last executing test programs: 9.105932657s ago: executing program 0 (id=9062): getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x1, 0x20, 0x1, 0xd6, 0x0, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) 7.026168165s ago: executing program 0 (id=9087): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 6.798922051s ago: executing program 0 (id=9089): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e70009053ec7"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.860577198s ago: executing program 3 (id=9112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.771810842s ago: executing program 3 (id=9113): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100006786f140410e5041c81f0000000109021200010000000009040002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.438150027s ago: executing program 0 (id=9116): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x320}}) 4.047600321s ago: executing program 0 (id=9120): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x42c00) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001740)=""/4100, 0x1004}], 0x1) 3.535114307s ago: executing program 0 (id=9137): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xb0, 0xd3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00009e0000008a047ea20d50afa6b973d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.193940475s ago: executing program 4 (id=9135): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d712d282dda5f2d23debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) 1.588850535s ago: executing program 4 (id=9139): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'vlan1\x00', &(0x7f0000001340)=@ethtool_drvinfo={0x3, "1d18f9cade826f3abbeba6a228c21a13f8da8228c62efeba8c88fb008e7fa228", "77d1c888493bd0e114451f0819f2c9bccf58b04c4dc2b3afc0d58ad79e6e6e81", "e44bd94049f9821bba748f68f5626501ddcd88f6f70230f9c18712312c0545e8", "e330bd4e539b61569ea753996d24d348c651cd31b093b7a7c258c2976ea6d0c0", "5699f84918d5547b0d910ac124051dc5f10e480faff9b178405e6500619600", "280d00000000000000999f79"}}) 1.500957706s ago: executing program 2 (id=9141): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x21, 0x9e85, &(0x7f000000a040)="$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") openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 1.485137527s ago: executing program 1 (id=9142): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80100) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)) 1.413382577s ago: executing program 5 (id=9143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003000000040004"], 0x68}}, 0x0) 1.250279998s ago: executing program 4 (id=9144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffb, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x10, 0x0, @void, @value}, 0x20) 1.249407354s ago: executing program 3 (id=9156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000010501"], 0x14}}, 0x0) 1.203489584s ago: executing program 1 (id=9145): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x13, {{0x29, 0x0, 0x3e000000, @mcast1}}}, 0x88) 1.13104592s ago: executing program 2 (id=9146): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001b40)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @local, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'caif0\x00', 'team_slave_1\x00', {0xff}, {}, 0x21, 0x2, 0x4, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "791e190f7d34804c297a37fb6a1bdc0973e05f0be91706e753073e8d13be"}}, {{@ipv6={@empty, @loopback, [0xffffffff, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x1, 0x2, 0x42}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2, 0x5}, {0x4, 0x3, 0x1}, {0x0, 0x3}, 0x1e, 0x6f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 1.115615937s ago: executing program 5 (id=9147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a600050000080002"], 0x30}}, 0x0) 1.017316774s ago: executing program 1 (id=9148): add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x21104080, 0x0, 0x0, 0x0, 0x0, 0x0) 992.817417ms ago: executing program 4 (id=9149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xfd, 0xfffffffffffffffc, &(0x7f0000000a40)="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", &(0x7f0000000140)=""/13, 0x0, 0x0, 0xad, 0x112, &(0x7f0000000240)="9cdc57e4a9c7fcb9b186c9bd43fa44b38bef6138ca1f6f08cdaacbcffe9a2ae0343debf4e6ce7818ec4261022c63c5174dbf51c34fd98db73c55431a897423936fe486079d14be4fdaa264f27421f79a60f4c7f8d297d74bc790de34386008fc17b9ca14491f71bbc7fd8367ce56a3fb28ba9d6d3b2c24568f8b891c71cab31229da7ca3687c49e4e9d44410b7fa88e3f5f4e437b5e143240b3bec30863d4b722b6ad3c8d882037a7daebcb362", &(0x7f0000000880)="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", 0x1, 0x0, 0x2}, 0x9) 883.209156ms ago: executing program 3 (id=9150): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 810.177058ms ago: executing program 5 (id=9151): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}, "3938431aa5158c10"}}}}}}, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9, 0x0, @opaque="95"}}}}}, 0x0) 674.466324ms ago: executing program 2 (id=9152): mlockall(0x7) io_setup(0xfb, &(0x7f0000000140)) 674.387113ms ago: executing program 4 (id=9153): r0 = socket(0x1e, 0x4, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 495.492132ms ago: executing program 4 (id=9154): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x0, 0xe9, 0x40, 0x66b, 0x20f9, 0xff94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x6a, 0xba}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 485.278027ms ago: executing program 5 (id=9155): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private0, @empty, 0x13}}) 481.607091ms ago: executing program 1 (id=9157): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r0, 0x101, 0x7, 0x0, 0x0) 443.557523ms ago: executing program 3 (id=9158): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') connect$nfc_raw(r0, 0x0, 0x0) 376.08903ms ago: executing program 2 (id=9159): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c7, 0x4, {0xa, @pix_mp={0x0, 0x0, 0x47504a4d, 0x0, 0x0, [], 0x3, 0x0, 0x7}}}) 270.375734ms ago: executing program 1 (id=9160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r0, &(0x7f0000000740), &(0x7f0000000880)=""/152}, 0x20) 238.671443ms ago: executing program 2 (id=9161): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'virt_wifi0\x00', &(0x7f0000000780)=@ethtool_rxnfc={0x4b, 0x12, 0x100000000000, {0x11, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1}, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x7}, {0x0, @empty, 0xcf29, 0xcddf, [0x3ff, 0x3]}, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e22, 0x4e24, 0x99}, {0x0, @random="0642bf501cce", 0x2, 0x4, [0x8, 0x6]}, 0x2, 0xfff}}}) 150.456791ms ago: executing program 5 (id=9162): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 92.098367ms ago: executing program 2 (id=9163): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500020b00000029bd7000000000e2020006"], 0x58}, 0x1, 0x7}, 0x0) 59.676949ms ago: executing program 3 (id=9164): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) 19.166355ms ago: executing program 1 (id=9165): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x20000000, 0x32, 0x2, @thr={0x0, 0x0}}) 0s ago: executing program 5 (id=9166): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) cachestat(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): (1729116853.900:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22305 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd381b7dff9 code=0x7ffc0000 [ 744.698155][ T29] audit: type=1326 audit(1729116853.900:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22305 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd381b7dff9 code=0x7ffc0000 [ 744.860926][ T29] audit: type=1326 audit(1729116853.909:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22305 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd381b7dff9 code=0x7ffc0000 [ 744.896107][ T29] audit: type=1326 audit(1729116854.131:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22305 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd381b7dff9 code=0x7ffc0000 [ 744.920865][ T29] audit: type=1326 audit(1729116854.149:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22305 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd381b7dff9 code=0x7ffc0000 [ 744.946332][T22293] JBD2: Ignoring recovery information on journal [ 744.989312][ T29] audit: type=1326 audit(1729116854.214:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd381bb00e5 code=0x7ffc0000 [ 745.100310][T21014] r8152-cfgselector 4-1: USB disconnect, device number 80 [ 745.263433][T22293] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 745.284176][ T29] audit: type=1326 audit(1729116854.481:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd381b7dff9 code=0x7ffc0000 [ 745.488557][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.637146][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.673800][T22327] bond0: Error: Cannot enslave bond to itself. [ 745.728404][ T5228] ocfs2: Unmounting device (7,1) on (node local) [ 745.833183][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.050518][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.081807][T22338] loop2: detected capacity change from 0 to 47 [ 746.177542][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.238029][T22343] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7473'. [ 746.301409][ T29] audit: type=1326 audit(1729116855.423:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22344 comm="syz.0.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605277dff9 code=0x7ffc0000 [ 746.357281][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.397792][ T29] audit: type=1326 audit(1729116855.487:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22344 comm="syz.0.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f605277dff9 code=0x7ffc0000 [ 746.494447][T22351] loop5: detected capacity change from 0 to 764 [ 746.525285][ T29] audit: type=1326 audit(1729116855.487:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22344 comm="syz.0.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605277dff9 code=0x7ffc0000 [ 746.580767][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.634772][T22351] Symlink component flag not implemented [ 746.649519][T22351] Symlink component flag not implemented [ 746.667868][T22351] Symlink component flag not implemented (129) [ 746.685571][T22351] Symlink component flag not implemented (6) [ 747.595125][T22396] AppArmor: change_hat: Invalid input '0' [ 747.827366][T22407] nftables ruleset with unbound set [ 747.901443][T22411] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.7506'. [ 747.965992][T22413] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7505'. [ 748.068403][T22415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7507'. [ 748.273583][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.380433][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.393110][T21014] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 748.540509][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.568210][T21014] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 748.630379][T21014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.751875][T21014] usb 3-1: config 0 descriptor?? [ 748.846726][T22437] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.313159][T21014] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 749.321627][T21014] hackrf 3-1:0.0: Could not detect board [ 749.328432][T21014] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 749.338792][T21014] usb 3-1: USB disconnect, device number 86 [ 749.446499][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 749.639727][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 749.661106][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 749.714128][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 749.734909][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.768115][ T9] usb 4-1: Product: syz [ 749.779778][ T5295] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 749.791912][ T9] usb 4-1: Manufacturer: syz [ 749.796628][ T9] usb 4-1: SerialNumber: syz [ 749.826940][T22456] netlink: 'syz.5.7527': attribute type 4 has an invalid length. [ 749.878532][ T9] usb 4-1: config 0 descriptor?? [ 750.041877][ T5295] usb 1-1: config 0 has an invalid interface number: 142 but max is 0 [ 750.061946][ T5295] usb 1-1: config 0 has no interface number 0 [ 750.068502][ T5295] usb 1-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30 [ 750.138161][ T5295] usb 1-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 750.180200][ T9] usb 4-1: Unknown endpoint type found, address 0x06 [ 750.188301][ T9] usb 4-1: Not enough endpoints found in device, aborting! [ 750.210061][ T5295] usb 1-1: config 0 interface 142 has no altsetting 0 [ 750.273055][ T5295] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 750.305381][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.384973][ T5295] usb 1-1: config 0 descriptor?? [ 750.433394][ T5295] ums-realtek 1-1:0.142: USB Mass Storage device detected [ 750.486548][T21014] usb 4-1: USB disconnect, device number 81 [ 750.515752][T22478] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 750.530255][T22479] netlink: 'syz.1.7537': attribute type 10 has an invalid length. [ 750.753431][ T935] usb 1-1: USB disconnect, device number 81 [ 750.761052][T22485] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 750.916135][T22491] loop2: detected capacity change from 0 to 512 [ 750.992061][T22491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.010398][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7545'. [ 751.023939][T22491] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 751.040292][T22499] autofs4:pid:22499:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 751.052417][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7545'. [ 751.106477][T22497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7545'. [ 751.193290][T19900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.881646][T21014] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 752.076788][T21014] usb 2-1: Using ep0 maxpacket: 32 [ 752.094158][T21014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.234508][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 752.234533][ T29] audit: type=1326 audit(1729116860.896:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22542 comm="syz.2.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 752.267723][T21014] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 752.278454][T21014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.286821][T21014] usb 2-1: Product: syz [ 752.291015][T21014] usb 2-1: Manufacturer: syz [ 752.295987][T21014] usb 2-1: SerialNumber: syz [ 752.331534][T21014] usb 2-1: config 0 descriptor?? [ 752.335470][T22547] QAT: Invalid ioctl 21531 [ 752.399912][T21014] pvrusb2: Hardware description: Terratec Grabster AV400 [ 752.407398][T21014] pvrusb2: ********** [ 752.407842][ T29] audit: type=1326 audit(1729116860.896:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22542 comm="syz.2.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 752.411380][T21014] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 752.446733][T21014] pvrusb2: Important functionality might not be entirely working. [ 752.454665][T21014] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 752.466113][T21014] pvrusb2: ********** [ 752.512779][T22550] loop5: detected capacity change from 0 to 8 [ 752.552560][ T29] audit: type=1326 audit(1729116860.933:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22542 comm="syz.2.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 752.597934][ T29] audit: type=1326 audit(1729116860.933:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22542 comm="syz.2.