last executing test programs: 5m46.020222625s ago: executing program 0 (id=5077): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000008, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 5m45.850988655s ago: executing program 0 (id=5081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5m45.696673744s ago: executing program 0 (id=5085): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x102, 0x0}) 5m45.503493026s ago: executing program 0 (id=5088): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m45.282971869s ago: executing program 0 (id=5090): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m44.728500751s ago: executing program 0 (id=5097): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000f1401b1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 5m44.287258538s ago: executing program 32 (id=5097): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000f1401b1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2m25.4368582s ago: executing program 3 (id=8192): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) 2m25.26858659s ago: executing program 3 (id=8195): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) 2m25.086981161s ago: executing program 3 (id=8198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2000c}]}}}]}, 0x44}}, 0x48000) 2m24.842247015s ago: executing program 3 (id=8203): munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlock(&(0x7f0000cee000/0x3000)=nil, 0x3000) 2m24.636373918s ago: executing program 3 (id=8206): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m23.570856141s ago: executing program 3 (id=8224): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000180)=0x7ffff) 2m8.419307444s ago: executing program 33 (id=8224): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000180)=0x7ffff) 4.364610852s ago: executing program 2 (id=10397): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0xf, 0x1000, 0x4, 0x1}}) 4.152350085s ago: executing program 2 (id=10400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d440012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c0001400000000000000001140023800a00010071756f7461000000040002800800034000000114"], 0xd0}}, 0x20050800) 3.840055933s ago: executing program 2 (id=10404): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.296161004s ago: executing program 5 (id=10419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07001f40800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 2.129618654s ago: executing program 5 (id=10421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_stats={0x1d, 0x6, [0x37, 0x2, 0x1, 0x7, 0x4, 0xffffffff]}}) 2.03723283s ago: executing program 2 (id=10423): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00') 1.906271378s ago: executing program 5 (id=10426): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c6394f90324fc600b0002400a000000053582c137153e37020c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.818920263s ago: executing program 4 (id=10427): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 1.808309993s ago: executing program 2 (id=10428): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_DF={0xfffffffffffffe7b, 0xd, 0xc3}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1.503291711s ago: executing program 4 (id=10432): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f00000000c0)) 1.455908404s ago: executing program 5 (id=10433): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x3f}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.455236534s ago: executing program 6 (id=10434): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x6c}}], 0x1, 0x0) 1.168078051s ago: executing program 4 (id=10436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c054}, 0x40) 1.167857101s ago: executing program 1 (id=10437): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98) 1.154768172s ago: executing program 6 (id=10438): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000008f500)={0x1, &(0x7f000008f3c0)=[{0xc000002, 0x0, 0x0, 0x9, 0xffff9df3}]}) 1.02587969s ago: executing program 1 (id=10439): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r0, 0x9d0, 0x4000000006, 0x2) 934.959385ms ago: executing program 4 (id=10440): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x3a, 0x1f, 0x0, 0x0) 930.740205ms ago: executing program 6 (id=10441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x14, 0x1, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 783.939114ms ago: executing program 1 (id=10442): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f0000000300)) 667.661431ms ago: executing program 6 (id=10443): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x9c, &(0x7f0000000200), &(0x7f0000000040)=0x4) 629.355263ms ago: executing program 4 (id=10444): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xee8, 0x4, 0x4, 0x0, 0x2}) 600.579405ms ago: executing program 1 (id=10445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mq_getsetattr(r0, 0x0, 0x0) 430.393464ms ago: executing program 6 (id=10446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}, 0x0, 0xfffc}, 0x90) 356.158919ms ago: executing program 4 (id=10447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x8927, &(0x7f0000000000)="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") 342.4928ms ago: executing program 1 (id=10448): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) getuid() 208.176488ms ago: executing program 5 (id=10449): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 204.567958ms ago: executing program 2 (id=10450): keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0x0) 185.541719ms ago: executing program 6 (id=10451): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 118.359203ms ago: executing program 1 (id=10452): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123343, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x8, 0x0, 0x9, 0xfffffffe, 0x18, "8aeab061cdc597deff093100e0ff00"}) 0s ago: executing program 5 (id=10453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a20000000000a05000000000000000000010000000900010073797a300000000014000000020a010100000000000000000100000920000000000a010500c285501527f0a2b40000090900f1ff72797a300000000020000000050a05000000000000000000010000060900010073797a30"], 0x9c}}, 0x0) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.5.8271'. [ 572.590404][ T5567] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 572.669411][T25593] binfmt_misc: register: failed to install interpreter file ./file2 [ 572.851853][ T26] audit: type=1326 audit(572.816:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.4.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 572.882191][ T26] audit: type=1326 audit(572.816:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.4.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 572.932906][ T26] audit: type=1326 audit(572.816:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.4.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 572.984096][ T26] audit: type=1326 audit(572.816:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.4.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 573.025754][ T5567] radio-usb-si4713: probe of 3-1:0.0 failed with error -71 [ 573.044621][ T5567] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 573.062137][ T26] audit: type=1326 audit(572.816:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.4.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 573.097976][ T5567] usb 3-1: USB disconnect, device number 34 [ 573.392690][ T26] audit: type=1326 audit(573.356:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25645 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 573.417467][ T4989] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 573.427258][ T26] audit: type=1326 audit(573.356:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25645 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 573.471172][ T26] audit: type=1326 audit(573.356:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25645 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 573.527702][ T26] audit: type=1326 audit(573.356:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25645 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 573.601310][ T4989] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 573.621267][ T4989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.659952][ T4989] usb 6-1: Product: syz [ 573.664175][ T4989] usb 6-1: Manufacturer: syz [ 573.671077][ T4989] usb 6-1: SerialNumber: syz [ 573.685309][ T4989] usb 6-1: config 0 descriptor?? [ 573.736032][T25662] vivid-000: ================= START STATUS ================= [ 573.767509][T25662] vivid-000: Radio HW Seek Mode: Bounded [ 573.774330][T25662] vivid-000: Radio Programmable HW Seek: false [ 573.796839][T25662] vivid-000: RDS Rx I/O Mode: Block I/O [ 573.827530][T25662] vivid-000: Generate RBDS Instead of RDS: false [ 573.838960][T25662] vivid-000: RDS Reception: true [ 573.850968][T25662] vivid-000: RDS Program Type: 0 inactive [ 573.858637][T25662] vivid-000: RDS PS Name: inactive [ 573.864154][T25662] vivid-000: RDS Radio Text: inactive [ 573.870283][T25662] vivid-000: RDS Traffic Announcement: false inactive [ 573.882420][T25662] vivid-000: RDS Traffic Program: false inactive [ 573.889295][T25662] vivid-000: RDS Music: false inactive [ 573.895214][T25662] vivid-000: ================== END STATUS ================== [ 573.909717][ T4989] usb 6-1: ignoring: not an USB2CAN converter [ 574.131391][ T5567] usb 6-1: USB disconnect, device number 14 [ 574.626209][T25713] loop2: detected capacity change from 0 to 8 [ 574.643933][T25713] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 574.674993][ T4258] udevd[4258]: incorrect cramfs checksum on /dev/loop2 [ 574.821809][T25725] ieee802154 phy0 wpan0: encryption failed: -90 [ 575.209226][T25752] loop2: detected capacity change from 0 to 16 [ 575.236706][T25752] erofs: (device loop2): mounted with