last executing test programs: 37.002433709s ago: executing program 4 (id=11727): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x7, @win={{0x8, 0xf, 0x6, 0x1}, 0x8, 0x9, 0x0, 0x0, 0x0, 0x3}}) 36.496776416s ago: executing program 4 (id=11731): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0xba4, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f90d, 0x1, '\x00', @p_u32=0x0}}) 35.820214154s ago: executing program 4 (id=11734): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 34.61377674s ago: executing program 4 (id=11743): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'macturkish'}}, {@type={'type', 0x3d, "f1aefc87"}}, {}, {@nodecompose}, {@nobarrier}]}, 0x3, 0x6bc, &(0x7f0000001240)="$eJzs3U9sHFcZAPBvJpu1N0jutk3TgJBiNVIFjUhsr0pSCakBIeRDhCK49GolTmNlk1a2i9wKkQ1QkDhxQj1wKELm0BNCCKmcEOWMhMSFk++RuHGIELBo/uzueL121onjdZvfT5qdN/vevPfNl/mzOxtrAnhqLb4RxzuRxOK5KxvZ8tZmq7212brdK0fEVESkEbViFkkjIvkk4nIUU3w+e7PsLtltnFfvf5zUPvioVSzVyilvn+613g4jW3YipvsLxyJitij+Z4wO09H95VPez7VBf48o6cedJexsL3Ewad0dOoPKUYfGduMft8CRdbe4bu7QjDgRxdU1+xwQ5dnh4WeGydvz3NQ5vDgAAADgSRn5Xb7qmQfxIDZi5nDCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM+GpHhmYFJOaa88G0nv+f/1yjP16xMO9zG9fyOffeeZSQcCAAAAAAAAAI/lzIN4EBsx01vuJvlv/i/lCyfz18/FO7EWy7Ea52MjlmI91mM15iOiWemovrG0vr46v3PNX0S2ZrfbvVuuuTByzYXtcXWGAx31Pw12NAIAAAAAAACAp9YPY3Hw+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFScSxYpZPJ3vlZqS1iJiOiHoy229en2iwB+BPkw4AAAAAnrxGOZ9J/lcUukn+nf9U/r1/Ot6JO7EeK7Ee7ViO6/m9gOJbf/q3Tqu9tdm6nU07O/76P/cVR95jFPceRo88l7d4ob/GYnwrvhvnYjauxmqsxPdiKdZjOWbjm3lpKZJolncvmlubjejFujPey9uWrg7HdqZSzno7nUfSiBuxksd2Pq7Ve6GnZbvTldH+UI8YGvFelp3k9dKYObpeieHn5fxoaOZbfryfkbky91k2nq3mfWfuR+8n/+4WHjrSfKT9e1AnB6Nki8MjPVLOT5TzLNc/ebI53+ettO2Z6PwsW+rtfaf2znnEl//+56s30zu3bt5YO3d0dqNHNLxPtCqZeHGsTLSzTHQeIxPTjxP/wbhc7kLN/ll0f2fLl/J1Z2Ilvh1vxfVYjosxF/NxKebitViIVixU8vrC3nnNj7V0f8fa2S+Vheya9NPKtenQTO1WkeX12Upeq2e6Zl5XfWeQpefGyFJSj6EsvVbM/jEylNoXykI2xo/uDa44kzeciflKJp7fOxO/+m92ql9r37m1enPp7THHe7mcZ4ft+9vPzb8+kA3av3Jzs/3luewfK4rLRnXvyOqe79UN5ate/uJSKzvbVleP/Hgu6h52pGY9nbo3qqei7sWRo7TyutOVum2fcuKtaPc/hZQO/SAFYAwnXjlRb9xv/LXxYePHjZuNK9PfmLo09cV6HP9L7Y/Hfpv+Jv1a8kp8GD+ImUlHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnwVr7753a6ndXl49goVID7jDeyOreqko3qmPaHMmjkA2Ph2Fqb32qN9F8bimXVavTyLmRuwaz+EWonYIY03FiKor/XcaEWk/noi4dQQecAc8KRfWb799Ye3d976ycnvpzeU3l+8sXLr4+sXWV+fvXrix0l6eK17LxrUJBwscqMHHgElHAgAAAAAAAAAAAIzrMP68YcSwSWcC2woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Oi2+Ecc7kcT83Pm5bHlrs9XOpl550LIWEWlEJN+PSD6JuBzFFM1Kd8lu47x6/+NfvvzBR61BX7Ve+3Rovd//q9vd51Z0yilmI+JYOX+4qbH6u1bpr7OfXvqS/hZmCTvbSxxM2v8DAAD//7sjDnk=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 33.806362563s ago: executing program 4 (id=11749): r0 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000001480)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) 32.778899465s ago: executing program 4 (id=11755): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000100), &(0x7f0000000200)=""/157}, 0x20) 30.618793653s ago: executing program 32 (id=11755): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000100), &(0x7f0000000200)=""/157}, 0x20) 5.450777886s ago: executing program 2 (id=11882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x31f4e, 0x4) 5.059625254s ago: executing program 3 (id=11884): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) 4.732781674s ago: executing program 2 (id=11886): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000140)={0x2, 0x4c23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="c31b", 0x2}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x2, 0x8000) 4.419042564s ago: executing program 3 (id=11888): setresuid(0x0, 0xee01, 0xffffffffffffffff) clock_adjtime(0x17, &(0x7f00000001c0)={0xffffffff, 0x400000000000040, 0xb, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0x1, 0x0, 0x8, 0x6, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0xffffffffffffffff, 0x6, 0x4, 0x4000000000, 0x0, 0x88000000, 0x400000}) 4.282652027s ago: executing program 1 (id=11889): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0}) 4.123979362s ago: executing program 2 (id=11890): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@dioread_nolock}]}, 0x1, 0xbe7, &(0x7f0000000fc0)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 3.905100044s ago: executing program 0 (id=11891): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.763086778s ago: executing program 3 (id=11892): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 3.742127816s ago: executing program 1 (id=11893): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x3c1, 0x3, 0x1b78, 0x1918, 0xffffff80, 0x178, 0x0, 0x178, 0x1aa8, 0x22b, 0x258, 0x1aa8, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x18b8, 0x1918, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@u32={{0x7e0}, {[{}, {[{}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {0x1}]}]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff, 0xffffff00], 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x7ff, 0x3, 0x7, 0x4, 0x5}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @private1}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1bd8) 3.114896507s ago: executing program 0 (id=11894): r0 = socket$unix(0x1, 0x2, 0x0) fcntl$notify(r0, 0x402, 0x10) 3.058918649s ago: executing program 3 (id=11895): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x4, [0x3, 0x1000, 0x0, 0x1, 0x2, 0x6, 0x7, 0x3, 0x10, 0x1, 0x4, 0x9ee0, 0x28, 0x385, 0xef9a, 0xfff, 0x7, 0xb2, 0x1, 0x2, 0x7fff, 0x4, 0x1ff, 0x5, 0xfffc, 0x0, 0x2, 0x10, 0x6, 0xd, 0x3f1, 0x79, 0x5, 0x7, 0x6, 0x2, 0x81, 0xffff, 0x8000, 0x9, 0x0, 0x2, 0x423, 0xfff, 0x86, 0x7959, 0x3, 0x9], 0xb}) 2.967572842s ago: executing program 1 (id=11896): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2b, @loopback, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x0) 2.503007573s ago: executing program 2 (id=11897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x1170, 0x1398, 0x238, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 2.378774221s ago: executing program 0 (id=11898): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000000)=0xffffff4c) 2.296228811s ago: executing program 1 (id=11899): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2.056795325s ago: executing program 3 (id=11900): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff001100000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000008000100090810000c00000000040000", 0x58}], 0x1) 1.586986125s ago: executing program 0 (id=11901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb000009080001"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) 1.404951447s ago: executing program 3 (id=11902): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.256359175s ago: executing program 2 (id=11903): r0 = socket$inet(0x2, 0xa, 0x77b) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 833.955527ms ago: executing program 1 (id=11904): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x430, 0x190, 0x340, 0x430, 0x270, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 795.565751ms ago: executing program 0 (id=11905): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 507.45705ms ago: executing program 2 (id=11906): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0x70bd2d, 0x25dfdbfb, {0x2, 0x7c, 0x2100}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 44.540413ms ago: executing program 0 (id=11907): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=11908): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): n process `syz.3.9961'. [ 1798.336693][T18754] usb 2-1: USB disconnect, device number 38 [ 1798.375991][T30527] erofs (device loop2): mounted with root inode @ nid 36. [ 1798.809916][T30543] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9964'. [ 1798.845169][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9964'. [ 1798.882793][T30543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9964'. [ 1801.124966][T18754] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1801.307211][T18754] usb 5-1: Using ep0 maxpacket: 32 [ 1801.379478][T18754] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1801.404829][T18754] usb 5-1: config 0 has no interface number 0 [ 1801.432912][T18754] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1801.475173][T18754] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1801.565183][T18754] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1801.609246][T18754] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 1801.641310][T18754] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1801.717464][T18754] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1801.749786][T18754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.828603][T18754] usb 5-1: Product: syz [ 1801.833234][T18754] usb 5-1: Manufacturer: syz [ 1801.869313][T18754] usb 5-1: SerialNumber: syz [ 1801.902700][T18754] usb 5-1: config 0 descriptor?? [ 1801.976271][T18754] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input44 [ 1802.117312][T30608] loop2: detected capacity change from 0 to 4096 [ 1802.207785][T18754] usb 5-1: USB disconnect, device number 45 [ 1802.215121][T30608] ntfs3(loop2): ino=0, mi_enum_attr [ 1802.352287][T30608] ntfs3(loop2): ino=0, mi_enum_attr [ 1803.424501][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1803.424612][ T29] audit: type=1326 audit(2000000319.917:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30650 comm="syz.1.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292ad9c819 code=0x7ffc0000 [ 1803.581123][T30654] openvswitch: netlink: Missing valid actions attribute. [ 1803.604650][ T29] audit: type=1326 audit(2000000319.987:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30650 comm="syz.1.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292ad9c819 code=0x7ffc0000 [ 1803.606727][T30654] openvswitch: netlink: Actions may not be safe on all matching packets [ 1803.710438][ T29] audit: type=1326 audit(2000000320.017:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30650 comm="syz.1.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f292ad9c819 code=0x7ffc0000 [ 1803.841612][ T29] audit: type=1326 audit(2000000320.017:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30650 comm="syz.1.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292ad9c819 code=0x7ffc0000 [ 1803.980661][ T29] audit: type=1326 audit(2000000320.017:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30650 comm="syz.1.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292ad9c819 code=0x7ffc0000 [ 1804.569998][T30671] netlink: 8772 bytes leftover after parsing attributes in process `syz.0.10001'. [ 1805.475571][T18754] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1805.666451][T18754] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1805.706690][T18754] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1805.792298][T18754] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1805.834467][T18754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.843245][T18754] usb 1-1: Product: syz [ 1805.895646][T18754] usb 1-1: Manufacturer: syz [ 1805.901055][T18754] usb 1-1: SerialNumber: syz [ 1805.940364][T18754] usb 1-1: config 0 descriptor?? [ 1805.958220][T30685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1805.996783][T30685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1806.289917][T30685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1806.332869][T30685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1806.574578][T18754] Error reading MAC address [ 1806.636228][T18754] usb 1-1: USB disconnect, device number 37 [ 1806.932175][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1807.005797][T30730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10018'. [ 1809.013956][T30774] bond0: option arp_interval: invalid value (18446744073709551614) [ 1809.074746][T30774] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1809.289802][T30778] i2c i2c-0: Invalid block write size 254 [ 1809.865862][T30793] random: crng reseeded on system resumption [ 1810.488727][T30805] loop4: detected capacity change from 0 to 1024 [ 1810.618579][T30813] loop2: detected capacity change from 0 to 8 [ 1810.799802][T30813] cramfs: bad data blocksize 3959421443 [ 1810.817116][T30813] cramfs: bad data blocksize 4294965915 [ 1810.822974][T30813] cramfs: bad data blocksize 802397048 [ 1810.888461][T30813] cramfs: bad data blocksize 4294742353 [ 1810.926660][T30813] cramfs: bad data blocksize 4137424923 [ 1810.953947][T30813] cramfs: bad data blocksize 4285054030 [ 1811.002282][T30813] cramfs: bad data blocksize 3436389781 [ 1811.032540][T30813] cramfs: bad data blocksize 4294365136 [ 1811.079580][T30813] cramfs: bad data blocksize 4294967040 [ 1811.104970][T30813] cramfs: bad data blocksize 3959421443 [ 1811.165720][ T29] audit: type=1800 audit(2000000327.657:713): pid=30813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10048" name="file2" dev="loop2" ino=268 res=0 errno=0 [ 1812.475348][T30852] netlink: 'syz.2.10060': attribute type 2 has an invalid length. [ 1812.484032][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10060'. [ 1813.035299][T30865] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10064'. [ 1813.947491][ T8572] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1814.159812][ T8572] usb 1-1: Using ep0 maxpacket: 16 [ 1814.191232][ T8572] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.234110][ T8572] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1814.307251][ T8572] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 1814.346598][ T8572] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1814.397164][ T8572] usb 1-1: Product: syz [ 1814.401750][ T8572] usb 1-1: Manufacturer: syz [ 1814.456091][ T8572] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1814.657662][T18754] usb 1-1: USB disconnect, device number 38 [ 1814.727661][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10078'. [ 1815.270008][T30926] Timeout policy `syz0' can only be used by L3 protocol number 34916 [ 1815.800958][T30938] loop4: detected capacity change from 0 to 64 [ 1816.959020][T30965] loop1: detected capacity change from 0 to 1024 [ 1817.097224][T30965] overlay: filesystem on ./file0 not supported [ 1817.450586][T25184] hfsplus: b-tree write err: -5, ino 25 [ 1817.479251][T25184] hfsplus: b-tree write err: -5, ino 4 [ 1817.525569][T25184] hfsplus: b-tree write err: -5, ino 2 [ 1817.974043][T30988] loop1: detected capacity change from 0 to 512 [ 1818.011932][T30988] EXT4-fs: Ignoring removed i_version option [ 1818.069104][T30988] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1818.105625][T30988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 1818.127723][T30988] System zones: 1-12 [ 1818.133513][T30988] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1818.146738][T30988] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10102: invalid indirect mapped block 12 (level 1) [ 1818.247750][T30988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1818.251469][T30988] EXT4-fs (loop1): Remounting filesystem read-only [ 1818.262062][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1818.262175][ C1] EXT4-fs (loop1): initial error at time 2000000334: ext4_free_branches:1023: inode 11 [ 1818.262356][ C1] EXT4-fs (loop1): last error at time 2000000334: ext4_free_branches:1023: inode 11 [ 1818.371154][T30988] EXT4-fs (loop1): 1 truncate cleaned up [ 1818.394154][T30988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1818.869464][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1819.894671][ T8572] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1819.906817][T31031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10116'. [ 1819.924673][T31031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10116'. [ 1820.097182][ T8572] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 1820.136205][ T8572] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.179484][ T8572] usb 5-1: config 0 has no interface number 0 [ 1820.210515][ T8572] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1820.246249][T18754] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1820.261420][ T8572] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1820.315197][ T8572] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1820.358182][ T8572] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1820.435665][T18754] usb 4-1: Using ep0 maxpacket: 16 [ 1820.454499][ T8572] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1820.490165][ T8572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.525439][T18754] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1820.532043][ T8572] usb 5-1: Product: syz [ 1820.554686][T18754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.576670][ T8572] usb 5-1: Manufacturer: syz [ 1820.591811][ T8572] usb 5-1: SerialNumber: syz [ 1820.602419][T18754] usb 4-1: Product: syz [ 1820.613993][T18754] usb 4-1: Manufacturer: syz [ 1820.625735][T18754] usb 4-1: SerialNumber: syz [ 1820.635405][ T8572] usb 5-1: config 0 descriptor?? [ 1820.680695][ T8572] symbolserial 5-1:0.175: symbol converter detected [ 1820.727587][T18754] usb 4-1: config 0 descriptor?? [ 1820.777066][ T8572] usb 5-1: symbol converter now attached to ttyUSB0 [ 1820.788122][T18754] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1820.915173][ T8572] usb 5-1: USB disconnect, device number 46 [ 1821.079922][ T8572] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1821.141220][ T8572] symbolserial 5-1:0.175: device disconnected [ 1821.238208][T18754] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 1821.277172][T18754] visor 4-1:0.0: probe with driver visor failed with error -71 [ 1821.299772][T31077] CIFS: iocharset name too long [ 1821.352476][T18754] usb 4-1: USB disconnect, device number 41 [ 1824.885153][ T8572] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1825.072602][ T8572] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1825.105058][ T8572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.121901][ T8572] usb 1-1: config 0 descriptor?? [ 1825.172328][ T8572] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1825.250439][T31168] batadv1: entered promiscuous mode [ 1825.289384][T31168] batadv1: entered allmulticast mode [ 1825.604765][ T8572] gp8psk: usb in 138 operation failed. [ 1825.611004][ T8572] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1825.675129][ T8572] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1825.735289][ T8572] usb 1-1: USB disconnect, device number 39 [ 1825.981193][T31193] binfmt_misc: register: failed to install interpreter file ./file0 [ 1826.216846][T31199] loop1: detected capacity change from 0 to 1024 [ 1826.663393][T28444] hfsplus: b-tree write err: -5, ino 8 [ 1826.792032][T31213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10161'. [ 1827.200218][T31223] loop1: detected capacity change from 0 to 512 [ 1827.242879][T31223] EXT4-fs: Ignoring removed bh option [ 1827.269678][T31223] EXT4-fs: inline encryption not supported [ 1827.330175][T31223] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1827.557513][T31223] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1827.637379][T31223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10162: bg 0: block 248: padding at end of block bitmap is not set [ 1827.725415][T31223] loop1: lost filesystem error report for type 5 error -117 [ 1827.734384][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1827.749942][ C1] EXT4-fs (loop1): last error at time 2000000344: ext4_validate_block_bitmap:441 [ 1827.763030][T31223] Quota error (device loop1): write_blk: dquota write failed [ 1827.817958][T31223] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1827.955239][T31223] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.10162: Failed to acquire dquot type 1 [ 1828.016799][T31223] loop1: lost filesystem error report for type 5 error -28 [ 1828.026213][T31223] EXT4-fs (loop1): 1 truncate cleaned up [ 1828.157712][T31223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1828.772693][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1829.178243][T31247] loop4: detected capacity change from 0 to 4096 [ 1829.194144][T31263] netlink: 'syz.1.10171': attribute type 3 has an invalid length. [ 1829.222668][T31247] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1829.278685][ T8572] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1829.501498][T31247] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1829.534936][ T8572] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1829.566463][ T8572] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.654011][ T8572] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1829.678015][ T29] audit: type=1800 audit(2000000346.147:714): pid=31247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10169" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=33 res=0 errno=0 [ 1829.758745][ T8572] usb 4-1: config 1 has no interface number 0 [ 1829.814709][ T8572] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1829.924748][ T8572] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1829.948679][ T8572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.984858][ T8572] usb 4-1: Product: syz [ 1829.990037][ T8572] usb 4-1: Manufacturer: syz [ 1830.015378][T31270] netlink: 'syz.1.10174': attribute type 12 has an invalid length. [ 1830.044094][ T8572] usb 4-1: SerialNumber: syz [ 1830.130826][ T8572] cdc_wdm 4-1:1.128: skipping garbage [ 1830.179014][ T8572] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1830.331552][ T8572] usb 4-1: USB disconnect, device number 42 [ 1830.750025][T31286] loop4: detected capacity change from 0 to 1024 [ 1831.767009][ T29] audit: type=1326 audit(2000000348.267:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31306 comm="syz.4.10183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x0 [ 1832.397953][T31325] netlink: 'syz.2.10184': attribute type 2 has an invalid length. [ 1832.438676][T31325] netlink: 'syz.2.10184': attribute type 1 has an invalid length. [ 1832.471006][T31325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10184'. [ 1832.745671][T31329] netlink: 260 bytes leftover after parsing attributes in process `syz.1.10188'. [ 1833.092747][T31336] dlm: Unknown command passed to DLM device : 132 [ 1833.092747][T31336] [ 1833.993459][T31353] loop3: detected capacity change from 0 to 1024 [ 1834.123695][T31353] hfsplus: can't free extent: start 2889, count 1 [ 1834.675618][T31378] Cannot find del_set index 4 as target [ 1835.703059][T31400] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1835.757188][T31400] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1837.381562][T31439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1838.085303][T31456] kAFS: unable to lookup cell '.,' [ 1838.441383][T31464] loop2: detected capacity change from 0 to 512 [ 1840.200472][T31488] loop2: detected capacity change from 0 to 8192 [ 1841.124417][ T29] audit: type=1326 audit(2000000357.607:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31516 comm="syz.3.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 1841.265130][ T29] audit: type=1326 audit(2000000357.617:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31516 comm="syz.3.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 1841.346251][T24834] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1841.382326][ T29] audit: type=1326 audit(2000000357.647:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31516 comm="syz.3.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 1841.492160][ T29] audit: type=1326 audit(2000000357.647:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31516 comm="syz.3.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 1841.539161][T24834] usb 3-1: Using ep0 maxpacket: 8 [ 1841.635557][T24834] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1841.668971][T24834] usb 3-1: config 0 has no interface number 0 [ 1841.694479][T24834] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1841.744970][T24834] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1841.834546][T24834] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1841.890728][T24834] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1841.924964][T24834] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1841.959783][T24834] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1842.023015][T24834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.080975][T24834] usb 3-1: config 0 descriptor?? [ 1842.190376][T24834] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1842.426921][T31517] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1842.455209][T24834] usb 3-1: USB disconnect, device number 38 [ 1842.475100][ T8572] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1842.547343][T24834] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1842.704428][ T8572] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1842.780493][ T8572] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 1842.824855][ T8572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.849835][ T8572] usb 5-1: Product: syz [ 1842.864965][ T8572] usb 5-1: Manufacturer: syz [ 1842.881529][ T8572] usb 5-1: SerialNumber: syz [ 1843.186040][ T8572] option 5-1:4.0: GSM modem (1-port) converter detected [ 1843.279266][ T8572] usb 5-1: USB disconnect, device number 47 [ 1843.343402][ T8572] option 5-1:4.0: device disconnected [ 1843.481365][T31581] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10263'. [ 1844.740204][T31608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1847.069683][T31657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10289'. [ 1847.298329][T31665] vivid-002: disconnect [ 1847.351919][T31664] vivid-002: reconnect [ 1847.645409][T31673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10295'. [ 1847.724684][T31673] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10295'. [ 1847.787801][T31676] netlink: 'syz.2.10296': attribute type 8 has an invalid length. [ 1847.797753][T31673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10295'. [ 1847.862347][T31673] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10295'. [ 1848.670639][T31695] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10303'. [ 1849.025755][ T8572] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1849.243190][ T8572] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1849.277278][ T8572] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1849.297345][T24834] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1849.344440][ T8572] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1849.383381][ T8572] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1849.412355][ T8572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.540427][ T8572] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1849.552262][T24834] usb 5-1: Using ep0 maxpacket: 16 [ 1849.590502][T24834] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 1849.633042][T24834] usb 5-1: config 0 has no interface number 0 [ 1849.722047][T24834] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1849.765362][T24834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.773805][T24834] usb 5-1: Product: syz [ 1849.844623][T24834] usb 5-1: Manufacturer: syz [ 1849.870394][T24834] usb 5-1: SerialNumber: syz [ 1849.928452][T24834] usb 5-1: config 0 descriptor?? [ 1849.990552][T24834] usb 5-1: bad CDC descriptors [ 1850.216229][T24834] usb 5-1: USB disconnect, device number 48 [ 1850.753147][ T8572] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1850.905968][ T8572] usb 1-1: USB disconnect, device number 40 [ 1851.276635][T31769] bond8: option miimon: invalid value (18446744073709551615) [ 1851.285776][T31769] bond8: option miimon: allowed values 0 - 2147483647 [ 1851.323067][T31769] bond8 (unregistering): Released all slaves [ 1852.408512][T31866] loop2: detected capacity change from 0 to 256 [ 1852.678654][T31873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10328'. [ 1853.430832][T31893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10334'. [ 1855.819160][T31935] loop4: detected capacity change from 0 to 4096 [ 1855.904899][T31935] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1856.276209][T31935] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1856.901220][T31965] bond8 (unregistering): Released all slaves [ 1858.071480][ T29] audit: type=1326 audit(2000000374.567:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1858.184855][ T29] audit: type=1326 audit(2000000374.587:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1858.243899][T32057] openvswitch: netlink: Actions may not be safe on all matching packets [ 1858.297442][ T29] audit: type=1326 audit(2000000374.637:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1858.414598][ T29] audit: type=1326 audit(2000000374.647:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1858.514548][ T29] audit: type=1326 audit(2000000374.647:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1858.633382][ T29] audit: type=1326 audit(2000000374.647:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1858.776172][ T29] audit: type=1326 audit(2000000374.647:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1858.873612][ T29] audit: type=1326 audit(2000000374.657:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1859.021444][ T29] audit: type=1326 audit(2000000374.657:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1859.094023][T32074] loop2: detected capacity change from 0 to 128 [ 1859.144482][ T29] audit: type=1326 audit(2000000374.657:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32052 comm="syz.4.