last executing test programs: 10m21.0737439s ago: executing program 3 (id=4088): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000080)) 10m20.863734232s ago: executing program 3 (id=4093): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x9, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x19b1}}], 0x18}, 0x4008094) 10m20.707384871s ago: executing program 3 (id=4096): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='[:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 HID v0.00 Device [syz0] on syz1 [ 845.332598][T12521] netlink: 'syz.0.11232': attribute type 21 has an invalid length. [ 845.624054][T12536] IPv6: NLM_F_CREATE should be specified when creating new route [ 845.720151][T12522] fido_id[12522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 846.201074][ T5150] Bluetooth: hci0: command 0x0c20 tx timeout [ 846.522825][T12581] netlink: 'syz.6.11251': attribute type 2 has an invalid length. [ 846.530813][T12581] netlink: 'syz.6.11251': attribute type 11 has an invalid length. [ 846.577254][T12581] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11251'. [ 846.630505][T12589] netlink: 'syz.0.11253': attribute type 7 has an invalid length. [ 846.656301][T12589] netlink: 'syz.0.11253': attribute type 8 has an invalid length. [ 846.901110][T12603] netlink: 'syz.4.11257': attribute type 1 has an invalid length. [ 847.104100][T12614] overlayfs: unrecognized mount option "\" or missing value [ 847.396987][T12630] loop6: detected capacity change from 0 to 256 [ 847.469180][ T4291] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 847.668276][T12630] loop6: detected capacity change from 0 to 4096 [ 847.691797][ T4291] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 847.730186][T12630] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 847.752907][T12630] ntfs: (device loop6): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 847.790972][T12630] ntfs: (device loop6): parse_options(): Unrecognized mount option uni_xlate. [ 847.807708][T12630] ntfs: (device loop6): parse_options(): Unrecognized mount option uni_xlate. [ 847.817493][T12630] ntfs: (device loop6): parse_options(): Unrecognized mount option shortname. [ 847.829853][T12630] ntfs: (device loop6): parse_options(): Unrecognized mount option shortname. [ 847.893519][T12630] ntfs: (device loop6): parse_options(): Unrecognized mount option uni_xlate. [ 847.947030][T12630] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 848.001255][T12630] ntfs: (device loop6): parse_options(): Unrecognized mount option tz. [ 848.009599][T12630] ntfs: (device loop6): parse_options(): Unrecognized mount option shortname. [ 848.024185][T12654] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 848.945559][T12708] loop6: detected capacity change from 0 to 8 [ 848.978728][T12708] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 849.004192][ T5121] udevd[5121]: incorrect cramfs checksum on /dev/loop6 [ 849.016016][T12708] cramfs: Error -3 while decompressing! [ 849.027957][T12708] cramfs: ffffffff96d8c1e8(26)->ffff8880494d1000(4096) [ 849.035650][T12708] cramfs: Error -3 while decompressing! [ 849.042350][T12708] cramfs: ffffffff96d8c202(26)->ffff8880b4d39000(4096) [ 849.049375][T12708] cramfs: Error -3 while decompressing! [ 849.055440][T12708] cramfs: ffffffff96d8c21c(16)->ffff8880496d6000(4096) [ 849.068355][T12708] cramfs: Error -3 while decompressing! [ 849.084903][T12708] cramfs: ffffffff96d8c1e8(26)->ffff8880494d1000(4096) [ 849.316471][T12724] netlink: 340 bytes leftover after parsing attributes in process `syz.6.11301'. [ 849.345679][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11301'. [ 849.369090][T12729] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.11302'. [ 849.416172][T12729] netlink: zone id is out of range [ 849.454644][T12729] netlink: del zone limit has 4 unknown bytes [ 850.371058][ T6896] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 850.582340][ T6896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 850.607693][ T6896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.626340][ T6896] usb 1-1: Product: syz [ 850.630587][ T6896] usb 1-1: Manufacturer: syz [ 850.645610][ T6896] usb 1-1: SerialNumber: syz [ 850.656753][ T6896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 850.703402][ T2478] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 851.408898][ T3192] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 851.604593][ T3192] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 851.622734][ T3192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.640190][ T3192] usb 5-1: Product: syz [ 851.649402][ T3192] usb 5-1: Manufacturer: syz [ 851.663214][ T3192] usb 5-1: SerialNumber: syz [ 851.687883][ T3192] usb 5-1: config 0 descriptor?? [ 851.811188][ T2478] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 851.818256][ T2478] ath9k_htc: Failed to initialize the device [ 851.888096][ T2478] usb 1-1: ath9k_htc: USB layer deinitialized [ 851.904822][ T3192] usb-storage 5-1:0.0: USB Mass Storage device detected [ 851.986707][T12853] ufs: You didn't specify the type of your ufs filesystem [ 851.986707][T12853] [ 851.986707][T12853] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 851.986707][T12853] [ 851.986707][T12853] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 852.033604][T12853] ufs: ufstype=old is supported read-only [ 852.045095][ T52] block nbd2: Attempted send on invalid socket [ 852.051559][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 852.115558][ T2478] usb 5-1: USB disconnect, device number 62 [ 852.182627][ T6896] usb 1-1: USB disconnect, device number 34 [ 852.680793][ T2478] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 852.747273][T12905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11355'. [ 852.781686][T12905] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11355'. [ 852.869320][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 852.869336][ T27] audit: type=1326 audit(852.845:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12912 comm="syz.0.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 852.897348][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.900857][ T2478] usb 3-1: Using ep0 maxpacket: 16 [ 852.921332][ T2478] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 852.949895][ T2478] usb 3-1: config 0 has no interface number 0 [ 852.955061][T12916] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 852.967557][ T27] audit: type=1326 audit(852.895:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12912 comm="syz.0.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 853.008515][ T2478] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 853.030971][ T2478] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 853.073942][ T2478] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 853.082425][ T27] audit: type=1326 audit(852.925:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12912 comm="syz.0.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 853.090764][ T2478] usb 3-1: Product: syz [ 853.130826][ T2478] usb 3-1: SerialNumber: syz [ 853.144683][ T27] audit: type=1326 audit(852.925:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12912 comm="syz.0.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 853.166543][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.183094][ T2478] usb 3-1: config 0 descriptor?? [ 853.225314][ T2478] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input52 [ 853.263915][ T27] audit: type=1326 audit(852.925:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12912 comm="syz.0.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 853.463185][ T3192] usb 3-1: USB disconnect, device number 40 [ 853.463418][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 853.476595][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 853.551970][ T3192] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 854.288767][T12990] loop0: detected capacity change from 0 to 164 [ 854.321563][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11374'. [ 854.874595][T13051] loop6: detected capacity change from 0 to 2048 [ 854.928558][T13051] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 854.956600][T13051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.971258][T13060] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.118239][T13126] loop0: detected capacity change from 0 to 256 [ 856.141046][T13126] exfat: Deprecated parameter 'utf8' [ 856.150879][T13126] exfat: Deprecated parameter 'namecase' [ 856.219958][T13126] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 856.302324][T13132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11412'. [ 856.439781][T13133] loop6: detected capacity change from 0 to 4096 [ 856.476339][T13133] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 856.584921][T13133] ntfs3: loop6: failed to convert "c46c" to cp437 [ 856.741463][T13154] netlink: 'syz.0.11419': attribute type 1 has an invalid length. [ 856.770506][T13154] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11419'. [ 857.028172][T13167] netlink: 'syz.0.11423': attribute type 9 has an invalid length. [ 857.451602][T13193] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 858.606052][ T3192] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 858.816381][ T3192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 858.869718][ T3192] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 858.882865][ T3192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 858.893882][ T3192] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 858.914406][ T3192] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 858.930747][ T3192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.953341][ T3192] usb 7-1: config 0 descriptor?? [ 859.170466][T13286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11462'. [ 859.189502][T13286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11462'. [ 859.223111][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 859.234375][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 859.243414][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 859.252975][ T3192] hdpvr 7-1:0.0: firmware version 0xd dated [ 859.260330][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 859.268060][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 859.275557][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 859.321749][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 859.330731][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 859.339639][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 859.347980][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 859.367743][ T5150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 859.375169][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 859.472858][ T3192] hdpvr 7-1:0.0: device init failed [ 859.480265][ T3192] hdpvr: probe of 7-1:0.0 failed with error -12 [ 859.536000][ T3192] usb 7-1: USB disconnect, device number 27 [ 860.023818][T13287] vcan0 speed is unknown, defaulting to 1000 [ 860.099508][ T27] audit: type=1326 audit(860.076:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.193225][ T27] audit: type=1326 audit(860.076:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.276865][ T27] audit: type=1326 audit(860.076:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.346136][ T27] audit: type=1326 audit(860.076:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.369820][ T27] audit: type=1326 audit(860.076:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.448514][ T27] audit: type=1326 audit(860.076:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.546241][ T27] audit: type=1326 audit(860.076:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.642868][ T27] audit: type=1326 audit(860.076:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.11474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 860.753471][T13402] netlink: 'syz.4.11484': attribute type 1 has an invalid length. [ 860.798124][T13407] loop6: detected capacity change from 0 to 64 [ 860.866621][T13413] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 860.880504][T13413] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 861.198377][T13287] chnl_net:caif_netlink_parms(): no params data found [ 861.310848][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.349654][T13465] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 861.480569][ T5150] Bluetooth: hci5: command 0x0409 tx timeout [ 861.873460][T13532] netlink: 'syz.6.11499': attribute type 16 has an invalid length. [ 861.922038][T13532] netlink: 156 bytes leftover after parsing attributes in process `syz.6.11499'. [ 861.970563][T13287] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.977773][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.021213][T13287] device bridge_slave_0 entered promiscuous mode [ 862.068063][T13287] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.084622][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.101371][T13287] device bridge_slave_1 entered promiscuous mode [ 862.202974][T13287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.260900][T13287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.395762][T13287] team0: Port device team_slave_0 added [ 862.422714][T13287] team0: Port device team_slave_1 added [ 862.544773][T13287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.573472][T13624] xt_hashlimit: overflow, rate too high: 0 [ 