last executing test programs: 2m35.500444324s ago: executing program 3 (id=5384): r0 = eventfd2(0x96, 0x80800) write$eventfd(r0, &(0x7f0000000140)=0xffffffffffffffff, 0x8) 2m35.319200489s ago: executing program 3 (id=5387): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000000)='./file2\x00', 0x2004009, &(0x7f00000004c0)=ANY=[], 0x1, 0x226, &(0x7f0000000800)="$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") listxattr(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) 2m35.011321054s ago: executing program 3 (id=5391): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 2m34.734929185s ago: executing program 3 (id=5395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 2m34.497248174s ago: executing program 3 (id=5399): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m33.408647301s ago: executing program 3 (id=5417): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x1, 0x1, 0x3}, 0x3f, 0x3}) 2m17.183046845s ago: executing program 32 (id=5417): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x1, 0x1, 0x3}, 0x3f, 0x3}) 3.461776483s ago: executing program 4 (id=7301): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x1406, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x28}}, 0x20040080) 3.01206181s ago: executing program 4 (id=7305): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="c2fda52e", 0x4}], 0x1}, 0x20004000) 2.828950854s ago: executing program 4 (id=7307): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@ref_verify}, {}, {@skip_balance}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000000)={0x105, 0x1b, [0x8000, 0x0, 0xfff, 0x80000000], 0x0}) 1.944054475s ago: executing program 2 (id=7317): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580300001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000f4020680f05e"], 0x358}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.737318551s ago: executing program 2 (id=7319): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) 1.712151133s ago: executing program 0 (id=7320): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@rodir}]}, 0x1, 0x273, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800052, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.392305578s ago: executing program 2 (id=7323): r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) 1.290919847s ago: executing program 0 (id=7324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xf8}}, 0x0) 1.147369008s ago: executing program 4 (id=7326): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f00000006c0)=[{0xa000005, 0x0, 0x0, 0x7f, 0x9}]}) 1.146739788s ago: executing program 2 (id=7327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 1.033123177s ago: executing program 1 (id=7328): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x88000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x7, 0x7fffffff, 0x3007, 0x4, 0x2, 0x1, 0x1, 0x5}}) 971.117922ms ago: executing program 0 (id=7329): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0x3, 0xb0, 0xd, 0x7, 0xff, 0x473d}) 921.838546ms ago: executing program 2 (id=7330): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 860.327891ms ago: executing program 1 (id=7331): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x3, 0xacd1, 0x0, 0x0, 0x40}}) 760.204109ms ago: executing program 0 (id=7332): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) 644.227718ms ago: executing program 2 (id=7333): kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) kexec_load(0xffffffffffffff0a, 0x0, 0x0, 0x1) 601.303282ms ago: executing program 1 (id=7334): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x0, @time={0x5, 0x6}, {0xd}, {}, @raw8={"e1b577d758912fa17f9cced7"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x20000004, 0x7}, {0x8, 0x7}, {0x0, 0x80}, @control}, {0x0, 0x7, 0x0, 0x0, @time={0xfffffffe}, {0x0, 0xf}, {}, @time=@time={0x0, 0x7}}], 0x70) 558.201405ms ago: executing program 4 (id=7335): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) 423.022976ms ago: executing program 0 (id=7336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 340.669102ms ago: executing program 1 (id=7337): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x2, &(0x7f0000000fc0)={[0x8000000000000000]}, &(0x7f0000001000), 0x8) 190.846745ms ago: executing program 4 (id=7338): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000000c0)={[], [{@flag='rw'}]}, 0x4, 0x9689, &(0x7f000001c300)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x4}) 151.193537ms ago: executing program 1 (id=7339): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000300)={[0x3]}, 0x8) 20.681478ms ago: executing program 1 (id=7340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}]}, 0xb8}}, 0x804) 0s ago: executing program 0 (id=7341): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x1330, 0xc, 0x1008, 0x1}) kernel console output (not intermixed with test programs): 0 [ 655.547335][T21183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.549273][T21209] loop0: detected capacity change from 0 to 4096 [ 655.563502][T21183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.571775][T21183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.642878][T21204] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5233'. [ 655.660257][T21204] 0ªX¹¦À: renamed from caif0 [ 655.673454][T21204] 0ªX¹¦À: entered allmulticast mode [ 655.691694][T21204] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 655.735167][ T5844] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 655.951012][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.968917][ T5844] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 655.969007][T21228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5236'. [ 655.993530][ T5844] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.013099][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 656.021167][ T5844] usb 3-1: SerialNumber: syz [ 656.032913][T21227] loop1: detected capacity change from 0 to 4096 [ 656.065744][T21227] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 656.068800][ T5844] usb 3-1: bad CDC descriptors [ 656.078397][T21227] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 656.096430][T21227] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 656.113542][T21227] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 656.115734][T21225] loop3: detected capacity change from 0 to 4096 [ 656.222874][T21227] ntfs: volume version 3.1. [ 656.306836][ T5780] usb 3-1: USB disconnect, device number 94 [ 656.339608][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 656.347422][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 656.928829][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5247'. [ 657.186908][ T5850] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 657.413611][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 657.451697][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.483941][ T5850] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 657.510113][T21337] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5256'. [ 657.510200][ T5850] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 657.519255][T21337] 0ªX¹¦À: renamed from caif0 [ 657.575840][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.587734][T21337] 0ªX¹¦À: entered allmulticast mode [ 657.587940][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 657.606202][T21337] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 657.625997][ T5850] usb 2-1: SerialNumber: syz [ 657.663455][ T5850] cdc_acm 2-1:1.0: skipping garbage [ 657.712490][T21348] SET target dimension over the limit! [ 657.903648][ T5850] usb 2-1: USB disconnect, device number 75 [ 658.004058][T21369] netlink: 'syz.0.5264': attribute type 10 has an invalid length. [ 658.018525][T21369] team0: Device ipvlan1 failed to register rx_handler [ 658.297364][T21385] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.633241][ T5880] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 658.846556][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 658.859423][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 658.900051][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 658.931724][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2269, setting to 1024 [ 658.959803][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 658.991889][ T5880] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 659.011367][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.033975][ T5880] usb 1-1: Product: syz [ 659.038216][ T5880] usb 1-1: Manufacturer: syz [ 659.048392][ T5880] usb 1-1: SerialNumber: syz [ 659.119327][ T5880] usb 1-1: config 0 descriptor?? [ 659.149789][T21385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 659.168056][T21385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 659.186863][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 659.198220][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 659.223860][ T5880] port100 1-1:0.0: NFC: Could not get supported command types [ 659.300612][T21434] netlink: 'syz.1.5283': attribute type 13 has an invalid length. [ 659.432047][ T5780] usb 1-1: USB disconnect, device number 72 [ 659.887746][T21475] loop3: detected capacity change from 0 to 128 [ 659.959666][T21475] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 660.019418][T21482] loop1: detected capacity change from 0 to 4096 [ 660.054094][T21475] ext4 filesystem being mounted at /1296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 660.069919][T21482] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 660.253506][ T5790] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 660.676014][ T28] audit: type=1326 audit(2000002763.436:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.0.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 660.760602][ T28] audit: type=1326 audit(2000002763.436:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.0.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 660.782977][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.887251][ T28] audit: type=1326 audit(2000002763.492:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.0.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 660.962673][ T28] audit: type=1326 audit(2000002763.492:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.0.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 661.019657][ T28] audit: type=1326 audit(2000002763.492:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.0.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 661.516515][T21555] loop1: detected capacity change from 0 to 256 [ 663.393269][T21693] xfrm0: entered promiscuous mode [ 663.398468][T21693] xfrm0: entered allmulticast mode [ 663.875133][T21719] loop0: detected capacity change from 0 to 1024 [ 663.967129][T21729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5363'. [ 664.624560][T21766] loop1: detected capacity change from 0 to 2048 [ 664.694687][T21766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.347751][T21802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5385'. [ 665.393612][T21806] loop3: detected capacity change from 0 to 16 [ 665.444928][T21806] erofs: (device loop3): mounted with root inode @ nid 36. [ 665.779148][T21829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5393'. [ 665.876174][T21832] loop1: detected capacity change from 0 to 1764 [ 665.950537][ T5919] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.000080][T21832] gfs2: Unexpected value for 'discard' [ 666.137718][T21848] kAFS: unable to lookup cell ' [ 666.137718][T21848] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 666.137718][T21848] ' [ 666.236952][T21854] loop3: detected capacity change from 0 to 8 [ 666.340419][T21861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5402'. [ 666.771853][T21886] netlink: 'syz.2.5409': attribute type 10 has an invalid length. [ 666.790766][T21886] team0: Device ipvlan1 failed to register rx_handler [ 666.891914][T21891] comedi comedi2: multiq3: I/O port conflict (0xcfd,16) [ 667.122400][ T28] audit: type=1800 audit(2000002769.459:117): pid=21854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5399" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 667.273030][T21909] netlink: 'syz.0.5418': attribute type 13 has an invalid length. [ 667.482127][T21923] netlink: 'syz.1.5421': attribute type 10 has an invalid length. [ 667.526816][T21923] team0: Device ipvlan1 failed to register rx_handler [ 667.829723][T21939] loop1: detected capacity change from 0 to 64 [ 668.172289][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.179710][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.200948][T21958] team0: Port device bridge0 removed [ 668.225578][T21958] batman_adv: batadv0: Removing interface: team0 [ 668.247243][T21958] bond0: (slave batadv0): Releasing backup interface [ 668.273242][T21958] bridge_slave_0: left allmulticast mode [ 668.279875][T21958] bridge_slave_0: left promiscuous mode [ 668.285634][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.296693][T21958] bridge_slave_1: left allmulticast mode [ 668.303360][T21958] bridge_slave_1: left promiscuous mode [ 668.309122][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.321194][T21958] bond0: (slave bond_slave_0): Releasing backup interface [ 668.339295][T21958] bond0: (slave bond_slave_1): Releasing backup interface [ 668.380379][T21958] team0: Port device team_slave_0 removed [ 668.398355][T21958] team0: Port device team_slave_1 removed [ 668.404821][T21958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.412804][T21958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.424045][T21958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.432148][T21958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.660688][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 683.672394][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 683.683022][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 683.692905][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 683.701863][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 683.714300][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.755267][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 683.766044][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 683.784792][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 683.794158][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 683.802017][ T5801] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 683.810146][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.871794][T21965] wg1 speed is unknown, defaulting to 1000 [ 684.152748][T22034] AppArmor: change_hat: Invalid input 'ˆ' [ 684.264249][ T5880] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 684.367204][T22073] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551611) [ 684.392969][T22073] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 684.490728][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 684.516040][T21965] chnl_net:caif_netlink_parms(): no params data found [ 684.518662][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.544531][ T5880] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 684.573410][ T5880] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 684.605666][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.618715][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 684.638735][ T5880] usb 3-1: SerialNumber: syz [ 684.696291][ T5880] cdc_acm 3-1:1.0: skipping garbage [ 684.894184][T21965] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.914914][T21965] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.922265][T21965] bridge_slave_0: entered allmulticast mode [ 684.964234][T21965] bridge_slave_0: entered promiscuous mode [ 684.974633][ T5850] usb 3-1: USB disconnect, device number 95 [ 684.999838][T21965] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.024312][T21965] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.046017][T21965] bridge_slave_1: entered allmulticast mode [ 685.065645][T21965] bridge_slave_1: entered promiscuous mode [ 685.188538][ T28] audit: type=1326 audit(2000002786.359:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.0.