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 752.620565][ T29] audit: type=1326 audit(1729116860.933:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22542 comm="syz.2.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 752.663344][ T2033] pvrusb2: Invalid write control endpoint [ 752.685726][T22550] SQUASHFS error: Unable to read directory block [631:26] [ 753.021766][ T2033] pvrusb2: Invalid write control endpoint [ 753.027629][ T2033] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 753.038312][ T2033] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 753.046864][ T2033] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 753.057182][ T2033] pvrusb2: Device being rendered inoperable [ 753.063492][ T2033] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 753.070573][ T2033] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 753.079313][ T2033] pvrusb2: Attached sub-driver cx25840 [ 753.085135][ T2033] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 753.095793][ T2033] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 753.302767][T21014] usb 2-1: USB disconnect, device number 96 [ 753.657298][T22575] netlink: 'syz.2.7579': attribute type 8 has an invalid length. [ 754.036460][T22584] loop2: detected capacity change from 0 to 128 [ 754.056153][T22584] befs: Invalid gid -1, using default [ 754.075898][T22584] befs: (loop2): No write support. Marking filesystem read-only [ 754.150481][T22584] befs: (loop2): invalid magic header [ 754.200062][ T5298] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 754.260918][T22584] tmpfs: Bad value for 'mpol' [ 754.388065][ T5298] usb 1-1: config 1 has an invalid interface number: 166 but max is 0 [ 754.405860][ T5298] usb 1-1: config 1 has no interface number 0 [ 754.444574][ T5298] usb 1-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b6.97 [ 754.520909][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.832282][ T5298] cdc_subset 1-1:1.166: probe with driver cdc_subset failed with error -22 [ 754.984883][T22606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7596'. [ 755.067412][ T5298] usb 1-1: USB disconnect, device number 82 [ 755.979107][T22642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7615'. [ 756.334342][T22651] loop5: detected capacity change from 0 to 1024 [ 756.371547][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7625'. [ 756.662179][T22668] overlayfs: conflicting options: userxattr,metacopy=on [ 756.674719][T22651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.767837][T22651] ext4 filesystem being mounted at /1310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.037559][ T5244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.589460][T22699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7641'. [ 757.914011][T22694] loop1: detected capacity change from 0 to 32768 [ 758.140878][T22694] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 758.356920][T22716] loop2: detected capacity change from 0 to 4096 [ 758.404110][T22716] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 758.484977][T22716] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 758.522794][ T5295] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 758.533993][T22716] ntfs3(loop2): mft corrupted [ 758.538805][T22716] ntfs3(loop2): Failed to load $Extend (-22). [ 758.556773][T22716] ntfs3(loop2): Failed to initialize $Extend. [ 758.563638][T22694] XFS (loop1): Ending clean mount [ 758.616175][T22694] XFS (loop1): Quotacheck needed: Please wait. [ 758.629468][T22716] ntfs3(loop2): ino=1b, "file0" failed to parse mft record [ 758.664266][T22716] ntfs3(loop2): ino=1b, "file0" attr_set_size [ 758.708150][ T5295] usb 6-1: Using ep0 maxpacket: 8 [ 758.717940][T22694] XFS (loop1): Quotacheck: Done. [ 758.717981][ T5295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.739777][ T5295] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 758.750418][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.768728][ T5295] usb 6-1: config 0 descriptor?? [ 758.777799][ T5295] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 759.016980][ T5228] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 759.062311][T22744] misc userio: Invalid payload size [ 759.087360][T22745] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7659'. [ 759.225046][ T5295] gspca_vc032x: reg_w err -71 [ 759.239818][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7659'. [ 759.250810][ T5295] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 759.272350][ T5295] usb 6-1: USB disconnect, device number 85 [ 760.494651][ T29] audit: type=1326 audit(1729116868.484:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22768 comm="syz.2.7673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x0 [ 760.607877][T22789] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 760.818131][T22795] loop0: detected capacity change from 0 to 256 [ 761.002842][T22795] FAT-fs (loop0): Directory bread(block 64) failed [ 761.010269][T22795] FAT-fs (loop0): Directory bread(block 65) failed [ 761.019816][T22795] FAT-fs (loop0): Directory bread(block 66) failed [ 761.027106][T22795] FAT-fs (loop0): Directory bread(block 67) failed [ 761.033788][T22795] FAT-fs (loop0): Directory bread(block 68) failed [ 761.063424][T22795] FAT-fs (loop0): Directory bread(block 69) failed [ 761.070658][T22795] FAT-fs (loop0): Directory bread(block 70) failed [ 761.082107][T22795] FAT-fs (loop0): Directory bread(block 71) failed [ 761.088793][T22795] FAT-fs (loop0): Directory bread(block 72) failed [ 761.101459][T22795] FAT-fs (loop0): Directory bread(block 73) failed [ 761.112322][T22803] usb usb8: usbfs: process 22803 (syz.2.7689) did not claim interface 0 before use [ 762.835534][ T5298] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 762.874256][T22872] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7722'. [ 762.926047][T22871] loop2: detected capacity change from 0 to 4096 [ 762.982072][T22872] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7722'. [ 762.986875][T22871] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 763.033713][ T5298] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 763.078593][ T5298] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 763.109338][ T5298] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 763.129519][T22871] ntfs3(loop2): failed to convert "c46c" to cp862 [ 763.153175][ T5298] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 763.198601][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 763.244362][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 763.274548][ T5298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 763.364867][ T5298] usb 5-1: string descriptor 0 read error: -22 [ 763.398165][ T5298] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 763.423664][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.441435][T21014] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 763.461804][ T5298] usb 5-1: config 0 descriptor?? [ 763.463498][T22885] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7727'. [ 763.492935][ T5298] hub 5-1:0.0: bad descriptor, ignoring hub [ 763.522729][ T5298] hub 5-1:0.0: probe with driver hub failed with error -5 [ 763.554467][ T5298] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input59 [ 763.636412][T21014] usb 6-1: Using ep0 maxpacket: 8 [ 763.660020][ T29] audit: type=1326 audit(1729116871.447:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22891 comm="syz.2.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 763.702038][T21014] usb 6-1: config 253 has an invalid interface number: 180 but max is 0 [ 763.740798][T21014] usb 6-1: config 253 has no interface number 0 [ 763.746994][ T29] audit: type=1326 audit(1729116871.483:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22891 comm="syz.2.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 763.766423][T21014] usb 6-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=3e.f3 [ 763.851225][T21014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.894997][ T29] audit: type=1326 audit(1729116871.502:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22891 comm="syz.2.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 763.905683][T21014] r8712u: register rtl8712_netdev_ops to netdev_ops [ 763.962880][ T29] audit: type=1326 audit(1729116871.502:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22891 comm="syz.2.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 764.018278][ T29] audit: type=1326 audit(1729116871.502:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22891 comm="syz.2.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 764.221405][T21014] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 764.280104][ T5298] usb 5-1: USB disconnect, device number 91 [ 764.338773][T22902] loop2: detected capacity change from 0 to 64 [ 764.430761][T21014] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 764.439573][T21014] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 764.447086][T21014] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 764.487670][T22902] Trying to free block not in datazone [ 764.489152][T21014] usb 6-1: USB disconnect, device number 86 [ 764.532720][T22902] Trying to free block not in datazone [ 764.612436][T22902] Trying to free block not in datazone [ 764.769868][T22912] loop1: detected capacity change from 0 to 4096 [ 764.814871][T22912] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 765.038085][T22912] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 765.099617][T22912] ntfs3(loop1): mft corrupted [ 765.104576][T22912] ntfs3(loop1): Failed to load $Extend (-22). [ 765.135637][T22912] ntfs3(loop1): Failed to initialize $Extend. [ 765.142403][ T5298] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 765.253658][T22923] netlink: 'syz.2.7748': attribute type 2 has an invalid length. [ 765.273049][T22912] ntfs3(loop1): ino=1b, "file0" failed to parse mft record [ 765.312902][T22912] ntfs3(loop1): ino=1b, "file0" attr_set_size [ 765.368145][ T5298] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 765.410366][ T5298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.467492][ T5298] usb 4-1: config 0 has no interface number 0 [ 765.473735][ T5298] usb 4-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 765.521463][ T5298] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 765.532613][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7752'. [ 765.532715][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7752'. [ 765.664379][ T5298] usb 4-1: config 0 interface 224 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 765.714185][ T5298] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 765.751750][ T5298] usb 4-1: config 0 interface 224 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 765.789822][ T5298] usb 4-1: config 0 interface 224 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 765.827245][T22942] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7757'. [ 765.926057][T22945] siw: device registration error -23 [ 766.040191][ T5298] usb 4-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=69.e2 [ 766.052334][ T5298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.060359][ T5298] usb 4-1: Product: syz [ 766.064867][ T5298] usb 4-1: Manufacturer: syz [ 766.070321][ T5298] usb 4-1: SerialNumber: syz [ 766.108015][ T5298] usb 4-1: config 0 descriptor?? [ 766.151648][ T5298] keyspan 4-1:0.224: Keyspan 4 port adapter converter detected [ 766.159662][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 87 [ 766.167620][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 7 [ 766.176519][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 81 [ 766.208264][ T5298] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 766.226981][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 82 [ 766.237108][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 2 [ 766.280487][ T5298] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 766.302093][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 83 [ 766.310008][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 3 [ 766.357645][ T5298] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 766.368334][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 84 [ 766.376255][ T5298] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 4 [ 766.404072][ T5298] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 766.417131][T22960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.458218][ T5298] usb 4-1: USB disconnect, device number 82 [ 766.487469][ T5298] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 766.590938][ T5298] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 766.628080][ T5298] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 766.646376][ T5298] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 766.661714][ T5298] keyspan 4-1:0.224: device disconnected [ 767.049304][T21014] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 767.284943][T21014] usb 2-1: Using ep0 maxpacket: 16 [ 767.377093][T22956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7763'. [ 767.420467][T21014] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 767.435195][T21014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.461107][T21014] usb 2-1: Product: syz [ 767.465357][T21014] usb 2-1: Manufacturer: syz [ 767.504801][T21014] usb 2-1: SerialNumber: syz [ 767.548177][T21014] usb 2-1: config 0 descriptor?? [ 767.569446][T21014] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 767.615462][T22980] xt_TCPMSS: Only works on TCP SYN packets [ 767.727015][T22982] loop5: detected capacity change from 0 to 64 [ 767.792389][T22982] Trying to free block not in datazone [ 767.813738][T22982] Trying to free block not in datazone [ 767.948971][T22982] Trying to free block not in datazone [ 767.983996][T21014] usb 2-1: USB disconnect, device number 97 [ 768.666597][ T5298] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 768.847608][ T5298] usb 6-1: Using ep0 maxpacket: 16 [ 768.897986][ T5298] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 768.935815][T23009] loop0: detected capacity change from 0 to 32768 [ 768.940574][ T5298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.026293][T23009] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 769.036534][ T5298] usb 6-1: Product: syz [ 769.040757][ T5298] usb 6-1: Manufacturer: syz [ 769.097815][ T5298] usb 6-1: SerialNumber: syz [ 769.118660][ T5298] usb 6-1: config 0 descriptor?? [ 769.496521][T23042] @: renamed from bond0 (while UP) [ 769.523710][ T5298] usb 6-1: Invalid number of CPorts: 0 [ 769.531289][ T5298] es2_ap_driver 6-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 769.725503][T23009] XFS (loop0): Ending clean mount [ 769.776698][T23009] XFS (loop0): Quotacheck needed: Please wait. [ 769.822363][ C0] vkms_vblank_simulate: vblank timer overrun [ 770.026363][T23009] XFS (loop0): Quotacheck: Done. [ 770.039509][ T9] usb 6-1: USB disconnect, device number 87 [ 770.374822][ T8090] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.462499][T23066] netlink: 'syz.1.7811': attribute type 2 has an invalid length. [ 770.515097][T23066] netlink: 'syz.1.7811': attribute type 1 has an invalid length. [ 770.557268][T23066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7811'. [ 770.594394][T23072] netlink: 'syz.2.7815': attribute type 21 has an invalid length. [ 770.616205][T23072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7815'. [ 771.340291][T23101] syz.5.7828[23101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 771.340409][T23101] syz.5.7828[23101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 771.416250][T23101] syz.5.7828[23101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 771.794576][T23116] netlink: 'syz.5.7835': attribute type 1 has an invalid length. [ 771.950002][T23116] nbd: couldn't find a device at index 2097172 [ 772.049202][T23122] loop2: detected capacity change from 0 to 256 [ 