root inode @ nid 36. [ 575.288486][ T4272] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 575.301889][T25752] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 575.316792][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 575.316807][ T26] audit: type=1800 audit(575.276:316): pid=25752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8315" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 576.162896][T25770] loop2: detected capacity change from 0 to 32768 [ 576.223064][T25770] XFS (loop2): Mounting V5 Filesystem [ 576.384604][T25770] XFS (loop2): Ending clean mount [ 576.434399][T25825] loop4: detected capacity change from 0 to 256 [ 576.499744][ T4282] XFS (loop2): Unmounting Filesystem [ 576.521399][T25825] FAT-fs (loop4): Directory bread(block 64) failed [ 576.572897][T25825] FAT-fs (loop4): Directory bread(block 65) failed [ 576.581015][T25825] FAT-fs (loop4): Directory bread(block 66) failed [ 576.592352][T25825] FAT-fs (loop4): Directory bread(block 67) failed [ 576.600644][T25825] FAT-fs (loop4): Directory bread(block 68) failed [ 576.624144][T25825] FAT-fs (loop4): Directory bread(block 69) failed [ 576.631832][T25825] FAT-fs (loop4): Directory bread(block 70) failed [ 576.667269][T25796] loop5: detected capacity change from 0 to 32768 [ 576.677239][T25825] FAT-fs (loop4): Directory bread(block 71) failed [ 576.690154][T25825] FAT-fs (loop4): Directory bread(block 72) failed [ 576.696753][T25825] FAT-fs (loop4): Directory bread(block 73) failed [ 576.804436][T25796] XFS (loop5): Mounting V5 Filesystem [ 576.871113][T25832] block device autoloading is deprecated and will be removed. [ 576.924971][T25796] XFS (loop5): Ending clean mount [ 577.063531][T15499] XFS (loop5): Unmounting Filesystem [ 577.183915][T25855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8342'. [ 577.543370][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8346'. [ 578.171878][T25917] netlink: 'syz.2.8360': attribute type 1 has an invalid length. [ 578.196492][T25917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8360'. [ 578.318409][T25929] netlink: 'syz.1.8364': attribute type 1 has an invalid length. [ 578.338136][T25929] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.8364'. [ 578.851300][ T26] audit: type=1326 audit(578.816:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 578.897470][ T26] audit: type=1326 audit(578.816:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 578.977495][ T26] audit: type=1326 audit(578.816:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 579.046276][ T26] audit: type=1326 audit(578.816:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 579.107477][ T26] audit: type=1326 audit(578.816:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 579.157413][ T26] audit: type=1326 audit(578.816:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 579.211734][ T26] audit: type=1326 audit(578.816:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 579.278265][ T26] audit: type=1326 audit(578.816:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25964 comm="syz.1.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 579.394050][T25994] overlayfs: missing 'lowerdir' [ 579.618345][T26011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8392'. [ 580.082410][T26002] loop5: detected capacity change from 0 to 32768 [ 580.181764][T26036] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 580.394114][T26042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8403'. [ 580.434083][T26042] unsupported nlmsg_type 40 [ 580.666014][T26060] netlink: 'syz.2.8407': attribute type 21 has an invalid length. [ 580.707554][T26060] netlink: 'syz.2.8407': attribute type 1 has an invalid length. [ 580.715347][T26060] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8407'. [ 581.281127][T26098] loop4: detected capacity change from 0 to 2048 [ 581.311101][T26098] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 581.341891][T26098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 581.605535][T26114] loop5: detected capacity change from 0 to 512 [ 581.745497][T26114] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 581.865425][T26102] loop2: detected capacity change from 0 to 40427 [ 581.891978][T26102] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 581.909361][T26102] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 581.972914][T26102] F2FS-fs (loop2): Found nat_bits in checkpoint [ 581.982920][T15499] EXT4-fs (loop5): unmounting filesystem. [ 582.124869][T26102] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 582.135706][T26102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 582.660021][T26130] loop4: detected capacity change from 0 to 32768 [ 582.693925][T26130] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 582.717285][T26130] JBD2: Ignoring recovery information on journal [ 582.720094][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8437'. [ 582.805664][T26130] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 582.952702][T26176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8439'. [ 583.177703][ T5556] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 583.192923][ T4277] (syz-executor,4277,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 583.215564][ T4277] (syz-executor,4277,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12 [ 583.234144][ T4277] (syz-executor,4277,0):_ocfs2_free_clusters:2583 ERROR: status = -12 [ 583.252881][ T4277] (syz-executor,4277,0):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 583.272080][ T4277] (syz-executor,4277,0):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 583.287457][ T4277] (syz-executor,4277,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 583.331658][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 583.371441][ T5556] usb 6-1: Using ep0 maxpacket: 16 [ 583.381184][ T5556] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.436056][ T5556] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.450588][ T5556] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.464612][ T5556] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 583.474328][ T5556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.498306][ T5556] usb 6-1: config 0 descriptor?? [ 583.525507][ T5556] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 583.548426][ T3624] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.569421][ T3624] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.608978][ T3624] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.630992][ T3624] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.671350][ T4262] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.697941][ T3624] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.718447][T26185] loop2: detected capacity change from 0 to 32768 [ 583.736106][T26171] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.762289][ T3624] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 583.773065][T26209] loop4: detected capacity change from 0 to 4096 [ 583.790833][ T22] usb 6-1: USB disconnect, device number 15 [ 583.792014][ T3624] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 583.804038][T26209] ntfs3: Invalid value for gid. [ 583.854336][T26185] XFS (loop2): Mounting V5 Filesystem [ 583.886640][ T5567] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 583.976655][T26185] XFS (loop2): Ending clean mount [ 584.067599][ T4282] XFS (loop2): Unmounting Filesystem [ 584.077541][ T5567] usb 2-1: Using ep0 maxpacket: 8 [ 584.128095][ T5567] usb 2-1: unable to get BOS descriptor or descriptor too short [ 584.160332][ T5567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 584.193834][ T5567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 584.205031][ T5567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 584.217165][ T5567] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 584.227858][ T5567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 584.238241][ T5567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 584.250184][ T5567] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 584.310225][ T5567] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 584.332069][ T5567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.350993][ T5567] usb 2-1: Product: syz [ 584.355247][ T5567] usb 2-1: Manufacturer: syz [ 584.367440][ T5567] usb 2-1: SerialNumber: syz [ 584.398967][ T5567] usb 2-1: config 0 descriptor?? [ 584.404960][T26200] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 584.584808][T24079] udevd[24079]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.650999][ T4374] usb 2-1: USB disconnect, device number 32 [ 584.725477][T26241] loop4: detected capacity change from 0 to 32768 [ 584.784563][T26241] (syz.4.8450,26241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 584.818482][T26241] (syz.4.8450,26241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 584.846932][T26268] loop5: detected capacity change from 0 to 8192 [ 584.903560][T26241] JBD2: Ignoring recovery information on journal [ 585.057208][T26241] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 585.346156][T26281] loop2: detected capacity change from 0 to 32768 [ 585.415137][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 585.439850][T26281] ERROR: (device loop2): diAllocBit: iag inconsistent [ 585.439850][T26281] [ 585.543555][T26281] ERROR: (device loop2): remounting filesystem as read-only [ 585.569242][T26300] netlink: 'syz.5.8459': attribute type 1 has an invalid length. [ 585.592799][T26281] ialloc: diAlloc returned -5! [ 586.182711][T26319] loop5: detected capacity change from 0 to 4096 [ 586.223466][T26319] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 586.375560][T26319] ntfs3: loop5: failed to convert "c46c" to cp437 [ 586.429300][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.470778][T26344] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 