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 685.221986][ T28] audit: type=1326 audit(2000002786.377:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.0.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 685.226038][T21965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.263374][ T28] audit: type=1326 audit(2000002786.424:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.0.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 685.293311][ T28] audit: type=1326 audit(2000002786.424:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.0.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 685.326819][T21965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.394405][ T28] audit: type=1326 audit(2000002786.424:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.0.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 685.457117][T21965] team0: Port device team_slave_0 added [ 685.468223][T22248] loop1: detected capacity change from 0 to 512 [ 685.469312][T21965] team0: Port device team_slave_1 added [ 685.532637][T22248] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 685.556369][T22248] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 685.603099][T22248] EXT4-fs (loop1): 1 truncate cleaned up [ 685.633268][T22248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.657207][T21965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.695838][T21965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.736795][T22248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.768955][T21965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.783143][T21965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.790140][T21965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.879548][T21965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.016385][ T5801] Bluetooth: hci4: command tx timeout [ 686.095060][T21965] hsr_slave_0: entered promiscuous mode [ 686.118497][T21965] hsr_slave_1: entered promiscuous mode [ 686.150380][T21965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.187199][T21965] Cannot create hsr debugfs directory [ 686.313033][T22339] loop1: detected capacity change from 0 to 4096 [ 686.413004][T22339] ntfs: volume version 3.1. [ 686.740483][T12429] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 686.910217][T21965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 686.982919][T21965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.015374][T21965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 687.024157][T21965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.349124][T21965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.403398][ T28] audit: type=1326 audit(2000002788.425:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22456 comm="syz.2.5474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x0 [ 687.425352][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.461873][T21965] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.504594][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.511839][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.591680][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.599018][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.744465][T21965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.016132][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5483'. [ 688.046482][T22483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5483'. [ 688.240631][ T5801] Bluetooth: hci4: command tx timeout [ 688.304253][ T5850] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 688.353233][T21965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.543358][ T5850] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 688.571484][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.613973][ T5850] usb 1-1: config 0 descriptor?? [ 688.787474][T22523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5492'. [ 688.803103][T22523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5492'. [ 688.813029][T22523] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5492'. [ 688.879143][ T5850] snd-usb-hiface: probe of 1-1:0.0 failed with error -22 [ 688.972499][T22531] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 689.187606][ T5850] usb 1-1: USB disconnect, device number 73 [ 689.268674][T21965] veth0_vlan: entered promiscuous mode [ 689.319725][T21965] veth1_vlan: entered promiscuous mode [ 689.408801][T21965] veth0_macvtap: entered promiscuous mode [ 689.442138][T21965] veth1_macvtap: entered promiscuous mode [ 689.454522][T22577] loop1: detected capacity change from 0 to 2048 [ 689.477747][T21965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.488949][T21965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.499566][T21965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.512252][T21965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.525543][T21965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.553715][T21965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.554604][T22580] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 689.594130][T21965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.604154][T21965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.615729][T21965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.627723][T21965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.640210][T21965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.649108][T21965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.658343][T21965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.678166][T21965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.941227][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.962287][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.052003][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.077830][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.414629][T22618] netlink: 'syz.4.5434': attribute type 10 has an invalid length. [ 690.473494][ T5801] Bluetooth: hci4: command tx timeout [ 690.515562][T22618] team0: Device ipvlan1 failed to register rx_handler [ 691.118136][T22652] x_tables: unsorted underflow at hook 4 [ 691.497859][T22663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5518'. [ 691.778240][T22675] loop0: detected capacity change from 0 to 4096 [ 691.805433][T22675] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 691.970689][T22688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5526'. [ 691.973489][T22675] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 692.062888][T22647] loop1: detected capacity change from 0 to 32768 [ 692.088136][T22647] XFS: ikeep mount option is deprecated. [ 692.162030][T22647] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 692.271145][T22647] XFS (loop1): Ending clean mount [ 692.305727][T22647] XFS (loop1): Quotacheck needed: Please wait. [ 692.397677][T22647] XFS (loop1): Quotacheck: Done. [ 692.454143][T22714] kAFS: unable to lookup cell '' [ 692.681474][ T5793] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 692.696498][ T5801] Bluetooth: hci4: command tx timeout [ 692.887983][T22732] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5536'. [ 693.379555][T22756] netlink: 460 bytes leftover after parsing attributes in process `syz.4.5543'. [ 693.755078][T22780] xt_hashlimit: max too large, truncated to 1048576 [ 693.949188][T22779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.981724][ T5844] kernel write not supported for file /2875/net/ip6_tables_matches (pid: 5844 comm: kworker/0:3) [ 694.276456][T22839] IPVS: length: 250 != 8 [ 694.388313][ T27] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 694.613075][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 694.620465][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 694.636676][ T28] audit: type=1326 audit(2000002795.196:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22857 comm="syz.4.5565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb1178ebe9 code=0x0 [ 694.658425][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.676981][ T27] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 694.686704][ T27] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 694.712014][ T27] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 694.722472][ T27] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 694.743621][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 694.761758][ T27] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 694.785033][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.812899][ T27] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 694.930859][T22876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 695.069581][ T27] scsi host1: usb-storage 3-1:1.0 [ 695.312243][ T27] usb 3-1: USB disconnect, device number 96 [ 695.637372][T22915] loop1: detected capacity change from 0 to 8192 [ 695.678918][T22915] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 695.715487][T22915] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 695.727404][T22915] REISERFS (device loop1): using ordered data mode [ 695.734499][T22915] reiserfs: using flush barriers [ 695.742735][T22915] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 695.788617][T22915] REISERFS (device loop1): checking transaction log (loop1) [ 695.835407][T22915] REISERFS (device loop1): Using r5 hash to sort names [ 695.861864][T22915] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 695.992275][ T27] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 696.224655][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 696.259498][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.280913][ T27] usb 1-1: Product: syz [ 696.285156][ T27] usb 1-1: Manufacturer: syz [ 696.290304][ T27] usb 1-1: SerialNumber: syz [ 696.319880][ T27] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 696.352618][ T23] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 696.755004][T22972] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5591'. [ 696.937020][ T27] usb 1-1: USB disconnect, device number 74 [ 697.146202][T22993] loop1: detected capacity change from 0 to 64 [ 697.581472][T23015] loop1: detected capacity change from 0 to 512 [ 697.822959][ T23] usb 1-1: Service connection timeout for: 256 [ 697.829210][ T23] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 697.900446][ T23] ath9k_htc: Failed to initialize the device [ 697.932209][ T27] usb 1-1: ath9k_htc: USB layer deinitialized [ 698.164712][T23034] loop1: detected capacity change from 0 to 4096 [ 699.029108][T23099] Lens B: ================= START STATUS ================= [ 699.036624][T23099] Lens B: Focus, Absolute: 0 [ 699.056609][T23099] Lens B: ================== END STATUS ================== [ 699.526317][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5636'. [ 699.984879][T23141] loop0: detected capacity change from 0 to 4096 [ 700.034684][T23141] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 700.093318][T23141] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 700.534531][T23170] batadv0: entered promiscuous mode [ 700.567586][T23170] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 700.664902][ T787] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 700.756575][T23184] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 700.756575][T23184] SÃȘØÈžZ§6ŸÂ' [ 700.885677][ T787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.899161][ T787] usb 1-1: config 0 has no interface number 0 [ 700.920109][ T787] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 700.940221][ T787] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 700.971965][ T787] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 700.981757][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.983109][T23195] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 701.006621][ T787] usb 1-1: config 0 descriptor?? [ 701.028784][T23163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 701.064689][T23199] Timeout policy `syz1' can only be used by L3 protocol number 35067 [ 701.096952][ T787] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 701.211016][T23210] capability: warning: `syz.2.5661' uses 32-bit capabilities (legacy support in use) [ 701.304661][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 701.328272][ T787] usb 1-1: USB disconnect, device number 75 [ 701.712732][ T27] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 701.894503][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5673'. [ 701.918670][ T27] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 701.933819][ T27] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 701.963880][ T27] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 701.996625][ T27] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 702.023191][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 702.040176][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 702.121221][ T27] usb 5-1: string descriptor 0 read error: -22 [ 702.127790][ T27] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 702.155963][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.202865][ T27] usb 5-1: config 0 descriptor?? [ 702.212298][T23228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 702.225149][ T27] hub 5-1:0.0: bad descriptor, ignoring hub [ 702.244871][ T27] hub: probe of 5-1:0.0 failed with error -5 [ 702.268943][ T27] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 702.365463][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 702.520363][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 702.714314][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 702.753320][ T787] usb 5-1: USB disconnect, device number 2 [ 702.908612][T23312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5686'. [ 702.968553][T23315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5687'. [ 702.982078][T23315] netlink: 'syz.0.5687': attribute type 3 has an invalid length. [ 703.066741][T23320] raw_sendmsg: syz.1.5688 forgot to set AF_INET. Fix it! [ 703.078570][T23321] xt_TCPMSS: Only works on TCP SYN packets [ 703.681181][T23350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5697'. [ 703.690209][T23350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5697'. [ 703.750351][ T28] audit: type=1326 audit(2000002803.716:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.4.