862.588101][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.672004][T13287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.702194][T13287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.719392][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.829856][T13287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.991237][T13287] device hsr_slave_0 entered promiscuous mode [ 863.008605][T13287] device hsr_slave_1 entered promiscuous mode [ 863.021939][T13287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.042556][T13287] Cannot create hsr debugfs directory [ 863.220204][ T3191] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 863.420279][ T3191] usb 7-1: Using ep0 maxpacket: 8 [ 863.427496][ T3191] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 863.447231][ T3191] usb 7-1: config 179 has no interface number 0 [ 863.469630][ T3191] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 863.510897][ T3191] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 863.551818][ T3191] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 863.563815][ T5150] Bluetooth: hci5: command 0x041b tx timeout [ 863.570312][ T3191] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 863.581968][ T3191] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 863.595586][ T3191] usb 7-1: config 179 interface 65 has no altsetting 0 [ 863.602813][ T3191] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 863.612476][ T3191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.632158][ T3191] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input53 [ 863.765094][T13287] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 863.801238][T13287] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 863.835343][T13287] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 863.880735][T13287] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 864.038118][ T3191] usb 7-1: USB disconnect, device number 28 [ 864.038174][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 864.053701][ T3191] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 864.254562][T13287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.303162][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 864.312954][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.342358][T13287] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.369713][T13812] loop0: detected capacity change from 0 to 2048 [ 864.380165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 864.405493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.426860][T13812] EXT4-fs: Ignoring removed bh option [ 864.433232][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.440445][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.453339][T13812] EXT4-fs: Ignoring removed nobh option [ 864.486882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 864.512079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 864.549191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 864.558726][T13812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 864.607345][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.614680][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.623517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 864.640621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 864.649694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 864.710059][ T27] audit: type=1326 audit(864.686:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.2.11536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 864.741579][T13812] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.11534: corrupted xattr block 128 [ 864.757404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 864.782328][T13812] EXT4-fs (loop0): Remounting filesystem read-only [ 864.789590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 864.801467][T13828] kAFS: unable to lookup cell ' [ 864.801467][T13828] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 864.801467][T13828] ' [ 864.813140][ T27] audit: type=1326 audit(864.726:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.2.11536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 864.822574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 864.911524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 864.931098][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 865.028861][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.038972][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.089147][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 865.098921][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.130848][T13833] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11539'. [ 865.162281][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.338522][T13848] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 865.640721][ T5150] Bluetooth: hci5: command 0x040f tx timeout [ 866.131348][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 866.139590][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 866.173377][T13287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.363461][ T2478] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 866.559997][ T2478] usb 7-1: Using ep0 maxpacket: 8 [ 866.568025][ T2478] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 866.609896][ T2478] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.620278][ T3200] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 866.660118][ T2478] usb 7-1: config 0 has no interface number 0 [ 866.666362][ T2478] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 866.682842][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11564'. [ 866.692402][ T2478] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 866.702848][ T2478] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.716194][ T2478] usb 7-1: config 0 interface 52 has no altsetting 0 [ 866.733793][ T2478] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 866.760349][ T2478] usb 7-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 866.769123][ T2478] usb 7-1: Product: syz [ 866.774227][ T2478] usb 7-1: Manufacturer: syz [ 866.778910][ T2478] usb 7-1: SerialNumber: syz [ 866.801639][ T3200] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 866.815353][ T2478] usb 7-1: config 0 descriptor?? [ 866.821307][ T3200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.882413][ T3200] usb 3-1: config 0 descriptor?? [ 867.075748][T13938] device lo entered promiscuous mode [ 867.115259][T13938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 867.267249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 867.277096][ T3192] usb 7-1: USB disconnect, device number 29 [ 867.304626][ T3200] ath6kl: Failed to submit usb control message: -71 [ 867.320138][ T3200] ath6kl: unable to send the bmi data to the device: -71 [ 867.338349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 867.342155][ T3200] ath6kl: Unable to send get target info: -71 [ 867.384593][ T3200] ath6kl: Failed to init ath6kl core: -71 [ 867.467610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 867.484091][ T3200] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 867.487826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 867.510824][ T3200] usb 3-1: USB disconnect, device number 41 [ 867.537753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 867.553069][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11571'. [ 867.580915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 867.597987][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11571'. [ 867.617570][T13287] device veth0_vlan entered promiscuous mode [ 867.635740][T13287] device veth1_vlan entered promiscuous mode [ 867.644792][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11571'. [ 867.720345][ T5150] Bluetooth: hci5: command 0x0419 tx timeout [ 867.743350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 867.764465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 867.776255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 867.788632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 867.834939][T13287] device veth0_macvtap entered promiscuous mode [ 867.864818][T13287] device veth1_macvtap entered promiscuous mode [ 867.942408][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.969031][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.002147][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11576'. [ 868.011737][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.040149][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.050324][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11576'. [ 868.072322][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.129758][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.139678][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.178095][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11578'. [ 868.197105][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.234776][T13287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.281090][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 868.294754][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 868.331245][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 868.361360][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 868.401605][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.432935][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.457986][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.469646][T13996] binder: Bad value for 'stats' [ 868.489278][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.525085][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.551243][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.579490][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.620285][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.646934][T13287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.676353][T13998] netlink: 'syz.6.11583': attribute type 21 has an invalid length. [ 868.695119][T13998] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11583'. [ 868.730086][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 868.741604][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 868.795306][T13287] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.812235][T13287] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.835791][T13287] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.853766][T13287] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.099045][ T1957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.118631][ T1957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.134611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 869.195007][ T1957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.208520][ T1957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.233353][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 869.440198][T14044] xt_hashlimit: size too large, truncated to 1048576 [ 869.447167][T14044] xt_hashlimit: max too large, truncated to 1048576 [ 869.930075][T14017] loop6: detected capacity change from 0 to 32768 [ 870.054883][T14075] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.100815][T14017] XFS (loop6): Mounting V5 Filesystem [ 870.122803][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.258154][T14017] XFS (loop6): Ending clean mount [ 870.267161][T14017] XFS (loop6): Quotacheck needed: Please wait. [ 870.405978][T14017] XFS (loop6): Quotacheck: Done. [ 870.600847][T14107] netlink: 'syz.0.11610': attribute type 3 has an invalid length. [ 870.622949][T20665] XFS (loop6): Unmounting Filesystem [ 870.874934][T14111] loop7: detected capacity change from 0 to 4096 [ 870.905677][T14111] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 871.098279][T14123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11618'. [ 871.839744][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11628'. [ 872.409154][T14191] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11640'. [ 872.568295][ T3195] rtc_cmos 00:00: Alarms can be up to one day in the future [ 872.584881][ T3195] rtc_cmos 00:00: Alarms can be up to one day in the future [ 872.625162][ T3195] rtc_cmos 00:00: Alarms can be up to one day in the future [ 872.645422][ T3195] rtc_cmos 00:00: Alarms can be up to one day in the future [ 872.675375][ T3195] rtc rtc0: __rtc_set_alarm: err=-22 [ 872.862671][T14213] loop7: detected capacity change from 0 to 256 [ 872.941728][T14213] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dd1dd, utbl_chksum : 0xe619d30d) [ 872.974840][T14213] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00) [ 873.019535][T14213] exFAT-fs (loop7): Filesystem has been set read-only [ 873.026400][T14213] exFAT-fs (loop7): failed to initialize root inode [ 873.181468][T14234] overlayfs: conflicting options: userxattr,redirect_dir=on [ 873.579611][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 873.579629][ T27] audit: type=1326 audit(873.556:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.2.11660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 873.661624][ T27] audit: type=1326 audit(873.556:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.2.11660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 873.715074][ T27] audit: type=1326 audit(873.606:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.2.11660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 873.729813][ T3191] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 873.800767][ T27] audit: type=1326 audit(873.616:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.2.11660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 873.949613][ T3191] usb 1-1: Using ep0 maxpacket: 32 [ 873.957406][ T3191] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 874.001440][ T3191] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.038203][ T3191] usb 1-1: config 0 has no interface number 0 [ 874.069503][ T3191] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.141293][ T3191] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 874.181515][ T3191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.211731][ T3191] usb 1-1: Product: syz [ 874.226291][ T3191] usb 1-1: Manufacturer: syz [ 874.244913][ T3191] usb 1-1: SerialNumber: syz [ 874.261729][ T3191] usb 1-1: config 0 descriptor?? [ 874.284410][ T3191] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 874.317535][ T3191] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 874.475531][ T3191] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 874.685403][ T3191] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 874.716491][ T3191] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 874.750835][ T3191] usb 1-1: USB disconnect, device number 35 [ 874.781466][ T3191] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 874.891405][T14310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 875.888139][T14351] loop0: detected capacity change from 0 to 4096 [ 875.973065][T14351] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 876.015038][T14351] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 876.057508][T14351] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 876.106415][T14351] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 876.167135][T14351] ntfs: volume version 3.1. [ 876.204012][T14351] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 876.240908][T14351] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 876.474274][T14388] loop6: detected capacity change from 0 to 16 [ 876.504473][T14388] erofs: (device loop6): mounted with root inode @ nid 36. [ 876.553710][T14388] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-22] [ 876.940352][T14413] loop0: detected capacity change from 0 to 128 [ 877.027472][T14421] x_tables: unsorted underflow at hook 2 [ 877.537627][T14442] netlink: 'syz.4.11717': attribute type 21 has an invalid length. [ 877.558744][T14442] netlink: 'syz.4.11717': attribute type 1 has an invalid length. [ 877.578154][T14442] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11717'. [ 877.649957][T14448] netlink: 'syz.2.11719': attribute type 3 has an invalid length. [ 877.657869][T14448] netlink: 'syz.2.11719': attribute type 3 has an invalid length. [ 877.671399][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11719'. [ 877.869432][ T3191] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 878.059466][ T3191] usb 1-1: Using ep0 maxpacket: 8 [ 878.079575][ T3191] usb 1-1: unable to get BOS descriptor set [ 878.130058][ T3191] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 878.138318][ T3191] usb 1-1: config 0 has no interface number 0 [ 878.168362][ T3191] usb 1-1: config 0 interface 125 has no altsetting 0 [ 878.191676][ T3191] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 878.219971][ T3191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.228145][ T3191] usb 1-1: Product: syz [ 878.237350][ T3191] usb 1-1: Manufacturer: syz [ 878.246761][ T3191] usb 1-1: SerialNumber: syz [ 878.254997][ T3191] usb 1-1: config 0 descriptor?? [ 878.282069][ T3191] hub 1-1:0.125: bad descriptor, ignoring hub [ 878.288602][ T3191] hub: probe of 1-1:0.125 failed with error -5 [ 878.346799][ T3191] usb 1-1: Found UVC 0.00 device syz (17dc:0202) [ 878.371569][ T3191] usb 1-1: No valid video chain found. [ 878.619684][ T3195] usb 1-1: USB disconnect, device number 36 [ 878.913655][T14519] netlink: 'syz.2.11740': attribute type 2 has an invalid length. [ 878.933856][T14519] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11740'. [ 879.038854][T14525] netlink: 'syz.7.11742': attribute type 6 has an invalid length. [ 879.078787][T14525] netlink: 127868 bytes leftover after parsing attributes in process `syz.7.11742'. [ 879.768399][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 879.768417][ T27] audit: type=1326 audit(879.747:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.6.11756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5359bf79 code=0x7ffc0000 [ 879.860121][ T27] audit: type=1326 audit(879.747:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.6.11756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5359bf79 code=0x7ffc0000 [ 879.895067][ T2478] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 879.930058][ T27] audit: type=1326 audit(879.777:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.6.11756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fda5359bf79 code=0x7ffc0000 [ 879.958254][ T27] audit: type=1326 audit(879.787:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.6.11756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5359bf79 code=0x7ffc0000 [ 879.980750][ T27] audit: type=1326 audit(879.787:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.6.11756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5359bf79 code=0x7ffc0000 [ 880.125105][ T2478] usb 3-1: Using ep0 maxpacket: 16 [ 880.135236][ T2478] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 880.178948][ T2478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.219202][ T2478] usb 3-1: Product: syz [ 880.226996][T14589] netlink: 'syz.6.11762': attribute type 5 has an invalid length. [ 880.235456][ T2478] usb 3-1: Manufacturer: syz [ 880.249306][ T2478] usb 3-1: SerialNumber: syz [ 880.270973][ T2478] r8152-cfgselector 3-1: config 0 descriptor?? [ 880.490234][T14598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 880.563045][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11766'. [ 880.577239][T14638] loop0: detected capacity change from 0 to 4096 [ 880.597267][T14639] netlink: zone id is out of range [ 880.602913][T14638] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 880.617109][T14639] netlink: zone id is out of range [ 880.627525][T14639] netlink: zone id is out of range [ 880.633114][T14639] netlink: zone id is out of range [ 880.666756][T14639] netlink: zone id is out of range [ 880.682065][T14639] netlink: zone id is out of range [ 880.688349][ T2478] r8152-cfgselector 3-1: Unknown version 0x0000 [ 880.699399][ T2478] r8152-cfgselector 3-1: bad CDC descriptors [ 880.731206][T14639] netlink: zone id is out of range [ 880.734716][ T2478] r8152-cfgselector 3-1: Unknown version 0x0000 [ 880.746863][T14639] netlink: zone id is out of range [ 880.759247][T14639] netlink: zone id is out of range [ 880.774840][T14639] netlink: zone id is out of range [ 880.783317][ T2478] r8152-cfgselector 3-1: USB disconnect, device number 42 [ 881.502498][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11779'. [ 881.582531][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11780'. [ 881.612743][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11780'. [ 882.064241][T14711] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 883.146825][T14769] loop0: detected capacity change from 0 to 256 [ 883.241470][T14769] FAT-fs (loop0): Directory bread(block 64) failed [ 883.292785][T14769] FAT-fs (loop0): Directory bread(block 65) failed [ 883.324715][T14769] FAT-fs (loop0): Directory bread(block 66) failed [ 883.356610][T14769] FAT-fs (loop0): Directory bread(block 67) failed [ 883.368255][T14769] FAT-fs (loop0): Directory bread(block 68) failed [ 883.393970][T14769] FAT-fs (loop0): Directory bread(block 69) failed [ 883.413344][T14769] FAT-fs (loop0): Directory bread(block 70) failed [ 883.425622][T14769] FAT-fs (loop0): Directory bread(block 71) failed [ 883.464214][T14769] FAT-fs (loop0): Directory bread(block 72) failed [ 883.486460][T14769] FAT-fs (loop0): Directory bread(block 73) failed [ 883.735551][T14794] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11815'. [ 884.130226][T14812] netlink: 'syz.7.11821': attribute type 1 has an invalid length. [ 884.169008][T14812] netlink: 192 bytes leftover after parsing attributes in process `syz.7.11821'. [ 884.373762][T14820] loop6: detected capacity change from 0 to 4096 [ 884.414812][T14820] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 884.453170][T14820] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 884.531657][T14820] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 884.579031][T14820] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 884.617780][T14820] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 884.647554][T14820] ntfs: volume version 3.1. [ 884.776880][T14820] __ntfs_error: 14 callbacks suppressed [ 884.776902][T14820] ntfs: (device loop6): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 884.979451][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11832'. [ 885.394447][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11836'. [ 885.622303][T14831] loop0: detected capacity change from 0 to 32768 [ 885.674627][T14867] netlink: 'syz.6.11839': attribute type 6 has an invalid length. [ 885.695189][T14838] loop7: detected capacity change from 0 to 32768 [ 885.702229][T14867] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.11839'. [ 885.786320][T14838] ERROR: (device loop7): dbAllocAG: unable to allocate blocks [ 885.786320][T14838] [ 885.806080][T14831] XFS (loop0): Mounting V5 Filesystem [ 886.067796][T14831] XFS (loop0): Ending clean mount [ 886.085329][T14831] XFS (loop0): Quotacheck needed: Please wait. [ 886.196371][T14831] XFS (loop0): Quotacheck: Done. [ 886.510065][ T4272] XFS (loop0): Unmounting Filesystem [ 887.227773][T14934] netlink: 192 bytes leftover after parsing attributes in process `syz.2.11860'. [ 887.646067][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11868'. [ 887.708723][ T2478] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 887.908973][ T2478] usb 3-1: Using ep0 maxpacket: 32 [ 887.916176][ T2478] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 887.956094][ T2478] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 887.978273][ T2478] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 887.995132][ T2478] usb 3-1: config 1 has no interface number 0 [ 888.003671][ T2478] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.015087][ T2478] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 888.037720][ T2478] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 888.065807][ T2478] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 888.085663][ T2478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.150726][T14947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 888.162793][ T2478] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 888.297067][T14982] program syz.4.11875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.375387][T14947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 888.431727][ T2478] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 888.685979][ T3198] usb 3-1: USB disconnect, device number 43 [ 888.698346][ T3198] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 888.822701][T14967] loop7: detected capacity change from 0 to 32768 [ 888.925328][T15017] ALSA: mixer_oss: invalid OSS volume 'u' [ 888.973854][T14967] XFS (loop7): Mounting V5 Filesystem [ 889.123329][T14967] XFS (loop7): Ending clean mount [ 889.407503][T15042] --map-set only usable from mangle table [ 889.484775][T13287] XFS (loop7): Unmounting Filesystem [ 889.632020][T15050] netlink: 45 bytes leftover after parsing attributes in process `syz.6.11889'. [ 889.809575][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11892'. [ 890.357516][T15085] loop7: detected capacity change from 0 to 64 [ 890.367156][T15083] sctp: [Deprecated]: syz.0.11901 (pid 15083) Use of int in max_burst socket option. [ 890.367156][T15083] Use struct sctp_assoc_value instead [ 890.935246][T15120] xt_cgroup: xt_cgroup: no path or classid specified [ 891.137648][T15130] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11916'. [ 891.547734][T15154] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 891.589961][T15158] IPv6: NLM_F_CREATE should be specified when creating new route [ 891.618681][ T2477] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 891.818714][ T2477] usb 5-1: Using ep0 maxpacket: 8 [ 891.826903][ T2477] usb 5-1: unable to get BOS descriptor or descriptor too short [ 891.868494][ T2477] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 891.897566][ T2477] usb 5-1: config 8 has no interface number 0 [ 891.923202][ T2477] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 891.962982][ T2477] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 891.985200][ T2477] usb 5-1: config 8 interface 24 has no altsetting 0 [ 892.015418][ T2477] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 892.059418][ T2477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.067501][ T2477] usb 5-1: Product: syz [ 892.084738][ T2477] usb 5-1: Manufacturer: syz [ 892.096397][ T2477] usb 5-1: SerialNumber: syz [ 892.136523][T15140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 892.397576][ T2477] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 892.420449][ T2477] usb 5-1: USB disconnect, device number 63 [ 893.584130][T15275] loop7: detected capacity change from 0 to 256 [ 893.663796][T15275] FAT-fs (loop7): Directory bread(block 64) failed [ 893.696342][T15275] FAT-fs (loop7): Directory bread(block 65) failed [ 893.717308][T15275] FAT-fs (loop7): Directory bread(block 66) failed [ 893.758519][T15275] FAT-fs (loop7): Directory bread(block 67) failed [ 893.803779][T15275] FAT-fs (loop7): Directory bread(block 68) failed [ 893.818617][T15275] FAT-fs (loop7): Directory bread(block 69) failed [ 893.855770][T15275] FAT-fs (loop7): Directory bread(block 