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1859.869899][T32084] loop4: detected capacity change from 0 to 2048 [ 1860.028518][T32084] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1860.149790][T32099] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1861.682936][T32126] loop1: detected capacity change from 0 to 1024 [ 1861.725006][T32131] netlink: 'syz.0.10392': attribute type 5 has an invalid length. [ 1862.423227][T32148] openvswitch: netlink: Actions may not be safe on all matching packets [ 1862.537291][T32137] loop3: detected capacity change from 0 to 4096 [ 1862.784114][T32154] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1863.188268][ T5778] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 11 already freed [ 1863.319471][ T5778] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 1863.393246][ T5778] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 1863.471306][ T5778] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1863.537631][ T5778] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed [ 1863.629527][ T5778] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed [ 1863.791642][T24834] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 12 already freed [ 1864.656448][T32190] loop4: detected capacity change from 0 to 128 [ 1864.784148][T32190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1864.891012][T32190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1866.910007][T32242] xt_hashlimit: max too large, truncated to 1048576 [ 1868.373706][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1869.896846][T32301] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1870.182856][T32307] loop1: detected capacity change from 0 to 64 [ 1870.906966][T32318] loop4: detected capacity change from 0 to 1024 [ 1871.052117][T32318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1871.559240][ T5773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.721722][T32334] loop1: detected capacity change from 0 to 4096 [ 1872.364596][ T8572] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1872.607772][ T8572] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.655243][ T8572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.694474][ T8572] usb 1-1: Product: syz [ 1872.705935][ T8572] usb 1-1: Manufacturer: syz [ 1872.722298][ T8572] usb 1-1: SerialNumber: syz [ 1872.747577][T32361] netlink: 'syz.4.10468': attribute type 10 has an invalid length. [ 1872.791506][ T8572] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1872.813861][T32361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10468'. [ 1872.840144][T32352] loop3: detected capacity change from 0 to 4096 [ 1872.865113][T32361] dummy0: entered promiscuous mode [ 1872.870997][T32361] dummy0: entered allmulticast mode [ 1872.889877][T32352] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 1872.919048][ T5833] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1872.931879][T32365] netlink: 'syz.2.10469': attribute type 11 has an invalid length. [ 1872.997556][T32361] bridge0: port 4(dummy0) entered blocking state [ 1873.040693][T32361] bridge0: port 4(dummy0) entered disabled state [ 1873.173781][T32361] bridge0: port 4(dummy0) entered blocking state [ 1873.181317][T32361] bridge0: port 4(dummy0) entered forwarding state [ 1873.299454][T32361] bridge0: mtu less than device minimum [ 1873.404697][T32352] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 1873.452648][T24834] usb 1-1: USB disconnect, device number 41 [ 1873.873934][T32377] loop1: detected capacity change from 0 to 1024 [ 1873.937733][T32377] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 9895604649987)! [ 1874.026197][T32377] EXT4-fs (loop1): group descriptors corrupted! [ 1874.110547][ T5833] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1874.171972][ T5833] ath9k_htc: Failed to initialize the device [ 1874.210004][T24834] usb 1-1: ath9k_htc: USB layer deinitialized [ 1875.168876][T32403] loop4: detected capacity change from 0 to 1764 [ 1875.306809][T32403] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1875.516180][T32414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10480'. [ 1876.082818][T32426] loop3: detected capacity change from 0 to 256 [ 1876.115703][T32430] netlink: 'syz.1.10485': attribute type 11 has an invalid length. [ 1876.198781][T32433] loop2: detected capacity change from 0 to 64 [ 1876.279075][T32426] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1877.172955][T32452] loop3: detected capacity change from 0 to 8 [ 1877.835644][ T29] audit: type=1326 audit(2000000394.327:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32463 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1877.962663][ T29] audit: type=1326 audit(2000000394.367:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32463 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1878.092228][ T29] audit: type=1326 audit(2000000394.397:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32463 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1878.192532][ T29] audit: type=1326 audit(2000000394.407:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32463 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1879.289589][T32498] loop3: detected capacity change from 0 to 256 [ 1879.614552][T32498] FAT-fs (loop3): Directory bread(block 64) failed [ 1879.654784][T32498] FAT-fs (loop3): Directory bread(block 65) failed [ 1879.661896][T32498] FAT-fs (loop3): Directory bread(block 66) failed [ 1879.729352][T32498] FAT-fs (loop3): Directory bread(block 67) failed [ 1879.787993][T32509] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1879.796848][T32498] FAT-fs (loop3): Directory bread(block 68) failed [ 1879.797063][T32498] FAT-fs (loop3): Directory bread(block 69) failed [ 1879.797329][T32498] FAT-fs (loop3): Directory bread(block 70) failed [ 1879.797477][T32498] FAT-fs (loop3): Directory bread(block 71) failed [ 1879.797981][T32498] FAT-fs (loop3): Directory bread(block 72) failed [ 1879.798122][T32498] FAT-fs (loop3): Directory bread(block 73) failed [ 1880.953780][T32532] loop3: detected capacity change from 0 to 16 [ 1882.110654][T32532] erofs (device loop3): mounted with root inode @ nid 36. [ 1882.331981][T32560] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10529'. [ 1882.425334][T32560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1883.777065][T32572] "syz.4.10535" (32572) uses obsolete ecb(arc4) skcipher [ 1884.684092][T32604] i2c i2c-0: Invalid block write size 152 [ 1887.108365][ C1] sd 0:0:1:0: [sda] tag#5454 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1887.120912][ C1] sd 0:0:1:0: [sda] tag#5454 CDB: Write(6) 0a 00 72 47 43 76 [ 1887.418323][T32671] loop3: detected capacity change from 0 to 24 [ 1888.501546][T32699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10577'. [ 1888.953847][T32708] loop4: detected capacity change from 0 to 256 [ 1889.176604][T32708] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1889.920801][T32721] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10584'. [ 1891.497137][T32757] loop4: detected capacity change from 0 to 128 [ 1891.596199][T32757] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1891.758815][T32757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1892.142727][ T5833] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1892.368043][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 1892.415281][ T5833] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1892.454588][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.494559][ T5833] usb 2-1: Product: syz [ 1892.499349][ T5833] usb 2-1: Manufacturer: syz [ 1892.534895][ T5833] usb 2-1: SerialNumber: syz [ 1892.607529][ T5833] usb 2-1: config 0 descriptor?? [ 1892.742160][ T5833] usb 2-1: selecting invalid altsetting 3 [ 1892.795151][ T5833] comedi comedi4: could not set alternate setting 3 in high speed [ 1892.811532][ T5833] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1892.880249][ T5833] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 1892.939875][ T5833] usb 2-1: USB disconnect, device number 39 [ 1894.058562][ T346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10609'. [ 1895.058316][ T370] netlink: 'syz.0.10616': attribute type 16 has an invalid length. [ 1895.774793][T24834] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1895.959767][T24834] usb 2-1: Using ep0 maxpacket: 32 [ 1895.987667][T24834] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1896.032762][T24834] usb 2-1: config 0 has no interface number 0 [ 1896.060421][T24834] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1896.079079][T18754] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1896.106598][T24834] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1896.217575][T24834] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1896.240984][ T404] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1896.257337][T18754] usb 4-1: Using ep0 maxpacket: 16 [ 1896.266787][T24834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.307165][T24834] usb 2-1: Product: syz [ 1896.314141][T24834] usb 2-1: Manufacturer: syz [ 1896.321186][T24834] usb 2-1: SerialNumber: syz [ 1896.329138][T18754] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1896.341830][T18754] usb 4-1: config 0 has no interface number 0 [ 1896.356595][T24834] usb 2-1: config 0 descriptor?? [ 1896.365403][T18754] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1896.403890][T18754] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1896.465990][T18754] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1896.484929][T18754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.535087][T18754] usb 4-1: Product: syz [ 1896.540023][T18754] usb 4-1: Manufacturer: syz [ 1896.564638][T18754] usb 4-1: SerialNumber: syz [ 1896.639251][T18754] usb 4-1: config 0 descriptor?? [ 1896.674849][T24834] radio-si470x 2-1:0.35: this is not a si470x device. [ 1896.700285][ T391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1896.715795][ T391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1896.772858][ T29] audit: type=1326 audit(2000000413.267:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=411 comm="syz.0.10628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 1896.868258][T24834] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1896.897700][ T29] audit: type=1326 audit(2000000413.327:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=411 comm="syz.0.10628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 1896.967900][T24834] usb 2-1: USB disconnect, device number 40 [ 1896.992321][ T391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1897.013575][ T29] audit: type=1326 audit(2000000413.347:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=411 comm="syz.0.10628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 1897.073552][ T391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1897.132163][ T29] audit: type=1326 audit(2000000413.347:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=411 comm="syz.0.10628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 1897.238945][ T423] loop2: detected capacity change from 0 to 16 [ 1897.264016][ T29] audit: type=1326 audit(2000000413.347:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=411 comm="syz.0.10628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 1897.312281][T18754] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1897.366262][T18754] asix 4-1:0.34: probe with driver asix failed with error -71 [ 1897.480285][T18754] usb 4-1: USB disconnect, device number 43 [ 1897.987748][ T440] loop1: detected capacity change from 0 to 24 [ 1898.096307][ T440] romfs: read error for inode 0x8000 [ 1898.407383][ T423] erofs (device loop2): mounted with root inode @ nid 36. [ 1898.574622][ T5833] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1898.773347][ T5833] usb 4-1: config index 0 descriptor too short (expected 64971, got 72) [ 1898.820040][ T5833] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1898.875207][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.915131][ T5833] usb 4-1: Product: syz [ 1898.935962][ T5833] usb 4-1: Manufacturer: syz [ 1898.970943][ T5833] usb 4-1: SerialNumber: syz [ 1899.099201][ T5833] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1899.247007][ T8572] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.942996][T18754] usb 4-1: USB disconnect, device number 44 [ 1900.007066][ T476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10641'. [ 1900.514549][ T8572] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1900.544910][ T8572] ath9k_htc: Failed to initialize the device [ 1900.601735][T18754] usb 4-1: ath9k_htc: USB layer deinitialized [ 1900.913719][ T494] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10645'. [ 1901.016435][ T494] unsupported nlmsg_type 40 [ 1902.109243][ T522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10654'. [ 1902.550052][ T530] netlink: 11 bytes leftover after parsing attributes in process `syz.4.10656'. [ 1904.251406][ T573] netlink: 'syz.0.10671': attribute type 21 has an invalid length. [ 1904.262397][ T573] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10671'. [ 1904.285031][ T573] netlink: 'syz.0.10671': attribute type 4 has an invalid length. [ 1904.300590][ T573] netlink: 'syz.0.10671': attribute type 5 has an invalid length. [ 1904.311450][ T573] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10671'. [ 1904.340991][ T575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10672'. [ 1904.419339][ T575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10672'. [ 1904.587409][ T578] loop3: detected capacity change from 0 to 1024 [ 1904.739047][ T578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1905.212478][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1905.699600][ T611] openvswitch: netlink: Flow actions attr not present in new flow. [ 1906.049664][ T29] audit: type=1326 audit(2000000422.547:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1906.155135][ T29] audit: type=1326 audit(2000000422.597:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1906.251735][ T29] audit: type=1326 audit(2000000422.597:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1906.365110][ T29] audit: type=1326 audit(2000000422.607:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1906.480690][ T29] audit: type=1326 audit(2000000422.607:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1906.504845][ T623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10689'. [ 1906.604777][ T29] audit: type=1326 audit(2000000422.607:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1906.707769][ T29] audit: type=1326 audit(2000000422.627:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1906.802521][ T29] audit: type=1326 audit(2000000422.627:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.4.