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 703.837827][ T28] audit: type=1326 audit(2000002803.716:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.4.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 703.922387][ T28] audit: type=1326 audit(2000002803.726:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.4.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 703.960168][ T28] audit: type=1326 audit(2000002803.726:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.4.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 704.147553][T23363] loop4: detected capacity change from 0 to 4096 [ 704.197484][T23363] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 704.295384][T23363] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 704.466191][T23380] usb usb8: usbfs: process 23380 (syz.1.5707) did not claim interface 0 before use [ 704.999654][ T28] audit: type=1326 audit(2000002804.886:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23399 comm="syz.0.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 705.052087][ T28] audit: type=1326 audit(2000002804.886:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23399 comm="syz.0.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 705.154557][ T28] audit: type=1326 audit(2000002804.886:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23399 comm="syz.0.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 705.243452][ T28] audit: type=1326 audit(2000002804.886:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23399 comm="syz.0.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 705.312021][ T28] audit: type=1326 audit(2000002804.886:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23399 comm="syz.0.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 706.521915][T23491] loop1: detected capacity change from 0 to 4096 [ 706.570983][T23491] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 706.699922][T23491] ntfs3: loop1: Failed to load $Extend (-22). [ 706.715576][T23491] ntfs3: loop1: Failed to initialize $Extend. [ 707.028006][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 707.206617][T23520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5745'. [ 707.230263][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 707.244511][ T23] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 707.264802][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.286410][ T23] usb 5-1: Product: syz [ 707.290648][ T23] usb 5-1: Manufacturer: syz [ 707.317643][ T23] usb 5-1: SerialNumber: syz [ 707.337171][ T23] r8152-cfgselector 5-1: config 0 descriptor?? [ 707.578615][ T23] r8152-cfgselector 5-1: Unknown version 0x0000 [ 707.605405][ T23] r8152-cfgselector 5-1: bad CDC descriptors [ 707.623076][ T23] r8152-cfgselector 5-1: Unknown version 0x0000 [ 707.637601][ T23] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 707.828243][T23541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5749'. [ 708.470928][T23567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5757'. [ 708.575655][T23572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5759'. [ 709.116845][T23602] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.274479][T23608] loop4: detected capacity change from 0 to 256 [ 710.114509][T23654] netlink: 'syz.4.5784': attribute type 13 has an invalid length. [ 710.319250][T23654] gretap0: refused to change device tx_queue_len [ 710.336546][T23654] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 711.396482][T23700] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 711.457314][T23700] bridge3: entered promiscuous mode [ 711.482203][T23700] bridge3: entered allmulticast mode [ 712.028369][T23731] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5808'. [ 712.405858][ T787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 712.633739][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 712.672785][ T787] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 712.692974][ T787] usb 5-1: config 4 has no interface number 0 [ 712.709914][ T787] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 712.740035][ T787] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 712.761408][ T787] usb 5-1: config 4 interface 51 has no altsetting 0 [ 712.771955][ T787] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 712.790057][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.811819][ T787] usb 5-1: Product: syz [ 712.816045][ T787] usb 5-1: Manufacturer: syz [ 712.820688][ T787] usb 5-1: SerialNumber: syz [ 712.846277][T23735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 712.865064][T23735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 712.894181][T23770] loop1: detected capacity change from 0 to 4096 [ 712.974921][T23775] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 713.063535][T23770] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 713.090639][T23770] Remounting filesystem read-only [ 713.150015][T23735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 713.175764][T23735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 713.260822][ T787] cdc_eem 5-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.4-1, CDC EEM Device, e2:1b:a7:59:ef:09 [ 713.565692][ T787] usb 5-1: USB disconnect, device number 4 [ 713.583737][ T787] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device [ 713.598288][T23764] loop0: detected capacity change from 0 to 32768 [ 713.614391][T23764] XFS: ikeep mount option is deprecated. [ 713.693229][T23764] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 713.948471][T23764] XFS (loop0): Ending clean mount [ 713.975944][T23764] XFS (loop0): Quotacheck needed: Please wait. [ 714.125923][T23764] XFS (loop0): Quotacheck: Done. [ 714.351529][T23841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5829'. [ 714.361022][T23841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5829'. [ 714.411780][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 714.749733][T23861] xt_hashlimit: size too large, truncated to 1048576 [ 714.756772][T23861] xt_hashlimit: overflow, try lower: 3/0 [ 715.551927][T23894] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5843'. [ 715.870285][T23911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5848'. [ 716.404251][ T28] audit: type=1326 audit(2000002815.538:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.1.5855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 716.426628][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.487363][ T28] audit: type=1326 audit(2000002815.538:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.1.5855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 716.520554][ T28] audit: type=1326 audit(2000002815.557:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.1.5855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 716.531832][T23941] loop4: detected capacity change from 0 to 512 [ 716.607199][ T28] audit: type=1326 audit(2000002815.557:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.1.5855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 716.729266][T23941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.746364][T23941] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.779181][ T28] audit: type=1326 audit(2000002815.557:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.1.5855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 717.038099][T21965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.075216][T23964] mmap: syz.2.5862 (23964): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 717.213411][T23971] ipt_REJECT: TCP_RESET invalid for non-tcp [ 717.660350][T23992] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5871'. [ 717.822969][T23948] loop1: detected capacity change from 0 to 32768 [ 717.848805][T23948] XFS: attr2 mount option is deprecated. [ 717.926863][T23948] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 718.002025][T24010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5874'. [ 718.355683][T23948] XFS (loop1): Ending clean mount [ 718.406758][T23948] XFS (loop1): Quotacheck needed: Please wait. [ 718.549092][T23948] XFS (loop1): Quotacheck: Done. [ 718.817630][ T5793] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 718.840909][T24052] netlink: 'syz.4.5887': attribute type 1 has an invalid length. [ 718.891255][T24059] overlayfs: disabling nfs_export due to verity=on [ 718.898155][T24059] overlayfs: conflicting options: userxattr,redirect_dir=on [ 719.121235][T24069] loop4: detected capacity change from 0 to 164 [ 719.131237][ T23] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 719.134215][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5892'. [ 719.153714][T24069] Unable to read rock-ridge attributes [ 719.341323][ T23] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 719.350507][ T23] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 719.376704][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 719.416599][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 719.441853][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 719.474968][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 719.496270][ T23] usb 3-1: string descriptor 0 read error: -22 [ 719.503528][ T23] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 719.515114][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.539678][ T23] usb 3-1: config 0 descriptor?? [ 719.545695][T24053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 719.570041][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 719.579399][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 719.596713][ T23] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 719.751108][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 719.844919][ T23] usb 3-1: USB disconnect, device number 97 [ 719.986254][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 720.015304][ T5844] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 720.027628][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.036057][ T5844] usb 5-1: Product: syz [ 720.040527][ T5844] usb 5-1: Manufacturer: syz [ 720.045244][ T5844] usb 5-1: SerialNumber: syz [ 720.063856][ T5844] usb 5-1: config 0 descriptor?? [ 720.073079][ T5844] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 720.330718][ T5844] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 720.356092][ T5844] visor: probe of 5-1:0.0 failed with error -5 [ 720.528592][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5909'. [ 720.540813][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5909'. [ 720.566160][T24147] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 720.608914][ T23] usb 5-1: USB disconnect, device number 5 [ 721.011657][T24178] loop1: detected capacity change from 0 to 512 [ 721.060543][T24178] EXT4-fs (loop1): 1 truncate cleaned up [ 721.071701][T24178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.143784][T24178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.683791][T24215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5926'. [ 721.831318][T24224] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5929'. [ 721.931643][ T28] audit: type=1326 audit(2000002820.719:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 722.004510][ T28] audit: type=1326 audit(2000002820.719:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 722.042248][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 722.048718][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.076484][ T28] audit: type=1326 audit(2000002820.719:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 722.170630][ T28] audit: type=1326 audit(2000002820.719:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 722.227303][ T28] audit: type=1326 audit(2000002820.719:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 722.907426][T24274] binfmt_misc: register: failed to install interpreter file ./bus [ 723.311557][T24296] proc: Unknown parameter 'tmpfs' [ 723.791769][T24322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.309383][T24347] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 724.395688][T24314] loop4: detected capacity change from 0 to 32768 [ 724.442444][T24314] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.5957 (24314) [ 724.476120][T24314] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 724.500487][T24314] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 724.532414][T24314] BTRFS info (device loop4): enabling auto defrag [ 724.550786][T24314] BTRFS info (device loop4): doing ref verification [ 724.574563][T24314] BTRFS info (device loop4): max_inline at 0 [ 724.580625][T24314] BTRFS info (device loop4): force clearing of disk cache [ 724.598475][T24314] BTRFS info (device loop4): turning on sync discard [ 724.607917][T24314] BTRFS info (device loop4): disabling free space tree [ 724.657657][T24369] loop1: detected capacity change from 0 to 1024 [ 724.690826][T24314] BTRFS info (device loop4): enabling ssd optimizations [ 724.714435][T24314] BTRFS info (device loop4): rebuilding free space tree [ 724.778318][T24314] BTRFS info (device loop4): disabling free space tree [ 724.795580][T24314] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 724.819479][T24314] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 725.126071][T24393] Unsupported ieee802154 address type: 0 [ 725.282841][T21965] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 725.788067][T24421] netlink: 'syz.1.5986': attribute type 3 has an invalid length. [ 725.852085][T24421] netlink: 'syz.1.5986': attribute type 1 has