586.487590][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.512296][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.534641][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.543448][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 586.563918][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.600867][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.608579][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.616489][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.630394][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.638852][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 586.640876][T26346] loop2: detected capacity change from 0 to 4096 [ 586.653782][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.713814][T26373] loop4: detected capacity change from 0 to 4096 [ 586.724551][T26373] ntfs3: loop4: ino=3, Correct links count -> 2. [ 586.743974][T26333] lo speed is unknown, defaulting to 1000 [ 586.832975][T26373] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 587.044868][T26333] vcan0 speed is unknown, defaulting to 1000 [ 587.079881][T26410] netlink: 'syz.1.8477': attribute type 10 has an invalid length. [ 587.107885][ T22] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 587.327506][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 587.337049][ T22] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 587.376495][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.416136][ T22] usb 6-1: Product: syz [ 587.421311][ T22] usb 6-1: Manufacturer: syz [ 587.426236][ T22] usb 6-1: SerialNumber: syz [ 587.494055][ T22] usb 6-1: config 0 descriptor?? [ 587.723560][ T22] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 587.733490][ T22] eb 2a 3b 80 9b e4 7a f0 [ 587.742092][ T22] snd-usb-6fire: probe of 6-1:0.0 failed with error -5 [ 587.792215][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.941459][ T5036] usb 6-1: USB disconnect, device number 16 [ 588.183158][T26517] loop4: detected capacity change from 0 to 512 [ 588.198937][T26517] EXT4-fs: Ignoring removed orlov option [ 588.274188][T26517] EXT4-fs (loop4): orphan cleanup on readonly fs [ 588.301641][T26333] chnl_net:caif_netlink_parms(): no params data found [ 588.305304][T26517] EXT4-fs error (device loop4): ext4_find_extent:900: inode #4: comm syz.4.8490: inode has invalid extent depth: 7 [ 588.344330][T26517] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 588.377923][T26517] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 588.429331][T26517] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 588.436363][T26517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 588.441741][T26556] netlink: 'syz.2.8492': attribute type 8 has an invalid length. [ 588.549776][T26517] EXT4-fs error (device loop4): ext4_lookup:1855: inode #2: comm syz.4.8490: 'file0' linked to parent dir [ 588.570284][T26558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8493'. [ 588.616531][T26578] loop2: detected capacity change from 0 to 256 [ 588.686905][T26333] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.697827][ T4272] Bluetooth: hci5: command 0x0409 tx timeout [ 588.733468][T26333] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.742159][T26333] device bridge_slave_0 entered promiscuous mode [ 588.751512][T26333] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.758942][T26333] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.779674][T26333] device bridge_slave_1 entered promiscuous mode [ 588.836729][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 588.964596][T26333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.005835][T26333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.145660][T26333] team0: Port device team_slave_0 added [ 589.194452][T26333] team0: Port device team_slave_1 added [ 589.214794][T26656] loop2: detected capacity change from 0 to 1024 [ 589.426905][T26333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.487924][T26333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.514120][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.606760][T26333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.680941][T26333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.717442][T26333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.743636][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.781611][T26333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.921343][T26333] device hsr_slave_0 entered promiscuous mode [ 589.985991][T26333] device hsr_slave_1 entered promiscuous mode [ 590.074191][T26751] loop5: detected capacity change from 0 to 8 [ 590.578153][T26824] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8521'. [ 590.597105][T26824] infiniband syz0: set active [ 590.623502][ T22] lo speed is unknown, defaulting to 1000 [ 590.673195][T26333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.713692][T26333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 590.746855][T26333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 590.777627][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 590.794712][T26333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 591.079677][T26865] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.100577][T26333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.157918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.177178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.223358][T26333] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.279493][T20557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 591.339113][T20557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 591.388052][T20557] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.395316][T20557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.428330][T20557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 591.443867][T26881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8533'. [ 591.463937][T26881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8533'. [ 591.511977][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 591.534441][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 591.577511][ T4989] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 591.577872][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.592591][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.614417][T26826] loop4: detected capacity change from 0 to 32768 [ 591.624641][T26887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8534'. [ 591.676451][ T26] audit: type=1800 audit(591.626:325): pid=26826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8519" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 591.723109][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 591.732895][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 591.766934][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 591.801047][ T4989] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 591.811072][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 591.820040][ T4989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.830485][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 591.870500][ T4989] pwc: Logitech/Cisco VT Camera webcam detected. [ 591.884923][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 591.892809][T26898] QAT: failed to copy from user cfg_data. [ 591.901012][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 591.929764][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 591.942048][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 591.951685][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 591.981791][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 592.018450][T26333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 592.074784][ T4989] pwc: Failed to set LED on/off time (-71) [ 592.088257][ T4989] pwc: send_video_command error -71 [ 592.105704][ T4989] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 592.154736][ T4989] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 592.181589][ T4989] usb 3-1: USB disconnect, device number 35 [ 592.228635][T26915] device sit0 entered promiscuous mode [ 592.252061][T26915] netlink: 'syz.5.8539': attribute type 1 has an invalid length. [ 592.303805][T26915] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8539'. [ 592.802159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 592.809755][T26946] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 592.827861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.856923][T26333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.867897][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 593.103092][T26968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8555'. [ 593.201238][T26973] loop5: detected capacity change from 0 to 8 [ 593.454737][T26978] loop4: detected capacity change from 0 to 4096 [ 593.457832][T26986] netlink: 'syz.1.8560': attribute type 21 has an invalid length. [ 593.491781][T26978] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 593.547148][T26986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8560'. [ 593.823824][T27001] loop5: detected capacity change from 0 to 64 [ 593.851161][T27004] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 27004 comm: syz.2.8563) [ 593.916564][T27001] hfs: unable to locate alternate MDB [ 593.954695][T27001] hfs: continuing without an alternate MDB [ 594.197085][T27025] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8568'. [ 594.476749][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.488891][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.555309][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.574816][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.596810][T26333] device veth0_vlan entered promiscuous mode [ 594.615535][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.658398][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.676799][T27043] loop4: detected capacity change from 0 to 4096 [ 594.693279][T26333] device