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe72d19c819 code=0x7ffc0000 [ 1908.285035][ T665] loop3: detected capacity change from 0 to 16 [ 1908.313237][ T665] erofs (device loop3): mounted with root inode @ nid 36. [ 1909.035671][ T687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10711'. [ 1909.477590][ T692] netlink: 'syz.2.10712': attribute type 11 has an invalid length. [ 1909.524671][ T692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10712'. [ 1911.329331][ T739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10729'. [ 1911.377684][ T744] PKCS8: Unsupported PKCS#8 version [ 1911.564654][ T8572] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1911.751196][ T8572] usb 1-1: Using ep0 maxpacket: 32 [ 1911.778905][ T8572] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1911.805671][ T8572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1911.846854][ T8572] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 1911.884820][ T8572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.914739][ T8572] usb 1-1: Product: syz [ 1911.919274][ T8572] usb 1-1: Manufacturer: syz [ 1911.948171][ T8572] usb 1-1: SerialNumber: syz [ 1912.946290][ T8572] usb 1-1: USB disconnect, device number 42 [ 1913.122048][ T794] loop2: detected capacity change from 0 to 64 [ 1913.906002][ T823] netlink: 'syz.2.10747': attribute type 4 has an invalid length. [ 1914.069894][ T826] netlink: 'syz.0.10748': attribute type 5 has an invalid length. [ 1914.421160][ T837] IPVS: Unknown mcast interface: veth0_virt_wifi [ 1914.709702][ T842] loop4: detected capacity change from 0 to 512 [ 1914.806611][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1914.897472][ T842] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1915.014637][ T842] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.10753: EA inode hash validation failed [ 1915.106894][ T842] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1915.194057][ T842] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.10753: corrupted inode contents [ 1915.265224][ T842] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1915.266741][ T842] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #15: comm syz.4.10753: mark_inode_dirty error [ 1915.276801][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1915.276918][ C0] EXT4-fs (loop4): initial error at time 2000000431: ext4_do_update_inode:5602: inode 15 [ 1915.277101][ C0] EXT4-fs (loop4): last error at time 2000000431: ext4_do_update_inode:5602: inode 15 [ 1915.532685][ T842] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1915.539798][ T842] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.10753: corrupted inode contents [ 1915.630662][ T860] nbd: illegal input index -1495182229 [ 1915.684974][ T842] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1915.694829][ T842] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.10753: mark_inode_dirty error [ 1915.787072][ T842] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1915.804758][ T842] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.10753: mark inode dirty (error -117) [ 1915.885081][ T842] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1915.886542][ T842] EXT4-fs warning (device loop4): ext4_evict_inode:285: xattr delete (err -117) [ 1915.970407][ T842] EXT4-fs (loop4): 1 orphan inode deleted [ 1916.009767][ T842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1916.460173][ T870] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10764'. [ 1916.562084][ T5773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1917.173937][ T882] loop1: detected capacity change from 0 to 2048 [ 1917.240172][ T882] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1917.415015][ T889] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1918.601484][ T925] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1919.425452][ T952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10786'. [ 1920.006116][ T965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1921.188043][ T991] loop2: detected capacity change from 0 to 1024 [ 1921.586285][T28432] hfsplus: b-tree write err: -5, ino 25 [ 1921.615125][T28432] hfsplus: b-tree write err: -5, ino 4 [ 1921.645857][T28432] hfsplus: b-tree write err: -5, ino 2 [ 1922.201187][ T1019] loop4: detected capacity change from 0 to 256 [ 1922.777289][ T1035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10811'. [ 1922.825011][ T1035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10811'. [ 1922.919211][ T1041] loop4: detected capacity change from 0 to 16 [ 1922.988611][ T1041] erofs (device loop4): mounted with root inode @ nid 36. [ 1923.044508][ T1038] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10813'. [ 1923.075720][ T1041] syz.4.10812: attempt to access beyond end of device [ 1923.075720][ T1041] loop4: rw=524288, sector=256, nr_sectors = 8 limit=16 [ 1923.091457][ T1038] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1923.365469][ T1041] syz.4.10812: attempt to access beyond end of device [ 1923.365469][ T1041] loop4: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 1923.718199][ T1067] netlink: 'syz.2.10816': attribute type 6 has an invalid length. [ 1923.807523][ T1041] syz.4.10812: attempt to access beyond end of device [ 1923.807523][ T1041] loop4: rw=524288, sector=0, nr_sectors = 1792 limit=16 [ 1924.087233][ T1041] syz.4.10812: attempt to access beyond end of device [ 1924.087233][ T1041] loop4: rw=0, sector=256, nr_sectors = 8 limit=16 [ 1924.163809][ T1041] erofs (device loop4): read error -5 @ 1 of nid 89 [ 1924.208570][ T29] audit: type=1800 audit(2000000440.707:747): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10812" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1925.244614][ T1057] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1925.455007][ T1057] usb 3-1: Using ep0 maxpacket: 8 [ 1925.480379][ T1057] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1925.535131][ T1057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.543797][ T1057] usb 3-1: Product: syz [ 1925.573347][ T1057] usb 3-1: Manufacturer: syz [ 1925.585585][ T1057] usb 3-1: SerialNumber: syz [ 1925.614889][ T1057] usb 3-1: config 0 descriptor?? [ 1925.685598][ T1057] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1926.081426][ T1057] gspca_sq930x: ucbus_write failed -71 [ 1926.104944][ T8572] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1926.294742][ T8572] usb 2-1: Using ep0 maxpacket: 16 [ 1926.315017][ T1057] gspca_sq930x: Sensor ov9630 not yet treated [ 1926.323453][ T8572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 1926.344974][ T1057] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 1926.393940][ T8572] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1926.423361][ T1057] usb 3-1: USB disconnect, device number 39 [ 1926.425825][ T8572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.487727][ T8572] usb 2-1: Product: syz [ 1926.492636][ T8572] usb 2-1: Manufacturer: syz [ 1926.536017][ T8572] usb 2-1: SerialNumber: syz [ 1926.574048][ T8572] usb 2-1: config 0 descriptor?? [ 1926.598883][ T1111] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1926.642559][ T8572] hub 2-1:0.0: bad descriptor, ignoring hub [ 1926.665810][ T8572] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1926.757332][ T8572] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 1927.133976][ T8572] usb 2-1: USB disconnect, device number 41 [ 1927.399067][ T1165] usb usb8: usbfs: process 1165 (syz.3.10840) did not claim interface 6 before use [ 1928.172818][ T8572] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1928.416868][ T8572] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1928.436790][ T8572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.473630][ T8572] usb 4-1: Product: syz [ 1928.494764][ T8572] usb 4-1: Manufacturer: syz [ 1928.499746][ T8572] usb 4-1: SerialNumber: syz [ 1928.515151][ T1057] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1928.607818][ T8572] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1928.745393][ T1057] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1928.773153][ T5833] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1928.798534][ T1057] usb 2-1: config 1 has no interface number 0 [ 1928.826573][ T1057] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1928.879788][ T1057] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1928.932435][ T1057] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.075047][ T1057] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1929.131010][ T1057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.208177][ T1057] usb 2-1: Product: syz [ 1929.213322][ T1057] usb 2-1: Manufacturer: syz [ 1929.287376][ T1057] usb 2-1: SerialNumber: syz [ 1929.346557][ T1056] usb 4-1: USB disconnect, device number 45 [ 1929.370165][ T1181] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1929.678621][ T1181] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1929.807045][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1929.959530][ T1057] usb 2-1: Incompatible driver and firmware versions [ 1930.008222][ T1057] usb 2-1: USB disconnect, device number 42 [ 1930.029131][ T5833] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1930.060675][ T5833] ath9k_htc: Failed to initialize the device [ 1930.097116][ T1056] usb 4-1: ath9k_htc: USB layer deinitialized [ 1930.458552][ T1237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1930.877830][ T1244] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1932.154788][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10870'. [ 1932.203113][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10870'. [ 1933.519639][ T1309] kAFS: unable to lookup cell 'syz1' [ 1933.885062][ T5833] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1934.072460][ T5833] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1934.102615][ T5833] usb 4-1: config 0 has no interface number 0 [ 1934.130571][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1934.176424][ T5833] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1934.204068][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1934.242744][ T5833] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1934.264788][ T5833] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1934.434725][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1934.475274][ T5833] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1934.530270][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.594661][ T5833] usb 4-1: config 0 descriptor?? [ 1934.606159][ T1314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1934.615867][ T1314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1934.643525][ T1324] loop1: detected capacity change from 0 to 4096 [ 1934.693429][ T5833] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1934.771629][ T1324] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 1934.947714][ T5833] usb 4-1: USB disconnect, device number 46 [ 1935.025045][ T5833] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1935.133929][ T1324] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1935.193319][ T1352] netlink: 'syz.4.10890': attribute type 10 has an invalid length. [ 1935.304010][ T1352] bridge0: port 3(team0) entered disabled state [ 1935.347110][ T1352] team0: left allmulticast mode [ 1935.382124][ T1352] team_slave_0: left allmulticast mode [ 1935.428520][ T1352] team_slave_1: left allmulticast mode [ 1935.452102][ T1352] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 1935.498597][ T1352] team0: left promiscuous mode [ 1935.541506][ T1352] team_slave_0: left promiscuous mode [ 1935.573597][ T1352] team_slave_1: left promiscuous mode [ 1935.601963][ T1352] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 1935.623891][ T1352] bridge0: port 3(team0) entered disabled state [ 1935.667876][ T1352] bridge0: mtu less than device minimum [ 1935.706995][ T1352] team0: Cannot enslave team device to itself [ 1936.290440][ T1367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10895'. [ 1936.665433][ T5833] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1936.869956][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1936.934624][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 1936.974881][ T5833] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1937.024748][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.060955][ T5833] usb 5-1: config 0 descriptor?? [ 1937.311512][ T5833] ath6kl: Failed to submit usb control message: -71 [ 1937.319018][ T5833] ath6kl: unable to send the bmi data to the device: -71 [ 1937.328510][ T5833] ath6kl: Unable to send get target info: -71 [ 1937.336852][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 1937.351383][ T5833] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1937.455349][ T5833] usb 5-1: USB disconnect, device number 49 [ 1940.176060][ T1466] binder: 1464:1466 ioctl c0306201 200000000c80 returned -14 [ 1941.336524][ T1491] loop1: detected capacity change from 0 to 512 [ 1941.413716][ T1490] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1941.493335][ T1491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1941.582667][ T1491] ext4 filesystem being mounted at /2137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1941.885660][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1943.665527][ T1549] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10951'. [ 1943.870947][ T1556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10952'. [ 1943.964903][ T1556] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1944.083798][ T1560] loop1: detected capacity change from 0 to 512 [ 1944.136756][ T1562] usb usb7: usbfs: process 1562 (syz.0.10956) did not claim interface 0 before use [ 1944.333833][ T1560] syz.1.10955: attempt to access beyond end of device [ 1944.333833][ T1560] loop1: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 1944.422334][ T1560] syz.1.10955: attempt to access beyond end of device [ 1944.422334][ T1560] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 1944.538012][ T29] audit: type=1800 audit(2000000461.037:748): pid=1560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10955" name="file2" dev="loop1" ino=1048725 res=0 errno=0 [ 1945.636737][ T1596] loop4: detected capacity change from 0 to 256 [ 1945.670343][ T1596] exfat: Deprecated parameter 'utf8' [ 1945.699637][ T1596] exfat: Deprecated parameter 'namecase' [ 1945.740251][ T1596] exfat: Deprecated parameter 'namecase' [ 1945.754618][ T1601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10968'. [ 1945.839995][ T1601] Unknown options in mask b7f2 [ 1945.909367][ T1596] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1946.193070][ T1608] loop2: detected capacity change from 0 to 256 [ 1947.243849][ T1634] loop4: detected capacity change from 0 to 256 [ 1947.654762][ T1640] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10981'. [ 1947.733771][ T1640] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10981'. [ 1948.229937][ T1654] loop1: detected capacity change from 0 to 128 [ 1948.284741][ T1654] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1948.326830][ T1654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1948.365063][ T1654] System zones: 1-3, 19-19, 35-36 [ 1948.423044][ T1654] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1948.507791][ T1654] ext4 filesystem being mounted at /2147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1948.585544][ T1654] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1949.116598][ T1673] loop4: detected capacity change from 0 to 764 [ 1949.262475][ T1673] rock: directory entry would overflow storage [ 1949.313561][ T1673] rock: sig=0x4f50, size=4, remaining=3 [ 1949.364567][ T1673] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1949.376994][ T1677] loop2: detected capacity change from 0 to 2048 [ 1949.491109][ T1684] netlink: 'syz.1.10994': attribute type 3 has an invalid length. [ 1949.512575][ T1677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1951.100346][ T1713] loop1: detected capacity change from 0 to 1024 [ 1951.272759][ T1713] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1952.386788][ T1742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11012'. [ 1952.416133][ T1742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11012'. [ 1953.105339][ T1758] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1953.410362][ T1762] loop4: detected capacity change from 0 to 512 [ 1953.470863][ T1762] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1953.764702][ T29] audit: type=1326 audit(2000000470.257:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1771 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 1953.924909][ T29] audit: type=1326 audit(2000000470.307:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1771 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 1954.044542][ T29] audit: type=1326 audit(2000000470.327:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1771 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 1954.167107][ T29] audit: type=1326 audit(2000000470.327:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1771 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 1954.311369][ T29] audit: type=1326 audit(2000000470.327:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1771 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 1955.238661][ T1801] loop4: detected capacity change from 0 to 512 [ 1955.417761][ T1801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1955.433498][ T1801] ext4 filesystem being mounted at /2207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1955.817263][ T5773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1957.061222][ T1849] loop3: detected capacity change from 0 to 64 [ 1957.746022][ T1862] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1958.525409][ T1883] program syz.2.11059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1960.126946][ T1918] loop4: detected capacity change from 0 to 136 [ 1960.282720][ T1918] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 1961.054995][ T1945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11079'. [ 1961.094459][ T1945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11079'. [ 1961.616564][ T1952] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11081'. [ 1962.189963][ T1968] loop3: detected capacity change from 0 to 256 [ 1963.194738][ T5833] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1963.212257][ T1995] netlink: 'syz.1.11095': attribute type 1 has an invalid length. [ 1963.405271][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 1963.432074][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.465602][ T5833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1963.470428][ T1999] loop2: detected capacity change from 0 to 256 [ 1963.511485][ T5833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1963.526816][ T1999] exfat: Deprecated parameter 'utf8' [ 1963.533267][ T1999] exfat: Deprecated parameter 'namecase' [ 1963.557091][ T5833] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1963.623965][ T5833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1963.644852][ T1999] exfat: Deprecated parameter 'utf8' [ 1963.667304][ T5833] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1963.705389][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.744914][ T5833] usb 5-1: Product: syz [ 1963.756483][ T5833] usb 5-1: Manufacturer: syz [ 1963.797817][ T5833] usb 5-1: SerialNumber: syz [ 1963.809662][ T1999] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1963.828381][ T5833] usb 5-1: config 0 descriptor?? [ 1963.919396][ T1999] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 1963.933587][ T5833] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1964.126847][ T5833] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1964.193189][ T5833] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1964.263818][ T5833] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1964.389917][ T5833] usb 5-1: USB disconnect, device number 50 [ 1965.296648][ T2032] loop2: detected capacity change from 0 to 4096 [ 1965.818593][ T2032] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1965.865045][ T2032] ntfs3(loop2): Failed to load $Extend (-22). [ 1965.871572][ T2032] ntfs3(loop2): Failed to initialize $Extend. [ 1965.977263][ T2032] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1966.382736][ T5777] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 1967.475735][ T5833] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1967.515590][ T2076] loop3: detected capacity change from 0 to 4096 [ 1967.589471][ T2092] loop2: detected capacity change from 0 to 64 [ 1967.683921][ T5833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1967.721757][ T5833] usb 2-1: not running at top speed; connect to a high speed hub [ 1967.762489][ T5833] usb 2-1: config 11 has an invalid interface number: 150 but max is 0 [ 1967.804475][ T5833] usb 2-1: config 11 has no interface number 0 [ 1967.835832][ T5833] usb 2-1: config 11 interface 150 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1967.897811][ T5833] usb 2-1: config 11 interface 150 has no altsetting 0 [ 1967.973896][ T5833] usb 2-1: New USB device found, idVendor=67b8, idProduct=a3eb, bcdDevice=46.22 [ 1968.035442][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.044128][ T5833] usb 2-1: Product: syz [ 1968.081948][ T5833] usb 2-1: Manufacturer: syz [ 1968.092234][ T5833] usb 2-1: SerialNumber: syz [ 1968.436295][ T5833] rndis_host 2-1:11.150: skipping garbage [ 1968.464835][ T5833] usb 2-1: bad CDC descriptors [ 1968.591713][ T5833] usb 2-1: USB disconnect, device number 43 [ 1968.966730][ T2122] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1968.998624][ T2124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11130'. [ 1969.547538][ T2135] netlink: 'syz.3.11134': attribute type 1 has an invalid length. [ 1970.048317][ T2146] loop1: detected capacity change from 0 to 256 [ 1970.395559][ T2146] FAT-fs (loop1): Directory bread(block 64) failed [ 1970.434799][ T2146] FAT-fs (loop1): Directory bread(block 65) failed [ 1970.455179][ T2146] FAT-fs (loop1): Directory bread(block 66) failed [ 1970.462896][ T2146] FAT-fs (loop1): Directory bread(block 67) failed [ 1970.531374][ T2146] FAT-fs (loop1): Directory bread(block 68) failed [ 1970.584466][ T2146] FAT-fs (loop1): Directory bread(block 69) failed [ 1970.592174][ T2146] FAT-fs (loop1): Directory bread(block 70) failed [ 1970.645073][ T2146] FAT-fs (loop1): Directory bread(block 71) failed [ 1970.652945][ T2146] FAT-fs (loop1): Directory bread(block 72) failed [ 1970.723722][ T2146] FAT-fs (loop1): Directory bread(block 73) failed [ 1970.939052][ T2168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11144'. [ 1973.485420][ T2220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11162'. [ 1973.724904][ T2223] loop1: detected capacity change from 0 to 764 [ 1974.411855][ T2243] loop1: detected capacity change from 0 to 256 [ 1974.659253][ T2243] FAT-fs (loop1): Directory bread(block 64) failed [ 1974.695129][ T2243] FAT-fs (loop1): Directory bread(block 65) failed [ 1974.703053][ T2243] FAT-fs (loop1): Directory bread(block 66) failed [ 1974.776090][ T2243] FAT-fs (loop1): Directory bread(block 67) failed [ 1974.804826][ T2243] FAT-fs (loop1): Directory bread(block 68) failed [ 1974.812361][ T2243] FAT-fs (loop1): Directory bread(block 69) failed [ 1974.859462][ T2243] FAT-fs (loop1): Directory bread(block 70) failed [ 1974.879589][ T2252] libceph: resolve '400' (ret=-3): failed [ 1974.914614][ T2243] FAT-fs (loop1): Directory bread(block 71) failed [ 1974.936998][ T2243] FAT-fs (loop1): Directory bread(block 72) failed [ 1975.004583][ T2243] FAT-fs (loop1): Directory bread(block 73) failed [ 1976.117411][ T2277] loop2: detected capacity change from 0 to 1024 [ 1976.244558][ T2277] hfsplus: invalid length 256 has been corrected to 255 [ 1976.314049][ T2277] hfsplus: invalid length 256 has been corrected to 255 [ 1976.530397][ T2290] netlink: 'syz.4.11184': attribute type 16 has an invalid length. [ 1976.542659][ T2290] netlink: 'syz.4.11184': attribute type 17 has an invalid length. [ 1976.715995][T28432] hfsplus: b-tree write err: -5, ino 25 [ 1976.722753][T28432] hfsplus: b-tree write err: -5, ino 4 [ 1976.755732][ T2290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1976.774969][T28432] hfsplus: b-tree write err: -5, ino 2 [ 1976.922933][ T2290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1977.007113][ T2299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11186'. [ 1977.054780][ T29] audit: type=1400 audit(2000000493.547:754): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=2298 comm="syz.3.11188" [ 1977.084853][ T5833] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1977.279890][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1977.349943][ T5833] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1977.406677][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.487687][ T5833] usb 1-1: config 0 descriptor?? [ 1977.566792][ T5833] smsusb:smsusb_probe: board id=8, interface number 0 [ 1977.629180][ T5833] smsusb:smsusb_probe: Device initialized with return code -19 [ 1978.094532][ T5833] usb 1-1: USB disconnect, device number 43 [ 1978.625009][ T8572] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1978.815291][ T8572] usb 5-1: Using ep0 maxpacket: 8 [ 1978.839502][ T8572] usb 5-1: config 0 has an invalid interface number: 88 but max is 3 [ 1978.855137][ T2346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11198'. [ 1978.868663][ T8572] usb 5-1: config 0 has an invalid interface number: 250 but max is 3 [ 1978.909081][ T8572] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.956618][ T8572] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 1979.010375][ T8572] usb 5-1: config 0 has no interface number 0 [ 1979.024699][ T8572] usb 5-1: config 0 has no interface number 1 [ 1979.056508][ T8572] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1979.064104][ T8572] usb 5-1: config 0 interface 250 has no altsetting 0 [ 1979.127692][ T8572] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 1979.148377][ T8572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.172940][ T2352] loop2: detected capacity change from 0 to 128 [ 1979.196121][ T8572] usb 5-1: config 0 descriptor?? [ 1979.209530][ T2352] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1979.331972][ T2352] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1979.475353][ T8572] usb 5-1: string descriptor 0 read error: -71 [ 1979.628441][ T8572] usb 5-1: USB disconnect, device number 51 [ 1979.813307][T28444] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1980.286401][ T2387] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11206'. [ 1982.354056][ T2445] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11223'. [ 1983.225744][ T2473] loop1: detected capacity change from 0 to 128 [ 1983.281735][ T2473] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1983.371549][ T2473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1983.412064][ T2477] netlink: 2208 bytes leftover after parsing attributes in process `syz.0.11232'. [ 1984.482629][ T2490] loop3: detected capacity change from 0 to 4096 [ 1985.782358][ T2537] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.138415][ T2550] loop1: detected capacity change from 0 to 64 [ 1987.802224][ T2594] kAFS: unparsable volume name [ 1988.652806][ T2612] netlink: 'syz.1.11269': attribute type 31 has an invalid length. [ 1989.066575][ T8572] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1989.220655][ T2632] loop4: detected capacity change from 0 to 8 [ 1989.270331][ T8572] usb 4-1: Using ep0 maxpacket: 32 [ 1989.316970][ T8572] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1989.336260][ T2632] cramfs: Error -3 while decompressing! [ 1989.353363][ T8572] usb 4-1: config 0 has no interface number 0 [ 1989.374328][ T2632] cramfs: ffffffff959df238(26)->ffff88812d6ee000(4096) [ 1989.381586][ T2632] cramfs: Error -3 while decompressing! [ 1989.395021][ T8572] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1989.436831][ T8572] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1989.455474][ T2632] cramfs: ffffffff959df252(26)->ffff88812fbc6000(4096) [ 1989.490241][ T6006] udevd[6006]: incorrect cramfs checksum on /dev/loop4 [ 1989.497086][ T2632] cramfs: Error -3 while decompressing! [ 1989.506343][ T2632] cramfs: ffffffff959df26c(16)->ffff88811b7fb000(4096) [ 1989.514606][ T8572] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1989.540751][ T8572] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1989.566709][ T2632] cramfs: Error -3 while decompressing! [ 1989.573203][ T2632] cramfs: ffffffff959df238(26)->ffff88812d6ee000(4096) [ 1989.619479][ T8572] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1989.639756][ T8572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.664496][ T8572] usb 4-1: Product: syz [ 1989.691505][ T8572] usb 4-1: Manufacturer: syz [ 1989.707838][ T8572] usb 4-1: SerialNumber: syz [ 1989.742183][ T8572] usb 4-1: config 0 descriptor?? [ 1989.836709][ T8572] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input51 [ 1990.071832][ T8572] usb 4-1: USB disconnect, device number 47 [ 1990.315324][ T2675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11279'. [ 1991.250700][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1991.518869][ T2693] loop4: detected capacity change from 0 to 4096 [ 1991.578872][ T2693] EXT4-fs: inline encryption not supported [ 1991.628821][ T2693] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1991.711976][ T2693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 1991.747234][ T2693] System zones: 0-5 [ 1991.797888][ T2693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1992.239291][ T2721] loop1: detected capacity change from 0 to 512 [ 1992.294017][ T2721] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1992.311967][ T5773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1992.346393][ T2721] EXT4-fs (loop1): bad geometry: first data block is 0 with a 1k block and cluster size [ 1992.714547][ T8572] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1992.905269][ T8572] usb 2-1: Using ep0 maxpacket: 32 [ 1992.982940][ T8572] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.08 [ 1993.023853][ T8572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1993.109850][ T8572] usb 2-1: SerialNumber: syz [ 1993.128993][ T8572] usb 2-1: config 0 descriptor?? [ 1993.177644][ T8572] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1993.223351][ T8572] usb 2-1: Detected SIO [ 1993.273593][ T8572] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1993.399250][ T8572] usb 2-1: USB disconnect, device number 44 [ 1993.460907][ T8572] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1993.489601][ T8572] ftdi_sio 2-1:0.0: device disconnected [ 1995.292852][ T2809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11307'. [ 1995.336217][ T2809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11307'. [ 1995.595447][ T2819] netlink: 'syz.4.11311': attribute type 4 has an invalid length. [ 1995.635161][ T2819] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11311'. [ 1995.877775][ T2819] .