_vc032x: reg_w err -71 [ 1527.706043][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.712432][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.717977][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.723764][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.729311][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.735158][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.741049][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.746595][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.752482][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.761972][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.770894][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.776434][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.782222][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.787764][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.793488][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.799027][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.804905][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.810652][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.816216][T19974] gspca_vc032x: I2c Bus Busy Wait 00 [ 1527.822058][T19974] gspca_vc032x: Unknown sensor... [ 1527.827666][T19974] vc032x 2-1:9.48: probe with driver vc032x failed with error -22 [ 1527.942425][T21755] veth1_macvtap: left promiscuous mode [ 1527.948208][T21755] macsec0: entered allmulticast mode [ 1528.052904][T21755] veth1_macvtap: entered promiscuous mode [ 1528.059074][T21755] veth1_macvtap: entered allmulticast mode [ 1528.065787][T21755] macsec0: left allmulticast mode [ 1528.071903][T21755] veth1_macvtap: left allmulticast mode [ 1528.232626][T19974] usb 2-1: USB disconnect, device number 22 [ 1529.400023][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1529.675237][T21773] sp0: Synchronizing with TNC [ 1529.783055][T21772] [U] è [ 1529.842768][T21776] netlink: 328 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1530.310940][T19974] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1530.509764][T19974] usb 3-1: Using ep0 maxpacket: 16 [ 1530.544698][T19974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.555584][T19974] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1530.569810][T19974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1530.742480][T19974] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1530.752386][T19974] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1530.762366][T19974] usb 3-1: Manufacturer: syz [ 1530.869780][T19974] usb 3-1: config 0 descriptor?? [ 1531.200805][T21780] netlink: 'syz.2.7436': attribute type 3 has an invalid length. [ 1531.208903][T21780] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7436'. [ 1531.316302][T19974] usb 3-1: USB disconnect, device number 21 [ 1531.944669][T21799] netlink: 'syz.3.7448': attribute type 1 has an invalid length. [ 1532.571408][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'. [ 1532.613307][T21805] sp0: Synchronizing with TNC [ 1532.767722][T21803] [U] è [ 1533.089503][T21812] loop0: detected capacity change from 0 to 128 [ 1533.146256][T21812] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1534.067620][T21822] loop1: detected capacity change from 0 to 16 [ 1534.091075][T21822] erofs (device loop1): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1534.135066][T21822] CIFS mount error: No usable UNC path provided in device string! [ 1534.135066][T21822] [ 1534.146118][T21822] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1534.158769][T21821] loop0: detected capacity change