last executing test programs: 5m17.974718186s ago: executing program 4 (id=6992): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) 5m17.712069022s ago: executing program 4 (id=6996): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') readv(r0, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) 5m17.423801121s ago: executing program 4 (id=7002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x4800) 5m17.281801171s ago: executing program 4 (id=7006): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 5m16.936896921s ago: executing program 4 (id=7012): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x1, 0x6, 0xf, 'syz1\x00', 0x8}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x4, 0x2, 0xbd, 0x8, 0x102d, 0x8, 0x1, 0x4, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x5, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x100000001, 0x2, 0x1, 0x4, 0x3, 0x3, 0x3, 0xfffffffffffffffe, 0x0, 0x6, 0x9, 0x4, 0xaa, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0x9, 0x88b, 0x6, 0x6, 0xffffffffffffffff, 0x400, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x4, 0x82d, 0x9, 0x6, 0x0, 0x9, 0xfffffffffffffffa, 0x3ff, 0x6, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x6, 0x42843379, 0x1, 0x7, 0x200, 0x77d, 0xb3, 0x5, 0xe, 0xad, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x93, 0x8, 0x80, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x10000, 0x7fff, 0xfffffffffffffff7, 0x6, 0x46b, 0x8, 0x5, 0x6, 0x4, 0x0, 0x7f, 0xd1]}) 5m16.369264354s ago: executing program 4 (id=7021): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) 5m15.900409012s ago: executing program 32 (id=7021): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) 15.316210708s ago: executing program 6 (id=11669): r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x40181) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) 15.05875588s ago: executing program 6 (id=11673): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000100"}) 14.764024895s ago: executing program 6 (id=11678): r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0) 14.52855063s ago: executing program 6 (id=11682): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {}, {@nobarrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x10, 0x0) 14.0998267s ago: executing program 6 (id=11688): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x240, 0x240, 0x240, 0x240, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x0, 0xfd}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xff], 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x2b}, 0x0, 0x110, 0x148, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv6=@loopback, @ipv6=@private0, @ipv6=@private0}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfc}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [0x0, 0x0, 0xffffff00], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}, {}, 0x5c, 0x0, 0x0, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 13.649491003s ago: executing program 6 (id=11692): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01a, 0x1}) 12.784152707s ago: executing program 33 (id=11692): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01a, 0x1}) 2.984132676s ago: executing program 2 (id=11791): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000100)='./file1\x00', 0x401, &(0x7f0000000600)={[{}, {@umask={'umask', 0x3d, 0x8143}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@dir_umask={'dir_umask', 0x3d, 0x9}}, {@codepage={'codepage', 0x3d, 'ascii'}}, {@file_umask={'file_umask', 0x3d, 0x50}}, {}, {@uid}]}, 0x7, 0x318, &(0x7f0000000800)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2001, 0x87) 2.515921771s ago: executing program 2 (id=11797): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r0, &(0x7f000000e2c0)=[{0x0}, {&(0x7f000000bf80)=""/147, 0x93}], 0x2, 0x0, 0x0) 2.218489944s ago: executing program 2 (id=11800): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) 2.125357925s ago: executing program 5 (id=11802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc1}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) 1.920145388s ago: executing program 2 (id=11805): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd2(0x97, 0x80000) 1.752096325s ago: executing program 3 (id=11807): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x1f}}) 1.64499008s ago: executing program 2 (id=11809): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) mmap$dsp(&(0x7f00005ea000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 1.565429572s ago: executing program 3 (id=11810): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x6, 0x4, 0x80, "d7905ba4d4c603ea5052cb50539e552680d0120dd76a82c36d56d79000", 0x41414270}) 1.525757205s ago: executing program 1 (id=11811): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 1.477422985s ago: executing program 0 (id=11812): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x119) 1.372190934s ago: executing program 2 (id=11813): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905830552"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 1.313227784s ago: executing program 5 (id=11814): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 1.304476542s ago: executing program 3 (id=11815): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000001080)={0x13, &(0x7f0000001000)=[{0x28, '\x00', @st={0x4, [{0x2, @svalue=0xe4b}, {0x0, @uvalue=0x1ff}, {0x2, @svalue=0x2a800}, {0x2, @svalue=0xde}]}, 0x8}]}) 1.254093243s ago: executing program 1 (id=11816): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xc, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 1.160884118s ago: executing program 0 (id=11817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x110}, 0x4004044) 1.067662357s ago: executing program 5 (id=11818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) 1.019908414s ago: executing program 3 (id=11819): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 1.005912519s ago: executing program 1 (id=11820): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x140d, 0x1, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x8840) 869.807033ms ago: executing program 0 (id=11821): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, 0x0) 742.643786ms ago: executing program 5 (id=11822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@allocspi={0x10c, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x4d5, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x2005}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x200, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x10c}}, 0x4808) 675.244438ms ago: executing program 1 (id=11823): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$unix(r0, &(0x7f0000007240)={&(0x7f0000006e40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000007180)=[@cred={{0x1c}}], 0x20, 0x40005}, 0x4000000) 623.964671ms ago: executing program 0 (id=11824): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x300000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000064000/0x1000)=nil, &(0x7f00002db000/0x2000)=nil], 0x0, 0x0, 0x0) 506.716403ms ago: executing program 3 (id=11825): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000280)) 435.352142ms ago: executing program 5 (id=11826): r0 = getpid() setpriority(0x2, r0, 0x7fffffff) 380.997294ms ago: executing program 1 (id=11827): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa, 0x0, 0x6, 0x400, 0x7, 0x8200}) 344.52477ms ago: executing program 0 (id=11828): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) 111.51999ms ago: executing program 5 (id=11829): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000790057ed0000000018000000190000000000000000000000950020000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) 111.367095ms ago: executing program 3 (id=11830): r0 = socket(0xa, 0x3, 0xfc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) 62.84588ms ago: executing program 1 (id=11831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="680200001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff000000000000000000000000000001000004d46c000000fc02000000000000000000000000000100000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcfffffffffffffb0000000000000000ffffffffffffffff00000000000000001f00000000000020fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f0102"], 0x268}}, 0x844) 0s ago: executing program 0 (id=11832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): .5.10254: checksumming directory block 0 [ 902.830794][ T6149] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 902.901038][T29186] loop6: detected capacity change from 0 to 64 [ 903.873725][T29225] autofs4:pid:29225:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 904.056400][T29232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10282'. [ 904.329305][T29245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10289'. [ 904.350519][T29243] loop6: detected capacity change from 0 to 2048 [ 904.438694][T29243] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 904.457296][T29247] netlink: 'syz.2.10290': attribute type 15 has an invalid length. [ 904.475819][T29250] loop1: detected capacity change from 0 to 256 [ 904.515888][T29243] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 904.599722][T29243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.604796][T29250] FAT-fs (loop1): Directory bread(block 64) failed [ 904.654297][T29250] FAT-fs (loop1): Directory bread(block 65) failed [ 904.660955][T29250] FAT-fs (loop1): Directory bread(block 66) failed [ 904.712895][T29250] FAT-fs (loop1): Directory bread(block 67) failed [ 904.745616][T29250] FAT-fs (loop1): Directory bread(block 68) failed [ 904.797430][T29250] FAT-fs (loop1): Directory bread(block 69) failed [ 904.815601][T29250] FAT-fs (loop1): Directory bread(block 70) failed [ 904.822267][T29250] FAT-fs (loop1): Directory bread(block 71) failed [ 904.878397][T29250] FAT-fs (loop1): Directory bread(block 72) failed [ 904.910650][T29250] FAT-fs (loop1): Directory bread(block 73) failed [ 904.977279][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10299'. [ 905.140775][T29197] loop0: detected capacity change from 0 to 32768 [ 905.484546][T29275] loop3: detected capacity change from 0 to 1024 [ 905.676878][ T77] hfsplus: b-tree write err: -5, ino 25 [ 905.711346][ T77] hfsplus: b-tree write err: -5, ino 4 [ 905.727430][ T77] hfsplus: b-tree write err: -5, ino 2 [ 906.296285][T29303] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 906.321937][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 906.349247][T29303] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 906.503521][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 906.530454][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.558170][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 906.597081][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e [ 906.615692][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.653475][ T10] usb 3-1: Product: syz [ 906.673095][ T10] usb 3-1: Manufacturer: syz [ 906.687999][ T10] usb 3-1: SerialNumber: syz [ 906.740258][ T10] usb 3-1: config 0 descriptor?? [ 906.860023][T29317] loop3: detected capacity change from 0 to 256 [ 906.969339][ T10] usb 3-1: USB disconnect, device number 99 [ 907.139447][ T6397] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 907.169113][T29327] loop0: detected capacity change from 0 to 256 [ 907.264709][T29327] vfat: Bad value for 'utf8' [ 907.293277][ T6397] usb 2-1: Using ep0 maxpacket: 16 [ 907.312685][ T6397] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 907.351591][ T6397] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 907.405631][ T6397] usb 2-1: config 0 interface 0 has no altsetting 0 [ 907.435613][ T6397] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 907.454016][ T6397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.482856][ T6397] usb 2-1: Product: syz [ 907.487161][ T6397] usb 2-1: Manufacturer: syz [ 907.503718][ T6397] usb 2-1: SerialNumber: syz [ 907.561764][ T6397] usb 2-1: config 0 descriptor?? [ 907.597981][ T6397] usb 2-1: cannot find UAC_HEADER [ 907.805510][ T6397] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 907.890539][ T6397] usb 2-1: USB disconnect, device number 120 [ 908.034840][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.066991][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 908.225519][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 908.237535][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 179, changing to 7 [ 908.266742][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 908.324011][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 908.347783][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.387280][ T10] usb 1-1: Product: syz [ 908.391567][ T10] usb 1-1: Manufacturer: syz [ 908.393660][T29369] netlink: 'syz.6.10350': attribute type 1 has an invalid length. [ 908.400634][ T10] usb 1-1: SerialNumber: syz [ 908.674275][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 908.724589][T29378] netlink: 'syz.6.10353': attribute type 1 has an invalid length. [ 908.841116][T29380] ubi0: attaching mtd0 [ 908.869623][T29380] ubi0 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 908.883891][ T10] usb 1-1: USB disconnect, device number 101 [ 908.985334][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 909.154171][T29388] netlink: 'syz.3.10359': attribute type 1 has an invalid length. [ 909.196740][T29388] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10359'. [ 909.233270][T29388] netlink: 658 bytes leftover after parsing attributes in process `syz.3.10359'. [ 909.278151][T29388] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10359'. [ 909.304416][T29390] loop6: detected capacity change from 0 to 2048 [ 909.358647][T29390] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 909.454023][T29395] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 909.749572][ T10] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 909.828612][T29409] loop6: detected capacity change from 0 to 64 [ 909.924156][ T10] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 909.930338][T29411] loop0: detected capacity change from 0 to 1024 [ 909.942081][ T10] usb 6-1: config 0 has no interface number 0 [ 909.977899][ T10] usb 6-1: config 0 interface 255 has no altsetting 0 [ 909.995051][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 910.026967][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.062903][ T10] usb 6-1: config 0 descriptor?? [ 910.081217][T29411] Process accounting resumed [ 910.117743][ T10] cp210x 6-1:0.255: cp210x converter detected [ 910.226679][ T36] hfsplus: b-tree write err: -5, ino 25 [ 910.244266][ T36] hfsplus: b-tree write err: -5, ino 4 [ 910.273079][ T36] hfsplus: b-tree write err: -5, ino 2 [ 910.289131][ T36] hfsplus: b-tree write err: -5, ino 20 [ 910.358581][T29421] netlink: 'syz.1.10376': attribute type 1 has an invalid length. [ 910.386627][T29421] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10376'. [ 910.522612][ T10] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 910.567880][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 910.599500][T29427] netlink: 'syz.3.10377': attribute type 2 has an invalid length. [ 910.621852][ T10] usb 6-1: USB disconnect, device number 107 [ 910.647618][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 910.674852][ T10] cp210x 6-1:0.255: device disconnected [ 910.921042][T29437] netlink: 'syz.3.10383': attribute type 10 has an invalid length. [ 911.301946][T29454] netlink: 'syz.0.10392': attribute type 1 has an invalid length. [ 911.351783][T29454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10392'. [ 911.651565][T29471] loop2: detected capacity change from 0 to 256 [ 911.690789][T29473] loop3: detected capacity change from 0 to 512 [ 911.707966][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 911.707990][ T30] audit: type=1800 audit(1774495536.936:2005): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10397" name="bus" dev="loop2" ino=1048792 res=0 errno=0 [ 911.835550][T29473] EXT4-fs (loop3): 1 orphan inode deleted [ 911.879184][T29473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.922566][T29473] ext4 filesystem being mounted at /1702/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.060018][T29478] loop6: detected capacity change from 0 to 4096 [ 912.174954][ T6142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.237370][T29478] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 912.337315][T29478] ntfs3(loop6): ino=1a, mi_enum_attr [ 912.353119][T29478] ntfs3(loop6): ino=1a, mi_enum_attr [ 912.371045][T29478] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 912.395484][T29499] loop5: detected