772.061681][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.204297][T23108] loop1: detected capacity change from 0 to 40427 [ 772.268956][T23108] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 772.277236][T23108] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 772.381595][T23108] F2FS-fs (loop1): invalid crc value [ 772.436915][T23108] F2FS-fs (loop1): Found nat_bits in checkpoint [ 772.494981][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.585024][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.639557][T23108] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 772.646744][T23108] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 772.860371][T23148] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7844'. [ 773.042544][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 773.219732][T23156] program syz.0.7851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 773.268556][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 773.310748][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.343886][ T9] usb 3-1: Product: syz [ 773.359610][ T9] usb 3-1: Manufacturer: syz [ 773.364278][ T9] usb 3-1: SerialNumber: syz [ 773.422388][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 773.457966][ T5295] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 774.064159][ T9] usb 3-1: USB disconnect, device number 87 [ 774.651771][ T5295] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 774.659086][ T5295] ath9k_htc: Failed to initialize the device [ 774.693750][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 774.774027][ T5370] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 774.949960][ T5370] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 774.963764][ T5370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.030815][ T5370] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 775.051625][ T5370] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 775.073492][ T5370] usb 2-1: Manufacturer: syz [ 775.085809][ T5370] usb 2-1: config 0 descriptor?? [ 775.095651][ T5370] igorplugusb 2-1:0.0: incorrect number of endpoints [ 775.357174][ T5370] usb 2-1: USB disconnect, device number 98 [ 775.779149][T23192] loop0: detected capacity change from 0 to 64 [ 776.235511][T23198] loop0: detected capacity change from 0 to 64 [ 776.553303][T23200] syz.2.7874: attempt to access beyond end of device [ 776.553303][T23200] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 776.580749][T23200] VFS: could not find a valid V7 on nbd2. [ 777.543330][T23216] loop1: detected capacity change from 0 to 2048 [ 777.573204][T23216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 777.622004][T23216] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 777.667323][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.719154][T23216] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 777.728397][T23216] System zones: 0-19 [ 777.774603][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.797648][T23216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.866811][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.903813][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.045692][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.209027][T23194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7870'. [ 778.231146][T23194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7870'. [ 778.471711][T23227] loop0: detected capacity change from 0 to 256 [ 778.953578][T23245] loop1: detected capacity change from 0 to 4096 [ 778.995488][T23245] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 779.944211][ T5370] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 780.173314][T23275] overlay: Unknown parameter 'reiser\s\' [ 780.192652][ T5370] usb 3-1: Using ep0 maxpacket: 32 [ 780.203898][ T5370] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 780.234202][ T5370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.278150][ T5370] usb 3-1: config 0 descriptor?? [ 780.505989][T23290] loop1: detected capacity change from 0 to 256 [ 780.527489][ T5370] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 780.542659][T23290] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 780.582540][ T5370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 780.646289][ T5370] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 780.653593][ T5370] usb 3-1: media controller created [ 780.723760][ T5370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.791998][ T5370] az6027: usb out operation failed. (-71) [ 780.811479][ T5370] az6027: usb out operation failed. (-71) [ 780.817282][ T5370] stb0899_attach: Driver disabled by Kconfig [ 780.884379][ T5370] az6027: no front-end attached [ 780.884379][ T5370] [ 780.928727][ T5370] az6027: usb out operation failed. (-71) [ 780.934613][ T5370] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 780.945621][T23303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7918'. [ 780.976748][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7918'. [ 780.988503][ T5370] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 781.059770][ T5370] dvb-usb: schedule remote query interval to 400 msecs. [ 781.066815][ T5370] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 781.125712][ T5370] usb 3-1: USB disconnect, device number 88 [ 781.342944][ T5370] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 781.588558][T23318] netlink: 'syz.1.7926': attribute type 34 has an invalid length. [ 782.059568][T23335] netlink: 'syz.1.7935': attribute type 2 has an invalid length. [ 782.092387][T23335] netlink: 723 bytes leftover after parsing attributes in process `syz.1.7935'. [ 782.247330][T23304] loop5: detected capacity change from 0 to 40427 [ 782.355670][T23304] F2FS-fs (loop5): invalid crc value [ 782.412422][T23304] F2FS-fs (loop5): Found nat_bits in checkpoint [ 782.512276][T23352] netlink: 'syz.0.7942': attribute type 2 has an invalid length. [ 782.609717][T23304] F2FS-fs (loop5): Start checkpoint disabled! [ 782.644376][T23304] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 782.765905][T23304] syz.5.7920: attempt to access beyond end of device [ 782.765905][T23304] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 783.139367][ T11] kworker/u8:0: attempt to access beyond end of device [ 783.139367][ T11] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 783.170311][ T5370] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 783.224661][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 783.255009][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 783.408666][ T5370] usb 4-1: Using ep0 maxpacket: 16 [ 783.428105][ T5370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.484500][ T5370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58880, setting to 1024 [ 783.547760][ T5370] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.626762][ T5370] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 783.635908][ T5370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.695586][ T5370] usb 4-1: config 0 descriptor?? [ 783.704275][T23364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 783.792239][ T5370] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62 [ 784.247546][T23358] loop1: detected capacity change from 0 to 32768 [ 784.255661][T23211] usb 4-1: USB disconnect, device number 83 [ 784.331504][T23358] loop1: p1 p2 p3 < > [ 784.336063][T23358] loop1: p1 size 242222080 extends beyond EOD, truncated [ 784.556166][T23366] loop0: detected capacity change from 0 to 32768 [ 784.645161][T23366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7948 (23366) [ 784.697121][T23366] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 784.719499][T23366] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 784.728096][T23366] BTRFS info (device loop0): using free-space-tree [ 784.783882][ T29] audit: type=1326 audit(1729116890.941:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.5.7961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 784.883300][T23404] x_tables: unsorted underflow at hook 2 [ 784.930233][ T29] audit: type=1326 audit(1729116890.941:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.5.7961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 785.063895][ T29] audit: type=1326 audit(1729116890.987:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.5.7961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 785.086848][ T29] audit: type=1326 audit(1729116890.995:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.5.7961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 785.239461][ T29] audit: type=1326 audit(1729116890.995:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.5.7961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 785.337439][ T8090] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 785.782741][T23432] netlink: 'syz.1.7975': attribute type 1 has an invalid length. [ 785.790630][T23432] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7975'. [ 785.829653][T23432] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7975'. [ 785.875621][T23440] loop5: detected capacity change from 0 to 64 [ 786.047363][T23440] Trying to free block not in datazone [ 786.104528][T23440] minix_free_block (loop5:21): bit already cleared [ 786.634262][T23463] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.7988'. [ 786.767862][T23470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.897758][T23211] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 786.953825][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.047547][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.088265][T23211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 787.121622][T23211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 787.193903][T23211] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 787.232958][T23211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.245818][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.252041][T23211] usb 3-1: Product: syz [ 787.271958][T23211] usb 3-1: Manufacturer: syz [ 787.303368][T23211] usb 3-1: SerialNumber: syz [ 787.364408][T23211] usb 3-1: config 0 descriptor?? [ 787.372188][T23460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 787.380081][T23460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 787.625657][T23460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 787.660043][T23460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 787.948279][T23507] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 787.958896][T23211] Error reading MAC address [ 788.016565][T23211] usb 3-1: USB disconnect, device number 89 [ 788.095453][T23513] loop5: detected capacity change from 0 to 256 [ 788.803792][T23535] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8022'. [ 789.031251][T23538] xt_CT: No such helper "pptp" [ 789.039150][T23541] loop1: detected capacity change from 0 to 2048 [ 789.111472][T23541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.237496][T23541] ext4 filesystem being mounted at /1370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.534207][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 789.558588][T23558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8033'. [ 789.591271][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.158710][T23211] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 790.421958][T23211] usb 1-1: Using ep0 maxpacket: 32 [ 790.431580][T23211] usb 1-1: New USB device found, idVendor=2040, idProduct=b700, bcdDevice=46.e3 [ 790.450349][T23211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.499726][T23211] usb 1-1: Product: syz [ 790.504065][T23211] usb 1-1: Manufacturer: syz [ 790.521801][T23211] usb 1-1: SerialNumber: syz [ 790.565400][T23211] usb 1-1: config 0 descriptor?? [ 790.596615][T23211] usb 1-1: dvb_usb_v2: found a 'Hauppauge 117xxx ATSC+' in warm state [ 790.628529][T23211] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 790.663048][T23211] dvbdev: DVB: registering new adapter (Hauppauge 117xxx ATSC+) [ 790.689289][T23211] usb 1-1: media controller created [ 790.764183][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8050'. [ 790.777488][T23211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 790.894417][T23211] usb 1-1: selecting invalid altsetting 1 [ 790.949880][T23211] set interface failed [ 790.949925][T23211] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 790.993646][T23211] error writing reg: 0xff, val: 0x00 [ 791.063063][T23211] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 791.103828][T23572] loop5: detected capacity change from 0 to 32768 [ 791.145607][T23211] usb 1-1: USB disconnect, device number 83 [ 791.275978][T23572] add_index: next_index = 0. Resetting! [ 791.355085][T23604] overlay: Unknown parameter 'obj_role' [ 791.641709][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8055'. [ 791.729398][ T5295] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 791.913477][ T5295] usb 2-1: Using ep0 maxpacket: 16 [ 791.921872][T23616] loop5: detected capacity change from 0 to 256 [ 791.922132][ T5295] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 791.973765][T23616] exfat: Deprecated parameter 'namecase' [ 791.978531][ T5295] usb 2-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 792.015198][T23616] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 792.022486][ T5295] usb 2-1: config 0 has no interface number 0 [ 792.056766][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8059'. [ 792.079636][ T5295] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 792.101381][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.130265][ T5295] usb 2-1: Product: syz [ 792.145498][ T5295] usb 2-1: Manufacturer: syz [ 792.150141][ T5295] usb 2-1: SerialNumber: syz [ 792.217869][ T5295] usb 2-1: config 0 descriptor?? [ 792.262529][ T5295] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 792.268964][ T5295] usb 2-1: No valid video chain found. [ 792.292321][T23624] loop2: detected capacity change from 0 to 8 [ 792.299860][T23624] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 792.315928][T23624] cramfs: Error -3 while decompressing! [ 792.322115][T23624] cramfs: ffffffff9a508958(27)->ffff888051e51000(4096) [ 792.329343][T23624] cramfs: Error -3 while decompressing! [ 792.335119][T23624] cramfs: ffffffff9a508958(27)->ffff888051e51000(4096) [ 792.344995][ T29] audit: type=1800 audit(1729116897.926:148): pid=23624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8063" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 792.894932][T23211] usb 2-1: USB disconnect, device number 99 [ 792.914264][T23645] afs: Unknown parameter 'd' [ 792.953053][T23646] process 'syz.4.8073' launched './file0' with NULL argv: empty string added [ 793.086544][T23652] netlink: 'syz.2.8076': attribute type 4 has an invalid length. [ 793.102596][T23652] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8076'. [ 793.340658][ T29] audit: type=1326 audit(1729116898.840:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23657 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae1f7dff9 code=0x7ffc0000 [ 793.363056][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.466548][ T29] audit: type=1326 audit(1729116898.877:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23657 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8ae1f7dff9 code=0x7ffc0000 [ 793.488991][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.603564][ T29] audit: type=1326 audit(1729116898.877:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23657 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae1f7dff9 code=0x7ffc0000 [ 793.708147][ T29] audit: type=1326 audit(1729116899.080:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23666 comm="syz.2.8084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x0 [ 793.987362][T23685] loop1: detected capacity change from 0 to 64 [ 794.504706][T23691] loop5: detected