an invalid length. [ 725.899492][T24421] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5986'. [ 725.908628][T24421] NCSI netlink: No device for ifindex 33022 [ 726.018714][T24432] xt_TCPMSS: Only works on TCP SYN packets [ 726.498528][ T787] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 726.740512][ T787] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 726.748520][T24475] loop1: detected capacity change from 0 to 512 [ 726.765583][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 726.767732][T24475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 726.808048][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 726.829187][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 726.850610][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 726.895571][ T787] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 726.903110][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 726.938720][T24475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.956762][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 726.966874][T24475] ext4 filesystem being mounted at /1555/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 727.054632][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.056090][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 727.111382][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 727.152673][ T787] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 727.160183][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 727.213962][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 727.216174][T24491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6006'. [ 727.239379][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 727.253111][T24493] loop1: detected capacity change from 0 to 64 [ 727.269278][ T787] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 727.304461][ T787] usb 5-1: string descriptor 0 read error: -22 [ 727.311300][ T787] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 727.327974][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.404772][ T787] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 727.716558][ T27] usb 5-1: USB disconnect, device number 6 [ 727.796606][T24511] loop0: detected capacity change from 0 to 4096 [ 727.800349][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6010'. [ 727.837551][T24511] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 727.961617][T24511] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 727.997432][T24527] netlink: 22 bytes leftover after parsing attributes in process `syz.1.6011'. [ 728.032154][T24511] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 728.032154][T24511] [ 729.669811][T24618] tmpfs: Bad value for 'mpol' [ 729.804573][T24622] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 730.476348][T24661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6055'. [ 731.395120][ T23] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 731.608903][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 731.616450][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.625381][ T23] usb 2-1: config 0 has no interface number 0 [ 731.640556][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.658238][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 731.697106][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 731.714621][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.732119][ T23] usb 2-1: config 0 descriptor?? [ 731.754710][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 731.971709][ T23] usb 2-1: USB disconnect, device number 76 [ 732.231049][T24762] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 732.305089][T24768] loop4: detected capacity change from 0 to 512 [ 732.336937][T24768] ext4: Unknown parameter 'nouser_xattr' [ 733.633982][T24836] netlink: 'syz.4.6106': attribute type 5 has an invalid length. [ 733.723290][T24836] : entered promiscuous mode [ 733.964631][T24817] loop1: detected capacity change from 0 to 32768 [ 734.087278][T24817] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 734.292260][T24873] loop4: detected capacity change from 0 to 128 [ 734.299309][T24872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6115'. [ 734.317419][T24873] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 734.412290][T24873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 734.465399][T24873] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.6116: checksumming directory block 0 [ 734.535476][T24878] loop0: detected capacity change from 0 to 2048 [ 734.604730][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 734.624190][T24878] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 734.642417][T21965] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 734.760109][T24878] cifs: Unknown parameter 'h}#úä [ 734.760109][T24878] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 734.760109][T24878] SÃȘØÈžZ§6ŸÂ' [ 734.977811][T24901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6122'. [ 735.264806][T24914] libceph: resolve '0.0' (ret=-3): failed [ 735.553382][T24932] loop1: detected capacity change from 0 to 256 [ 735.657785][T24932] FAT-fs (loop1): Directory bread(block 64) failed [ 735.698550][T24932] FAT-fs (loop1): Directory bread(block 65) failed [ 735.725474][T24932] FAT-fs (loop1): Directory bread(block 66) failed [ 735.743064][T24932] FAT-fs (loop1): Directory bread(block 67) failed [ 735.764704][T24932] FAT-fs (loop1): Directory bread(block 68) failed [ 735.800370][T24932] FAT-fs (loop1): Directory bread(block 69) failed [ 735.807082][T24932] FAT-fs (loop1): Directory bread(block 70) failed [ 735.866177][T24932] FAT-fs (loop1): Directory bread(block 71) failed [ 735.878962][T24946] netlink: 'syz.4.6135': attribute type 3 has an invalid length. [ 735.897375][T24932] FAT-fs (loop1): Directory bread(block 72) failed [ 735.915271][T24932] FAT-fs (loop1): Directory bread(block 73) failed [ 736.104740][T24958] netlink: 'syz.2.6138': attribute type 5 has an invalid length. [ 736.222401][T24958] : entered promiscuous mode [ 736.314882][T24971] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 24971 comm: syz.1.6142) [ 736.410358][T24974] loop0: detected capacity change from 0 to 2048 [ 736.516053][T24974] loop0: p1 < > p3 [ 736.533943][T24974] loop0: p3 size 134217728 extends beyond EOD, truncated [ 736.784687][T24998] program syz.4.6150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.850536][T24998] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 736.969997][T21969] udevd[21969]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 737.003417][T21977] udevd[21977]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 737.097619][T25016] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 737.142656][T25019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6155'. [ 737.179709][T25019] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6155'. [ 737.378887][T25032] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 737.386141][T25032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 737.443642][T25032] vhci_hcd vhci_hcd.0: Device attached [ 737.471746][T25037] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 737.478353][T25037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 737.511226][T25037] vhci_hcd vhci_hcd.0: Device attached [ 737.524018][T25038] vhci_hcd: connection closed [ 737.525342][T25033] vhci_hcd: connection closed [ 737.546864][ T133] vhci_hcd: stop threads [ 737.586621][ T133] vhci_hcd: release socket [ 737.622951][ T133] vhci_hcd: disconnect device [ 737.640557][ T133] vhci_hcd: stop threads [ 737.644929][ T133] vhci_hcd: release socket [ 737.652987][ T133] vhci_hcd: disconnect device [ 737.675385][ T5880] vhci_hcd: vhci_device speed not set [ 738.434087][ T5844] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 738.684349][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.740656][ T5844] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 738.763981][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 738.798417][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.841571][T25077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 738.879855][T25110] netlink: 'syz.0.6183': attribute type 1 has an invalid length. [ 738.888256][T25110] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6183'. [ 738.912619][ T5844] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 739.393602][ T23] usb 2-1: USB disconnect, device number 77 [ 741.185313][T25235] netlink: 'syz.4.6215': attribute type 1 has an invalid length. [ 741.235337][T25235] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6215'. [ 741.281873][T25240] QAT: failed to copy from user cfg_data. [ 741.385432][T25247] netlink: 'syz.0.6218': attribute type 5 has an invalid length. [ 741.733946][T25264] Cannot find del_set index 2 as target [ 741.864992][T25269] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 741.897838][T25269] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 742.121529][T25282] loop1: detected capacity change from 0 to 2048 [ 742.140279][T25282] EXT4-fs: Ignoring removed mblk_io_submit option [ 742.228821][T25282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.301567][T25282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.6230: bg 0: block 234: padding at end of block bitmap is not set [ 742.318409][T25299] loop0: detected capacity change from 0 to 1024 [ 742.440625][T25282] EXT4-fs (loop1): Remounting filesystem read-only [ 742.460242][T25282] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.1.6230: cleanup dec ref error -28 [ 742.590415][ T48] hfsplus: b-tree write err: -5, ino 4 [ 742.611122][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.947548][T25323] loop1: detected capacity change from 0 to 4096 [ 742.987244][T25323] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 743.007786][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.122791][T25323] ntfs: volume version 3.1. [ 743.352889][T25344] : renamed from bond_slave_0 [ 743.556343][T25356] netlink: 'syz.1.6250': attribute type 3 has an invalid length. [ 744.017091][T25385] loop0: detected capacity change from 0 to 256 [ 744.034117][ T8627] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 744.222395][T25400] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 744.259897][ T8627] usb 2-1: Using ep0 maxpacket: 16 [ 744.276200][ T8627] usb 2-1: unable to get BOS descriptor or descriptor too short [ 744.308464][ T8627] usb 2-1: config 1 interface 0 has no altsetting 0 [ 744.331455][ T8627] usb 2-1: New USB device found, idVendor=25b5, idProduct=0002, bcdDevice= 0.40 [ 744.344067][ T8627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.376210][ T8627] usb 2-1: Product: syz [ 744.380485][ T8627] usb 2-1: Manufacturer: syz [ 744.385120][ T8627] usb 2-1: SerialNumber: syz [ 744.674021][T25422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6270'. [ 744.681037][T25417] loop4: detected capacity change from 0 to 2048 [ 744.707718][T25417] EXT4-fs: Ignoring removed mblk_io_submit option [ 744.779591][T25417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.855270][T25417] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.6268: bg 0: block 234: padding at end of block bitmap is not set [ 744.893176][T25417] EXT4-fs (loop4): Remounting filesystem read-only [ 744.923570][ T8627] usbhid 2-1:1.0: can't add hid device: -71 [ 744.929648][ T8627] usbhid: probe of 2-1:1.0 failed with error -71 [ 744.938412][T25417] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.4.6268: cleanup dec ref error -28 [ 744.940356][ T8627] usb 2-1: USB disconnect, device number 78 [ 744.988966][T25439] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 745.043795][T25439] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 745.066498][T21965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.208804][T25449] 8021q: VLANs not supported on ipvlan1 [ 745.259777][T25453] netlink: 'syz.4.6274': attribute type 3 has an invalid length. [ 745.268814][T25453] netlink: 'syz.4.6274': attribute type 3 has an invalid length. [ 745.277309][T25453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6274'. [ 745.559742][T25467] loop4: detected capacity change from 0 to 512 [ 745.658185][T25467] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 745.691124][T25476] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6282'. [ 745.700530][T25467] EXT4-fs (loop4): orphan cleanup on readonly fs [ 745.768455][T25467] EXT4-fs warning (device loop4): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 745.826726][T25467] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 745.848540][T25467] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.6279: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 745.908719][T25467] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6279: couldn't read orphan inode 13 (err -117) [ 745.977646][T25467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 746.097236][T25467] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 746.107102][T25467] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 746.151309][T25467] EXT4-fs warning (device loop4): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 746.292659][T21965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.701428][T25523] IPv6: Can't replace route, no match found [ 746.861133][T25529] netlink: 340 bytes leftover after parsing attributes in process `syz.4.6298'. [ 746.901912][T25529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6298'. [ 746.954391][T25494] loop0: detected capacity change from 0 to 32768 [ 747.005447][T25494] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 747.151966][T25552] loop1: detected capacity change from 0 to 2048 [ 747.199614][T25552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.287245][T25552] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 747.334582][T25494] XFS (loop0): Ending clean mount [ 747.428140][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.445542][ T5844] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 747.491469][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 747.680387][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 747.703514][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 747.727686][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.765406][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 747.786637][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 747.823544][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 747.861571][ T5844] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 747.881828][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.935713][ T5844] usb 5-1: config 0 