`: renamed from bond0 (while UP) [ 1996.011109][ T2835] loop2: detected capacity change from 0 to 128 [ 1996.113611][ T2835] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1996.144856][ T2835] ext4 filesystem being mounted at /2288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1996.377943][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1996.678670][ T2859] loop3: detected capacity change from 0 to 16 [ 1996.731387][ T2859] erofs (device loop3): mounted with root inode @ nid 36. [ 1996.942756][ T8572] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1997.156225][ T8572] usb 2-1: Using ep0 maxpacket: 8 [ 1997.191021][ T8572] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1997.247302][ T8572] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.279523][ T8572] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1997.324578][ T8572] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1997.370037][ T8572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.412403][ T8572] usb 2-1: Product: syz [ 1997.444993][ T8572] usb 2-1: Manufacturer: syz [ 1997.475987][ T8572] usb 2-1: SerialNumber: syz [ 1997.830110][ T8572] usb 2-1: cannot find UAC_HEADER [ 1998.153579][ T2899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11327'. [ 1998.449140][ T8572] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1998.532082][ T8572] usb 2-1: USB disconnect, device number 45 [ 1998.880582][ T2921] tmpfs: Bad value for 'mpol' [ 1999.062888][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1999.425303][ T2931] program syz.3.11336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1999.491276][ T2933] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2000.055583][ T2944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2000.073964][ T2945] loop2: detected capacity change from 0 to 512 [ 2000.142917][ T2945] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2000.223628][ T2945] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.11342: bad orphan inode 131083 [ 2000.269722][ T2945] loop2: lost filesystem error report for type 5 error -117 [ 2000.274336][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2000.289703][ C0] EXT4-fs (loop2): initial error at time 2000000516: ext4_orphan_get:1423 [ 2000.299474][ C0] EXT4-fs (loop2): last error at time 2000000516: ext4_orphan_get:1423 [ 2000.323099][ T2945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2000.563875][ T2957] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 2000.660712][ T2957] bond8 (unregistering): Released all slaves [ 2001.247331][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2003.972992][ T3095] loop3: detected capacity change from 0 to 22 [ 2004.037785][ T3095] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 2004.698398][ T8572] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2004.955350][ T8572] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2005.027264][ T8572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.103325][ T8572] usb 3-1: config 0 descriptor?? [ 2005.119148][ T3113] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2005.183249][ T8572] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2005.199383][ T3113] bond8 (unregistering): Released all slaves [ 2005.333849][ T3140] netlink: 'syz.4.11377': attribute type 1 has an invalid length. [ 2005.657238][ T8572] gspca_stv06xx: I2C: Read error writing address: -71 [ 2005.699704][ T8572] usb 3-1: USB disconnect, device number 40 [ 2007.519051][ T3238] loop2: detected capacity change from 0 to 1024 [ 2007.679875][ T3238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2007.729150][ T3238] ext4 filesystem being mounted at /2302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2007.846386][ T3238] EXT4-fs error (device loop2): __ext4_remount:6829: comm syz.2.11392: Abort forced by user [ 2007.885463][ T3238] EXT4-fs (loop2): Remounting filesystem read-only [ 2007.936047][ T3238] EXT4-fs (loop2): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 2008.389254][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2009.094690][ T8572] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2009.108628][ T3284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11405'. [ 2009.344863][ T8572] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.362217][ T8572] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2009.388696][ T8572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.500428][ T8572] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2010.587418][ T8572] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 2010.802663][ T8572] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2010.839092][ T8572] stv0680 4-1:4.0: last error: 70, command = 0x88 [ 2010.899538][ T8572] usb 4-1: USB disconnect, device number 48 [ 2011.265429][ T1057] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2011.484619][ T1057] usb 1-1: Using ep0 maxpacket: 8 [ 2011.530153][ T1057] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2011.569943][ T1057] usb 1-1: config 179 has no interface number 0 [ 2011.661943][ T1057] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2011.684012][ T1057] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2011.700253][ T1057] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2011.725817][ T1057] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2011.739533][ T1057] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2011.778904][ T1057] usb 1-1: config 179 interface 65 has no altsetting 0 [ 2011.789794][ T3337] loop4: detected capacity change from 0 to 4096 [ 2011.842088][ T1057] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2011.863337][ T1057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.022976][ T1057] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input53 [ 2012.044498][ T3351] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2012.245850][ T1057] usb 1-1: USB disconnect, device number 44 [ 2013.736836][ T3404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11434'. [ 2014.303219][ T3417] loop3: detected capacity change from 0 to 512 [ 2014.412740][ T3407] loop4: detected capacity change from 0 to 4096 [ 2014.453196][ T3417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2014.511774][ T3417] ext4 filesystem being mounted at /2257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2014.767501][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2015.522751][ T3419] loop1: detected capacity change from 0 to 8192 [ 2016.016922][ T3419] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 2016.065423][ T3419] FAT-fs (loop1): Filesystem has been set read-only [ 2016.072532][ T3419] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068) [ 2016.154579][ T3419] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068) [ 2017.014966][ T3465] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 2017.625670][ T1057] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2017.775009][ T3483] bridge6: entered promiscuous mode [ 2017.798548][ T1057] usb 5-1: Using ep0 maxpacket: 16 [ 2017.833669][ T1057] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 2017.922081][ T1057] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2017.966936][ T1057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.980810][ T3491] loop1: detected capacity change from 0 to 1024 [ 2018.009567][ T1057] usb 5-1: Product: syz [ 2018.034402][ T1057] usb 5-1: Manufacturer: syz [ 2018.050435][ T1057] usb 5-1: SerialNumber: syz [ 2018.104891][ T1057] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2018.111893][ T1057] r8152-cfgselector 5-1: config 0 descriptor?? [ 2018.131007][ T3491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2018.316584][ T3491] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.11457: missing EA_INODE flag [ 2018.397475][ T3491] EXT4-fs (loop1): Remounting filesystem read-only [ 2018.432326][ T3491] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 2018.626297][ T8572] r8152-cfgselector 5-1: USB disconnect, device number 52 [ 2018.702912][ T3509] loop2: detected capacity change from 0 to 128 [ 2018.833853][ T3513] loop3: detected capacity change from 0 to 256 [ 2018.958532][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2019.275616][ T3513] FAT-fs (loop3): Directory bread(block 64) failed [ 2019.304031][ T3513] FAT-fs (loop3): Directory bread(block 65) failed [ 2019.312155][ T3513] FAT-fs (loop3): Directory bread(block 66) failed [ 2019.389287][ T3513] FAT-fs (loop3): Directory bread(block 67) failed [ 2019.414750][ T3513] FAT-fs (loop3): Directory bread(block 68) failed [ 2019.421744][ T3513] FAT-fs (loop3): Directory bread(block 69) failed [ 2019.472301][ T3513] FAT-fs (loop3): Directory bread(block 70) failed [ 2019.506677][ T3513] FAT-fs (loop3): Directory bread(block 71) failed [ 2019.575289][ T3513] FAT-fs (loop3): Directory bread(block 72) failed [ 2019.582689][ T3513] FAT-fs (loop3): Directory bread(block 73) failed [ 2019.776599][ T3527] loop2: detected capacity change from 0 to 1024 [ 2020.320237][T28452] hfsplus: b-tree write err: -5, ino 25 [ 2020.341865][T28452] hfsplus: b-tree write err: -5, ino 4 [ 2020.373504][T28452] hfsplus: b-tree write err: -5, ino 2 [ 2020.840900][ T3553] netlink: 'syz.0.11472': attribute type 10 has an invalid length. [ 2020.915117][ T3553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11472'. [ 2020.997154][ T3553] bond0: entered promiscuous mode [ 2021.002914][ T3553] bond_slave_0: entered promiscuous mode [ 2021.107716][ T3553] bond_slave_1: entered promiscuous mode [ 2021.126804][ T3558] netlink: 'syz.4.11473': attribute type 1 has an invalid length. [ 2021.169924][ T3553] team0: entered promiscuous mode [ 2021.198214][ T3558] netlink: 232 bytes leftover after parsing attributes in process `syz.4.11473'. [ 2021.227754][ T3553] team_slave_0: entered promiscuous mode [ 2021.271097][ T3553] team_slave_1: entered promiscuous mode [ 2021.312401][ T3553] bridge0: port 5(bond0) entered blocking state [ 2021.345353][ T3553] bridge0: port 5(bond0) entered disabled state [ 2021.395202][ T3553] bond0: entered allmulticast mode [ 2021.400695][ T3553] bond_slave_0: entered allmulticast mode [ 2021.463195][ T3553] bond_slave_1: entered allmulticast mode [ 2021.490782][ T3553] team0: entered allmulticast mode [ 2021.505231][ T3553] team_slave_0: entered allmulticast mode [ 2021.554055][ T3553] team_slave_1: entered allmulticast mode [ 2021.678329][ T3566] cgroup: name respecified [ 2022.136514][ T3572] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11478'. [ 2022.405770][ T3582] x_tables: duplicate underflow at hook 3 [ 2022.700132][ T3587] netlink: 'syz.1.11483': attribute type 4 has an invalid length. [ 2022.733057][ T3587] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11483'. [ 2022.949799][ T3587] .`: renamed from bond0 (while UP) [ 2022.957355][ T3596] program syz.3.11486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2022.989728][ T3596] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2024.611434][ T29] audit: type=1326 audit(2000000541.107:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3632 comm="syz.2.11498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 2024.678429][ T3636] loop3: detected capacity change from 0 to 512 [ 2024.727395][ T29] audit: type=1326 audit(2000000541.107:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3632 comm="syz.2.11498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 2024.830860][ T29] audit: type=1326 audit(2000000541.157:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3632 comm="syz.2.11498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 2024.890361][ T29] audit: type=1326 audit(2000000541.167:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3632 comm="syz.2.11498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 2024.921813][ T29] audit: type=1326 audit(2000000541.167:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3632 comm="syz.2.11498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc0d9c819 code=0x7ffc0000 [ 2024.971988][ T3647] netlink: 'syz.0.11500': attribute type 4 has an invalid length. [ 2024.982277][ T3647] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11500'. [ 2025.016248][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2025.070035][ T3636] ext4 filesystem being mounted at /2270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2025.090373][ T3642] loop4: detected capacity change from 0 to 512 [ 2025.125869][ T3642] ext4: Unknown parameter 'obj_user' [ 2025.186918][ T3647] .`: renamed from bond0 (while UP) [ 2025.249918][ T3642] tmpfs: Bad value for 'mpol' [ 2025.358471][ T3647] bridge0: port 5(.