70) failed [ 893.895471][T15275] FAT-fs (loop7): Directory bread(block 71) failed [ 893.928563][T15275] FAT-fs (loop7): Directory bread(block 72) failed [ 893.935179][T15275] FAT-fs (loop7): Directory bread(block 73) failed [ 894.149746][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11972'. [ 894.197921][T15303] netlink: 'syz.4.11972': attribute type 1 has an invalid length. [ 894.321888][T15308] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 894.848295][ T3198] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 895.050736][ T3198] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 895.075652][ T3198] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 895.105714][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.151968][ T3198] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 896.050791][T15358] loop6: detected capacity change from 0 to 32768 [ 896.157930][T15358] XFS (loop6): Mounting V5 Filesystem [ 896.199158][ T3198] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 896.240687][T15358] XFS (loop6): Ending clean mount [ 896.408093][ T3198] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 896.421680][ T3198] stv0680 1-1:4.0: last error: 86, command = 0x17 [ 896.489076][ T3198] usb 1-1: USB disconnect, device number 37 [ 896.536149][T20665] XFS (loop6): Unmounting Filesystem [ 897.007889][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12008'. [ 897.119937][T15439] loop7: detected capacity change from 0 to 64 [ 897.130269][T15440] sock: sock_timestamping_bind_phc: sock not bind to device [ 897.956752][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12023'. [ 898.076155][T15491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12026'. [ 898.224117][T15507] loop6: detected capacity change from 0 to 256 [ 898.416760][T15507] FAT-fs (loop6): Directory bread(block 64) failed [ 898.444065][T15507] FAT-fs (loop6): Directory bread(block 65) failed [ 898.464397][T15507] FAT-fs (loop6): Directory bread(block 66) failed [ 898.484566][T15507] FAT-fs (loop6): Directory bread(block 67) failed [ 898.501793][T15507] FAT-fs (loop6): Directory bread(block 68) failed [ 898.538107][T15507] FAT-fs (loop6): Directory bread(block 69) failed [ 898.565295][T15507] FAT-fs (loop6): Directory bread(block 70) failed [ 898.581669][T15507] FAT-fs (loop6): Directory bread(block 71) failed [ 898.623787][T15507] FAT-fs (loop6): Directory bread(block 72) failed [ 898.642598][T15507] FAT-fs (loop6): Directory bread(block 73) failed [ 898.973680][ T2477] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 899.098123][ T6896] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 899.168076][ T2477] usb 3-1: Using ep0 maxpacket: 16 [ 899.174849][ T2477] usb 3-1: config 0 has no interfaces? [ 899.201696][ T2477] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 899.231231][ T2477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.239946][ T2477] usb 3-1: Product: syz [ 899.244238][ T2477] usb 3-1: Manufacturer: syz [ 899.250130][ T2477] usb 3-1: SerialNumber: syz [ 899.267511][ T2477] r8152-cfgselector 3-1: config 0 descriptor?? [ 899.312823][ T6896] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 899.342537][ T6896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.378342][ T6896] usb 1-1: Product: syz [ 899.388257][ T6896] usb 1-1: Manufacturer: syz [ 899.396033][ T6896] usb 1-1: SerialNumber: syz [ 899.404539][ T6896] usb 1-1: config 0 descriptor?? [ 899.415980][ T6896] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 899.491755][ T2477] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 899.518483][ T1957] usb 3-1: config 0 descriptor?? [ 899.624475][ T3191] usb 1-1: USB disconnect, device number 38 [ 899.638719][ T3191] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 899.733023][ T1957] usb 3-1: can't set config #0, error -71 [ 899.739291][ T3198] usb 3-1: USB disconnect, device number 44 [ 899.857619][T15579] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12041'. [ 899.990255][T15579] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12041'. [ 901.095361][T15647] device xfrm0 entered promiscuous mode [ 901.683250][T15679] futex_wake_op: syz.7.12075 tries to shift op by 32; fix this program [ 901.725925][T15685] netlink: 'syz.6.12077': attribute type 7 has an invalid length. [ 901.915306][T15693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12081'. [ 901.959153][T15696] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 901.988163][T15696] overlayfs: overlapping lowerdir path [ 903.463212][ T27] audit: type=1400 audit(903.448:468): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15765 comm="syz.2.12105" [ 903.663511][T15772] netlink: 'syz.6.12106': attribute type 1 has an invalid length. [ 904.051855][T15792] netlink: 220 bytes leftover after parsing attributes in process `syz.6.12114'. [ 904.176512][T15799] tmpfs: Unknown parameter 'no' [ 905.051636][T15851] loop0: detected capacity change from 0 to 164 [ 905.104826][T15851] rock: directory entry would overflow storage [ 905.140455][T15851] rock: sig=0x5252, size=5, remaining=3 [ 905.466015][T15871] ipt_CLUSTERIP: unknown mode 3 [ 906.094749][T15910] netlink: 'syz.4.12152': attribute type 8 has an invalid length. [ 906.431225][T15923] loop7: detected capacity change from 0 to 4096 [ 906.531349][T15923] ntfs3: loop7: ino=5, "/" directory corrupted [ 906.555808][T15923] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 906.626330][T15930] loop0: detected capacity change from 0 to 4096 [ 906.658262][T15930] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 907.419961][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12172'. [ 907.689191][T15982] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12177'. [ 907.787862][T15988] netlink: 'syz.4.12178': attribute type 11 has an invalid length. [ 908.355778][T15963] loop7: detected capacity change from 0 to 32768 [ 908.493554][T15963] XFS (loop7): Mounting V5 Filesystem [ 908.693922][T15963] XFS (loop7): Ending clean mount [ 908.864820][T13287] XFS (loop7): Unmounting Filesystem [ 909.080813][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12199'. [ 909.112069][ T3191] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 909.307616][ T3191] usb 1-1: Using ep0 maxpacket: 32 [ 909.314658][ T3191] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 909.350539][ T3191] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.371281][ T3191] usb 1-1: config 0 has no interface number 0 [ 909.392194][ T3191] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 909.446402][ T3191] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 909.465691][ T3191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.517519][ T3191] usb 1-1: Product: syz [ 909.519588][T16070] netlink: 'syz.2.12204': attribute type 21 has an invalid length. [ 909.521765][ T3191] usb 1-1: Manufacturer: syz [ 909.572239][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12204'. [ 909.582273][ T3191] usb 1-1: SerialNumber: syz [ 909.609651][ T3191] usb 1-1: config 0 descriptor?? [ 909.660947][ T3191] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 909.687849][ T3191] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 909.828092][ T3191] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 909.835548][ T3191] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 910.083177][ T3191] usb 1-1: USB disconnect, device number 39 [ 910.434834][ T27] audit: type=1326 audit(910.408:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16122 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 910.525144][ T27] audit: type=1326 audit(910.448:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16122 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 910.557534][T16130] IPv6: NLM_F_CREATE should be specified when creating new route [ 910.575745][ T27] audit: type=1326 audit(910.448:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16122 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 910.643086][ T27] audit: type=1326 audit(910.448:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16122 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 910.858829][T16143] netlink: 7 bytes leftover after parsing attributes in process `syz.4.12225'. [ 910.917818][T16143] netlink: 7 bytes leftover after parsing attributes in process `syz.4.12225'. [ 911.111743][T16159] net_ratelimit: 111 callbacks suppressed [ 911.111762][T16159] openvswitch: netlink: Missing key (keys=40, expected=80) [ 911.945438][T16205] netlink: 'syz.2.12246': attribute type 7 has an invalid length. [ 913.127396][ T3191] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 913.319133][ T3191] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 913.335431][ T3191] usb 5-1: config 0 has no interface number 0 [ 913.360187][ T3191] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 913.398062][ T3191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.417470][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12277'. [ 913.437504][ T3191] usb 5-1: Product: syz [ 913.441781][ T3191] usb 5-1: Manufacturer: syz [ 913.446424][ T3191] usb 5-1: SerialNumber: syz [ 913.477830][ T3191] usb 5-1: config 0 descriptor?? [ 913.501345][ T3191] qmi_wwan 5-1:0.207: bogus CDC Union: master=0, slave=1 [ 913.707464][ T3191] qmi_wwan: probe of 5-1:0.207 failed with error -22 [ 913.788349][T16315] netlink: 'syz.2.12281': attribute type 10 has an invalid length. [ 913.797384][T16315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12281'. [ 913.823155][T16315] device dummy0 entered promiscuous mode [ 913.830128][T16315] bridge0: port 5(dummy0) entered blocking state [ 913.836789][T16315] bridge0: port 5(dummy0) entered disabled state [ 913.845478][T16315] bridge0: port 5(dummy0) entered blocking state [ 913.852049][T16315] bridge0: port 5(dummy0) entered forwarding state [ 913.936237][ T3191] usb 5-1: USB disconnect, device number 64 [ 914.015595][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12285'. [ 914.058807][T16328] loop7: detected capacity change from 0 to 2048 [ 914.078354][T16328] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 914.136751][T16328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.461132][T16348] SET target dimension over the limit! [ 915.107357][T16383] [U] [ 915.110166][T16383] [U] [ 915.112906][T16383] [U] [ 915.115697][T16383] [U] [ 915.174035][T16383] [U] [ 915.176841][T16383] [U] [ 915.179584][T16383] [U] [ 915.182319][T16383] [U] [ 915.211563][T16383] [U] [ 915.214356][T16383] [U] [ 915.217089][T16383] [U] [ 915.245996][T16382] [U] [ 915.407295][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12309'. [ 915.519164][ T27] audit: type=1326 audit(915.499:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 915.608961][ T27] audit: type=1326 audit(915.529:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 915.708975][ T27] audit: type=1326 audit(915.529:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 915.787403][ T27] audit: type=1326 audit(915.539:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 915.855238][T16420] device geneve2 entered promiscuous mode [ 915.860465][ T27] audit: type=1326 audit(915.539:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 915.882882][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.962044][ T27] audit: type=1326 audit(915.539:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 915.983967][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.085062][ T27] audit: type=1326 audit(915.539:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 916.203200][ T27] audit: type=1326 audit(915.539:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16405 comm="syz.2.12312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 916.822248][T16474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12333'. [ 916.852554][T16475] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 916.867076][T16474] netlink: 'syz.2.12333': attribute type 2 has an invalid length. [ 917.004163][T16484] netlink: 755 bytes leftover after parsing attributes in process `syz.6.12337'. [ 917.367348][ T6896] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 917.569315][ T6896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 917.598240][ T6896] usb 3-1: not running at top speed; connect to a high speed hub [ 917.617935][ T6896] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 917.626200][ T6896] usb 3-1: config 106 has no interface number 0 [ 917.660177][ T6896] usb 3-1: config 106 interface 8 has no altsetting 0 [ 917.692856][ T6896] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 917.726275][ T6896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.755088][ T6896] usb 3-1: Product: syz [ 917.784559][ T6896] usb 3-1: Manufacturer: syz [ 917.789502][ T6896] usb 3-1: SerialNumber: syz [ 918.027916][ T6896] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 918.067059][ T6896] kalmia: probe of 3-1:106.8 failed with error -22 [ 918.102840][ T6896] usb 3-1: USB disconnect, device number 45 [ 918.444539][T16547] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12354'. [ 919.359974][T16596] loop0: detected capacity change from 0 to 1764 [ 919.553883][ T6896] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 919.651544][T16616] netlink: 'syz.0.12375': attribute type 4 has an invalid length. [ 919.659762][T16616] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12375'. [ 919.757142][ T6896] usb 7-1: Using ep0 maxpacket: 32 [ 919.768191][ T6896] usb 7-1: unable to get BOS descriptor or descriptor too short [ 919.802960][ T6896] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 919.876296][ T6896] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 919.902653][ T6896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.918043][ T27] audit: type=1326 audit(919.899:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16626 comm="syz.0.