capacity change from 0 to 32768 [ 794.654434][T23691] (syz.5.8095,23691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 794.694261][T23691] (syz.5.8095,23691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 794.729438][T23691] (syz.5.8095,23691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 794.771567][T23691] JBD2: Ignoring recovery information on journal [ 794.891113][T23691] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 795.240155][T23724] netlink: 'syz.2.8111': attribute type 15 has an invalid length. [ 795.249007][T23724] netlink: 'syz.2.8111': attribute type 7 has an invalid length. [ 795.301013][ T5244] ocfs2: Unmounting device (7,5) on (node local) [ 795.528890][T23735] loop1: detected capacity change from 0 to 128 [ 795.718776][T23735] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 795.825450][T23735] ext4 filesystem being mounted at /1380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 795.944935][ T5228] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 796.332758][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8129'. [ 796.367097][T23766] netlink: 'syz.2.8130': attribute type 32 has an invalid length. [ 796.575896][T23776] SET target dimension over the limit! [ 797.198936][T23738] loop5: detected capacity change from 0 to 32768 [ 797.236656][T23738] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 797.254617][T23738] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 797.274021][T23738] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 797.332145][T14144] Bluetooth: hci7: command 0x0406 tx timeout [ 797.393617][T23738] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 798.186685][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 798.260278][T23844] netlink: 'syz.3.8165': attribute type 1 has an invalid length. [ 798.284870][T23844] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.8165'. [ 798.350089][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 798.392515][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 798.413983][ T9] usb 3-1: config 179 has no interface number 0 [ 798.420635][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 798.498764][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 798.650801][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 798.724370][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 798.766950][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 798.791834][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 798.801941][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.846003][T23829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 799.009942][ T5295] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 799.185500][ T5295] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 799.194645][ T5295] usb 6-1: config 0 has no interface number 0 [ 799.200922][ T5295] usb 6-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=9e.c3 [ 799.210951][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.232286][ T5295] usb 6-1: config 0 descriptor?? [ 799.286342][ T5295] gspca_main: spca501-2.14.0 probing 0506:00df [ 799.401934][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 799.401934][ T5298] usb 3-1: USB disconnect, device number 90 [ 799.402167][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 799.727163][ T5295] gspca_spca501: reg write: error -71 [ 799.732613][ T5295] spca501 6-1:0.199: Reg write failed for 0x00,0x02,0x01 [ 799.754976][ T5295] spca501 6-1:0.199: probe with driver spca501 failed with error -22 [ 799.787276][ T5295] usb 6-1: USB disconnect, device number 88 [ 799.863170][T23897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8192'. [ 799.877295][T23897] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 799.968009][T23900] loop1: detected capacity change from 0 to 1024 [ 800.138683][ T12] hfsplus: b-tree write err: -5, ino 4 [ 800.685247][T23930] loop2: detected capacity change from 0 to 64 [ 803.519371][T23983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8230'. [ 803.729519][T23994] loop5: detected capacity change from 0 to 128 [ 803.910085][ T29] audit: type=1326 audit(1729116908.569:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.2.8238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 803.978031][ T29] audit: type=1326 audit(1729116908.569:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.2.8238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 804.055312][T24005] netlink: 'syz.5.8242': attribute type 10 has an invalid length. [ 804.364593][T24005] macvlan0: entered promiscuous mode [ 804.370958][T24005] macvlan0: entered allmulticast mode [ 804.579467][T24005] veth1_vlan: entered allmulticast mode [ 804.619429][T24005] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 804.835919][T24025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.843287][T24025] IPv6: NLM_F_CREATE should be set when creating new route [ 804.850760][T24025] IPv6: NLM_F_CREATE should be set when creating new route [ 804.858020][T24025] IPv6: NLM_F_CREATE should be set when creating new route [ 805.310922][T24039] loop1: detected capacity change from 0 to 1764 [ 805.336805][T24043] ax25_connect(): syz.2.8258 uses autobind, please contact jreuter@yaina.de [ 805.542034][T24049] loop2: detected capacity change from 0 to 1024 [ 806.024695][T24054] loop1: detected capacity change from 0 to 32768 [ 806.032514][T24054] bcachefs: bch2_parse_one_mount_opt() Invalid mount option erasure_code: must be bool [ 806.263429][T24049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.265842][T24070] tmpfs: Bad value for 'mpol' [ 806.276058][T24049] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.493393][T19900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.178963][T24133] bridge1: entered promiscuous mode [ 808.213045][T24133] bridge1: entered allmulticast mode [ 808.754958][ T29] audit: type=1326 audit(1729116913.073:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24154 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 808.825758][ T29] audit: type=1326 audit(1729116913.110:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24154 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 808.867377][T24159] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 808.901535][ T29] audit: type=1326 audit(1729116913.110:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24154 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 808.966682][ T29] audit: type=1326 audit(1729116913.137:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24154 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 809.010048][ T29] audit: type=1326 audit(1729116913.137:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24154 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 809.081535][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8314'. [ 809.091144][T24164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8314'. [ 809.478881][T23211] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 809.495377][ T29] audit: type=1326 audit(1729116913.747:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.1.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275bf7dff9 code=0x7ffc0000 [ 809.519867][ T29] audit: type=1326 audit(1729116913.756:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.1.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f275bf7dff9 code=0x7ffc0000 [ 809.542448][ T29] audit: type=1326 audit(1729116913.756:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.1.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275bf7dff9 code=0x7ffc0000 [ 809.565324][ T29] audit: type=1326 audit(1729116913.756:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.1.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275bf7dff9 code=0x7ffc0000 [ 809.724893][ T25] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 809.761806][T23211] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 809.771105][T23211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.784799][T23211] usb 6-1: Product: syz [ 809.789012][T23211] usb 6-1: Manufacturer: syz [ 809.804972][T23211] usb 6-1: SerialNumber: syz [ 809.825722][T23211] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 809.853989][ T5298] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 809.898994][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 809.909637][ T25] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=21.29 [ 809.919322][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.933434][ T25] usb 1-1: Product: syz [ 809.937754][ T25] usb 1-1: Manufacturer: syz [ 809.996187][ T25] usb 1-1: SerialNumber: syz [ 810.029998][ T25] usb 1-1: config 0 descriptor?? [ 810.145527][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8327'. [ 810.149259][T24198] loop2: detected capacity change from 0 to 8 [ 810.154950][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8327'. [ 810.289371][ T5295] usb 1-1: USB disconnect, device number 84 [ 810.330785][ T29] audit: type=1800 audit(1729116914.522:164): pid=24198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8329" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 810.434362][ T25] usb 6-1: USB disconnect, device number 89 [ 810.757331][T24210] netlink: 'syz.2.8334': attribute type 1 has an invalid length. [ 810.765852][T24210] netlink: 'syz.2.8334': attribute type 2 has an invalid length. [ 811.021800][ T5298] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 811.033964][ T5298] ath9k_htc: Failed to initialize the device [ 811.042382][ T25] usb 6-1: ath9k_htc: USB layer deinitialized [ 811.210826][T24226] loop5: detected capacity change from 0 to 8 [ 811.406018][T24220] loop2: detected capacity change from 0 to 32768 [ 811.490323][T24220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8338 (24220) [ 811.570364][T24220] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 811.588541][T24220] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 811.597126][T24220] BTRFS info (device loop2): using free-space-tree [ 811.781399][ T29] audit: type=1800 audit(1729116915.860:165): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8344" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 812.551527][T24268] openvswitch: netlink: Missing valid actions attribute. [ 812.561000][T24268] openvswitch: netlink: Actions may not be safe on all matching packets [ 812.769774][T19900] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 813.558782][T14144] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 813.569751][T14144] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 813.579465][T14144] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 813.583125][T24301] xt_TCPMSS: Only works on TCP SYN packets [ 813.614780][ T5295] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 813.666958][T14144] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 813.696891][T14144] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 813.735971][T14144] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 813.828227][ T5295] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 813.838066][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.860815][T24299] vcan0 speed is unknown, defaulting to 1000 [ 813.867169][ T5295] usb 2-1: Product: syz [ 813.871368][ T5295] usb 2-1: Manufacturer: syz [ 813.926845][ T5295] usb 2-1: SerialNumber: syz [ 813.951588][ T5295] usb 2-1: config 0 descriptor?? [ 813.974529][ T5295] ch341 2-1:0.0: ch341-uart converter detected [ 814.300840][T24318] netlink: 'syz.3.8376': attribute type 11 has an invalid length. [ 814.356146][T24318] netlink: 'syz.3.8376': attribute type 5 has an invalid length. [ 814.447803][ T5295] usb 2-1: failed to send control message: -71 [ 814.454285][ T5295] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 814.505618][ T5295] usb 2-1: USB disconnect, device number 100 [ 814.536124][ T5295] ch341 2-1:0.0: device disconnected [ 815.091647][T24299] chnl_net:caif_netlink_parms(): no params data found [ 815.316856][T24309] loop5: detected capacity change from 0 to 32768 [ 815.758231][T24309] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 815.958116][T14144] Bluetooth: hci9: command tx timeout [ 816.023413][T24299] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.031403][T24299] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.038716][T24299] bridge_slave_0: entered allmulticast mode [ 816.050605][T24299] bridge_slave_0: entered promiscuous mode [ 816.058371][T24309] XFS (loop5): Ending clean mount [ 816.063570][T24299] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.081786][T24299] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.150530][T24299] bridge_slave_1: entered allmulticast mode [ 816.160239][T24299] bridge_slave_1: entered promiscuous mode [ 816.193188][ T5244] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 816.277521][T24379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8404'. [ 816.281484][T24383] netlink: 'syz.0.8401': attribute type 4 has an invalid length. [ 816.379757][T24383] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8401'. [ 816.530785][T24299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.560017][T24299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.900076][T24299] team0: Port device team_slave_0 added [ 816.998285][T24299] team0: Port device team_slave_1 added [ 817.197430][T24406] loop5: detected capacity change from 0 to 2048 [ 817.271644][T24406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 817.331151][ T25] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 817.342882][T24299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.349951][T24299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.383699][T24299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.442390][T24299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.449420][T24299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.568978][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 817.591203][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 817.603457][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 817.618570][T24299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.630354][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 817.649115][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 19, changing to 7 [ 817.685712][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 817.696582][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.713345][ T25] usb 2-1: Product: syz [ 817.717573][ T25] usb 2-1: Manufacturer: syz [ 817.780670][ T25] usb 2-1: SerialNumber: syz [ 817.842740][T24418] loop2: detected capacity change from 0 to 8 [ 817.851958][ T25] usb 2-1: config 0 descriptor?? [ 817.962629][ T25] usbtest 2-1:0.0: couldn't get endpoints, -22 [ 817.969080][ T25] usbtest 2-1:0.0: probe with driver usbtest failed with error -22 [ 818.013702][T24418] SQUASHFS error: Failed to read block 0x1ec: -5 [ 818.020359][T24418] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 818.210241][T14144] Bluetooth: hci9: command tx timeout [ 818.260050][ T5298] usb 2-1: USB disconnect, device number 101 [ 818.326586][T24430] loop2: detected capacity change from 0 to 64 [ 818.343469][T24299] hsr_slave_0: entered promiscuous mode [ 818.385139][T24299] hsr_slave_1: entered promiscuous mode [ 818.413355][T24299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.427320][T24299] Cannot create hsr debugfs directory [ 818.749957][T21014] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 818.932754][T21014] usb 4-1: Using ep0 maxpacket: 16 [ 818.945028][ T25] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 818.983337][T21014] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 819.030957][T21014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.051119][T24451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8436'. [ 819.062164][T21014] usb 4-1: Product: syz [ 819.075482][T21014] usb 4-1: Manufacturer: syz [ 819.087838][T21014] usb 4-1: SerialNumber: syz [ 819.106653][T24451] netlink: 'syz.1.8436': attribute type 1 has an invalid length. [ 819.114623][T21014] usb 4-1: config 0 descriptor?? [ 819.142729][T24299] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.146537][T24455] kAFS: unable to lookup cell '' [ 819.175628][ T25] usb 3-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 819.189679][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.204512][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8437'. [ 819.236462][ T25] usb 3-1: Product: syz [ 819.251870][ T25] usb 3-1: Manufacturer: syz [ 819.258064][ T25] usb 3-1: SerialNumber: syz [ 819.312909][ T25] usb 3-1: config 0 descriptor?? [ 819.332466][ T25] usbtest 3-1:0.0: EZ-USB device [ 819.400665][ T25] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 819.409177][T21014] usb 4-1: Limiting number of CPorts to U8_MAX [ 819.442041][T24299] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.465264][T21014] usb 4-1: Not enough endpoints found in device, aborting! [ 819.522771][T24461] netlink: 'syz.5.8441': attribute type 3 has an invalid length. [ 819.626417][ T25] usb 3-1: USB disconnect, device number 91 [ 819.647673][T21014] usb 4-1: USB disconnect, device number 84 [ 820.000104][T24469] loop5: detected capacity change from 0 to 2048 [ 820.021544][T24471] xt_hashlimit: max too large, truncated to 1048576 [ 820.029064][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8447'. [ 820.060460][T24469] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 820.074641][T24299] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.099952][T24469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 820.359429][T14144] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 820.390003][T24299] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.444656][T24475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8450'. [ 820.462151][T14144] Bluetooth: hci9: command tx timeout [ 820.811809][T24299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 820.845173][T24299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 820.928503][T24492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8455'. [ 820.957382][T24299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 820.996687][T24498] syz.1.8459: attempt to access beyond end of device [ 820.996687][T24498] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 821.019936][T24299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 821.029275][T24498] syz.1.8459: attempt to access beyond end of device [ 821.029275][T24498] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 821.345169][T24299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.347013][T24506] loop2: detected capacity change from 0 to 512 [ 821.383456][T24508] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8463'. [ 821.457059][T24506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.541871][T24506] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.558986][T24299] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.587072][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8464'. [ 821.605077][T24490] loop5: detected capacity change from 0 to 32768 [ 821.613542][T24490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8456 (24490) [ 821.645801][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.652974][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.655429][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8464'. [ 821.680788][T24490] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 821.700993][T24490] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 821.730930][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.738365][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.750154][T24490] BTRFS info (device loop5): using free-space-tree [ 821.767138][T19900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.984691][T24299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.010901][T24299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.191799][T24542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8470'. [ 822.494723][ T5244] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 822.579306][T24299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.739810][T14144] Bluetooth: hci9: command tx timeout [ 823.033206][T24299] veth0_vlan: entered promiscuous mode [ 823.130846][T24571] netlink: 'syz.2.8481': attribute type 1 has an invalid length. [ 823.133343][T24299] veth1_vlan: entered promiscuous mode [ 823.323675][T24572] netlink: 'syz.0.8480': attribute type 4 has an invalid length. [ 823.342996][T24299] veth0_macvtap: entered promiscuous mode [ 823.384166][T24579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8483'. [ 823.394636][T24576] openvswitch: netlink: Actions may not be safe on all matching packets [ 823.464695][T24299] veth1_macvtap: entered promiscuous mode [ 823.526816][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.619183][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.689841][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.727174][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.769469][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8489'. [ 823.771286][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.831246][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.852409][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.868364][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.901375][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.932144][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.955243][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.977262][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.996201][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.021280][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.046626][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.061168][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.086116][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.111979][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.168904][T24299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.192121][T24584] netlink: 'syz.5.8472': attribute type 26 has an invalid length. [ 824.276604][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.294581][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.315131][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.383581][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.393562][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.462945][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.506304][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.554645][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.632793][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.661201][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.688595][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.730261][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.755679][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.778831][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.795282][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.827710][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.837623][T24299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.852560][T24613] loop2: detected capacity change from 0 to 4096 [ 824.859039][T24299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.886817][T24613] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 824.892872][T24299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.907117][T24299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.946991][T24299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.006702][T24299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.052636][T24299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.476515][T24625] netlink: 'syz.5.8506': attribute type 13 has an invalid length. [ 825.503312][T24625] gretap0: refused to change device tx_queue_len [ 825.509736][T24625] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 825.539875][T24610] loop1: detected capacity change from 0 to 32768 [ 825.559465][T24613] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 825.593703][T24613] ntfs3(loop2): Failed to load $Extend (-22). [ 825.614961][T24613] ntfs3(loop2): Failed to initialize $Extend. [ 825.673243][T24610] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 825.757934][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.772481][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.874997][ T29] audit: type=1326 audit(1729116928.865:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.5.8511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 825.930134][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.967703][T24610] XFS (loop1): Ending clean mount [ 825.975689][ T29] audit: type=1326 audit(1729116928.911:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.5.8511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 825.980437][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.028265][T24645] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8512'. [ 826.035864][T24610] XFS (loop1): Quotacheck needed: Please wait. [ 826.111404][ T29] audit: type=1326 audit(1729116928.939:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.5.8511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 826.224277][ T29] audit: type=1326 audit(1729116928.939:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.5.8511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 826.278604][T24610] XFS (loop1): Quotacheck: Done. [ 826.379416][ T29] audit: type=1326 audit(1729116928.939:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24640 comm="syz.5.8511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 826.557915][T24662] netlink: 'syz.5.8519': attribute type 10 has an invalid length. [ 826.573999][ T5228] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 826.640607][T24662] veth1_macvtap: left promiscuous mode [ 826.750559][T24667] (syz.0.8522,24667,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 826.832600][T24667] (syz.0.8522,24667,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 827.342753][T24683] netlink: 'syz.4.8531': attribute type 12 has an invalid length. [ 828.513249][T24731] loop1: detected capacity change from 0 to 1024 [ 828.573808][ T29] audit: type=1326 audit(1729116931.357:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24734 comm="syz.4.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 828.637107][ T29] audit: type=1326 audit(1729116931.357:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24734 comm="syz.4.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 828.749839][ T29] audit: type=1326 audit(1729116931.385:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24734 comm="syz.4.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 828.755791][T24741] loop5: detected capacity change from 0 to 512 [ 828.772252][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.778819][ T29] audit: type=1326 audit(1729116931.385:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24734 comm="syz.4.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 828.806924][T24739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8557'. [ 828.807811][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.808630][ T29] audit: type=1326 audit(1729116931.385:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24734 comm="syz.4.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 828.845620][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.853977][ T5346] hfsplus: b-tree write err: -5, ino 4 [ 829.056689][T24749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8564'. [ 829.066043][T24749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8564'. [ 829.177982][T24757] loop1: detected capacity change from 0 to 64 [ 829.189794][T24741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 829.204503][T24751] libceph: resolve ' [ 829.204503][T24751] -&fYǝa2i [ 829.204503][T24751] .?&*&' (ret=-3): failed [ 829.229616][T24741] EXT4-fs (loop5): orphan cleanup on readonly fs [ 829.261861][T24708] loop2: detected capacity change from 0 to 32768 [ 829.302684][T24741] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8558: bg 0: block 248: padding at end of block bitmap is not set [ 829.409108][T24741] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.8558: Failed to acquire dquot type 1 [ 829.425534][T24765] netlink: 'syz.4.8571': attribute type 11 has an invalid length. [ 829.447512][T24741] EXT4-fs (loop5): 1 truncate cleaned up [ 829.515389][T24741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 829.576833][T24741] ext4: Unexpected value for 'quota' [ 829.679290][ T5244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.711048][T24708] (syz.2.8543,24708,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 829.844871][T24708] (syz.2.8543,24708,0):ocfs2_mount_volume:1806 ERROR: status = -22 [ 829.887870][T24708] (syz.2.8543,24708,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 830.528848][ T9] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 830.666022][T24793] veth0_to_batadv: entered promiscuous mode [ 830.672163][T24793] veth0_to_batadv: entered allmulticast mode [ 830.687905][T24708] loop2: detected capacity change from 0 to 512 [ 830.733216][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 830.747461][T24708] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 830.797468][T24708] EXT4-fs (loop2): group descriptors corrupted! [ 830.817919][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 830.827524][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.861942][ T9] usb 6-1: Product: syz [ 830.868382][ T9] usb 6-1: Manufacturer: syz [ 830.873036][ T9] usb 6-1: SerialNumber: syz [ 830.902361][ T9] usb 6-1: config 0 descriptor?? [ 830.922664][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 831.182030][ T9] gp8psk: usb in 128 operation failed. [ 831.197685][ T9] gp8psk: usb in 137 operation failed. [ 831.203684][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 831.215103][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 831.224653][ T9] usb 6-1: media controller created [ 831.248228][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.272739][ T9] gp8psk_fe: Frontend revision 1 attached [ 831.279149][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 831.288012][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 831.422860][ T9] gp8psk: usb in 138 operation failed. [ 831.432709][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 831.461737][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 831.504868][ T9] usb 6-1: USB disconnect, device number 90 [ 831.731821][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 831.934419][T24836] loop2: detected capacity change from 0 to 64 [ 832.080689][T14144] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 832.599358][ T5295] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 832.691423][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8618'. [ 832.803589][ T5295] usb 2-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.823412][ T5295] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.854392][ T5295] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 832.909968][ T5295] usb 2-1: config 0 interface 0 has no altsetting 0 [ 832.933289][ T5295] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 832.948460][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.993973][ T5295] usb 2-1: Product: syz [ 833.008103][ T5295] usb 2-1: Manufacturer: syz [ 833.019637][ T5295] usb 2-1: SerialNumber: syz [ 833.057451][ T5295] usb 2-1: config 0 descriptor?? [ 833.329216][ T5295] usbtest 2-1:0.0: Linux user mode ISO test driver [ 833.364455][ T5295] usbtest 2-1:0.0: high-speed {control iso-in} tests (+alt) [ 833.460051][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 