last executing test programs: 2m38.026582924s ago: executing program 2 (id=19880): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 2m37.584296683s ago: executing program 2 (id=19885): r0 = syz_open_dev$video(&(0x7f00000013c0), 0x803, 0x40400) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001280)={0x1, @pix={0xe, 0x3, 0x3136564e, 0x7, 0x596, 0x9000, 0x6, 0x4, 0x0, 0x6, 0x1}}) 2m37.300496169s ago: executing program 2 (id=19888): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2m37.06246395s ago: executing program 2 (id=19891): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e1006dc710000000d9fc6300", '\x00', "06000061", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040001000"]}) 2m36.922247472s ago: executing program 2 (id=19894): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m35.846683697s ago: executing program 2 (id=19912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x40046302}], 0x0, 0x1000000, 0x0}) 2m19.741870736s ago: executing program 32 (id=19912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x40046302}], 0x0, 0x1000000, 0x0}) 19.882098648s ago: executing program 1 (id=21939): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x1}, {0x9}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0xa, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) 19.762813949s ago: executing program 1 (id=21940): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@null, 0x0, 'lo\x00'}) 19.569301476s ago: executing program 0 (id=21945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) 19.568855536s ago: executing program 1 (id=21946): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000008c0)="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", 0xfc) 18.350795413s ago: executing program 0 (id=21957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) 18.342979304s ago: executing program 1 (id=21959): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x580, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4e8, 0x2a8, 0x2a8, 0x4e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x400, 0x0, 0x44, 0x81, 0x4, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5e0) 18.212873745s ago: executing program 3 (id=21951): r0 = socket(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) 18.021164252s ago: executing program 0 (id=21963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) 18.020655512s ago: executing program 1 (id=21954): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 18.020083772s ago: executing program 3 (id=21965): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x200001, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, ',,#'}}]}}) 17.844501738s ago: executing program 3 (id=21956): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) clock_gettime(0xb, &(0x7f0000000040)) 17.561795753s ago: executing program 4 (id=21960): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0xffffffffffffffff, 0x0) 17.511446537s ago: executing program 4 (id=21961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 17.510723607s ago: executing program 0 (id=21962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.426370914s ago: executing program 4 (id=21964): r0 = socket(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) 17.426311164s ago: executing program 3 (id=21966): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) 17.324389204s ago: executing program 4 (id=21967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000380)="c1b0", 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 17.323628854s ago: executing program 0 (id=21968): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x4d, 0xfffffffffffffffe}, 0x10) 17.050314478s ago: executing program 1 (id=21969): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB='h+'], 0x8) 17.050236078s ago: executing program 4 (id=21970): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) clock_gettime(0xb, &(0x7f0000000040)) 17.049223388s ago: executing program 3 (id=21978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000380)="c1b0", 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 17.048637208s ago: executing program 0 (id=21979): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 23.780098ms ago: executing program 33 (id=21969): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB='h+'], 0x8) 20.348809ms ago: executing program 4 (id=21972): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @empty}, 0xc) 0s ago: executing program 3 (id=21981): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="7598", 0x2}], 0x1}}, {{&(0x7f0000000900)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000940)="d1", 0x1}], 0x1}}], 0x2, 0x4000014) kernel console output (not intermixed with test programs): T4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1842.016382][T22113] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1842.140052][T22113] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1842.216913][T22113] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1842.258267][T22113] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.19953: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1842.311093][T22113] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.19953: couldn't read orphan inode 13 (err -117) [ 1842.359501][T22113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1842.377965][ T5775] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1842.384735][T22113] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.19953: inode #15: comm syz.1.19953: iget: illegal inode # [ 1842.468176][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.613447][ T5756] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 11 /dev/loop0 scanned by udevd (5756) [ 1842.944868][T22148] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19962'. [ 1842.946728][T22144] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1843.000011][T22148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19962'. [ 1843.792543][T22187] ieee802154 phy0 wpan0: encryption failed: -22 [ 1843.841804][T22191] netlink: 'syz.1.19976': attribute type 9 has an invalid length. [ 1843.888346][T22191] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19976'. [ 1844.186483][T22210] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1844.293522][T22217] kAFS: unparsable volume name [ 1844.358411][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19986'. [ 1844.439275][T22224] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1844.584192][T22232] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.19990'. [ 1845.413244][T22242] loop1: detected capacity change from 0 to 32768 [ 1845.439117][T22242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.19993 (22242) [ 1845.463013][T22271] loop0: detected capacity change from 0 to 256 [ 1845.499399][T22242] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1845.524689][T22242] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1845.548198][T22242] BTRFS info (device loop1): setting nodatasum [ 1845.554471][T22242] BTRFS info (device loop1): force zlib compression, level 3 [ 1845.576732][T22242] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1845.602897][T22242] BTRFS info (device loop1): use lzo compression, level 0 [ 1845.624841][T22242] BTRFS info (device loop1): turning on flush-on-commit [ 1845.647478][T22242] BTRFS info (device loop1): enabling auto defrag [ 1845.655022][T22242] BTRFS info (device loop1): max_inline at 4096 [ 1845.661550][T22242] BTRFS info (device loop1): using free space tree [ 1845.670647][T22271] FAT-fs (loop0): Directory bread(block 64) failed [ 1845.680188][T22271] FAT-fs (loop0): Directory bread(block 65) failed [ 1845.690534][T22271] FAT-fs (loop0): Directory bread(block 66) failed [ 1845.699914][T22271] FAT-fs (loop0): Directory bread(block 67) failed [ 1845.710831][T22271] FAT-fs (loop0): Directory bread(block 68) failed [ 1845.722139][T22271] FAT-fs (loop0): Directory bread(block 69) failed [ 1845.733446][T22271] FAT-fs (loop0): Directory bread(block 70) failed [ 1845.744134][T22271] FAT-fs (loop0): Directory bread(block 71) failed [ 1845.754815][T22271] FAT-fs (loop0): Directory bread(block 72) failed [ 1845.770747][T22271] FAT-fs (loop0): Directory bread(block 73) failed [ 1845.788728][T22242] BTRFS info (device loop1): enabling ssd optimizations [ 1845.918737][ T2854] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1845.993214][ T5784] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1846.152833][ T2854] usb 4-1: not running at top speed; connect to a high speed hub [ 1846.181391][ T2854] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 1846.211791][ T2854] usb 4-1: config 95 has no interface number 0 [ 1846.233775][ T2854] usb 4-1: config 95 interface 1 has no altsetting 0 [ 1846.267369][ T2854] usb 4-1: string descriptor 0 read error: -22 [ 1846.277127][ T2854] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1846.303862][ T2854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.818809][ T787] usb 4-1: USB disconnect, device number 77 [ 1847.297254][T22370] xt_CT: No such helper "snmp_trap" [ 1847.517027][T22387] loop0: detected capacity change from 0 to 64 [ 1847.588328][T22387] syz.0.20027: attempt to access beyond end of device [ 1847.588328][T22387] loop0: rw=0, sector=6106906642, nr_sectors = 2 limit=64 [ 1847.628551][T22387] Buffer I/O error on dev loop0, logical block 3053453321, async page read [ 1847.656125][T22387] Trying to free block not in datazone [ 1848.317918][T22426] ip6t_srh: unknown srh match flags 4000 [ 1848.445225][T22434] comedi comedi3: comedi_config --init_data is deprecated [ 1848.646441][T22447] loop1: detected capacity change from 0 to 256 [ 1849.272714][T22478] loop1: detected capacity change from 0 to 512 [ 1849.277028][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1849.277041][ T28] audit: type=1326 audit(2000000070.725:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.20056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1849.328272][T22478] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1849.357338][T22478] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #11: block 1728053262: comm syz.1.20055: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 1849.375279][ T28] audit: type=1326 audit(2000000070.772:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.20056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1849.398078][ T28] audit: type=1326 audit(2000000070.800:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.20056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1849.410570][T22478] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1849.421287][ T28] audit: type=1326 audit(2000000070.800:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.20056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1849.456949][ T28] audit: type=1326 audit(2000000070.800:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.20056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1849.480228][T22478] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #15: comm syz.1.20055: corrupted inode contents [ 1849.500712][T22478] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #15: comm syz.1.20055: mark_inode_dirty error [ 1849.535445][T22478] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #15: comm syz.1.20055: corrupted inode contents [ 1849.585892][T22478] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2998: inode #15: comm syz.1.20055: mark_inode_dirty error [ 1849.610069][T22478] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.20055: mark inode dirty (error -117) [ 1849.660839][T22478] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -117) [ 1849.670151][T22478] EXT4-fs (loop1): 1 orphan inode deleted [ 1849.697511][T22478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1849.866602][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.060526][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20063'. [ 1850.105524][T22514] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1850.625850][T22544] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1850.632425][T22544] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1850.664921][T22544] vhci_hcd vhci_hcd.0: Device attached [ 1850.728565][T22549] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 1850.735224][T22549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1850.804337][T22549] vhci_hcd vhci_hcd.0: Device attached [ 1850.811473][T22553] vhci_hcd: connection closed [ 1850.811686][T22546] vhci_hcd: connection closed [ 1850.817054][ T435] vhci_hcd: stop threads [ 1850.850360][ T435] vhci_hcd: release socket [ 1850.879331][ T5841] vhci_hcd: vhci_device speed not set [ 1850.889962][ T435] vhci_hcd: disconnect device [ 1850.906963][ T435] vhci_hcd: stop threads [ 1850.912758][ T435] vhci_hcd: release socket [ 1850.926909][ T435] vhci_hcd: disconnect device [ 1850.975521][ T5841] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1850.994790][ T5841] usb 33-1: enqueue for inactive port 0 [ 1851.098574][ T5841] vhci_hcd: vhci_device speed not set [ 1851.149666][T22575] netlink: 'syz.1.20084': attribute type 21 has an invalid length. [ 1852.059319][T22614] geneve3: entered promiscuous mode [ 1852.260175][T22622] loop0: detected capacity change from 0 to 16 [ 1852.281006][T22622] erofs: (device loop0): mounted with root inode @ nid 36. [ 1852.932738][T22660] netlink: 'syz.0.20113': attribute type 5 has an invalid length. [ 1852.967166][T22660] : entered promiscuous mode [ 1853.482540][T22691] loop0: detected capacity change from 0 to 16 [ 1853.494504][T22691] erofs: (device loop0): mounted with root inode @ nid 36. [ 1853.510434][T22691] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1853.533419][T22691] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1853.550181][T22691] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1854.423587][T22738] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1854.953579][T22767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20147'. [ 1855.207290][T22782] virtiofs: Unknown parameter 'always' [ 1856.049349][T22827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1856.066188][T22827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1856.080644][T22827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1856.091936][T22827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1856.100885][T22827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1856.109573][T22827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1856.138770][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1856.151257][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1856.159547][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1856.171976][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1856.180267][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1856.197330][T22863] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1856.214569][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1856.267258][ T2854] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1856.397297][T22823] lo speed is unknown, defaulting to 1000 [ 1856.482820][ T2854] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1856.513051][ T2854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.537540][ T2854] usb 1-1: config 0 descriptor?? [ 1856.561123][ T2854] cp210x 1-1:0.0: cp210x converter detected [ 1857.001069][ T2854] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1857.050994][ T2854] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1857.113175][ T2854] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1857.157112][ T2854] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1857.231697][ T2854] usb 1-1: USB disconnect, device number 86 [ 1857.277900][T22823] chnl_net:caif_netlink_parms(): no params data found [ 1857.286520][ T2854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1857.336954][ T2854] cp210x 1-1:0.0: device disconnected [ 1857.559076][T22823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.600377][T22823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.623454][T22823] bridge_slave_0: entered allmulticast mode [ 1857.655335][T22823] bridge_slave_0: entered promiscuous mode [ 1857.675585][T22823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.694260][T22823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.705366][T22823] bridge_slave_1: entered allmulticast mode [ 1857.713932][T22823] bridge_slave_1: entered promiscuous mode [ 1857.850959][T22823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.867402][T22823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.958849][T22823] team0: Port device team_slave_0 added [ 1857.996267][T22823] team0: Port device team_slave_1 added [ 1858.083819][T22823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1858.091080][T22823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1858.145066][T22823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1858.178661][T22823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1858.194417][T22823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1858.290008][T22823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1858.471376][T22827] Bluetooth: hci4: command tx timeout [ 1858.640187][T22823] hsr_slave_0: entered promiscuous mode [ 1858.671584][T22823] hsr_slave_1: entered promiscuous mode [ 1858.706061][T22823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1858.713666][T22823] Cannot create hsr debugfs directory [ 1859.401262][T22823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1859.409748][T23248] syz.1.20207: attempt to access beyond end of device [ 1859.409748][T23248] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1859.422447][T22823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1859.457398][T22823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1859.473125][T22823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1859.639172][ T2854] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1859.687583][T23268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20210'. [ 1859.812436][T22823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1859.821342][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20211'. [ 1859.826109][T23274] loop1: detected capacity change from 0 to 256 [ 1859.858417][ T2854] usb 4-1: Using ep0 maxpacket: 16 [ 1859.866557][T23274] FAT-fs (loop1): Directory bread(block 64) failed [ 1859.883979][T23274] FAT-fs (loop1): Directory bread(block 65) failed [ 1859.889314][ T2854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.901096][T23274] FAT-fs (loop1): Directory bread(block 66) failed [ 1859.918801][T22823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1859.923688][ T2854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1859.929647][T23274] FAT-fs (loop1): Directory bread(block 67) failed [ 1859.954986][ T2854] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1859.972304][ T2854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.979732][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.989671][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1859.999078][T23274] FAT-fs (loop1): Directory bread(block 68) failed [ 1860.000971][ T2854] usb 4-1: Product: syz [ 1860.005624][T23274] FAT-fs (loop1): Directory bread(block 69) failed [ 1860.016828][ T2854] usb 4-1: Manufacturer: syz [ 1860.026588][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.030365][ T2854] usb 4-1: SerialNumber: syz [ 1860.033754][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1860.053612][T23274] FAT-fs (loop1): Directory bread(block 70) failed [ 1860.070197][T23274] FAT-fs (loop1): Directory bread(block 71) failed [ 1860.085829][T23274] FAT-fs (loop1): Directory bread(block 72) failed [ 1860.092550][T23274] FAT-fs (loop1): Directory bread(block 73) failed [ 1860.282102][ T2854] usb 4-1: 0:2 : does not exist [ 1860.303198][ T2854] usb 4-1: unit 9 not found! [ 1860.318431][ T2854] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1860.421558][ T2854] usb 4-1: USB disconnect, device number 78 [ 1860.615295][T22823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1860.643972][T23319] sctp: [Deprecated]: syz.0.20218 (pid 23319) Use of int in maxseg socket option. [ 1860.643972][T23319] Use struct sctp_assoc_value instead [ 1860.694391][T22827] Bluetooth: hci4: command tx timeout [ 1860.803526][T23328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20221'. [ 1860.817224][T23328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20221'. [ 1860.839321][T23330] loop1: detected capacity change from 0 to 256 [ 1860.860239][T23330] exfat: Deprecated parameter 'utf8' [ 1860.917751][T23330] exfat: Deprecated parameter 'utf8' [ 1860.969631][T23330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1861.287733][T22823] veth0_vlan: entered promiscuous mode [ 1861.357940][T22823] veth1_vlan: entered promiscuous mode [ 1861.497713][T22823] veth0_macvtap: entered promiscuous mode [ 1861.517327][T22823] veth1_macvtap: entered promiscuous mode [ 1861.562140][T22823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1861.598384][T22823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.670009][T22823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.686852][T23360] loop0: detected capacity change from 0 to 16 [ 1861.706900][T22823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1861.740464][T23360] erofs: (device loop0): mounted with root inode @ nid 36. [ 1861.743979][T22823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.786051][T22823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.786487][T23364] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20229'. [ 1861.813704][T22823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.866164][T23360] syz.0.20230: attempt to access beyond end of device [ 1861.866164][T23360] loop0: rw=524288, sector=527032, nr_sectors = 8 limit=16 [ 1861.881335][T22823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.913112][T23360] syz.0.20230: attempt to access beyond end of device [ 1861.913112][T23360] loop0: rw=524288, sector=296, nr_sectors = 8 limit=16 [ 1861.961224][T23360] syz.0.20230: attempt to access beyond end of device [ 1861.961224][T23360] loop0: rw=524288, sector=1049344, nr_sectors = 8 limit=16 [ 1862.039195][T23360] syz.0.20230: attempt to access beyond end of device [ 1862.039195][T23360] loop0: rw=524288, sector=688, nr_sectors = 8 limit=16 [ 1862.106323][T23360] syz.0.20230: attempt to access beyond end of device [ 1862.106323][T23360] loop0: rw=524288, sector=525096, nr_sectors = 8 limit=16 [ 1862.156259][T23360] syz.0.20230: attempt to access beyond end of device [ 1862.156259][T23360] loop0: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 1862.158400][ T9778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.216761][ T9778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.227373][T23360] syz.0.20230: attempt to access beyond end of device [ 1862.227373][T23360] loop0: rw=524288, sector=525136, nr_sectors = 8 limit=16 [ 1862.281961][T23360] syz.0.20230: attempt to access beyond end of device [ 1862.281961][T23360] loop0: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 1862.315363][T23360] syz.0.20230: attempt to access beyond end of device [ 1862.315363][T23360] loop0: rw=524288, sector=19320, nr_sectors = 8 limit=16 [ 1862.335669][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.364126][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.384196][T23394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20236'. [ 1862.682420][ T28] audit: type=1326 audit(2000000083.259:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23405 comm="syz.1.20240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1862.753682][ T28] audit: type=1326 audit(2000000083.259:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23405 comm="syz.1.20240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1862.776206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.818672][ T28] audit: type=1326 audit(2000000083.278:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23405 comm="syz.1.20240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1862.896292][ T28] audit: type=1326 audit(2000000083.390:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23405 comm="syz.1.20240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1862.918819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.927398][T22827] Bluetooth: hci4: command tx timeout [ 1862.955099][ T28] audit: type=1326 audit(2000000083.390:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23405 comm="syz.1.20240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1862.981411][T21647] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 1863.072089][T23426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20246'. [ 1863.217967][T21647] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1863.226444][T21647] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1863.269251][T21647] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1863.295888][T21647] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1863.331994][T21647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1863.361744][T21647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1863.394339][T23438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.407367][T21647] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1863.458644][T21647] usb 1-1: string descriptor 0 read error: -22 [ 1863.467155][T23438] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1863.483450][T21647] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1863.492556][T21647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.509981][T21647] usb 1-1: config 0 descriptor?? [ 1863.560421][T21647] hub 1-1:0.0: bad descriptor, ignoring hub [ 1863.566381][T21647] hub: probe of 1-1:0.0 failed with error -5 [ 1863.589933][T21647] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input120 [ 1863.761622][T23460] loop1: detected capacity change from 0 to 2048 [ 1863.822001][ T5785] usb 1-1: USB disconnect, device number 87 [ 1863.857286][T23460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1864.447532][T23505] xt_limit: Overflow, try lower: 2147483649/3300 [ 1865.147017][T22827] Bluetooth: hci4: command tx timeout [ 1865.157638][T23534] xt_CT: No such helper "snmp" [ 1866.338117][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1866.380990][ T27] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1866.508962][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.556508][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 1866.579311][ T787] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1866.601279][ T27] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1866.613463][ T787] usb 5-1: config 0 has no interface number 0 [ 1866.631210][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.651667][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1866.663248][ T787] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1866.679563][ T27] usb 4-1: config 1 has no interface number 0 [ 1866.686823][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.695285][ T27] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1866.712047][ T787] usb 5-1: Product: syz [ 1866.716632][ T787] usb 5-1: Manufacturer: syz [ 1866.732385][ T27] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1866.745797][ T787] usb 5-1: SerialNumber: syz [ 1866.755313][ T787] usb 5-1: config 0 descriptor?? [ 1866.777772][ T787] hub 5-1:0.132: bad descriptor, ignoring hub [ 1866.782776][T23641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20298'. [ 1866.786427][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1866.817001][ T787] hub: probe of 5-1:0.132 failed with error -5 [ 1866.836753][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.845339][ T787] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input122 [ 1866.866577][ T27] usb 4-1: Product: syz [ 1866.875676][ T27] usb 4-1: Manufacturer: syz [ 1866.892353][T23647] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1866.909905][ T27] usb 4-1: SerialNumber: syz [ 1867.138129][T23662] loop1: detected capacity change from 0 to 1024 [ 1867.221666][T23662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1867.372842][ T27] usb 4-1: USB disconnect, device number 79 [ 1867.405125][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1867.716627][T23700] loop0: detected capacity change from 0 to 47 [ 1868.235336][T23730] loop0: detected capacity change from 0 to 1024 [ 1868.296982][T23730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1868.324681][T23738] ..0ˆ: renamed from veth0_to_hsr (while UP) [ 1868.477305][T23730] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.20316: reserved inode found cleared - inode=18 [ 1868.550003][T23753] netlink: 'syz.4.20320': attribute type 5 has an invalid length. [ 1868.674005][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1868.976450][T23781] loop4: detected capacity change from 0 to 16 [ 1869.008750][T23781] erofs: (device loop4): mounted with root inode @ nid 36. [ 1869.350846][T23788] loop1: detected capacity change from 0 to 8192 [ 1869.414886][T23788] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1869.503591][T23812] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1869.526178][ T5756] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1870.270211][T23852] xt_TCPMSS: Only works on TCP SYN packets [ 1870.330727][T23857] netlink: 148 bytes leftover after parsing attributes in process `syz.1.20350'. [ 1870.777037][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20362'. [ 1871.084809][ T28] audit: type=1326 audit(2000000091.126:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23901 comm="syz.1.20368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1871.129516][T23909] loop0: detected capacity change from 0 to 16 [ 1871.156458][T23909] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1871.184570][ T28] audit: type=1326 audit(2000000091.126:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23901 comm="syz.1.20368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1871.311404][ T28] audit: type=1326 audit(2000000091.136:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23901 comm="syz.1.20368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1871.389017][ T28] audit: type=1326 audit(2000000091.136:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23901 comm="syz.1.20368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1871.478143][ T28] audit: type=1326 audit(2000000091.136:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23901 comm="syz.1.20368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1871.631949][T23933] netlink: 'syz.3.20376': attribute type 30 has an invalid length. [ 1871.819210][ T5841] usb 5-1: USB disconnect, device number 2 [ 1871.877748][T23938] loop4: detected capacity change from 0 to 4096 [ 1871.887148][T23938] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1872.019455][T23938] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1872.072043][T23938] ntfs3: loop4: failed to convert "c46c" to cp737 [ 1872.162666][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20384'. [ 1872.611998][T23989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1872.780896][T23990] loop1: detected capacity change from 0 to 4096 [ 1872.897772][T23990] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1872.929838][T23990] ntfs3: loop1: Failed to load $Extend (-22). [ 1872.945300][T23990] ntfs3: loop1: Failed to initialize $Extend. [ 1872.997554][T23990] ntfs3: loop1: mft corrupted [ 1873.049476][T24004] xt_HMARK: spi-set and port-set can't be combined [ 1873.088806][T24006] binfmt_misc: register: failed to install interpreter file ./file0 [ 1873.317885][T23978] loop4: detected capacity change from 0 to 32768 [ 1873.516777][T24011] loop1: detected capacity change from 0 to 8192 [ 1873.673944][T24030] netlink: 84 bytes leftover after parsing attributes in process `syz.3.20405'. [ 1873.919487][T24042] tmpfs: Bad value for 'mpol' [ 1874.227171][T24059] loop0: detected capacity change from 0 to 764 [ 1874.314131][T24059] rock: directory entry would overflow storage [ 1874.320338][T24059] rock: sig=0x4654, size=5, remaining=4 [ 1874.376389][T24059] isofs: Unable to find the ".." directory for NFS. [ 1874.817309][T24091] netlink: 'syz.0.20423': attribute type 3 has an invalid length. [ 1874.875241][T24095] loop4: detected capacity change from 0 to 512 [ 1874.875371][T24097] loop1: detected capacity change from 0 to 512 [ 1874.958202][T24097] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1874.994111][T24095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1875.020048][T24097] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1875.073974][T24114] xt_l2tp: invalid flags combination: 8 [ 1875.082853][T24097] System zones: 0-1, 15-15, 18-18, 34-34 [ 1875.088915][T24097] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1875.158788][T24097] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1875.180409][T24095] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1875.221404][T24097] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1875.260078][T24097] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1875.304627][T24097] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.20425: bg 0: block 40: padding at end of block bitmap is not set [ 1875.320777][T22823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1875.384310][T24097] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1875.446574][T24097] EXT4-fs (loop1): 1 truncate cleaned up [ 1875.483663][T24097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1875.579893][T24097] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.20425: bad symlink. [ 1875.690526][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1876.089318][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1877.672790][T24237] loop1: detected capacity change from 0 to 128 [ 1877.754941][T24237] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1877.925350][T24250] loop0: detected capacity change from 0 to 16 [ 1878.019318][T24250] erofs: (device loop0): mounted with root inode @ nid 36. [ 1878.053198][T24250] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD2 format 3 for nid 83, please upgrade kernel [ 1878.093024][T24250] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 0 of nid 83 [ 1878.241564][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20474'. [ 1878.255783][T24266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20474'. [ 1878.268722][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20475'. [ 1878.314023][T24267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20475'. [ 1878.343772][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20477'. [ 1878.522310][T24281] loop4: detected capacity change from 0 to 256 [ 1878.970320][T24307] netlink: 52 bytes leftover after parsing attributes in process `syz.0.20488'. [ 1879.486170][T24342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20496'. [ 1879.522299][T24342] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1880.181069][T24378] loop4: detected capacity change from 0 to 1024 [ 1880.260060][T24384] netlink: 'syz.0.20509': attribute type 3 has an invalid length. [ 1880.277499][T24378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec019, mo2=0002] [ 1880.304880][T24390] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1880.324409][T24378] System zones: 1-12 [ 1880.328804][T24384] netlink: 'syz.0.20509': attribute type 1 has an invalid length. [ 1880.375223][T24378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.407002][T24384] netlink: 216 bytes leftover after parsing attributes in process `syz.0.20509'. [ 1880.478585][T24384] NCSI netlink: No device for ifindex 33022 [ 1880.646349][T22823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.190334][T24437] overlayfs: missing 'lowerdir' [ 1881.270178][T24442] netlink: 'syz.3.20528': attribute type 13 has an invalid length. [ 1881.370566][T24451] infiniband syz0: set active [ 1881.386526][T24451] infiniband syz0: set active [ 1881.420498][T24456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20531'. [ 1881.531100][T24451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1881.547473][T24451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1881.582792][ T5841] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1881.595169][ T27] lo speed is unknown, defaulting to 1000 [ 1881.595199][T24457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20532'. [ 1881.620314][T21647] lo speed is unknown, defaulting to 1000 [ 1881.783388][ T5841] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.807294][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.833331][ T5841] usb 5-1: Product: syz [ 1881.837569][ T5841] usb 5-1: Manufacturer: syz [ 1881.874629][ T5841] usb 5-1: SerialNumber: syz [ 1881.917821][ T5841] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1881.952976][ T2851] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1882.470876][T24504] loop0: detected capacity change from 0 to 64 [ 1882.496939][T24504] hfs: bad allocation block size 0 [ 1883.102790][ T2851] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1883.109994][ T2851] ath9k_htc: Failed to initialize the device [ 1883.185286][T24543] loop0: detected capacity change from 0 to 1024 [ 1883.208789][ T2851] usb 5-1: ath9k_htc: USB layer deinitialized [ 1883.297399][T13556] hfsplus: b-tree write err: -5, ino 4 [ 1883.446451][T21647] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1883.479841][ T2851] usb 5-1: USB disconnect, device number 3 [ 1883.699285][T21647] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1883.716678][T21647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.737091][T21647] usb 2-1: Product: syz [ 1883.752570][T21647] usb 2-1: Manufacturer: syz [ 1883.763120][T21647] usb 2-1: SerialNumber: syz [ 1883.783580][T21647] usb 2-1: config 0 descriptor?? [ 1884.034667][T21647] hso 2-1:0.0: Failed to find INT IN ep [ 1884.040803][T21647] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1884.277654][T24601] loop4: detected capacity change from 0 to 1024 [ 1884.278620][T21647] usb 2-1: USB disconnect, device number 66 [ 1884.718821][T24637] overlayfs: cannot append lower layer [ 1884.907552][ T2854] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1885.112909][ T2854] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1885.122360][ T2854] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1885.130563][ T2854] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.142416][ T2854] usb 1-1: config 63 has no interface number 0 [ 1885.142579][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1885.156870][ T2854] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1885.168206][ T2854] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1885.178702][ T2854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.187049][ T2854] usb 1-1: Product: syz [ 1885.191238][ T2854] usb 1-1: Manufacturer: syz [ 1885.195862][ T2854] usb 1-1: SerialNumber: syz [ 1885.335032][ T5785] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1885.347408][T24674] loop1: detected capacity change from 0 to 512 [ 1885.356179][T24674] EXT4-fs: Ignoring removed orlov option [ 1885.366243][ T5841] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1885.368724][T24674] EXT4-fs: Ignoring removed nobh option [ 1885.389881][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.398165][ T5841] usb 5-1: Product: syz [ 1885.399682][T24674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1885.403999][ T5841] usb 5-1: Manufacturer: syz [ 1885.427825][T24674] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1885.445752][T24674] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.20592: bg 0: block 248: padding at end of block bitmap is not set [ 1885.449973][ T5841] usb 5-1: SerialNumber: syz [ 1885.469273][T24674] Quota error (device loop1): write_blk: dquota write failed [ 1885.469649][ T2854] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 1885.477408][T24674] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1885.494686][ T5841] usb 5-1: config 0 descriptor?? [ 1885.500548][T24674] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.20592: Failed to acquire dquot type 1 [ 1885.504137][ T2854] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1885.524458][T24674] EXT4-fs (loop1): 1 truncate cleaned up [ 1885.533271][ T5841] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1885.545492][ T2854] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1885.550644][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1885.566436][T24674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1885.580849][ T5785] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1885.590043][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.590104][ T2854] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1885.616622][ T5785] usb 4-1: Product: syz [ 1885.620848][ T5785] usb 4-1: Manufacturer: syz [ 1885.626701][T24674] EXT4-fs: Ignoring removed orlov option [ 1885.631821][ T2854] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1885.632355][T24674] EXT4-fs: Ignoring removed nobh option [ 1885.632835][T24674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1885.653062][ T2854] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1885.659955][ T5785] usb 4-1: SerialNumber: syz [ 1885.674278][ T2854] uvcvideo 1-1:63.66: Entity type for entity Output 5 was not initialized! [ 1885.675087][ T5785] usb 4-1: config 0 descriptor?? [ 1885.684359][ T2854] uvcvideo 1-1:63.66: Entity type for entity Input 29 was not initialized! [ 1885.705443][T24674] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1885.714292][ T2854] usb 1-1: USB disconnect, device number 88 [ 1885.731568][ T5785] usbtouchscreen: probe of 4-1:0.0 failed with error -12 [ 1885.789003][T24674] EXT4-fs error (device loop1): __ext4_remount:6752: comm syz.1.20592: Abort forced by user [ 1885.803806][T24674] EXT4-fs (loop1): Remounting filesystem read-only [ 1885.812038][T24674] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1885.821527][T24674] ext4 filesystem being remounted at /5272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1885.855489][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1885.952682][ T5785] usb 4-1: USB disconnect, device number 80 [ 1885.990466][ T5841] sonixb 5-1:0.0: Error writing register 01: -71 [ 1885.999264][ T5841] sonixb: probe of 5-1:0.0 failed with error -71 [ 1886.010878][ T5841] usb 5-1: USB disconnect, device number 4 [ 1886.066963][ T28] audit: type=1326 audit(2000000105.148:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1886.132430][ T28] audit: type=1326 audit(2000000105.148:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1886.163432][ T28] audit: type=1326 audit(2000000105.148:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1886.205852][ T28] audit: type=1326 audit(2000000105.148:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1886.265149][ T28] audit: type=1326 audit(2000000105.148:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1886.300594][ T28] audit: type=1326 audit(2000000105.148:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1886.323986][ T28] audit: type=1326 audit(2000000105.148:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1886.347651][ T28] audit: type=1326 audit(2000000105.148:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.1.20594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1887.137786][T24773] netlink: 'syz.1.20613': attribute type 1 has an invalid length. [ 1887.145997][T24773] netlink: 248 bytes leftover after parsing attributes in process `syz.1.20613'. [ 1887.818859][T24809] loop0: detected capacity change from 0 to 4096 [ 1887.825965][T21647] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1887.829634][T24809] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1887.879918][T24809] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1888.090731][T21647] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1888.101522][T21647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.120861][T21647] usb 4-1: Product: syz [ 1888.125093][T21647] usb 4-1: Manufacturer: syz [ 1888.131686][T21647] usb 4-1: SerialNumber: syz [ 1888.153421][T21647] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1888.206226][ T5785] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1888.307800][T24830] netlink: 'syz.0.20629': attribute type 10 has an invalid length. [ 1888.331683][T24830] team0: Device hsr_slave_0 failed to register rx_handler [ 1888.550836][T24838] netlink: 80 bytes leftover after parsing attributes in process `syz.0.20632'. [ 1888.724615][T21647] usb 4-1: USB disconnect, device number 81 [ 1888.860291][T24854] syz.4.20636 (24854): drop_caches: 0 [ 1889.198935][T24868] netlink: 'syz.1.20641': attribute type 10 has an invalid length. [ 1889.275489][T24868] team0: Device veth1_macvtap failed to register rx_handler [ 1889.368414][ T5785] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1889.375504][ T5785] ath9k_htc: Failed to initialize the device [ 1889.407595][T21647] usb 4-1: ath9k_htc: USB layer deinitialized [ 1890.288053][T24926] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1890.821954][ T5841] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 1891.054495][ T5841] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1891.075560][ T5841] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1891.103546][ T5841] usb 2-1: config 0 has no interface number 0 [ 1891.141016][ T5841] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1891.164507][ T5841] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1891.193795][ T5841] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1891.224663][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.233165][T24976] loop4: detected capacity change from 0 to 4096 [ 1891.264718][ T5841] usb 2-1: config 0 descriptor?? [ 1891.298833][T24976] __ntfs_error: 10 callbacks suppressed [ 1891.298851][T24976] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1891.324670][T24976] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1891.346506][T24976] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1891.360590][T24976] ntfs: volume version 3.1. [ 1891.374541][T24976] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1891.429669][ T787] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1891.593016][T24999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20678'. [ 1891.624131][ T787] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1891.633632][ T787] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1891.663939][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1891.689593][ T787] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1891.702679][ T787] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1891.752549][ T787] usb 1-1: Product: syz [ 1891.756777][ T787] usb 1-1: Manufacturer: syz [ 1891.763966][ T5841] usb 2-1: USB disconnect, device number 67 [ 1891.769774][ T787] usb 1-1: SerialNumber: syz [ 1891.816346][ T787] usb 1-1: config 0 descriptor?? [ 1891.841026][ T787] hub 1-1:0.0: bad descriptor, ignoring hub [ 1891.854301][ T787] hub: probe of 1-1:0.0 failed with error -5 [ 1891.884045][ T787] usb 1-1: selecting invalid altsetting 0 [ 1892.188495][ T5785] usb 1-1: USB disconnect, device number 89 [ 1892.645091][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20691'. [ 1892.665123][T25062] loop4: detected capacity change from 0 to 4096 [ 1892.699671][T25062] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1892.765094][T25062] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1892.787492][T25062] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1892.835020][T25062] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1892.868557][T25062] ntfs: volume version 3.1. [ 1892.950281][T25062] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1892.982427][T25062] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1893.741159][T25124] xt_bpf: check failed: parse error [ 1893.881530][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1893.888177][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1894.817359][T25183] loop1: detected capacity change from 0 to 64 [ 1895.461784][T25168] loop4: detected capacity change from 0 to 32768 [ 1895.488832][T25168] [ 1895.488832][T25168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1895.488832][T25168] [ 1895.491262][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20736'. [ 1895.549378][T25168] jfs_rename: dtInsert returned -EIO [ 1895.598170][ T5837] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1895.622377][T22823] [ 1895.622377][T22823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1895.622377][T22823] [ 1895.672266][T22823] [ 1895.672266][T22823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1895.672266][T22823] [ 1895.822777][ T5837] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1895.842290][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.872825][ T5837] usb 4-1: Product: syz [ 1895.883494][ T5837] usb 4-1: Manufacturer: syz [ 1895.902696][ T5837] usb 4-1: SerialNumber: syz [ 1895.911961][ T5837] usb 4-1: config 0 descriptor?? [ 1896.071485][T25239] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1896.087398][T25239] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1896.099314][T25239] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1896.119589][T25239] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1896.147258][T25239] geneve5: entered promiscuous mode [ 1896.155981][ T5837] hso 4-1:0.0: Failed to find BULK IN ep [ 1896.185183][ T5837] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1896.363401][ T5837] usb 4-1: USB disconnect, device number 82 [ 1896.484011][T25285] loop0: detected capacity change from 0 to 512 [ 1896.492296][T25285] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1896.554347][T25285] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1896.731687][T21647] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1896.945122][T21647] usb 2-1: Using ep0 maxpacket: 16 [ 1896.953811][T21647] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1896.972236][T21647] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.993705][T21647] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1897.016211][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20758'. [ 1897.032685][T21647] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1897.049647][T21647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.074321][T21647] usb 2-1: Product: syz [ 1897.078534][T21647] usb 2-1: Manufacturer: syz [ 1897.084862][T21647] usb 2-1: SerialNumber: syz [ 1897.369555][T21647] usb 2-1: 0:2 : does not exist [ 1897.395868][T21647] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1897.460743][T21647] usb 2-1: USB disconnect, device number 68 [ 1897.550312][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1897.971368][T25385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20772'. [ 1898.654340][T25428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20786'. [ 1898.779316][T25433] netlink: 'syz.3.20787': attribute type 3 has an invalid length. [ 1898.836688][T25433] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.20787'. [ 1898.952497][T25444] loop0: detected capacity change from 0 to 8 [ 1899.065951][T25444] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1899.094913][T25444] SQUASHFS error: Failed to read block 0x144: -5 [ 1899.136631][T25444] SQUASHFS error: Unable to read metadata cache entry [142] [ 1899.179369][T25444] SQUASHFS error: Unable to read directory block [142:26] [ 1900.188391][T25510] netlink: 'syz.4.20811': attribute type 12 has an invalid length. [ 1900.317817][T25516] loop0: detected capacity change from 0 to 64 [ 1901.087772][T25555] trusted_key: encrypted_key: master key parameter is missing [ 1901.218869][T25561] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1901.262048][T25567] loop0: detected capacity change from 0 to 64 [ 1901.810610][T25599] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1901.884097][ T2854] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1902.098556][ T2854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.120260][ T2854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.153138][ T2854] usb 4-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 1902.172734][ T2854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.195160][ T2854] usb 4-1: Product: syz [ 1902.202782][ T2854] usb 4-1: Manufacturer: syz [ 1902.215434][ T2854] usb 4-1: SerialNumber: syz [ 1902.244555][ T2854] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 1902.261788][ T2854] cdc_mbim 4-1:1.0: bind() failure [ 1902.292628][ T5785] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1902.515037][ T5785] usb 1-1: Using ep0 maxpacket: 8 [ 1902.532380][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.554484][T21647] usb 4-1: USB disconnect, device number 83 [ 1902.577412][ T5785] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1902.591596][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.599647][ T5785] usb 1-1: Product: syz [ 1902.612275][ T5785] usb 1-1: Manufacturer: syz [ 1902.624015][ T5785] usb 1-1: SerialNumber: syz [ 1902.637394][ T5785] usb 1-1: config 0 descriptor?? [ 1902.648267][ T5785] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1902.660230][ T5785] usb 1-1: selecting invalid altsetting 1 [ 1903.164551][ T5841] usb 1-1: USB disconnect, device number 90 [ 1903.905581][T25735] --map-set only usable from mangle table [ 1904.564089][T25777] netlink: 'syz.4.20888': attribute type 3 has an invalid length. [ 1904.578831][T25777] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.20888'. [ 1904.963032][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1904.963047][ T28] audit: type=1326 audit(2000000122.818:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1905.070625][ T28] audit: type=1326 audit(2000000122.818:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1905.113931][T25802] loop1: detected capacity change from 0 to 2048 [ 1905.146178][ T28] audit: type=1326 audit(2000000122.855:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe87199c629 code=0x7ffc0000 [ 1905.201941][T25802] Alternate GPT is invalid, using primary GPT. [ 1905.208306][T25802] loop1: p2 p3 p7 [ 1905.238623][ T28] audit: type=1326 audit(2000000122.855:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe87199c392 code=0x7ffc0000 [ 1905.316059][ T28] audit: type=1326 audit(2000000122.874:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe87195cece code=0x7ffc0000 [ 1905.385487][T25820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20902'. [ 1905.412074][ T28] audit: type=1326 audit(2000000122.902:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe87199c457 code=0x7ffc0000 [ 1905.561783][ T28] audit: type=1326 audit(2000000122.967:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe87195cece code=0x7ffc0000 [ 1905.675448][T25836] netlink: 'syz.1.20905': attribute type 1 has an invalid length. [ 1905.683697][ T28] audit: type=1326 audit(2000000122.967:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe87199c2bb code=0x7ffc0000 [ 1905.718813][T25836] netlink: 'syz.1.20905': attribute type 2 has an invalid length. [ 1905.757202][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20905'. [ 1905.772208][ T28] audit: type=1326 audit(2000000122.967:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe87195cece code=0x7ffc0000 [ 1905.826996][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1905.846700][ T6837] udevd[6837]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1905.874826][T10358] udevd[10358]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1905.884797][ T28] audit: type=1326 audit(2000000122.967:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.1.20894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe87199c2bb code=0x7ffc0000 [ 1906.171452][ T2854] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1906.379152][T25879] netlink: 188 bytes leftover after parsing attributes in process `syz.0.20917'. [ 1906.390370][T25878] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1906.407319][ T2854] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1906.450282][ T2854] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1906.463221][T25882] 9pnet_fd: Insufficient options for proto=fd [ 1906.479927][ T2854] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1906.509946][ T2854] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1906.533084][ T2854] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1906.572073][ T2854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.590383][ T2854] usb 5-1: Product: syz [ 1906.596021][ T2854] usb 5-1: Manufacturer: syz [ 1906.609624][ T2854] usb 5-1: SerialNumber: syz [ 1906.871485][ T2854] usb 5-1: selecting invalid altsetting 0 [ 1906.892827][ T2854] usb 5-1: selecting invalid altsetting 0 [ 1906.903918][ T2854] cdc_ncm 5-1:1.0: bind() failure [ 1906.932689][ T2854] usb 5-1: selecting invalid altsetting 0 [ 1906.938477][ T2854] cdc_ncm: probe of 5-1:1.1 failed with error -22 [ 1906.946688][ T2854] usb 5-1: selecting invalid altsetting 0 [ 1906.953326][ T2854] cdc_mbim: probe of 5-1:1.1 failed with error -22 [ 1906.960664][ T2854] usb 5-1: selecting invalid altsetting 0 [ 1906.967967][ T2854] usbtest: probe of 5-1:1.1 failed with error -22 [ 1906.984384][ T2854] usb 5-1: USB disconnect, device number 5 [ 1907.370084][T25935] loop1: detected capacity change from 0 to 64 [ 1907.385481][T25937] netlink: 'syz.0.20935': attribute type 6 has an invalid length. [ 1907.476454][T25935] bio_check_eod: 277 callbacks suppressed [ 1907.476472][T25935] syz.1.20934: attempt to access beyond end of device [ 1907.476472][T25935] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1907.506800][T25935] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 1907.523922][T25935] syz.1.20934: attempt to access beyond end of device [ 1907.523922][T25935] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1907.582317][T25935] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 1908.047494][T25970] loop1: detected capacity change from 0 to 1024 [ 1908.087396][T25972] netlink: 'syz.3.20947': attribute type 1 has an invalid length. [ 1908.087417][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20947'. [ 1908.327421][T25985] netlink: 'syz.0.20950': attribute type 2 has an invalid length. [ 1908.336008][T25985] netlink: 'syz.0.20950': attribute type 8 has an invalid length. [ 1908.350892][T25985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20950'. [ 1908.587992][T25998] x_tables: unsorted underflow at hook 3 [ 1908.659719][T26002] netlink: 666 bytes leftover after parsing attributes in process `syz.1.20955'. [ 1908.841751][T26011] loop0: detected capacity change from 0 to 512 [ 1908.869595][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20958'. [ 1908.908905][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20958'. [ 1908.927765][T26011] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1908.952896][T26011] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1908.960087][T26014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20958'. [ 1908.985185][T26011] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1909.002267][T26011] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1909.016457][T26011] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.20966: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1909.036869][T26011] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.20966: couldn't read orphan inode 13 (err -117) [ 1909.058388][T26011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1909.175301][ T5841] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1909.192959][T26011] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.20966: inode #15: comm syz.0.20966: iget: illegal inode # [ 1909.307577][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1909.400060][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 1909.417481][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1909.473750][ T5841] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 1909.483316][ T5841] usb 4-1: config 1 has no interface number 0 [ 1909.526293][ T5841] usb 4-1: string descriptor 0 read error: -22 [ 1909.533268][ T5841] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 1909.554748][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.848855][T26062] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1909.858678][ T5841] usb 4-1: USB disconnect, device number 84 [ 1909.917632][T26039] loop1: detected capacity change from 0 to 32768 [ 1909.937749][T26039] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1910.094949][ T5756] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1910.359755][T26095] ieee802154 phy0 wpan0: encryption failed: -22 [ 1910.777907][T26120] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1910.916714][T26128] netlink: 'syz.4.20990': attribute type 9 has an invalid length. [ 1910.940075][T26128] __nla_validate_parse: 2 callbacks suppressed [ 1910.940091][T26128] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.20990'. [ 1911.226802][T26146] kAFS: unparsable volume name [ 1911.345276][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20999'. [ 1911.374644][T26155] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1911.600730][T26169] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.21003'. [ 1912.262999][T26203] loop1: detected capacity change from 0 to 16 [ 1912.301711][T26203] erofs: (device loop1): mounted with root inode @ nid 36. [ 1912.361273][T26203] syz.1.21015: attempt to access beyond end of device [ 1912.361273][T26203] loop1: rw=524288, sector=131758, nr_sectors = 2 limit=16 [ 1912.435735][T26203] syz.1.21015: attempt to access beyond end of device [ 1912.435735][T26203] loop1: rw=524288, sector=74, nr_sectors = 2 limit=16 [ 1912.478649][T26203] syz.1.21015: attempt to access beyond end of device [ 1912.478649][T26203] loop1: rw=524288, sector=262336, nr_sectors = 2 limit=16 [ 1912.635969][T26185] loop0: detected capacity change from 0 to 32768 [ 1912.672259][T26185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.21017 (26185) [ 1912.754260][T26185] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1912.795696][T26185] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1912.831559][T26185] BTRFS info (device loop0): setting nodatasum [ 1912.837815][T26185] BTRFS info (device loop0): force zlib compression, level 3 [ 1912.853198][T26185] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1912.862495][T26185] BTRFS info (device loop0): use lzo compression, level 0 [ 1912.902718][T26185] BTRFS info (device loop0): turning on flush-on-commit [ 1912.910343][T26185] BTRFS info (device loop0): enabling auto defrag [ 1912.917660][T26185] BTRFS info (device loop0): max_inline at 4096 [ 1912.924003][T26185] BTRFS info (device loop0): using free space tree [ 1913.078939][T26185] BTRFS info (device loop0): enabling ssd optimizations [ 1913.468538][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1913.858549][T26271] xt_CT: No such helper "snmp_trap" [ 1914.327952][ T5841] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1914.546760][ T5841] usb 5-1: not running at top speed; connect to a high speed hub [ 1914.570537][ T5841] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 1914.603241][ T5841] usb 5-1: config 95 has no interface number 0 [ 1914.645794][ T5841] usb 5-1: config 95 interface 1 has no altsetting 0 [ 1914.675554][ T5841] usb 5-1: string descriptor 0 read error: -22 [ 1914.691926][ T5841] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1914.701012][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.213441][T26342] ip6t_srh: unknown srh match flags 4000 [ 1915.339041][T26345] comedi comedi3: comedi_config --init_data is deprecated [ 1915.343981][ T5837] usb 5-1: USB disconnect, device number 6 [ 1915.840386][T26382] loop0: detected capacity change from 0 to 256 [ 1916.241123][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1916.241138][ T28] audit: type=1326 audit(2000000133.359:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.3.21066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1916.348081][ T28] audit: type=1326 audit(2000000133.359:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.3.21066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1916.419459][ T28] audit: type=1326 audit(2000000133.425:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.3.21066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1916.496647][ T28] audit: type=1326 audit(2000000133.425:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.3.21066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1916.584434][ T28] audit: type=1326 audit(2000000133.425:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.3.21066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1916.588149][T26414] loop1: detected capacity change from 0 to 2048 [ 1916.607370][T26422] netlink: 'syz.0.21072': attribute type 12 has an invalid length. [ 1916.645590][T26414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1916.854617][T26433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21076'. [ 1916.975247][T26435] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1917.652308][T26481] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1917.658888][T26481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1917.706181][T26481] vhci_hcd vhci_hcd.0: Device attached [ 1917.777937][T26481] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 1917.784511][T26481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1917.806758][T26481] vhci_hcd vhci_hcd.0: Device attached [ 1917.820894][T26488] vhci_hcd: connection closed [ 1917.824311][ T3477] vhci_hcd: stop threads [ 1917.824489][T26484] vhci_hcd: connection closed [ 1917.836931][T26495] netlink: 'syz.3.21094': attribute type 21 has an invalid length. [ 1917.856129][ T3477] vhci_hcd: release socket [ 1917.862004][ T3477] vhci_hcd: disconnect device [ 1917.882580][ T3477] vhci_hcd: stop threads [ 1917.886866][ T3477] vhci_hcd: release socket [ 1917.922573][ T3477] vhci_hcd: disconnect device [ 1917.931335][ T5785] vhci_hcd: vhci_device speed not set [ 1918.138443][T26507] loop4: detected capacity change from 0 to 2048 [ 1918.194061][T26507] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1918.806636][T26544] geneve4: entered promiscuous mode [ 1918.902142][T26550] loop1: detected capacity change from 0 to 16 [ 1918.943917][T26550] erofs: (device loop1): mounted with root inode @ nid 36. [ 1919.744622][T26589] netlink: 'syz.1.21124': attribute type 5 has an invalid length. [ 1919.772909][T26589] : entered promiscuous mode [ 1920.747403][T26642] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1920.766246][T26641] netlink: 'syz.3.21138': attribute type 12 has an invalid length. [ 1921.174899][T26668] loop1: detected capacity change from 0 to 64 [ 1921.804672][T26705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21160'. [ 1921.968966][T26714] virtiofs: Unknown parameter 'always' [ 1922.557200][T26751] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1922.573113][T26752] loop4: detected capacity change from 0 to 64 [ 1923.299030][ T5837] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1923.517097][ T5837] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1923.551051][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.585108][ T5837] usb 2-1: config 0 descriptor?? [ 1923.605756][ T5837] cp210x 2-1:0.0: cp210x converter detected [ 1924.068776][ T5837] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1924.077556][ T5837] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1924.106310][ T5837] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1924.132920][ T5837] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1924.152376][ T5837] usb 2-1: USB disconnect, device number 69 [ 1924.200304][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1924.222950][ T5837] cp210x 2-1:0.0: device disconnected [ 1925.057744][T26901] syz.0.21218: attempt to access beyond end of device [ 1925.057744][T26901] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1925.089459][T26911] netlink: 224 bytes leftover after parsing attributes in process `syz.3.21220'. [ 1925.205039][T26916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21221'. [ 1925.630007][T26940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21230'. [ 1925.647669][T26940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21230'. [ 1925.666092][T26942] sctp: [Deprecated]: syz.4.21229 (pid 26942) Use of int in maxseg socket option. [ 1925.666092][T26942] Use struct sctp_assoc_value instead [ 1925.877307][T26956] loop4: detected capacity change from 0 to 256 [ 1925.896325][T26956] exfat: Deprecated parameter 'utf8' [ 1925.912957][T26954] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21241'. [ 1925.928039][T26956] exfat: Deprecated parameter 'utf8' [ 1926.015683][T26956] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1926.077039][ T27] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1926.180149][T26970] loop1: detected capacity change from 0 to 16 [ 1926.191704][T26970] erofs: (device loop1): mounted with root inode @ nid 36. [ 1926.304995][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 1926.318292][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.332831][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1926.348527][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1926.400462][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.416363][ T27] usb 1-1: Product: syz [ 1926.426734][ T27] usb 1-1: Manufacturer: syz [ 1926.442354][ T27] usb 1-1: SerialNumber: syz [ 1926.719559][ T27] usb 1-1: 0:2 : does not exist [ 1926.724555][ T27] usb 1-1: unit 9 not found! [ 1926.743797][ T27] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1926.808046][ T27] usb 1-1: USB disconnect, device number 91 [ 1926.874815][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1927.090812][T27022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21246'. [ 1927.491173][ T28] audit: type=1326 audit(2000000143.892:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.0.21254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1927.624638][ T28] audit: type=1326 audit(2000000143.920:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.0.21254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1927.651856][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21255'. [ 1927.703023][ T28] audit: type=1326 audit(2000000143.929:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.0.21254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1927.798814][ T28] audit: type=1326 audit(2000000143.986:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.0.21254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1927.872881][ T28] audit: type=1326 audit(2000000143.986:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.0.21254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1928.141586][T27073] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1928.415372][T27082] loop0: detected capacity change from 0 to 2048 [ 1928.486710][T27082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1928.681781][T27105] xt_limit: Overflow, try lower: 2147483649/3300 [ 1928.825056][ T5785] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 1929.091117][ T5785] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1929.113049][ T5785] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1929.121172][ T5785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1929.142198][ T5785] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1929.153434][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1929.164620][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1929.196329][ T5785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1929.228142][ T5785] usb 4-1: string descriptor 0 read error: -22 [ 1929.241457][ T5785] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1929.250536][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.303469][ T5785] usb 4-1: config 0 descriptor?? [ 1929.349899][ T5785] hub 4-1:0.0: bad descriptor, ignoring hub [ 1929.355865][ T5785] hub: probe of 4-1:0.0 failed with error -5 [ 1929.382524][ T5785] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input128 [ 1929.461982][T27142] xt_CT: No such helper "snmp" [ 1929.688161][ T5785] usb 4-1: USB disconnect, device number 85 [ 1930.571140][T27226] loop0: detected capacity change from 0 to 1024 [ 1930.602185][T27230] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1930.615860][T27228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21308'. [ 1930.653817][T27226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1930.939557][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1931.308922][T27275] loop4: detected capacity change from 0 to 47 [ 1931.476330][T21647] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1931.641784][T27295] loop4: detected capacity change from 0 to 1024 [ 1931.674413][T27295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1931.700469][T21647] usb 2-1: Using ep0 maxpacket: 16 [ 1931.703057][T27295] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.21334: reserved inode found cleared - inode=18 [ 1931.709882][T21647] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1931.726296][ T27] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1931.745663][T21647] usb 2-1: config 0 has no interface number 0 [ 1931.759882][T21647] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1931.770582][T21647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.784390][T21647] usb 2-1: Product: syz [ 1931.790077][T21647] usb 2-1: Manufacturer: syz [ 1931.797451][T22823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1931.807910][T21647] usb 2-1: SerialNumber: syz [ 1931.836775][T21647] usb 2-1: config 0 descriptor?? [ 1931.864193][T21647] hub 2-1:0.132: bad descriptor, ignoring hub [ 1931.870333][T21647] hub: probe of 2-1:0.132 failed with error -5 [ 1931.890027][T21647] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input129 [ 1931.965610][ T27] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1931.981833][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.000001][T27315] ..0ˆ: renamed from veth0_to_hsr (while UP) [ 1932.019812][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1932.040850][ T27] usb 1-1: config 1 has no interface number 0 [ 1932.050954][ T27] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1932.084284][ T27] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1932.121719][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1932.138312][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.157860][ T27] usb 1-1: Product: syz [ 1932.168656][ T27] usb 1-1: Manufacturer: syz [ 1932.174150][ T27] usb 1-1: SerialNumber: syz [ 1932.407763][T27331] netlink: 'syz.3.21335': attribute type 5 has an invalid length. [ 1932.534739][ T5837] usb 2-1: USB disconnect, device number 70 [ 1932.680428][ T5841] usb 1-1: USB disconnect, device number 92 [ 1933.539573][T27391] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1933.889205][T27398] loop4: detected capacity change from 0 to 8192 [ 1933.951755][T27398] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1934.259916][T27431] xt_TCPMSS: Only works on TCP SYN packets [ 1934.617977][T27451] netlink: 148 bytes leftover after parsing attributes in process `syz.4.21369'. [ 1934.868003][T27467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21374'. [ 1935.084324][T27477] loop4: detected capacity change from 0 to 16 [ 1935.144586][T27477] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1935.199694][ T28] audit: type=1326 audit(2000000151.104:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27485 comm="syz.0.21380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1935.281692][ T28] audit: type=1326 audit(2000000151.104:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27485 comm="syz.0.21380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1935.361133][ T28] audit: type=1326 audit(2000000151.141:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27485 comm="syz.0.21380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1935.437087][ T28] audit: type=1326 audit(2000000151.141:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27485 comm="syz.0.21380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1936.040918][T27530] netlink: 'syz.4.21392': attribute type 30 has an invalid length. [ 1936.126444][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21396'. [ 1936.187932][T27533] loop0: detected capacity change from 0 to 4096 [ 1936.248473][T27533] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1936.365115][T27533] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1936.502585][T27533] ntfs3: loop0: failed to convert "c46c" to cp737 [ 1936.522852][T27553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1936.890784][T27572] xt_HMARK: spi-set and port-set can't be combined [ 1936.903555][T27574] binfmt_misc: register: failed to install interpreter file ./file0 [ 1937.494895][T27608] netlink: 84 bytes leftover after parsing attributes in process `syz.1.21416'. [ 1937.796102][T27597] loop0: detected capacity change from 0 to 32768 [ 1938.159526][T27626] tmpfs: Bad value for 'mpol' [ 1938.776499][T27662] netlink: 'syz.3.21435': attribute type 3 has an invalid length. [ 1939.063753][T27678] xt_l2tp: invalid flags combination: 8 [ 1939.245575][T27685] loop1: detected capacity change from 0 to 512 [ 1939.309957][T27685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1939.380023][T27685] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1939.592027][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1939.780953][T27720] loop0: detected capacity change from 0 to 512 [ 1939.910033][T27720] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1939.936796][T27720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1939.948449][T27720] System zones: 0-1, 15-15, 18-18, 34-34 [ 1939.955090][T27720] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1939.961535][T27720] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1939.972760][T27720] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1939.995500][T27720] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1940.006526][T27720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.21448: bg 0: block 40: padding at end of block bitmap is not set [ 1940.042166][T27720] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1940.080679][T27720] EXT4-fs (loop0): 1 truncate cleaned up [ 1940.125702][T27720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1940.283531][T27720] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.21448: bad symlink. [ 1940.350647][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1941.399428][T27811] loop0: detected capacity change from 0 to 2048 [ 1941.463623][T27811] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1941.469271][T27816] loop4: detected capacity change from 0 to 128 [ 1941.565640][T27816] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1941.994103][T27845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21486'. [ 1942.048727][T27845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21486'. [ 1942.158965][T27854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21489'. [ 1942.177255][T27854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21489'. [ 1942.277910][T27861] loop0: detected capacity change from 0 to 256 [ 1942.687509][T27884] netlink: 52 bytes leftover after parsing attributes in process `syz.4.21500'. [ 1942.727452][T27886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21501'. [ 1943.606961][T27932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21516'. [ 1943.645729][T27932] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1943.915784][T27948] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1944.156886][T27961] loop1: detected capacity change from 0 to 1024 [ 1944.168569][T27966] netlink: 'syz.3.21526': attribute type 3 has an invalid length. [ 1944.219615][T27966] netlink: 'syz.3.21526': attribute type 1 has an invalid length. [ 1944.244317][T27966] netlink: 216 bytes leftover after parsing attributes in process `syz.3.21526'. [ 1944.261630][T27961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec019, mo2=0002] [ 1944.269867][T27961] System zones: 1-12 [ 1944.281637][T27961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1944.293697][T27966] NCSI netlink: No device for ifindex 33022 [ 1944.489972][T27985] netlink: 'syz.0.21540': attribute type 13 has an invalid length. [ 1944.543636][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1944.702013][T27995] trusted_key: encrypted_key: master key parameter is missing [ 1944.986029][T28012] overlayfs: missing 'lowerdir' [ 1945.157856][T28019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21541'. [ 1945.216025][T28022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21552'. [ 1945.342486][T28027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1946.823892][T28101] loop0: detected capacity change from 0 to 4096 [ 1946.884103][T28101] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1947.430506][T28126] loop4: detected capacity change from 0 to 1024 [ 1947.625597][ T65] hfsplus: b-tree write err: -5, ino 4 [ 1948.153838][ T27] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1948.366211][T28179] overlayfs: cannot append lower layer [ 1948.379225][ T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1948.398918][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.417889][ T27] usb 4-1: Product: syz [ 1948.425819][ T27] usb 4-1: Manufacturer: syz [ 1948.452319][ T27] usb 4-1: SerialNumber: syz [ 1948.469347][ T27] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1948.510004][ T5785] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1948.613728][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1948.613813][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1948.923442][ T2854] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1949.043344][T28219] loop4: detected capacity change from 0 to 512 [ 1949.056861][T28219] EXT4-fs: Ignoring removed orlov option [ 1949.066447][T28219] EXT4-fs: Ignoring removed nobh option [ 1949.074306][T28219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1949.086386][T28219] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1949.097475][T28219] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.21601: bg 0: block 248: padding at end of block bitmap is not set [ 1949.112859][T28219] Quota error (device loop4): write_blk: dquota write failed [ 1949.120684][T28219] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1949.132362][T28219] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.21601: Failed to acquire dquot type 1 [ 1949.148966][ T2854] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1949.151250][T28219] EXT4-fs (loop4): 1 truncate cleaned up [ 1949.158416][ T2854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.172248][ T2854] usb 1-1: Product: syz [ 1949.176597][ T2854] usb 1-1: Manufacturer: syz [ 1949.181532][ T2854] usb 1-1: SerialNumber: syz [ 1949.197584][ T2854] usb 1-1: config 0 descriptor?? [ 1949.205409][T28219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1949.260377][T28219] EXT4-fs: Ignoring removed orlov option [ 1949.266398][T28219] EXT4-fs: Ignoring removed nobh option [ 1949.272123][T28219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1949.281391][T28219] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1949.291047][ T2851] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1949.310829][T28219] EXT4-fs error (device loop4): __ext4_remount:6752: comm syz.4.21601: Abort forced by user [ 1949.321985][T28219] EXT4-fs (loop4): Remounting filesystem read-only [ 1949.328744][T28219] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1949.337424][T28219] ext4 filesystem being remounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1949.389613][T22823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1949.430952][ T2854] hso 1-1:0.0: Failed to find INT IN ep [ 1949.449731][ T2854] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1949.519894][ T2851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1949.546723][ T2851] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1949.555280][ T2851] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.571929][ T2851] usb 2-1: config 63 has no interface number 0 [ 1949.585912][ T2851] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1949.595537][ T2851] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1949.604911][ T2851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.632545][ T2851] usb 2-1: Product: syz [ 1949.636760][ T2851] usb 2-1: Manufacturer: syz [ 1949.649533][ T2851] usb 2-1: SerialNumber: syz [ 1949.649958][ T5785] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1949.676213][ T5785] ath9k_htc: Failed to initialize the device [ 1949.718752][ T5785] usb 4-1: ath9k_htc: USB layer deinitialized [ 1949.736197][ T2854] usb 1-1: USB disconnect, device number 93 [ 1949.947103][ T2851] usb 2-1: Found UVC 0.07 device syz (174f:8acf) [ 1949.981558][ T2851] usb 2-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1949.999200][ T5837] usb 4-1: USB disconnect, device number 86 [ 1950.007804][ T2851] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1950.032514][ T2851] usb 2-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1950.043624][ T2851] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1950.060975][ T2851] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1950.071135][ T2851] uvcvideo 2-1:63.66: Entity type for entity Output 5 was not initialized! [ 1950.083793][ T2851] uvcvideo 2-1:63.66: Entity type for entity Input 29 was not initialized! [ 1950.109545][ T2851] usb 2-1: USB disconnect, device number 71 [ 1950.176426][T28279] trusted_key: encrypted_key: master key parameter is missing [ 1950.676860][ T5837] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1950.804627][ T5785] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1950.881557][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1950.905024][ T5837] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1950.929777][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.944779][T28322] netlink: 'syz.3.21623': attribute type 1 has an invalid length. [ 1950.953663][ T5837] usb 5-1: Product: syz [ 1950.961409][ T5837] usb 5-1: Manufacturer: syz [ 1950.963538][T28322] netlink: 248 bytes leftover after parsing attributes in process `syz.3.21623'. [ 1950.986096][ T5837] usb 5-1: SerialNumber: syz [ 1951.015048][ T5837] usb 5-1: config 0 descriptor?? [ 1951.026693][ T5837] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 1951.047031][ T5785] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1951.069711][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.092431][ T5785] usb 1-1: Product: syz [ 1951.116021][ T5785] usb 1-1: Manufacturer: syz [ 1951.120670][ T5785] usb 1-1: SerialNumber: syz [ 1951.153791][ T5785] usb 1-1: config 0 descriptor?? [ 1951.167609][ T5785] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1951.260832][T21647] usb 5-1: USB disconnect, device number 7 [ 1951.601987][ T5785] sonixb 1-1:0.0: Error writing register 01: -71 [ 1951.612351][ T5785] sonixb: probe of 1-1:0.0 failed with error -71 [ 1951.624660][ T5785] usb 1-1: USB disconnect, device number 94 [ 1952.019561][T28360] trusted_key: encrypted_key: master key parameter is missing [ 1952.536352][ T28] audit: type=1107 audit(2000000167.324:3850): pid=28387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ý—::— [ 1952.536352][ T28] ' [ 1952.599575][T28379] loop4: detected capacity change from 0 to 4096 [ 1952.606983][T28390] netlink: 'syz.1.21640': attribute type 10 has an invalid length. [ 1952.632870][T28379] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1952.670411][T28390] team0: Device hsr_slave_0 failed to register rx_handler [ 1952.716979][T28379] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1953.424120][T28434] netlink: 'syz.0.21652': attribute type 10 has an invalid length. [ 1953.475785][T28434] team0: Device veth1_macvtap failed to register rx_handler [ 1953.575503][ T5785] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1953.609530][T28446] syz.3.21656 (28446): drop_caches: 0 [ 1953.780066][ T5785] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1953.803689][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.830219][ T5785] usb 5-1: Product: syz [ 1953.834476][ T5785] usb 5-1: Manufacturer: syz [ 1953.839192][ T5785] usb 5-1: SerialNumber: syz [ 1953.892053][ T5785] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1953.938705][T21647] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1954.126311][T28469] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21662'. [ 1954.487811][ T5837] usb 5-1: USB disconnect, device number 8 [ 1954.734074][ T28] audit: type=1326 audit(2000000169.372:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1954.797241][ T28] audit: type=1326 audit(2000000169.391:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1954.832035][ T28] audit: type=1326 audit(2000000169.410:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1954.856305][ T28] audit: type=1326 audit(2000000169.410:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1954.903470][ T28] audit: type=1326 audit(2000000169.410:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1954.933534][ T28] audit: type=1326 audit(2000000169.410:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1954.957695][T28501] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1954.981159][ T28] audit: type=1326 audit(2000000169.410:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1955.026873][ T28] audit: type=1326 audit(2000000169.410:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1955.091429][ T28] audit: type=1326 audit(2000000169.410:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28490 comm="syz.0.21677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe6d5b9c629 code=0x7ffc0000 [ 1955.116464][T21647] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1955.134432][T21647] ath9k_htc: Failed to initialize the device [ 1955.145862][ T5837] usb 5-1: ath9k_htc: USB layer deinitialized [ 1955.148517][T28505] loop0: detected capacity change from 0 to 4096 [ 1955.200955][T28505] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1955.413226][T28505] ntfs3: loop0: failed to convert "c46c" to cp437 [ 1956.214972][T28565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21688'. [ 1956.737929][ T5837] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1956.798417][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21701'. [ 