capacity change from 0 to 256 [ 912.454385][T29475] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex [ 912.461432][ T30] audit: type=1800 audit(1774495537.724:2006): pid=29478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10401" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 912.762927][T29512] geneve2: entered promiscuous mode [ 912.966922][T29523] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10421'. [ 913.353452][T29541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10431'. [ 913.362844][T29538] netlink: 'syz.6.10429': attribute type 20 has an invalid length. [ 913.387898][T29541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10431'. [ 913.405656][T29538] IPv6: NLM_F_CREATE should be specified when creating new route [ 913.411858][T29541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10431'. [ 913.434265][T29541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10431'. [ 913.532967][T29546] loop2: detected capacity change from 0 to 512 [ 913.565219][T29546] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 913.600290][T29546] EXT4-fs (loop2): blocks per group (42) and clusters per group (32768) inconsistent [ 914.391177][T29585] loop0: detected capacity change from 0 to 256 [ 914.401071][T29582] loop6: detected capacity change from 0 to 1024 [ 914.491913][T29585] FAT-fs (loop0): Directory bread(block 64) failed [ 914.521042][T29585] FAT-fs (loop0): Directory bread(block 65) failed [ 914.548609][T29585] FAT-fs (loop0): Directory bread(block 66) failed [ 914.573684][T29585] FAT-fs (loop0): Directory bread(block 67) failed [ 914.592277][ T36] hfsplus: b-tree write err: -5, ino 25 [ 914.607083][T29585] FAT-fs (loop0): Directory bread(block 68) failed [ 914.607198][T16965] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 914.613662][T29585] FAT-fs (loop0): Directory bread(block 69) failed [ 914.658578][ T36] hfsplus: b-tree write err: -5, ino 4 [ 914.684183][ T36] hfsplus: b-tree write err: -5, ino 2 [ 914.702260][T29585] FAT-fs (loop0): Directory bread(block 70) failed [ 914.730696][T29585] FAT-fs (loop0): Directory bread(block 71) failed [ 914.778307][T29585] FAT-fs (loop0): Directory bread(block 72) failed [ 914.784891][T29585] FAT-fs (loop0): Directory bread(block 73) failed [ 914.801113][T29591] loop1: detected capacity change from 0 to 1024 [ 914.828711][T16965] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 914.857415][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.895360][T16965] usb 4-1: Product: syz [ 914.899639][T16965] usb 4-1: Manufacturer: syz [ 914.922851][T16965] usb 4-1: SerialNumber: syz [ 914.955260][T29595] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 914.977357][T16965] usb 4-1: config 0 descriptor?? [ 914.997897][T26211] hfsplus: b-tree write err: -5, ino 25 [ 915.009571][T16965] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 915.021759][T26211] hfsplus: b-tree write err: -5, ino 4 [ 915.035454][T26211] hfsplus: b-tree write err: -5, ino 2 [ 915.100661][ T30] audit: type=1800 audit(1774495540.496:2007): pid=29585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10451" name="file1" dev="loop0" ino=1048794 res=0 errno=0 [ 915.358150][T29607] __nla_validate_parse: 2 callbacks suppressed [ 915.358174][T29607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10464'. [ 915.396141][T16965] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 915.417934][T16965] sq905c 4-1:0.0: Reading version command failed [ 915.424387][T16965] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 915.450163][T29613] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 915.509147][T16965] usb 4-1: USB disconnect, device number 86 [ 916.132569][T29643] loop0: detected capacity change from 0 to 16 [ 916.157793][T29643] erofs (device loop0): mounted with root inode @ nid 36. [ 916.172215][T29646] overlayfs: missing 'lowerdir' [ 916.213435][T29643] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 916.232477][T29643] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 916.283711][T29643] erofs (device loop0): read error -117 @ 1 of nid 89 [ 916.320103][ T30] audit: type=1800 audit(1774495541.766:2008): pid=29643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10481" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 916.502679][T29656] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 916.597334][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10491'. [ 916.656919][T29665] netlink: 'syz.5.10490': attribute type 5 has an invalid length. [ 917.230603][T13118] Bluetooth: hci5: unexpected event for opcode 0x0404 [ 917.521576][T29698] autofs: Unknown parameter 'no9 PG!8E ' [ 917.783100][T29710] loop5: detected capacity change from 0 to 128 [ 917.847082][T29654] loop3: detected capacity change from 0 to 40427 [ 917.870232][T29654] F2FS-fs: heap/no_heap options were deprecated [ 917.909627][T29654] F2FS-fs (loop3): build fault injection rate: 19 [ 917.911549][T29710] syz.5.10514: attempt to access beyond end of device [ 917.911549][T29710] loop5: rw=8388608, sector=25674, nr_sectors = 2 limit=128 [ 917.935938][T29654] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 917.958757][T29654] F2FS-fs (loop3): invalid crc value [ 918.041661][T29710] Buffer I/O error on dev loop5, logical block 12837, async page read [ 918.042943][T29654] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 918.149764][T29710] syz.5.10514: attempt to access beyond end of device [ 918.149764][T29710] loop5: rw=8388608, sector=25674, nr_sectors = 2 limit=128 [ 918.249065][T29728] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10519'. [ 918.255652][T29710] Buffer I/O error on dev loop5, logical block 12837, async page read [ 918.403555][T29654] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 918.553904][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10524'. [ 918.575186][T29654] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 918.597357][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 918.611599][T29654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 918.853332][ T6142] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x120/0x3f0 [ 919.463481][T29769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10541'. [ 919.653578][T29776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10545'. [ 919.903683][T29746] loop6: detected capacity change from 0 to 32768 [ 920.074410][T16965] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 920.278787][T16965] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 920.310822][T16965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.360886][T16965] usb 6-1: config 0 descriptor?? [ 920.381858][T16965] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 920.433326][T29800] loop1: detected capacity change from 0 to 8 [ 920.522744][T29800] SQUASHFS error: Unable to read inode 0xa7 [ 920.763278][T16965] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 920.783696][T29772] loop2: detected capacity change from 0 to 32768 [ 920.790458][T16965] pac7311 6-1:0.0: probe with driver pac7311 failed with error -71 [ 920.814797][T16965] usb 6-1: USB disconnect, device number 108 [ 920.874300][T29772] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 921.019335][T29826] loop3: detected capacity change from 0 to 8 [ 921.027049][T29826] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 921.061070][T29826] cramfs: Error -3 while decompressing! [ 921.070028][T29826] cramfs: ffffffff9a3afd08(26)->ffff88806a701000(4096) [ 921.077509][T29826] cramfs: Error -3 while decompressing! [ 921.083280][T29826] cramfs: ffffffff9a3afd22(26)->ffff88804cb8e000(4096) [ 921.090371][T29826] cramfs: Error -3 while decompressing! [ 921.096434][T29826] cramfs: ffffffff9a3afd3c(16)->ffff888069638000(4096) [ 921.103605][T29826] cramfs: Error -3 while decompressing! [ 921.109266][T29826] cramfs: ffffffff9a3afd08(26)->ffff88806a701000(4096) [ 921.137249][ T6091] udevd[6091]: incorrect cramfs checksum on /dev/loop3 [ 921.270776][T29772] XFS (loop2): Ending clean mount [ 921.512851][ T6138] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 921.626111][T29844] loop6: detected capacity change from 0 to 64 [ 921.706786][T29844] syz.6.10576: attempt to access beyond end of device [ 921.706786][T29844] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 922.327603][T29865] __vm_enough_memory: pid: 29865, comm: syz.0.10585, bytes: 4503599627366400 not enough memory for the allocation [ 922.903870][ T30] audit: type=1326 audit(1774495548.695:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 922.988854][ T30] audit: type=1326 audit(1774495548.695:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.093474][ T30] audit: type=1326 audit(1774495548.695:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.120012][ T30] audit: type=1326 audit(1774495548.695:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.133453][T29902] loop0: detected capacity change from 0 to 8 [ 923.171090][T29893] bond1 (unregistering): Released all slaves [ 923.186223][T29902] SQUASHFS error: zlib decompression failed, data probably corrupt [ 923.245699][T29902] SQUASHFS error: Failed to read block 0x9b: -5 [ 923.265384][ T30] audit: type=1326 audit(1774495548.706:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.271406][T29905] loop2: detected capacity change from 0 to 2048 [ 923.318010][T29902] SQUASHFS error: Unable to read metadata cache entry [99] [ 923.320877][ T30] audit: type=1326 audit(1774495548.706:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.335555][T29902] SQUASHFS error: Unable to read inode 0x104 [ 923.408383][T29905] udf: Unknown parameter '7WIRfJ< [ 923.408383][T29905] ƪjloCfV G{C\豳X' [ 923.437293][ T30] audit: type=1326 audit(1774495548.706:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.476286][T29913] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.10607'. [ 923.558903][ T30] audit: type=1326 audit(1774495548.706:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.666729][ T30] audit: type=1326 audit(1774495548.706:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.748304][T29922] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10611'. [ 923.772201][ T30] audit: type=1326 audit(1774495548.706:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29894 comm="syz.2.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6159b9c799 code=0x7ffc0000 [ 923.860179][ T10] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 924.049837][ T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 924.053235][T29934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10616'. [ 924.067612][T29934] gre0: Master is either lo or non-ether device [ 924.085126][ T10] usb 1-1: config 0 has no interface number 0 [ 924.091298][ T10] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 924.154697][ T10] usb 1-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x6D, changing to 0xD [ 924.195274][T29936] netlink: 'syz.5.10618': attribute type 9 has an invalid length. [ 924.203842][ T10] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0xD has invalid maxpacket 14309, setting to 64 [ 924.233459][T29936] netlink: 'syz.5.10618': attribute type 7 has an invalid length. [ 924.256442][ T10] usb 1-1: config 0 interface 2 has no altsetting 0 [ 924.263945][T29936] netlink: 'syz.5.10618': attribute type 8 has an invalid length. [ 924.284931][ T10] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 924.299402][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.323496][ T10] usb 1-1: Product: syz [ 924.327699][ T10] usb 1-1: Manufacturer: syz [ 924.335137][ T10] usb 1-1: SerialNumber: syz [ 924.381277][ T10] usb 1-1: config 0 descriptor?? [ 924.396191][T29902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.409000][T29902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.509847][T29949] loop6: detected capacity change from 0 to 2048 [ 924.572228][ T6090] loop6: p1 p3 p4 [ 924.572228][ T6090] p1: [ 924.601179][ T6090] loop6: p4 size 589824 extends beyond EOD, truncated [ 924.626483][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 924.678414][T29949] loop6: p1 p3 p4 [ 924.678414][T29949] p1: [ 924.689629][T29957] loop1: detected capacity change from 0 to 512 [ 924.698266][ T10] usb 1-1: invalid MIDI in EP 0 [ 924.731292][T29949] loop6: p4 size 589824 extends beyond EOD, truncated [ 924.731810][T29957] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 924.761379][T29957] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 924.831800][T29957] System zones: 0-1, 15-15, 18-18, 34-34 [ 924.845878][T29957] EXT4-fs (loop1): orphan cleanup on readonly fs [ 924.872987][T29957] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 924.921753][T29957] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 924.931646][T29957] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10628: bg 0: block 40: padding at end of block bitmap is not set [ 924.954036][ T6090] udevd[6090]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 924.954220][ T6095] udevd[6095]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 924.968173][ T7763] udevd[7763]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 924.990663][ T6098] udevd[6098]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 925.010993][T29957] loop1: lost filesystem error report for type 5 error -117 [ 925.018265][T29957] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 925.034338][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 925.034369][ C0] EXT4-fs (loop1): initial error at time 1774495550: ext4_validate_block_bitmap:441 [ 925.034401][ C0] EXT4-fs (loop1): last error at time 1774495550: ext4_validate_block_bitmap:441 [ 925.060786][T29965] sctp: [Deprecated]: syz.5.10631 (pid 29965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 925.060786][T29965] Use struct sctp_sack_info instead [ 925.160872][ T10] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 925.200212][ T10] usb 1-1: USB disconnect, device number 102 [ 925.206472][T29957] loop1: lost filesystem error report for type 5 error -117 [ 925.208266][T29957] EXT4-fs (loop1): 1 truncate cleaned up [ 925.312366][ T7763] udevd[7763]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 925.331924][T29957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 925.352565][ T6095] udevd[6095]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 925.382104][ T6098] udevd[6098]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 925.430912][ T7763] udevd[7763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 925.448038][T29957] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.10628: bad symlink. [ 925.479129][ T6091] udevd[6091]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 925.659018][ T6134] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.678593][T29986] netlink: 'syz.0.10641': attribute type 13 has an invalid length. [ 925.735940][T29986] netlink: 'syz.0.10641': attribute type 17 has an invalid length. [ 925.747782][T29987] loop5: detected capacity change from 0 to 64 [ 925.940301][T29995] loop6: detected capacity change from 0 to 256 [ 926.094973][T29986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 926.130073][T29995] FAT-fs (loop6): Directory bread(block 64) failed [ 926.141682][T29995] FAT-fs (loop6): Directory bread(block 65) failed [ 926.151718][T29995] FAT-fs (loop6): Directory bread(block 66) failed [ 926.161570][T29995] FAT-fs (loop6): Directory bread(block 67) failed [ 926.168234][T29995] FAT-fs (loop6): Directory bread(block 68) failed [ 926.225225][T29995] FAT-fs (loop6): Directory bread(block 69) failed [ 926.243130][T29995] FAT-fs (loop6): Directory bread(block 70) failed [ 926.277151][T29995] FAT-fs (loop6): Directory bread(block 71) failed [ 926.283845][T29995] FAT-fs (loop6): Directory bread(block 72) failed [ 926.347681][T29995] FAT-fs (loop6): Directory bread(block 73) failed [ 926.725071][T30021] xt_TCPMSS: Only works on TCP SYN packets [ 926.743836][T30030] vivid-000: ================= START STATUS ================= [ 926.757710][T30029] loop6: detected capacity change from 0 to 512 [ 926.787457][T30030] vivid-000: Generate PTS: true [ 926.835659][T30029] EXT4-fs (loop6): orphan cleanup on readonly fs [ 926.846917][T30030] vivid-000: Generate SCR: true [ 926.871690][T30030] tpg source WxH: 1920x1080 (HSV) [ 926.883915][T30029] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 926.892286][T30029] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 926.906282][T30030] tpg field: 1 [ 926.910772][T30030] tpg crop: (0,0)/1920x1080 [ 926.917925][T30030] tpg compose: (0,0)/1920x1080 [ 926.922229][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 926.923272][T30030] tpg colorspace: 9 [ 926.929123][ C0] EXT4-fs (loop6): initial