last executing test programs: 15m25.379664617s ago: executing program 0 (id=2678): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe91}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x1}, 0x94) 15m25.155588451s ago: executing program 0 (id=2683): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001380)) 15m24.898792866s ago: executing program 0 (id=2689): r0 = socket(0x22, 0x2, 0x3) sendmmsg$unix(r0, &(0x7f000000e600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x20044800) 15m24.610249333s ago: executing program 0 (id=2693): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 15m24.166317439s ago: executing program 0 (id=2697): r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 15m23.441203292s ago: executing program 0 (id=2705): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000600)={0x1, @vbi={0x4, 0x8, 0x3, 0x34325842, [0x8000, 0xffffff7f], [0x4, 0xffffffc4], 0x2}}) 15m23.028522965s ago: executing program 32 (id=2705): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000600)={0x1, @vbi={0x4, 0x8, 0x3, 0x34325842, [0x8000, 0xffffff7f], [0x4, 0xffffffc4], 0x2}}) 10m38.170951074s ago: executing program 1 (id=6574): r0 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x7068, 0x400}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) 10m37.89881839s ago: executing program 1 (id=6579): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x59555956, 0x4, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x2, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) 10m37.657365035s ago: executing program 1 (id=6585): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x101) 10m37.39310176s ago: executing program 1 (id=6590): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m36.19300545s ago: executing program 1 (id=6606): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000380)={0x8, @capture={0x0, 0x0, {0x4, 0x8001}, 0x4}}) 10m35.060232107s ago: executing program 1 (id=6620): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'trylock', ' ', 'io'}, 0xb) 10m34.741629995s ago: executing program 33 (id=6620): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'trylock', ' ', 'io'}, 0xb) 2m37.449946639s ago: executing program 6 (id=13243): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x14c, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x5c3}, {}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1000}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x0) 2m37.171108715s ago: executing program 6 (id=13248): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xff, 0xaf6, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 2m36.642930146s ago: executing program 6 (id=13256): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 2m36.128057906s ago: executing program 6 (id=13265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'ip_vti0\x00', 0x1000}) 2m35.930420858s ago: executing program 6 (id=13267): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m34.859477011s ago: executing program 6 (id=13286): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0x76, 0x0, 0x0, 0xa00}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 2m20.206769167s ago: executing program 34 (id=13286): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0x76, 0x0, 0x0, 0xa00}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 2.298061145s ago: executing program 3 (id=15403): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8102, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 2.278828987s ago: executing program 7 (id=15404): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x25, 0xffffffffffffffff, 0x4) 2.128127596s ago: executing program 3 (id=15406): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 2.095540627s ago: executing program 7 (id=15408): r0 = syz_open_dev$I2C(&(0x7f0000000140), 0xfffffffffffffffa, 0x100) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x8000ee) 1.862341491s ago: executing program 3 (id=15411): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x22202, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000100)={0x0, 0x30000, 0x0, 0xfffffffb, 0xffffffff, 0x2, 0x0, 0x20000005, 0x2, 0x3, 0x100, 0x20000009, 0x0, 0x0, 0x0}) 1.763261607s ago: executing program 7 (id=15413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="6d8bc893204ef7bf2f939f0d7f9a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.596184256s ago: executing program 2 (id=15415): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) 1.584201317s ago: executing program 3 (id=15416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414180c0002800500010000001000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000100ac14142a080003"], 0x88}}, 0x0) 1.484473833s ago: executing program 7 (id=15417): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x800, 0x0, 0x2, 0x1}, 0x20) 1.442472536s ago: executing program 5 (id=15418): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x200, 0x101) write(r0, &(0x7f0000000280)="bbd8b34a", 0x4) 1.441779546s ago: executing program 4 (id=15419): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002600)={0x24, 0x4e, 0x1, 0x0, 0x0, "", [@typed={0x500, 0x0, 0x0, 0x0, @pid}]}, 0x24}], 0x1}, 0x0) 1.3657935s ago: executing program 2 (id=15420): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x90) 1.302562174s ago: executing program 3 (id=15421): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, 0x0, 0x0) 1.258164006s ago: executing program 7 (id=15422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x4c) 1.19513286s ago: executing program 5 (id=15423): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) 1.125511694s ago: executing program 2 (id=15424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020605000000000000000000ffec000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.123459774s ago: executing program 4 (id=15425): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 1.098311436s ago: executing program 3 (id=15426): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.013992001s ago: executing program 7 (id=15427): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 914.801746ms ago: executing program 2 (id=15428): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @value64=0x1}}) 914.163037ms ago: executing program 4 (id=15429): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f}) 856.29161ms ago: executing program 5 (id=15430): r0 = syz_open_dev$audion(&(0x7f0000000040), 0xffffffffffffffe7, 0x0) ioctl$LOOP_SET_FD(r0, 0xc0045003, 0xffffffffffffffff) 779.561494ms ago: executing program 2 (id=15431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000356ffc)=0xffffff3d, 0x4) 696.065689ms ago: executing program 4 (id=15432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 598.911105ms ago: executing program 5 (id=15433): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f00000054c0)={0x2, 0x12, 0x1, 0x6, 0x6, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x7, 0x1, 0x2, 0x7, 0x3}]}, 0x30}}, 0x4000080) 598.350775ms ago: executing program 2 (id=15434): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="18032e000000ba08"], 0x0, 0x0, 0x0, 0x0, 0x0}) 281.797333ms ago: executing program 5 (id=15435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xf4}}, 0x0) 252.142586ms ago: executing program 4 (id=15436): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000140)=0x3) 48.461517ms ago: executing program 4 (id=15437): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x0, 0x0, 0xa21b}) 0s ago: executing program 5 (id=15438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001180)=@report={0x4c, 0x20, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2b, {@in=@empty, @in6=@empty, 0x4e21, 0x5, 0x4e21, 0x0, 0xa, 0x80, 0x0, 0x2c}}}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): r 52 [ 1185.845315][T32714] cdc_acm 4-1:1.0: invalid descriptor buffer length [ 1185.865474][T32714] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1185.888228][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 1185.911294][ T4325] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1185.911998][T32714] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1185.927693][T32714] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 1185.955394][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.963515][ T4325] usb 5-1: Product: syz [ 1185.978105][ T4325] usb 5-1: Manufacturer: syz [ 1185.982859][ T4325] usb 5-1: SerialNumber: syz [ 1186.009818][ T4325] usb 5-1: config 0 descriptor?? [ 1186.034787][ T4325] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1186.054510][T32714] usb 4-1: USB disconnect, device number 108 [ 1186.099106][ T4395] udevd[4395]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1186.254359][ T1864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1186.277263][ T1864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1186.288303][ T1864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1186.298915][ T1864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1186.309388][ T1864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1186.317007][ T1864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1186.354459][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1186.365194][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1186.372671][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1186.382659][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1186.392551][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1186.400695][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1186.425330][ T4325] gspca_topro: reg_w err -71 [ 1186.460004][ T4325] gspca_topro: Sensor soi763a [ 1186.512829][ T4325] usb 5-1: USB disconnect, device number 79 [ 1187.022276][T32714] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1187.203064][T32714] usb 3-1: Using ep0 maxpacket: 32 [ 1187.211217][T32714] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1187.238805][T32714] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1187.239145][ T1891] netlink: 192 bytes leftover after parsing attributes in process `syz.5.13521'. [ 1187.269990][T32714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1187.300721][T32714] usb 3-1: config 1 has no interface number 0 [ 1187.312125][T32714] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1187.323754][T32714] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1187.334970][T32714] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1187.362326][T32714] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1187.381779][T32714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.418462][T32714] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1187.464819][ T1863] chnl_net:caif_netlink_parms(): no params data found [ 1187.539499][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.546032][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.615218][T32714] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 1187.631987][T32714] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1187.660637][T32714] snd_usb_pod: probe of 3-1:1.1 failed with error -90 [ 1187.716660][ T1863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.726998][ T1863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.735475][ T1863] device bridge_slave_0 entered promiscuous mode [ 1187.765892][ T1863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.776510][ T1863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.794954][ T1863] device bridge_slave_1 entered promiscuous mode [ 1187.813185][T23689] usb 3-1: USB disconnect, device number 100 [ 1187.872886][ T1863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.898694][ T1907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13526'. [ 1187.953258][ T1863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.039816][ T1863] team0: Port device team_slave_0 added [ 1188.047280][ T1912] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (253) [ 1188.059752][ T1863] team0: Port device team_slave_1 added [ 1188.096422][ T1863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.103747][ T1863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.130565][ T1863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.143671][ T1863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.151178][ T1863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.181387][ T1863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.283478][ T1863] device hsr_slave_0 entered promiscuous mode [ 1188.291787][ T1863] device hsr_slave_1 entered promiscuous mode [ 1188.355595][ T1863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.363423][ T1863] Cannot create hsr debugfs directory [ 1188.382784][ T1864] Bluetooth: hci5: command 0x0409 tx timeout [ 1188.960710][ T1863] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1188.984783][ T1863] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1189.009719][ T1863] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1189.053761][ T1863] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1189.376778][ T1863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.406437][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1189.438397][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1189.451179][ T4255] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1189.456398][ T1863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.485176][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1189.497692][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1189.519130][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.526339][T17014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.593548][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1189.613336][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1189.651292][ T4255] usb 6-1: Using ep0 maxpacket: 16 [ 1189.661633][ T4255] usb 6-1: config 0 has an invalid interface number: 102 but max is 0 [ 1189.663640][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1189.714091][ T4255] usb 6-1: config 0 has no interface number 0 [ 1189.733375][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.740596][T17014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.746924][ T4255] usb 6-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 1189.776190][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1189.792004][ T4255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.813913][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1189.830693][ T4255] usb 6-1: Product: syz [ 1189.841534][ T4255] usb 6-1: Manufacturer: syz [ 1189.846233][ T4255] usb 6-1: SerialNumber: syz [ 1189.852566][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1189.875602][ T1957] loop2: detected capacity change from 0 to 1024 [ 1189.890654][ T4255] usb 6-1: config 0 descriptor?? [ 1189.911114][ T4255] usb-storage 6-1:0.102: USB Mass Storage device detected [ 1189.946859][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1189.956414][ T4255] usb-storage 6-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 1189.986832][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1190.021784][ T4255] usb-storage 6-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1190.021784][ T4255] Please send a copy of this message to and [ 1190.059797][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.099398][ T1957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1190.118450][ T1964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1190.156866][ T1957] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #11: comm syz.2.13544: directory