veth1_vlan entered promiscuous mode [ 594.741298][T27043] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 594.779375][T27043] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 594.798553][T26333] device veth0_macvtap entered promiscuous mode [ 594.846860][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 594.862594][T27043] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 594.866986][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 594.885723][T27043] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 594.891658][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8577'. [ 594.933365][T27043] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 594.944477][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.945205][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.962370][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 594.982310][T27043] ntfs: volume version 3.1. [ 594.993713][T27043] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 595.098106][T27043] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 595.104962][T26333] device veth1_macvtap entered promiscuous mode [ 595.176008][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.198222][T27043] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 595.199873][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 595.244331][T27043] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 595.277162][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.307520][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.317428][T27043] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 595.344453][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.396529][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.417300][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.481381][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.520634][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.538561][T27081] ipt_CLUSTERIP: bad num_local_nodes 32 [ 595.542125][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.589545][T26333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.659983][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.699131][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.743396][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.781512][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.811905][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.850798][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.891538][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.914832][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.926153][T26333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.957292][T26333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.994431][T26333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.006973][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 596.023878][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 596.041066][T27101] device geneve4 entered promiscuous mode [ 596.177297][T26333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.214303][T26333] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.243270][T26333] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.286580][T26333] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.528439][T27127] loop5: detected capacity change from 0 to 2048 [ 596.572441][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.622828][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.655294][T27127] Alternate GPT is invalid, using primary GPT. [ 596.676693][T27127] loop5: p2 p3 p7 [ 596.695897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.705682][T27149] loop4: detected capacity change from 0 to 256 [ 596.762093][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.817498][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.861773][T27149] FAT-fs (loop4): Directory bread(block 64) failed [ 596.899681][T27149] FAT-fs (loop4): Directory bread(block 65) failed [ 596.916106][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 596.968395][T27149] FAT-fs (loop4): Directory bread(block 66) failed [ 596.975062][T27149] FAT-fs (loop4): Directory bread(block 67) failed [ 597.063711][T27149] FAT-fs (loop4): Directory bread(block 68) failed [ 597.104776][T27149] FAT-fs (loop4): Directory bread(block 69) failed [ 597.131286][T27168] ipt_REJECT: TCP_RESET invalid for non-tcp [ 597.138034][T27149] FAT-fs (loop4): Directory bread(block 70) failed [ 597.144635][T27149] FAT-fs (loop4): Directory bread(block 71) failed [ 597.200406][T27149] FAT-fs (loop4): Directory bread(block 72) failed [ 597.231698][T27149] FAT-fs (loop4): Directory bread(block 73) failed [ 597.271039][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 597.294111][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 597.329886][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 597.427692][T27189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8607'. [ 597.513799][T27191] openvswitch: netlink: EtherType 0 is less than min 600 [ 598.059671][T27215] netlink: 'syz.5.8616': attribute type 21 has an invalid length. [ 598.078145][T27215] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8616'. [ 598.110643][T27215] netlink: 'syz.5.8616': attribute type 4 has an invalid length. [ 598.134560][T27215] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8616'. [ 598.332830][T27228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8620'. [ 598.550553][T27238] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 598.587490][T27238] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 598.862463][T27258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 598.928577][T27258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 598.950288][T27258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.255908][T27277] loop5: detected capacity change from 0 to 128 [ 599.270450][T27277] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 599.296872][T27277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.406197][T27250] loop4: detected capacity change from 0 to 32768 [ 599.487523][ T4374] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 599.490939][T27250] read_mapping_page failed! [ 599.697521][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 599.704614][ T4374] usb 2-1: config 0 has no interfaces? [ 599.725338][ T4374] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 599.763744][ T4374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.787125][ T4374] usb 2-1: Product: syz [ 599.792509][ T4374] usb 2-1: Manufacturer: syz [ 599.833661][ T4374] usb 2-1: SerialNumber: syz [ 599.844541][ T4374] r8152-cfgselector 2-1: config 0 descriptor?? [ 599.894187][T27302] loop5: detected capacity change from 0 to 4096 [ 599.904458][T27300] loop6: detected capacity change from 0 to 4096 [ 599.932404][T27302] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 600.023122][T27300] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 600.025302][T27302] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 600.085074][ T4374] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 600.316204][ T4989] usb 2-1: USB disconnect, device number 33 [ 600.512533][T27323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8646'. [ 601.636127][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 601.636147][ T26] audit: type=1326 audit(601.596:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27376 comm="syz.2.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 601.648008][T27375] delete_channel: no stack [ 601.748247][ T26] audit: type=1326 audit(601.656:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27376 comm="syz.2.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 601.770868][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.825606][ T26] audit: type=1326 audit(601.656:351): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=27376 comm="syz.2.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 601.855061][ T26] audit: type=1326 audit(601.656:352): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=27376 comm="syz.2.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 601.867733][T27388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8675'. [ 601.972558][ T26] audit: type=1326 audit(601.936:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27396 comm="syz.6.8667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 602.026287][ T26] audit: type=1326 audit(601.956:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27396 comm="syz.6.8667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 602.095514][ T26] audit: type=1326 audit(601.956:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27396 comm="syz.6.8667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 602.164735][ T26] audit: type=1326 audit(601.956:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27396 comm="syz.6.8667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 602.186883][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.214848][T27408] No such timeout policy "syz0" [ 602.253917][T27394] loop4: detected capacity change from 0 to 8192 [ 603.068388][ T26] audit: type=1326 audit(603.036:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27463 comm="syz.5.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd9b9aeb9 code=0x7ffc0000 [ 603.175200][ T26] audit: type=1326 audit(603.056:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27463 comm="syz.5.