descriptor?? [ 747.946657][T25550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 748.141221][T25594] netlink: 'syz.0.6307': attribute type 2 has an invalid length. [ 748.160220][T25594] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6307'. [ 748.413462][T25605] __vm_enough_memory: pid: 25605, comm: syz.1.6315, not enough memory for the allocation [ 748.508859][ T5801] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 748.509132][ T27] usb 5-1: USB disconnect, device number 7 [ 748.908876][T25641] netlink: 'syz.2.6322': attribute type 10 has an invalid length. [ 748.909799][ T5844] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 749.028229][T25646] netlink: 'syz.1.6324': attribute type 1 has an invalid length. [ 749.047339][T25646] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6324'. [ 749.072481][T25646] nbd: must specify at least one socket [ 749.123165][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 749.154767][ T5844] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 749.195983][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.225922][ T5844] usb 1-1: Product: syz [ 749.240747][ T5844] usb 1-1: Manufacturer: syz [ 749.245431][ T5844] usb 1-1: SerialNumber: syz [ 749.274964][T25658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 749.299689][ T5844] usb 1-1: config 0 descriptor?? [ 749.544299][T25667] netlink: 'syz.2.6330': attribute type 1 has an invalid length. [ 749.558546][ T5844] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 749.592977][T25669] loop1: detected capacity change from 0 to 512 [ 749.624386][T25669] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 749.678131][T25669] EXT4-fs (loop1): orphan cleanup on readonly fs [ 749.689458][T25669] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 749.722108][T25669] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 749.741016][T25669] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.6331: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 749.778099][ T5844] usb write operation failed. (-71) [ 749.806885][T25669] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6331: couldn't read orphan inode 13 (err -117) [ 749.820482][ T5844] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 749.849844][ T5844] dvbdev: DVB: registering new adapter (Terratec H7) [ 749.852876][T25669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 749.871632][ T5844] usb 1-1: media controller created [ 749.889252][ T5844] usb read operation failed. (-71) [ 749.904169][ T5844] usb write operation failed. (-71) [ 749.935463][ T5844] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 749.984894][ T5844] usb 1-1: USB disconnect, device number 76 [ 750.025189][T25669] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 750.069018][T25669] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 750.107436][T25669] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 750.222653][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.442313][T25717] syz.2.6341 uses obsolete (PF_INET,SOCK_PACKET) [ 750.656172][T25729] Cannot find set identified by id 65535 to match [ 750.854797][T25737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.143170][T25755] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6352'. [ 751.240362][T25759] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6355'. [ 751.286695][T25759] unsupported nla_type 65024 [ 751.402180][T25768] loop1: detected capacity change from 0 to 16 [ 751.457064][T25768] erofs: (device loop1): mounted with root inode @ nid 36. [ 752.155723][T25816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.660656][T25849] netlink: 'syz.0.6381': attribute type 9 has an invalid length. [ 752.676341][T25849] netlink: 'syz.0.6381': attribute type 7 has an invalid length. [ 752.687190][T25849] netlink: 'syz.0.6381': attribute type 8 has an invalid length. [ 752.887012][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 753.095313][ T27] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 753.122024][ T27] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 753.146003][ T27] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 753.197328][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.261926][T25842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 753.273981][ T27] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 753.670444][T25904] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 753.691156][ T27] usb 5-1: USB disconnect, device number 8 [ 754.309136][ T5850] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 754.379233][T25959] loop0: detected capacity change from 0 to 256 [ 754.470242][ T27] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 754.512440][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 754.528836][ T5850] usb 2-1: config 1 interface 0 has no altsetting 0 [ 754.549512][ T5850] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 754.569819][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.597928][ T5850] usb 2-1: Product: syz [ 754.602325][ T5850] usb 2-1: Manufacturer: syz [ 754.607007][ T5850] usb 2-1: SerialNumber: syz [ 754.694162][ T27] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 754.703615][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.725986][ T27] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 754.735507][ T27] usb 3-1: config 1 has no interface number 1 [ 754.762033][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 754.775771][ T27] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.812590][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 754.826501][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.835923][ T27] usb 3-1: Product: syz [ 754.840146][ T27] usb 3-1: Manufacturer: syz [ 754.845415][ T27] usb 3-1: SerialNumber: syz [ 754.884612][ T5850] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input33 [ 754.909342][ T5144] bcm5974 2-1:1.0: could not read from device [ 754.922992][ T5144] bcm5974 2-1:1.0: could not read from device [ 754.947846][ T5850] usb 2-1: USB disconnect, device number 79 [ 755.106493][T21969] udevd[21969]: Error opening device "/dev/input/event4": No such file or directory [ 755.133483][ T27] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 755.138007][T21969] udevd[21969]: Unable to EVIOCGABS device "/dev/input/event4" [ 755.149074][ T27] usb 3-1: MIDIStreaming interface descriptor not found [ 755.159827][T21969] udevd[21969]: Unable to EVIOCGABS device "/dev/input/event4" [ 755.180271][T25996] loop0: detected capacity change from 0 to 4096 [ 755.188725][T21969] udevd[21969]: Unable to EVIOCGABS device "/dev/input/event4" [ 755.196862][T21969] udevd[21969]: Unable to EVIOCGABS device "/dev/input/event4" [ 755.229391][T25996] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 755.259951][ T27] usb 3-1: USB disconnect, device number 98 [ 755.382382][T26029] udevd[26029]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 755.458159][T25996] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 755.503563][T25996] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 755.535051][T25996] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 755.923110][ T28] audit: type=1326 audit(2000002852.508:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26053 comm="syz.4.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 755.975271][ T28] audit: type=1326 audit(2000002852.508:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26053 comm="syz.4.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 756.057319][ T28] audit: type=1326 audit(2000002852.536:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26053 comm="syz.4.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 756.145204][ T28] audit: type=1326 audit(2000002852.536:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26053 comm="syz.4.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 756.220388][ T28] audit: type=1326 audit(2000002852.545:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26053 comm="syz.4.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 756.451099][T26078] dlm: non-version read from control device 59 [ 756.882747][T26059] loop0: detected capacity change from 0 to 32768 [ 757.838484][T26118] loop0: detected capacity change from 0 to 4096 [ 757.869915][T26118] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 758.058199][T26118] ntfs3: loop0: failed to convert "c46c" to iso8859-14 [ 758.693030][ T5844] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 758.777798][T26164] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 758.911206][ T5844] usb 1-1: config 1 has an invalid interface number: 28 but max is 0 [ 758.916451][T26132] loop4: detected capacity change from 0 to 32768 [ 758.938182][ T5844] usb 1-1: config 1 has no interface number 0 [ 758.950042][ T5844] usb 1-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 758.992604][ T5844] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 759.014919][ T5844] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 759.036855][ T5844] usb 1-1: config 1 interface 28 has no altsetting 0 [ 759.060743][ T5844] usb 1-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 759.089700][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.097773][ T5844] usb 1-1: Product: syz [ 759.136829][ T5844] usb 1-1: Manufacturer: syz [ 759.147825][ T5844] usb 1-1: SerialNumber: syz [ 759.167227][T26145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 759.187791][ T5844] ipaq 1-1:1.28: PocketPC PDA converter detected [ 759.436211][ T5844] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 759.457838][T26187] fuse: Bad value for 'fd' [ 759.643769][ T5844] usb 1-1: USB disconnect, device number 77 [ 759.702675][ T5844] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 759.750471][ T5844] ipaq 1-1:1.28: device disconnected [ 760.397031][T26245] loop1: detected capacity change from 0 to 128 [ 760.756512][ T27] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 760.807815][T26274] loop4: detected capacity change from 0 to 512 [ 760.889947][T26274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.963228][T26286] netlink: 'syz.1.6486': attribute type 10 has an invalid length. [ 760.983189][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 761.013805][T26274] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.043844][ T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 761.075554][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 761.096982][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.127363][T26248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 761.131277][T26292] set match dimension is over the limit! [ 761.163366][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 761.247229][T21965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.646102][ T8627] usb 1-1: USB disconnect, device number 78 [ 761.649019][T26327] loop4: detected capacity change from 0 to 64 [ 761.856880][T26351] ip6t_srh: unknown srh invflags 7D00 [ 762.086047][ T28] audit: type=1400 audit(2000002858.278:149): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A0C7E pid=26363 comm="syz.1.6499" [ 762.447665][T26382] loop0: detected capacity change from 0 to 8 [ 763.147961][T26377] loop4: detected capacity change from 0 to 32768 [ 763.181335][T26377] (syz.4.6503,26377,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 763.214296][T26377] (syz.4.6503,26377,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 763.288363][T26377] JBD2: Ignoring recovery information on journal [ 763.475574][T26377] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 763.855564][T21965] ocfs2: Unmounting device (7,4) on (node local) [ 763.935239][T26436] QAT: Stopping all acceleration devices. [ 765.040300][T26489] wg1: entered promiscuous mode [ 765.056542][T26489] wg1: entered allmulticast mode [ 765.924145][T26533] loop0: detected capacity change from 0 to 128 [ 765.952481][T26533] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 765.965406][T26533] ext4 filesystem being mounted at /1661/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.032587][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.284578][ T27] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 766.502566][ T27] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 766.515530][ T27] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 766.551918][ T27] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 766.599193][ T27] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 766.619663][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 766.641171][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 766.652084][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 766.675580][ T27] usb 5-1: string descriptor 0 read error: -22 [ 766.700841][ T27] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 766.721312][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.755356][ T27] usb 5-1: config 0 descriptor?? [ 766.763214][ T27] hub 5-1:0.0: bad descriptor, ignoring hub [ 766.784429][ T27] hub: probe of 5-1:0.0 failed with error -5 [ 766.836773][ T27] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 767.146149][ T5844] usb 5-1: USB disconnect, device number 9 [ 767.816153][T26645] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6576'. [ 767.893927][T26651] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 768.039192][T26658] loop1: detected capacity change from 0 to 256 [ 768.165279][T26658] FAT-fs (loop1): Directory bread(block 64) failed [ 768.201440][T26658] FAT-fs (loop1): Directory bread(block 65) failed [ 768.224891][T26658] FAT-fs (loop1): Directory bread(block 66) failed [ 768.248355][T26658] FAT-fs (loop1): Directory bread(block 67) failed [ 768.262795][T26658] FAT-fs (loop1): Directory bread(block 68) failed [ 768.269407][T26658] FAT-fs (loop1): Directory bread(block 69) failed [ 768.276254][T26658] FAT-fs (loop1): Directory bread(block 70) failed [ 768.282838][T26658] FAT-fs (loop1): Directory bread(block 71) failed [ 768.290644][T26658] FAT-fs (loop1): Directory bread(block 72) failed [ 768.298363][T26658] FAT-fs (loop1): Directory bread(block 73) failed [ 768.890841][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6593'. [ 769.064378][T26743] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 769.281448][T26750] xt_connbytes: Forcing CT accounting to be enabled [ 770.361951][T26810] netlink: 'syz.0.6618': attribute type 2 has an invalid length. [ 770.417886][T26810] netlink: 'syz.0.6618': attribute type 1 has an invalid length. [ 770.460735][T26810] netlink: 'syz.0.6618': attribute type 1 has an invalid length. [ 770.693192][T26824] netlink: 772 bytes leftover after parsing attributes in process `syz.0.6622'. [ 770.709027][T26826] loop4: detected capacity change from 0 to 256 [ 771.371305][ T28] audit: type=1326 audit(2000002866.957:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26856 comm="syz.4.