`) entered disabled state [ 2025.533953][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2026.572841][ T3677] loop2: detected capacity change from 0 to 256 [ 2026.964476][ T8572] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2027.194695][ T8572] usb 1-1: Using ep0 maxpacket: 8 [ 2027.237092][ T8572] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 2027.260272][ T8572] usb 1-1: config 0 has no interface number 0 [ 2027.295475][ T8572] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2027.334421][ T8572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.364700][ T8572] usb 1-1: Product: syz [ 2027.369315][ T8572] usb 1-1: Manufacturer: syz [ 2027.399009][ T8572] usb 1-1: SerialNumber: syz [ 2027.492781][ T8572] usb 1-1: config 0 descriptor?? [ 2027.802655][ T8572] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2027.884026][ T8572] usb 1-1: USB disconnect, device number 45 [ 2029.207697][ T3748] loop3: detected capacity change from 0 to 2048 [ 2029.310854][ T3748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2029.798765][ T3753] loop4: detected capacity change from 0 to 4096 [ 2029.877695][ T3753] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 2030.334965][ T3753] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 2030.549361][ T3780] Non-string source [ 2031.400674][ T3793] loop4: detected capacity change from 0 to 512 [ 2031.501155][ T3793] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2031.575741][ T3793] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 2031.590324][ T3793] System zones: 0-2, 18-18, 34-35 [ 2031.617072][ T3793] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2031.996737][ T5773] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 2032.522153][ T3819] loop4: detected capacity change from 0 to 1024 [ 2032.760467][ T3819] hfsplus: xattr search failed [ 2033.063422][ T3833] loop1: detected capacity change from 0 to 1024 [ 2033.527267][T28444] hfsplus: b-tree write err: -5, ino 25 [ 2033.564899][T28444] hfsplus: b-tree write err: -5, ino 4 [ 2033.571039][T28444] hfsplus: b-tree write err: -5, ino 2 [ 2033.585230][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11559'. [ 2033.650973][ T3842] netlink: zone id is out of range [ 2034.363622][ T3861] netlink: 'syz.2.11565': attribute type 8 has an invalid length. [ 2034.570885][ T3867] loop1: detected capacity change from 0 to 64 [ 2035.542671][ T3889] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11572'. [ 2035.773152][ T3895] loop2: detected capacity change from 0 to 64 [ 2035.809745][ T3896] loop3: detected capacity change from 0 to 16 [ 2035.885672][ T3895] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 2035.976332][ T3895] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 2036.414992][ T3907] loop4: detected capacity change from 0 to 16 [ 2036.466601][ T3907] erofs (device loop4): mounted with root inode @ nid 36. [ 2037.387452][ T29] audit: type=1326 audit(2000000553.867:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2037.511500][ T29] audit: type=1326 audit(2000000553.927:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2037.582883][ T29] audit: type=1326 audit(2000000553.927:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2037.623411][ T29] audit: type=1326 audit(2000000553.967:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2037.749649][ T29] audit: type=1326 audit(2000000553.967:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2037.865501][ T29] audit: type=1326 audit(2000000553.967:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2037.979225][ T29] audit: type=1326 audit(2000000553.967:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2038.106610][ T29] audit: type=1326 audit(2000000553.967:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2038.256222][ T29] audit: type=1326 audit(2000000553.967:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.3.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc25c59c819 code=0x7ffc0000 [ 2038.505924][ T3949] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2038.660446][ T3957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11595'. [ 2038.692221][ T3957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11595'. [ 2038.882300][ T3955] bridge5: entered promiscuous mode [ 2038.917302][ T3955] bridge5: entered allmulticast mode [ 2039.881672][ T3971] loop2: detected capacity change from 0 to 4096 [ 2040.375150][ T1057] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2040.566867][ T1057] usb 1-1: Using ep0 maxpacket: 16 [ 2040.597768][ T1057] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2040.607012][ T1057] usb 1-1: config 0 has no interface number 0 [ 2040.613474][ T1057] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2040.696526][ T1057] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2040.731248][ T1057] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2040.771804][ T1057] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2040.795036][ T1057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.832958][ T1057] usb 1-1: Product: syz [ 2040.874829][ T1057] usb 1-1: Manufacturer: syz [ 2040.879835][ T1057] usb 1-1: SerialNumber: syz [ 2040.936124][ T1057] usb 1-1: config 0 descriptor?? [ 2040.969027][ T3988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2041.025928][ T3988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2041.346305][ T3988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2041.405712][ T3988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2041.657874][ T1057] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 2041.783878][ T1057] usb 1-1: USB disconnect, device number 46 [ 2042.314915][ T5833] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2042.492341][ T4038] syz_tun: entered promiscuous mode [ 2042.518646][ T4038] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2042.557185][ T5833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2042.577402][ T5833] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2042.643086][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2042.670463][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.704306][ T5833] usb 2-1: Product: syz [ 2042.709194][ T5833] usb 2-1: Manufacturer: syz [ 2042.734432][ T5833] usb 2-1: SerialNumber: syz [ 2042.838291][ T5833] cdc_ncm 2-1:1.0: skipping garbage [ 2042.873067][ T5833] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 2042.892764][ T5833] cdc_ncm 2-1:1.0: bind() failure [ 2042.991861][ T5833] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2043.035288][ T5833] cdc_ncm 2-1:1.1: bind() failure [ 2043.150241][ T5833] usb 2-1: USB disconnect, device number 46 [ 2044.128338][ T4080] netlink: 260 bytes leftover after parsing attributes in process `syz.2.11628'. [ 2044.748162][ T4091] loop3: detected capacity change from 0 to 1024 [ 2044.910660][ T4091] hfsplus: b-tree write err: -5, ino 2 [ 2045.253130][T28462] hfsplus: b-tree write err: -5, ino 25 [ 2045.271870][T28462] hfsplus: b-tree write err: -5, ino 4 [ 2045.302693][T28462] hfsplus: b-tree write err: -5, ino 2 [ 2045.333734][T28462] hfsplus: b-tree write err: -5, ino 26 [ 2045.480026][ T4109] netlink: 'syz.1.11637': attribute type 1 has an invalid length. [ 2045.572528][ T4109] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11637'. [ 2045.657075][ T4109] NCSI netlink: No device for ifindex 0 [ 2046.255434][ T4128] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 2046.811185][ T4139] netlink: 820 bytes leftover after parsing attributes in process `syz.1.11648'. [ 2046.813873][ T4141] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2046.881426][ T4139] netlink: 820 bytes leftover after parsing attributes in process `syz.1.11648'. [ 2049.679351][ T4202] overlay: Unknown parameter 'obj_role' [ 2049.743342][ T4199] loop4: detected capacity change from 0 to 1024 [ 2049.815950][ T4199] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 2049.886796][ T4199] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2049.941552][ T4199] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 2050.029853][ T4199] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2050.145382][ T4199] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.11668: Inode bitmap for bg 0 marked uninitialized [ 2050.202170][ T4199] loop4: lost filesystem error report for type 5 error -117 [ 2050.223495][ T4199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2050.292390][ T4199] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.11668: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 2050.757504][ T5773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2050.826866][ T4222] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2051.080384][ T29] audit: type=1326 audit(2000000567.577:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.180718][ T29] audit: type=1326 audit(2000000567.637:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.288091][ T29] audit: type=1326 audit(2000000567.637:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.405453][ T29] audit: type=1326 audit(2000000567.657:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.518266][ T4239] loop2: detected capacity change from 0 to 256 [ 2051.547090][ T29] audit: type=1326 audit(2000000567.657:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.608898][ T29] audit: type=1326 audit(2000000567.657:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.678530][ T29] audit: type=1326 audit(2000000567.667:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.781100][ T29] audit: type=1326 audit(2000000567.667:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa82df9c819 code=0x7ffc0000 [ 2051.830440][ T4239] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 2052.698468][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2053.416585][ T4278] loop2: detected capacity change from 0 to 64 [ 2054.471180][ T4303] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11703'. [ 2054.523990][ T4303] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11703'. [ 2056.191995][ T4345] netlink: 'syz.0.11718': attribute type 1 has an invalid length. [ 2056.262670][ T4348] unsupported nla_type 52263 [ 2056.356635][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11720'. [ 2057.773633][ T4374] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2057.802800][ T4374] bond8 (unregistering): Released all slaves [ 2058.845142][ T4464] xt_CONNSECMARK: invalid mode: 0 [ 2059.750037][ T4480] loop4: detected capacity change from 0 to 1024 [ 2060.182714][ T5773] hfsplus: bad catalog entry type [ 2060.233533][ T4494] netlink: 'syz.2.11747': attribute type 21 has an invalid length. [ 2060.299751][ T4494] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11747'. [ 2060.949423][T28462] hfsplus: b-tree write err: -5, ino 25 [ 2060.980952][T28462] hfsplus: b-tree write err: -5, ino 4 [ 2061.019304][T28462] hfsplus: b-tree write err: -5, ino 2 [ 2061.058583][T28452] team0: Port device netdevsim3 removed [ 2061.105304][T28452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2061.128806][T28452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.175092][T28452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2061.504034][T28452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2061.575099][T28452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.637199][T28452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2061.939189][T28452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2061.976389][T28452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.042806][T28452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2062.178934][T28452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2062.223684][T28452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.265584][T28452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2062.653826][T28452] dummy0: left allmulticast mode [ 2062.663823][T28452] dummy0: left promiscuous mode [ 2062.674972][T28452] bridge0: port 4(dummy0) entered disabled state [ 2062.688744][T28452] bridge_slave_1: left allmulticast mode [ 2062.696929][T28452] bridge_slave_1: left promiscuous mode [ 2062.707103][T28452] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.721807][T28452] bridge_slave_0: left allmulticast mode [ 2062.730295][T28452] bridge_slave_0: left promiscuous mode [ 2062.743911][T28452] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.769067][T28452] dvmrp1 (unregistering): left allmulticast mode [ 2064.474651][ T1057] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2064.676873][ T1057] usb 2-1: Using ep0 maxpacket: 16 [ 2064.723719][ T1057] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 2064.754464][ T1057] usb 2-1: config 254 has no interface number 0 [ 2064.772129][ T1057] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 2064.834500][ T1057] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2064.894695][ T1057] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2064.928387][ T1057] usb 2-1: config 254 interface 235 has no altsetting 0 [ 2064.960911][ T1057] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 2064.987141][ T1057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 2065.031936][ T4610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2065.047545][ T4610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2065.057843][ T4610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2065.074537][ T1057] usb 2-1: Product: syz [ 2065.083180][ T1057] usb 2-1: Manufacturer: syz [ 2065.093102][ T4610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2065.104499][ T1057] usb 2-1: SerialNumber: syz [ 2065.112645][ T4610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2065.141300][ T4587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2065.259285][T28452] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.368359][T28452] .` (unregistering): (slave veth1_to_bond): Releasing backup interface [ 2065.378745][ T4587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2065.428342][ T1057] usbtest 2-1:254.235: Linux gadget zero [ 2065.447298][ T1057] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 2065.484995][T28452] .