error at time 1774495552: ext4_mb_generate_buddy:1315 [ 926.929158][ C0] EXT4-fs (loop6): last error at time 1774495552: ext4_mb_generate_buddy:1315 [ 926.952902][T30034] xt_HMARK: spi-set and port-set can't be combined [ 926.955186][T30030] tpg transfer function: 7/7 [ 926.964313][T30030] tpg HSV encoding: 0/0 [ 926.968484][T30030] tpg quantization: 2/2 [ 926.973066][T30030] tpg RGB range: 0/2 [ 926.977092][T30030] vivid-000: ================== END STATUS ================== [ 926.997860][T30029] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.10660: attempt to clear invalid blocks 2 len 1 [ 927.113597][T30029] fserror_report: 4 callbacks suppressed [ 927.113622][T30029] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 927.143854][T30029] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.10660: invalid indirect mapped block 1819239214 (level 0) [ 927.247519][T30029] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 927.248067][T30029] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.10660: invalid indirect mapped block 1819239214 (level 1) [ 927.350732][T30029] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 927.368371][T30029] EXT4-fs (loop6): 1 truncate cleaned up [ 927.426625][T30029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 927.612399][T30029] EXT4-fs error (device loop6): ext4_lookup:1782: inode #2: comm syz.6.10660: 'file1' linked to parent dir [ 927.720538][T30066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10679'. [ 927.745508][T30066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10679'. [ 927.761305][T16937] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 927.768771][T30066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10679'. [ 927.799099][T30066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10679'. [ 927.810361][T21865] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.817646][T30066] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10679'. [ 927.873519][T30072] loop0: detected capacity change from 0 to 764 [ 927.998781][T16937] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 928.022378][T16937] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 928.073854][T16937] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 928.118143][T16937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.157384][T30055] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 928.207700][T16937] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 928.435010][T30090] loop1: detected capacity change from 0 to 256 [ 928.468118][T30092] netlink: 'syz.0.10694': attribute type 10 has an invalid length. [ 928.515883][T30090] FAT-fs (loop1): Directory bread(block 64) failed [ 928.534880][T16937] usb 6-1: USB disconnect, device number 109 [ 928.543420][T30094] batadv1: entered promiscuous mode [ 928.548814][T30090] FAT-fs (loop1): Directory bread(block 65) failed [ 928.569987][T30090] FAT-fs (loop1): Directory bread(block 66) failed [ 928.576591][T30090] FAT-fs (loop1): Directory bread(block 67) failed [ 928.618946][T30090] FAT-fs (loop1): Directory bread(block 68) failed [ 928.648945][T30090] FAT-fs (loop1): Directory bread(block 69) failed [ 928.690412][T30092] xfrm0: entered promiscuous mode [ 928.693819][T30090] FAT-fs (loop1): Directory bread(block 70) failed [ 928.709372][T30092] xfrm0: entered allmulticast mode [ 928.722862][T30092] team0: Device xfrm0 is of different type [ 928.733263][T30090] FAT-fs (loop1): Directory bread(block 71) failed [ 928.758968][T30090] FAT-fs (loop1): Directory bread(block 72) failed [ 928.767674][T30090] FAT-fs (loop1): Directory bread(block 73) failed [ 928.809197][ T6249] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 928.965411][T30106] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 929.017252][ T6249] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 929.064832][ T6249] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.092491][ T6249] usb 3-1: config 0 has no interface number 0 [ 929.109606][ T6249] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 929.167445][ T6249] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 929.198474][ T6249] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 929.236690][ T6249] usb 3-1: config 0 interface 52 has no altsetting 0 [ 929.280660][T16908] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 929.293071][ T6249] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 929.317160][ T6249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 929.337661][ T6249] usb 3-1: SerialNumber: syz [ 929.369991][ T6249] usb 3-1: config 0 descriptor?? [ 929.446321][T16908] usb 2-1: Using ep0 maxpacket: 32 [ 929.466592][T16908] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 929.489374][T16908] usb 2-1: config 2 has no interface number 0 [ 929.515032][T16908] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 929.541042][T16908] usb 2-1: config 2 interface 88 has no altsetting 0 [ 929.561618][T16908] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 929.581909][ T6249] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 929.591347][T16908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.591382][T16908] usb 2-1: Product: syz [ 929.591402][T16908] usb 2-1: Manufacturer: syz [ 929.591422][T16908] usb 2-1: SerialNumber: syz [ 929.598573][T30108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 929.646438][ T6249] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 929.773963][ T10] usb 3-1: USB disconnect, device number 100 [ 929.895962][T30108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 930.128082][T16908] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 930.166692][T16908] asix 2-1:2.88: probe with driver asix failed with error -71 [ 930.200413][T16908] usb 2-1: USB disconnect, device number 121 [ 930.302351][T30119] loop3: detected capacity change from 0 to 32768 [ 930.318453][T30119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10707 (30119) [ 930.409876][T30119] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 930.437613][T30119] BTRFS info (device loop3): using sha256 checksum algorithm [ 930.696922][T30119] BTRFS info (device loop3): checking UUID tree [ 930.744960][T30119] BTRFS info (device loop3): setting nodatasum [ 930.779359][T30119] BTRFS info (device loop3): setting nodatacow [ 930.785751][T30119] BTRFS info (device loop3): enabling ssd optimizations [ 930.843355][T30119] BTRFS info (device loop3): turning on async discard [ 930.894251][T30119] BTRFS info (device loop3): enabling free space tree [ 931.137842][ T6142] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 931.162695][ T10] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 931.361172][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.398288][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.437297][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 931.461058][T30199] netlink: 'syz.6.10740': attribute type 10 has an invalid length. [ 931.475416][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 931.494197][T30201] netlink: 'syz.2.10741': attribute type 1 has an invalid length. [ 931.525682][ T10] usb 6-1: SerialNumber: syz [ 931.574502][T30205] netlink: 'syz.0.10742': attribute type 1 has an invalid length. [ 931.612032][T30199] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 931.744571][ T10] usb 6-1: 0:2 : does not exist [ 931.749542][ T10] usb 6-1: unit 5: unexpected type 0x03 [ 931.962944][ T10] usb 6-1: USB disconnect, device number 110 [ 932.032495][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.189337][T16965] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 932.527049][T30230] netlink: 'syz.5.10753': attribute type 1 has an invalid length. [ 932.568207][T30230] netlink: 244 bytes leftover after parsing attributes in process `syz.5.10753'. [ 932.655799][T16965] usb 4-1: Using ep0 maxpacket: 8 [ 932.670198][T16965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 932.698489][T16965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.738466][T16965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.777104][T16965] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 932.793361][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.835690][T16965] usb 4-1: Product: syz [ 932.846094][T16965] usb 4-1: Manufacturer: syz [ 932.850225][T30236] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 932.868593][T16965] usb 4-1: SerialNumber: syz [ 932.984295][T30242] loop0: detected capacity change from 0 to 8 [ 933.023129][T30242] Filesystem uses "unknown" compression. This is not supported [ 933.150919][T16908] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 933.164930][T30244] loop5: detected capacity change from 0 to 128 [ 933.203026][T30244] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 933.236299][T30244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 933.352371][T16965] usb 4-1: cannot find UAC_HEADER [ 933.360865][T16908] usb 3-1: Using ep0 maxpacket: 16 [ 933.380985][T16908] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 933.437679][T16908] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 933.456157][T16908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.464378][T16908] usb 3-1: Product: syz [ 933.490828][T16908] usb 3-1: Manufacturer: syz [ 933.501066][T16908] usb 3-1: SerialNumber: syz [ 933.509030][T16965] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 933.568666][T16965] usb 4-1: USB disconnect, device number 87 [ 933.575790][T16908] usb 3-1: config 0 descriptor?? [ 933.594477][T16908] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 933.652697][T16908] usb 3-1: Detected FT232R [ 933.733716][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.821693][T30264] xt_TCPMSS: Only works on TCP SYN packets [ 933.898705][T30266] sg_write: data in/out 294879/136 bytes for SCSI command 0x2-- guessing data in; [ 933.898705][T30266] program syz.6.10772 not setting count and/or reply_len properly [ 933.980831][T16908] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 934.004174][T16908] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 934.032263][T16908] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 934.108068][T16908] usb 3-1: USB disconnect, device number 101 [ 934.125390][T16908] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 934.161554][T16908] ftdi_sio 3-1:0.0: device disconnected [ 934.202291][T30278] loop1: detected capacity change from 0 to 1024 [ 934.218076][ T10] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 934.313078][T30282] loop0: detected capacity change from 0 to 16 [ 934.339223][T30282] erofs (device loop0): mounted with root inode @ nid 36. [ 934.427638][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 934.456222][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 934.485995][ T10] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 934.530132][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.591502][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 934.630244][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.662456][ T10] usb 6-1: Product: syz [ 934.694328][ T10] usb 6-1: Manufacturer: syz [ 934.698991][ T10] usb 6-1: SerialNumber: syz [ 934.732934][ T10] usb 6-1: config 0 descriptor?? [ 934.971367][ T10] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 934.988410][ T10] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 935.066198][ T10] usb 6-1: USB disconnect, device number 111 [ 935.581757][T30328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.839953][T30342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10808'. [ 936.094375][T30352] loop3: detected capacity change from 0 to 128 [ 936.140918][T30352] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 936.210758][T30352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 936.468169][T30361] openvswitch: netlink: Duplicate key (type 2). [ 936.692601][T30334] loop0: detected capacity change from 0 to 32768 [ 936.812361][T30334] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 936.956323][T30344] loop6: detected capacity change from 0 to 32768 [ 936.980263][T30344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10809 (30344) [ 937.057675][T30344] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.125901][T30344] BTRFS info (device loop6): using sha256 checksum algorithm [ 937.162570][T30334] XFS (loop0): Ending clean mount [ 937.353135][T30344] BTRFS info (device loop6): enabling ssd optimizations [ 937.377711][ T6135] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 937.432944][T30344] BTRFS info (device loop6): turning on async discard [ 937.498085][T30344] BTRFS info (device loop6): enabling free space tree [ 937.685349][T30418] sp0: Synchronizing with TNC [ 937.730428][T30416] [U] [ 937.815868][T21865] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.848416][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 937.848437][ T30] audit: type=1326 audit(1774495820.382:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 937.967251][ T30] audit: type=1326 audit(1774495820.424:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 938.040885][ T30] audit: type=1326 audit(1774495820.424:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 938.174743][ T30] audit: type=1326 audit(1774495820.424:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 938.217672][T30431] netlink: 'syz.3.10843': attribute type 1 has an invalid length. [ 938.235868][T30431] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10843'. [ 938.342299][ T30] audit: type=1326 audit(1774495820.424:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 938.431966][T30437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10844'. [ 938.466003][ T30] audit: type=1326 audit(1774495820.424:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 938.588500][ T30] audit: type=1326 audit(1774495820.424:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 938.712492][ T30] audit: type=1326 audit(1774495820.424:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30424 comm="syz.3.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 938.743381][T30445] Invalid source name [ 939.347155][T30469] netlink: 766 bytes leftover after parsing attributes in process `syz.3.10859'. [ 939.483592][T30428] loop5: detected capacity change from 0 to 32768 [ 939.559287][T30428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10841 (30428) [ 939.630624][T30428] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 939.676377][T30428] BTRFS info (device loop5): using crc32c checksum algorithm [ 939.682549][T30480] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 939.931280][T30428] BTRFS info (device loop5): enabling ssd optimizations [ 939.974539][T30428] BTRFS info (device loop5): turning on flush-on-commit [ 940.009445][T30428] BTRFS info (device loop5): enabling free space tree [ 940.017730][T30428] BTRFS info (device loop5): enabling auto defrag [ 940.044829][T30428] BTRFS info (device loop5): use lzo compression, level 1 [ 940.070109][T30428] BTRFS info (device loop5): max_inline set to 4096 [ 940.138495][T30428] BTRFS info (device loop5 state M): max_inline set to 4096 [ 940.373744][ T6149] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 940.521853][T30521] loop3: detected capacity change from 0 to 4096 [ 940.693958][T30529] netlink: zone id is out of range [ 940.727336][T30529] netlink: zone id is out of range [ 940.755359][T30529] netlink: zone id is out of range [ 940.773142][T30521] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 940.786743][T30529] netlink: zone id is out of range [ 940.811619][T30521] ntfs3(loop3): Failed to load $Extend (-22). [ 940.852133][T30521] ntfs3(loop3): Failed to initialize $Extend. [ 941.060728][ T6142] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 941.640824][T30563] loop1: detected capacity change from 0 to 128 [ 941.971244][ T30] audit: type=1800 audit(1774495824.697:2033): pid=30557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.10895" name="/newroot/1770/pids.events" dev="tmpfs" ino=9121 res=0 errno=0 [ 942.165968][T30582] netlink: 'syz.6.10906': attribute type 2 has an invalid length. [ 942.184203][T16908] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 942.365780][T16908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.390468][T16908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 942.423149][T16908] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 942.447995][T16908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.491206][T16908] usb 3-1: Product: syz [ 942.511399][T16908] usb 3-1: Manufacturer: syz [ 942.529079][T16908] usb 3-1: SerialNumber: syz [ 942.656634][T30605] loop3: detected capacity change from 0 to 256 [ 942.992421][T16908] usb 