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 771.406386][ T27] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 771.481210][ T28] audit: type=1326 audit(2000002866.957:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26856 comm="syz.4.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 771.565187][ T28] audit: type=1326 audit(2000002867.004:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26856 comm="syz.4.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 771.587624][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.606176][ T28] audit: type=1326 audit(2000002867.004:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26856 comm="syz.4.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 771.667875][ T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 771.685363][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.713575][ T27] usb 2-1: Product: syz [ 771.720221][ T27] usb 2-1: Manufacturer: syz [ 771.725306][ T27] usb 2-1: SerialNumber: syz [ 771.749836][ T27] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 771.758653][T26874] netlink: 'syz.2.6636': attribute type 1 has an invalid length. [ 771.793723][ T8627] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 772.123736][T26882] loop4: detected capacity change from 0 to 4096 [ 772.163246][T26882] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 772.182389][T26895] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 772.322042][T26882] ntfs3: loop4: failed to convert "c46c" to cp864 [ 772.391714][ T5881] usb 2-1: USB disconnect, device number 80 [ 772.644683][T26917] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 772.651057][T26918] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 1 [ 772.674375][T26919] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 2 [ 772.688014][T26920] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 3 [ 772.712694][T26921] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 4 [ 772.723747][T26923] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 5 [ 772.743510][T26924] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 6 [ 772.760218][T26925] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 7 [ 772.937282][ T8627] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 772.944502][ T8627] ath9k_htc: Failed to initialize the device [ 772.979243][ T5881] usb 2-1: ath9k_htc: USB layer deinitialized [ 773.126794][T26947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.817517][T26988] loop0: detected capacity change from 0 to 256 [ 773.861590][T26988] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 773.900749][T26988] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 773.984588][T26988] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 774.008102][T26997] __vm_enough_memory: pid: 26997, comm: syz.4.6669, not enough memory for the allocation [ 774.309610][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.339947][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.361598][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.390649][T27017] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 774.401227][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.409153][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.434333][T27017] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 774.441604][T27011] loop4: detected capacity change from 0 to 4096 [ 774.452780][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.475704][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.492472][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.501408][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.518613][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.530021][T27021] loop0: detected capacity change from 0 to 512 [ 774.538949][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.589149][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.624682][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.671550][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.703599][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.750938][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.764744][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.794861][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.818942][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.841305][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.870851][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.902661][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.937084][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.957456][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.965460][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 774.996702][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.032242][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.040065][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.056609][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.065949][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.111402][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.135996][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.158791][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.176219][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.197126][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.228029][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.267460][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.276527][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.291909][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.303136][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.315847][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.324084][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6685'. [ 775.342887][T27054] loop0: detected capacity change from 0 to 16 [ 775.362489][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.370331][ T787] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 775.388878][T27054] erofs: (device loop0): mounted with root inode @ nid 36. [ 775.438459][ T787] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 775.465049][T27054] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 775.506571][T27054] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 775.863251][T27068] fido_id[27068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 776.131364][T27100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6696'. [ 776.254375][T27106] sctp: [Deprecated]: syz.4.6698 (pid 27106) Use of int in max_burst socket option deprecated. [ 776.254375][T27106] Use struct sctp_assoc_value instead [ 776.346287][ T5844] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 776.449857][T27115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'. [ 776.581486][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 776.601165][ T5844] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 776.624025][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.641986][ T5844] usb 3-1: Product: syz [ 776.666947][ T5844] usb 3-1: Manufacturer: syz [ 776.677735][ T5844] usb 3-1: SerialNumber: syz [ 776.693913][ T5844] usb 3-1: config 0 descriptor?? [ 776.718684][ T5844] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 776.818609][T27129] loop4: detected capacity change from 0 to 1024 [ 777.187287][ T5844] gspca_sn9c2028: read1 error -71 [ 777.193177][ T5844] gspca_sn9c2028: read1 error -71 [ 777.198406][ T5844] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 777.238542][ T5844] usb 3-1: USB disconnect, device number 99 [ 777.319073][T27110] loop1: detected capacity change from 0 to 32768 [ 777.349118][T27110] JBD2: Ignoring recovery information on journal [ 777.418221][T27110] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 777.517655][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 777.518555][T27160] loop4: detected capacity change from 0 to 256 [ 777.645003][T27160] FAT-fs (loop4): Directory bread(block 64) failed [ 777.656226][T27160] FAT-fs (loop4): Directory bread(block 65) failed [ 777.681279][T27160] FAT-fs (loop4): Directory bread(block 66) failed [ 777.702812][T27160] FAT-fs (loop4): Directory bread(block 67) failed [ 777.721309][T27160] FAT-fs (loop4): Directory bread(block 68) failed [ 777.739701][T27160] FAT-fs (loop4): Directory bread(block 69) failed [ 777.746417][T27160] FAT-fs (loop4): Directory bread(block 70) failed [ 777.769994][T27160] FAT-fs (loop4): Directory bread(block 71) failed [ 777.782884][T27160] FAT-fs (loop4): Directory bread(block 72) failed [ 777.808024][T27160] FAT-fs (loop4): Directory bread(block 73) failed [ 778.584270][T27208] loop0: detected capacity change from 0 to 512 [ 778.633554][T27208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.656220][T27208] ext4 filesystem being mounted at /1713/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.884194][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.272621][T27234] netlink: 'syz.2.6732': attribute type 9 has an invalid length. [ 779.356042][T27236] netlink: 'syz.1.6731': attribute type 15 has an invalid length. [ 779.376023][T27236] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6731'. [ 779.480263][T27219] loop4: detected capacity change from 0 to 32768 [ 779.554781][T27219] add_index: next_index = 0. Resetting! [ 779.561149][T27219] find_entry called with index >= next_index [ 779.584863][T27219] find_entry called with index >= next_index [ 779.993652][T27265] loop0: detected capacity change from 0 to 256 [ 780.055532][T27265] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 780.213653][T27276] cgroup: Bad value for 'name' [ 781.303326][T27321] loop4: detected capacity change from 0 to 4096 [ 781.351423][T27321] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 781.510784][T27321] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 781.575908][T27321] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 782.248858][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 782.311414][T27370] loop0: detected capacity change from 0 to 2048 [ 782.461253][T27382] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 783.366058][T27432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6788'. [ 783.714736][T27446] loop4: detected capacity change from 0 to 4096 [ 784.042168][T27466] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6799'. [ 784.147627][T27466] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6799'. [ 784.581393][ T5801] Bluetooth: unknown link type 7 [ 784.586501][ T5801] Bluetooth: hci4: connection err: -111 [ 784.932495][T27510] ipt_REJECT: TCP_RESET invalid for non-tcp [ 785.169812][T27527] "syz.4.6817" (27527) uses obsolete ecb(arc4) skcipher [ 785.187074][T27530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6819'. [ 786.226663][T27584] kcapi: manufacturer command 52776558133248 unknown. [ 786.704928][ T5881] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 786.826877][T27623] ufs: You didn't specify the type of your ufs filesystem [ 786.826877][T27623] [ 786.826877][T27623] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 786.826877][T27623] [ 786.826877][T27623] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 786.888032][T27623] ufs: ufstype=old is supported read-only [ 786.900032][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 786.900437][T27623] syz.4.6849: attempt to access beyond end of device [ 786.900437][T27623] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 786.912870][ T5881] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 786.937484][T27626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6850'. [ 786.965070][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.994242][ T5881] usb 2-1: config 0 has no interface number 0 [ 787.004908][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 787.015994][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.028515][ T5881] usb 2-1: Product: syz [ 787.045854][ T5881] usb 2-1: Manufacturer: syz [ 787.057322][ T5881] usb 2-1: SerialNumber: syz [ 787.084947][ T5881] usb 2-1: config 0 descriptor?? [ 787.270653][T27638] loop0: detected capacity change from 0 to 2048 [ 787.308602][T27638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.325926][T27646] netlink: 'syz.4.6855': attribute type 10 has an invalid length. [ 787.345677][ T5881] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 787.386284][ T5881] usb 2-1: No valid video chain found. [ 787.426556][T27646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.478977][T27646] team0: Port device bond0 added [ 787.614225][ T27] usb 2-1: USB disconnect, device number 81 [ 787.728978][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.736017][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.052209][T27683] bond4: entered promiscuous mode [ 788.058805][T27683] bond4: entered allmulticast mode [ 788.064468][T27683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 788.138085][T27719] netlink: 'syz.0.6865': attribute type 21 has an invalid length. [ 788.391346][T27730] netlink: 'syz.1.6869': attribute type 29 has an invalid length. [ 788.401838][T27730] netlink: 'syz.1.6869': attribute type 29 has an invalid length. [ 788.828673][T27747] netlink: 'syz.1.6874': attribute type 10 has an invalid length. [ 788.846330][T27747] bridge0: port 1(team0) entered blocking state [ 788.852940][T27745] loop0: detected capacity change from 0 to 2048 [ 788.888601][T27747] bridge0: port 1(team0) entered disabled state [ 788.895158][T27747] team0: entered allmulticast mode [ 788.912605][T27745] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 788.917916][T27745] loop0: partition table partially beyond EOD, truncated [ 788.938273][T27747] team0: entered promiscuous mode [ 788.946245][T27745] loop0: p2 start 4278190080 is beyond EOD, truncated [ 788.963873][T27745] loop0: p4 size 8192 extends beyond EOD, truncated [ 788.982029][T27745] loop0: p6 size 8192 extends beyond EOD, truncated [ 789.550728][T23508] udevd[23508]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 789.578526][T21969] udevd[21969]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 789.831052][T27795] loop0: detected capacity change from 0 to 8 [ 791.261479][T27865] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6907'. [ 791.811005][T27897] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6917'. [ 792.298773][T27931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6926'. [ 792.417193][T27937] netlink: 'syz.4.6927': attribute type 1 has an invalid length. [ 792.513763][ T5881] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 792.724654][ T5881] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 792.742832][ T5881] usb 3-1: config 0 has no interface number 0 [ 792.750025][ T5881] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 792.762294][ T5881] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 792.771889][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.792543][ T5881] usb 3-1: config 0 descriptor?? [ 792.825302][ T5881] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input35 [ 793.028335][T27972] bond4: entered promiscuous mode [ 793.034223][T27972] bond4: entered allmulticast mode [ 793.040703][T27972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 793.068105][T28009] unsupported nlmsg_type 40 [ 793.103378][ T23] usb 3-1: USB disconnect, device number 100 [ 793.382754][T28031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6942'. [ 793.397843][T28031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6942'. [ 794.516022][T28095] loop4: detected capacity change from 0 to 256 [ 794.656179][T28101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6963'. [ 794.682503][T28101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6963'. [ 794.706251][ T28] audit: type=1326 audit(2000002888.785:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28104 comm="syz.0.