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 919.931726][ T6896] usb 7-1: Product: syz [ 919.985105][ T6896] usb 7-1: Manufacturer: syz [ 920.003960][ T6896] usb 7-1: SerialNumber: syz [ 920.009503][ T27] audit: type=1326 audit(919.929:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16626 comm="syz.0.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 920.082443][T16633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12381'. [ 920.251603][ T6896] usb 7-1: Invalid number of CPorts: 0 [ 920.260215][ T6896] es2_ap_driver: probe of 7-1:7.0 failed with error -22 [ 920.482770][ T6896] usb 7-1: USB disconnect, device number 30 [ 920.565117][T16662] ieee802154 phy1 wpan1: encryption failed: -22 [ 920.566425][T16666] erofs: (device loop15): erofs_read_superblock: cannot find valid erofs superblock [ 921.126314][T16691] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12399'. [ 921.273313][T16698] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12401'. [ 922.076199][T16736] netlink: 'syz.4.12414': attribute type 1 has an invalid length. [ 922.108658][T16736] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12414'. [ 922.620445][T16765] PM: Enabling pm_trace changes system date and time during resume. [ 922.620445][T16765] PM: Correct system time has to be restored manually after resume. [ 922.722162][T16770] program syz.7.12425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.616409][T16818] netlink: 'syz.6.12442': attribute type 27 has an invalid length. [ 923.666482][T16818] netlink: 'syz.6.12442': attribute type 3 has an invalid length. [ 923.707025][T16818] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12442'. [ 923.939859][T16834] netlink: 'syz.6.12447': attribute type 1 has an invalid length. [ 924.113885][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12448'. [ 924.198976][T16846] tmpfs: Bad value for 'mpol' [ 924.228221][T16847] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 924.312137][T16841] netlink: set zone limit has 4 unknown bytes [ 924.584884][T16862] libceph: resolve '4.' (ret=-3): failed [ 925.385397][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12473'. [ 925.490132][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 925.490148][ T27] audit: type=1326 audit(925.469:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.2.12476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 925.551235][ T27] audit: type=1326 audit(925.509:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.2.12476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 925.682577][ T27] audit: type=1326 audit(925.509:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.2.12476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 925.789160][ T27] audit: type=1326 audit(925.509:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.2.12476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 925.894567][ T27] audit: type=1326 audit(925.509:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.2.12476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 925.916434][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.291614][T16959] netlink: 'syz.2.12490': attribute type 3 has an invalid length. [ 926.312065][T16959] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12490'. [ 926.997227][T16993] loop0: detected capacity change from 0 to 256 [ 927.058278][T16993] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 927.114954][T17003] loop7: detected capacity change from 0 to 512 [ 927.282598][T17003] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 927.350819][T17003] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 927.366782][T17003] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 927.413112][T17003] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.12506: Failed to acquire dquot type 0 [ 927.599587][T13287] EXT4-fs (loop7): unmounting filesystem. [ 928.056496][ T3195] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 928.223283][T17068] delete_channel: no stack [ 928.232034][T17071] netlink: 'syz.0.12527': attribute type 29 has an invalid length. [ 928.245417][T17071] netlink: 'syz.0.12527': attribute type 29 has an invalid length. [ 928.255759][ T3195] usb 5-1: Using ep0 maxpacket: 32 [ 928.268277][ T3195] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 928.290004][ T3195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.319490][ T3195] usb 5-1: config 0 descriptor?? [ 928.347097][ T3195] gspca_main: sq930x-2.14.0 probing 041e:403c [ 928.534420][ T3195] gspca_sq930x: reg_r 001f failed -71 [ 928.543899][ T3195] sq930x: probe of 5-1:0.0 failed with error -71 [ 928.596717][ T3195] usb 5-1: USB disconnect, device number 65 [ 929.859799][T17185] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 930.047783][T17194] loop6: detected capacity change from 0 to 128 [ 930.097230][T17194] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 930.154493][T17194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 930.164047][T17202] lo speed is unknown, defaulting to 1000 [ 930.189010][ T27] audit: type=1326 audit(930.170:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17204 comm="syz.4.12564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 930.234278][ T27] audit: type=1326 audit(930.200:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17204 comm="syz.4.12564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 930.274964][T17202] lo speed is unknown, defaulting to 1000 [ 930.287149][T17202] lo speed is unknown, defaulting to 1000 [ 930.320409][ T27] audit: type=1326 audit(930.200:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17204 comm="syz.4.12564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 930.675766][T17202] infiniband sz1: set down [ 930.680943][ T3198] lo speed is unknown, defaulting to 1000 [ 930.735347][T17202] infiniband sz1: added lo [ 930.795017][T17202] RDS/IB: sz1: added [ 930.799636][T17202] smc: adding ib device sz1 with port count 1 [ 930.805931][T17202] smc: ib device sz1 port 1 has pnetid [ 930.812511][ T3198] lo speed is unknown, defaulting to 1000 [ 930.820058][T17202] lo speed is unknown, defaulting to 1000 [ 930.878638][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12571'. [ 931.255472][T17202] lo speed is unknown, defaulting to 1000 [ 931.512564][T17263] tmpfs: Bad value for 'mpol' [ 931.558449][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.737194][T17202] lo speed is unknown, defaulting to 1000 [ 931.925937][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12590'. [ 931.963823][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12590'. [ 932.201964][T17202] lo speed is unknown, defaulting to 1000 [ 932.388979][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12597'. [ 932.630122][T17202] lo speed is unknown, defaulting to 1000 [ 932.660368][T17312] loop7: detected capacity change from 0 to 256 [ 932.720280][T17315] ip6t_rpfilter: unknown options [ 933.191219][T17202] lo speed is unknown, defaulting to 1000 [ 933.739866][T17364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12617'. [ 933.779993][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12617'. [ 934.197450][T17393] loop0: detected capacity change from 0 to 764 [ 934.386083][ T3198] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 934.485221][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 934.485239][ T27] audit: type=1326 audit(934.460:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 934.576050][ T3198] usb 3-1: Using ep0 maxpacket: 8 [ 934.586327][ T3198] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 934.595475][ T3198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.606281][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12631'. [ 934.625894][ T27] audit: type=1326 audit(934.460:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 934.654687][ T3198] usb 3-1: Product: syz [ 934.659370][ T3198] usb 3-1: Manufacturer: syz [ 934.664012][ T3198] usb 3-1: SerialNumber: syz [ 934.708616][ T3198] usb 3-1: config 0 descriptor?? [ 934.714546][ T27] audit: type=1326 audit(934.460:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 934.746580][ T3198] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 934.813165][ T27] audit: type=1326 audit(934.460:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 934.886041][ T27] audit: type=1326 audit(934.490:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 935.001909][ T27] audit: type=1326 audit(934.490:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 935.085194][ T27] audit: type=1326 audit(934.490:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 935.155571][ T3198] gspca_m5602: Failed to find a sensor [ 935.171003][ T3198] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 935.199793][ T27] audit: type=1326 audit(934.490:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.0.12630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 935.222450][ T3198] usb 3-1: USB disconnect, device number 46 [ 935.245010][T17446] loop7: detected capacity change from 0 to 764 [ 935.294253][T17446] Symlink component flag not implemented [ 935.316777][T17446] Symlink component flag not implemented [ 935.342817][T17446] Symlink component flag not implemented (129) [ 935.379993][T17446] Symlink component flag not implemented (6) [ 935.840202][T17472] sctp: [Deprecated]: syz.2.12646 (pid 17472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 935.840202][T17472] Use struct sctp_sack_info instead [ 936.381256][T17496] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12654'. [ 936.456170][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12654'. [ 936.465282][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12654'. [ 936.505933][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12654'. [ 936.524564][T17504] xt_hashlimit: size too large, truncated to 1048576 [ 936.534065][T17504] xt_hashlimit: max too large, truncated to 1048576 [ 936.562846][T17505] loop7: detected capacity change from 0 to 1024 [ 936.653119][T17505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 936.783619][T17517] loop0: detected capacity change from 0 to 128 [ 936.809658][T17520] netlink: 'syz.6.12661': attribute type 1 has an invalid length. [ 936.849114][T17505] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 936.910864][T17517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 937.078571][T13287] EXT4-fs (loop7): unmounting filesystem. [ 937.140030][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 937.362912][T17552] loop6: detected capacity change from 0 to 512 [ 937.497125][T17552] EXT4-fs: Ignoring removed orlov option [ 937.669174][T17552] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 937.714376][T17552] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:337: inode #15: comm syz.6.12670: verity file corrupted; can't find descriptor [ 937.764835][T17552] EXT4-fs (loop6): Remounting filesystem read-only [ 937.786283][T17552] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 937.808066][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12675'. [ 937.829796][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12675'. [ 937.973169][T20665] EXT4-fs (loop6): unmounting filesystem. [ 938.124339][T17584] delete_channel: no stack [ 939.135835][ T6896] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 939.335789][ T6896] usb 1-1: Using ep0 maxpacket: 8 [ 939.335811][ T3195] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 939.348797][ T6896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 939.353248][ T6896] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 939.420723][ T6896] usb 1-1: config 0 has no interface number 0 [ 939.435906][ T6896] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 939.464099][ T6896] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 939.485994][ T6896] usb 1-1: config 0 interface 88 has no altsetting 0 [ 939.528738][ T6896] usb 1-1: string descriptor 0 read error: -22 [ 939.543274][ T6896] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 939.562815][ T6896] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 939.571496][ T3195] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 939.586042][ T3195] usb 7-1: config 0 has no interface number 0 [ 939.602402][ T6896] usb 1-1: config 0 descriptor?? [ 939.607837][ T3195] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 939.641384][ T3195] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.646885][ T6896] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input58 [ 939.707463][ T3195] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 939.756931][ T3195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.774496][ T3195] usb 7-1: Product: syz [ 939.779455][ T3195] usb 7-1: Manufacturer: syz [ 939.784118][ T3195] usb 7-1: SerialNumber: syz [ 939.813125][ T3195] usb 7-1: config 0 descriptor?? [ 939.822764][T17650] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 939.841464][ T3195] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 939.894630][ T3195] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 939.977926][ T3191] usb 1-1: USB disconnect, device number 40 [ 940.057946][ T4271] udevd[4271]: Error opening device "/dev/input/event4": No such device [ 940.115994][ T4271] udevd[4271]: Unable to EVIOCGABS device "/dev/input/event4" [ 940.144245][ T4271] udevd[4271]: Unable to EVIOCGABS device "/dev/input/event4" [ 