3-1: skipping empty audio interface (v1) [ 943.157676][T30625] loop3: detected capacity change from 0 to 256 [ 943.283705][T16908] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 943.315777][T30625] FAT-fs (loop3): Directory bread(block 64) failed [ 943.322377][T30625] FAT-fs (loop3): Directory bread(block 65) failed [ 943.322805][T16908] usb 3-1: USB disconnect, device number 102 [ 943.365848][T30625] FAT-fs (loop3): Directory bread(block 66) failed [ 943.382505][T30625] FAT-fs (loop3): Directory bread(block 67) failed [ 943.403743][T30625] FAT-fs (loop3): Directory bread(block 68) failed [ 943.458818][T30625] FAT-fs (loop3): Directory bread(block 69) failed [ 943.480366][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.508960][T30625] FAT-fs (loop3): Directory bread(block 70) failed [ 943.535949][T30625] FAT-fs (loop3): Directory bread(block 71) failed [ 943.556528][T30625] FAT-fs (loop3): Directory bread(block 72) failed [ 943.576092][T30625] FAT-fs (loop3): Directory bread(block 73) failed [ 943.718248][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 943.879419][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 943.891472][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 943.911842][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 943.944050][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 943.988980][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.027232][ T10] usb 2-1: Product: syz [ 944.056486][ T10] usb 2-1: Manufacturer: syz [ 944.068446][ T10] usb 2-1: SerialNumber: syz [ 944.105375][ T10] usb 2-1: config 0 descriptor?? [ 944.324521][ T6249] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 944.511090][T30663] loop0: detected capacity change from 0 to 4096 [ 944.517590][ T6249] usb 4-1: Using ep0 maxpacket: 8 [ 944.551948][ T6249] usb 4-1: unable to get BOS descriptor or descriptor too short [ 944.571740][ T6249] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 944.583010][ T6397] usb 2-1: USB disconnect, device number 122 [ 944.599862][ T6249] usb 4-1: config 0 has no interface number 0 [ 944.625931][ T6249] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 944.649231][T30663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.671041][ T6249] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 944.685311][ T6249] usb 4-1: config 0 interface 88 has no altsetting 0 [ 944.695522][ T6249] usb 4-1: string descriptor 0 read error: -22 [ 944.701837][ T6249] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 944.711700][ T6249] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 944.723172][ T6249] usb 4-1: config 0 descriptor?? [ 944.745466][ T6249] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input51 [ 944.937340][ T6249] input: failed to attach handler mousedev to device input51, error: -5 [ 944.961541][ T6135] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.075708][ T6249] usb 4-1: USB disconnect, device number 88 [ 945.185499][T30683] team0: left allmulticast mode [ 945.227423][T30685] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10957'. [ 945.227652][ T6095] udevd[6095]: Error opening device "/dev/input/event4": No such file or directory [ 945.249202][T30683] team_slave_0: left allmulticast mode [ 945.264489][T30683] team_slave_1: left allmulticast mode [ 945.292137][T30683] team0: left promiscuous mode [ 945.292167][T30683] team_slave_0: left promiscuous mode [ 945.292401][T30683] team_slave_1: left promiscuous mode [ 945.292816][T30683] bridge0: port 3(team0) entered disabled state [ 945.314781][ T6095] udevd[6095]: Unable to EVIOCGABS device "/dev/input/event4" [ 945.354407][T30683] bridge_slave_0: left allmulticast mode [ 945.354438][T30683] bridge_slave_0: left promiscuous mode [ 945.354736][T30683] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.356502][ T6095] udevd[6095]: Unable to EVIOCGABS device "/dev/input/event4" [ 945.356559][ T6095] udevd[6095]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 945.380405][T30683] bridge_slave_1: left allmulticast mode [ 945.380439][T30683] bridge_slave_1: left promiscuous mode [ 945.380769][T30683] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.396038][T30683] bond0: (slave 70): Releasing backup interface [ 945.396750][ T5188] udevd[5188]: worker [6095] terminated by signal 6 (Aborted) [ 945.396802][ T5188] udevd[5188]: worker [6095] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input51/event4' [ 945.416160][T30691] loop5: detected capacity change from 0 to 8 [ 945.521976][T30683] bond0: (slave bond_slave_1): Releasing backup interface [ 945.544556][T30691] SQUASHFS error: lzo decompression failed, data probably corrupt [ 945.560766][T30691] SQUASHFS error: Failed to read block 0x0: -5 [ 945.570860][T30683] team0: Port device team_slave_0 removed [ 945.573388][T30691] SQUASHFS error: lzo decompression failed, data probably corrupt [ 945.610859][T30683] team0: Port device team_slave_1 removed [ 945.617300][T30683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.625919][T30691] SQUASHFS error: Failed to read block 0x0: -5 [ 945.632712][ T30] audit: type=1800 audit(1774495828.560:2034): pid=30691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10959" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 945.654387][T30683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.673426][T30683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 945.785743][T30698] netlink: 'syz.1.10963': attribute type 61 has an invalid length. [ 945.808647][T30699] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 945.862757][T30701] xt_TCPMSS: Only works on TCP SYN packets [ 946.435910][T30725] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10976'. [ 946.553254][ T6422] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 946.735578][ T6422] usb 4-1: Using ep0 maxpacket: 16 [ 946.765558][ T6422] usb 4-1: config 0 interface 0 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 946.782595][ T6422] usb 4-1: config 0 interface 0 has no altsetting 0 [ 946.795039][ T6422] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 946.814361][ T6422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.837169][ T6422] usb 4-1: Product: syz [ 946.847098][ T6422] usb 4-1: Manufacturer: syz [ 946.856947][ T6422] usb 4-1: SerialNumber: syz [ 946.870544][T30707] loop1: detected capacity change from 0 to 32768 [ 946.884917][ T6422] usb 4-1: config 0 descriptor?? [ 946.918767][T30743] Timeout policy `syz0' can only be used by L3 protocol number 35095 [ 946.926137][ T6422] hub 4-1:0.0: bad descriptor, ignoring hub [ 946.962946][ T6422] hub 4-1:0.0: probe with driver hub failed with error -5 [ 946.978508][ T6422] usb 4-1: selecting invalid altsetting 0 [ 946.983243][T30707] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 946.988990][ T6422] usb 4-1: can't set first interface for hiFace device. [ 947.000761][ T6422] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 947.181995][T30707] XFS (loop1): Ending clean mount [ 947.241038][T30707] XFS (loop1): Quotacheck needed: Please wait. [ 947.338859][T30707] XFS (loop1): Quotacheck: Done. [ 947.374283][ T6249] usb 4-1: USB disconnect, device number 89 [ 947.498119][ T6134] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 947.732134][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10999'. [ 948.079693][T30789] loop2: detected capacity change from 0 to 8 [ 948.623333][T30811] loop0: detected capacity change from 0 to 128 [ 948.647957][T30804] loop3: detected capacity change from 0 to 4096 [ 948.663469][T30811] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 948.728580][T30804] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 948.737889][T30811] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 948.848952][T30804] ntfs3(loop3): ino=19, mi_enum_attr [ 948.938067][T30804] ntfs3(loop3): failed to convert "c46c" to iso8859-4 [ 948.957625][ T1125] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 948.972687][T30773] loop6: detected capacity change from 0 to 32768 [ 948.991993][T30804] ntfs3(loop3): ino=20, mi_enum_attr [ 949.134836][T30773] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 949.192662][T30831] xt_l2tp: v2 doesn't support IP mode [ 949.321799][T30773] XFS (loop6): Ending clean mount [ 949.349238][T30773] XFS (loop6): Quotacheck needed: Please wait. [ 949.541289][T30773] XFS (loop6): Quotacheck: Done. [ 949.783993][T21865] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 950.072865][T30864] netlink: 'syz.5.11037': attribute type 32 has an invalid length. [ 950.389447][T30877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.481317][T30872] bond2: option mode: invalid value (22) [ 950.549128][T30872] bond2 (unregistering): Released all slaves [ 951.157353][T16908] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 951.272940][T30912] loop3: detected capacity change from 0 to 128 [ 951.315138][T30912] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 951.355806][T30912] ext4 filesystem being mounted at /1790/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 951.372504][T16908] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 951.401537][T16908] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 951.431665][T16908] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 951.501179][T16908] usb 3-1: config 220 has no interface number 2 [ 951.533012][T16908] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 951.566373][ T6142] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 951.571423][T16908] usb 3-1: config 220 interface 0 has no altsetting 0 [ 951.642591][T16908] usb 3-1: config 220 interface 76 has no altsetting 0 [ 951.674285][T16908] usb 3-1: config 220 interface 1 has no altsetting 0 [ 951.704725][T16908] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 951.738181][T16908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.766736][T16908] usb 3-1: Product: syz [ 951.770989][T16908] usb 3-1: Manufacturer: syz [ 951.803272][T30931] loop3: detected capacity change from 0 to 128 [ 951.803307][T16908] usb 3-1: SerialNumber: syz [ 951.843761][T30931] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 951.886038][T30931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 952.021618][T30933] xt_hashlimit: max too large, truncated to 1048576 [ 952.073168][T16908] usb 3-1: selecting invalid altsetting 0 [ 952.107371][T16908] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 952.114763][T16908] uvcvideo 3-1:220.0: No valid video chain found. [ 952.132101][T30937] loop5: detected capacity change from 0 to 256 [ 952.172380][T30937] exfat: Unknown parameter 'erors' [ 952.204133][T16908] usb 3-1: selecting invalid altsetting 0 [ 952.215908][T30937] cifs: Unknown parameter 'h}# [ 952.215908][T30937] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 952.215908][T30937] SȘȞZ6' [ 952.235011][T16908] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 952.281837][T16908] usb 3-1: USB disconnect, device number 103 [ 952.551584][T30916] loop1: detected capacity change from 0 to 32768 [ 952.611993][T30948] loop6: detected capacity change from 0 to 1024 [ 952.661242][T30916] JBD2: Ignoring recovery information on journal [ 952.902232][T30916] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 953.350730][T30978] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 953.388577][T30978] overlayfs: missing 'lowerdir' [ 953.462418][ T6134] ocfs2: Unmounting device (7,1) on (node local) [ 953.589166][T30983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.971384][T30955] loop3: detected capacity change from 0 to 32768 [ 954.211408][T31006] xt_cgroup: path and classid specified [ 954.442639][ T30] audit: type=1326 audit(1774495837.798:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 954.556956][ T30] audit: type=1326 audit(1774495837.798:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 954.666552][ T30] audit: type=1326 audit(1774495837.809:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 954.761380][ T30] audit: type=1326 audit(1774495837.819:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 954.780513][T31024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11115'. [ 954.878927][ T30] audit: type=1326 audit(1774495837.819:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 954.951509][ T30] audit: type=1326 audit(1774495837.819:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 955.040410][ T30] audit: type=1326 audit(1774495837.819:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 955.056693][T31034] loop6: detected capacity change from 0 to 256 [ 955.128265][ T30] audit: type=1326 audit(1774495837.819:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 955.197416][T31034] FAT-fs (loop6): Directory bread(block 64) failed [ 955.229292][T31034] FAT-fs (loop6): Directory bread(block 65) failed [ 955.257108][T31034] FAT-fs (loop6): Directory bread(block 66) failed [ 955.269186][ T30] audit: type=1326 audit(1774495837.819:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31015 comm="syz.5.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 955.286281][T31034] FAT-fs (loop6): Directory bread(block 67) failed [ 955.337447][T31034] FAT-fs (loop6): Directory bread(block 68) failed [ 955.344045][T31034] FAT-fs (loop6): Directory bread(block 69) failed [ 955.407544][T31034] FAT-fs (loop6): Directory bread(block 70) failed [ 955.439872][T31049] netlink: 'syz.1.11125': attribute type 1 has an invalid length. [ 955.450470][T31034] FAT-fs (loop6): Directory bread(block 71) failed [ 955.457126][T31034] FAT-fs (loop6): Directory bread(block 72) failed [ 955.488185][T31034] FAT-fs (loop6): Directory bread(block 73) failed [ 955.801050][T31065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11135'. [ 956.074168][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11138'. [ 956.264871][T31081] loop0: detected capacity change from 0 to 2048 [ 956.356728][T31081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.444502][T31081] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 188 not allocated in directory (ino 1376) [ 956.772895][T31105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11153'. [ 957.041272][T16908] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 957.221922][T16908] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 957.250647][T16908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 957.261132][ T30] audit: type=1326 audit(1774495840.769:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31130 comm="syz.6.