missing '.' [ 1190.183366][ T1863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1190.203197][ T1863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.258191][ T4255] usb 6-1: USB disconnect, device number 53 [ 1190.268859][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1190.287409][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.309683][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1190.316658][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.361268][ T1864] Bluetooth: hci5: command 0x041b tx timeout [ 1190.393904][ T5103] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1190.413533][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1190.461641][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1190.490607][T17014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1190.594397][ T5103] usb 5-1: Using ep0 maxpacket: 16 [ 1190.602021][ T5103] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1190.628705][ T5103] usb 5-1: config 0 has no interface number 0 [ 1190.657336][ T5103] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1190.698990][ T5103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.724239][ T5103] usb 5-1: Product: syz [ 1190.746633][ T5103] usb 5-1: Manufacturer: syz [ 1190.751324][ T5103] usb 5-1: SerialNumber: syz [ 1190.792762][ T5103] usb 5-1: config 0 descriptor?? [ 1190.813852][ T5103] hub 5-1:0.132: bad descriptor, ignoring hub [ 1190.820024][ T5103] hub: probe of 5-1:0.132 failed with error -5 [ 1190.868874][ T5103] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input62 [ 1191.197103][T32714] usb 5-1: USB disconnect, device number 80 [ 1191.314786][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1191.337222][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1191.378562][ T1863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.659331][ T2011] loop2: detected capacity change from 0 to 256 [ 1191.710885][ T2011] FAT-fs (loop2): Directory bread(block 64) failed [ 1191.747052][ T2011] FAT-fs (loop2): Directory bread(block 65) failed [ 1191.773919][ T2011] FAT-fs (loop2): Directory bread(block 66) failed [ 1191.781822][ T2011] FAT-fs (loop2): Directory bread(block 67) failed [ 1191.879200][ T2011] FAT-fs (loop2): Directory bread(block 68) failed [ 1191.917668][ T2011] FAT-fs (loop2): Directory bread(block 69) failed [ 1191.979477][ T2011] FAT-fs (loop2): Directory bread(block 70) failed [ 1192.022113][ T2011] FAT-fs (loop2): Directory bread(block 71) failed [ 1192.058612][ T2011] FAT-fs (loop2): Directory bread(block 72) failed [ 1192.089705][ T2011] FAT-fs (loop2): Directory bread(block 73) failed [ 1192.251614][T32714] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1192.344632][ T1864] Bluetooth: hci5: command 0x040f tx timeout [ 1192.475387][T32714] usb 4-1: Using ep0 maxpacket: 16 [ 1192.491650][T32714] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 1192.517997][T32714] usb 4-1: config 0 has no interface number 0 [ 1192.558797][T32714] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 1192.562531][ T2035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.600158][T32714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.631016][T32714] usb 4-1: Product: syz [ 1192.652044][T32714] usb 4-1: Manufacturer: syz [ 1192.656756][T32714] usb 4-1: SerialNumber: syz [ 1192.691115][T32714] usb 4-1: config 0 descriptor?? [ 1192.710042][T32714] usb-storage 4-1:0.102: USB Mass Storage device detected [ 1192.757496][T32714] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 1192.765407][T32714] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1192.765407][T32714] Please send a copy of this message to and [ 1192.844386][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1192.883342][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1192.915414][ T2045] tc_dump_action: action bad kind [ 1192.951001][ T2043] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1193.014154][T32714] usb 4-1: USB disconnect, device number 109 [ 1193.272675][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1193.291436][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1193.321964][ T1863] device veth0_vlan entered promiscuous mode [ 1193.333595][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1193.344800][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1193.390107][ T1863] device veth1_vlan entered promiscuous mode [ 1193.469726][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1193.486050][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1193.537728][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1193.558243][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1193.611365][ T1863] device veth0_macvtap entered promiscuous mode [ 1193.643539][ T1863] device veth1_macvtap entered promiscuous mode [ 1193.730373][ T1863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.756881][ T1863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.784856][ T1863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.832697][ T1863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.834897][ T2067] binder: 2066:2067 unknown command 0 [ 1193.862298][ T1863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.871165][ T2067] binder: 2066:2067 ioctl c0306201 200000000480 returned -22 [ 1193.890192][ T4255] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1193.899307][ T1863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.912678][ T1863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.932484][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1193.942803][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1193.961432][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1193.982326][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1194.035162][ T1863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.056072][ T1863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.076499][ T1863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.085283][ T4255] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 1194.113499][ T1863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.137687][ T4255] usb 4-1: config 160 has no interface number 0 [ 1194.144114][ T1863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.144136][ T4255] usb 4-1: config 160 interface 200 has no altsetting 0 [ 1194.175960][ T1863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.216532][ T4255] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1194.236100][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.242897][ T1863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.258044][ T4255] usb 4-1: Product: syz [ 1194.276109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1194.293128][ T4255] usb 4-1: Manufacturer: syz [ 1194.298862][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1194.318822][ T1864] Bluetooth: hci5: command 0x0419 tx timeout [ 1194.333882][ T4255] usb 4-1: SerialNumber: syz [ 1194.362769][ T1863] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.390237][ T1863] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.408801][ T1863] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.420139][ T2077] loop5: detected capacity change from 0 to 4096 [ 1194.426570][ T1863] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.450941][ T2079] device sit0 left promiscuous mode [ 1194.472282][ T2077] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1194.590497][ T4255] usb 4-1: MIDIStreaming interface descriptor not found [ 1194.698659][ T4255] usb 4-1: USB disconnect, device number 110 [ 1194.720809][T17016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.756781][T17016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.821324][T17016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1194.921155][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.945598][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.954781][ T2082] loop2: detected capacity change from 0 to 4096 [ 1195.033312][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1195.138641][ T2082] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1195.138641][ T2082] [ 1195.283356][ T4614] udevd[4614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1195.460697][ T2095] netlink: 'syz.2.13594': attribute type 79 has an invalid length. [ 1195.634727][ T5103] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1195.681346][ T2100] netlink: 25 bytes leftover after parsing attributes in process `syz.3.13596'. [ 1195.814080][ T5103] usb 6-1: Using ep0 maxpacket: 8 [ 1195.822226][ T5103] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1195.859067][ T5103] usb 6-1: config 179 has no interface number 0 [ 1195.893848][ T5103] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1195.950973][ T5103] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1195.981645][ T5103] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1196.000891][ T5103] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1196.029079][ T5103] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1196.051692][ T5103] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1196.059315][ T5103] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1196.092391][ T5103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.127966][ T5103] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input63 [ 1196.393143][ T5102] usb 6-1: USB disconnect, device number 54 [ 1196.421276][ T5102] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1196.598068][ T2124] netlink: 'syz.4.13608': attribute type 21 has an invalid length. [ 1197.156834][ T2141] tmpfs: Bad value for 'mpol' [ 1197.488811][ T2145] loop2: detected capacity change from 0 to 4096 [ 1197.565153][ T2145] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1197.684657][ T2145] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1197.778473][ T2160]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1197.844637][ T2162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13627'. [ 1197.873758][ T2162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13627'. [ 1198.132665][ T2170] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13631'. [ 1198.900753][ T5102] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1199.140533][ T5102] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1199.166871][ T5102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1199.193258][ T5102] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1199.214546][ T5102] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1199.249439][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.262231][ T5102] usb 3-1: Product: syz [ 1199.266499][ T5102] usb 3-1: Manufacturer: syz [ 1199.280872][ T5102] usb 3-1: SerialNumber: syz [ 1199.320630][ T5102] usb 3-1: config 0 descriptor?? [ 1199.349420][ T2188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1199.540029][ T2212] ubi5: attaching mtd0 [ 1199.547487][ T2212] ubi5: scanning is finished [ 1199.554645][ T2212] ubi5: empty MTD device detected [ 1199.625207][ T5102] usb 3-1: USB disconnect, device number 101 [ 1199.739585][ T2212] ubi5: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1199.786434][ T2212] ubi5: PEB size: 4096 bytes (4 KiB), LEB size: 1689 bytes [ 1199.814729][ T2212] ubi5: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1199.821866][ T2212] ubi5: VID header offset: 2343 (aligned 2343), data offset: 2407 [ 1199.840212][ T2212] ubi5: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1199.869714][ T2212] ubi5: user volume: 0, internal volumes: 1, max. volumes count: 9 [ 1199.899172][ T2212] ubi5: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1208606703 [ 1199.968872][ T2212] ubi5: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1200.009010][ T2217] ubi5: background thread "ubi_bgt5d" started, PID 2217 [ 1200.161694][ T2223] loop7: detected capacity change from 0 to 2048 [ 1200.278863][ T2223] loop7: p1 < > p3 [ 1200.300069][ T2223] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1200.721390][ T2241] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1200.727507][ T2241] [U] J"—e:ÀÆ" [ 1200.852564][ T4609] udevd[4609]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1200.862794][ T4332] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1200.880266][ T4431] udevd[4431]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1200.989373][ T2243] loop5: detected capacity change from 0 to 4096 [ 1201.025375][ T2243] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1201.055127][ T4332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.078831][ T4332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1201.125464][ T4332] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1201.175455][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1201.215577][ T4332] usb 5-1: SerialNumber: syz [ 1201.436453][ T4332] usb 5-1: 0:2 : does not exist [ 1201.446982][ T4332] usb 5-1: unit 5: unexpected type 0x03 [ 1201.529621][ T4332] usb 5-1: USB disconnect, device number 81 [ 1201.595915][ T2259] loop2: detected capacity change from 0 to 256 [ 1201.716826][ T2259] FAT-fs (loop2): Directory bread(block 64) failed [ 1201.781250][ T2259] FAT-fs (loop2): Directory bread(block 65) failed [ 1201.807053][ T2259] FAT-fs (loop2): Directory bread(block 66) failed [ 1201.833056][ T2259] FAT-fs (loop2): Directory bread(block 67) failed [ 1201.850087][ T2259] FAT-fs (loop2): Directory bread(block 68) failed [ 1201.860591][ T2259] FAT-fs (loop2): Directory bread(block 69) failed [ 1201.874725][ T4609] udevd[4609]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1201.920237][ T2259] FAT-fs (loop2): Directory bread(block 70) failed [ 1201.926854][ T2259] FAT-fs (loop2): Directory bread(block 71) failed [ 1202.004555][ T2259] FAT-fs (loop2): Directory bread(block 72) failed [ 1202.053451][ T2259] FAT-fs (loop2): Directory bread(block 73) failed [ 1202.466777][ T2275] loop7: detected capacity change from 0 to 2048 [ 1202.542976][ T2275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1202.803338][ T2284] IPv6: sit2: Disabled Multicast RS [ 1203.793189][ T2319] loop5: detected capacity change from 0 to 256 [ 1203.848641][ T2319] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 1204.012678][ T2321] loop7: detected capacity change from 0 to 512 [ 1204.125585][ T2323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1204.157519][ T2321] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #15: comm syz.7.13705: corrupted inode contents [ 1204.186538][ T2323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1204.196968][ T2321] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1204.256922][ T2321] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #15: comm syz.7.13705: corrupted inode contents [ 1204.302410][ T2321] EXT4-fs error (device loop7): ext4_evict_inode:327: inode #15: comm syz.7.13705: mark_inode_dirty error [ 1204.373061][ T2321] EXT4-fs (loop7): 1 orphan inode deleted [ 1204.416423][ T2321] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1204.592823][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1204.736931][ T2340] loop5: detected capacity change from 0 to 4096 [ 1204.785685][ T2340] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1204.938620][ T2340] ntfs3: loop5: failed to convert "c46c" to cp857 [ 1205.326472][ T2365] loop2: detected capacity change from 0 to 512 [ 1205.474806][ T2365] syz.2.13724: attempt to access beyond end of device [ 1205.474806][ T2365] loop2: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 1205.517991][ T2365] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 1205.557330][ T2365] FAT-fs (loop2): Filesystem has been set read-only [ 1205.578137][ T2365] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 1206.050992][ T2385] tc_dump_action: action bad kind [ 1206.303053][ T2396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13736'. [ 1206.780133][ T2414] ./file0: Can't open blockdev [ 1206.805980][ T2417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13745'. [ 1206.853875][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1206.853893][ T26] audit: type=1326 audit(1259.021:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2420 comm="syz.7.