940.336778][ T3191] usb 7-1: USB disconnect, device number 31 [ 940.363323][ T3191] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 940.407014][ T3191] cyberjack 7-1:0.69: device disconnected [ 940.614553][T17745] loop0: detected capacity change from 0 to 4096 [ 940.633453][T17745] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 940.707530][T17745] ntfs3: loop0: failed to convert "c46c" to cp936 [ 941.672877][ T2477] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 941.873933][ T2477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 941.905565][ T2477] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 941.925707][ T2477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 941.937651][ T2477] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 941.971164][ T2477] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 942.010000][ T2477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.050812][ T2477] usb 3-1: config 0 descriptor?? [ 942.289741][ T2477] hdpvr 3-1:0.0: firmware version 0x88 dated _†=&ˆ}‰¡nDT,«²öw#Ñð¸ÀÀúúÙOR»‚îC‰”f( [ 942.324276][ T2477] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 942.526088][ T2477] hdpvr 3-1:0.0: device init failed [ 942.533114][ T2477] hdpvr: probe of 3-1:0.0 failed with error -12 [ 942.555881][ T2477] usb 3-1: USB disconnect, device number 47 [ 942.592618][T17839] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 942.867855][ T27] audit: type=1326 audit(942.850:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.0.12754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 942.912708][ T27] audit: type=1326 audit(942.870:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.0.12754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 943.006070][ T27] audit: type=1326 audit(942.870:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.0.12754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 943.400322][T17880] loop6: detected capacity change from 0 to 1024 [ 943.616085][ T4650] hfsplus: b-tree write err: -5, ino 4 [ 943.756969][ T6896] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 943.826586][T17901] kAFS: unable to lookup cell 's@z0' [ 943.971100][ T6896] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 944.000409][ T6896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.022275][ T6896] usb 5-1: Product: syz [ 944.039145][ T6896] usb 5-1: Manufacturer: syz [ 944.043820][ T6896] usb 5-1: SerialNumber: syz [ 944.089110][ T6896] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 944.155920][ T6896] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 944.177299][T17925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12774'. [ 944.394508][ C0] usb 5-1: ath9k_htc: invalid pkt_len (ffd7) [ 944.638042][ T2469] usb 5-1: USB disconnect, device number 66 [ 944.948693][ T27] audit: type=1326 audit(944.930:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17967 comm="syz.7.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f79bf79 code=0x7ffc0000 [ 944.998709][ T27] audit: type=1326 audit(944.940:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17967 comm="syz.7.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f79bf79 code=0x7ffc0000 [ 945.109878][ T27] audit: type=1326 audit(944.950:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17967 comm="syz.7.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fbe7f79bf79 code=0x7ffc0000 [ 945.204386][ T27] audit: type=1326 audit(944.950:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17967 comm="syz.7.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f79bf79 code=0x7ffc0000 [ 945.226385][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.239100][ T6896] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 945.249957][ T27] audit: type=1326 audit(944.950:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17967 comm="syz.7.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f79bf79 code=0x7ffc0000 [ 945.282756][ T6896] ath9k_htc: Failed to initialize the device [ 945.296019][ T2469] usb 5-1: ath9k_htc: USB layer deinitialized [ 945.349595][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12793'. [ 945.353503][T17977] loop7: detected capacity change from 0 to 4096 [ 945.560009][T17993] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.654666][T17977] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 945.705446][T17977] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 945.764477][T18004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12799'. [ 945.769177][T17977] Remounting filesystem read-only [ 945.825451][T17977] NILFS (loop7): error -5 truncating bmap (ino=12) [ 945.885647][ T3195] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 946.041232][T13287] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 946.091857][ T3195] usb 3-1: Using ep0 maxpacket: 8 [ 946.103709][ T3195] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 946.155274][ T3195] usb 3-1: config 0 interface 0 has no altsetting 0 [ 946.204116][ T3195] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 946.246523][ T3195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.292148][ T3195] usb 3-1: Product: syz [ 946.314608][ T3195] usb 3-1: Manufacturer: syz [ 946.331742][ T3195] usb 3-1: SerialNumber: syz [ 946.362582][ T3195] usb 3-1: config 0 descriptor?? [ 946.400554][ T3195] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 946.603578][ T3195] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 946.623607][ T3195] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 946.631776][ T3200] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 946.647303][ T3195] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 946.780153][T18047] loop0: detected capacity change from 0 to 4096 [ 946.824082][T18047] ntfs3: loop0: ino=3, Correct links count -> 2. [ 946.825848][ T3200] usb 7-1: Using ep0 maxpacket: 8 [ 946.849047][ T3195] usb 3-1: USB disconnect, device number 48 [ 946.858997][ T3200] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 946.895350][ T3200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.914010][ T3200] usb 7-1: Product: syz [ 946.922521][ T3200] usb 7-1: Manufacturer: syz [ 946.966767][ T3200] usb 7-1: SerialNumber: syz [ 946.988439][ T3200] usb 7-1: config 0 descriptor?? [ 947.038196][ T3200] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 947.214332][ T27] audit: type=1326 audit(947.190:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18065 comm="syz.0.12813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 947.305421][ T27] audit: type=1326 audit(947.190:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18065 comm="syz.0.12813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa859bf79 code=0x7ffc0000 [ 947.327313][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.406667][ T3200] gspca_m5602: Failed to find a sensor [ 947.412334][ T3200] ALi m5602 7-1:0.0: ALi m5602 webcam failed [ 947.450722][ T3200] usb 7-1: USB disconnect, device number 32 [ 948.408788][T18118] netlink: 'syz.6.12828': attribute type 1 has an invalid length. [ 948.650741][T18130] kernel profiling enabled (shift: 9) [ 948.743264][T18131] loop0: detected capacity change from 0 to 4096 [ 948.811364][T18131] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 949.728979][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12847'. [ 950.800634][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12863'. [ 950.852572][T18240] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12863'. [ 950.890575][T18240] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12863'. [ 951.196755][T18263] netlink: 'syz.2.12871': attribute type 27 has an invalid length. [ 951.721306][T18292] binder: 18291:18292 ioctl c0046209 0 returned -22 [ 951.846077][T18300] QAT: failed to copy from user cfg_data. [ 952.340469][T18328] netlink: 'syz.4.12894': attribute type 6 has an invalid length. [ 952.816986][T18352] trusted_key: encrypted_key: hex blob is missing [ 952.865352][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12903'. [ 953.026023][T18360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12905'. [ 953.074608][T18360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12905'. [ 953.189921][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12910'. [ 953.843770][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12922'. [ 954.495561][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12935'. [ 954.588712][T18445] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 954.932150][T18467] xt_TPROXY: Can be used only with -p tcp or -p udp [ 955.147269][T18480] netlink: 'syz.2.12947': attribute type 2 has an invalid length. [ 955.174994][T18476] __nla_validate_parse: 2 callbacks suppressed [ 955.175013][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12948'. [ 956.489957][T18541] loop0: detected capacity change from 0 to 1024 [ 956.790732][T18560] Invalid ELF header magic: != ELF [ 957.027499][T18572] openvswitch: netlink: Message has 4 unknown bytes. [ 957.273081][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 957.273098][ T27] audit: type=1326 audit(957.251:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.4.12984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 957.336465][ T27] audit: type=1326 audit(957.271:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.4.12984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 957.358359][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.437115][ T27] audit: type=1326 audit(957.271:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.4.12984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 957.458817][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.512374][T18596] tmpfs: Bad value for 'mpol' [ 957.534114][ T27] audit: type=1326 audit(957.271:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.4.12984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 957.600344][ T27] audit: type=1326 audit(957.271:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.4.12984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 957.649456][T18601] loop7: detected capacity change from 0 to 512 [ 958.174874][T18629] SET target dimension over the limit! [ 958.399209][T18641] xt_TCPMSS: Only works on TCP SYN packets [ 958.498548][T18647] loop0: detected capacity change from 0 to 1764 [ 959.212992][T18690] SET target dimension over the limit! [ 959.233518][T18689] loop7: detected capacity change from 0 to 128 [ 959.276157][T18689] autofs4:pid:18689:autofs_fill_super: called with bogus options [ 959.667660][T18712] siw: device registration error -23 [ 960.177399][T18746] loop6: detected capacity change from 0 to 256 [ 960.214424][T18746] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 960.384206][T18754] loop0: detected capacity change from 0 to 256 [ 960.402879][T18754] exfat: Deprecated parameter 'utf8' [ 960.414957][T18754] exfat: Deprecated parameter 'namecase' [ 960.441538][T18754] exfat: Deprecated parameter 'namecase' [ 960.455985][T18757] device sit0 entered promiscuous mode [ 960.473767][T18754] exfat: Deprecated parameter 'utf8' [ 960.521271][T18757] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13040'. [ 960.551633][T18763] autofs4:pid:18763:autofs_fill_super: called with bogus options [ 960.573656][T18754] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 961.006745][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13046'. [ 961.153294][T18788] loop0: detected capacity change from 0 to 2048 [ 961.301777][T18788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 961.383689][T18800] xt_hashlimit: overflow, try lower: 5/0 [ 961.417732][T18788] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.13048: corrupted xattr block 128 [ 961.552023][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 961.824654][ T6896] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 961.941998][T18835] netlink: 'syz.7.13062': attribute type 21 has an invalid length. [ 962.002133][T18829] loop0: detected capacity change from 0 to 4096 [ 962.051388][ T6896] usb 7-1: Using ep0 maxpacket: 16 [ 962.060336][ T6896] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 962.108735][ T6896] usb 7-1: config 0 has no interface number 0 [ 962.164124][ T6896] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 962.205285][ T6896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.213387][ T6896] usb 7-1: Product: syz [ 962.219260][ T6896] usb 7-1: Manufacturer: syz [ 962.226587][ T6896] usb 7-1: SerialNumber: syz [ 962.249722][ T6896] usb 7-1: config 0 descriptor?? [ 962.270189][ T6896] hub 7-1:0.132: bad descriptor, ignoring hub [ 962.307543][ T6896] hub: probe of 7-1:0.132 failed with error -5 [ 962.339885][ T6896] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input59 [ 962.455875][T18847] loop7: detected capacity change from 0 to 4096 [ 962.472291][T18847] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 962.524111][ T27] audit: type=1326 audit(962.501:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.2.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 962.581970][T18847] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 962.599672][ T27] audit: type=1326 audit(962.501:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.2.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 962.764074][ T27] audit: type=1326 audit(962.501:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.2.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 962.814879][ T3195] usb 7-1: USB disconnect, device number 33 [ 962.841804][ T27] audit: type=1326 audit(962.501:525): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.2.