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f8cd9b9aeb9 code=0x7ffc0000 [ 603.225183][T27469] loop6: detected capacity change from 0 to 64 [ 603.277979][T27473] device netdevsim0 entered promiscuous mode [ 603.307741][T27473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8689'. [ 603.572890][T27487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8694'. [ 604.082016][T27523] autofs4:pid:27523:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 604.169483][T27523] autofs4:pid:27523:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 604.455152][T27544] loop6: detected capacity change from 0 to 2048 [ 604.525908][T27544] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 604.657438][T27556] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 604.657748][T27544] syz.6.8711: attempt to access beyond end of device [ 604.657748][T27544] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 604.676738][T27559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8716'. [ 604.747132][T27559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8716'. [ 604.895205][T27544] syz.6.8711: attempt to access beyond end of device [ 604.895205][T27544] loop6: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 604.959273][T27544] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=0) [ 605.107623][T27577] netlink: 'syz.5.8722': attribute type 2 has an invalid length. [ 605.155043][T27577] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8722'. [ 605.194676][T27587] infiniband syz0: set active [ 605.210622][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.264222][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.283596][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.301046][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.326020][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.424999][T27587] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 605.452643][ T5556] lo speed is unknown, defaulting to 1000 [ 606.328690][T27652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 606.410128][T27652] infiniband syz1: set active [ 606.444496][T27652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.486682][T27652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.511998][T27652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.527431][ T4989] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 606.610174][ T5556] vcan0 speed is unknown, defaulting to 1000 [ 606.752767][ T4989] usb 3-1: Using ep0 maxpacket: 16 [ 606.762183][T27680] loop5: detected capacity change from 0 to 256 [ 606.765306][ T4989] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 606.813952][ T4989] usb 3-1: config 0 has no interface number 0 [ 606.847184][ T4989] usb 3-1: config 0 interface 237 has no altsetting 0 [ 606.861568][ T4989] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 606.905698][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.924680][ T4989] usb 3-1: Product: syz [ 606.931374][ T4989] usb 3-1: Manufacturer: syz [ 606.936268][ T4989] usb 3-1: SerialNumber: syz [ 606.951552][ T4989] usb 3-1: config 0 descriptor?? [ 606.990589][T27690] netlink: 'syz.1.8757': attribute type 1 has an invalid length. [ 606.997006][ T4989] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 found [ 607.203262][ T4989] snd_usb_podhd 3-1:0.237: cannot get proper max packet size [ 607.228255][ T4989] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 now disconnected [ 607.238022][T27707] ieee802154 phy0 wpan0: encryption failed: -90 [ 607.238067][ T4989] snd_usb_podhd: probe of 3-1:0.237 failed with error -22 [ 607.292435][ T5556] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 607.490636][ T4989] usb 3-1: USB disconnect, device number 36 [ 607.498408][ T5556] usb 5-1: Using ep0 maxpacket: 32 [ 607.505489][ T5556] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 607.537146][ T5556] usb 5-1: config 0 has no interface number 0 [ 607.561973][ T5556] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.593600][ T5556] usb 5-1: config 0 interface 2 has no altsetting 0 [ 607.620519][ T5556] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 607.647213][ T5556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.675512][ T5556] usb 5-1: Product: syz [ 607.686149][ T5556] usb 5-1: Manufacturer: syz [ 607.695673][ T5556] usb 5-1: SerialNumber: syz [ 607.726878][ T5556] usb 5-1: config 0 descriptor?? [ 608.220834][ T5556] usb 5-1: USB disconnect, device number 44 [ 608.475473][T27808] xt_hashlimit: size too large, truncated to 1048576 [ 608.498430][T27808] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 608.548908][T27810] netlink: 'syz.6.8784': attribute type 13 has an invalid length. [ 608.552973][T24079] udevd[24079]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.611993][T27810] gretap0: refused to change device tx_queue_len [ 608.638220][T27810] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 608.782090][T27822] usb usb1: usbfs: process 27822 (syz.1.8787) did not claim interface 0 before use [ 608.825872][T27826] netlink: 'syz.6.8788': attribute type 6 has an invalid length. [ 608.927544][T17423] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 609.167799][T17423] usb 6-1: Using ep0 maxpacket: 8 [ 609.174962][T17423] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 609.210631][T17423] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.241414][T17423] usb 6-1: config 0 has no interface number 0 [ 609.243182][T27844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8793'. [ 609.249632][T17423] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 609.288429][T17423] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 609.290982][T27814] loop2: detected capacity change from 0 to 32768 [ 609.357776][T17423] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.399563][T17423] usb 6-1: config 0 interface 52 has no altsetting 0 [ 609.458658][T17423] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 609.489637][T27814] XFS (loop2): Mounting V5 Filesystem [ 609.500119][T27861] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 609.512551][T17423] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 609.514092][T27861] overlayfs: conflicting options: userxattr,redirect_dir=off [ 609.557735][T17423] usb 6-1: Product: syz [ 609.562030][T17423] usb 6-1: SerialNumber: syz [ 609.606110][T17423] usb 6-1: config 0 descriptor?? [ 609.719809][T27877] loop6: detected capacity change from 0 to 256 [ 609.743596][T27814] XFS (loop2): Ending clean mount [ 609.744496][T27877] exfat: Deprecated parameter 'namecase' [ 609.775787][T27877] exfat: Deprecated parameter 'namecase' [ 609.831148][T17423] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input39 [ 609.879659][ T3624] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 609.898129][T27877] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 609.965046][ T4282] XFS (loop2): Unmounting Filesystem [ 609.998352][ T3624] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 610.166072][ T4693] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 610.207846][ T3624] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 610.223728][ T3624] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 610.247552][ T4374] usb 6-1: USB disconnect, device number 17 [ 611.199684][T27958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8820'. [ 611.342865][T27964] loop4: detected capacity change from 0 to 64 [ 611.378837][T27964] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 611.418819][T27964] hfs: filesystem is marked locked, mounting read-only. [ 611.461547][T27974] ipt_CLUSTERIP: unknown mode 3 [ 611.689625][T27988] PM: Enabling pm_trace changes system date and time during resume. [ 611.689625][T27988] PM: Correct system time has to be restored manually after resume. [ 612.916042][T28068] tmpfs: Bad value for 'mpol' [ 613.455462][T28100] cgroup: subsys name conflicts with all [ 614.495684][T28157] loop4: detected capacity change from 0 to 4096 [ 614.622001][T28157] ntfs: volume version 3.1. [ 615.069085][T28191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8889'. [ 615.318751][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 615.318769][ T26] audit: type=1326 audit(615.276:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28203 comm="syz.6.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 615.381876][ T26] audit: type=1326 audit(615.306:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28203 comm="syz.6.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 615.488710][ T26] audit: type=1326 audit(615.306:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28203 comm="syz.6.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 615.567767][ T4374] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 615.777488][ T4374] usb 3-1: Using ep0 maxpacket: 8 [ 615.787226][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 615.830687][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.862365][ T4374] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.872759][ T4989] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 615.889223][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 615.901367][ T4374] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 615.916913][ T4374] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 615.985959][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.008910][T28250] netlink: 'syz.4.8906': attribute type 10 has an invalid length. [ 616.013714][ T4374] usb 3-1: config 0 descriptor?? [ 616.036413][T28250] device netdevsim0 left promiscuous mode [ 616.036847][T28205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.083782][ T4989] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 616.133135][ T4989] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 616.141695][ T4989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 616.151885][ T4989] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 616.178026][ T4989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 616.194742][ T4989] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 616.256446][ T4989] usb 6-1: string descriptor 0 read error: -22 [ 616.258988][T28250] team0: Port device netdevsim0 added [ 616.287520][ T4989] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 616.300011][ T4989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.312384][ T4989] usb 6-1: config 0 descriptor?? [ 616.330574][ T4989] hub 6-1:0.0: bad descriptor, ignoring