from 0 to 1024 [ 1534.319406][T21821] ===================================================== [ 1534.330160][T21821] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 1534.338277][T21821] hfsplus_delete_cat+0x1195/0x13d0 [ 1534.344247][T21821] hfsplus_rmdir+0x13c/0x310 [ 1534.349137][T21821] vfs_rmdir+0x5b3/0x800 [ 1534.357019][T21821] do_rmdir+0x7d6/0xdc0 [ 1534.361707][T21821] __ia32_sys_rmdir+0x70/0xa0 [ 1534.366738][T21821] ia32_sys_call+0x32c4/0x4310 [ 1534.371900][T21821] __do_fast_syscall_32+0xb0/0x150 [ 1534.377292][T21821] do_fast_syscall_32+0x38/0x80 [ 1534.385542][T21821] do_SYSENTER_32+0x1f/0x30 [ 1534.390668][T21821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1534.397302][T21821] [ 1534.399783][T21821] Uninit was stored to memory at: [ 1534.405341][T21821] hfsplus_create_cat+0x18fb/0x1910 [ 1534.414238][T21821] hfsplus_mknod+0x208/0x560 [ 1534.419113][T21821] hfsplus_mkdir+0x5a/0x80 [ 1534.424001][T21821] vfs_mkdir+0x4ea/0x850 [ 1534.428474][T21821] do_mkdirat+0x41a/0xf30 [ 1534.433195][T21821] __ia32_sys_mkdirat+0xc1/0x140 [ 1534.438395][T21821] ia32_sys_call+0x1951/0x4310 [ 1534.446649][T21821] __do_fast_syscall_32+0xb0/0x150 [ 1534.452201][T21821] do_fast_syscall_32+0x38/0x80 [ 1534.457324][T21821] do_SYSENTER_32+0x1f/0x30 [ 1534.462277][T21821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1534.468925][T21821] [ 1534.475011][T21821] Uninit was stored to memory at: [ 1534.480610][T21821] hfsplus_create_cat+0x18fb/0x1910 [ 1534.486064][T21821] hfsplus_fill_super+0x211d/0x2730 [ 1534.492469][T21821] get_tree_bdev_flags+0x6e3/0x920 [ 1534.498115][T21821] get_tree_bdev+0x38/0x50 [ 1534.506053][T21821] hfsplus_get_tree+0x35/0x40 [ 1534.511491][T21821] vfs_get_tree+0xb0/0x5c0 [ 1534.516186][T21821] do_new_mount+0x733/0x1420 [ 1534.521266][T21821] path_mount+0x6db/0x1e90 [ 1534.525984][T21821] __se_sys_mount+0x6eb/0x7d0 [ 1534.534131][T21821] __ia32_sys_mount+0xe2/0x150 [ 1534.539177][T21821] ia32_sys_call+0x2c16/0x4310 [ 1534.544478][T21821] __do_fast_syscall_32+0xb0/0x150 [ 1534.549862][T21821] do_fast_syscall_32+0x38/0x80 [ 1534.555313][T21821] do_SYSENTER_32+0x1f/0x30 [ 1534.560101][T21821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1534.570177][T21821] [ 1534.572890][T21821] Uninit was created at: [ 1534.577474][T21821] __alloc_frozen_pages_noprof+0x689/0xf00 [ 1534.583760][T21821] alloc_pages_mpol+0x328/0x860 [ 1534.588872][T21821] alloc_frozen_pages_noprof+0xf7/0x200 [ 1534.597953][T21821] allocate_slab+0x24d/0x1220 [ 1534.603141][T21821] ___slab_alloc+0xfec/0x3480 [ 1534.608140][T21821] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 1534.614518][T21821] hfsplus_alloc_inode+0x5a/0xd0 [ 1534.619756][T21821] alloc_inode+0x87/0x4a0 [ 1534.628117][T21821] iget_locked+0x239/0x12d0 [ 1534.633137][T21821] hfsplus_iget+0x5c/0xb80 [ 1534.637866][T21821] hfsplus_btree_open+0x134/0x1d00 [ 1534.643556][T21821] hfsplus_fill_super+0x1161/0x2730 [ 1534.649070][T21821] get_tree_bdev_flags+0x6e3/0x920 [ 1534.657939][T21821] get_tree_bdev+0x38/0x50 [ 1534.662843][T21821] hfsplus_get_tree+0x35/0x40 [ 1534.667912][T21821] vfs_get_tree+0xb0/0x5c0 [ 1534.672834][T21821] do_new_mount+0x733/0x1420 [ 1534.677671][T21821] path_mount+0x6db/0x1e90 [ 1534.685598][T21821] __se_sys_mount+0x6eb/0x7d0 [ 1534.690751][T21821] __ia32_sys_mount+0xe2/0x150 [ 1534.695832][T21821] ia32_sys_call+0x2c16/0x4310 [ 1534.701099][T21821] __do_fast_syscall_32+0xb0/0x150 [ 1534.706479][T21821] do_fast_syscall_32+0x38/0x80 [ 1534.715056][T21821] do_SYSENTER_32+0x1f/0x30 [ 1534.719838][T21821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1534.726702][T21821] [ 