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1206.921577][ T26] audit: type=1326 audit(1259.021:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2420 comm="syz.7.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1206.997027][ T26] audit: type=1326 audit(1259.073:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2420 comm="syz.7.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1207.121408][ T26] audit: type=1326 audit(2000000000.000:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2420 comm="syz.7.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1207.247164][ T26] audit: type=1326 audit(2000000000.000:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2420 comm="syz.7.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1207.491817][ T2444] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13756'. [ 1207.530788][ T2444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13756'. [ 1207.561371][ T2447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13757'. [ 1207.578897][ T2444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13756'. [ 1207.777505][ T2453] netlink: 'syz.2.13760': attribute type 20 has an invalid length. [ 1207.854302][ T2453] IPv6: NLM_F_CREATE should be specified when creating new route [ 1208.567481][ T2482] loop5: detected capacity change from 0 to 4096 [ 1208.642679][ T2482] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1208.695889][ T2482] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1208.753237][ T2493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13776'. [ 1208.780653][ T2482] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1208.838199][ T2482] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1208.931451][ T2482] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1209.047499][ T2482] ntfs: volume version 3.1. [ 1209.068116][ T2501] device batadv1 entered promiscuous mode [ 1209.423769][ T2518] loop7: detected capacity change from 0 to 512 [ 1209.554237][ T2518] syz.7.13786: attempt to access beyond end of device [ 1209.554237][ T2518] loop7: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 1209.628230][ T2518] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 1209.636533][ T4332] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1209.673492][ T2518] FAT-fs (loop7): Filesystem has been set read-only [ 1209.697474][ T2518] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 1209.708359][ T2527] netlink: 'syz.3.13789': attribute type 2 has an invalid length. [ 1209.839389][ T2528] loop2: detected capacity change from 0 to 4096 [ 1209.845982][ T4332] usb 5-1: Using ep0 maxpacket: 8 [ 1209.858569][ T4332] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1209.903188][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.941097][ T4332] usb 5-1: Product: syz [ 1209.960677][ T2533] loop7: detected capacity change from 0 to 256 [ 1209.971288][ T4332] usb 5-1: Manufacturer: syz [ 1209.975955][ T4332] usb 5-1: SerialNumber: syz [ 1209.995070][ T4332] usb 5-1: config 0 descriptor?? [ 1210.023484][ T4332] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1210.034118][ T2533] exfat: Deprecated parameter 'namecase' [ 1210.073074][ T2533] exfat: Deprecated parameter 'utf8' [ 1210.087385][ T2533] exfat: Deprecated parameter 'utf8' [ 1210.141213][ T2533] exfat: Deprecated parameter 'namecase' [ 1210.245789][ T2533] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 1210.403801][ T4332] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 1210.415010][ T4332] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1210.462714][ T4332] usb 5-1: USB disconnect, device number 82 [ 1211.206083][ T2576] loop7: detected capacity change from 0 to 512 [ 1211.285075][ T4609] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1211.321648][T23689] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1211.523524][T23689] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.560402][T23689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.607563][T23689] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1211.644274][T23689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1211.693542][T23689] usb 6-1: SerialNumber: syz [ 1211.764864][ T2589] delete_channel: no stack [ 1211.913046][T23689] usb 6-1: 0:2 : does not exist [ 1211.918041][T23689] usb 6-1: unit 5: unexpected type 0x03 [ 1211.974479][T23689] usb 6-1: USB disconnect, device number 55 [ 1212.218569][ T4431] udevd[4431]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.631421][ T2610] loop7: detected capacity change from 0 to 256 [ 1212.687969][ T2612] loop5: detected capacity change from 0 to 1024 [ 1212.695748][ T2610] FAT-fs (loop7): Directory bread(block 64) failed [ 1212.717741][ T2610] FAT-fs (loop7): Directory bread(block 65) failed [ 1212.751097][ T2610] FAT-fs (loop7): Directory bread(block 66) failed [ 1212.783936][ T2610] FAT-fs (loop7): Directory bread(block 67) failed [ 1212.808784][ T2610] FAT-fs (loop7): Directory bread(block 68) failed [ 1212.833381][ T2610] FAT-fs (loop7): Directory bread(block 69) failed [ 1212.860576][ T2610] FAT-fs (loop7): Directory bread(block 70) failed [ 1212.903199][ T2610] FAT-fs (loop7): Directory bread(block 71) failed [ 1212.959133][ T2610] FAT-fs (loop7): Directory bread(block 72) failed [ 1212.998753][ T2610] FAT-fs (loop7): Directory bread(block 73) failed [ 1213.039970][ T2623] netlink: 'syz.4.13827': attribute type 4 has an invalid length. [ 1213.055577][ T2622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1213.073289][ T2567] loop2: detected capacity change from 0 to 65536 [ 1213.143967][ T2625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13829'. [ 1213.198428][ T2625] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13829'. [ 1213.217853][ T2567] XFS (loop2): Mounting V5 Filesystem [ 1213.328003][ T2567] XFS (loop2): Ending clean mount [ 1213.399163][T23689] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 1213.427268][T23689] XFS (loop2): Unmount and run xfs_repair [ 1213.473366][T23689] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1213.492100][T23689] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1213.511524][T23689] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1213.522068][T23689] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1213.531054][T23689] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1213.560152][T23689] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1213.596402][T23689] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1213.616418][T23689] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1213.630046][T23689] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1213.648212][ T2567] XFS (loop2): metadata I/O error in "xfs_read_agf+0x2b6/0x630" at daddr 0x1 len 1 error 74 [ 1213.693655][ T2644] kAFS: unable to lookup cell '@mTsyz0' [ 1213.699644][ T2567] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1213.769964][ T2567] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1213.930049][ T4266] XFS (loop2): Unmounting Filesystem [ 1214.549153][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1214.549170][ T26] audit: type=1326 audit(2000000008.009:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2662 comm="syz.3.13842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1214.636924][ T26] audit: type=1326 audit(2000000008.009:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2662 comm="syz.3.13842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1214.750488][ T26] audit: type=1326 audit(2000000008.093:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2662 comm="syz.3.13842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1214.852166][ T26] audit: type=1326 audit(2000000008.093:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2662 comm="syz.3.13842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1214.960776][ T26] audit: type=1326 audit(2000000008.093:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2662 comm="syz.3.13842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1215.338785][ T2653] loop5: detected capacity change from 0 to 32768 [ 1215.485360][ T2691] loop2: detected capacity change from 0 to 4096 [ 1215.494109][ T2691] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1215.585285][ T2653] XFS (loop5): Mounting V5 Filesystem [ 1215.699596][ T2653] XFS (loop5): Ending clean mount [ 1215.751572][ T2706] tc_dump_action: action bad kind [ 1215.794182][T10720] XFS (loop5): Unmounting Filesystem [ 1215.922345][ T4255] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1216.124372][ T4255] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.140494][ T4255] usb 8-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1216.157977][ T4255] usb 8-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1216.171956][ T4255] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1216.213404][ T4255] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1216.234063][ T4255] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1216.251905][ T4255] usb 8-1: SerialNumber: syz [ 1216.279291][ T4255] cdc_acm 8-1:1.0: invalid descriptor buffer length [ 1216.297403][ T4255] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1216.334919][ T4255] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 1216.355216][ T4255] cdc_acm: probe of 8-1:1.0 failed with error -22 [ 1216.495019][ T4255] usb 8-1: USB disconnect, device number 2 [ 1216.741277][ T2724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1217.011475][ T2733] loop2: detected capacity change from 0 to 1024 [ 1217.153686][ T2733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1217.154668][ T2739] loop5: detected capacity change from 0 to 1024 [ 1217.194393][ T2733] ext4 filesystem being mounted at /2745/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.487467][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1217.804647][ T2754] device netdevsim0 entered promiscuous mode [ 1217.827447][ T2754] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13874'. [ 1218.067397][ T2762] loop5: detected capacity change from 0 to 1024 [ 1218.074743][ T2762] EXT4-fs: Ignoring removed oldalloc option [ 1218.142366][ T6354] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1218.194915][ T2762] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1218.257460][ T2762] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.5.13878: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 1218.325480][ T6354] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1218.339822][ T6354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1218.346037][ T2762] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem [ 1218.371797][ T2762] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.13878: Deleting old file: nlink 4, error=-117 [ 1218.403509][ T6354] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1218.430173][ T6354] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1218.454155][ T6354] usb 5-1: Product: syz [ 1218.464082][ T6354] usb 5-1: Manufacturer: syz [ 1218.476784][ T6354] usb 5-1: SerialNumber: syz [ 1218.497944][ T6354] usb 5-1: config 0 descriptor?? [ 1218.544366][ T6354] usb 5-1: selecting invalid altsetting 0 [ 1218.550354][ T2788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1218.705401][T10720] EXT4-fs (loop5): unmounting filesystem. [ 1218.785142][ T6354] usb 5-1: USB disconnect, device number 83 [ 1219.108209][ T2814] loop2: detected capacity change from 0 to 512 [ 1219.160929][ T2814] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1219.212317][ T2814] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1219.228412][ T2814] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.13892: Corrupt directory, running e2fsck is recommended [ 1219.292431][ T2814] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1219.302803][ T2814] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.13892: corrupted in-inode xattr [ 1219.324253][ T2814] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.13892: couldn't read orphan inode 15 (err -117) [ 1219.360004][ T2814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1219.397984][ T2814] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1219.456703][ T2814] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1219.495039][ T2814] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.13892: Corrupt directory, running e2fsck is recommended [ 1219.608790][ T2825] loop7: detected capacity change from 0 to 1024 [ 1219.651924][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1219.669536][ T2825] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1219.897746][ T2837] loop5: detected capacity change from 0 to 64 [ 1220.019448][ T2842] openvswitch: netlink: Message has 1 unknown bytes. [ 1220.301050][ T2850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1220.316019][ T2852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13907'. [ 1220.410950][ T2854] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1220.926401][ T2873] loop2: detected capacity change from 0 to 512 [ 1221.016482][ T2873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1221.082056][ T2873] ext4 filesystem being mounted at /2757/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.336140][ T2890] loop7: detected capacity change from 0 to 1024 [ 1221.414484][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1221.467276][ T2890] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1221.572318][ T2890] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.844920][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1222.129086][ T2920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13936'. [ 1222.289828][ T2922] loop7: detected capacity change from 0 to 512 [ 1222.389308][ T2922] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1222.432339][ T2922] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.712074][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1222.976920][ T2911] loop5: detected capacity change from 0 to 32768 [ 1223.072783][ T2939] loop2: detected capacity change from 0 to 4096 [ 1223.091740][ T2911] JBD2: Ignoring recovery information on journal [ 1223.121407][ T2947] xt_NFQUEUE: number of total queues is 0 [ 1223.221027][ T2939] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1223.357918][ T2911] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1223.515556][ T2939] ntfs3: loop2: failed to convert "c46c" to macroman [ 1223.826539][T10720] ocfs2: Unmounting device (7,5) on (node local) [ 1224.374980][ T2980] netlink: 'syz.2.13963': attribute type 21 has an invalid length. [ 1224.680160][ T2992] sctp: [Deprecated]: syz.3.13969 (pid 2992) Use of int in maxseg socket option. [ 1224.680160][ T2992] Use struct sctp_assoc_value instead [ 1224.853136][ T2998] loop5: detected capacity change from 0 to 256 [ 1226.016415][ T3035] loop2: detected capacity change from 0 to 4096 [ 