hub [ 616.336862][ T4989] hub: probe of 6-1:0.0 failed with error -5 [ 616.705015][ T4374] usb 3-1: USB disconnect, device number 37 [ 616.709802][ T5556] usb 6-1: USB disconnect, device number 18 [ 616.711493][ T4272] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 616.897833][ T4317] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 616.995422][T28304] loop6: detected capacity change from 0 to 4096 [ 617.023974][T28304] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 617.101440][ T4317] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 617.128048][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.146485][ T4317] usb 5-1: Product: syz [ 617.151533][ T4317] usb 5-1: Manufacturer: syz [ 617.156622][ T4317] usb 5-1: SerialNumber: syz [ 617.198325][ T4317] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 617.241028][ T4317] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 617.288415][T28317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8918'. [ 617.681221][ T5556] usb 5-1: USB disconnect, device number 45 [ 618.015108][T28347] loop2: detected capacity change from 0 to 4096 [ 618.096033][T28347] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 618.297906][ T4317] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 618.328965][ T4317] ath9k_htc: Failed to initialize the device [ 618.335863][ T5556] usb 5-1: ath9k_htc: USB layer deinitialized [ 618.348583][ T4282] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 618.751482][T28394] loop4: detected capacity change from 0 to 64 [ 619.494868][T28434] netlink: 'syz.2.8951': attribute type 19 has an invalid length. [ 619.547819][T28434] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8951'. [ 619.685511][T28445] tmpfs: Bad value for 'mpol' [ 620.107651][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 620.298785][T28486] loop4: detected capacity change from 0 to 64 [ 620.309083][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 620.325750][ T22] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 620.345144][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.346620][T28486] Trying to free block not in datazone [ 620.373365][ T22] usb 7-1: Product: syz [ 620.379980][ T22] usb 7-1: Manufacturer: syz [ 620.400039][T28486] Trying to free block not in datazone [ 620.417826][ T22] usb 7-1: SerialNumber: syz [ 620.441627][T28486] Trying to free block not in datazone [ 620.449083][ T22] usb 7-1: config 0 descriptor?? [ 620.674223][ T22] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 620.692454][ T22] 00 00 00 00 00 00 00 00 [ 620.697053][ T22] snd-usb-6fire: probe of 7-1:0.0 failed with error -5 [ 620.886820][ T4317] usb 7-1: USB disconnect, device number 2 [ 621.112179][T28526] loop2: detected capacity change from 0 to 4096 [ 621.157280][T28526] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 621.590764][T28549] loop6: detected capacity change from 0 to 64 [ 621.685096][T28549] hfs: filesystem is marked locked, mounting read-only. [ 621.722841][T28549] hfs: filesystem is marked locked, leaving read-only. [ 622.167101][T28580] loop6: detected capacity change from 0 to 64 [ 622.247699][T28580] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 622.684191][T28544] loop4: detected capacity change from 0 to 32768 [ 622.746484][T28613] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8999'. [ 622.771900][T28544] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 622.771900][T28544] [ 622.772108][T28614] netlink: 'syz.6.9000': attribute type 3 has an invalid length. [ 622.800823][T28544] ERROR: (device loop4): remounting filesystem as read-only [ 623.527766][T28658] netlink: get zone limit has 4 unknown bytes [ 623.617051][T28664] netlink: 'syz.4.9015': attribute type 2 has an invalid length. [ 623.627620][T17423] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 623.845209][T17423] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 623.864435][T17423] usb 7-1: config 0 has no interface number 0 [ 623.906132][T17423] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 623.931049][T17423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.005149][T17423] usb 7-1: Product: syz [ 624.023925][T17423] usb 7-1: Manufacturer: syz [ 624.034233][T17423] usb 7-1: SerialNumber: syz [ 624.065190][T17423] usb 7-1: config 0 descriptor?? [ 624.337451][ T4374] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 624.352078][T17423] usb 7-1: USB disconnect, device number 3 [ 624.380045][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.386460][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.567396][ T4374] usb 6-1: Using ep0 maxpacket: 32 [ 624.574722][ T4374] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 624.584345][ T4374] usb 6-1: config 0 has no interface number 0 [ 624.596045][ T4374] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 624.605804][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.657189][ T4374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.690304][ T4374] usb 6-1: Product: syz [ 624.694557][ T4374] usb 6-1: Manufacturer: syz [ 624.716860][ T4374] usb 6-1: SerialNumber: syz [ 624.761871][ T4374] usb 6-1: config 0 descriptor?? [ 624.981553][ T4374] radio-si470x 6-1:0.35: this is not a si470x device. [ 625.189793][ T4374] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 625.211834][ T4374] usb 6-1: USB disconnect, device number 19 [ 625.272445][T28779] netlink: 'syz.6.9043': attribute type 2 has an invalid length. [ 625.504941][T28791] loop6: detected capacity change from 0 to 2048 [ 625.524019][T28791] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 625.562708][T28791] syz.6.9048: attempt to access beyond end of device [ 625.562708][T28791] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 625.580139][T28796] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 625.645105][T28791] syz.6.9048: attempt to access beyond end of device [ 625.645105][T28791] loop6: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 625.664840][T28802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9050'. [ 625.688410][T28791] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 625.870490][T28807] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 626.459475][ T4989] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 626.479705][T28854] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 626.517060][T28851] loop4: detected capacity change from 0 to 4096 [ 626.534212][T28851] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 626.550991][T28851] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 626.571219][T28851] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 626.600375][T28851] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 626.670324][ T4989] usb 2-1: Using ep0 maxpacket: 16 [ 626.680773][ T4989] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 626.700747][T28851] ntfs: volume version 3.1. [ 626.706009][ T4989] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 626.726402][ T4989] usb 2-1: config 0 has no interface number 0 [ 626.745667][T28851] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 626.748983][ T4989] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 626.765614][T28851] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 626.773258][ T4989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.809887][ T4989] usb 2-1: Product: syz [ 626.823097][ T4989] usb 2-1: Manufacturer: syz [ 626.838984][ T4989] usb 2-1: SerialNumber: syz [ 626.861620][ T4989] usb 2-1: config 0 descriptor?? [ 626.886403][ T4989] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 626.909106][ T4989] usb 2-1: No valid video chain found. [ 627.001630][T28874] netlink: 'syz.4.9071': attribute type 2 has an invalid length. [ 627.177474][ T22] usb 2-1: USB disconnect, device number 34 [ 627.275277][T28864] loop5: detected capacity change from 0 to 32768 [ 627.308488][T28864] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.9069 (28864) [ 627.397180][T28864] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 627.445736][T28864] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 627.464585][T28895] loop4: detected capacity change from 0 to 764 [ 627.474317][T28864] BTRFS info (device loop5): force zlib compression, level 3 [ 627.519852][T28864] BTRFS info (device loop5): turning on flush-on-commit [ 627.532385][T28899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9076'. [ 627.578277][T28864] BTRFS info (device loop5): max_inline at 4096 [ 627.584811][T28864] BTRFS info (device loop5): using free space tree [ 627.616214][T28899] netlink: 660 bytes leftover after parsing attributes in process `syz.6.9076'. [ 627.618274][T28902] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.9077'. [ 627.960610][T28864] BTRFS info (device loop5): enabling ssd optimizations [ 628.147647][T15499] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 628.158427][T28942] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9083'. [ 628.203291][T28942] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9083'. [ 628.427768][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.079322][ T26] audit: type=1326 audit(629.046:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28982 comm="syz.6.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 629.187448][ T26] audit: type=1326 audit(629.046:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28982 comm="syz.6.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 629.313119][ T26] audit: type=1326 audit(629.076:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28982 comm="syz.6.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 629.420030][ T26] audit: type=1326 audit(629.076:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28982 comm="syz.6.