833.460074][ T29] audit: type=1326 audit(1729116935.871:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24897 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 833.511454][ T29] audit: type=1326 audit(1729116935.871:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24897 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 833.597419][ T29] audit: type=1326 audit(1729116935.880:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24897 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 833.662760][ T5295] usb 2-1: USB disconnect, device number 102 [ 833.713876][ T29] audit: type=1326 audit(1729116935.880:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24897 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 833.736257][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.811125][ T29] audit: type=1326 audit(1729116935.880:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24897 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0556f7dff9 code=0x7ffc0000 [ 834.005004][T24916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8640'. [ 834.145977][T24921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 834.288656][T24925] loop2: detected capacity change from 0 to 64 [ 834.377077][T24927] loop5: detected capacity change from 0 to 256 [ 835.487747][T24927] exfat: Deprecated parameter 'utf8' [ 835.567017][T24927] exfat: Deprecated parameter 'utf8' [ 835.679253][T24927] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 836.779647][T24967] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 837.316021][T24982] xt_cgroup: path and classid specified [ 837.597249][T24997] lo: entered allmulticast mode [ 837.709958][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 837.776598][T25003] netlink: 'syz.4.8684': attribute type 10 has an invalid length. [ 837.801621][T25003] team0: Device wlan1 is up. Set it down before adding it as a team port [ 837.883334][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 837.891425][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.915604][ T9] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 837.948820][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.997039][ T9] usb 3-1: config 0 descriptor?? [ 838.034053][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 838.178653][T25016] xt_TPROXY: Can be used only with -p tcp or -p udp [ 838.363322][T25024] loop5: detected capacity change from 0 to 256 [ 838.392517][T23211] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 838.475570][ T9] gspca_spca501: reg write: error -71 [ 838.481698][ T9] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 838.489538][ T9] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 838.516464][ T9] usb 3-1: USB disconnect, device number 92 [ 838.562934][T25026] loop1: detected capacity change from 0 to 4096 [ 838.618067][T25026] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 838.728288][T23211] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 838.738004][T23211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.746154][T23211] usb 5-1: Product: syz [ 838.751102][T23211] usb 5-1: Manufacturer: syz [ 838.756393][T23211] usb 5-1: SerialNumber: syz [ 838.784081][T23211] usb 5-1: config 0 descriptor?? [ 838.795789][T23211] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 838.966652][ T46] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 839.027782][T21014] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 839.152350][ T46] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 839.197566][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.225247][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.247499][T23211] gspca_sunplus: reg_w_riv err -71 [ 839.253217][T23211] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 839.253734][T21014] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 839.266834][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.280096][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.289906][T23211] usb 5-1: USB disconnect, device number 92 [ 839.332529][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.335183][T21014] usb 6-1: config 0 has no interface number 0 [ 839.343616][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.369676][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.391232][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.416307][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.421090][T21014] usb 6-1: config 0 interface 122 has no altsetting 0 [ 839.437818][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.480364][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.492548][T21014] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 839.501909][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.586727][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.595249][T21014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.597199][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.604979][T21014] usb 6-1: Product: syz [ 839.626450][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.638772][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 839.655688][T21014] usb 6-1: Manufacturer: syz [ 839.660739][T21014] usb 6-1: SerialNumber: syz [ 839.673333][ T46] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 839.686173][ T46] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 839.693751][T21014] usb 6-1: config 0 descriptor?? [ 839.710866][ T46] usb 1-1: Product: syz [ 839.728410][ T46] usb 1-1: Manufacturer: syz [ 839.733098][ T46] usb 1-1: SerialNumber: syz [ 839.746851][T25048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8706'. [ 839.769541][ T46] usb 1-1: config 0 descriptor?? [ 839.803668][ T46] yurex 1-1:0.0: Could not find endpoints [ 840.115538][T25054] binder: binder_mmap: 25053 20174000-20d74000 bad vm_flags failed -1 [ 840.376928][T25059] netlink: 'syz.2.8711': attribute type 3 has an invalid length. [ 840.384893][T25059] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8711'. [ 840.398961][ T46] usb 1-1: USB disconnect, device number 85 [ 840.652633][ T46] usb 6-1: USB disconnect, device number 91 [ 840.666920][ T46] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 841.473331][T21014] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 841.676388][T25124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8729'. [ 841.902790][T21014] usb 1-1: Using ep0 maxpacket: 8 [ 841.989487][T21014] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 842.021317][T21014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.038391][T21014] usb 1-1: Product: syz [ 842.042664][T21014] usb 1-1: Manufacturer: syz [ 842.076420][T21014] usb 1-1: SerialNumber: syz [ 842.096868][T21014] usb 1-1: config 0 descriptor?? [ 842.114897][T21014] ums-datafab 1-1:0.0: USB Mass Storage device detected [ 842.314706][T21014] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 842.505708][ T5370] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 842.533240][T21014] usb 1-1: USB disconnect, device number 86 [ 842.704393][ T5370] usb 6-1: Using ep0 maxpacket: 16 [ 842.713440][ T5370] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 842.724723][ T5370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.756337][ T5370] usb 6-1: Product: syz [ 842.778160][ T5370] usb 6-1: Manufacturer: syz [ 842.793200][ T5370] usb 6-1: SerialNumber: syz [ 842.813648][ T5370] usb 6-1: config 0 descriptor?? [ 843.091584][ T5370] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v185 fw v115.212.0 (1 channels) [ 843.375752][T25187] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 843.386910][ T5370] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 843.395239][ T5370] peak_usb 6-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 843.684373][ T5370] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 843.731192][ T5370] usb 6-1: USB disconnect, device number 92 [ 844.007281][T25203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8763'. [ 844.442356][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.754176][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8773'. [ 845.052612][T25242] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8780'. [ 845.113461][T25242] netlink: 'syz.5.8780': attribute type 7 has an invalid length. [ 845.418204][T25258] delete_channel: no stack [ 845.791741][ T29] audit: type=1326 audit(1729116947.242:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.4.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 845.814152][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.950405][ T29] audit: type=1326 audit(1729116947.242:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.4.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 846.060872][ T29] audit: type=1326 audit(1729116947.288:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.4.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 846.083332][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.178178][ T29] audit: type=1326 audit(1729116947.288:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.4.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 846.236258][T25292] netlink: 'syz.2.8805': attribute type 1 has an invalid length. [ 846.295230][ T29] audit: type=1326 audit(1729116947.288:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.4.8797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf3d7dff9 code=0x7ffc0000 [ 846.499154][T25305] tmpfs: Unexpected value for 'inode32' [ 846.931528][T25324] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 846.939576][T25324] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.8821'. [ 847.395757][T23211] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 847.592988][T23211] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 847.601796][T23211] usb 6-1: config 0 has no interface number 0 [ 847.607947][T23211] usb 6-1: New USB device found, idVendor=10c4, idProduct=8414, bcdDevice=89.32 [ 847.661877][T23211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.696199][T23211] usb 6-1: config 0 descriptor?? [ 847.726744][T23211] cp210x 6-1:0.244: cp210x converter detected [ 847.948952][T23211] cp210x 6-1:0.244: failed to get vendor val 0x370b size 1: -71 [ 847.969674][T23211] cp210x 6-1:0.244: querying part number failed [ 847.993886][T23211] usb 6-1: cp210x converter now attached to ttyUSB0 [ 848.033072][T23211] usb 6-1: USB disconnect, device number 93 [ 848.073156][T23211] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 848.109876][T23211] cp210x 6-1:0.244: device disconnected [ 848.780398][T25359] loop2: detected capacity change from 0 to 32768 [ 849.089697][T25401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8860'. [ 849.344917][T25412] netlink: 'syz.1.8865': attribute type 2 has an invalid length. [ 849.384355][T25412] : entered promiscuous mode [ 849.405494][T25416] loop5: detected capacity change from 0 to 512 [ 849.484160][T25416] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 849.584781][T25416] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8867: invalid indirect mapped block 8 (level 2) [ 849.614883][T25427] netlink: 'syz.1.8871': attribute type 1 has an invalid length. [ 849.649664][ T5298] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 849.668667][T25416] EXT4-fs (loop5): Remounting filesystem read-only [ 849.746813][T25416] EXT4-fs (loop5): 1 truncate cleaned up [ 849.797486][T25416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.874303][T25435] loop1: detected capacity change from 0 to 2048 [ 850.040460][ T5244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.130176][ T5298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 850.140414][ T5298] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 850.184124][ T5298] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.201762][T25435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 850.251709][ T5298] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.288219][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 850.296325][ T5298] usb 5-1: SerialNumber: syz [ 850.549108][ T5298] usb-storage 5-1:1.0: USB Mass Storage device detected [ 850.712777][T25458] netlink: 'syz.2.8884': attribute type 3 has an invalid length. [ 850.910833][ T5298] usb 5-1: USB disconnect, device number 93 [ 850.950272][ T29] audit: type=1326 audit(1729116952.023:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25461 comm="syz.0.8886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f605277dff9 code=0x0 [ 851.120937][T25468] libceph: resolve '40.' (ret=-3): failed [ 851.774023][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8900'. [ 852.151364][T25507] netlink: 'syz.4.8907': attribute type 1 has an invalid length. [ 852.195721][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8907'. [ 852.398685][T25512] libceph: resolve '0.0' (ret=-3): failed [ 853.029653][T21014] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 853.037436][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 853.202830][T21014] usb 5-1: Using ep0 maxpacket: 16 [ 853.218612][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 853.230664][T21014] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 853.246234][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.257039][T21014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.265131][T21014] usb 5-1: Product: syz [ 853.279234][ T9] usb 2-1: Product: syz [ 853.288650][ T9] usb 2-1: Manufacturer: syz [ 853.300306][T21014] usb 5-1: Manufacturer: syz [ 853.304944][T21014] usb 5-1: SerialNumber: syz [ 853.313373][ T9] usb 2-1: SerialNumber: syz [ 853.351756][T25559] loop2: detected capacity change from 0 to 128 [ 853.359895][ T9] usb 2-1: config 0 descriptor?? [ 853.379057][T21014] r8152-cfgselector 5-1: Unknown version 0x0000 [ 853.388955][T21014] r8152-cfgselector 5-1: config 0 descriptor?? [ 853.409832][T25559] hpfs: bad mount options. [ 853.445588][T25557] loop5: detected capacity change from 0 to 4096 [ 853.506729][T25559] loop2: detected capacity change from 0 to 2048 [ 853.527854][T25557] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 853.568327][T25559] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 853.582343][ T5293] udevd[5293]: incorrect nilfs2 checksum on /dev/loop2 [ 853.601399][ T9] mos7840 2-1:0.0: required endpoints missing [ 853.637867][ T5293] udevd[5293]: incorrect nilfs2 checksum on /dev/loop2 [ 853.647150][T25564] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 853.660529][T25559] NILFS (loop2): error -116 getting root inode [ 853.691411][ T5293] udevd[5293]: incorrect nilfs2 checksum on /dev/loop2 [ 853.751522][T25557] ntfs3(loop5): failed to convert "c46c" to cp737 [ 853.830846][ T5298] usb 2-1: USB disconnect, device number 103 [ 853.868923][T21014] r8152-cfgselector 5-1: USB disconnect, device number 94 [ 854.071913][T25574] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 854.264400][T25581] i2c i2c-0: Invalid block write size 34 [ 854.964192][T25595] loop5: detected capacity change from 0 to 4096 [ 855.037186][T25595] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 855.131538][T25595] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 855.330933][T25608] loop2: detected capacity change from 0 to 4096 [ 855.369892][T25608] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 855.413107][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 855.496178][T25608] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 855.630077][ T9] usb 5-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 855.673004][ T9] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 855.714945][ T9] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 855.736181][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 855.765035][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 855.796005][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.858037][ T9] usb 5-1: Product: syz [ 855.862322][ T9] usb 