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff498b9c799 code=0x7ffc0000 [ 957.270824][T16908] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 957.302214][T31128] loop2: detected capacity change from 0 to 2048 [ 957.334303][T16908] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 957.356171][T16908] usb 2-1: Product: syz [ 957.364794][T31133] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 957.366136][T16908] usb 2-1: Manufacturer: syz [ 957.407523][T16908] usb 2-1: SerialNumber: syz [ 957.424992][T31128] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 1099511627785 [ 957.436835][T16908] usb 2-1: config 0 descriptor?? [ 957.445130][T31128] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 957.466676][T16908] usb 2-1: selecting invalid altsetting 0 [ 957.481531][T31128] Remounting filesystem read-only [ 957.493101][T31128] NILFS (loop2): error -5 truncating bmap (ino=16) [ 957.660977][ T6138] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 957.679692][T16908] usb 2-1: USB disconnect, device number 123 [ 957.802908][T31144] netlink: 'syz.6.11172': attribute type 6 has an invalid length. [ 957.818382][T31147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11174'. [ 957.823443][T31144] netlink: 'syz.6.11172': attribute type 7 has an invalid length. [ 957.876403][T31144] netlink: 'syz.6.11172': attribute type 8 has an invalid length. [ 957.897875][ T6090] udevd[6090]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.111091][T31154] tmpfs: Bad value for 'mpol' [ 958.191283][T31160] loop6: detected capacity change from 0 to 1024 [ 958.383595][T31162] loop0: detected capacity change from 0 to 8192 [ 959.121046][T31194] openvswitch: netlink: Tunnel attr 183 out of range max 16 [ 959.511136][T31164] loop2: detected capacity change from 0 to 32768 [ 959.561396][T31164] jfs_lookup: dtSearch returned -5 [ 959.567402][ T6249] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 959.656295][T31219] loop6: detected capacity change from 0 to 256 [ 959.683545][T31219] exfat: Deprecated parameter 'utf8' [ 959.688973][T31219] exfat: Deprecated parameter 'utf8' [ 959.757134][ T6249] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 959.785182][ T6249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.786085][T31219] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 959.823413][ T6249] usb 2-1: Product: syz [ 959.827634][ T6249] usb 2-1: Manufacturer: syz [ 959.856350][ T6249] usb 2-1: SerialNumber: syz [ 959.957213][ T6249] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 959.966954][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 959.967047][ T30] audit: type=1800 audit(1774495843.603:2052): pid=31219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11208" name="bus" dev="loop6" ino=1048800 res=0 errno=0 [ 960.043626][T31232] loop0: detected capacity change from 0 to 16 [ 960.072270][T16937] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 960.082656][T31233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11214'. [ 960.119906][T31232] erofs (device loop0): mounted with root inode @ nid 36. [ 960.185317][T31232] syz.0.11213: attempt to access beyond end of device [ 960.185317][T31232] loop0: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 960.318612][T31232] syz.0.11213: attempt to access beyond end of device [ 960.318612][T31232] loop0: rw=0, sector=46, nr_sectors = 1 limit=16 [ 960.419926][T31232] erofs (device loop0): read error -5 @ 0 of nid 36 [ 960.636729][ T6422] usb 2-1: USB disconnect, device number 124 [ 960.670090][T31245] sock: sock_timestamping_bind_phc: sock not bind to device [ 961.104851][T31266] 9p: Unknown Cache mode or invalid value m [ 961.159588][T16937] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 961.159790][T16937] ath9k_htc: Failed to initialize the device [ 961.167459][ T6422] usb 2-1: ath9k_htc: USB layer deinitialized [ 961.746103][T31286] loop1: detected capacity change from 0 to 2048 [ 961.801466][T31286] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 961.840251][T31286] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 961.852403][T31294] loop2: detected capacity change from 0 to 256 [ 961.909569][T31286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 962.060048][T31258] loop6: detected capacity change from 0 to 32768 [ 962.196128][T31302] loop3: detected capacity change from 0 to 764 [ 962.242162][T31302] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 962.621006][T31314] loop1: detected capacity change from 0 to 256 [ 962.747239][T31314] FAT-fs (loop1): Directory bread(block 64) failed [ 962.753824][T31314] FAT-fs (loop1): Directory bread(block 65) failed [ 962.800624][T31314] FAT-fs (loop1): Directory bread(block 66) failed [ 962.869139][T31314] FAT-fs (loop1): Directory bread(block 67) failed [ 962.894801][T31314] FAT-fs (loop1): Directory bread(block 68) failed [ 962.930772][T31314] FAT-fs (loop1): Directory bread(block 69) failed [ 962.965130][T31314] FAT-fs (loop1): Directory bread(block 70) failed [ 962.994622][T31314] FAT-fs (loop1): Directory bread(block 71) failed [ 963.011738][T31314] FAT-fs (loop1): Directory bread(block 72) failed [ 963.052508][T31314] FAT-fs (loop1): Directory bread(block 73) failed [ 963.617423][T31341] loop6: detected capacity change from 0 to 4096 [ 963.660448][T31341] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 963.691131][T31352] netlink: 'syz.3.11274': attribute type 1 has an invalid length. [ 964.055346][T31341] ntfs3(loop6): ino=19, mi_enum_attr [ 964.095866][T31341] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 964.508435][T31381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11289'. [ 964.519799][T31380] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11287'. [ 964.789827][T31392] netlink: 'syz.3.11293': attribute type 5 has an invalid length. [ 965.000620][T31396] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 965.039801][T31396] bond1 (unregistering): Released all slaves [ 965.562967][T31428] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 965.966847][T31437] loop0: detected capacity change from 0 to 4096 [ 966.017186][T31437] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 966.224679][T31454] loop6: detected capacity change from 0 to 1024 [ 966.306365][T31454] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 966.349828][T31454] hfsplus: xattr searching failed [ 966.369667][T31454] syz.6.11322: attempt to access beyond end of device [ 966.369667][T31454] loop6: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 966.433006][T31454] Buffer I/O error on dev loop6, logical block 458752, async page read [ 966.469839][T31454] hfsplus: unable to mark blocks free: error -5 [ 966.507861][T31454] hfsplus: can't free extent: start 131, count 1 [ 966.697484][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11333'. [ 966.799408][T31475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11334'. [ 966.951171][T31485] netlink: 'syz.0.11338': attribute type 3 has an invalid length. [ 966.966715][T31485] netlink: 'syz.0.11338': attribute type 27 has an invalid length. [ 967.218083][T31495] loop5: detected capacity change from 0 to 512 [ 967.251730][T31495] EXT4-fs: Ignoring removed i_version option [ 967.280610][T31495] EXT4-fs: Ignoring removed oldalloc option [ 967.288920][T31501] loop2: detected capacity change from 0 to 64 [ 967.302712][T31499] netlink: 'syz.3.11346': attribute type 337 has an invalid length. [ 967.323670][T31495] EXT4-fs (loop5): 1 truncate cleaned up [ 967.379785][T31495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.553359][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.612408][T31514] libceph: resolve '0.' (ret=-3): failed [ 967.792137][T31522] loop5: detected capacity change from 0 to 2048 [ 967.863351][T31522] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 967.906777][T31522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.973989][T31534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11362'. [ 968.128744][ T6422] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 968.167073][T16965] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 968.282226][ T6422] usb 7-1: Using ep0 maxpacket: 8 [ 968.324012][ T6422] usb 7-1: config 6 has an invalid interface number: 84 but max is 0 [ 968.349801][T16965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 968.363802][T16965] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 968.373354][ T6422] usb 7-1: config 6 has no interface number 0 [ 968.395861][ T6422] usb 7-1: config 6 interface 84 has no altsetting 0 [ 968.421029][T16965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.453196][ T6422] usb 7-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=27.70 [ 968.459351][T31548] openvswitch: netlink: Tunnel attr 109 out of range max 16 [ 968.481640][ T6422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.489691][ T6422] usb 7-1: Product: syz [ 968.501644][T16965] usb 1-1: config 0 descriptor?? [ 968.507066][ T6422] usb 7-1: Manufacturer: syz [ 968.532769][T16965] smsusb:smsusb_probe: board id=8, interface number 0 [ 968.536378][ T6422] usb 7-1: SerialNumber: syz [ 968.595929][T16965] smsusb:smsusb_probe: Device initialized with return code -19 [ 968.724081][T16965] usb 1-1: USB disconnect, device number 103 [ 968.807950][ T6422] gspca_main: spca501-2.14.0 probing 1776:501c [ 968.827401][ T6422] gspca_spca501: reg write: error -71 [ 968.832847][ T6422] spca501 7-1:6.84: Reg write failed for 0x02,0x07,0x05 [ 968.869859][ T6422] spca501 7-1:6.84: probe with driver spca501 failed with error -22 [ 968.903808][ T6422] usb 7-1: USB disconnect, device number 7 [ 969.261984][T31545] loop3: detected capacity change from 0 to 32768 [ 969.306438][T31545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11368 (31545) [ 969.371069][T31545] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 969.400760][T31545] BTRFS info (device loop3): using sha256 checksum algorithm [ 969.628883][T31545] BTRFS info (device loop3): enabling ssd optimizations [ 969.661640][T31600] netlink: 'syz.1.11388': attribute type 32 has an invalid length. [ 969.681869][T31545] BTRFS info (device loop3): turning on async discard [ 969.689675][T31545] BTRFS info (device loop3): enabling free space tree [ 969.928847][ T6142] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 970.008209][T31618] loop2: detected capacity change from 0 to 256 [ 970.047223][T31619] netlink: 'syz.5.11397': attribute type 23 has an invalid length. [ 970.116280][T31618] FAT-fs (loop2): Directory bread(block 64) failed [ 970.148272][T31618] FAT-fs (loop2): Directory bread(block 65) failed [ 970.154932][T31618] FAT-fs (loop2): Directory bread(block 66) failed [ 970.204247][T31618] FAT-fs (loop2): Directory bread(block 67) failed [ 970.238794][T31618] FAT-fs (loop2): Directory bread(block 68) failed [ 970.290000][T31618] FAT-fs (loop2): Directory bread(block 69) failed [ 970.321561][T31618] FAT-fs (loop2): Directory bread(block 70) failed [ 970.363334][T31618] FAT-fs (loop2): Directory bread(block 71) failed [ 970.405602][T31618] FAT-fs (loop2): Directory bread(block 72) failed [ 970.412172][T31618] FAT-fs (loop2): Directory bread(block 73) failed [ 971.075143][T31653] loop3: detected capacity change from 0 to 128 [ 971.093726][T31643] loop0: detected capacity change from 0 to 4096 [ 971.151359][T31653] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 971.270003][T31653] ext4 filesystem being mounted at /1848/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 971.507015][ T6142] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 971.529635][ T6249] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 971.577751][T31673] netlink: 'syz.5.11422': attribute type 21 has an invalid length. [ 971.700763][ T6249] usb 7-1: Using ep0 maxpacket: 8 [ 971.707899][ T6249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 971.732931][ T6249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 971.762706][ T6249] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 971.774995][ T6249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 971.785992][T31682] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11424'. [ 971.821719][ T6249] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 971.834829][ T6249] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 971.855483][ T6249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.911420][ T6249] usb 7-1: config 0 descriptor?? [ 971.933400][T31665] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 971.941901][ T30] audit: type=1107 audit(1774495856.170:2053): pid=31685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 972.210371][T31696] loop1: detected capacity change from 0 to 16 [ 972.243637][T31696] erofs (device loop1): DAX unsupported by block device. Turning off DAX. [ 972.286996][T31696] erofs (device loop1): mounted with root inode @ nid 36. [ 972.319935][ T6249] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 972.343260][T31696] erofs (device loop1): read error -117 @ 0 of nid 36 [ 972.388205][T31702] binder: 31701:31702 ioctl c018620c 2000000002c0 returned -1 [ 972.439163][ T6422] usb 7-1: USB disconnect, device number 8 [ 972.448496][T13118] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 972.500235][ T6249] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 972.553308][ T6249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.595534][ T6249] usb 4-1: Product: syz [ 972.614905][ T6249] usb 4-1: Manufacturer: syz [ 972.644377][ T6249] usb 4-1: SerialNumber: syz [ 972.698849][T31711] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC [ 972.698849][T31711] SȘȞZ6' [ 972.718557][ T30] audit: type=1326 audit(1774495856.988:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 972.816386][ T30] audit: type=1326 audit(1774495857.030:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 972.899214][ T30] audit: type=1326 audit(1774495857.030:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 972.952622][ T30] audit: type=1326 audit(1774495857.041:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 972.998278][ T30] audit: type=1326 audit(1774495857.041:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 973.041491][T31722] netlink: 'syz.1.11445': attribute type 10 has an invalid length. [ 973.057855][T31718] netlink: 'syz.0.11447': attribute type 29 has an invalid length. [ 973.069990][ T6249] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 973.112606][ T6249] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 973.129797][ T30] audit: type=1326 audit(1774495857.041:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 973.134369][T31722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.179873][ T6249] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 973.211154][ T6249] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 973.223632][T31722] team0: Port device batadv0 added [ 973.232673][ T30] audit: type=1326 audit(1774495857.041:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 973.232749][T31726] netlink: 220 bytes leftover after parsing attributes in process `syz.6.11448'. [ 973.258271][ T6249] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 973.320916][ T30] audit: type=1326 audit(1774495857.041:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 973.353088][ T6249] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 973.410979][ T6249] usb 4-1: USB disconnect, device number 90 [ 973.417922][ T30] audit: type=1326 audit(1774495857.041:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31709 comm="syz.1.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa83019c799 code=0x7ffc0000 [ 973.445893][T31732] loop2: detected capacity change from 0 to 128 [ 973.498552][T31732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 973.552310][T31732] ext4 filesystem being mounted at /1931/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 973.638238][T31732] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 973.737317][ T6138] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 973.795914][T31743] loop1: detected capacity change from 0 to 8 [ 973.834969][T16965] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 973.997826][T16965] usb 6-1: Using ep0 maxpacket: 8 [ 974.024348][T16965] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 974.068097][T16965] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 974.090063][T16965] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 974.105282][T16965] usb 6-1: Product: syz [ 974.109680][T16965] usb 6-1: Manufacturer: syz [ 974.115853][T16965] usb 6-1: SerialNumber: syz [ 974.368167][T16965] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 974.398690][T16965] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 974.425415][T16965] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 974.569963][T16965] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 974.600260][T16965] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 974.641954][T16965] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 974.672306][T16965] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 974.674855][T31774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11470'. [ 974.717073][T16965] usb 6-1: USB disconnect, device number 112 [ 974.761688][T16965] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 974.821018][T16965] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 974.840113][T16965] visor 6-1:1.0: device disconnected [ 974.852205][T31776] loop0: detected capacity change from 0 to 512 [ 974.942874][T31776] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.11471: inode has both inline data and extents flags [ 974.962504][T31776] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 974.962917][T31776] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.11471: couldn't read orphan inode 15 (err -117) [ 974.972187][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 974.972219][ C1] EXT4-fs (loop0): initial error at time 1774495859: ext4_orphan_get:1391: inode 15 [ 974.972260][ C1] EXT4-fs (loop0): last error at time 1774495859: ext4_orphan_get:1391: inode 15 [ 975.101566][T31776] loop0: lost filesystem error report for type 5 error -117 [ 975.103960][T31776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.148663][T31784] loop2: detected capacity change from 0 to 4096 [ 975.296934][T31784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.354190][T31788] loop1: detected capacity change from 0 to 1764 [ 975.411670][ T6135] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.511211][ T6249] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 975.725555][ T6249] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 975.745137][ T6249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.775356][ T6249] usb 6-1: Product: syz [ 975.800648][ T6138] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.832965][ T6249] usb 6-1: Manufacturer: syz [ 975.873929][ T6249] usb 6-1: SerialNumber: syz [ 975.922308][ T6249] usb 6-1: config 0 descriptor?? [ 975.960727][ T6249] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now attached [ 976.176718][ T6249] usb 6-1: USB disconnect, device number 113 [ 976.187899][ T6249] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now disconnected [ 976.283776][T16965] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 976.456823][T16965] usb 2-1: Using ep0 maxpacket: 32 [ 976.503066][T16965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 976.536530][T16965] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 976.573299][T16965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 976.590935][T16965] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 976.616131][T16965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.637985][T16965] usb 2-1: Product: syz [ 976.645823][T16965] usb 2-1: Manufacturer: syz [ 976.650429][T16965] usb 2-1: SerialNumber: syz [ 976.687986][T16965] usb 2-1: config 0 descriptor?? [ 976.730896][T31825] loop6: detected capacity change from 0 to 512 [ 976.736435][T16965] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input53 [ 976.772179][T31825] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 976.816268][T31825] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 976.855451][T31825] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.11494: iget: bad i_size value: 12154757448730 [ 976.880561][T31825] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 976.881220][T31825] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.11494: couldn't read orphan inode 13 (err -117) [ 976.890532][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 976.890562][ C0] EXT4-fs (loop6): initial error at time 1774495861: ext4_orphan_get:1391: inode 13 [ 976.890603][ C0] EXT4-fs (loop6): last error at time 1774495861: ext4_orphan_get:1391: inode 13 [ 976.928602][T31825] loop6: lost filesystem error report for type 5 error -117 [ 976.941924][T31825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.987197][T31825] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 977.071338][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 977.085772][ T6249] usb 2-1: USB disconnect, device number 125 [ 977.091856][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 977.288780][T21865] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.763900][T31867] netlink: 'syz.5.11515': attribute type 10 has an invalid length. [ 977.900903][T31867] team0: Port device geneve1 added [ 978.032333][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11517'. [ 978.098460][T31876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11517'. [ 978.435410][T16908] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 978.465249][T31896] loop3: detected capacity change from 0 to 512 [ 978.482706][T31896] EXT4-fs: Ignoring removed oldalloc option [ 978.502014][T31896] EXT4-fs (loop3): Test dummy encryption mode enabled [ 978.601358][T16908] usb 1-1: Using ep0 maxpacket: 32 [ 978.611395][T31896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.636769][T16908] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.648084][T16908] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.660576][T16908] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 978.671089][T16908] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 978.679595][T16908] usb 1-1: Product: syz [ 978.683953][T16908] usb 1-1: Manufacturer: syz [ 978.693016][ T6249] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 978.709342][T16908] hub 1-1:4.0: USB hub found [ 978.776760][T31896] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 978.913891][ T6249] usb 7-1: unable to get BOS descriptor or descriptor too short [ 978.916096][T16908] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 978.933224][ T6249] usb 7-1: config 66 has an invalid interface number: 168 but max is 0 [ 978.944201][ T6249] usb 7-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config [ 978.973839][ T6142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.984596][ T6249] usb 7-1: config 66 has no interface number 0 [ 978.994415][ T6249] usb 7-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 979.008752][ T6249] usb 7-1: config 66 interface 168 has no altsetting 0 [ 979.018984][ T6249] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 979.029105][ T6249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.043451][ T6249] usb 7-1: Product: syz [ 979.054642][ T6249] usb 7-1: Manufacturer: syz [ 979.063803][ T6249] usb 7-1: SerialNumber: syz [ 979.226860][T16908] usb 1-1: USB disconnect, device number 104 [ 979.351223][ T6249] usb 7-1: USB disconnect, device number 9 [ 979.908029][T31943] xt_l2tp: invalid flags combination: 8 [ 979.939828][T31913] loop5: detected capacity change from 0 to 32768 [ 979.967480][T31913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11534 (31913) [ 980.025273][T31947] loop0: detected capacity change from 0 to 64 [ 980.082498][T31913] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 980.130956][T31913] BTRFS info (device loop5): using sha256 checksum algorithm [ 980.152236][T31949] No such timeout policy "syz1" [ 980.352673][T31913] BTRFS info (device loop5): enabling ssd optimizations [ 980.359672][T31913] BTRFS info (device loop5): turning on async discard [ 980.391013][T31913] BTRFS info (device loop5): enabling free space tree [ 980.429044][T31972] loop1: detected capacity change from 0 to 64 [ 980.476260][T31972] hfs: get root inode failed [ 980.603004][ T6149] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 980.651665][T31978] loop6: detected capacity change from 0 to 256 [ 980.691771][T31978] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 980.750553][T16965] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 980.940930][T16965] usb 1-1: Using ep0 maxpacket: 8 [ 980.970466][T16965] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 981.003726][T16965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.039005][T16965] usb 1-1: config 0 has no interface number 0 [ 981.072194][T16965] usb 1-1: config 0 interface 52 has no altsetting 0 [ 981.077976][T31937] loop3: detected capacity change from 0 to 32768 [ 981.126265][T31937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11545 (31937) [ 981.131348][T16965] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 981.208176][T16965] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 981.264881][T16965] usb 1-1: Product: syz [ 981.279299][T31937] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 981.286721][T16965] usb 1-1: SerialNumber: syz [ 981.338026][T16965] usb 1-1: config 0 descriptor?? [ 981.353188][T31937] BTRFS info (device loop3): using sha256 checksum algorithm [ 981.644211][T31937] BTRFS info (device loop3): enabling ssd optimizations [ 981.681261][T31937] BTRFS info (device loop3): turning on async discard [ 981.729919][T31937] BTRFS info (device loop3): enabling free space tree [ 981.859137][T16965] usb 1-1: USB disconnect, device number 105 [ 981.876305][T31976] loop2: detected capacity change from 0 to 32768 [ 981.911615][T31976] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 29668aa4-5c5c-48bb-900c-05b7e361944d [ 981.959932][T31976] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11558 (31976) [ 982.026513][T31976] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 982.047549][T31976] BTRFS info (device loop2): using sha256 checksum algorithm [ 982.095195][ T6142] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 982.253547][T31976] BTRFS info (device loop2): enabling ssd optimizations [ 982.264352][T31976] BTRFS info (device loop2): turning on async discard [ 982.271398][T31976] BTRFS info (device loop2): enabling free space tree [ 982.493923][T32045] binder: 32044:32045 ioctl 40046210 0 returned -14 [ 982.631193][ T6138] BTRFS info (device loop2): last unmount of filesystem 29668aa4-5c5c-48bb-900c-05b7e361944d [ 982.636501][ T6422] IPVS: starting estimator thread 0... [ 982.801699][T32050] IPVS: using max 25 ests per chain, 60000 per kthread [ 982.830994][T32056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11583'. [ 982.874671][ T6422] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 982.907447][T32056] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 982.944615][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 982.944638][ T30] audit: type=1326 audit(1774495867.728:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.5.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 982.954572][T32059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11585'. [ 982.979281][T32056] openvswitch: netlink: Message has 4 unknown bytes. [ 983.068083][ T30] audit: type=1326 audit(1774495867.759:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.5.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 983.116718][ T6422] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 983.125281][ T6422] usb 2-1: config 8 has no interface number 0 [ 983.153614][ T6422] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 983.197570][ T30] audit: type=1326 audit(1774495867.791:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.5.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 983.234445][ T6422] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 983.315167][ T6422] usb 2-1: config 8 interface 177 has no altsetting 0 [ 983.316068][ T30] audit: type=1326 audit(1774495867.801:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.5.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 983.354309][ T6422] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 983.413718][ T6422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.449339][T32073] loop0: detected capacity change from 0 to 256 [ 983.467069][T32051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 983.483939][T32051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 983.493393][ T30] audit: type=1326 audit(1774495867.801:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.5.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea899c799 code=0x7ffc0000 [ 983.568141][ C0] ir_toy 2-1:8.177: out urb status: -71 [ 983.668748][T32073] FAT-fs (loop0): Directory bread(block 64) failed [ 983.704818][T32073] FAT-fs (loop0): Directory bread(block 65) failed [ 983.707304][T32076] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 983.725585][T32073] FAT-fs (loop0): Directory bread(block 66) failed [ 983.760206][T32073] FAT-fs (loop0): Directory bread(block 67) failed [ 983.791574][T32073] FAT-fs (loop0): Directory bread(block 68) failed [ 983.847062][T32073] FAT-fs (loop0): Directory bread(block 69) failed [ 983.855105][T32073] FAT-fs (loop0): Directory bread(block 70) failed [ 983.899690][T32073] FAT-fs (loop0): Directory bread(block 71) failed [ 983.932930][T32073] FAT-fs (loop0): Directory bread(block 72) failed [ 983.939535][T32073] FAT-fs (loop0): Directory bread(block 73) failed [ 984.058417][T32088] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11598'. [ 984.103295][ T6422] ir_toy 2-1:8.177: could not write reset command: -110 [ 984.132043][ T6422] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 984.151615][ T30] audit: type=1800 audit(1774495868.977:2077): pid=32073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11591" name="bus" dev="loop0" ino=1048804 res=0 errno=0 [ 984.151848][ T6422] usb 2-1: USB disconnect, device number 126 [ 984.505650][T32098] loop1: detected capacity change from 0 to 22 [ 984.506934][T32096] tmpfs: User quota inode hardlimit too large. [ 984.539210][T32098] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 984.597828][T32098] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 984.803319][T32080] loop5: detected capacity change from 0 to 32768 [ 984.871485][T32080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11593 (32080) [ 984.945493][T32080] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 985.008179][T32080] BTRFS info (device loop5): using sha256 checksum algorithm [ 985.189614][T32080] BTRFS info (device loop5): enabling ssd optimizations [ 985.237540][T32080] BTRFS info (device loop5): turning on async discard [ 985.244859][T32080] BTRFS info (device loop5): enabling free space tree [ 985.599263][ T6149] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 985.932689][T32155] loop6: detected capacity change from 0 to 512 [ 985.988049][T32162] openvswitch: netlink: Unexpected mask (mask=400840, allowed=410048) [ 986.075623][T32155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 986.203989][T32155] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.11625: Unimplemented hash flags: 0x0001 [ 986.238205][T32155] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.11625: Corrupt directory, running e2fsck is recommended [ 986.313951][T32170] netlink: 'syz.1.11630': attribute type 2 has an invalid length. [ 986.321851][T32170] netlink: 'syz.1.11630': attribute type 2 has an invalid length. [ 986.377514][T32170] netlink: 'syz.1.11630': attribute type 1 has an invalid length. [ 986.457412][T32170] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11630'. [ 986.715886][T21865] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.807910][T32124] loop3: detected capacity change from 0 to 32768 [ 986.918164][T32124] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 987.174862][T32124] XFS (loop3): Ending clean mount [ 987.257461][T32124] XFS (loop3): Quotacheck needed: Please wait. [ 987.380948][T32124] XFS (loop3): Quotacheck: Done. [ 987.597237][ T6142] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 987.764833][T32229] loop1: detected capacity change from 0 to 256 [ 988.187124][T32245] unsupported nla_type 142 [ 988.448024][T32257] loop5: detected capacity change from 0 to 64 [ 988.506064][T32257] syz.5.11670: attempt to access beyond end of device [ 988.506064][T32257] loop5: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 988.608875][T32257] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 989.242726][T32247] loop2: detected capacity change from 0 to 32768 [ 989.280789][T32284] loop6: detected capacity change from 0 to 1024 [ 989.362652][T32247] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 989.449075][T32247] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 989.483816][T32247] XFS (loop2): Ending clean mount [ 989.500295][T21865] hfsplus: bad catalog entry type [ 989.533268][T32292] loop0: detected capacity change from 0 to 512 [ 989.603813][T32292] EXT4-fs: Ignoring removed i_version option [ 989.664403][ T6138] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 989.709421][T32292] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.11685: inode has both inline data and extents flags [ 989.737857][T32292] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 989.757528][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 989.773220][ C0] EXT4-fs (loop0): initial error at time 1774495874: ext4_orphan_get:1391: inode 15 [ 989.782732][ C0] EXT4-fs (loop0): last error at time 1774495874: ext4_orphan_get:1391: inode 15 [ 989.790448][T32303] loop1: detected capacity change from 0 to 256 [ 989.795174][T32292] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.11685: couldn't read orphan inode 15 (err -117) [ 989.811029][T32292] loop0: lost filesystem error report for type 5 error -117 [ 989.814940][T32292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.829631][T32303] exfat: Deprecated parameter 'utf8' [ 989.841331][T32303] exfat: Deprecated parameter 'utf8' [ 989.919666][ T13] hfsplus: b-tree write err: -5, ino 25 [ 989.927709][ T13] hfsplus: b-tree write err: -5, ino 4 [ 989.947040][ T13] hfsplus: b-tree write err: -5, ino 2 [ 989.957359][T32303] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 990.137984][T32273] loop5: detected capacity change from 0 to 32768 [ 990.182459][T32307] loop3: detected capacity change from 0 to 128 [ 990.195279][ T6135] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.215073][T32273] (syz.5.11676,32273,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 990.241835][T32307] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 990.267017][T32273] (syz.5.11676,32273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 990.310866][T32307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 990.312067][ T77] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 990.390179][ T77] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 990.484963][T32273] JBD2: Ignoring recovery information on journal [ 990.673930][T32312] sctp: [Deprecated]: syz.2.11690 (pid 32312) Use of int in maxseg socket option. [ 990.673930][T32312] Use struct sctp_assoc_value instead [ 990.687041][ T77] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 