1956.959081][ T5837] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1956.975071][ T5837] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1957.000532][ T5837] usb 4-1: config 0 has no interface number 0 [ 1957.010460][ T5837] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1957.022789][ T5837] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1957.040377][ T5837] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1957.054228][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.082091][ T5837] usb 4-1: config 0 descriptor?? [ 1957.112125][ T5785] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1957.324672][ T5785] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1957.333318][ T5785] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1957.347670][ T5785] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1957.357237][ T5785] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1957.367159][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1957.376022][ T5785] usb 5-1: Product: syz [ 1957.380546][ T5785] usb 5-1: Manufacturer: syz [ 1957.389680][ T5785] usb 5-1: SerialNumber: syz [ 1957.402885][ T5785] usb 5-1: config 0 descriptor?? [ 1957.406553][T28633] loop1: detected capacity change from 0 to 4096 [ 1957.413467][ T5785] hub 5-1:0.0: bad descriptor, ignoring hub [ 1957.427981][ T5785] hub: probe of 5-1:0.0 failed with error -5 [ 1957.465716][T28633] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1957.470680][ T5785] usb 5-1: selecting invalid altsetting 0 [ 1957.520032][T28643] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1957.532069][T28633] ntfs: volume version 3.1. [ 1957.543858][ T5837] usb 4-1: USB disconnect, device number 87 [ 1957.907381][ T5813] usb 5-1: USB disconnect, device number 9 [ 1958.178981][T28693] xt_bpf: check failed: parse error [ 1958.544681][T28705] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1958.659817][T28712] loop4: detected capacity change from 0 to 64 [ 1958.936854][T28730] loop0: detected capacity change from 0 to 64 [ 1959.564520][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1959.573101][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1959.964938][T28786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21748'. [ 1960.572838][T28825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21769'. [ 1960.791156][T28834] loop1: detected capacity change from 0 to 512 [ 1960.798681][T28834] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1960.981398][T28834] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1961.463304][ T5813] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1961.559179][ T5785] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1961.672763][ T5813] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1961.681992][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.690238][ T5813] usb 5-1: Product: syz [ 1961.694419][ T5813] usb 5-1: Manufacturer: syz [ 1961.699534][ T5813] usb 5-1: SerialNumber: syz [ 1961.705889][ T5813] usb 5-1: config 0 descriptor?? [ 1961.754601][ T5785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.765389][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.779102][ T5785] usb 2-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 1961.788435][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.796642][ T5785] usb 2-1: Product: syz [ 1961.800824][ T5785] usb 2-1: Manufacturer: syz [ 1961.805541][ T5785] usb 2-1: SerialNumber: syz [ 1961.816781][ T5785] cdc_mbim 2-1:1.0: MBIM functional descriptor missing [ 1961.823733][ T5785] cdc_mbim 2-1:1.0: bind() failure [ 1961.936365][ T5813] hso 5-1:0.0: Failed to find BULK IN ep [ 1961.945595][ T5813] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1962.049798][ T5785] usb 2-1: USB disconnect, device number 72 [ 1962.174519][T21647] usb 5-1: USB disconnect, device number 10 [ 1963.430247][ T5837] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1963.517257][T21647] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1963.635952][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.646254][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1963.659599][ T5837] usb 5-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 1963.668884][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.677225][ T5837] usb 5-1: Product: syz [ 1963.681403][ T5837] usb 5-1: Manufacturer: syz [ 1963.685992][ T5837] usb 5-1: SerialNumber: syz [ 1963.698212][ T5837] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 1963.705137][ T5837] cdc_mbim 5-1:1.0: bind() failure [ 1963.729496][T21647] usb 1-1: Using ep0 maxpacket: 16 [ 1963.736305][T21647] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1963.745336][T21647] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.756144][T21647] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1963.770258][T21647] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1963.779829][T21647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.788037][T21647] usb 1-1: Product: syz [ 1963.792242][T21647] usb 1-1: Manufacturer: syz [ 1963.797202][T21647] usb 1-1: SerialNumber: syz [ 1963.934544][ T5837] usb 5-1: USB disconnect, device number 11 [ 1964.035995][T21647] usb 1-1: 0:2 : does not exist [ 1964.044945][T21647] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1964.070952][T21647] usb 1-1: USB disconnect, device number 95 [ 1964.678472][T29003] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1965.133748][T21647] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1965.357511][T29042] netlink: 'syz.0.21804': attribute type 3 has an invalid length. [ 1965.365627][T21647] usb 4-1: Using ep0 maxpacket: 8 [ 1965.378813][T21647] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.402333][T21647] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1965.418376][T29042] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.21804'. [ 1965.437760][T21647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.456825][T21647] usb 4-1: Product: syz [ 1965.467612][T21647] usb 4-1: Manufacturer: syz [ 1965.477133][T21647] usb 4-1: SerialNumber: syz [ 1965.506015][T21647] usb 4-1: config 0 descriptor?? [ 1965.517059][T21647] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1965.523251][T21647] usb 4-1: selecting invalid altsetting 1 [ 1965.970304][ T787] usb 4-1: USB disconnect, device number 88 [ 1966.872730][ T787] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1967.097198][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 1967.110038][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.135893][ T787] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1967.159329][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.180324][ T787] usb 2-1: Product: syz [ 1967.198036][ T787] usb 2-1: Manufacturer: syz [ 1967.202748][ T787] usb 2-1: SerialNumber: syz [ 1967.238321][ T787] usb 2-1: config 0 descriptor?? [ 1967.264365][ T787] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1967.284252][ T787] usb 2-1: selecting invalid altsetting 1 [ 1967.717164][ T5837] usb 2-1: USB disconnect, device number 73 [ 1971.094798][T29305] --map-set only usable from mangle table [ 1971.351229][T29321] netlink: 'syz.0.21891': attribute type 3 has an invalid length. [ 1971.361270][T29321] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.21891'. [ 1971.568111][T29332] netlink: 'syz.3.21901': attribute type 3 has an invalid length. [ 1971.575991][T29332] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.21901'. [ 1971.841900][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1971.841915][ T28] audit: type=1326 audit(2000000185.377:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1971.882967][T29350] loop1: detected capacity change from 0 to 1024 [ 1971.945377][ T28] audit: type=1326 audit(2000000185.405:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1972.042087][ T28] audit: type=1326 audit(2000000185.414:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1972.105035][ T28] audit: type=1326 audit(2000000185.414:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f381219c392 code=0x7ffc0000 [ 1972.165187][ T28] audit: type=1326 audit(2000000185.433:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f381215cece code=0x7ffc0000 [ 1972.232974][T29360] loop4: detected capacity change from 0 to 1024 [ 1972.247213][ T28] audit: type=1326 audit(2000000185.452:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f381219c457 code=0x7ffc0000 [ 1972.322994][ T28] audit: type=1326 audit(2000000185.452:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f381215cece code=0x7ffc0000 [ 1972.408057][ T28] audit: type=1326 audit(2000000185.452:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f381219c2bb code=0x7ffc0000 [ 1972.497225][ T28] audit: type=1326 audit(2000000185.452:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f381219c2bb code=0x7ffc0000 [ 1972.520308][ T28] audit: type=1326 audit(2000000185.452:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29348 comm="syz.3.21899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f381215cece code=0x7ffc0000 [ 1973.140302][T29408] loop4: detected capacity change from 0 to 2048 [ 1973.221115][T29415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21918'. [ 1973.231300][T29408] Alternate GPT is invalid, using primary GPT. [ 1973.237977][T29408] loop4: p2 p3 p7 [ 1973.505098][T10358] udevd[10358]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 1973.522640][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1973.539670][ T6104] udevd[6104]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1973.660003][T29447] netlink: 'syz.4.21922': attribute type 1 has an invalid length. [ 1973.678607][T29447] netlink: 'syz.4.21922': attribute type 2 has an invalid length. [ 1973.691962][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21922'. [ 1973.789304][ T5837] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1974.005249][ T5837] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1974.073687][ T5837] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1974.086212][ T5837] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1974.131315][ T5837] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1974.147598][ T5837] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1974.159515][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.185122][ T5837] usb 1-1: Product: syz [ 1974.189339][ T5837] usb 1-1: Manufacturer: syz [ 1974.193957][ T5837] usb 1-1: SerialNumber: syz [ 1974.200206][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21929'. [ 1974.485471][ T5837] usb 1-1: selecting invalid altsetting 0 [ 1974.493035][ T5837] usb 1-1: selecting invalid altsetting 0 [ 1974.499103][ T5837] cdc_ncm 1-1:1.0: bind() failure [ 1974.508424][ T5837] usb 1-1: selecting invalid altsetting 0 [ 1974.514216][ T5837] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 1974.521138][ T5837] usb 1-1: selecting invalid altsetting 0 [ 1974.526977][ T5837] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 1974.534358][ T5837] usb 1-1: selecting invalid altsetting 0 [ 1974.541312][ T5837] usbtest: probe of 1-1:1.1 failed with error -22 [ 1974.551695][ T5837] usb 1-1: USB disconnect, device number 96 [ 1975.134749][T29497] netlink: 'syz.0.21935': attribute type 1 has an invalid length. [ 1975.142982][T29497] netlink: 'syz.0.21935': attribute type 2 has an invalid length. [ 1975.168293][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21935'. [ 1975.519378][T29523] netlink: 188 bytes leftover after parsing attributes in process `syz.1.21946'. [ 1975.555337][ T787] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1975.596743][T29528] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1975.793295][ T787] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1975.806346][ T787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1975.816423][ T787] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1975.826394][ T787] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1975.835987][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1975.845183][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.853423][ T787] usb 4-1: Product: syz [ 1975.857597][ T787] usb 4-1: Manufacturer: syz [ 1975.862199][ T787] usb 4-1: SerialNumber: syz [ 1976.094029][ T787] usb 4-1: selecting invalid altsetting 0 [ 1976.101687][ T787] usb 4-1: selecting invalid altsetting 0 [ 1976.107487][ T787] cdc_ncm 4-1:1.0: bind() failure [ 1976.115401][ T787] usb 4-1: selecting invalid altsetting 0 [ 1976.121349][ T787] cdc_ncm: probe of 4-1:1.1 failed with error -22 [ 1976.127933][ T787] usb 4-1: selecting invalid altsetting 0 [ 1976.134041][ T787] cdc_mbim: probe of 4-1:1.1 failed with error -22 [ 1976.141267][ T787] usb 4-1: selecting invalid altsetting 0 [ 1976.147050][ T787] usbtest: probe of 4-1:1.1 failed with error -22 [ 1976.159060][ T787] usb 4-1: USB disconnect, device number 89 [ 1976.748263][T29550] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1976.959329][T29560] 9pnet_fd: Insufficient options for proto=fd [ 1977.085316][T29566] loop1: detected capacity change from 0 to 8 [ 1977.088007][T29562] 9pnet_fd: Insufficient options for proto=fd [ 1977.260179][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1977.260194][ T28] audit: type=1326 audit(2000000190.447:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29573 comm="syz.3.21956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1977.296114][ T28] audit: type=1326 audit(2000000190.475:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29573 comm="syz.3.21956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1977.330909][ T28] audit: type=1326 audit(2000000190.475:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29573 comm="syz.3.21956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1977.380660][ T28] audit: type=1326 audit(2000000190.475:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29573 comm="syz.3.21956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1977.410914][ T28] audit: type=1326 audit(2000000190.475:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29573 comm="syz.3.21956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381219c629 code=0x7ffc0000 [ 1977.426106][T29581] netlink: 188 bytes leftover after parsing attributes in process `syz.4.21958'. [ 1978.031456][T29607] loop0: detected capacity change from 0 to 8 [ 1978.056819][ T28] audit: type=1326 audit(2000000191.186:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.21970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293b9c629 code=0x7ffc0000 [ 1978.090713][ T28] audit: type=1326 audit(2000000191.186:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.21970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293b9c629 code=0x7ffc0000 [ 1978.138581][ T28] audit: type=1326 audit(2000000191.214:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.21970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb293b9c629 code=0x7ffc0000 [ 1978.172440][ T28] audit: type=1326 audit(2000000191.214:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.21970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293b9c629 