1226.067652][ T3035] EXT4-fs: Ignoring removed mblk_io_submit option [ 1226.088536][ T3035] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1226.135905][ T3035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1226.245038][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1226.661896][ T3058] loop2: detected capacity change from 0 to 256 [ 1226.789537][ T3058] FAT-fs (loop2): Directory bread(block 64) failed [ 1226.828865][ T3058] FAT-fs (loop2): Directory bread(block 65) failed [ 1226.858749][ T3058] FAT-fs (loop2): Directory bread(block 66) failed [ 1226.865372][ T3058] FAT-fs (loop2): Directory bread(block 67) failed [ 1226.889517][ T3058] FAT-fs (loop2): Directory bread(block 68) failed [ 1226.930316][ T3058] FAT-fs (loop2): Directory bread(block 69) failed [ 1226.972891][ T3058] FAT-fs (loop2): Directory bread(block 70) failed [ 1226.979515][ T3058] FAT-fs (loop2): Directory bread(block 71) failed [ 1226.990262][ T3066] kAFS: unparsable volume name [ 1227.056077][ T3058] FAT-fs (loop2): Directory bread(block 72) failed [ 1227.074882][ T3058] FAT-fs (loop2): Directory bread(block 73) failed [ 1227.746151][ T3024] loop5: detected capacity change from 0 to 65536 [ 1227.932724][ T3024] XFS (loop5): Mounting V5 Filesystem [ 1228.100410][ T3024] XFS (loop5): Ending clean mount [ 1228.166735][ T3024] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 1228.201408][ T3024] XFS (loop5): Unmount and run xfs_repair [ 1228.229917][ T3024] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1228.264811][ T3024] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1228.310239][ T3024] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1228.383325][ T3024] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1228.419634][ T3024] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1228.451675][ T3024] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1228.540725][ T3024] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1228.565049][ T3024] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1228.579295][ T3118] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14027'. [ 1228.588840][ T3024] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1228.612829][ T3024] XFS (loop5): metadata I/O error in "xfs_read_agf+0x2b6/0x630" at daddr 0x1 len 1 error 74 [ 1228.643825][ T3024] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1228.686980][ T3024] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1228.850319][T10720] XFS (loop5): Unmounting Filesystem [ 1228.861460][ T3131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14031'. [ 1228.879505][ T3118] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14027'. [ 1229.301699][ T3140] loop7: detected capacity change from 0 to 2048 [ 1229.396007][ T4431] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1229.752648][T23689] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1229.761779][ T3155] 8021q: VLANs not supported on hsr0 [ 1229.963453][T23689] usb 8-1: Using ep0 maxpacket: 16 [ 1229.970574][T23689] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1229.997124][T23689] usb 8-1: config 0 has no interface number 0 [ 1230.016356][T23689] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0xC has invalid maxpacket 37835, setting to 1024 [ 1230.058131][T23689] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1230.094432][T23689] usb 8-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1230.130202][T23689] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1230.153717][T23689] usb 8-1: Product: syz [ 1230.153758][T23689] usb 8-1: SerialNumber: syz [ 1230.155642][T23689] usb 8-1: config 0 descriptor?? [ 1230.156336][ T3140] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1230.361369][T23689] usb 8-1: invalid MIDI in EP 0 [ 1230.387194][ T3171] netlink: 'syz.5.14050': attribute type 1 has an invalid length. [ 1230.395256][ T3171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14050'. [ 1230.490794][T23689] snd-usb-audio: probe of 8-1:0.2 failed with error -22 [ 1230.544444][T23689] usb 8-1: USB disconnect, device number 3 [ 1230.590738][ T4614] udevd[4614]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.780737][ T26] audit: type=1326 audit(2000000025.048:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3182 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1230.870947][ T26] audit: type=1326 audit(2000000025.079:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3182 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1230.937235][ T26] audit: type=1326 audit(2000000025.121:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3182 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1231.024368][ T26] audit: type=1326 audit(2000000025.121:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3182 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1231.119741][ T26] audit: type=1326 audit(2000000025.121:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3182 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1231.438078][ T3202] IPv6: sit4: Disabled Multicast RS [ 1231.996051][ T3223] loop7: detected capacity change from 0 to 256 [ 1232.124243][ T3223] FAT-fs (loop7): Directory bread(block 64) failed [ 1232.159998][ T3223] FAT-fs (loop7): Directory bread(block 65) failed [ 1232.182984][ T3223] FAT-fs (loop7): Directory bread(block 66) failed [ 1232.189656][ T3223] FAT-fs (loop7): Directory bread(block 67) failed [ 1232.256283][ T3223] FAT-fs (loop7): Directory bread(block 68) failed [ 1232.287982][ T3223] FAT-fs (loop7): Directory bread(block 69) failed [ 1232.323884][ T3223] FAT-fs (loop7): Directory bread(block 70) failed [ 1232.344827][ T3223] FAT-fs (loop7): Directory bread(block 71) failed [ 1232.351557][ T3223] FAT-fs (loop7): Directory bread(block 72) failed [ 1232.430775][ T3223] FAT-fs (loop7): Directory bread(block 73) failed [ 1232.524868][ T3240] netlink: 216 bytes leftover after parsing attributes in process `syz.3.14084'. [ 1232.670026][ T3242] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 1232.766308][ T3246] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 1233.310800][ T3231] loop5: detected capacity change from 0 to 32768 [ 1233.362406][ T3264] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 1233.391137][ T26] audit: type=1326 audit(2000000027.788:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1233.422139][ T3264] overlayfs: overlapping lowerdir path [ 1233.493309][ T26] audit: type=1326 audit(2000000027.819:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1233.518921][ T3231] XFS (loop5): Mounting V5 Filesystem [ 1233.557804][ T26] audit: type=1326 audit(2000000027.819:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1233.598746][ T26] audit: type=1326 audit(2000000027.819:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1233.687664][ T3231] XFS (loop5): Ending clean mount [ 1233.718636][ T3231] XFS (loop5): Quotacheck needed: Please wait. [ 1233.858363][ T3285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14102'. [ 1233.887282][ T3231] XFS (loop5): Quotacheck: Done. [ 1233.926316][ T3285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14102'. [ 1233.991767][T10720] XFS (loop5): Unmounting Filesystem [ 1234.756682][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.764349][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.813754][ T3312] device bridge0 entered promiscuous mode [ 1234.855358][ T3312] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1234.890914][ T5102] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1235.096655][ T3324] 9pnet: Found fid 0 not clunked [ 1235.101894][ T5102] usb 5-1: Using ep0 maxpacket: 16 [ 1235.115155][ T5102] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.133945][ T5102] usb 5-1: config 0 has no interface number 0 [ 1235.140203][ T5102] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xC has invalid maxpacket 37835, setting to 1024 [ 1235.211791][ T5102] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1235.250136][ T5102] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1235.268376][ T3326] loop7: detected capacity change from 0 to 16 [ 1235.278979][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1235.302810][ T3326] erofs: (device loop7): mounted with root inode @ nid 36. [ 1235.337292][ T5102] usb 5-1: Product: syz [ 1235.341635][ T5102] usb 5-1: SerialNumber: syz [ 1235.410366][ T5102] usb 5-1: config 0 descriptor?? [ 1235.436438][ T3304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1235.651208][ T5102] usb 5-1: invalid MIDI in EP 0 [ 1235.757120][ T5102] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 1235.811779][ T5102] usb 5-1: USB disconnect, device number 84 [ 1235.898213][ T3343] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14131'. [ 1236.050946][ T4394] udevd[4394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1237.522667][ T3409] netlink: 168 bytes leftover after parsing attributes in process `syz.2.14158'. [ 1237.854725][ T3419] loop7: detected capacity change from 0 to 128 [ 1237.903852][ T3419] autofs4:pid:3419:autofs_fill_super: called with bogus options [ 1238.289208][ T3427] overlayfs: unrecognized mount option "\" or missing value [ 1239.126487][ T3397] loop5: detected capacity change from 0 to 65536 [ 1239.265378][ T26] audit: type=1326 audit(2000000033.961:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1239.290147][ T3397] XFS (loop5): Mounting V5 Filesystem [ 1239.308141][ T26] audit: type=1326 audit(2000000033.992:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1239.375687][ T3397] XFS (loop5): Ending clean mount [ 1239.478699][ T26] audit: type=1326 audit(2000000033.992:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1239.571126][ T26] audit: type=1326 audit(2000000033.992:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1239.618633][T10720] XFS (loop5): Unmounting Filesystem [ 1239.662274][ T26] audit: type=1326 audit(2000000033.992:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1239.746566][ T3474] netlink: 'syz.4.14185': attribute type 4 has an invalid length. [ 1239.813976][ T26] audit: type=1326 audit(2000000033.992:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1239.917777][ T26] audit: type=1326 audit(2000000033.992:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1240.019641][ T26] audit: type=1326 audit(2000000033.992:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3462 comm="syz.7.14181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1240.507169][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14195'. [ 1240.749001][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14200'. [ 1241.355975][ T3521] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1242.583221][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14229'. [ 1243.264653][ T3590] netlink: 'syz.3.14243': attribute type 1 has an invalid length. [ 1243.328930][ T3590] netlink: 'syz.3.14243': attribute type 2 has an invalid length. [ 1243.642700][ T3606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14250'. [ 1243.990952][ T3616] netlink: 71 bytes leftover after parsing attributes in process `syz.4.14255'. [ 1244.461638][ T3643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14266'. [ 1244.470787][ T3643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14266'. [ 1244.684565][ T26] audit: type=1326 audit(2000000039.650:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.5.14269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1244.837989][ T26] audit: type=1326 audit(2000000039.682:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.5.14269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1244.947357][ T26] audit: type=1326 audit(2000000039.692:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.5.14269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1245.035082][ T26] audit: type=1326 audit(2000000039.692:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.5.14269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1245.238227][ T3672] netlink: 'syz.5.14279': attribute type 1 has an invalid length. [ 1245.976266][ T3702] tmpfs: Bad value for 'mpol' [ 1246.074108][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.080486][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.353225][ T3713] netlink: 6 bytes leftover after parsing attributes in process `syz.4.14300'. [ 1246.440966][ T3713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1246.935229][ T3734] loop2: detected capacity change from 0 to 256 [ 1247.081688][ T3734] FAT-fs (loop2): Directory bread(block 64) failed [ 1247.128270][ T3734] FAT-fs (loop2): Directory bread(block 65) failed [ 1247.147610][ T3734] FAT-fs (loop2): Directory bread(block 66) failed [ 1247.154229][ T3734] FAT-fs (loop2): Directory bread(block 67) failed [ 1247.235952][ T3743] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1247.265477][ T3734] FAT-fs (loop2): Directory bread(block 68) failed [ 1247.299177][ T3734] FAT-fs (loop2): Directory bread(block 69) failed [ 1247.328821][ T3734] FAT-fs (loop2): Directory bread(block 70) failed [ 1247.362290][ T3734] FAT-fs (loop2): Directory bread(block 71) failed [ 1247.386457][ T3734] FAT-fs (loop2): Directory bread(block 72) failed [ 1247.393085][ T3734] FAT-fs (loop2): Directory bread(block 73) failed [ 1247.581282][ T3752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14319'. [ 1247.624227][ T8448] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1247.826445][ T8448] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1247.851904][ T8448] usb 6-1: config 0 has no interface number 0 [ 1247.871348][ T8448] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1247.902478][ T8448] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1247.986221][ T8448] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1247.993117][ T8448] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1248.010621][ T8448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.040838][ T8448] usb 6-1: config 0 descriptor?? [ 1248.072885][ T8448] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 1248.290299][ T8448] usb 6-1: USB disconnect, device number 56 [ 1248.517599][ T26] audit: type=1326 audit(2000000043.671:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3777 comm="syz.4.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1248.551522][ T26] audit: type=1326 audit(2000000043.703:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3777 comm="syz.4.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1248.590873][ T26] audit: type=1326 audit(2000000043.703:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3777 comm="syz.4.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1248.625207][ T26] audit: type=1326 audit(2000000043.703:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3777 comm="syz.4.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1248.656439][ T26] audit: type=1326 audit(2000000043.703:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3777 comm="syz.4.