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 794.737067][T28095] FAT-fs (loop4): Directory bread(block 64) failed [ 794.745701][T28095] FAT-fs (loop4): Directory bread(block 65) failed [ 794.769761][T28095] FAT-fs (loop4): Directory bread(block 66) failed [ 794.770770][ T28] audit: type=1326 audit(2000002888.785:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28104 comm="syz.0.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 794.776387][T28095] FAT-fs (loop4): Directory bread(block 67) failed [ 794.841013][ T28] audit: type=1326 audit(2000002888.804:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28104 comm="syz.0.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 794.873762][T28109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6966'. [ 794.897936][T28095] FAT-fs (loop4): Directory bread(block 68) failed [ 794.904841][T28095] FAT-fs (loop4): Directory bread(block 69) failed [ 794.919968][ T28] audit: type=1326 audit(2000002888.823:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28104 comm="syz.0.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 794.954150][T28095] FAT-fs (loop4): Directory bread(block 70) failed [ 794.961371][T28095] FAT-fs (loop4): Directory bread(block 71) failed [ 794.994173][T28095] FAT-fs (loop4): Directory bread(block 72) failed [ 795.000985][T28095] FAT-fs (loop4): Directory bread(block 73) failed [ 795.017005][ T28] audit: type=1326 audit(2000002888.823:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28104 comm="syz.0.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 795.329255][T28127] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 795.390081][T28127] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 795.963329][T28163] loop1: detected capacity change from 0 to 4096 [ 796.292237][T28176] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.6985' sets config #6 [ 796.333041][T28178] netlink: 'syz.4.6987': attribute type 10 has an invalid length. [ 796.362440][T28178] bridge0: port 3(team0) entered blocking state [ 796.380790][T28178] bridge0: port 3(team0) entered disabled state [ 796.401490][T28178] team0: entered allmulticast mode [ 796.412844][T28178] team_slave_0: entered allmulticast mode [ 796.427015][T28178] team_slave_1: entered allmulticast mode [ 796.439346][T28178] bond0: entered allmulticast mode [ 796.444590][T28178] bond_slave_0: entered allmulticast mode [ 796.463944][T28178] bond_slave_1: entered allmulticast mode [ 796.504971][T28178] team0: entered promiscuous mode [ 796.528482][T28178] team_slave_0: entered promiscuous mode [ 796.557798][T28178] team_slave_1: entered promiscuous mode [ 796.566873][T28178] bond0: entered promiscuous mode [ 796.572125][T28178] bond_slave_0: entered promiscuous mode [ 796.590468][T28178] bond_slave_1: entered promiscuous mode [ 796.604735][T28178] bridge0: port 3(team0) entered blocking state [ 796.611273][T28178] bridge0: port 3(team0) entered forwarding state [ 796.717496][T28194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.005297][ T28] audit: type=1326 audit(2000002890.936:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28209 comm="syz.0.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 797.035364][T28213] loop1: detected capacity change from 0 to 736 [ 797.036196][ T28] audit: type=1326 audit(2000002890.955:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28209 comm="syz.0.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 797.063997][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.154509][ T28] audit: type=1326 audit(2000002890.955:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28209 comm="syz.0.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 797.250116][ T28] audit: type=1326 audit(2000002890.955:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28209 comm="syz.0.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 797.836390][T28250] xt_cgroup: xt_cgroup: no path or classid specified [ 798.043364][T28262] x_tables: ip_tables: ah match: only valid for protocol 51 [ 798.503469][T28289] loop4: detected capacity change from 0 to 64 [ 798.553066][T28289] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 799.218432][T28328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7034'. [ 799.395633][T28338] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 799.622499][T28346] loop0: detected capacity change from 0 to 256 [ 800.684078][T28395] loop0: detected capacity change from 0 to 4096 [ 800.729608][T28395] ntfs3: loop0: It is recommened to use chkdsk. [ 800.761981][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 800.778637][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 800.797938][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 800.853620][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 800.861642][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 800.921091][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 800.940121][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 800.948063][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 800.995196][T28395] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 801.425896][T28441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7069'. [ 801.500125][T28445] ipt_rpfilter: unknown options [ 801.808367][T28463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7076'. [ 801.944064][T28470] C: renamed from lo (while UP) [ 801.969410][T28470] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 802.021545][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7081'. [ 802.039273][T28475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7081'. [ 802.130997][T28479] loop1: detected capacity change from 0 to 64 [ 802.219625][T28485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7083'. [ 802.243812][T28487] binder: 28486:28487 ioctl c018620c 200000000380 returned -1 [ 802.313960][T28485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7083'. [ 803.152820][T28537] netlink: 'syz.1.7099': attribute type 10 has an invalid length. [ 803.184559][T28537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7099'. [ 803.233933][T28537] geneve0: entered promiscuous mode [ 803.277149][T28537] geneve0: entered allmulticast mode [ 803.313621][T28537] team0: Port device geneve0 added [ 803.985679][T28580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7113'. [ 804.133885][T28587] xt_ecn: cannot match TCP bits for non-tcp packets [ 804.886959][T28621] tmpfs: Bad value for 'mpol' [ 805.002276][T28626] usb usb1: usbfs: process 28626 (syz.2.7129) did not claim interface 0 before use [ 805.111619][T28630] loop1: detected capacity change from 0 to 1024 [ 805.146228][T28633] dlm: no local IP address has been set [ 805.162658][T28633] dlm: cannot start dlm midcomms -107 [ 805.196918][T28635] misc userio: The device must be registered before sending interrupts [ 805.377869][ T11] hfsplus: b-tree write err: -5, ino 4 [ 805.622428][T28653] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7135'. [ 805.631570][T28653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7135'. [ 806.287788][T28685] CIFS mount error: No usable UNC path provided in device string! [ 806.287788][T28685] [ 806.316086][T28685] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 806.335218][T28690] loop1: detected capacity change from 0 to 256 [ 806.341895][T28688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7149'. [ 806.365783][T28688] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7149'. [ 806.379060][T28690] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 806.398442][T28688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7149'. [ 806.421597][T28688] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7149'. [ 806.474675][T28688] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7149'. [ 806.514256][ T28] audit: type=1326 audit(2000002899.831:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.4.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 806.573384][ T28] audit: type=1326 audit(2000002899.831:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.4.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 806.625084][ T28] audit: type=1326 audit(2000002899.849:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.4.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 806.666504][ T28] audit: type=1326 audit(2000002899.849:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.4.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 806.783122][ T28] audit: type=1326 audit(2000002899.849:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.4.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1178ebe9 code=0x7ffc0000 [ 807.248489][T28729] loop0: detected capacity change from 0 to 764 [ 807.253409][T28731] netlink: 'syz.2.7162': attribute type 2 has an invalid length. [ 807.273691][T28731] netlink: 'syz.2.7162': attribute type 1 has an invalid length. [ 807.287657][T28729] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 807.329880][T28734] binder: 28732:28734 ioctl 40046210 0 returned -14 [ 807.731406][T28755] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7168'. [ 808.502469][T28752] loop4: detected capacity change from 0 to 32768 [ 808.641057][T28752] read_mapping_page failed! [ 808.647128][T28752] ialloc: diAlloc returned -5! [ 808.713372][T28798] netlink: 'syz.2.7181': attribute type 29 has an invalid length. [ 808.734574][T28798] netlink: 'syz.2.7181': attribute type 29 has an invalid length. [ 809.467422][ T28] audit: type=1326 audit(2000002902.589:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28834 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 809.546549][ T28] audit: type=1326 audit(2000002902.589:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28834 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 809.621090][ T28] audit: type=1326 audit(2000002902.618:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28834 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 809.663467][ T28] audit: type=1326 audit(2000002902.618:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28834 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 809.716213][ T28] audit: type=1326 audit(2000002902.618:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28834 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7316b8ebe9 code=0x7ffc0000 [ 809.739570][T28849] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7198'. [ 810.099575][T28868] loop1: detected capacity change from 0 to 512 [ 810.152169][T28868] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 810.764142][T28907] loop4: detected capacity change from 0 to 512 [ 810.835024][T28907] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 810.850945][T28907] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 810.870068][T28907] System zones: 0-1, 15-15, 18-18, 34-34 [ 810.879375][T28907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 810.925511][T28919] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7219'. [ 810.937071][T28907] EXT4-fs warning (device loop4): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 810.951803][T28907] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 810.975118][T28907] EXT4-fs (loop4): 1 truncate cleaned up [ 810.996470][T28907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 811.026849][T28907] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 811.132670][T21965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.292475][T28937] cgroup: none used incorrectly [ 811.385722][T28941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7222'. [ 811.407118][T28941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 811.414404][T28941] IPv6: NLM_F_CREATE should be set when creating new route [ 811.421794][T28941] IPv6: NLM_F_CREATE should be set when creating new route [ 811.997366][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 811.997411][ T28] audit: type=1326 audit(2000002904.956:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28974 comm="syz.2.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 812.091434][ T28] audit: type=1326 audit(2000002904.984:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28974 comm="syz.2.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 812.166166][ T28] audit: type=1326 audit(2000002904.993:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28974 comm="syz.2.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 812.240730][ T28] audit: type=1326 audit(2000002904.993:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28974 comm="syz.2.