code=0x7ffc0000 [ 1978.196195][ T28] audit: type=1326 audit(2000000191.214:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.21970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293b9c629 code=0x7ffc0000 [ 1989.157703][T22827] Bluetooth: hci4: command 0x0406 tx timeout [ 1995.472144][T22827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1995.483475][T22827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1995.496412][T22827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1995.505011][T22827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1995.517048][T22827] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1995.524411][T22827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1995.579572][T29625] lo speed is unknown, defaulting to 1000 [ 1995.810091][T29625] chnl_net:caif_netlink_parms(): no params data found [ 1995.910364][T29625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.917527][T29625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.925688][T29625] bridge_slave_0: entered allmulticast mode [ 1995.933169][T29625] bridge_slave_0: entered promiscuous mode [ 1995.943666][T29625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.951184][T29625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.958382][T29625] bridge_slave_1: entered allmulticast mode [ 1995.965985][T29625] bridge_slave_1: entered promiscuous mode [ 1996.007229][T29625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1996.021107][T29625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1996.063896][T29625] team0: Port device team_slave_0 added [ 1996.073775][T29625] team0: Port device team_slave_1 added [ 1996.106235][T29625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.113265][T29625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.139795][T29625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.152245][T29625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.160029][T29625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.186066][T29625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.241379][T29625] hsr_slave_0: entered promiscuous mode [ 1996.248491][T29625] hsr_slave_1: entered promiscuous mode [ 1996.255014][T29625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1996.265007][T29625] Cannot create hsr debugfs directory [ 1996.484863][T29625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1996.495329][T29625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1996.506020][T29625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1996.521708][T29625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1996.549731][T29625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.556857][T29625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1996.564586][T29625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.571962][T29625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1996.626362][T29625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1996.643979][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.653972][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1996.674928][T29625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1996.696943][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.704122][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1996.720174][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.727326][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1996.914041][T29625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1997.120799][T29625] veth0_vlan: entered promiscuous mode [ 1997.133189][T29625] veth1_vlan: entered promiscuous mode [ 1997.162161][T29625] veth0_macvtap: entered promiscuous mode [ 1997.175643][T29625] veth1_macvtap: entered promiscuous mode [ 1997.192068][T29625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1997.205114][T29625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.216751][T29625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1997.232656][T29625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.243668][T29625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.254346][T29625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.267992][T29625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.280338][T29625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1997.294807][T29625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.303802][T29625] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.312788][T29625] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.321712][T29625] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.430885][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.441455][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1997.483034][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.491964][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1997.705044][T22827] Bluetooth: hci5: command tx timeout [ 1999.928318][T22827] Bluetooth: hci5: command tx timeout [ 2002.151720][T22827] Bluetooth: hci5: command tx timeout [ 2004.386135][T22827] Bluetooth: hci5: command tx timeout [ 2011.561037][ T29] INFO: task syz-executor:5778 blocked for more than 143 seconds. [ 2011.568900][ T29] Not tainted syzkaller #0 [ 2011.575076][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2011.583860][ T29] task:syz-executor state:D stack:21544 pid:5778 ppid:1 flags:0x00004004 [ 2011.593212][ T29] Call Trace: [ 2011.596511][ T29] [ 2011.599444][ T29] __schedule+0x1553/0x45a0 [ 2011.604101][ T29] ? asan.module_dtor+0x20/0x20 [ 2011.608970][ T29] ? mark_lock+0x94/0x320 [ 2011.614109][ T29] ? lock_chain_count+0x20/0x20 [ 2011.619170][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2011.624284][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2011.629867][ T29] schedule+0xbd/0x170 [ 2011.634070][ T29] io_schedule+0x80/0xd0 [ 2011.638342][ T29] folio_wait_bit_common+0x714/0xfa0 [ 2011.648737][ T29] ? folio_wait_bit+0x30/0x30 [ 2011.653462][ T29] ? filemap_get_entry+0x379/0x3f0 [ 2011.659065][ T29] ? _compound_head+0x120/0x120 [ 2011.675549][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 2011.681083][ T29] __filemap_get_folio+0xbc/0xbb0 [ 2011.686151][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 2011.725781][ T29] ? mapping_evict_folio+0x510/0x510 [ 2011.740795][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2011.745887][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2011.751118][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 2011.786600][ T29] evict+0x4dd/0x8d0 [ 2011.790566][ T29] ? proc_nr_inodes+0x230/0x230 [ 2011.803507][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 2011.811266][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 2011.823530][ T29] evict_inodes+0x606/0x6a0 [ 2011.831680][ T29] ? clear_inode+0x150/0x150 [ 2011.836412][ T29] generic_shutdown_super+0x97/0x2b0 [ 2011.850967][ T29] kill_block_super+0x44/0x90 [ 2011.855690][ T29] deactivate_locked_super+0x97/0x100 [ 2011.868093][ T29] cleanup_mnt+0x43b/0x4d0 [ 2011.876313][ T29] task_work_run+0x1d4/0x260 [ 2011.887564][ T29] ? task_work_cancel+0x220/0x220 [ 2011.897061][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 2011.909644][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 2011.918333][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 2011.929825][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 2011.937911][ T29] do_syscall_64+0x61/0xa0 [ 2011.942369][ T29] ? clear_bhb_loop+0x40/0x90 [ 2011.954177][ T29] ? clear_bhb_loop+0x40/0x90 [ 2011.961602][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2011.975155][ T29] RIP: 0033:0x7f9b89f9d897 [ 2011.982187][ T29] RSP: 002b:00007ffdda2dc858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2011.997815][ T29] RAX: 0000000000000000 RBX: 00007f9b8a031ef0 RCX: 00007f9b89f9d897 [ 2012.005822][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdda2dc910 [ 2012.015810][ T29] RBP: 00007ffdda2dc910 R08: 00007ffdda2dd910 R09: 00000000ffffffff [ 2012.024235][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdda2dd9a0 [ 2012.032621][ T29] R13: 00007f9b8a031ef0 R14: 00000000001a901d R15: 00007ffdda2dd9e0 [ 2012.040910][ T29] [ 2012.044021][ T29] [ 2012.044021][ T29] Showing all locks held in the system: [ 2012.052402][ T29] 1 lock held by khungtaskd/29: [ 2012.057275][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2012.068765][ T29] 2 locks held by kworker/1:2/787: [ 2012.074967][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2012.087510][ T29] #1: ffffc90003967d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2012.097958][ T29] 2 locks held by getty/5523: [ 2012.102637][ T29] #0: ffff888020d300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2012.112741][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2012.122992][ T29] 1 lock held by syz-executor/5775: [ 2012.128304][ T29] #0: ffff88801e2fe0e0 (&type->s_umount_key#56){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 2012.138689][ T29] 1 lock held by syz-executor/5778: [ 2012.143899][ T29] #0: ffff8880775440e0 (&type->s_umount_key#56){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 2012.154206][ T29] 1 lock held by syz-executor/5781: [ 2012.159604][ T29] #0: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 2012.170611][ T29] 1 lock held by syz-executor/5784: [ 2012.175804][ T29] #0: ffff8880500fc0e0 (&type->s_umount_key#56){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 2012.186148][ T29] 2 locks held by kworker/0:5/5837: [ 2012.192234][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2012.203325][ T29] #1: ffffc900049ffd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2012.215490][ T29] 5 locks held by syz-executor/29625: [ 2012.220843][ T29] #0: ffff88802f92ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500 [ 2012.230837][ T29] #1: ffff88802f92c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfa0 [ 2012.241009][ T29] #2: ffffffff8e52d8a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 2012.251718][ T29] #3: ffff88801cb88338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 2012.273699][ T29] #4: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 2012.284971][ T29] [ 2012.295411][ T29] ============================================= [ 2012.295411][ T29] [ 2012.304053][ T29] NMI backtrace for cpu 1 [ 2012.308394][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2012.315600][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2012.325664][ T29] Call Trace: [ 2012.328954][ T29] [ 2012.331889][ T29] dump_stack_lvl+0x18c/0x250 [ 2012.336603][ T29] ? preempt_count_add+0x91/0x1a0 [ 2012.341647][ T29] ? show_regs_print_info+0x20/0x20 [ 2012.346875][ T29] ? load_image+0x400/0x400 [ 2012.351405][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2012.356366][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2012.362538][ T29] ? _printk+0xde/0x130 [ 2012.366703][ T29] ? load_image+0x400/0x400 [ 2012.371222][ T29] ? load_image+0x400/0x400 [ 2012.375747][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2012.381836][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2012.387834][ T29] watchdog+0xf3d/0xf80 [ 2012.391992][ T29] ? watchdog+0x1e1/0xf80 [ 2012.396317][ T29] kthread+0x2fa/0x390 [ 2012.400373][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2012.405393][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2012.409975][ T29] ret_from_fork+0x48/0x80 [ 2012.414386][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2012.418965][ T29] ret_from_fork_asm+0x11/0x20 [ 2012.423728][ T29] [ 2012.427296][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2012.432529][ C0] NMI backtrace for cpu 0 [ 2012.432539][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2012.432553][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2012.432563][ C0] Workqueue: bat_events batadv_nc_worker [ 2012.432588][ C0] RIP: 0010:check_preemption_disabled+0x3/0x110 [ 2012.432607][ C0] Code: ff ff ff cc cc cc cc f3 0f 1e fa 48 c7 c7 80 82 1c 8b 48 c7 c6 c0 82 1c 8b eb 0c 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 2012.432619][ C0] RSP: 0018:ffffc90000ba79d0 EFLAGS: 00000046 [ 2012.432631][ C0] RAX: 0000000080000201 RBX: ffffffff815263cb RCX: 0000000000000000 [ 2012.432641][ C0] RDX: 0000000000000000 RSI: ffffffff8acac920 RDI: ffffffff8b1c82e0 [ 2012.432651][ C0] RBP: ffffc90000ba7ab8 R08: ffff8880304b8603 R09: 1ffff110060970c0 [ 2012.432662][ C0] R10: dffffc0000000000 R11: ffffed10060970c1 R12: ffffffff8a4c5f41 [ 2012.432673][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000174f44 [ 2012.432683][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2012.432695][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2012.432705][ C0] CR2: 000056421300b048 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2012.432718][ C0] Call Trace: [ 2012.432724][ C0] [ 2012.432730][ C0] lockdep_hardirqs_off+0xab/0x100 [ 2012.432746][ C0] ? __local_bh_enable_ip+0xdb/0x1c0 [ 2012.432761][ C0] trace_hardirqs_off+0x12/0x40 [ 2012.432782][ C0] __local_bh_enable_ip+0xdb/0x1c0 [ 2012.432797][ C0] ? _local_bh_enable+0xa0/0xa0 [ 2012.432812][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 2012.432831][ C0] ? batadv_nc_purge_paths+0x311/0x3a0 [ 2012.432851][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 2012.432874][ C0] batadv_nc_purge_paths+0x311/0x3a0 [ 2012.432901][ C0] batadv_nc_worker+0x369/0x610 [ 2012.432924][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 2012.432943][ C0] process_scheduled_works+0xa5d/0x15d0 [ 2012.432973][ C0] ? assign_work+0x430/0x430 [ 2012.432993][ C0] ? assign_work+0x3d0/0x430 [ 2012.433012][ C0] worker_thread+0xa55/0xfc0 [ 2012.433042][ C0] kthread+0x2fa/0x390 [ 2012.433055][ C0] ? pr_cont_work+0x560/0x560 [ 2012.433072][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2012.433086][ C0] ret_from_fork+0x48/0x80 [ 2012.433103][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2012.433117][ C0] ret_from_fork_asm+0x11/0x20 [ 2012.433142][ C0] [ 2012.682211][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2012.689099][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2012.696308][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2012.706379][ T29] Call Trace: [ 2012.709666][ T29] [ 2012.712602][ T29] dump_stack_lvl+0x18c/0x250 [ 2012.717392][ T29] ? show_regs_print_info+0x20/0x20 [ 2012.722613][ T29] ? load_image+0x400/0x400 [ 2012.727135][ T29] panic+0x2dc/0x730 [ 2012.731023][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2012.736657][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2012.741152][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2012.746716][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2012.752869][ T29] watchdog+0xf7c/0xf80 [ 2012.757019][ T29] ? watchdog+0x1e1/0xf80 [ 2012.761344][ T29] kthread+0x2fa/0x390 [ 2012.765401][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2012.770416][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2012.774991][ T29] ret_from_fork+0x48/0x80 [ 2012.779396][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2012.783971][ T29] ret_from_fork_asm+0x11/0x20 [ 2012.788743][ T29] [ 2012.792165][ T29] Kernel Offset: disabled [ 2012.796483][ T29] Rebooting in 86400 seconds..