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 630.417618][ T22] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 630.629794][ T22] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 630.659787][ T22] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 630.685981][ T22] usb 2-1: config 220 has no interface number 2 [ 630.701358][ T22] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 630.763593][ T22] usb 2-1: config 220 interface 0 has no altsetting 0 [ 630.772635][ T22] usb 2-1: config 220 interface 76 has no altsetting 0 [ 630.781361][ T22] usb 2-1: config 220 interface 1 has no altsetting 0 [ 630.819428][ T22] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 630.855048][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.896359][ T22] usb 2-1: Product: syz [ 630.926771][ T22] usb 2-1: Manufacturer: syz [ 630.938035][ T22] usb 2-1: SerialNumber: syz [ 631.206489][T29103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9131'. [ 631.209617][ T22] usb 2-1: selecting invalid altsetting 0 [ 631.239586][ T22] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 631.247153][ T22] usb 2-1: No valid video chain found. [ 631.252256][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9131'. [ 631.305672][ T22] usb 2-1: selecting invalid altsetting 0 [ 631.313876][ T22] usbtest: probe of 2-1:220.1 failed with error -22 [ 631.345936][ T22] usb 2-1: USB disconnect, device number 35 [ 631.441003][T29122] loop4: detected capacity change from 0 to 256 [ 631.560242][T29122] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 631.799958][T29141] netlink: 'syz.4.9138': attribute type 4 has an invalid length. [ 631.876196][T29141] device veth1_macvtap left promiscuous mode [ 632.102396][T29158] loop5: detected capacity change from 0 to 512 [ 632.140014][T29160] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9145'. [ 632.199133][T29158] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 632.237870][T29158] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.9144: attempt to clear invalid blocks 1024 len 1 [ 632.258667][T29158] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.9144: invalid indirect mapped block 1819239214 (level 0) [ 632.374851][T29158] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.9144: invalid indirect mapped block 33554432 (level 2) [ 632.475616][T29158] EXT4-fs (loop5): 1 truncate cleaned up [ 632.494054][T29158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 632.546936][T29185] loop6: detected capacity change from 0 to 256 [ 632.591153][T29158] EXT4-fs error (device loop5): __ext4_remount:6644: comm syz.5.9144: Abort forced by user [ 632.598666][T29185] exfat: Deprecated parameter 'utf8' [ 632.623102][T29185] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 632.660199][T29158] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 632.729320][T29193] loop4: detected capacity change from 0 to 2048 [ 632.800252][T29193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 632.857233][T15499] EXT4-fs (loop5): unmounting filesystem. [ 633.198948][T29222] binder: 29219:29222 ioctl c018620c 0 returned -14 [ 633.645952][T29253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9170'. [ 633.780637][T29262] loop6: detected capacity change from 0 to 128 [ 633.889007][T17425] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 634.079883][T17425] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 634.097188][T17425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.107237][T29281] loop5: detected capacity change from 0 to 65 [ 634.169906][T17425] usb 3-1: config 0 descriptor?? [ 634.186135][T29281] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 634.198470][T17425] cp210x 3-1:0.0: cp210x converter detected [ 634.585823][T17425] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 634.607440][T17425] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 634.656401][T17425] usb 3-1: cp210x converter now attached to ttyUSB0 [ 634.704831][T17425] usb 3-1: USB disconnect, device number 38 [ 634.762272][T17425] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 634.802301][T17425] cp210x 3-1:0.0: device disconnected [ 634.866390][T29336] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 634.900627][ T22] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 635.064870][T29349] device bond0 entered promiscuous mode [ 635.081731][T29349] device bond_slave_0 entered promiscuous mode [ 635.097862][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 635.105204][T29349] device bond_slave_1 entered promiscuous mode [ 635.113344][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.136332][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.177688][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 635.197627][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.224999][ T22] usb 5-1: config 0 descriptor?? [ 635.250937][ T22] hub 5-1:0.0: USB hub found [ 635.455990][ T22] hub 5-1:0.0: 28 ports detected [ 635.467781][ T22] hub 5-1:0.0: insufficient power available to use all downstream ports [ 635.673512][ T22] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 635.682969][ T22] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 635.715589][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 635.728007][T29393] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.9209'. [ 635.732656][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 635.790535][ T22] usb 5-1: USB disconnect, device number 46 [ 635.955238][T29406] netlink: 'syz.2.9213': attribute type 4 has an invalid length. [ 635.989623][T29408] loop5: detected capacity change from 0 to 64 [ 636.015414][T29406] device veth1_macvtap left promiscuous mode [ 636.204955][T29422] device netdevsim0 entered promiscuous mode [ 636.236787][T29422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 636.753493][T29453] netlink: 'syz.6.9230': attribute type 12 has an invalid length. [ 636.811831][T29453] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 636.868174][T29457] IPv6: sit4: Disabled Multicast RS [ 636.971852][T29470] dlm: no locking on control device [ 637.126399][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9238'. [ 637.460381][T29499] loop6: detected capacity change from 0 to 2048 [ 637.498210][T29499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.693232][T29512] device geneve4 entered promiscuous mode [ 638.076728][T29535] netlink: 'syz.2.9255': attribute type 10 has an invalid length. [ 638.112953][T29535] team0: Port device virt_wifi0 added [ 638.135502][T29540] overlayfs: conflicting options: nfs_export=on,index=off [ 638.317809][T29551] netlink: 'syz.1.9261': attribute type 7 has an invalid length. [ 638.386123][T29551] netlink: 'syz.1.9261': attribute type 8 has an invalid length. [ 638.647095][T29571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9267'. [ 638.661036][T29574] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9268'. [ 638.785127][T29611] IPVS: length: 120 != 24 [ 638.979919][T29622] Unknown options in mask b7f2 [ 639.652822][T29667] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 639.687262][T29669] netlink: 'syz.2.9291': attribute type 3 has an invalid length. [ 639.696822][T29669] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9291'. [ 639.946825][T29684] loop2: detected capacity change from 0 to 256 [ 640.221008][T29699] loop5: detected capacity change from 0 to 64 [ 641.195217][T29772] net veth1_virt_wifi : renamed from virt_wifi0 [ 641.287468][ T4989] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 641.487451][ T4989] usb 3-1: Using ep0 maxpacket: 16 [ 641.496755][ T4989] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 641.526859][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.556605][ T4989] usb 3-1: Product: syz [ 641.561799][ T4989] usb 3-1: Manufacturer: syz [ 641.566449][ T4989] usb 3-1: SerialNumber: syz [ 641.615170][ T4989] usb 3-1: config 0 descriptor?? [ 641.648481][ T4989] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 641.824066][T29816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.843042][ T4989] usb 3-1: USB disconnect, device number 39 [ 641.873693][T29826] net veth1_virt_wifi : renamed from virt_wifi0 [ 641.922907][ T5564] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 642.015075][T29829] loop5: detected capacity change from 0 to 2048 [ 642.051554][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9337'. [ 642.069079][T29829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.140540][ T5564] usb 7-1: config 0 has an invalid interface number: 23 but max is 0 [ 642.175853][ T5564] usb 7-1: config 0 has no interface number 0 [ 642.183192][ T5564] usb 7-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 642.227760][ T5564] usb 7-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 642.263358][ T5564] usb 7-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 642.304310][ T5564] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.314649][T29847] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 642.332876][ T5564] usb 7-1: Product: syz [ 642.347788][ T5564] usb 7-1: Manufacturer: syz [ 642.352693][ T5564] usb 7-1: SerialNumber: syz [ 642.397032][ T5564] usb 7-1: config 0 descriptor?? [ 642.433723][T29800] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 642.450381][T29800] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 642.480628][ T5564] ums-usbat 7-1:0.23: USB Mass Storage device detected [ 642.595914][T29865] loop4: detected capacity change from 0 to 256 [ 642.788452][ T5564] ums-usbat: probe of 7-1:0.23 failed with error -5 [ 642.828786][ T5564] usb 7-1: USB disconnect, device number 4 [ 643.010850][T29894] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 643.086020][T29898] ipt_CLUSTERIP: Please specify destination IP [ 643.421442][ T5564] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 643.466628][T29877] loop4: detected capacity change from 0 to 32768 [ 643.539176][T29877] loop4: p1 p2 p3 < p5 p6 > [ 643.557856][T29877] loop4: p1 size 242222080 extends beyond EOD, truncated [ 643.579934][T29919] netlink: 'syz.1.9357': attribute type 1 has an invalid