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 812.543183][T28997] sp0: Synchronizing with TNC [ 813.150034][T29039] netlink: 272 bytes leftover after parsing attributes in process `syz.1.7251'. [ 813.205976][T29038] loop4: detected capacity change from 0 to 4096 [ 813.230728][T29038] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 813.353373][ T5850] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 813.411713][T29038] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 813.421806][T29038] ntfs3: loop4: mft corrupted [ 813.426813][T29038] ntfs3: loop4: Failed to load $Extend (-22). [ 813.444140][T29038] ntfs3: loop4: Failed to initialize $Extend. [ 813.580755][ T5850] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 813.620488][ T5850] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 61 [ 813.659587][ T5850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.680890][ T5850] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 813.702670][ T5850] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 813.726790][ T5850] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 813.754668][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.806967][ T5850] usb 1-1: config 0 descriptor?? [ 813.832427][ T5850] usb-storage 1-1:0.0: USB Mass Storage device detected [ 813.851989][ T5850] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 814.062406][ T5850] usb 1-1: USB disconnect, device number 79 [ 814.917835][T29115] loop4: detected capacity change from 0 to 1024 [ 814.957226][T29115] EXT4-fs: Ignoring removed nobh option [ 814.979766][T29115] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 815.062619][T29115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.325143][T21965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.524387][T29153] Timeout policy `syz0' can only be used by L3 protocol number 27 [ 815.726692][ T28] audit: type=1326 audit(2000002908.435:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.2.7285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 815.807903][ T28] audit: type=1326 audit(2000002908.435:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.2.7285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 815.921651][ T28] audit: type=1326 audit(2000002908.444:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.2.7285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 815.994163][ T28] audit: type=1326 audit(2000002908.444:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.2.7285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 816.079566][ T28] audit: type=1326 audit(2000002908.444:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.2.7285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251fd8ebe9 code=0x7ffc0000 [ 816.101970][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.734594][T29156] loop1: detected capacity change from 0 to 32768 [ 816.801562][T29156] JBD2: Ignoring recovery information on journal [ 816.866486][T29156] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 816.873459][T29208] loop4: detected capacity change from 0 to 2048 [ 816.928909][T29208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.968352][ T787] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 817.155832][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 817.184634][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 817.215706][ T787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 817.255724][ T787] usb 1-1: config 0 has no interface number 0 [ 817.275536][ T787] usb 1-1: config 0 interface 1 has no altsetting 0 [ 817.297510][ T787] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 817.309150][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.317414][ T787] usb 1-1: Product: syz [ 817.325517][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 817.357346][ T787] usb 1-1: Manufacturer: syz [ 817.362026][ T787] usb 1-1: SerialNumber: syz [ 817.393657][T29230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7301'. [ 817.426105][ T787] usb 1-1: config 0 descriptor?? [ 817.703076][ T787] i2c-cp2615: probe of 1-1:0.1 failed with error -22 [ 817.746885][ T28] audit: type=1326 audit(2000002910.324:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 817.799175][ T28] audit: type=1326 audit(2000002910.352:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 817.865301][ T28] audit: type=1326 audit(2000002910.352:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 817.932339][ T28] audit: type=1326 audit(2000002910.352:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 817.954719][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.977627][ T787] usb 1-1: USB disconnect, device number 80 [ 818.014123][ T28] audit: type=1326 audit(2000002910.352:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 818.055719][ T28] audit: type=1326 audit(2000002910.352:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 818.078138][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.132692][ T28] audit: type=1326 audit(2000002910.352:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 818.186041][ T28] audit: type=1326 audit(2000002910.352:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 818.241731][ T28] audit: type=1326 audit(2000002910.352:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fab5fd8ebe9 code=0x7ffc0000 [ 818.587411][T29253] loop4: detected capacity change from 0 to 32768 [ 818.605904][T29253] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.7307 (29253) [ 818.663718][T29253] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 818.701494][T29253] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 818.721820][T29253] BTRFS info (device loop4): force zlib compression, level 3 [ 818.729294][T29253] BTRFS info (device loop4): force clearing of disk cache [ 818.764661][T29253] BTRFS info (device loop4): setting nodatasum [ 818.773846][T29253] BTRFS info (device loop4): doing ref verification [ 818.800455][T29253] BTRFS info (device loop4): allowing degraded mounts [ 818.824786][T29253] BTRFS info (device loop4): using free space tree [ 818.997555][T29253] BTRFS info (device loop4): enabling ssd optimizations [ 819.046197][T29319] loop0: detected capacity change from 0 to 256 [ 819.052878][T29253] BTRFS info (device loop4): auto enabling async discard [ 819.112114][T29253] BTRFS info (device loop4): rebuilding free space tree [ 819.431870][T21965] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 819.485980][T29335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7324'. [ 819.583287][T29338] netlink: 'syz.2.7327': attribute type 2 has an invalid length. [ 819.595164][T29338] netlink: 'syz.2.7327': attribute type 1 has an invalid length. [ 819.824168][T29350] SET target dimension over the limit! [ 820.572503][ T29] INFO: task syz-executor:5790 blocked for more than 143 seconds. [ 820.583745][ T29] Not tainted 6.6.102-syzkaller #0 [ 820.606356][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.631388][ T29] task:syz-executor state:D stack:21352 pid:5790 ppid:1 flags:0x00004004 [ 820.683748][ T29] Call Trace: [ 820.699331][ T29] [ 820.710766][ T29] __schedule+0x14d2/0x44d0 [ 820.733188][ T29] ? asan.module_dtor+0x20/0x20 [ 820.752571][ T29] ? mark_lock+0x94/0x320 [ 820.779045][ T29] ? lock_chain_count+0x20/0x20 [ 820.794935][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 820.811822][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 820.830089][ T29] schedule+0xbd/0x170 [ 820.840412][ T29] io_schedule+0x80/0xd0 [ 820.859136][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 820.874114][ T29] ? folio_wait_bit+0x30/0x30 [ 820.881413][ T29] ? filemap_get_entry+0x35c/0x3c0 [ 820.893905][ T29] ? _compound_head+0x120/0x120 [ 820.907032][ T29] ? find_lock_entries+0xc38/0xfe0 [ 820.925691][ T29] __filemap_get_folio+0xbc/0xbc0 [ 820.944659][ T29] truncate_inode_pages_range+0x40a/0xf00 [ 820.950493][ T29] ? mapping_evict_folio+0x510/0x510 [ 820.976730][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 820.981893][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.987162][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 821.001655][ T29] evict+0x499/0x870 [ 821.008921][ T29] ? proc_nr_inodes+0x230/0x230 [ 821.013843][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 821.029908][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 821.040901][ T29] evict_inodes+0x5fe/0x690 [ 821.045495][ T29] ? clear_inode+0x150/0x150 [ 821.061026][ T29] generic_shutdown_super+0x97/0x2b0 [ 821.072942][ T29] kill_block_super+0x44/0x90 [ 821.083719][ T29] deactivate_locked_super+0x97/0x100 [ 821.094325][ T29] cleanup_mnt+0x429/0x4c0 [ 821.098898][ T29] task_work_run+0x1ce/0x250 [ 821.114382][ T29] ? task_work_cancel+0x240/0x240 [ 821.119687][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 821.125210][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 821.141633][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 821.147305][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 821.169279][ T29] do_syscall_64+0x61/0xb0 [ 821.173785][ T29] ? clear_bhb_loop+0x40/0x90 [ 821.189412][ T29] ? clear_bhb_loop+0x40/0x90 [ 821.194269][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.200227][ T29] RIP: 0033:0x7f4dafd8ff17 [ 821.215642][ T29] RSP: 002b:00007fffc16bc498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 821.235501][ T29] RAX: 0000000000000000 RBX: 00007f4dafe11c05 RCX: 00007f4dafd8ff17 [ 821.243561][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc16bc550 [ 821.283646][ T29] RBP: 00007fffc16bc550 R08: 0000000000000000 R09: 0000000000000000 [ 821.308387][ T29] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc16bd5e0 [ 821.316567][ T29] R13: 00007f4dafe11c05 R14: 000000000009af60 R15: 00007fffc16bd620 [ 821.340331][ T29] [ 821.344948][ T29] [ 821.344948][ T29] Showing all locks held in the system: [ 821.360726][ T29] 1 lock held by khungtaskd/29: [ 821.365837][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 821.386781][T29379] loop4: detected capacity change from 0 to 32768 [ 821.396237][ T29] 2 locks held by kworker/u4:11/3539: [ 821.408970][ T29] 2 locks held by getty/5555: [ 821.414322][ T29] #0: ffff8880320620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 821.424731][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 821.435389][ T29] 1 lock held by syz-executor/5790: [ 821.442173][ T29] #0: ffff888078ff40e0 (&type->s_umount_key#70){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 821.452880][ T29] 2 locks held by kworker/u4:1/12429: [ 821.458693][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 821.468808][T29379] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 821.471218][ T29] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x20ee/0x44d0 [ 821.488189][ T29] 1 lock held by udevd/21977: [ 821.493467][ T29] 1 lock held by syz.4.7338/29379: [ 821.498882][ T29] [ 821.501934][ T29] ============================================= [ 821.501934][ T29] [ 821.510623][ T29] NMI backtrace for cpu 0 [ 821.514987][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 821.522896][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.532973][ T29] Call Trace: [ 821.536270][ T29] [ 821.539245][ T29] dump_stack_lvl+0x16c/0x230 [ 821.543972][ T29] ? show_regs_print_info+0x20/0x20 [ 821.549204][ T29] ? load_image+0x3b0/0x3b0 [ 821.553790][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 821.558752][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 821.564931][ T29] ? _printk+0xd0/0x110 [ 821.569108][ T29] ? load_image+0x3b0/0x3b0 [ 821.573642][ T29] ? load_image+0x3b0/0x3b0 [ 821.578262][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 821.584464][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 821.590507][ T29] watchdog+0xf41/0xf80 [ 821.594683][ T29] ? watchdog+0x1e1/0xf80 [ 821.599036][ T29] kthread+0x2fa/0x390 [ 821.603120][ T29] ? hungtask_pm_notify+0x90/0x90 [ 821.608166][ T29] ? kthread_blkcg+0xd0/0xd0 [ 821.612779][ T29] ret_from_fork+0x48/0x80 [ 821.617211][ T29] ? kthread_blkcg+0xd0/0xd0 [ 821.621813][ T29] ret_from_fork_asm+0x11/0x20 [ 821.626716][ T29] [ 821.630678][ T29] Sending NMI from CPU 0 to CPUs 1: [ 821.635953][ C1] NMI backtrace for cpu 1 [ 821.635970][ C1] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.102-syzkaller #0 [ 821.635989][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.636000][ C1] Workqueue: bat_events batadv_nc_worker [ 821.636027][ C1] RIP: 0010:check_preemption_disabled+0x56/0x110 [ 821.636058][ C1] Code: 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 cc 65 4c 8b 3d 36 5c 96 75 41 f6 [ 821.636073][ C1] RSP: 0018:ffffc90000b2fa00 EFLAGS: 00000046 [ 821.636087][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000000 [ 821.636098][ C1] RDX: 0000000000000000 RSI: ffffffff8aaac6a0 RDI: ffffffff8afc66c0 [ 821.636111][ C1] RBP: ffffc90000b2fb48 R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 821.636124][ C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: 1ffff92000165f54 [ 821.636137][ C1] R13: ffffffff8cd2fbe0 R14: 0000000000000246 R15: dffffc0000000000 [ 821.636149][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 821.636164][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.636175][ C1] CR2: 00007f3038426000 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 821.636191][ C1] Call Trace: [ 821.636197][ C1] [ 821.636207][ C1] lock_acquire+0x15d/0x410 [ 821.636230][ C1] ? batadv_nc_worker+0xd2/0x610 [ 821.636251][ C1] ? read_lock_is_recursive+0x20/0x20 [ 821.636270][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 821.636293][ C1] ? batadv_nc_worker+0xd2/0x610 [ 821.636314][ C1] batadv_nc_worker+0xef/0x610 [ 821.636334][ C1] ? batadv_nc_worker+0xd2/0x610 [ 821.636363][ C1] ? process_scheduled_works+0x957/0x15b0 [ 821.636384][ C1] process_scheduled_works+0xa45/0x15b0 [ 821.636420][ C1] ? assign_work+0x400/0x400 [ 821.636443][ C1] ? assign_work+0x39e/0x400 [ 821.636465][ C1] worker_thread+0xa55/0xfc0 [ 821.636500][ C1] kthread+0x2fa/0x390 [ 821.636514][ C1] ? pr_cont_work+0x560/0x560 [ 821.636534][ C1] ? kthread_blkcg+0xd0/0xd0 [ 821.636549][ C1] ret_from_fork+0x48/0x80 [ 821.636574][ C1] ? kthread_blkcg+0xd0/0xd0 [ 821.636590][ C1] ret_from_fork_asm+0x11/0x20 [ 821.636625][ C1] [ 821.702046][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 821.702066][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 821.702086][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.702100][ T29] Call Trace: [ 821.702108][ T29] [ 821.702117][ T29] dump_stack_lvl+0x16c/0x230 [ 821.702154][ T29] ? show_regs_print_info+0x20/0x20 [ 821.702182][ T29] ? load_image+0x3b0/0x3b0 [ 821.702232][ T29] panic+0x2c0/0x710 [ 821.702264][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 821.702298][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 821.702330][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 821.702360][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 821.702397][ T29] watchdog+0xf80/0xf80 [ 821.702429][ T29] ? watchdog+0x1e1/0xf80 [ 821.702466][ T29] kthread+0x2fa/0x390 [ 821.702487][ T29] ? hungtask_pm_notify+0x90/0x90 [ 821.702516][ T29] ? kthread_blkcg+0xd0/0xd0 [ 821.702559][ T29] ret_from_fork+0x48/0x80 [ 821.702585][ T29] ? kthread_blkcg+0xd0/0xd0 [ 821.702606][ T29] ret_from_fork_asm+0x11/0x20 [ 821.702651][ T29] [ 821.708164][ T29] Kernel Offset: disabled [ 821.976134][ T29] Rebooting in 86400 seconds..