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db239aeb9 code=0x7ffc0000 [ 1248.812257][ T3783] loop7: detected capacity change from 0 to 512 [ 1248.939593][ T3783] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.14334: inode has both inline data and extents flags [ 1248.995044][ T3783] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.14334: couldn't read orphan inode 15 (err -117) [ 1249.099470][ T3783] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1249.164196][ T3798] netdevsim netdevsim3 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 1249.211100][ T3798] netdevsim netdevsim3 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 1249.269788][ T3798] netdevsim netdevsim3 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 1249.342166][ T3798] netdevsim netdevsim3 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 1249.414410][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1249.615325][ T3807] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 1249.853453][ T3818] netlink: 'syz.2.14350': attribute type 1 has an invalid length. [ 1249.895518][ T3818] netlink: 'syz.2.14350': attribute type 1 has an invalid length. [ 1249.929037][ T3818] netlink: 180 bytes leftover after parsing attributes in process `syz.2.14350'. [ 1249.960862][ T3825] x_tables: duplicate underflow at hook 4 [ 1249.985950][ T3818] NCSI netlink: No device for ifindex 2151022881 [ 1250.133524][ T3830] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14356'. [ 1251.203733][ T4255] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1251.417528][ T4255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.437940][ T4255] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1251.481645][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.542367][ T4255] usb 3-1: config 0 descriptor?? [ 1251.581288][ T3882] device geneve3 entered promiscuous mode [ 1251.867364][ T3895] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1251.946085][ T4255] ath6kl: Failed to read usb control message: -71 [ 1251.959025][ T4255] ath6kl: Unable to read the bmi data from the device: -71 [ 1252.015352][ T4255] ath6kl: Unable to recv target info: -71 [ 1252.056155][ T4255] ath6kl: Failed to init ath6kl core: -71 [ 1252.233268][ T4255] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1252.252623][ T4255] usb 3-1: USB disconnect, device number 102 [ 1252.377824][ T5102] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1252.596209][ T5102] usb 8-1: Using ep0 maxpacket: 16 [ 1252.615408][ T5102] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.637886][ T5102] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1252.663286][ T5102] usb 8-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 1252.678684][ T5102] usb 8-1: Product: syz [ 1252.697649][ T5102] usb 8-1: config 0 descriptor?? [ 1252.717171][ T5102] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1253.098864][ T5102] gspca_spca501: reg write: error -71 [ 1253.104555][ T5102] spca501 8-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1253.128450][ T5102] spca501: probe of 8-1:0.0 failed with error -22 [ 1253.175202][ T5102] usb 8-1: USB disconnect, device number 4 [ 1253.193650][ T3938] loop2: detected capacity change from 0 to 512 [ 1253.341037][ T3938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1253.373977][ T3938] ext4 filesystem being mounted at /2862/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1253.463727][ T3938] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 1253.474559][ T3938] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1253.484660][ T3938] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.14406: Failed to acquire dquot type 0 [ 1253.637560][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1253.648642][ T3949] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 1253.772477][ T26] audit: type=1326 audit(2000000049.193:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3952 comm="syz.2.14412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1253.871080][ T26] audit: type=1326 audit(2000000049.204:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3952 comm="syz.2.14412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1253.978496][ T26] audit: type=1326 audit(2000000049.204:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3952 comm="syz.2.14412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1254.091835][ T26] audit: type=1326 audit(2000000049.204:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3952 comm="syz.2.14412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1254.697378][ T3984] loop7: detected capacity change from 0 to 256 [ 1255.485714][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14439'. [ 1256.592800][ T4058] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 1256.777506][ T4065] netlink: 'syz.2.14464': attribute type 6 has an invalid length. [ 1257.477736][ T4049] loop7: detected capacity change from 0 to 32768 [ 1257.959347][ T4332] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1258.152177][ T4332] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1258.168972][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.211433][ T4332] usb 5-1: config 0 descriptor?? [ 1258.249419][ T4114] netlink: 'syz.5.14486': attribute type 29 has an invalid length. [ 1258.287543][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14486'. [ 1258.326242][ T4114] netlink: 'syz.5.14486': attribute type 29 has an invalid length. [ 1258.346483][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14486'. [ 1258.580905][ T4122] loop7: detected capacity change from 0 to 64 [ 1258.624137][ T4332] [drm:udl_init] *ERROR* Selecting channel failed [ 1258.645391][ T4255] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1258.666450][ T4332] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1258.691615][ T4332] [drm] Initialized udl on minor 2 [ 1258.719769][ T4332] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1258.748155][ T4332] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1258.765937][ T4332] usb 5-1: USB disconnect, device number 85 [ 1258.776996][T32714] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1258.796000][T32714] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1258.823433][T32714] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1258.830147][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 1258.853185][ T4255] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1258.883340][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.891421][ T4255] usb 3-1: Product: syz [ 1258.917562][ T4255] usb 3-1: Manufacturer: syz [ 1258.940176][ T4255] usb 3-1: SerialNumber: syz [ 1258.948712][ T4255] usb 3-1: config 0 descriptor?? [ 1258.977369][ T4255] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1259.172992][ T4255] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 1259.191177][ T4255] visor: probe of 3-1:0.0 failed with error -5 [ 1259.412482][T23689] usb 3-1: USB disconnect, device number 103 [ 1259.733416][ T4153] x_tables: unsorted underflow at hook 4 [ 1260.564963][ T4177] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 1261.000622][ T4187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14531'. [ 1261.044693][ T4187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14531'. [ 1261.084509][ T4187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14531'. [ 1261.492012][ T4171] loop2: detected capacity change from 0 to 32768 [ 1261.589384][ T4171] [ 1261.589384][ T4171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.589384][ T4171] [ 1261.604876][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.664396][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.683885][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.752415][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.788612][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.812004][ T4266] [ 1261.812004][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.812004][ T4266] [ 1261.843139][ T4266] [ 1261.843139][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.843139][ T4266] [ 1261.851372][ T4207] loop7: detected capacity change from 0 to 8 [ 1261.860018][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.897508][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.926556][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1261.970745][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1262.017441][ T4202] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 1263.369762][T23689] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1263.560315][T23689] usb 8-1: Using ep0 maxpacket: 8 [ 1263.567392][T23689] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 1263.607370][T23689] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.627073][T23689] usb 8-1: config 0 has no interface number 0 [ 1263.633533][T23689] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1263.654818][T23689] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1263.688637][T23689] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.741369][T23689] usb 8-1: config 0 interface 52 has no altsetting 0 [ 1263.778008][T23689] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1263.829030][T23689] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1263.865632][T23689] usb 8-1: Product: syz [ 1263.869911][T23689] usb 8-1: SerialNumber: syz [ 1263.932516][T23689] usb 8-1: config 0 descriptor?? [ 1263.942767][ T4275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14560'. [ 1263.957178][ T4275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14560'. [ 1264.151384][T23689] input: syz (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input66 [ 1264.183130][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1264.227793][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1264.241158][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1264.253530][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1264.372776][ T8448] usb 8-1: USB disconnect, device number 5 [ 1264.614087][ T4304] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14570'. [ 1264.866523][ T4322] xt_TCPMSS: Only works on TCP SYN packets [ 1265.207740][ T4351] No such timeout policy "syz0" [ 1265.326189][ T4350] loop5: detected capacity change from 0 to 4096 [ 1265.459184][ T4350] ntfs3: Cannot use different iocharset when remounting! [ 1265.570425][ T6354] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1265.762567][ T6354] usb 8-1: config 4 has an invalid interface number: 28 but max is 0 [ 1265.773042][ T6354] usb 8-1: config 4 has no interface number 0 [ 1265.794551][ T6354] usb 8-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1265.821005][ T6354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.832749][ T4364] loop2: detected capacity change from 0 to 4096 [ 1265.839335][ T6354] usb 8-1: Product: syz [ 1265.843548][ T6354] usb 8-1: Manufacturer: syz [ 1265.867489][ T6354] usb 8-1: SerialNumber: syz [ 1265.877752][ T4364] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1265.917438][ T6354] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:4.28/input/input67 [ 1265.929619][ T4364] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1265.942836][ T4255] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1265.992551][ T4364] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1266.042089][ T4364] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1266.093797][ T4364] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1266.110697][ T3622] bcm5974 8-1:4.28: could not read from device [ 1266.130381][ T6354] bcm5974 8-1:4.28: could not read from device [ 1266.137436][ T4255] usb 5-1: Using ep0 maxpacket: 8 [ 1266.162176][ T4255] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1266.182071][ T4255] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.195563][ T4364] ntfs: volume version 3.1. [ 1266.208653][ T4255] usb 5-1: config 0 has no interface number 0 [ 1266.215748][ T4364] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1266.237177][ T4255] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1266.248734][ T4364] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1266.272323][ T4255] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1266.293047][ T4255] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.306690][ T4364] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1266.325249][ T4364] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1266.339561][ T4255] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1266.339634][ T4375] netlink: 25 bytes leftover after parsing attributes in process `syz.5.14592'. [ 1266.358085][ T4255] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1266.370441][ T4364] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1266.387759][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1266.398906][ T4255] usb 5-1: Product: syz [ 1266.403661][ T4255] usb 5-1: SerialNumber: syz [ 1266.422203][ T4255] usb 5-1: config 0 descriptor?? [ 1266.433830][ T3622] bcm5974 8-1:4.28: could not read from device [ 1266.468817][ T6354] input: failed to attach handler mousedev to device input67, error: -5 [ 1266.498319][ T3622] bcm5974 8-1:4.28: could not read from device [ 1266.522665][ T6354] usb 8-1: USB disconnect, device number 6 [ 1266.634109][ T4255] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input68 [ 1266.662924][ T3622] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1266.724528][ T3622] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1266.762985][ T3622] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1266.799698][ T3622] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1266.846900][ T4609] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1266.875617][ T6354] usb 5-1: USB disconnect, device number 86 [ 1266.933227][ T3622] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 1268.542579][ T8448] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1268.732829][ T8448] usb 5-1: Using ep0 maxpacket: 16 [ 1268.739833][ T8448] usb 5-1: config 0 has no interfaces? [ 1268.783293][ T8448] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1268.835888][ T8448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.864478][ T8448] usb 5-1: Product: syz [ 1268.875251][ T8448] usb 5-1: Manufacturer: syz [ 1268.879926][ T8448] usb 5-1: SerialNumber: syz [ 1268.930467][ T8448] r8152-cfgselector 5-1: config 0 descriptor?? [ 1269.140641][ T4465] device bridge3 entered promiscuous mode [ 1269.149703][ T8448] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1269.188210][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14636'. [ 1269.354179][ T8448] usb 5-1: USB disconnect, device number 87 [ 1269.439140][ T4475] xt_policy: neither incoming nor outgoing policy selected [ 1269.650609][ T4483] validate_nla: 33 callbacks suppressed [ 1269.650887][ T4483] netlink: 'syz.7.14645': attribute type 10 has an invalid length. [ 1270.139300][ T4500] loop7: detected capacity change from 0 to 512 [ 1270.213462][ T4500] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1270.247191][ T4500] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.14651: iget: checksum invalid [ 1270.347191][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1270.515657][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14658'. [ 1270.723740][T32714] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1270.925964][T32714] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1270.938165][T32714] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1270.976912][T32714] usb 5-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 1270.997909][T32714] usb 5-1: config 8 has no interface number 0 [ 1271.010055][T32714] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 9472, setting to 64 [ 1271.034052][T32714] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1271.053675][T32714] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1271.073303][T32714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.091788][T32714] usb 5-1: Product: syz [ 1271.096437][T32714] usb 5-1: Manufacturer: syz [ 1271.101079][T32714] usb 5-1: SerialNumber: syz [ 1271.266378][ T4491] loop2: detected capacity change from 0 to 40427 [ 1271.299121][ T4491] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1271.304609][ T6354] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1271.324690][ T4491] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1271.361154][ T4491] F2FS-fs (loop2): invalid crc value [ 1271.391580][T32714] usb 5-1: USB disconnect, device number 88 [ 1271.401116][ T4491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1271.483241][ T4539] loop7: detected capacity change from 0 to 128 [ 1271.506491][ T6354] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.531570][ T6354] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1271.562341][ T4539] FAT-fs (loop7): Directory bread(block 414) failed [ 1271.569143][ T4539] FAT-fs (loop7): Directory bread(block 415) failed [ 1271.601520][ T6354] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1271.619157][ T4539] FAT-fs (loop7): Directory bread(block 416) failed [ 1271.625942][ T6354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1271.631558][ T4491] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1271.639995][ T4539] FAT-fs (loop7): Directory bread(block 417) failed [ 1271.648046][ T6354] usb 6-1: SerialNumber: syz [ 1271.652799][ T4539] FAT-fs (loop7): Directory bread(block 418) failed [ 1271.657991][ T4491] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1271.687044][ T4539] FAT-fs (loop7): Directory bread(block 419) failed [ 1271.695605][ T6354] usb 6-1: 0:2 : does not exist [ 1271.710889][ T4539] FAT-fs (loop7): Directory bread(block 420) failed [ 1271.744871][ T4539] FAT-fs (loop7): Directory bread(block 421) failed [ 1271.833711][ T4539] FAT-fs (loop7): Directory bread(block 414) failed [ 1271.870119][ T4539] FAT-fs (loop7): Directory bread(block 415) failed [ 1271.889072][ T6354] usb 6-1: USB disconnect, device number 57 [ 1272.864725][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14671'. [ 1272.943442][ T4578] netlink: 'syz.3.14686': attribute type 10 has an invalid length. [ 1272.997559][ T4578] device netdevsim0 left promiscuous mode [ 1273.018428][ T4578] team0: Port device netdevsim0 added [ 1273.385232][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1273.385248][ T26] audit: type=1326 audit(2000000069.780:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.5.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1273.505932][ T26] audit: type=1326 audit(2000000069.843:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.5.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1273.575537][ T1864] Bluetooth: hci5: command 0x0406 tx timeout [ 1273.614580][ T26] audit: type=1326 audit(2000000069.843:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.5.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1273.641472][ T26] audit: type=1326 audit(2000000069.843:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.5.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1273.664954][ T26] audit: type=1326 audit(2000000069.843:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.5.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa04b9aeb9 code=0x7ffc0000 [ 1273.711291][ T4599] loop2: detected capacity change from 0 to 512 [ 1273.720968][ T4600] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14697'. [ 1273.794766][ T4599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1273.804220][ T4599] ext4 filesystem being mounted at /2916/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.870554][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1273.933760][ T4600] bond0 (unregistering): Released all slaves [ 1274.038909][ T8448] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1274.056528][ T4617] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1274.257770][ T8448] usb 6-1: Using ep0 maxpacket: 16 [ 1274.265179][ T8448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.311431][ T8448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.341507][ T8448] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.381398][ T8448] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1274.416877][ T8448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.467356][ T8448] usb 6-1: config 0 descriptor?? [ 1274.510155][ T8448] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input70 [ 1274.563841][ T3622] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1274.583206][ T3622] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1274.644734][ T3622] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1274.684641][ T3622] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1274.770155][ T4604] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1274.801628][ T4610] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1274.806796][ T8448] usb 6-1: USB disconnect, device number 58 [ 1274.858138][ T3622] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1275.258327][ T4649] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1275.917256][ T1864] Bluetooth: hci5: Malformed LE Event: 0x1d [ 1277.064729][ T4718] netlink: 'syz.3.14749': attribute type 2 has an invalid length. [ 1277.446329][ T4734] overlayfs: conflicting options: nfs_export=on,index=off [ 1277.571955][ T4738] fuse: Bad value for 'fd' [ 1277.749023][ T4743] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1278.520516][ T4737] loop2: detected capacity change from 0 to 32768 [ 1278.556250][ T4737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.14760 (4737) [ 1278.647785][ T4737] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1278.715505][ T4737] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1278.724788][ T4737] BTRFS info (device loop2): using free space tree [ 1279.123197][ T4737] BTRFS info (device loop2): enabling ssd optimizations [ 1279.391950][ T4266] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1280.229781][ T4845] netlink: 'syz.3.14793': attribute type 1 has an invalid length. [ 1280.290302][ T4845] netlink: 220 bytes leftover after parsing attributes in process `syz.3.14793'. [ 1280.365069][ T4845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14793'. [ 1280.558187][ T4853] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1280.592205][ T4853] Error parsing options; rc = [-22] [ 1280.875623][ T4869] loop5: detected capacity change from 0 to 256 [ 1280.967176][ T4869] FAT-fs (loop5): Directory bread(block 64) failed [ 1280.983846][ T4869] FAT-fs (loop5): Directory bread(block 65) failed [ 1281.022442][ T4869] FAT-fs (loop5): Directory bread(block 66) failed [ 1281.029061][ T4869] FAT-fs (loop5): Directory bread(block 67) failed [ 1281.101087][ T4869] FAT-fs (loop5): Directory bread(block 68) failed [ 1281.126814][ T4869] FAT-fs (loop5): Directory bread(block 69) failed [ 1281.161272][ T4869] FAT-fs (loop5): Directory bread(block 70) failed [ 1281.181115][ T4869] FAT-fs (loop5): Directory bread(block 71) failed [ 1281.212965][ T4869] FAT-fs (loop5): Directory bread(block 72) failed [ 1281.264928][ T4869] FAT-fs (loop5): Directory bread(block 73) failed [ 1282.230868][ T4910] netlink: 'syz.4.14824': attribute type 5 has an invalid length. [ 1282.300200][ T4914] netlink: 'syz.7.14826': attribute type 1 has an invalid length. [ 1282.360944][ T4914] netlink: 224 bytes leftover after parsing attributes in process `syz.7.14826'. [ 1282.686568][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14831'. [ 1283.476377][ T4956] netlink: 'syz.7.14847': attribute type 3 has an invalid length. [ 1283.541120][ T4958] ieee802154 phy0 wpan0: encryption failed: -22 [ 1284.385603][ T4952] loop2: detected capacity change from 0 to 32768 [ 1284.599677][T17016] read_mapping_page failed! [ 1284.617896][T17016] ERROR: (device loop2): txCommit: [ 1284.617896][T17016] [ 1284.656887][ T4992] device bridge5 entered promiscuous mode [ 1284.694534][T17016] ERROR: (device loop2): remounting filesystem as read-only [ 1284.714337][T17016] jfs_write_inode: jfs_commit_inode failed! [ 1285.355929][ T5013] netlink: 'syz.3.14875': attribute type 1 has an invalid length. [ 1285.389635][ T5013] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.14875'. [ 1285.633739][ T5025] loop7: detected capacity change from 0 to 64 [ 1286.342879][ T5049] netlink: 'syz.7.14893': attribute type 2 has an invalid length. [ 1286.373945][ T5049] netlink: 'syz.7.14893': attribute type 1 has an invalid length. [ 1286.382535][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14894'. [ 1286.422114][ T5049] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.14893'. [ 1286.668450][ T5059] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 1286.745689][ T4843] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1286.931160][ T4843] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.951495][ T4843] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1286.993801][ T4843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.037415][ T4843] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1287.425199][ T5068] infiniband syz2: set active [ 1287.445879][ T5068] infiniband syz2: added veth0_vlan [ 1287.614399][ T5068] RDS/IB: syz2: added [ 1287.640114][ T5068] smc: adding ib device syz2 with port count 1 [ 1287.703451][ T5068] smc: ib device syz2 port 1 has pnetid [ 1287.710741][ T5094] netlink: 'syz.4.14912': attribute type 1 has an invalid length. [ 1287.902677][ T5098] loop7: detected capacity change from 0 to 256 [ 1287.938108][ T5098] FAT-fs (loop7): bogus number of FAT sectors [ 1287.957996][ T5098] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1288.051211][ T4843] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1288.245609][ T4843] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1288.273952][ T4843] stv0680 3-1:4.0: last error: 85, command = 0x7f [ 1288.286555][ T5109] netlink: 'syz.4.14920': attribute type 25 has an invalid length. [ 1288.309605][ T4843] usb 3-1: USB disconnect, device number 104 [ 1288.346636][ T5109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14920'. [ 1288.487939][ T5113] x_tables: duplicate entry at hook 1 [ 1289.456909][ T5142] netlink: 'syz.2.14936': attribute type 2 has an invalid length. [ 1289.491026][ T5142] netlink: 'syz.2.14936': attribute type 1 has an invalid length. [ 1289.835235][ T5153] loop7: detected capacity change from 0 to 512 [ 1289.932149][ T5153] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1289.976277][ T5153] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1290.066855][ T5153] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:164: inode #17: comm syz.7.14942: inline data xattr refers to an external xattr inode [ 1290.112161][ T5153] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.14942: couldn't read orphan inode 17 (err -117) [ 1290.136936][ T5153] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1290.586567][ T5153] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1290.607394][ T5153] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1290.835704][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1290.871564][ T5183] device bridge5 entered promiscuous mode [ 1291.613234][ T5209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1291.662663][ T26] audit: type=1326 audit(2000000088.970:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.14966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1291.730619][ T26] audit: type=1326 audit(2000000088.970:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.14966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1291.870265][ T26] audit: type=1326 audit(2000000088.970:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.14966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1291.990792][ T26] audit: type=1326 audit(2000000088.970:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.14966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69e79aeb9 code=0x7ffc0000 [ 1292.013276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.297807][ T5232] netlink: 'syz.4.14978': attribute type 27 has an invalid length. [ 1292.331350][ T5232] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1292.556296][ T5102] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1292.637481][ T5244] device bridge1 entered promiscuous mode [ 1292.763944][ T5102] usb 6-1: Using ep0 maxpacket: 16 [ 1292.771439][ T5102] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.816584][ T5102] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.864309][ T5102] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1292.883652][ T5102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.901959][ T5102] usb 6-1: Product: syz [ 1292.909142][ T5102] usb 6-1: Manufacturer: syz [ 1292.913854][ T5102] usb 6-1: SerialNumber: syz [ 1293.162976][ T5102] usb 6-1: 0:2 : does not exist [ 1293.175379][ T5102] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1293.237378][ T5262] loop7: detected capacity change from 0 to 256 [ 1293.261162][ T5102] usb 6-1: USB disconnect, device number 59 [ 1293.363144][ T5262] FAT-fs (loop7): Directory bread(block 64) failed [ 1293.383331][ T5262] FAT-fs (loop7): Directory bread(block 65) failed [ 1293.400409][ T5262] FAT-fs (loop7): Directory bread(block 66) failed [ 1293.412561][ T5262] FAT-fs (loop7): Directory bread(block 67) failed [ 1293.430086][ T5262] FAT-fs (loop7): Directory bread(block 68) failed [ 1293.452008][ T5262] FAT-fs (loop7): Directory bread(block 69) failed [ 1293.473566][ T5262] FAT-fs (loop7): Directory bread(block 70) failed [ 1293.496617][ T5262] FAT-fs (loop7): Directory bread(block 71) failed [ 1293.528255][ T4431] udevd[4431]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1293.567678][ T5262] FAT-fs (loop7): Directory bread(block 72) failed [ 1293.574301][ T5262] FAT-fs (loop7): Directory bread(block 73) failed [ 1293.920502][ T5277] comedi comedi2: rti802: I/O port conflict (0xfffffffffffffff9,4) [ 1294.044868][ T5279] CIFS: VFS: Malformed UNC in devname [ 1294.120968][ T5284] loop7: detected capacity change from 0 to 128 [ 1294.385837][ T5282] loop2: detected capacity change from 0 to 4096 [ 1294.442666][ T5282] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1294.554470][ T5282] ntfs3: loop2: failed to convert "c46c" to cp862 [ 1294.890015][ T5301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1294.897374][ T5301] IPv6: NLM_F_CREATE should be set when creating new route [ 1294.904763][ T5301] IPv6: NLM_F_CREATE should be set when creating new route [ 1294.912173][ T5301] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.140960][ T5309] loop5: detected capacity change from 0 to 64 [ 1296.959403][ T26] audit: type=1326 audit(2000000094.534:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.15040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1297.069795][ T26] audit: type=1326 audit(2000000094.565:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.15040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1297.165774][ T5370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1297.173115][ T5370] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.180454][ T5370] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.187754][ T5370] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.204867][ T26] audit: type=1326 audit(2000000094.576:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.15040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1297.299413][ T26] audit: type=1326 audit(2000000094.576:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.15040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1297.395148][ T26] audit: type=1326 audit(2000000094.576:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.15040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33af9aeb9 code=0x7ffc0000 [ 1297.856549][ T5346] loop5: detected capacity change from 0 to 40427 [ 1297.889885][ T5346] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1297.899130][ T5390] loop7: detected capacity change from 0 to 256 [ 1297.939173][ T5390] exfat: Deprecated parameter 'namecase' [ 1297.944990][ T5390] exfat: Deprecated parameter 'namecase' [ 1297.957776][ T5346] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1298.010861][ T5346] F2FS-fs (loop5): invalid crc value [ 1298.040974][ T5390] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1298.102503][ T5346] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1298.356881][ T5346] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1298.390374][ T5346] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1298.422482][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15059'. [ 1298.713458][ T5413] usb usb1: usbfs: process 5413 (syz.4.15062) did not claim interface 0 before use [ 1299.354560][ T5431] dlm: plock device version mismatch: kernel (1.2.0), user (1.512.4294901762) [ 1299.595754][ T5438] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15077'. [ 1299.749333][ T5442] loop5: detected capacity change from 0 to 256 [ 1299.840011][ T5442] FAT-fs (loop5): Directory bread(block 64) failed [ 1299.862227][ T5442] FAT-fs (loop5): Directory bread(block 65) failed [ 1299.869078][ T5442] FAT-fs (loop5): Directory bread(block 66) failed [ 1299.910694][ T5442] FAT-fs (loop5): Directory bread(block 67) failed [ 1299.917416][ T5442] FAT-fs (loop5): Directory bread(block 68) failed [ 1299.933245][ T5450] netlink: 'syz.4.15081': attribute type 30 has an invalid length. [ 1299.986624][ T5442] FAT-fs (loop5): Directory bread(block 69) failed [ 1299.993344][ T5442] FAT-fs (loop5): Directory bread(block 70) failed [ 1300.061509][ T5442] FAT-fs (loop5): Directory bread(block 71) failed [ 1300.078840][ T5442] FAT-fs (loop5): Directory bread(block 72) failed [ 1300.110525][ T5442] FAT-fs (loop5): Directory bread(block 73) failed [ 1300.264270][ T5460] netlink: 88 bytes leftover after parsing attributes in process `syz.3.15086'. [ 1300.799961][ T5476] loop7: detected capacity change from 0 to 1024 [ 1301.011248][ T5476] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1301.153091][ T5476] EXT4-fs error (device loop7): ext4_get_first_dir_block:3605: inode #11: comm syz.7.15095: directory missing '..' [ 1301.419416][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1302.300849][ T5530] netlink: 'syz.2.15118': attribute type 21 has an invalid length. [ 1302.329665][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15118'. [ 1302.702600][ T5544] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1303.723962][ T5578] xt_policy: output policy not valid in PREROUTING and INPUT [ 1304.208968][ T5592] loop5: detected capacity change from 0 to 1024 [ 1304.277571][ T5592] hfsplus: extend alloc file! (8192,512,17039360) [ 1304.320621][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15153'. [ 1304.377100][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15153'. [ 1304.519787][ T5600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15154'. [ 1304.590296][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.596740][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.842550][ T5612] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15160'. [ 1304.891224][ T5612] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1305.271485][ T5626] loop2: detected capacity change from 0 to 16 [ 1305.323523][ T5626] erofs: (device loop2): mounted with root inode @ nid 36. [ 1305.848754][ T5646] xt_TCPMSS: Only works on TCP SYN packets [ 1306.122065][ T5654] loop2: detected capacity change from 0 to 128 [ 1306.502229][ T5666] loop2: detected capacity change from 0 to 128 [ 1306.598586][ T5666] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1306.671310][ T5666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1306.690081][ T5666] ext4 filesystem being mounted at /3006/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1306.807857][ T5641] loop5: detected capacity change from 0 to 32768 [ 1306.914461][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1307.058043][ T5641] XFS (loop5): Mounting V5 Filesystem [ 1307.195013][ T5641] XFS (loop5): Ending clean mount [ 1307.231442][ T5641] XFS (loop5): Quotacheck needed: Please wait. [ 1307.441424][ T5641] XFS (loop5): Quotacheck: Done. [ 1307.696818][T10720] XFS (loop5): Unmounting Filesystem [ 1307.888960][ T5102] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1308.102274][ T5102] usb 4-1: Using ep0 maxpacket: 32 [ 1308.109823][ T5102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.130761][ T5102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.178268][ T5102] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1308.197568][ T5102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.235505][ T5102] usb 4-1: config 0 descriptor?? [ 1308.265720][ T5102] hub 4-1:0.0: USB hub found [ 1308.449537][ T5730] netlink: 'syz.2.15214': attribute type 10 has an invalid length. [ 1308.462803][ T5102] hub 4-1:0.0: 28 ports detected [ 1308.472373][ T5102] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1308.483097][ T6354] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1308.674738][ T5102] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1308.676918][ T6354] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1308.681231][ T5102] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1308.714275][ T6354] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.759827][ T6354] usb 8-1: config 0 descriptor?? [ 1308.762132][ T5102] usbhid 4-1:0.0: can't add hid device: -71 [ 1308.780918][ T5102] usbhid: probe of 4-1:0.0 failed with error -71 [ 1308.795180][ T6354] cp210x 8-1:0.0: cp210x converter detected [ 1308.846211][ T5102] usb 4-1: USB disconnect, device number 111 [ 1309.173324][ T6354] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1309.191096][ T6354] cp210x 8-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1309.210628][ T6354] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1309.240312][ T6354] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1309.281388][ T6354] usb 8-1: USB disconnect, device number 7 [ 1309.319482][ T6354] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1309.360603][ T6354] cp210x 8-1:0.0: device disconnected [ 1310.240662][ T5772] kcapi: manufacturer command 18446744073709551608 unknown. [ 1310.535146][ T5779] device bond0 entered promiscuous mode [ 1310.553467][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.717283][ T5787] netlink: 'syz.4.15241': attribute type 4 has an invalid length. [ 1310.888047][ T5789] xt_cgroup: path and classid specified [ 1310.980795][ T5762] loop2: detected capacity change from 0 to 32768 [ 1310.988762][ T5764] loop7: detected capacity change from 0 to 32768 [ 1311.117262][ T5798] loop5: detected capacity change from 0 to 64 [ 1311.157090][ T5762] XFS (loop2): Mounting V5 Filesystem [ 1311.258728][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15245'. [ 1311.302991][ T5762] XFS (loop2): Ending clean mount [ 1311.352998][ T5762] XFS (loop2): Quotacheck needed: Please wait. [ 1311.469027][ T5762] XFS (loop2): Quotacheck: Done. [ 1311.478814][ T5762] XFS (loop2): Unmounting Filesystem [ 1311.816108][ T5815] loop7: detected capacity change from 0 to 1024 [ 1311.945788][ T5815] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1312.232149][ T1863] EXT4-fs (loop7): unmounting filesystem. [ 1312.856455][ T5838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15260'. [ 1312.869977][ T5820] loop5: detected capacity change from 0 to 32768 [ 1312.913001][ T5838] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15260'. [ 1312.982231][ T5820] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1313.047121][ T5820] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1313.121753][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15262'. [ 1313.262010][T10720] ocfs2: Unmounting device (7,5) on (node local) [ 1313.732281][ T5854] netlink: 'syz.2.15263': attribute type 10 has an invalid length. [ 1314.075257][ T1043] block nbd5: Attempted send on invalid socket [ 1314.081552][ T1043] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.123039][ T1043] block nbd5: Attempted send on invalid socket [ 1314.129308][ T1043] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.139555][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1314.170046][ T1043] block nbd5: Attempted send on invalid socket [ 1314.176431][ T1043] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.198288][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1314.214801][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15277'. [ 1314.227839][ T52] block nbd5: Attempted send on invalid socket [ 1314.234242][ T52] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.260820][ T1043] block nbd5: Attempted send on invalid socket [ 1314.267171][ T1043] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.284328][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1314.359599][ T52] block nbd5: Attempted send on invalid socket [ 1314.366099][ T52] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.376542][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1314.399572][ T1043] block nbd5: Attempted send on invalid socket [ 1314.405940][ T1043] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.426901][ T52] block nbd5: Attempted send on invalid socket [ 1314.433209][ T52] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.465856][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1314.484697][ T52] block nbd5: Attempted send on invalid socket [ 1314.490976][ T52] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.500972][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1314.513497][ T1043] block nbd5: Attempted send on invalid socket [ 1314.519781][ T1043] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.530364][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1314.574386][ T26] audit: type=1400 audit(2000000113.021:2770): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=5877 comm="syz.3.15281" [ 1314.608452][ T5866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1314.665338][ T5866] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1315.170459][ T5900] bpf: Bad value for 'mode' [ 1315.613687][ T26] audit: type=1326 audit(2000000114.113:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1315.713194][ T26] audit: type=1326 audit(2000000114.165:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f14f2f9aeb9 code=0x7ffc0000 [ 1315.745001][ T5918] loop7: detected capacity change from 0 to 2048 [ 1315.828505][ T26] audit: type=1326 audit(2000000114.165:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14f2f9ac22 code=0x7ffc0000 [ 1315.857406][ T5918] Alternate GPT is invalid, using primary GPT. [ 1315.863872][ T5918] loop7: p2 p3 p7 [ 1315.922528][ T26] audit: type=1326 audit(2000000114.176:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14f2f5b78e code=0x7ffc0000 [ 1316.003659][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15305'. [ 1316.018049][ T4843] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1316.018516][ T26] audit: type=1326 audit(2000000114.239:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f14f2f9ace7 code=0x7ffc0000 [ 1316.122505][ T5930] IPv6: Can't replace route, no match found [ 1316.189393][ T26] audit: type=1326 audit(2000000114.249:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14f2f5b78e code=0x7ffc0000 [ 1316.220429][ T4843] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1316.239709][ T4843] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1316.303728][ T26] audit: type=1326 audit(2000000114.249:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14f2f9ab4b code=0x7ffc0000 [ 1316.327254][ T4843] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 1316.370155][ T4843] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1316.446981][ T4843] usb 3-1: config 129 has no interface number 0 [ 1316.456649][ T26] audit: type=1326 audit(2000000114.302:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f14f2f5b78e code=0x7ffc0000 [ 1316.487431][ T4843] usb 3-1: config 129 has no interface number 1 [ 1316.508909][ T4843] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1316.556497][ T4610] udevd[4610]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 1316.562257][ T26] audit: type=1326 audit(2000000114.302:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.7.15300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14f2f9ab4b code=0x7ffc0000 [ 1316.593842][ T4609] udevd[4609]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1316.605893][ T4431] udevd[4431]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1316.615888][ T4843] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1316.655068][ T4843] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1316.738643][ T4843] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1316.770324][ T4843] usb 3-1: config 129 interface 5 has no altsetting 0 [ 1316.820644][ T4843] usb 3-1: string descriptor 0 read error: -22 [ 1316.826974][ T4843] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1316.866788][ T4843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.910670][ T4843] usb 3-1: MIDIStreaming interface descriptor not found [ 1317.256423][ T4843] usb 3-1: USB disconnect, device number 105 [ 1317.780356][ T4843] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1317.980369][ T4843] usb 4-1: Using ep0 maxpacket: 8 [ 1317.989653][ T4843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1317.998843][ T4843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.065836][ T4843] usb 4-1: Product: syz [ 1318.100004][ T4843] usb 4-1: Manufacturer: syz [ 1318.113617][ T4843] usb 4-1: SerialNumber: syz [ 1318.137224][ T4843] usb 4-1: config 0 descriptor?? [ 1318.157169][ T4843] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1318.210483][ T4843] dvb-usb: bulk message failed: -22 (2/0) [ 1318.217231][ T4843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1318.247737][ T4843] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1318.305195][ T4843] usb 4-1: media controller created [ 1318.369218][ T4843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1318.439106][ T4843] dvb-usb: bulk message failed: -22 (1/0) [ 1318.445077][ T4843] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1318.495949][ T4843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 1318.521382][ T4843] dvb-usb: schedule remote query interval to 50 msecs. [ 1318.578264][ T4843] dvb-usb: bulk message failed: -22 (2/0) [ 1318.597166][ T4843] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1318.660225][ T4843] usb 4-1: USB disconnect, device number 112 [ 1318.766963][ T4843] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1318.919645][ T6008] loop7: detected capacity change from 0 to 1024 [ 1318.964227][ T6008] fuse: Bad value for 'fd' [ 1319.080368][ T46] hfsplus: b-tree write err: -5, ino 4 [ 1319.334456][ T6022] 9pnet_fd: p9_fd_create_tcp (6022): problem connecting socket to 127.0.0.1 [ 1319.564741][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1319.610122][ T6033] netlink: 'syz.7.15356': attribute