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 962.891552][ T11] ntfs3: loop7: ntfs3_write_inode r=5 failed, -22. [ 962.918983][T13287] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 962.962901][ T27] audit: type=1326 audit(962.531:526): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.2.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5bd9bf79 code=0x7ffc0000 [ 963.321981][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13077'. [ 964.596008][T18965] loop7: detected capacity change from 0 to 128 [ 965.035732][T18986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13109'. [ 965.244624][T18998] tmpfs: Bad value for 'mpol' [ 965.654730][T19023] binder: 19021:19023 ioctl 400c620e 200000000280 returned -22 [ 966.743333][T19086] loop0: detected capacity change from 0 to 2048 [ 966.861115][T19086] NILFS (loop0): couldn't mount RDWR because of unsupported optional features (40) [ 967.438274][T19124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13152'. [ 967.740828][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13156'. [ 967.772303][T19136] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.13155'. [ 967.774399][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13156'. [ 968.124346][ T3195] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 968.324163][ T3195] usb 5-1: Using ep0 maxpacket: 32 [ 968.342920][ T3195] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 968.363078][ T3195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.396901][ T3195] usb 5-1: Product: syz [ 968.401153][ T3195] usb 5-1: Manufacturer: syz [ 968.413235][ T3195] usb 5-1: SerialNumber: syz [ 968.425099][ T3195] usb 5-1: config 0 descriptor?? [ 968.445512][ T3195] gspca_main: mars-2.14.0 probing 093a:050f [ 968.705084][ T3195] usb 5-1: USB disconnect, device number 67 [ 969.093855][T19216] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 969.931876][T19286] IPv6: sit1: Disabled Multicast RS [ 970.225489][T19306] netlink: 'syz.4.13196': attribute type 13 has an invalid length. [ 970.266887][T19306] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13196'. [ 970.312123][T19306] syz_tun: refused to change device tx_queue_len [ 970.363617][T19306] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 971.251327][T19355] loop0: detected capacity change from 0 to 2048 [ 971.264474][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13215'. [ 971.308278][T19355] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 971.514089][ T3195] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 971.555793][T19381] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.725864][ T3195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 971.738059][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13223'. [ 971.746002][ T3195] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 971.778536][ T3195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 971.812594][ T3195] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 971.846977][ T3195] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 971.875612][ T3195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.895950][ T3195] usb 7-1: config 0 descriptor?? [ 972.113261][ T3195] hdpvr 7-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 972.138288][ T3195] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 972.332409][ T3195] hdpvr 7-1:0.0: device init failed [ 972.337957][ T3195] hdpvr: probe of 7-1:0.0 failed with error -12 [ 972.385273][ T3195] usb 7-1: USB disconnect, device number 34 [ 972.392760][T19419] sctp: [Deprecated]: syz.0.13231 (pid 19419) Use of int in max_burst socket option. [ 972.392760][T19419] Use struct sctp_assoc_value instead [ 974.364678][ T27] audit: type=1326 audit(974.352:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.4.13271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 974.480224][ T27] audit: type=1326 audit(974.372:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.4.13271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 974.513176][ T27] audit: type=1326 audit(974.382:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.4.13271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 974.542577][T19545] xt_CONNSECMARK: invalid mode: 0 [ 974.618417][ T27] audit: type=1326 audit(974.382:530): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=19536 comm="syz.4.13271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 974.640646][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.781027][ T27] audit: type=1326 audit(974.382:531): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=19536 comm="syz.4.13271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2602f9bf79 code=0x7ffc0000 [ 974.857067][T19563] netlink: 'syz.0.13279': attribute type 10 has an invalid length. [ 975.857240][T19625] netlink: 'syz.2.13295': attribute type 1 has an invalid length. [ 975.959760][T19629] loop6: detected capacity change from 0 to 2048 [ 976.009708][T19629] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 976.067141][T19629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 976.244655][T19643] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.334395][T19649] loop6: detected capacity change from 0 to 24 [ 976.341543][T19649] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 976.418202][T19649] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 976.500092][T19656] loop0: detected capacity change from 0 to 512 [ 976.642280][T19666] netlink: 248 bytes leftover after parsing attributes in process `syz.6.13307'. [ 976.648999][T19656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 976.701705][T19656] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.13305: corrupted xattr block 33 [ 976.716400][T19656] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 976.779962][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 977.143423][T19690] loop0: detected capacity change from 0 to 128 [ 977.178209][T19691] IPv6: sit1: Disabled Multicast RS [ 977.405318][T19703] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 977.433865][T19703] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 977.634968][ T125] kworker/dying (125) used greatest stack depth: 15128 bytes left [ 977.766535][T19719] xt_TCPMSS: Only works on TCP SYN packets [ 978.793673][T19772] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13338'. [ 978.894071][T19779] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 979.096716][T19791] tmpfs: Bad value for 'mpol' [ 979.393362][T19806] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 979.430265][T19806] overlayfs: overlapping lowerdir path [ 979.508869][T19800] loop7: detected capacity change from 0 to 8192 [ 979.522094][T19812] afs: Unexpected value for 'dyn' [ 979.538943][T19800] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 979.582469][T19800] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 979.595780][T19800] REISERFS (device loop7): using ordered data mode [ 979.602950][T19800] reiserfs: using flush barriers [ 979.634634][T19820] netlink: 'syz.0.13356': attribute type 49 has an invalid length. [ 979.684843][T19800] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 979.762387][T19800] REISERFS (device loop7): checking transaction log (loop7) [ 979.811816][T19800] REISERFS (device loop7): Using r5 hash to sort names [ 980.214817][T19842] xt_TCPMSS: Only works on TCP SYN packets [ 980.350106][T19854] netlink: 'syz.6.13367': attribute type 3 has an invalid length. [ 980.428595][T19854] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13367'. [ 980.501294][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13370'. [ 980.932748][T19890] loop7: detected capacity change from 0 to 8 [ 980.977306][T19895] Option ' ' to dns_resolver key: bad/missing value [ 981.033947][T19890] SQUASHFS error: lzo decompression failed, data probably corrupt [ 981.067545][T19890] SQUASHFS error: Failed to read block 0x1c0: -5 [ 981.093714][T19890] SQUASHFS error: Unable to read metadata cache entry [1be] [ 981.470946][T19920] overlayfs: missing 'lowerdir' [ 981.965053][T19901] loop0: detected capacity change from 0 to 32768 [ 982.008288][T19901] read_mapping_page failed! [ 982.457657][T19959] loop0: detected capacity change from 0 to 512 [ 982.532874][T19959] EXT4-fs: Ignoring removed orlov option [ 982.571040][T19959] EXT4-fs (loop0): orphan cleanup on readonly fs [ 982.604329][T19959] EXT4-fs error (device loop0): ext4_find_extent:900: inode #4: comm syz.0.13398: inode has invalid extent depth: 7 [ 982.673542][ T3191] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 982.676711][T19959] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 982.723399][T19959] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 982.738266][T19959] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 982.746528][T19959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 982.782869][T19959] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.13398: 'file0' linked to parent dir [ 982.863423][ T3191] usb 3-1: Using ep0 maxpacket: 16 [ 982.870971][ T3191] usb 3-1: unable to get BOS descriptor or descriptor too short [ 982.895355][ T3191] usb 3-1: config 4 has an invalid interface number: 108 but max is 0 [ 982.931141][ T3191] usb 3-1: config 4 has no interface number 0 [ 982.943369][ T3191] usb 3-1: config 4 interface 108 has no altsetting 0 [ 982.956892][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 982.967139][ T3191] usb 3-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 982.985842][ T3191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.004400][ T3191] usb 3-1: Product: syz [ 983.008731][ T3191] usb 3-1: Manufacturer: syz [ 983.023359][ T3191] usb 3-1: SerialNumber: syz [ 983.264327][ T3191] usb 3-1: active config #4 != 1 ?? [ 983.290746][ T3191] usb 3-1: USB disconnect, device number 49 [ 983.618955][T20010] netlink: 'syz.4.13410': attribute type 10 has an invalid length. [ 984.624151][T20068] netlink: 300 bytes leftover after parsing attributes in process `syz.4.13424'. [ 984.833662][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 985.275961][T20105] overlayfs: missing 'lowerdir' [ 985.479007][T20117] device wlan0 entered promiscuous mode [ 986.145847][T20108] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 986.603273][T20180] netlink: 'syz.7.13463': attribute type 10 has an invalid length. [ 986.680088][T20180] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 987.103080][ T3200] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 987.293842][ T3200] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 987.324767][ T3200] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 987.373310][ T3200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.381413][ T3200] usb 5-1: Product: syz [ 987.395408][ T3200] usb 5-1: Manufacturer: syz [ 987.400099][ T3200] usb 5-1: SerialNumber: syz [ 987.436727][T20227] netlink: 212 bytes leftover after parsing attributes in process `syz.6.13477'. [ 987.690457][T20243] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 987.852077][ T3200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 987.899413][ T3200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 987.914549][ T3200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 987.956990][ T3200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 987.988840][ T3200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 988.042590][ T3200] lan78xx: probe of 5-1:1.0 failed with error -71 [ 988.090638][ T3200] usb 5-1: USB disconnect, device number 68 [ 988.417422][T20279] binder: 20278:20279 ioctl c00c6211 0 returned -14 [ 988.830937][T20303] afs: Bad value for 'source' [ 988.848295][T20304] netlink: 'syz.0.13498': attribute type 11 has an invalid length. [ 988.893053][T20304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13498'. [ 990.072392][T20367] loop6: detected capacity change from 0 to 256 [ 990.157899][T20367] FAT-fs (loop6): Directory bread(block 64) failed [ 990.180030][T20367] FAT-fs (loop6): Directory bread(block 65) failed [ 990.203162][T20367] FAT-fs (loop6): Directory bread(block 66) failed [ 990.209791][T20367] FAT-fs (loop6): Directory bread(block 67) failed [ 990.267299][T20367] FAT-fs (loop6): Directory bread(block 68) failed [ 990.311077][T20367] FAT-fs (loop6): Directory bread(block 69) failed [ 990.333387][T20367] FAT-fs (loop6): Directory bread(block 70) failed [ 990.340098][T20367] FAT-fs (loop6): Directory bread(block 71) failed [ 990.381122][T20330] loop0: detected capacity change from 0 to 32768 [ 990.395997][T20367] FAT-fs (loop6): Directory bread(block 72) failed [ 990.403548][T20367] FAT-fs (loop6): Directory bread(block 73) failed [ 990.473941][T20330] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 990.473941][T20330] [ 990.551123][T20385] ip6t_REJECT: ECHOREPLY is not supported [ 990.807115][T20394] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 991.930779][T20456] netlink: 'syz.2.13551': attribute type 10 has an invalid length. [ 992.046177][T20456] device syz_tun entered promiscuous mode [ 992.070715][T20456] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 992.380527][T20473] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13556'. [ 992.476776][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13555'. [ 992.491012][T20477] loop6: detected capacity change from 0 to 2048 [ 992.592307][T20477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.005197][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.114215][T20503] netlink: 'syz.2.13565': attribute type 10 has an invalid length. [ 993.632457][T20534] netlink: 194488 bytes leftover after