` (unregistering): Released all slaves [ 2065.543134][T28452] bond1 (unregistering): Released all slaves [ 2065.633434][T28452] bond2 (unregistering): Released all slaves [ 2065.652756][ T8572] usb 2-1: USB disconnect, device number 47 [ 2065.782560][T28452] bond3 (unregistering): Released all slaves [ 2065.896248][T28452] bond4 (unregistering): Released all slaves [ 2066.117401][ T4641] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.11774'. [ 2067.226440][ T4610] Bluetooth: hci1: command tx timeout [ 2067.372106][ T4683] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2067.870470][ T4701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2068.704800][ T4725] netlink: 'syz.1.11787': attribute type 1 has an invalid length. [ 2069.306293][ T4610] Bluetooth: hci1: command tx timeout [ 2070.133653][T28452] hsr_slave_0: left promiscuous mode [ 2070.164932][T28452] hsr_slave_1: left promiscuous mode [ 2070.197447][T28452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2070.243988][ T4797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11798'. [ 2070.282484][T28452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2070.306758][ T4798] loop1: detected capacity change from 0 to 128 [ 2070.317122][T28452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2070.364830][ T4798] FAT-fs (loop1): bogus number of reserved sectors [ 2070.413831][ T4798] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 2070.460646][T28452] veth1_macvtap: left promiscuous mode [ 2070.478345][T28452] veth0_macvtap: left promiscuous mode [ 2070.484669][ T4798] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2070.795260][ T5833] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2070.974503][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 2071.006991][ T5833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2071.056082][ T5833] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 2071.102893][ T5833] usb 2-1: config 1 has no interface number 0 [ 2071.162791][ T5833] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 2071.203771][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.253333][ T5833] usb 2-1: Product: syz [ 2071.284640][ T5833] usb 2-1: Manufacturer: syz [ 2071.289751][ T5833] usb 2-1: SerialNumber: syz [ 2071.384990][ T4610] Bluetooth: hci1: command tx timeout [ 2071.392222][ T29] audit: type=1400 audit(2000000587.887:777): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=4813 comm="syz.3.11800" [ 2071.635627][ T5833] uvcvideo 2-1:1.206: probe with driver uvcvideo failed with error -22 [ 2071.710449][ T5833] usb 2-1: USB disconnect, device number 48 [ 2071.750730][ T6006] udevd[6006]: setting owner of /dev/bus/usb/002/048 to uid=0, gid=0 failed: No such file or directory [ 2072.636032][T28452] team0 (unregistering): Port device team_slave_1 removed [ 2072.709976][ T4844] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11806'. [ 2072.711425][T28452] team0 (unregistering): Port device team_slave_0 removed [ 2073.465144][ T4610] Bluetooth: hci1: command tx timeout [ 2073.567830][ T4607] chnl_net:caif_netlink_parms(): no params data found [ 2073.673360][ T4797] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 2073.880561][ T4868] loop2: detected capacity change from 0 to 256 [ 2074.923103][T28452] IPVS: stop unused estimator thread 0... [ 2076.054641][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.090144][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.105455][ T4607] bridge_slave_0: entered allmulticast mode [ 2076.168475][ T4607] bridge_slave_0: entered promiscuous mode [ 2076.264604][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.293825][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.335014][ T4607] bridge_slave_1: entered allmulticast mode [ 2076.405315][ T4607] bridge_slave_1: entered promiscuous mode [ 2076.452187][ T4945] loop2: detected capacity change from 0 to 512 [ 2076.587171][ T4945] EXT4-fs (loop2): 1 truncate cleaned up [ 2076.608115][ T4945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2076.655402][ T4945] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.11822: invalid indirect mapped block 4294901760 (level 0) [ 2076.699354][ T4945] EXT4-fs (loop2): Remounting filesystem read-only [ 2076.935939][ T4607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2077.046473][ T4607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2077.139987][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2077.664650][ T4607] team0: Port device team_slave_0 added [ 2077.742666][ T4607] team0: Port device team_slave_1 added [ 2078.151081][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.195852][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2078.270135][ T4607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2078.310603][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2078.325811][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2078.428456][ T4607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2078.887238][ T8572] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2079.017320][ T4607] hsr_slave_0: entered promiscuous mode [ 2079.085435][ T8572] usb 4-1: Using ep0 maxpacket: 8 [ 2079.099583][ T4607] hsr_slave_1: entered promiscuous mode [ 2079.136685][ T4607] debugfs: 'hsr0' already exists in 'hsr' [ 2079.159107][ T4607] Cannot create hsr debugfs directory [ 2079.191010][ T8572] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2079.223761][ T8572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.279706][ T8572] usb 4-1: Product: syz [ 2079.310351][ T8572] usb 4-1: Manufacturer: syz [ 2079.334539][ T8572] usb 4-1: SerialNumber: syz [ 2079.391462][ T8572] usb 4-1: config 0 descriptor?? [ 2079.516735][ T8572] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2079.910025][ T8572] gspca_sq930x: ucbus_write failed -71 [ 2080.164903][ T8572] gspca_sq930x: Sensor ov9630 not yet treated [ 2080.194051][ T8572] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 2080.263485][ T8572] usb 4-1: USB disconnect, device number 49 [ 2081.238552][ T5195] netlink: 348 bytes leftover after parsing attributes in process `syz.3.11845'. [ 2081.281423][ T5195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11845'. [ 2081.550776][ T4607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2081.694487][ T4607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2081.801990][ T4607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2081.931299][ T4607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2081.952446][ T5215] loop3: detected capacity change from 0 to 64 [ 2082.903416][ T5228] loop1: detected capacity change from 0 to 2048 [ 2082.921515][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11854'. [ 2083.004911][ T5235] netlink: 'syz.3.11854': attribute type 2 has an invalid length. [ 2083.013267][ T5235] netlink: 'syz.3.11854': attribute type 1 has an invalid length. [ 2083.042119][ T5228] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 2083.125414][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11854'. [ 2083.171515][ T5228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2083.444523][ T5833] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2083.643160][ T5833] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2083.714651][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.789304][ T5833] usb 1-1: config 0 descriptor?? [ 2083.900993][ T4607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2084.285392][ T5833] ath6kl: Failed to submit usb control message: -71 [ 2084.292757][ T5833] ath6kl: unable to send the bmi data to the device: -71 [ 2084.335152][ T5833] ath6kl: Unable to send get target info: -71 [ 2084.347653][ T4607] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.379651][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 2084.446730][ T5833] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2084.536659][T28452] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.544697][T28452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.596575][ T5833] usb 1-1: USB disconnect, device number 47 [ 2084.666751][ T5269] loop3: detected capacity change from 0 to 64 [ 2084.850257][T28452] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.858385][T28452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.220300][ T5300] kAFS: unable to lookup cell '(' [ 2087.586528][ T5325] xt_cgroup: path and classid specified [ 2087.727991][ T4607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2088.046261][ T5335] loop2: detected capacity change from 0 to 256 [ 2090.387425][ T5385] netlink: 'syz.0.11891': attribute type 46 has an invalid length. [ 2090.444992][ T5385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11891'. [ 2090.631260][ T4607] veth0_vlan: entered promiscuous mode [ 2090.696988][ T5383] loop2: detected capacity change from 0 to 4096 [ 2090.804895][ T5383] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2090.817459][ T4607] veth1_vlan: entered promiscuous mode [ 2090.956890][ T5383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2091.036059][ T5383] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 2091.401564][ T4607] veth0_macvtap: entered promiscuous mode [ 2091.516577][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2091.538290][ T4607] veth1_macvtap: entered promiscuous mode [ 2091.837379][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2092.114562][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2092.309967][T28462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.379593][T28462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.562476][T28462] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.618346][T28462] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.814668][ T5432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11901'. [ 2092.963072][ T5435] loop3: detected capacity change from 0 to 256 [ 2093.357126][ T5435] FAT-fs (loop3): Directory bread(block 64) failed [ 2093.387811][ T5435] FAT-fs (loop3): Directory bread(block 65) failed [ 2093.410192][ T5435] FAT-fs (loop3): Directory bread(block 66) failed [ 2093.476133][ T5435] FAT-fs (loop3): Directory bread(block 67) failed [ 2093.497716][ T5435] FAT-fs (loop3): Directory bread(block 68) failed [ 2093.548520][ T5435] FAT-fs (loop3): Directory bread(block 69) failed [ 2093.575648][ T5445] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 2093.615381][ T5435] FAT-fs (loop3): Directory bread(block 70) failed [ 2093.622657][ T5435] FAT-fs (loop3): Directory bread(block 71) failed [ 2093.711233][ T5435] FAT-fs (loop3): Directory bread(block 72) failed [ 2093.764328][ T5435] FAT-fs (loop3): Directory bread(block 73) failed [ 2093.814990][ T5451] netlink: 'syz.2.11906': attribute type 2 has an invalid length. [ 2093.855098][ T5451] netlink: 'syz.2.11906': attribute type 2 has an invalid length. [ 2095.083970][ T5470] loop2: detected capacity change from 0 to 256 [ 2095.383356][ T5470] FAT-fs (loop2): Directory bread(block 64) failed [ 2095.395891][ T5470] FAT-fs (loop2): Directory bread(block 65) failed [ 2095.403130][ T5470] FAT-fs (loop2): Directory bread(block 66) failed [ 2095.480004][ T5470] FAT-fs (loop2): Directory bread(block 67) failed [ 2095.554701][ T5470] FAT-fs (loop2): Directory bread(block 68) failed [ 2095.561598][ T5470] FAT-fs (loop2): Directory bread(block 69) failed [ 2095.636661][ T5470] FAT-fs (loop2): Directory bread(block 70) failed [ 2095.643943][ T5470] FAT-fs (loop2): Directory bread(block 71) failed [ 2095.665762][ T5480] openvswitch: netlink: Key type 10502 is out of range max 32 [ 2095.734667][ T5470] FAT-fs (loop2): Directory bread(block 72) failed [ 2095.742159][ T5470] FAT-fs (loop2): Directory bread(block 73) failed [ 2095.915209][ T5485] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11910'. [ 2097.674426][ T5132] ===================================================== [ 2097.682323][ T5132] BUG: KMSAN: uninit-value in from_kgid_munged+0x582/0xc40 [ 2097.690665][ T5132] from_kgid_munged+0x582/0xc40 [ 2097.696506][ T5132] __scm_recv_common+0x2a6/0x910 [ 2097.701778][ T5132] scm_recv_unix+0x5e/0x580 [ 2097.708597][ T5132] __unix_dgram_recvmsg+0x14e1/0x1750 [ 2097.714467][ T5132] unix_dgram_recvmsg+0x115/0x180 [ 2097.719747][ T5132] sock_recvmsg+0x27b/0x310 [ 2097.725092][ T5132] ____sys_recvmsg+0x193/0x620 [ 2097.730276][ T5132] ___sys_recvmsg+0x20b/0x850 [ 2097.735559][ T5132] __x64_sys_recvmsg+0x20e/0x3d0 [ 2097.740770][ T5132] x64_sys_call+0x35cc/0x3ea0 [ 2097.746222][ T5132] do_syscall_64+0x134/0xf80 [ 2097.751055][ T5132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2097.757553][ T5132] [ 2097.760101][ T5132] Local variable scm created at: [ 2097.765594][ T5132] __unix_dgram_recvmsg+0x4d/0x1750 [ 2097.771312][ T5132] unix_dgram_recvmsg+0x115/0x180 [ 2097.776844][ T5132] [ 2097.779363][ T5132] CPU: 1 UID: 0 PID: 5132 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 2097.792117][ T5132] Tainted: [L]=SOFTLOCKUP [ 2097.797404][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2097.808435][ T5132] ===================================================== [ 2097.816416][ T5132] Disabling lock debugging due to kernel taint [ 2097.825500][ T5132] Kernel panic - not syncing: kmsan.panic set ... [ 2097.832315][ T5132] CPU: 1 UID: 0 PID: 5132 Comm: udevd Tainted: G B L syzkaller #0 PREEMPT(full) [ 2097.843507][ T5132] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2097.849447][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2097.859789][ T5132] Call Trace: [ 2097.863332][ T5132] [ 2097.866597][ T5132] __dump_stack+0x26/0x30 [ 2097.871248][ T5132] dump_stack_lvl+0x50/0x1c0 [ 2097.876072][ T5132] ? dump_stack+0x12/0x25 [ 2097.880943][ T5132] dump_stack+0x1e/0x25 [ 2097.885600][ T5132] vpanic+0x7b4/0x1430 [ 2097.890084][ T5132] panic+0x15d/0x160 [ 2097.894478][ T5132] kmsan_report+0x31a/0x320 [ 2097.899465][ T5132] ? __msan_warning+0x1b/0x30 [ 2097.904484][ T5132] ? from_kgid_munged+0x582/0xc40 [ 2097.909846][ T5132] ? __scm_recv_common+0x2a6/0x910 [ 2097.915591][ T5132] ? scm_recv_unix+0x5e/0x580 [ 2097.921031][ T5132] ? __unix_dgram_recvmsg+0x14e1/0x1750 [ 2097.926844][ T5132] ? unix_dgram_recvmsg+0x115/0x180 [ 2097.932353][ T5132] ? sock_recvmsg+0x27b/0x310 [ 2097.937322][ T5132] ? ____sys_recvmsg+0x193/0x620 [ 2097.942512][ T5132] ? ___sys_recvmsg+0x20b/0x850 [ 2097.947707][ T5132] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 2097.953268][ T5132] ? x64_sys_call+0x35cc/0x3ea0 [ 2097.958403][ T5132] ? do_syscall_64+0x134/0xf80 [ 2097.963622][ T5132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2097.970195][ T5132] ? kmsan_get_metadata+0xf1/0x160 [ 2097.975528][ T5132] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2097.982161][ T5132] ? kmsan_get_metadata+0xf1/0x160 [ 2097.987746][ T5132] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2097.993957][ T5132] ? preempt_schedule_irq+0x79/0xa0 [ 2097.999377][ T5132] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 2098.006003][ T5132] ? irqentry_exit+0x8f/0x6c0 [ 2098.011016][ T5132] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2098.017884][ T5132] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2098.024295][ T5132] ? kmsan_get_metadata+0xf1/0x160 [ 2098.029622][ T5132] __msan_warning+0x1b/0x30 [ 2098.034475][ T5132] from_kgid_munged+0x582/0xc40 [ 2098.039746][ T5132] __scm_recv_common+0x2a6/0x910 [ 2098.045280][ T5132] scm_recv_unix+0x5e/0x580 [ 2098.050033][ T5132] ? kmsan_get_metadata+0xf1/0x160 [ 2098.055443][ T5132] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2098.061733][ T5132] __unix_dgram_recvmsg+0x14e1/0x1750 [ 2098.067619][ T5132] unix_dgram_recvmsg+0x115/0x180 [ 2098.072937][ T5132] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 2098.078849][ T5132] sock_recvmsg+0x27b/0x310 [ 2098.083602][ T5132] ____sys_recvmsg+0x193/0x620 [ 2098.088789][ T5132] ? should_fail_ex+0x45/0x8c0 [ 2098.093944][ T5132] ___sys_recvmsg+0x20b/0x850 [ 2098.098916][ T5132] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2098.104955][ T5132] ? kmsan_get_metadata+0xf1/0x160 [ 2098.110474][ T5132] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2098.116890][ T5132] __x64_sys_recvmsg+0x20e/0x3d0 [ 2098.122208][ T5132] ? kmsan_get_metadata+0xf1/0x160 [ 2098.127702][ T5132] x64_sys_call+0x35cc/0x3ea0 [ 2098.132643][ T5132] do_syscall_64+0x134/0xf80 [ 2098.137487][ T5132] ? clear_bhb_loop+0x50/0xa0 [ 2098.142532][ T5132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2098.148924][ T5132] RIP: 0033:0x7f3a7f8a7407 [ 2098.153645][ T5132] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2098.173834][ T5132] RSP: 002b:00007ffe97c42e10 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 2098.182656][ T5132] RAX: ffffffffffffffda RBX: 00007f3a80092880 RCX: 00007f3a7f8a7407 [ 2098.190941][ T5132] RDX: 0000000000000040 RSI: 00007ffe97c42f30 RDI: 0000000000000009 [ 2098.199765][ T5132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2098.208433][ T5132] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2098.216772][ T5132] R13: 00005596520ec100 R14: 0000000000000000 R15: 0000000000000000 [ 2098.225308][ T5132] [ 2098.229446][ T5132] Kernel Offset: disabled [ 2098.234050][ T5132] Rebooting in 86400 seconds..