type 21 has an invalid length. [ 1319.633809][ T6033] netlink: 'syz.7.15356': attribute type 1 has an invalid length. [ 1319.661561][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1319.667779][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.715901][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.829295][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.836907][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.865246][ T6040] loop7: detected capacity change from 0 to 64 [ 1320.014223][ T6040] Trying to free block not in datazone [ 1320.065889][ T6040] Trying to free block not in datazone [ 1320.095155][ T6040] Trying to free block not in datazone [ 1320.100705][ T6040] Trying to free block not in datazone [ 1320.133598][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1320.151450][ T6040] minix_free_block (loop7:6): bit already cleared [ 1320.199747][ T6040] Trying to free block not in datazone [ 1320.205329][ T6040] Trying to free block not in datazone [ 1320.279675][ T6048] xt_hashlimit: max too large, truncated to 1048576 [ 1320.612104][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15366'. [ 1320.704132][ T6028] infiniband syz1: set active [ 1320.709174][ T6351] vcan0 speed is unknown, defaulting to 1000 [ 1320.736964][ T6028] infiniband syz1: added vcan0 [ 1320.742435][ T6028] rdma_rxe: unable to create cq [ 1320.761663][ T6028] infiniband syz1: Couldn't create ib_mad CQ [ 1320.786442][ T6028] infiniband syz1: Couldn't open port 1 [ 1320.889916][ T6028] RDS/IB: syz1: added [ 1320.894027][ T6028] smc: adding ib device syz1 with port count 1 [ 1320.933918][ T6028] smc: ib device syz1 port 1 has pnetid [ 1320.981356][ T6351] vcan0 speed is unknown, defaulting to 1000 [ 1320.989765][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1321.012522][ T6060] loop5: detected capacity change from 0 to 1024 [ 1321.100333][ T6060] hfsplus: failed to load root directory [ 1321.390287][ T5103] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1321.458273][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1321.599798][ T5103] usb 5-1: Using ep0 maxpacket: 16 [ 1321.607023][ T5103] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.655840][ T5103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1321.700065][ T5103] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.746607][ T5103] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1321.768887][ T5103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.786867][ T5103] usb 5-1: Product: syz [ 1321.799948][ T5103] usb 5-1: Manufacturer: syz [ 1321.819613][ T5103] usb 5-1: SerialNumber: syz [ 1321.837393][ T5103] usb 5-1: config 0 descriptor?? [ 1321.886109][ T5103] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 1321.934529][ T5103] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -8) [ 1321.982511][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1322.019771][ T5103] peak_usb: probe of 5-1:0.0 failed with error -8 [ 1322.067150][ T5103] usb 5-1: USB disconnect, device number 89 [ 1322.410914][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1322.552854][ T5102] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1322.622724][ T6104] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15392'. [ 1322.766031][ T5102] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1322.794740][ T5102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.814580][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1322.835849][ T5102] usb 6-1: Product: syz [ 1322.847544][ T5102] usb 6-1: Manufacturer: syz [ 1322.857175][ T5102] usb 6-1: SerialNumber: syz [ 1322.884083][ T5102] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1322.942040][ T5103] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1323.279963][ T6028] vcan0 speed is unknown, defaulting to 1000 [ 1323.394057][ T5102] usb 6-1: USB disconnect, device number 60 [ 1324.019829][ T5103] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1324.026912][ T5103] ath9k_htc: Failed to initialize the device [ 1324.087040][ T5102] usb 6-1: ath9k_htc: USB layer deinitialized [ 1324.423838][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15416'. [ 1324.632048][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15419'. [ 1325.181437][ T4843] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1325.248774][ T6351] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1325.381470][ T4843] usb 4-1: Using ep0 maxpacket: 8 [ 1325.393421][ T4843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1325.411806][ T4843] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1325.421389][ T4843] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1325.430261][ T4843] usb 4-1: Product: syz [ 1325.434802][ T4843] usb 4-1: Manufacturer: syz [ 1325.439818][ T4843] usb 4-1: SerialNumber: syz [ 1325.459742][ T6351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1325.472361][ T6351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1325.486061][ T6351] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1325.497591][ T6351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.510964][ T6351] usb 8-1: Product: syz [ 1325.518544][ T6351] usb 8-1: Manufacturer: syz [ 1325.523323][ T6351] usb 8-1: SerialNumber: syz [ 1325.548216][ T6351] usb 8-1: config 0 descriptor?? [ 1325.563527][ T6351] usb 8-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1325.600746][T32714] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1325.656230][ T4843] usb 4-1: Invalid connection information received from device [ 1325.793225][T32714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1325.804808][T32714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1325.815062][T32714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1325.825591][T32714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1325.835671][T32714] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1325.845660][T32714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.922977][ T6351] usb 4-1: USB disconnect, device number 113 [ 1325.931537][ T6197] program syz.4.15437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1325.939054][T32714] usb 3-1: config 0 descriptor?? [ 1325.944007][ T28] INFO: task syz-executor:19472 blocked for more than 143 seconds. [ 1325.963673][ T28] Not tainted syzkaller #0 [ 1325.996729][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1326.020637][ T6354] usb 8-1: USB disconnect, device number 8 [ 1326.035830][ T28] task:syz-executor state:D stack:22064 pid:19472 ppid:1 flags:0x00004004 [ 1326.066307][ T28] Call Trace: [ 1326.069803][ T28] [ 1326.072775][ T28] __schedule+0x11d1/0x40e0 [ 1326.104722][ T28] ? mark_lock+0x94/0x320 [ 1326.115103][ T28] ? __sched_text_start+0x8/0x8 [ 1326.128039][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1326.134358][ T28] ? lock_chain_count+0x20/0x20 [ 1326.139396][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1326.169393][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1326.172336][T32714] hdpvr 3-1:0.0: firmware version 0x8 dated [ 1326.195654][ T28] schedule+0xb9/0x180 [ 1326.199807][ T28] io_schedule+0x7c/0xd0 [ 1326.211035][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 1326.216508][ T28] ? folio_wait_bit+0x30/0x30 [ 1326.221516][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 1326.227996][ T28] ? folio_mapping+0x1ba/0x4d0 [ 1326.233350][ T28] truncate_inode_pages_range+0x9fe/0x1090 [ 1326.239360][ T28] ? mapping_evict_folio+0x520/0x520 [ 1326.244777][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1326.251516][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1326.256783][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1326.264754][ T28] evict+0x4dc/0x8d0 [ 1326.272488][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 1326.277577][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1326.282840][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1326.292506][ T28] evict_inodes+0x60c/0x6a0 [ 1326.297176][ T28] ? clear_inode+0x150/0x150 [ 1326.301918][ T28] generic_shutdown_super+0x93/0x340 [ 1326.307492][ T28] kill_block_super+0x7c/0xe0 [ 1326.312487][ T28] deactivate_locked_super+0x93/0xf0 [ 1326.318013][ T28] cleanup_mnt+0x42c/0x4b0 [ 1326.322669][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1326.328199][ T28] task_work_run+0x1d0/0x260 [ 1326.333039][ T28] ? task_work_cancel+0x220/0x220 [ 1326.338263][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1326.345149][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1326.350546][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1326.363993][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1326.369700][ T28] do_syscall_64+0x58/0xa0 [ 1326.374341][T32714] hdpvr 3-1:0.0: device init failed [ 1326.374393][T32714] hdpvr: probe of 3-1:0.0 failed with error -12 [ 1326.382453][T32714] usb 3-1: USB disconnect, device number 106 [ 1326.412317][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1326.417170][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1326.422209][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1326.430561][ T28] RIP: 0033:0x7f7f60d9c117 [ 1326.435131][ T28] RSP: 002b:00007ffc6916eac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1326.449939][ T28] RAX: 0000000000000000 RBX: 00007f7f60e0471f RCX: 00007f7f60d9c117 [ 1326.458477][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6916eb80 [ 1326.466778][ T28] RBP: 00007ffc6916eb80 R08: 00007ffc6916fb80 R09: 00000000ffffffff [ 1326.476444][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6916fc10 [ 1326.484582][ T28] R13: 00007f7f60e0471f R14: 000000000012a2d9 R15: 00007ffc6916fc50 [ 1326.500331][ T28] [ 1326.503590][ T28] [ 1326.503590][ T28] Showing all locks held in the system: [ 1326.546493][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1326.562587][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1326.581499][ T28] 1 lock held by rcu_tasks_trace/13: [ 1326.591133][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1326.613849][ T28] 1 lock held by khungtaskd/28: [ 1326.619351][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1326.630975][ T28] 2 locks held by kworker/u4:3/46: [ 1326.636213][ T28] 2 locks held by getty/4023: [ 1326.641309][ T28] #0: ffff88814d948098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1326.651820][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1326.662121][ T28] 1 lock held by syz-executor/19472: [ 1326.667671][ T28] #0: ffff88805e1800e0 (&type->s_umount_key#104){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1326.678888][ T28] [ 1326.681274][ T28] ============================================= [ 1326.681274][ T28] [ 1326.690135][ T28] NMI backtrace for cpu 1 [ 1326.694522][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1326.701830][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1326.711941][ T28] Call Trace: [ 1326.715260][ T28] [ 1326.718235][ T28] dump_stack_lvl+0x188/0x24e [ 1326.722963][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 1326.728395][ T28] ? show_regs_print_info+0x12/0x12 [ 1326.733729][ T28] ? load_image+0x400/0x400 [ 1326.738295][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1326.743029][ T28] ? printk_sprint+0x460/0x460 [ 1326.747860][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1326.752853][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1326.759157][ T28] ? _printk+0xda/0x130 [ 1326.763388][ T28] ? load_image+0x400/0x400 [ 1326.767947][ T28] ? load_image+0x400/0x400 [ 1326.772498][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1326.778712][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1326.784839][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1326.790882][ T28] watchdog+0xeee/0xf30 [ 1326.795095][ T28] ? watchdog+0x1ed/0xf30 [ 1326.799482][ T28] kthread+0x29d/0x330 [ 1326.803609][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1326.808678][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1326.813329][ T28] ret_from_fork+0x1f/0x30 [ 1326.817814][ T28] [ 1326.821552][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1326.826816][ C0] NMI backtrace for cpu 0 [ 1326.826826][ C0] CPU: 0 PID: 17016 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1326.826844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1326.826856][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1326.826884][ C0] RIP: 0010:__phys_addr+0x50/0x170 [ 1326.826912][ C0] Code: 00 00 80 0f 83 90 00 00 00 48 b8 00 00 00 00 80 77 00 00 48 01 c3 48 89 df 4c 89 f6 e8 b9 67 48 00 4c 39 f3 0f 87 fc 00 00 00 <48> c7 c0 6d bb 1f 8e 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f [ 1326.826927][ C0] RSP: 0018:ffffc9000517fae0 EFLAGS: 00000207 [ 1326.826942][ C0] RAX: ffffffff813a0c97 RBX: 0000000055dd0c80 RCX: ffff88805f0ad940 [ 1326.826955][ C0] RDX: 0000000000000000 RSI: ffff8880d5dd0c80 RDI: 0000000055dd0c80 [ 1326.826968][ C0] RBP: ffff888056691248 R08: ffff88805f0ad940 R09: 0000000000000002 [ 1326.826981][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1326.826992][ C0] R13: ffff888055dd0c80 R14: ffff8880d5dd0c80 R15: ffffffff8612f16b [ 1326.827006][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1326.827021][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.827033][ C0] CR2: 00007fd33b1e3358 CR3: 0000000073402000 CR4: 00000000003506f0 [ 1326.827049][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1326.827059][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1326.827071][ C0] Call Trace: [ 1326.827076][ C0] [ 1326.827083][ C0] ? nsim_dev_trap_report_work+0x76b/0xaf0 [ 1326.827106][ C0] kmem_cache_free+0x6f/0x290 [ 1326.827127][ C0] nsim_dev_trap_report_work+0x76b/0xaf0 [ 1326.827160][ C0] ? process_one_work+0x7b0/0x1160 [ 1326.827179][ C0] process_one_work+0x8a2/0x1160 [ 1326.827207][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1326.827230][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1326.827258][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1326.827285][ C0] ? kthread_data+0x4b/0xc0 [ 1326.827312][ C0] worker_thread+0xaa2/0x1270 [ 1326.827346][ C0] kthread+0x29d/0x330 [ 1326.827370][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1326.827389][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1326.827416][ C0] ret_from_fork+0x1f/0x30 [ 1326.827452][ C0] [ 1326.848661][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1326.848704][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1326.848758][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1326.848792][ T28] Call Trace: [ 1326.848823][ T28] [ 1326.848845][ T28] dump_stack_lvl+0x188/0x24e [ 1326.848940][ T28] ? memcpy+0x3c/0x60 [ 1326.848994][ T28] ? show_regs_print_info+0x12/0x12 [ 1326.849072][ T28] ? load_image+0x400/0x400 [ 1326.849158][ T28] panic+0x2e5/0x730 [ 1326.849243][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1326.849327][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1326.849411][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1326.849505][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1326.849603][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1326.849709][ T28] watchdog+0xf2d/0xf30 [ 1326.849787][ T28] ? watchdog+0x1ed/0xf30 [ 1326.849863][ T28] kthread+0x29d/0x330 [ 1326.849948][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1326.850012][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1326.850098][ T28] ret_from_fork+0x1f/0x30 [ 1326.850212][ T28] [ 1326.851874][ T28] Kernel Offset: disabled [ 1327.162841][ T28] Rebooting in 86400 seconds..