parsing attributes in process `syz.7.13575'. [ 994.227628][ T52] block nbd0: Attempted send on invalid socket [ 994.235490][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 994.311757][T20572] lo speed is unknown, defaulting to 1000 [ 994.317849][T20572] lo speed is unknown, defaulting to 1000 [ 994.324336][T20572] lo speed is unknown, defaulting to 1000 [ 994.339440][T20572] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 994.394680][T20572] lo speed is unknown, defaulting to 1000 [ 994.421562][T20572] lo speed is unknown, defaulting to 1000 [ 994.439392][T20572] lo speed is unknown, defaulting to 1000 [ 994.459678][T20572] lo speed is unknown, defaulting to 1000 [ 994.513934][T20572] lo speed is unknown, defaulting to 1000 [ 994.519971][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13592'. [ 994.544958][T20572] lo speed is unknown, defaulting to 1000 [ 994.562809][T20580] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13592'. [ 994.790348][T20594] netlink: 'syz.7.13596': attribute type 5 has an invalid length. [ 994.922791][ T28] INFO: task syz-executor:19248 blocked for more than 143 seconds. [ 994.930853][ T28] Not tainted syzkaller #0 [ 994.972597][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 994.981683][ T28] task:syz-executor state:D stack:22384 pid:19248 ppid:1 flags:0x00004004 [ 995.057850][ T28] Call Trace: [ 995.065186][T20611] Non-string source [ 995.082644][ T28] [ 995.085668][ T28] __schedule+0x11d1/0x40e0 [ 995.090255][ T28] ? mark_lock+0x94/0x320 [ 995.135708][ T28] ? __sched_text_start+0x8/0x8 [ 995.158856][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 995.182657][ T28] ? lock_chain_count+0x20/0x20 [ 995.187618][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 995.222775][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 995.228449][ T28] schedule+0xb9/0x180 [ 995.241465][ T28] io_schedule+0x7c/0xd0 [ 995.247755][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 995.260950][ T28] ? folio_wait_bit+0x30/0x30 [ 995.266287][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 995.273098][ T28] ? folio_mapping+0x1ba/0x4d0 [ 995.277970][ T28] truncate_inode_pages_range+0x9fe/0x1090 [ 995.284331][ T28] ? mapping_evict_folio+0x520/0x520 [ 995.289725][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 995.296864][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 995.302127][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 995.307837][ T28] evict+0x4dc/0x8d0 [ 995.311807][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 995.317615][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 995.323223][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 995.328492][ T28] evict_inodes+0x60c/0x6a0 [ 995.333401][ T28] ? clear_inode+0x150/0x150 [ 995.338072][ T28] generic_shutdown_super+0x93/0x340 [ 995.343852][ T28] kill_block_super+0x7c/0xe0 [ 995.348601][ T28] deactivate_locked_super+0x93/0xf0 [ 995.354343][ T28] cleanup_mnt+0x42c/0x4b0 [ 995.358840][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 995.364491][ T28] task_work_run+0x1d0/0x260 [ 995.369162][ T28] ? task_work_cancel+0x220/0x220 [ 995.380235][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 995.387412][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 995.400363][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 995.407911][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 995.413787][ T28] do_syscall_64+0x58/0xa0 [ 995.418379][ T28] ? clear_bhb_loop+0x60/0xb0 [ 995.423662][ T28] ? clear_bhb_loop+0x60/0xb0 [ 995.428609][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.435366][ T28] RIP: 0033:0x7fc015b9d1d7 [ 995.440026][ T28] RSP: 002b:00007ffd31a99848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 995.448818][ T28] RAX: 0000000000000000 RBX: 00007fc015c31c3b RCX: 00007fc015b9d1d7 [ 995.457280][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd31a99900 [ 995.466913][ T28] RBP: 00007ffd31a99900 R08: 00007ffd31a9a900 R09: 00000000ffffffff [ 995.475570][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd31a9a990 [ 995.484064][ T28] R13: 00007fc015c31c3b R14: 00000000000cde16 R15: 00007ffd31a9a9d0 [ 995.492315][ T28] [ 995.496001][ T28] [ 995.496001][ T28] Showing all locks held in the system: [ 995.505098][ T28] 1 lock held by rcu_tasks_kthre/12: [ 995.510648][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 995.527129][ T28] 1 lock held by rcu_tasks_trace/13: [ 995.533161][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 995.545535][ T28] 1 lock held by khungtaskd/28: [ 995.550592][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 995.562280][ T28] 2 locks held by getty/4034: [ 995.567669][ T28] #0: ffff88814d39f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 995.579465][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 995.590202][ T28] 1 lock held by syz-executor/19248: [ 995.595975][ T28] #0: ffff88802a4d20e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 995.606804][ T28] [ 995.609310][ T28] ============================================= [ 995.609310][ T28] [ 995.618840][ T28] NMI backtrace for cpu 0 [ 995.623219][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 995.630471][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 995.640582][ T28] Call Trace: [ 995.643908][ T28] [ 995.646893][ T28] dump_stack_lvl+0x188/0x24e [ 995.651617][ T28] ? irq_work_queue+0xb8/0x140 [ 995.656438][ T28] ? show_regs_print_info+0x12/0x12 [ 995.661695][ T28] ? load_image+0x400/0x400 [ 995.666245][ T28] ? vprintk_emit+0x59f/0x6a0 [ 995.670976][ T28] ? printk_sprint+0x460/0x460 [ 995.675825][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 995.680831][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 995.687060][ T28] ? _printk+0xda/0x130 [ 995.691267][ T28] ? load_image+0x400/0x400 [ 995.695811][ T28] ? load_image+0x400/0x400 [ 995.700354][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 995.706473][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 995.712599][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 995.718637][ T28] watchdog+0xeee/0xf30 [ 995.722923][ T28] ? watchdog+0x1ed/0xf30 [ 995.727306][ T28] kthread+0x29d/0x330 [ 995.731408][ T28] ? hungtask_pm_notify+0x40/0x40 [ 995.736484][ T28] ? kthread_blkcg+0xd0/0xd0 [ 995.741124][ T28] ret_from_fork+0x1f/0x30 [ 995.745607][ T28] [ 995.749381][ T28] Sending NMI from CPU 0 to CPUs 1: [ 995.754757][ C1] NMI backtrace for cpu 1 [ 995.754768][ C1] CPU: 1 PID: 20598 Comm: syz.0.13599 Not tainted syzkaller #0 [ 995.754785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 995.754795][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x270 [ 995.754825][ C1] Code: 00 00 42 c7 44 33 08 00 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 11 71 bb 08 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc [ 995.754840][ C1] RSP: 0018:ffffc9000d786920 EFLAGS: 00000286 [ 995.754856][ C1] RAX: ffffffff81964781 RBX: ffffc9000d7869e0 RCX: 0000000080000000 [ 995.754869][ C1] RDX: ffffc9000d786901 RSI: ffffffff81964781 RDI: ffffc9000d7869e0 [ 995.754882][ C1] RBP: ffffc9000d7869b0 R08: ffffc9000d787070 R09: ffffc9000d786978 [ 995.754895][ C1] R10: dffffc0000000000 R11: fffff52001af0d31 R12: ffff88805802d940 [ 995.754908][ C1] R13: 1ffff1100b005bd6 R14: ffffffff81712460 R15: ffffc9000d786928 [ 995.754921][ C1] FS: 00007f3aa95356c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 995.754937][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 995.754949][ C1] CR2: 00007fda537e7198 CR3: 0000000032215000 CR4: 00000000003506e0 [ 995.754964][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 995.754975][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 995.754987][ C1] Call Trace: [ 995.754992][ C1] [ 995.754997][ C1] arch_stack_walk+0x100/0x140 [ 995.755022][ C1] ? check_cond_jmp_op+0x9b1/0x2060 [ 995.755044][ C1] stack_trace_save+0xa6/0xf0 [ 995.755065][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 995.755086][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 995.755114][ C1] save_stack+0x121/0x230 [ 995.755133][ C1] ? __reset_page_owner+0x1a0/0x1a0 [ 995.755150][ C1] ? post_alloc_hook+0x173/0x1a0 [ 995.755172][ C1] ? get_page_from_freelist+0x1a1e/0x1ab0 [ 995.755197][ C1] ? __alloc_pages+0x1ec/0x4f0 [ 995.755219][ C1] ? alloc_slab_page+0x5d/0x160 [ 995.755239][ C1] ? new_slab+0x87/0x2c0 [ 995.755258][ C1] ? ___slab_alloc+0xbc6/0x1240 [ 995.755274][ C1] ? __kmem_cache_alloc_node+0x1a0/0x260 [ 995.755292][ C1] ? kmalloc_trace+0x26/0xe0 [ 995.755316][ C1] ? push_stack+0x90/0x510 [ 995.755337][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 995.755363][ C1] __set_page_owner+0x19/0x60 [ 995.755381][ C1] post_alloc_hook+0x173/0x1a0 [ 995.755406][ C1] get_page_from_freelist+0x1a1e/0x1ab0 [ 995.755435][ C1] ? verify_lock_unused+0x140/0x140 [ 995.755462][ C1] ? __next_zones_zonelist+0x99/0x120 [ 995.755485][ C1] __alloc_pages+0x1ec/0x4f0 [ 995.755510][ C1] ? zone_statistics+0x170/0x170 [ 995.755538][ C1] ? alloc_pages+0x4d8/0x740 [ 995.755563][ C1] alloc_slab_page+0x5d/0x160 [ 995.755584][ C1] new_slab+0x87/0x2c0 [ 995.755605][ C1] ___slab_alloc+0xbc6/0x1240 [ 995.755625][ C1] ? push_stack+0x90/0x510 [ 995.755645][ C1] ? push_stack+0x90/0x510 [ 995.755664][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 995.755683][ C1] ? push_stack+0x90/0x510 [ 995.755702][ C1] kmalloc_trace+0x26/0xe0 [ 995.755733][ C1] push_stack+0x90/0x510 [ 995.755754][ C1] check_cond_jmp_op+0x9b1/0x2060 [ 995.755781][ C1] do_check_common+0x79d5/0xc6d0 [ 995.755823][ C1] ? push_insn+0x670/0x670 [ 995.755839][ C1] ? check_func_arg_reg_off+0x280/0x280 [ 995.755855][ C1] ? print_verifier_state+0x1fd0/0x1fd0 [ 995.755872][ C1] ? do_check_subprogs+0x345/0x390 [ 995.755892][ C1] bpf_check+0xb08f/0x10db0 [ 995.755920][ C1] ? mark_lock+0x94/0x320 [ 995.755945][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 995.755962][ C1] ? mark_lock+0x94/0x320 [ 995.755988][ C1] ? __lock_acquire+0x12f4/0x7d10 [ 995.756016][ C1] ? mark_lock+0x94/0x320 [ 995.756041][ C1] ? __lock_acquire+0x13cf/0x7d10 [ 995.756076][ C1] ? verify_lock_unused+0x140/0x140 [ 995.756103][ C1] ? verify_lock_unused+0x140/0x140 [ 995.756126][ C1] ? verify_lock_unused+0x140/0x140 [ 995.756149][ C1] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 995.756174][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 995.756204][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 995.756230][ C1] ? lock_chain_count+0x20/0x20 [ 995.756254][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 995.756275][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 995.756292][ C1] ? ktime_get_with_offset+0xff/0x320 [ 995.756311][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 995.756333][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 995.756352][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 995.756371][ C1] ? __might_fault+0xc2/0x120 [ 995.756388][ C1] ? memset+0x1e/0x40 [ 995.756404][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 995.756427][ C1] bpf_prog_load+0x101a/0x1560 [ 995.756456][ C1] ? map_freeze+0x390/0x390 [ 995.756478][ C1] ? __might_fault+0xa6/0x120 [ 995.756501][ C1] ? __might_fault+0xa6/0x120 [ 995.756517][ C1] ? __might_fault+0xc2/0x120 [ 995.756532][ C1] ? __might_fault+0xa6/0x120 [ 995.756549][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 995.756567][ C1] ? security_bpf+0x7a/0xa0 [ 995.756585][ C1] __sys_bpf+0x5b8/0x780 [ 995.756608][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 995.756630][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 995.756655][ C1] ? lock_chain_count+0x20/0x20 [ 995.756682][ C1] __x64_sys_bpf+0x78/0x90 [ 995.756704][ C1] do_syscall_64+0x4c/0xa0 [ 995.756730][ C1] ? clear_bhb_loop+0x60/0xb0 [ 995.756749][ C1] ? clear_bhb_loop+0x60/0xb0 [ 995.756769][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.756788][ C1] RIP: 0033:0x7f3aa859bf79 [ 995.756802][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.756816][ C1] RSP: 002b:00007f3aa9535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 995.756832][ C1] RAX: ffffffffffffffda RBX: 00007f3aa8815fa0 RCX: 00007f3aa859bf79 [ 995.756845][ C1] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 995.756855][ C1] RBP: 00007f3aa86327e0 R08: 0000000000000000 R09: 0000000000000000 [ 995.756866][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.756876][ C1] R13: 00007f3aa8816038 R14: 00007f3aa8815fa0 R15: 00007ffc4ebb4408 [ 995.756896][ C1] [ 996.384970][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 996.391893][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 996.399131][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 996.409220][ T28] Call Trace: [ 996.412527][ T28] [ 996.415487][ T28] dump_stack_lvl+0x188/0x24e [ 996.420210][ T28] ? memcpy+0x3c/0x60 [ 996.424233][ T28] ? show_regs_print_info+0x12/0x12 [ 996.429477][ T28] ? load_image+0x400/0x400 [ 996.434042][ T28] panic+0x2e5/0x730 [ 996.437967][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 996.443650][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 996.448201][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 996.453859][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 996.460076][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 996.466303][ T28] watchdog+0xf2d/0xf30 [ 996.470511][ T28] ? watchdog+0x1ed/0xf30 [ 996.474884][ T28] kthread+0x29d/0x330 [ 996.478991][ T28] ? hungtask_pm_notify+0x40/0x40 [ 996.484056][ T28] ? kthread_blkcg+0xd0/0xd0 [ 996.488703][ T28] ret_from_fork+0x1f/0x30 [ 996.493174][ T28] [ 996.496814][ T28] Kernel Offset: disabled [ 996.501151][ T28] Rebooting in 86400 seconds..