5-1: Manufacturer: syz [ 855.878055][ T9] usb 5-1: SerialNumber: syz [ 855.965779][T25598] loop1: detected capacity change from 0 to 40427 [ 855.990243][ T9] usb 5-1: config 0 descriptor?? [ 855.998141][T25598] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 856.005963][T25598] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 856.100344][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 856.159421][T25598] F2FS-fs (loop1): invalid crc value [ 856.199697][T25598] F2FS-fs (loop1): Found nat_bits in checkpoint [ 856.320547][ T9] usbtest 5-1:0.0: Linux user mode ISO test driver [ 856.328044][ T9] usbtest 5-1:0.0: high-speed {control iso-in} tests (+alt) [ 856.501952][T25635] netlink: 1076 bytes leftover after parsing attributes in process `syz.5.8968'. [ 856.604064][T25598] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 856.614853][T25598] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 856.653622][T21014] usb 5-1: USB disconnect, device number 95 [ 857.440533][T25668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8983'. [ 857.460733][T25668] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8983'. [ 857.516375][T23211] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 857.533508][T25668] bond1: entered allmulticast mode [ 857.732327][T25668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.739963][T25678] netlink: 'syz.1.8988': attribute type 11 has an invalid length. [ 857.905363][T23211] usb 3-1: Using ep0 maxpacket: 32 [ 857.921490][T23211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.934658][T23211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.959318][T23211] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 857.983976][T23211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.002282][ T5298] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 858.019975][T25685] netlink: 'syz.4.8991': attribute type 1 has an invalid length. [ 858.029343][T23211] usb 3-1: config 0 descriptor?? [ 858.035238][T25685] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.8991'. [ 858.048715][T23211] hub 3-1:0.0: USB hub found [ 858.206020][ T5298] usb 6-1: config 4 has an invalid interface number: 231 but max is 0 [ 858.229682][ T5298] usb 6-1: config 4 has no interface number 0 [ 858.235879][ T5298] usb 6-1: config 4 interface 231 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 858.263996][T25691] netlink: 'syz.4.8994': attribute type 10 has an invalid length. [ 858.293649][T23211] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 858.318326][ T5298] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 858.328069][ T5298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.336086][ T5298] usb 6-1: Product: syz [ 858.347791][T14144] Bluetooth: hci8: command 0x0406 tx timeout [ 858.378440][ T5298] usb 6-1: Manufacturer: syz [ 858.392346][ T5298] usb 6-1: SerialNumber: syz [ 858.413898][T21014] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 858.417140][ T5298] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 858.506270][T25699] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.8998'. [ 858.520056][T23211] usbhid 3-1:0.0: can't add hid device: -71 [ 858.527284][T23211] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 858.577359][T21014] usb 2-1: Using ep0 maxpacket: 8 [ 858.577762][T23211] usb 3-1: USB disconnect, device number 93 [ 858.584989][T21014] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 858.629614][T21014] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 858.671915][ T5298] vp7045: USB control message 'out' went wrong. [ 858.673970][T21014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 858.689338][ T5298] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 858.722737][ T5298] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 858.727992][T21014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 858.774071][T21014] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.778497][ T5298] usb 6-1: USB disconnect, device number 94 [ 858.872076][T21014] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 858.910518][T21014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.945299][T21014] usb 2-1: Product: syz [ 858.950097][T21014] usb 2-1: Manufacturer: syz [ 858.954868][T21014] usb 2-1: SerialNumber: syz [ 859.013259][T21014] usb 2-1: config 0 descriptor?? [ 859.035699][T21014] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input66 [ 859.489029][ T5298] usb 2-1: USB disconnect, device number 104 [ 859.697761][T25730] lo: entered allmulticast mode [ 859.723680][T25735] netlink: 'syz.5.9015': attribute type 10 has an invalid length. [ 859.734587][T25735] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 860.191463][T21014] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 860.374992][T21014] usb 5-1: Using ep0 maxpacket: 16 [ 860.418928][T21014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.441579][T21014] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 860.474665][T21014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.494198][ T5370] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 860.506160][T21014] usb 5-1: config 0 descriptor?? [ 860.539740][T21014] gspca_main: spca501-2.14.0 probing 0000:0000 [ 860.691427][ T5370] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 860.710855][ T5370] usb 2-1: config 4 has no interface number 0 [ 860.740270][ T5370] usb 2-1: config 4 interface 231 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 860.779732][ T5370] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 860.797566][ T5370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.808485][ T5295] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 860.841525][ T5370] usb 2-1: Product: syz [ 860.845887][ T5370] usb 2-1: Manufacturer: syz [ 860.850546][ T5370] usb 2-1: SerialNumber: syz [ 860.880598][T25777] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9036'. [ 860.932039][ T5370] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 860.954338][T25777] G: entered promiscuous mode [ 860.969878][T21014] gspca_spca501: reg write: error -71 [ 860.982106][T23211] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 860.988178][T21014] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 861.011743][T21014] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 861.021364][ T5295] usb 3-1: config 0 interface 0 has no altsetting 0 [ 861.028906][ T5295] usb 3-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 861.056934][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.068040][T21014] usb 5-1: USB disconnect, device number 96 [ 861.091098][ T5295] usb 3-1: config 0 descriptor?? [ 861.104653][ T5295] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 found [ 861.153955][ T5370] vp7045: USB control message 'out' went wrong. [ 861.161487][ T5370] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 861.181739][T23211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 861.186279][ T5370] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 861.210321][T23211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 861.232081][T23211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 861.247133][ T5370] usb 2-1: USB disconnect, device number 105 [ 861.263717][T23211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 861.303558][T23211] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 861.323515][ T5295] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 861.326042][T23211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.342579][ T5295] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 now disconnected [ 861.369823][T23211] usb 1-1: Product: syz [ 861.384647][ T5295] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 861.397186][T23211] usb 1-1: Manufacturer: syz [ 861.401852][T23211] usb 1-1: SerialNumber: syz [ 861.443773][T23211] usb 1-1: config 0 descriptor?? [ 861.583332][ T5370] usb 3-1: USB disconnect, device number 94 [ 861.614863][T25791] netlink: 'syz.5.9043': attribute type 3 has an invalid length. [ 861.635406][T25791] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9043'. [ 861.698793][T23211] adutux 1-1:0.0: Could not retrieve serial number [ 861.723978][T23211] adutux 1-1:0.0: probe with driver adutux failed with error -5 [ 862.020250][ T5298] usb 1-1: USB disconnect, device number 87 [ 862.109018][T23211] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 862.206136][ T29] audit: type=1326 audit(1729116962.379:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25804 comm="syz.1.9049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f275bf7dff9 code=0x0 [ 862.282264][T23211] usb 5-1: Using ep0 maxpacket: 32 [ 862.299459][T23211] usb 5-1: config 0 has an invalid interface number: 206 but max is 1 [ 862.335905][T23211] usb 5-1: config 0 has no interface number 1 [ 862.342107][T23211] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 862.370496][T25811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9051'. [ 862.379360][T23211] usb 5-1: config 0 interface 206 has no altsetting 0 [ 862.410030][T23211] usb 5-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 862.442124][T23211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.457590][T23211] usb 5-1: Product: syz [ 862.472932][T23211] usb 5-1: Manufacturer: syz [ 862.488023][T23211] usb 5-1: SerialNumber: syz [ 862.521100][T23211] usb 5-1: config 0 descriptor?? [ 862.549610][T25817] loop2: detected capacity change from 0 to 256 [ 862.617695][T25817] FAT-fs (loop2): Directory bread(block 64) failed [ 862.624314][T25817] FAT-fs (loop2): Directory bread(block 65) failed [ 862.667051][T25817] FAT-fs (loop2): Directory bread(block 66) failed [ 862.688428][T25817] FAT-fs (loop2): Directory bread(block 67) failed [ 862.724849][T25817] FAT-fs (loop2): Directory bread(block 68) failed [ 862.733166][T25817] FAT-fs (loop2): Directory bread(block 69) failed [ 862.762481][T25817] FAT-fs (loop2): Directory bread(block 70) failed [ 862.769144][T25817] FAT-fs (loop2): Directory bread(block 71) failed [ 862.779270][T25817] FAT-fs (loop2): Directory bread(block 72) failed [ 862.786265][T25817] FAT-fs (loop2): Directory bread(block 73) failed [ 862.867112][ T5370] usb 5-1: USB disconnect, device number 97 [ 862.987777][T23211] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 863.016353][T25832] loop2: detected capacity change from 0 to 16 [ 863.095403][T25832] erofs: (device loop2): mounted with root inode @ nid 36. [ 863.170279][T23211] usb 2-1: Using ep0 maxpacket: 16 [ 863.193398][T23211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.235195][T23211] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 863.244329][T23211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.282658][T23211] usb 2-1: config 0 descriptor?? [ 863.302442][ T5298] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 863.319189][T23211] gspca_main: spca501-2.14.0 probing 0000:0000 [ 863.413928][T25838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9066'. [ 863.428016][ T29] audit: type=1326 audit(1729116963.533:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.5.9067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x0 [ 863.471602][T25838] G: entered promiscuous mode [ 863.508356][ T5298] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 863.529943][ T5298] usb 1-1: config 4 has no interface number 0 [ 863.536155][ T5298] usb 1-1: config 4 interface 231 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 863.636925][ T5298] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 863.652613][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.679429][ T5298] usb 1-1: Product: syz [ 863.683709][ T5298] usb 1-1: Manufacturer: syz [ 863.688370][ T5298] usb 1-1: SerialNumber: syz [ 863.728789][ T5298] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 863.744394][T23211] gspca_spca501: reg write: error -71 [ 863.755183][T23211] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 863.762419][T23211] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 863.821866][T23211] usb 2-1: USB disconnect, device number 106 [ 863.973882][T14144] Bluetooth: hci9: command tx timeout [ 863.980158][ T5298] vp7045: USB control message 'out' went wrong. [ 864.003851][ T5298] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 864.014951][ T5298] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 864.034135][ T5298] usb 1-1: USB disconnect, device number 88 [ 864.134651][T25857] netlink: 'syz.4.9074': attribute type 1 has an invalid length. [ 864.600363][T25870] loop1: detected capacity change from 0 to 256 [ 864.768946][T25870] FAT-fs (loop1): Directory bread(block 64) failed [ 864.787714][T25870] FAT-fs (loop1): Directory bread(block 65) failed [ 864.814502][T25870] FAT-fs (loop1): Directory bread(block 66) failed [ 864.843475][T25870] FAT-fs (loop1): Directory bread(block 67) failed [ 864.936336][T25870] FAT-fs (loop1): Directory bread(block 68) failed [ 864.943042][T25870] FAT-fs (loop1): Directory bread(block 69) failed [ 865.012617][T25870] FAT-fs (loop1): Directory bread(block 70) failed [ 865.019235][T25870] FAT-fs (loop1): Directory bread(block 71) failed [ 865.050575][T25870] FAT-fs (loop1): Directory bread(block 72) failed [ 865.061425][T25870] FAT-fs (loop1): Directory bread(block 73) failed [ 865.248026][T25867] loop5: detected capacity change from 0 to 32768 [ 865.260058][T25867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9080 (25867) [ 865.287944][T25867] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 865.299749][T25867] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 865.315720][T25867] BTRFS info (device loop5): using free-space-tree [ 865.727020][ T5298] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 865.860369][T25913] netlink: 'syz.1.9095': attribute type 30 has an invalid length. [ 865.902798][ T5244] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 865.934866][ T5298] usb 1-1: Using ep0 maxpacket: 8 [ 865.982995][ T5298] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 865.992332][ T5298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.023955][ T5298] usb 1-1: config 0 has no interface number 0 [ 866.052287][ T5298] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 866.064130][ T5298] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 866.075275][ T5298] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 866.085842][ T5298] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.099521][ T5298] usb 1-1: config 0 interface 52 has no altsetting 0 [ 866.106321][ T5298] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 866.115383][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.151846][ T5298] usb 1-1: config 0 descriptor?? [ 866.397491][T25925] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072369452566) [ 866.473253][T25925] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 866.584645][T25929] dlm: Unknown command passed to DLM device : 0 [ 866.584645][T25929] [ 866.733086][T23211] usb 1-1: USB disconnect, device number 89 [ 866.787166][T25933] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.9105'. [ 867.221859][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9108'. [ 867.239476][T25946] xt_policy: neither incoming nor outgoing policy selected [ 867.253822][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9108'. [ 869.208418][T25981] delete_channel: no stack [ 869.605827][ T29] audit: type=1326 audit(1729116969.200:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 869.734459][ T29] audit: type=1326 audit(1729116969.200:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 869.958573][ T29] audit: type=1326 audit(1729116969.219:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 869.992310][T25995] loop1: detected capacity change from 0 to 16 [ 870.068710][T25995] erofs: (device loop1): mounted with root inode @ nid 36. [ 870.128052][ T29] audit: type=1326 audit(1729116969.219:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 