1534.729226][T21821] CPU: 0 UID: 0 PID: 21821 Comm: syz.0.7467 Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(none) [ 1534.744696][T21821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1534.755123][T21821] ===================================================== [ 1534.762516][T21821] Disabling lock debugging due to kernel taint [ 1534.769392][T21821] Kernel panic - not syncing: kmsan.panic set ... [ 1534.776039][T21821] CPU: 0 UID: 0 PID: 21821 Comm: syz.0.7467 Tainted: G B 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(none) [ 1534.789637][T21821] Tainted: [B]=BAD_PAGE [ 1534.794403][T21821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1534.804700][T21821] Call Trace: [ 1534.808164][T21821] [ 1534.811271][T21821] __dump_stack+0x26/0x30 [ 1534.815893][T21821] dump_stack_lvl+0x53/0x270 [ 1534.820777][T21821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1534.826876][T21821] dump_stack+0x1e/0x25 [ 1534.831440][T21821] panic+0x4bd/0xd50 [ 1534.835676][T21821] kmsan_report+0x31c/0x320 [ 1534.840451][T21821] ? __msan_warning+0x1b/0x30 [ 1534.845388][T21821] ? hfsplus_delete_cat+0x1195/0x13d0 [ 1534.851027][T21821] ? hfsplus_rmdir+0x13c/0x310 [ 1534.856134][T21821] ? vfs_rmdir+0x5b3/0x800 [ 1534.860805][T21821] ? do_rmdir+0x7d6/0xdc0 [ 1534.865731][T21821] ? __ia32_sys_rmdir+0x70/0xa0 [ 1534.870925][T21821] ? ia32_sys_call+0x32c4/0x4310 [ 1534.876119][T21821] ? __do_fast_syscall_32+0xb0/0x150 [ 1534.881683][T21821] ? do_fast_syscall_32+0x38/0x80 [ 1534.886978][T21821] ? do_SYSENTER_32+0x1f/0x30 [ 1534.891925][T21821] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1534.898746][T21821] ? kmsan_get_metadata+0xfb/0x160 [ 1534.904135][T21821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1534.910257][T21821] ? hfsplus_bnode_dump+0x50a/0x560 [ 1534.915766][T21821] ? kmsan_get_metadata+0xfb/0x160 [ 1534.921160][T21821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1534.927278][T21821] ? hfsplus_brec_remove+0x92f/0xa60 [ 1534.932926][T21821] ? kmsan_get_metadata+0xfb/0x160 [ 1534.938330][T21821] __msan_warning+0x1b/0x30 [ 1534.943089][T21821] hfsplus_delete_cat+0x1195/0x13d0 [ 1534.948554][T21821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1534.954613][T21821] ? kmsan_get_metadata+0xfb/0x160 [ 1534.959994][T21821] hfsplus_rmdir+0x13c/0x310 [ 1534.964827][T21821] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 1534.970162][T21821] vfs_rmdir+0x5b3/0x800 [ 1534.974651][T21821] do_rmdir+0x7d6/0xdc0 [ 1534.979039][T21821] __ia32_sys_rmdir+0x70/0xa0 [ 1534.983976][T21821] ia32_sys_call+0x32c4/0x4310 [ 1534.989056][T21821] __do_fast_syscall_32+0xb0/0x150 [ 1534.994403][T21821] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1535.000361][T21821] do_fast_syscall_32+0x38/0x80 [ 1535.005448][T21821] do_SYSENTER_32+0x1f/0x30 [ 1535.010161][T21821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1535.016761][T21821] RIP: 0023:0xf70ae539 [ 1535.021002][T21821] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1535.041127][T21821] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000028 [ 1535.049952][T21821] RAX: ffffffffffffffda RBX: 0000000080000780 RCX: 0000000000000000 [ 1535.058118][T21821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1535.066403][T21821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1535.074552][T21821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1535.082785][T21821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1535.090965][T21821] [ 1535.094357][T21821] Kernel Offset: disabled [ 1535.098824][T21821] Rebooting in 86400 seconds..