990.742998][T32273] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 990.771215][ T77] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 991.053945][ T77] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 991.133518][ T77] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 991.170857][ T6149] ocfs2: Unmounting device (7,5) on (node local) [ 991.184854][T32325] overlayfs: cannot append lower layer [ 991.219239][T16937] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 991.240782][T13118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.252903][T13118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.262806][T13118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.271280][T13118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.279288][T13118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 991.475134][T16937] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 991.498022][ T77] bond0: (slave netdevsim0): Releasing backup interface [ 991.504029][T16937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.536642][ T77] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 991.554039][T16937] usb 1-1: Product: syz [ 991.558443][T16937] usb 1-1: Manufacturer: syz [ 991.580770][ T77] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 991.581067][T16937] usb 1-1: SerialNumber: syz [ 991.636683][T16937] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 991.672277][ T6249] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 991.747416][T32328] vxcan1 speed is unknown, defaulting to 1000 [ 991.790535][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 991.965626][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11700'. [ 991.985572][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 992.014545][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 992.033202][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 992.063128][ T10] usb 2-1: config 220 has no interface number 2 [ 992.080276][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 992.115226][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 992.147182][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 992.157264][ T6397] usb 1-1: USB disconnect, device number 106 [ 992.200343][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 992.232753][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 992.257447][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.265498][ T10] usb 2-1: Product: syz [ 992.276404][ T10] usb 2-1: Manufacturer: syz [ 992.283138][ T10] usb 2-1: SerialNumber: syz [ 992.571792][ T10] usb 2-1: selecting invalid altsetting 0 [ 992.607216][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 992.634785][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 992.685936][ T6249] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 992.706311][ T10] usb 2-1: selecting invalid altsetting 0 [ 992.715234][ T6249] ath9k_htc: Failed to initialize the device [ 992.729151][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 992.742968][ T6397] usb 1-1: ath9k_htc: USB layer deinitialized [ 992.773233][ T10] usb 2-1: USB disconnect, device number 127 [ 993.245743][T32350] syz.3.11712 (32350): drop_caches: 2 [ 993.286130][T13118] Bluetooth: hci4: command tx timeout [ 993.374875][T32372] loop2: detected capacity change from 0 to 128 [ 993.381146][ T6397] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 993.397463][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.446253][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.483549][ T77] bond0 (unregistering): Released all slaves [ 993.512437][ T77] bond1 (unregistering): Released all slaves [ 993.525913][ T6397] usb 1-1: Using ep0 maxpacket: 32 [ 993.547772][ T6397] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 993.568754][ T6397] usb 1-1: config 0 interface 0 has no altsetting 0 [ 993.578307][ T6397] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 993.599899][T32352] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 993.607932][ T6397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.635229][ T6397] usb 1-1: config 0 descriptor?? [ 993.761928][ T77] m>e5n: left promiscuous mode [ 993.827114][T32380] netlink: 388 bytes leftover after parsing attributes in process `syz.3.11726'. [ 993.911177][ T6397] usbhid 1-1:0.0: can't add hid device: -71 [ 993.940423][ T6397] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 994.030202][ T6397] usb 1-1: USB disconnect, device number 107 [ 994.517231][ T30] audit: type=1326 audit(1774495879.885:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 994.629387][ T30] audit: type=1326 audit(1774495879.885:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 994.701187][ T30] audit: type=1326 audit(1774495879.885:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 994.796015][T32418] loop3: detected capacity change from 0 to 1024 [ 994.802652][ T30] audit: type=1326 audit(1774495879.885:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 994.802743][ T30] audit: type=1326 audit(1774495879.885:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 994.802794][ T30] audit: type=1326 audit(1774495879.885:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 994.802844][ T30] audit: type=1326 audit(1774495879.885:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 994.802894][ T30] audit: type=1326 audit(1774495879.885:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32407 comm="syz.3.11735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f253859c799 code=0x7ffc0000 [ 995.007102][T32418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.194581][T32328] chnl_net:caif_netlink_parms(): no params data found [ 995.225373][ T6142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.267286][T13118] Bluetooth: hci4: command tx timeout [ 995.609520][T32447] x_tables: unsorted underflow at hook 2 [ 995.626690][T32441] loop3: detected capacity change from 0 to 128 [ 996.364019][T32328] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.371356][T32328] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.401284][T32328] bridge_slave_0: entered allmulticast mode [ 996.461171][T32328] bridge_slave_0: entered promiscuous mode [ 996.564646][ T77] hsr_slave_0: left promiscuous mode [ 996.620243][ T77] hsr_slave_1: left promiscuous mode [ 996.647037][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.714725][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.829533][ T6249] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 997.014701][ T6249] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 997.034079][ T6249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.065178][ T6249] usb 1-1: Product: syz [ 997.075325][ T6249] usb 1-1: Manufacturer: syz [ 997.094906][ T6249] usb 1-1: SerialNumber: syz [ 997.135845][ T6249] usb 1-1: config 0 descriptor?? [ 997.249145][T13118] Bluetooth: hci4: command tx timeout [ 997.288339][T32475] loop5: detected capacity change from 0 to 32768 [ 997.297161][T32475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11760 (32475) [ 997.317813][T32475] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 997.317856][T32475] BTRFS info (device loop5): using sha256 checksum algorithm [ 997.378583][ T6249] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 997.442813][T32475] BTRFS info (device loop5): enabling ssd optimizations [ 997.442856][T32475] BTRFS info (device loop5): turning on async discard [ 997.442879][T32475] BTRFS info (device loop5): enabling free space tree [ 997.518798][T32483] loop3: detected capacity change from 0 to 32768 [ 997.578626][ T6249] usb 1-1: USB disconnect, device number 108 [ 997.582936][ T77] team0 (unregistering): Port device team_slave_1 removed [ 997.592766][ T6149] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 997.732236][T32483] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 997.762976][T32523] loop1: detected capacity change from 0 to 64 [ 997.774151][ T77] team0 (unregistering): Port device team_slave_0 removed [ 998.078267][T32483] XFS (loop3): Ending clean mount [ 998.331870][ T6142] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 998.740034][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11762'. [ 998.758215][T32328] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.790453][T32328] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.828181][T32328] bridge_slave_1: entered allmulticast mode [ 998.857277][T32328] bridge_slave_1: entered promiscuous mode [ 999.011843][T32546] xt_limit: Overflow, try lower: 268435456/134217728 [ 999.062988][T32328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.110363][T32328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.241956][T13118] Bluetooth: hci4: command tx timeout [ 999.280360][T32328] team0: Port device team_slave_0 added [ 999.319205][T32328] team0: Port device team_slave_1 added [ 999.356848][T32554] loop2: detected capacity change from 0 to 2048 [ 999.363461][T16965] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 999.386267][ T6397] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 999.410007][T32554] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 999.452866][T32554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 999.530059][T32328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.553551][T16965] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 999.572943][ T6397] usb 6-1: Using ep0 maxpacket: 16 [ 999.583900][T32328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.589048][T16965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 999.650872][T32328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.662644][ T6397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 999.721814][ T6397] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 999.725413][T32328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.753705][T32328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.792145][ T6397] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 999.855526][T16965] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 999.872710][ T6397] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.882597][T32328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.887178][T16965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.921465][ T6397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 999.963616][ T30] audit: type=1326 audit(1774495885.564:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32567 comm="syz.0.11787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1a99c799 code=0x7ffc0000 [ 999.986968][ T6397] usb 6-1: SerialNumber: syz [ 999.991715][T16965] usb 4-1: Product: syz [ 1000.004728][T16965] usb 4-1: Manufacturer: syz [ 1000.009376][T16965] usb 4-1: SerialNumber: syz [ 1000.065201][T32552] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1000.087102][ T30] audit: type=1326 audit(1774495885.564:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32567 comm="syz.0.11787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1a99c799 code=0x7ffc0000 [ 1000.122064][ T6397] cdc_acm 6-1:1.0: skipping garbage [ 1000.133719][ T6397] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1000.150826][T16965] usb 4-1: config 0 descriptor?? [ 1000.156100][ T30] audit: type=1326 audit(1774495885.574:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32567 comm="syz.0.11787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f6e1a99c799 code=0x7ffc0000 [ 1000.219963][T32576] fuse: Bad value for 'group_id' [ 1000.242366][ T30] audit: type=1326 audit(1774495885.574:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32567 comm="syz.0.11787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1a99c799 code=0x7ffc0000 [ 1000.246173][T32576] fuse: Bad value for 'group_id' [ 1000.312573][T32328] hsr_slave_0: entered promiscuous mode [ 1000.339200][T32328] hsr_slave_1: entered promiscuous mode [ 1000.340930][ T6397] usb 6-1: USB disconnect, device number 114 [ 1000.352645][T32328] debugfs: 'hsr0' already exists in 'hsr' [ 1000.383044][T16965] powermate: unknown product id 0240 [ 1000.425101][T32328] Cannot create hsr debugfs directory [ 1000.447387][T16965] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 1000.478038][T32577] loop0: detected capacity change from 0 to 4096 [ 1000.482560][ C1] powermate: config urb returned -71 [ 1000.490265][ C1] powermate: config urb returned -71 [ 1000.495897][ C1] powermate: config urb returned -71 [ 1000.501478][ C1] powermate: config urb returned -71 [ 1000.552972][T16965] usb 4-1: USB disconnect, device number 91 [ 1000.559176][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1000.823422][T32585] loop2: detected capacity change from 0 to 64 [ 1001.151888][T32594] loop5: detected capacity change from 0 to 256 [ 1001.187546][T32594] exfat: Deprecated parameter 'namecase' [ 1001.250643][T32594] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 1001.741237][T32328] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1001.826863][T32328] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1001.907198][T32328] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1001.979707][T32328] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1002.476076][T32328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.584953][T32328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.607224][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.614458][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.649532][T16965] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1002.699045][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.706220][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.775551][T32658] netlink: 'syz.3.11819': attribute type 10 has an invalid length. [ 1002.817302][T32658] veth0_vlan: left promiscuous mode [ 1002.823604][T16965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1002.843360][T32658] veth0_vlan: entered promiscuous mode [ 1002.856768][T16965] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1002.871449][T32658] team0: Device veth0_vlan failed to register rx_handler [ 1002.888462][T16965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.899143][T16965] usb 3-1: Product: syz [ 1002.903492][T16965] usb 3-1: Manufacturer: syz [ 1002.921692][T16965] usb 3-1: SerialNumber: syz [ 1002.949907][T16965] usb 3-1: config 0 descriptor?? [ 1002.993897][T16965] hub 3-1:0.0: bad descriptor, ignoring hub [ 1003.000305][T16965] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1003.082476][T16965] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57 [ 1003.794826][ T49] [ 1003.797205][ T49] ====================================================== [ 1003.804305][ T49] WARNING: possible circular locking dependency detected [ 1003.811324][ T49] syzkaller #0 Tainted: G L [ 1003.817299][ T49] ------------------------------------------------------ [ 1003.824314][ T49] kworker/u8:3/49 is trying to acquire lock: [ 1003.830377][ T49] ffff888032392950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280 [ 1003.839995][ T49] [ 1003.839995][ T49] but task is already holding lock: [ 1003.847378][ T49] ffff888032394b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1003.857435][ T49] [ 1003.857435][ T49] which lock already depends on the new lock. [ 1003.857435][ T49] [ 1003.867842][ T49] [ 1003.867842][ T49] the existing dependency chain (in reverse order) is: [ 1003.876954][ T49] [ 1003.876954][ T49] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1003.885516][ T49] percpu_down_read_internal+0x48/0x1c0 [ 1003.891660][ T49] ext4_writepages+0x205/0x3b0 [ 1003.896970][ T49] do_writepages+0x32e/0x550 [ 1003.902194][ T49] __writeback_single_inode+0x133/0x11a0 [ 1003.908435][ T49] writeback_single_inode+0x4ac/0xdc0 [ 1003.914348][ T49] write_inode_now+0x1c2/0x290 [ 1003.919747][ T49] iput+0x8c1/0xe80 [ 1003.924090][ T49] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1003.929992][ T49] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1003.936413][ T49] __ext4_expand_extra_isize+0x30d/0x400 [ 1003.942570][ T49] __ext4_mark_inode_dirty+0x45c/0x730 [ 1003.948549][ T49] ext4_evict_inode+0x7a1/0xeb0 [ 1003.953943][ T49] evict+0x61e/0xb10 [ 1003.958374][ T49] ext4_orphan_cleanup+0xc38/0x1470 [ 1003.964097][ T49] ext4_fill_super+0x59ff/0x6320 [ 1003.969564][ T49] get_tree_bdev_flags+0x431/0x4f0 [ 1003.975189][ T49] vfs_get_tree+0x92/0x2a0 [ 1003.980121][ T49] do_new_mount+0x341/0xd30 [ 1003.985147][ T49] __se_sys_mount+0x31d/0x420 [ 1003.990346][ T49] do_syscall_64+0x14d/0xf80 [ 1003.995453][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.001870][ T49] [ 1004.001870][ T49] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 1004.009943][ T49] down_read+0x47/0x2e0 [ 1004.014666][ T49] ext4_setattr+0x888/0x1c60 [ 1004.020146][ T49] notify_change+0xc1a/0xf40 [ 1004.025260][ T49] chown_common+0x466/0x6b0 [ 1004.030285][ T49] do_fchownat+0x14c/0x250 [ 1004.035221][ T49] __x64_sys_chown+0x82/0xa0 [ 1004.040335][ T49] do_syscall_64+0x14d/0xf80 [ 1004.045449][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.051856][ T49] [ 1004.051856][ T49] -> #0 (jbd2_handle){++++}-{0:0}: [ 1004.059162][ T49] __lock_acquire+0x15a5/0x2cf0 [ 1004.064532][ T49] lock_acquire+0xf0/0x2e0 [ 1004.069464][ T49] wait_transaction_locked+0x1c2/0x280 [ 1004.075531][ T49] start_this_handle+0x7dc/0x2290 [ 1004.081077][ T49] jbd2__journal_start+0x2c0/0x5b0 [ 1004.086725][ T49] __ext4_journal_start_sb+0x203/0x620 [ 1004.092710][ T49] ext4_do_writepages+0xf94/0x46e0 [ 1004.098338][ T49] ext4_writepages+0x241/0x3b0 [ 1004.103622][ T49] do_writepages+0x32e/0x550 [ 1004.108743][ T49] __writeback_single_inode+0x133/0x11a0 [ 1004.115084][ T49] writeback_sb_inodes+0x992/0x1a20 [ 1004.121152][ T49] __writeback_inodes_wb+0x111/0x240 [ 1004.126963][ T49] wb_writeback+0x46a/0xb70 [ 1004.131986][ T49] wb_workfn+0xb4c/0xf50 [ 1004.136746][ T49] process_scheduled_works+0xb6e/0x18c0 [ 1004.142820][ T49] worker_thread+0xa53/0xfc0 [ 1004.147960][ T49] kthread+0x388/0x470 [ 1004.152544][ T49] ret_from_fork+0x51e/0xb90 [ 1004.157663][ T49] ret_from_fork_asm+0x1a/0x30 [ 1004.162961][ T49] [ 1004.162961][ T49] other info that might help us debug this: [ 1004.162961][ T49] [ 1004.173188][ T49] Chain exists of: [ 1004.173188][ T49] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 1004.173188][ T49] [ 1004.186601][ T49] Possible unsafe locking scenario: [ 1004.186601][ T49] [ 1004.194045][ T49] CPU0 CPU1 [ 1004.199429][ T49] ---- ---- [ 1004.204786][ T49] rlock(&sbi->s_writepages_rwsem); [ 1004.210075][ T49] lock(&ei->xattr_sem); [ 1004.216926][ T49] lock(&sbi->s_writepages_rwsem); [ 1004.224641][ T49] lock(jbd2_handle); [ 1004.228709][ T49] [ 1004.228709][ T49] *** DEADLOCK *** [ 1004.228709][ T49] [ 1004.236929][ T49] 4 locks held by kworker/u8:3/49: [ 1004.242032][ T49] #0: ffff88801f6f0948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1004.253291][ T49] #1: ffffc90000b97c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1004.265766][ T49] #2: ffff8880323960e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 1004.276348][ T49] #3: ffff888032394b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1004.286827][ T49] [ 1004.286827][ T49] stack backtrace: [ 1004.292731][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.292763][ T49] Tainted: [L]=SOFTLOCKUP [ 1004.292773][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1004.292789][ T49] Workqueue: writeback wb_workfn (flush-8:0) [ 1004.292826][ T49] Call Trace: [ 1004.292838][ T49] [ 1004.292848][ T49] dump_stack_lvl+0xe8/0x150 [ 1004.292882][ T49] print_circular_bug+0x2e1/0x300 [ 1004.292921][ T49] check_noncircular+0x12e/0x150 [ 1004.292960][ T49] __lock_acquire+0x15a5/0x2cf0 [ 1004.292995][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293022][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 1004.293047][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293084][ T49] lock_acquire+0xf0/0x2e0 [ 1004.293112][ T49] ? wait_transaction_locked+0x1a9/0x280 [ 1004.293152][ T49] ? wait_transaction_locked+0x1a9/0x280 [ 1004.293183][ T49] wait_transaction_locked+0x1c2/0x280 [ 1004.293212][ T49] ? wait_transaction_locked+0x1a9/0x280 [ 1004.293244][ T49] ? __pfx_wait_transaction_locked+0x10/0x10 [ 1004.293274][ T49] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1004.293299][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293328][ T49] ? __pfx_stack_trace_save+0x10/0x10 [ 1004.293355][ T49] start_this_handle+0x7dc/0x2290 [ 1004.293387][ T49] ? process_scheduled_works+0xb6e/0x18c0 [ 1004.293425][ T49] ? __pfx_start_this_handle+0x10/0x10 [ 1004.293461][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293488][ T49] ? rcu_is_watching+0x15/0xb0 [ 1004.293520][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293546][ T49] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1004.293569][ T49] ? jbd2__journal_start+0x1db/0x5b0 [ 1004.293599][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293625][ T49] ? kmem_cache_alloc_noprof+0x307/0x650 [ 1004.293649][ T49] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1004.293674][ T49] jbd2__journal_start+0x2c0/0x5b0 [ 1004.293703][ T49] __ext4_journal_start_sb+0x203/0x620 [ 1004.293738][ T49] ext4_do_writepages+0xf94/0x46e0 [ 1004.293789][ T49] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1004.293829][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293861][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293890][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.293919][ T49] ext4_writepages+0x241/0x3b0 [ 1004.293952][ T49] ? __pfx_ext4_writepages+0x10/0x10 [ 1004.293992][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294018][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 1004.294041][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294068][ T49] ? __pfx_ext4_writepages+0x10/0x10 [ 1004.294105][ T49] do_writepages+0x32e/0x550 [ 1004.294141][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294168][ T49] ? reacquire_held_locks+0x104/0x190 [ 1004.294203][ T49] ? writeback_sb_inodes+0x477/0x1a20 [ 1004.294238][ T49] __writeback_single_inode+0x133/0x11a0 [ 1004.294270][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 1004.294296][ T49] writeback_sb_inodes+0x992/0x1a20 [ 1004.294326][ T49] ? __dev_queue_xmit+0x277/0x3890 [ 1004.294373][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1004.294402][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294451][ T49] ? __pfx_down_read_trylock+0x10/0x10 [ 1004.294474][ T49] ? __pfx_move_expired_inodes+0x10/0x10 [ 1004.294507][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294536][ T49] __writeback_inodes_wb+0x111/0x240 [ 1004.294571][ T49] wb_writeback+0x46a/0xb70 [ 1004.294603][ T49] ? queue_io+0x221/0x4a0 [ 1004.294636][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 1004.294665][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 1004.294696][ T49] wb_workfn+0xb4c/0xf50 [ 1004.294730][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 1004.294754][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294781][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294810][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294837][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 1004.294864][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294892][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294920][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.294947][ T49] ? process_scheduled_works+0xa8d/0x18c0 [ 1004.294977][ T49] ? process_scheduled_works+0xa8d/0x18c0 [ 1004.295007][ T49] process_scheduled_works+0xb6e/0x18c0 [ 1004.295053][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 1004.295091][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.295117][ T49] ? assign_work+0x3d5/0x5e0 [ 1004.295148][ T49] worker_thread+0xa53/0xfc0 [ 1004.295188][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.295219][ T49] kthread+0x388/0x470 [ 1004.295241][ T49] ? __pfx_worker_thread+0x10/0x10 [ 1004.295271][ T49] ? __pfx_kthread+0x10/0x10 [ 1004.295293][ T49] ret_from_fork+0x51e/0xb90 [ 1004.295325][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 1004.295353][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.295380][ T49] ? __switch_to+0xc7d/0x1450 [ 1004.295407][ T49] ? __pfx_kthread+0x10/0x10 [ 1004.295429][ T49] ret_from_fork_asm+0x1a/0x30 [ 1004.295473][ T49] SYZFAIL: failed to send rpc fd=3 want=21960 sent=0 n=-1 (errno 32: Broken pipe) [ 1005.643090][ T1125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.724476][ T1125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.780611][ T1125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.884494][ T1125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.036477][ T1125] bridge_slave_1: left allmulticast mode [ 1006.044320][ T1125] bridge_slave_1: left promiscuous mode [ 1006.050108][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.065805][ T1125] bond_slave_0: left promiscuous mode [ 1006.071639][ T1125] bond_slave_1: left promiscuous mode [ 1006.321396][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.333800][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.344109][ T1125] bond0 (unregistering): Released all slaves [ 1006.353114][ T1125] bond1 (unregistering): Released all slaves [ 1006.943287][ T1125] hsr_slave_0: left promiscuous mode [ 1006.950977][ T1125] hsr_slave_1: left promiscuous mode [ 1006.960224][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.969247][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.978101][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.985911][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.998367][ T1125] veth1_macvtap: left promiscuous mode [ 1007.006334][ T1125] veth0_macvtap: left promiscuous mode [ 1007.011992][ T1125] veth1_vlan: left promiscuous mode [ 1007.188029][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1007.200310][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1007.246119][ T1125] team0 (unregistering): Port device batadv0 removed [ 1007.259770][ T1125] team0 (unregistering): Port device dummy0 removed [ 1007.554394][ T1125] IPVS: stop unused estimator thread 0... [ 1007.729211][T16966] usb 3-1: USB disconnect, device number 104 [ 1007.867058][ T1125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.918741][ T1125] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.966276][ T1125] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.063475][ T1125] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.204147][ T1125] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1008.296654][ T1125] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1008.377823][ T1125] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1008.596854][ T1125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.658237][ T1125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.698351][ T1125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.773644][ T1125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.887309][ T1125] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.949402][ T1125] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.990239][ T1125] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.046329][ T1125] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.133086][ T1125] bridge_slave_1: left allmulticast mode [ 1009.145189][ T1125] bridge_slave_1: left promiscuous mode [ 1009.151403][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.160771][ T1125] bridge_slave_0: left allmulticast mode [ 1009.167541][ T1125] bridge_slave_0: left promiscuous mode [ 1009.173275][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.183652][ T1125] bridge_slave_1: left allmulticast mode [ 1009.190843][ T1125] bridge_slave_1: left promiscuous mode [ 1009.197016][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.206136][ T1125] bridge_slave_0: left allmulticast mode [ 1009.211792][ T1125] bridge_slave_0: left promiscuous mode [ 1009.219033][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.237070][ T1125] bridge_slave_1: left allmulticast mode [ 1009.243105][ T1125] bridge_slave_1: left promiscuous mode [ 1009.248808][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.265351][ T1125] bridge_slave_0: left allmulticast mode [ 1009.271295][ T1125] bridge_slave_0: left promiscuous mode [ 1009.277030][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.288029][ T1125] bridge_slave_1: left allmulticast mode [ 1009.294023][ T1125] bridge_slave_1: left promiscuous mode [ 1009.301627][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.310031][ T1125] bridge_slave_0: left allmulticast mode [ 1009.315662][ T1125] bridge_slave_0: left promiscuous mode [ 1009.321394][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.492848][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.503445][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.513770][ T1125] bond0 (unregistering): Released all slaves [ 1009.577897][ T1125] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1009.664695][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.675258][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.685315][ T1125] bond0 (unregistering): Released all slaves [ 1009.694559][ T1125] bond1 (unregistering): Released all slaves [ 1010.064678][ T1125] bond0 (unregistering): Released all slaves [ 1010.073493][ T1125] bond1 (unregistering): Released all slaves [ 1010.226043][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.236208][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.246770][ T1125] bond0 (unregistering): Released all slaves [ 1010.255421][ T1125] bond1 (unregistering): Released all slaves [ 1010.354935][ T1125] team0: Port device geneve1 removed [ 1010.502962][ T1125] bond0 (unregistering): (slave 1@): Releasing backup interface [ 1010.512961][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.523461][ T1125] bond0 (unregistering): Released all slaves [ 1010.680239][ T1125] !: left promiscuous mode [ 1010.712609][ T1125] m1Ie5n: left promiscuous mode [ 1010.758334][ T1125] m1Ie5n: left promiscuous mode [ 1012.035047][ T1125] hsr_slave_0: left promiscuous mode [ 1012.040998][ T1125] hsr_slave_1: left promiscuous mode [ 1012.048857][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.056695][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.070360][ T1125] hsr_slave_0: left promiscuous mode [ 1012.077159][ T1125] hsr_slave_1: left promiscuous mode [ 1012.088049][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.095710][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.104332][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.112429][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.122127][ T1125] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1012.132810][ T1125] hsr_slave_0: left promiscuous mode [ 1012.140348][ T1125] hsr_slave_1: left promiscuous mode [ 1012.150908][ T1125] hsr_slave_0: left promiscuous mode [ 1012.158050][ T1125] hsr_slave_1: left promiscuous mode [ 1012.163904][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.172100][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.180923][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.188634][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.200899][ T1125] hsr_slave_0: left promiscuous mode [ 1012.208183][ T1125] hsr_slave_1: left promiscuous mode [ 1012.214305][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.221683][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.229815][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.237532][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.262674][ T1125] veth1_macvtap: left promiscuous mode [ 1012.268180][ T1125] veth0_macvtap: left promiscuous mode [ 1012.275674][ T1125] veth1_vlan: left promiscuous mode [ 1012.281570][ T1125] veth0_vlan: left promiscuous mode [ 1012.287730][ T1125] `: left allmulticast mode [ 1012.293082][ T1125] veth1_macvtap: left promiscuous mode [ 1012.298813][ T1125] veth0_macvtap: left promiscuous mode [ 1012.305134][ T1125] veth1_vlan: left allmulticast mode [ 1012.311278][ T1125] veth1_vlan: left promiscuous mode [ 1012.317237][ T1125] veth0_macvtap: left promiscuous mode [ 1012.322832][ T1125] veth1_vlan: left allmulticast mode [ 1012.328625][ T1125] veth1_vlan: left promiscuous mode [ 1012.333827][ T1125] veth0_vlan: left promiscuous mode [ 1012.596403][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1012.608078][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1012.748899][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1012.761504][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1012.799825][ T77] smc: removing ib device syz2 [ 1013.059252][ T1125] team0 (unregistering): Port device macvlan0 removed [ 1013.115800][ T1125] team_slave_1 (unregistering): left allmulticast mode [ 1013.123614][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1013.134945][ T1125] team_slave_0 (unregistering): left allmulticast mode [ 1013.142639][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1013.210070][ T1125] pimreg (unregistering): left allmulticast mode [ 1013.265928][ T1125] team0 (unregistering): Port device macvlan0 removed [ 1013.311997][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1013.333914][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1013.390876][T16964] vxcan1 speed is unknown, defaulting to 1000 [ 1013.397004][T16964] syz2: Port: 1 Link DOWN