870.174617][T25995] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 870.283558][T25995] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 870.326504][ T29] audit: type=1326 audit(1729116969.219:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.9131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6c97dff9 code=0x7ffc0000 [ 870.592320][T26007] loop2: detected capacity change from 0 to 128 [ 870.605677][T26007] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 870.622144][T26007] syz.2.9141: attempt to access beyond end of device [ 870.622144][T26007] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 870.696586][T26007] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 870.745872][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9143'. [ 870.778823][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9143'. [ 870.862539][T23211] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 870.904104][T19900] sysv_free_block: flc_count > flc_size [ 870.928249][T19900] sysv_free_block: flc_count > flc_size [ 870.933881][T19900] sysv_free_block: flc_count > flc_size [ 870.960062][T19900] sysv_free_block: flc_count > flc_size [ 870.970541][T19900] sysv_free_block: flc_count > flc_size [ 870.989977][T19900] sysv_free_block: flc_count > flc_size [ 871.022314][T19900] sysv_free_block: flc_count > flc_size [ 871.035869][T23211] usb 1-1: Using ep0 maxpacket: 16 [ 871.057588][T23211] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 871.066804][T23211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.075710][T19900] sysv_free_block: flc_count > flc_size [ 871.090042][T19900] sysv_free_block: flc_count > flc_size [ 871.095148][T26020] ɶƣ0GC: entered promiscuous mode [ 871.095649][T19900] sysv_free_block: flc_count > flc_size [ 871.133497][T23211] usb 1-1: Product: syz [ 871.137743][T23211] usb 1-1: Manufacturer: syz [ 871.142363][T23211] usb 1-1: SerialNumber: syz [ 871.150713][T19900] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 871.203289][T23211] usb 1-1: config 0 descriptor?? [ 871.439901][T23211] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v185 fw v115.212.0 (1 channels) [ 871.686925][T23211] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 871.717242][T23211] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 871.903153][ T5294] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 871.924440][T23211] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 871.994025][T23211] usb 1-1: USB disconnect, device number 90 [ 872.033088][ T30] INFO: task syz.4.7055:21390 blocked for more than 143 seconds. [ 872.045623][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 872.075581][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 872.149852][ T5294] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 872.157934][ T30] task:syz.4.7055 state:D stack:25496 pid:21390 tgid:21389 ppid:5237 flags:0x00000004 [ 872.176516][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.188893][ T30] Call Trace: [ 872.192324][ T30] [ 872.206838][ T30] __schedule+0x1895/0x4b30 [ 872.212428][ T30] ? __pfx___schedule+0x10/0x10 [ 872.227561][ T30] ? __pfx_lock_release+0x10/0x10 [ 872.229694][ T5294] usb 5-1: Product: syz [ 872.232627][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 872.236791][ T5294] usb 5-1: Manufacturer: syz [ 872.249084][ T30] ? schedule+0x90/0x320 [ 872.253552][ T30] schedule+0x14b/0x320 [ 872.257765][ T30] schedule_preempt_disabled+0x13/0x30 [ 872.276702][ T30] __mutex_lock+0x6a7/0xd70 [ 872.281281][ T30] ? __mutex_lock+0x52a/0xd70 [ 872.295236][ T30] ? nfsd_nl_threads_get_doit+0x1c5/0x7b0 [ 872.296395][ T5294] usb 5-1: SerialNumber: syz [ 872.301213][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 872.301253][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.332812][ T30] ? genlmsg_put+0x145/0x2e0 [ 872.337588][ T30] nfsd_nl_threads_get_doit+0x1c5/0x7b0 [ 872.343200][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 872.349428][ T30] ? __asan_memcpy+0x40/0x70 [ 872.354398][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.360538][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 872.365263][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.369969][ T5294] usb 5-1: config 0 descriptor?? [ 872.377832][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.383973][ T30] genl_rcv_msg+0xb16/0xec0 [ 872.388545][ T30] ? mark_lock+0x9a/0x360 [ 872.393264][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.398375][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 872.404607][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 872.410732][ T30] ? __pfx___might_resched+0x10/0x10 [ 872.422550][ T30] netlink_rcv_skb+0x1e5/0x430 [ 872.427364][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.432434][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.451204][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 872.456970][ T30] genl_rcv+0x28/0x40 [ 872.461022][ T30] netlink_unicast+0x7f8/0x990 [ 872.466362][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 872.471710][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.487648][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.493509][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.499653][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.505784][ T30] ? __check_object_size+0x48e/0x900 [ 872.511795][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 872.518044][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.524409][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.530227][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 872.535737][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.541514][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.549643][ T30] __sock_sendmsg+0x223/0x270 [ 872.554865][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 872.559960][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.565803][ T30] __sys_sendmsg+0x292/0x380 [ 872.570536][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 872.578861][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 872.585869][ T30] ? do_syscall_64+0x100/0x230 [ 872.590863][ T30] ? do_syscall_64+0xb6/0x230 [ 872.595705][ T30] do_syscall_64+0xf3/0x230 [ 872.601444][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.608044][ T30] RIP: 0033:0x7fe97bb7dff9 [ 872.636606][ T30] RSP: 002b:00007fe97b5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.663355][ T30] RAX: ffffffffffffffda RBX: 00007fe97bd35f80 RCX: 00007fe97bb7dff9 [ 872.671408][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 872.699760][ T30] RBP: 00007fe97bbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 872.708012][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.737744][ T30] R13: 0000000000000000 R14: 00007fe97bd35f80 R15: 00007ffddef086a8 [ 872.745823][ T30] [ 872.758889][ T30] [ 872.758889][ T30] Showing all locks held in the system: [ 872.767287][ T30] 1 lock held by khungtaskd/30: [ 872.779236][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 872.823463][ T30] 2 locks held by kworker/u8:3/52: [ 872.835869][ T30] 2 locks held by getty/4975: [ 872.852281][ T30] #0: ffff88802e4f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 872.864007][ T5294] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 872.885357][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 872.888566][ T5294] asix 5-1:0.0: probe with driver asix failed with error -71 [ 872.920969][ T30] 3 locks held by syz-executor/5240: [ 872.932008][ T5294] usb 5-1: USB disconnect, device number 98 [ 872.938321][ T30] 5 locks held by kworker/0:3/5294: [ 872.954499][ T30] 2 locks held by kworker/0:8/5370: [ 872.974242][ T30] 1 lock held by udevd/5401: [ 872.989885][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 873.018672][ T30] 2 locks held by syz.2.6221/19575: [ 873.024023][ T30] #0: ffffffff8fd38970 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 873.052696][ T30] #1: ffffffff8ec19008 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 873.072736][ T30] 2 locks held by syz.4.7055/21390: [ 873.078026][ T30] #0: ffffffff8fd38970 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 873.105231][ T30] #1: ffffffff8ec19008 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c5/0x7b0 [ 873.115438][ T30] 3 locks held by syz.4.8218/23953: [ 873.137634][ T30] #0: ffffffff8fd38970 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 873.145956][ T30] #1: ffff88805ef116c8 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 873.172211][ T30] #2: ffffffff8ec19008 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1a60 [ 873.202747][ T30] 2 locks held by kworker/u8:10/25116: [ 873.208309][ T30] 1 lock held by syz.4.9154/26039: [ 873.224401][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 873.246193][ T30] [ 873.248690][ T30] ============================================= [ 873.248690][ T30] [ 873.292315][ T30] NMI backtrace for cpu 0 [ 873.296727][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 873.307382][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 873.317470][ T30] Call Trace: [ 873.321085][ T30] [ 873.324042][ T30] dump_stack_lvl+0x241/0x360 [ 873.328766][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.334007][ T30] ? __pfx__printk+0x10/0x10 [ 873.338638][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 873.343624][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 873.349122][ T30] ? _printk+0xd5/0x120 [ 873.353389][ T30] ? __pfx__printk+0x10/0x10 [ 873.358006][ T30] ? __wake_up_klogd+0xcc/0x110 [ 873.362897][ T30] ? __pfx__printk+0x10/0x10 [ 873.367518][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.373190][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 873.378273][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 873.384315][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 873.390349][ T30] watchdog+0xff4/0x1040 [ 873.394643][ T30] ? watchdog+0x1ea/0x1040 [ 873.399118][ T30] ? __pfx_watchdog+0x10/0x10 [ 873.403849][ T30] kthread+0x2f2/0x390 [ 873.407942][ T30] ? __pfx_watchdog+0x10/0x10 [ 873.412825][ T30] ? __pfx_kthread+0x10/0x10 [ 873.417650][ T30] ret_from_fork+0x4d/0x80 [ 873.422194][ T30] ? __pfx_kthread+0x10/0x10 [ 873.426899][ T30] ret_from_fork_asm+0x1a/0x30 [ 873.431727][ T30] [ 873.436708][ T30] Sending NMI from CPU 0 to CPUs 1: [ 873.443039][ C1] NMI backtrace for cpu 1 [ 873.443059][ C1] CPU: 1 UID: 0 PID: 25116 Comm: kworker/u8:10 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 873.443087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 873.443104][ C1] Workqueue: bat_events batadv_nc_worker [ 873.443153][ C1] RIP: 0010:__local_bh_disable_ip+0xe4/0x220 [ 873.443195][ C1] Code: 60 42 80 3c 23 00 74 08 4c 89 f7 e8 a6 0f a7 00 48 8d 7c 24 40 4c 8b 74 24 60 fa 65 44 01 3d cb 4c ac 7e 65 8b 05 c4 4c ac 7e <44> 31 f8 a9 00 ff 00 00 75 10 48 89 fb 48 8b 7c 24 18 e8 15 9c 18 [ 873.443216][ C1] RSP: 0018:ffffc9000e9ff9c0 EFLAGS: 00000082 [ 873.443235][ C1] RAX: 0000000080000201 RBX: 1ffff92001d3ff44 RCX: 0000000000000034 [ 873.443258][ C1] RDX: 1ffff11005d891b1 RSI: 0000000000000201 RDI: ffffc9000e9ffa00 [ 873.443277][ C1] RBP: ffffc9000e9ffa98 R08: ffffffff942c98df R09: 1ffffffff285931b [ 873.443296][ C1] R10: dffffc0000000000 R11: fffffbfff285931c R12: dffffc0000000000 [ 873.443314][ C1] R13: 1ffff92001d3ff3c R14: 0000000000000246 R15: 0000000000000201 [ 873.443334][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 873.443355][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.443373][ C1] CR2: 000000110c3afb33 CR3: 0000000079a76000 CR4: 0000000000350ef0 [ 873.443393][ C1] Call Trace: [ 873.443402][ C1] [ 873.443413][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 873.443449][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 873.443493][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 873.443524][ C1] ? nmi_handle+0x2a/0x5a0 [ 873.443562][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 873.443601][ C1] ? nmi_handle+0x151/0x5a0 [ 873.443626][ C1] ? nmi_handle+0x2a/0x5a0 [ 873.443653][ C1] ? __local_bh_disable_ip+0xe4/0x220 [ 873.443684][ C1] ? default_do_nmi+0x63/0x160 [ 873.443721][ C1] ? exc_nmi+0x123/0x1f0 [ 873.443752][ C1] ? end_repeat_nmi+0xf/0x53 [ 873.443787][ C1] ? __local_bh_disable_ip+0xe4/0x220 [ 873.443820][ C1] ? __local_bh_disable_ip+0xe4/0x220 [ 873.443853][ C1] ? __local_bh_disable_ip+0xe4/0x220 [ 873.443886][ C1] [ 873.443894][ C1] [ 873.443903][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 873.443934][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.443961][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 873.443984][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 873.444019][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 873.444051][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 873.444083][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 873.444118][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 873.444149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.444178][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 873.444212][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 873.444251][ C1] _raw_spin_lock_bh+0x1c/0x50 [ 873.444293][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 873.444330][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 873.444373][ C1] batadv_nc_worker+0x365/0x610 [ 873.444408][ C1] ? process_scheduled_works+0x976/0x1850 [ 873.444449][ C1] process_scheduled_works+0xa65/0x1850 [ 873.444499][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 873.444539][ C1] ? assign_work+0x364/0x3d0 [ 873.444574][ C1] worker_thread+0x870/0xd30 [ 873.444618][ C1] ? __kthread_parkme+0x169/0x1d0 [ 873.444661][ C1] ? __pfx_worker_thread+0x10/0x10 [ 873.444695][ C1] kthread+0x2f2/0x390 [ 873.444719][ C1] ? __pfx_worker_thread+0x10/0x10 [ 873.444753][ C1] ? __pfx_kthread+0x10/0x10 [ 873.444777][ C1] ret_from_fork+0x4d/0x80 [ 873.444820][ C1] ? __pfx_kthread+0x10/0x10 [ 873.444844][ C1] ret_from_fork_asm+0x1a/0x30 [ 873.444893][ C1] [ 873.692197][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 873.692223][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 873.692254][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 873.692272][ T30] Call Trace: [ 873.692283][ T30] [ 873.692295][ T30] dump_stack_lvl+0x241/0x360 [ 873.692337][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.692367][ T30] ? __pfx__printk+0x10/0x10 [ 873.692392][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 873.692449][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.868459][ T30] ? vscnprintf+0x5d/0x90 [ 873.872822][ T30] panic+0x349/0x880 [ 873.876726][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.882376][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 873.888549][ T30] ? __pfx_panic+0x10/0x10 [ 873.892982][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 873.898402][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.904046][ T30] ? __irq_work_queue_local+0x137/0x410 [ 873.909629][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.915369][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 873.920845][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 873.927043][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 873.933231][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.938879][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 873.945057][ T30] watchdog+0x1033/0x1040 [ 873.949423][ T30] ? watchdog+0x1ea/0x1040 [ 873.953865][ T30] ? __pfx_watchdog+0x10/0x10 [ 873.958566][ T30] kthread+0x2f2/0x390 [ 873.962650][ T30] ? __pfx_watchdog+0x10/0x10 [ 873.967436][ T30] ? __pfx_kthread+0x10/0x10 [ 873.972040][ T30] ret_from_fork+0x4d/0x80 [ 873.976490][ T30] ? __pfx_kthread+0x10/0x10 [ 873.981096][ T30] ret_from_fork_asm+0x1a/0x30 [ 873.985903][ T30] [ 873.989477][ T30] Kernel Offset: disabled [ 873.993841][ T30] Rebooting in 86400 seconds..