length. [ 643.601121][T29877] loop4: p2 start 4294967295 is beyond EOD, truncated [ 643.620479][ T5564] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 643.635054][ T5564] usb 3-1: config 0 has no interface number 0 [ 643.677801][ T5564] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 643.709998][ T5564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.710032][T29931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9359'. [ 643.719255][ T5564] usb 3-1: Product: syz [ 643.753251][ T5564] usb 3-1: Manufacturer: syz [ 643.761986][ T5564] usb 3-1: SerialNumber: syz [ 643.783350][ T5564] usb 3-1: config 0 descriptor?? [ 643.813741][ T5564] qmi_wwan 3-1:0.207: bogus CDC Union: master=0, slave=1 [ 643.826390][T29936] netlink: 'syz.5.9360': attribute type 10 has an invalid length. [ 643.859816][T29936] team0: Port device virt_wifi0 added [ 644.006667][ T5564] qmi_wwan: probe of 3-1:0.207 failed with error -22 [ 644.123087][T29948] sctp: [Deprecated]: syz.6.9364 (pid 29948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.123087][T29948] Use struct sctp_sack_info instead [ 644.281098][ T5564] usb 3-1: USB disconnect, device number 40 [ 644.477622][T29969] kAFS: unable to lookup cell '@mTsyz0' [ 644.900250][T29996] netlink: 'syz.4.9374': attribute type 10 has an invalid length. [ 644.967916][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 644.982750][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 644.989736][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 644.998373][T24079] udevd[24079]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 645.004443][T29996] team0: Port device added [ 645.398961][T30023] netlink: 264 bytes leftover after parsing attributes in process `syz.6.9384'. [ 645.437401][T30023] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9384'. [ 645.675378][T30038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9387'. [ 646.029442][T30062] loop6: detected capacity change from 0 to 16 [ 646.059048][T30062] erofs: (device loop6): mounted with root inode @ nid 36. [ 646.103417][T30062] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 646.128691][T30057] loop2: detected capacity change from 0 to 2048 [ 646.156250][ T4272] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 646.172499][T30062] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 646.236696][T30057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.269340][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 646.269359][ T26] audit: type=1800 audit(646.236:369): pid=30062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9395" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 646.898232][T30098] loop4: detected capacity change from 0 to 2048 [ 646.929453][T30098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.765513][T30159] netlink: 'syz.6.9425': attribute type 30 has an invalid length. [ 648.778471][ T26] audit: type=1326 audit(648.746:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30213 comm="syz.1.9443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 648.817499][ T26] audit: type=1326 audit(648.746:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30213 comm="syz.1.9443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 648.940184][ T26] audit: type=1326 audit(648.766:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30213 comm="syz.1.9443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 648.997486][ T26] audit: type=1326 audit(648.766:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30213 comm="syz.1.9443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 649.072327][ T26] audit: type=1326 audit(648.766:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30213 comm="syz.1.9443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad279aeb9 code=0x7ffc0000 [ 649.115479][T30192] loop5: detected capacity change from 0 to 32768 [ 649.165338][T30192] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.9436 (30192) [ 649.244520][T30192] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 649.303180][T30192] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 649.354365][T30192] BTRFS info (device loop5): force zlib compression, level 3 [ 649.403380][T30192] BTRFS info (device loop5): force clearing of disk cache [ 649.419435][T30192] BTRFS info (device loop5): disabling tree log [ 649.425761][T30192] BTRFS info (device loop5): enabling disk space caching [ 649.477493][T30192] BTRFS info (device loop5): disk space caching is enabled [ 649.765985][T30192] BTRFS info (device loop5): enabling ssd optimizations [ 649.811611][T30303] loop6: detected capacity change from 0 to 256 [ 650.057948][ T26] audit: type=1326 audit(650.026:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30313 comm="syz.2.9459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 650.088801][T15499] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 650.117610][ T26] audit: type=1326 audit(650.036:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30313 comm="syz.2.9459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 650.242122][ T26] audit: type=1326 audit(650.036:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30313 comm="syz.2.9459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 650.376942][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9464'. [ 650.395215][ T26] audit: type=1326 audit(650.036:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30313 comm="syz.2.9459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 650.421015][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9464'. [ 650.609266][T30339] loop2: detected capacity change from 0 to 16 [ 650.648875][T30339] erofs: (device loop2): mounted with root inode @ nid 36. [ 650.672088][T30339] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 650.675214][T30344] device batadv0 entered promiscuous mode [ 650.753900][T30339] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 651.338732][T30373] Invalid ELF header magic: != ELF [ 652.207628][T30416] openvswitch: netlink: Message has 4 unknown bytes. [ 652.452668][T30436] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.9493'. [ 652.576590][T30442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9495'. [ 652.917897][T30462] device batadv1 entered promiscuous mode [ 653.023291][T30474] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 653.094929][T30474] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 653.458300][T30498] loop4: detected capacity change from 0 to 2048 [ 653.535013][T30498] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 653.599220][T30498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.635187][T30578] loop2: detected capacity change from 0 to 1024 [ 655.216282][T30621] loop6: detected capacity change from 0 to 1024 [ 655.344835][T30621] EXT4-fs: Ignoring removed nobh option [ 655.521252][T30621] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.9547: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 655.560523][T30639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 655.613899][T30621] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.9547: couldn't read orphan inode 11 (err -117) [ 655.694994][T30621] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 655.879861][T26333] EXT4-fs (loop6): unmounting filesystem. [ 655.987285][T30605] loop2: detected capacity change from 0 to 32768 [ 656.031088][T30605] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.9542 (30605) [ 656.127221][T30605] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 656.193587][T30605] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 656.232238][T30605] BTRFS info (device loop2): force zlib compression, level 3 [ 656.277498][T30605] BTRFS info (device loop2): force clearing of disk cache [ 656.317450][T30605] BTRFS info (device loop2): disabling tree log [ 656.323785][T30605] BTRFS info (device loop2): enabling disk space caching [ 656.355410][T30605] BTRFS info (device loop2): disk space caching is enabled [ 656.417463][ T22] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 656.617672][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 656.628972][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 656.656399][T30605] BTRFS info (device loop2): enabling ssd optimizations [ 656.657673][ T22] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 656.688128][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.719497][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.744231][ T22] usb 5-1: string descriptor 0 read error: -22 [ 656.759997][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.779781][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.813156][ T22] usb 5-1: 0:2 : does not exist [ 656.976861][ T4282] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 657.055135][ T4258] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (4258) [ 657.276663][T30735] loop5: detected capacity change from 0 to 4096 [ 657.315549][T30735] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 657.416017][T30735] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 657.477099][T30735] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 657.524081][T30735] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 657.571406][T30735] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 657.676251][T30735] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 657.695169][T30735] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 657.702705][ T4990] usb 5-1: USB disconnect, device number 47 [ 657.714042][T30735] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 657.772765][T30735] ntfs: (device loop5): check_mft_mirror(): Failed to read $MFTMirr. [ 657.813349][T30735] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 657.905987][T30735] ntfs: volume version 3.1. [ 657.972794][T30773] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 658.126550][T30773] overlayfs: missing 'lowerdir' [ 658.410686][T30786] lo speed is unknown, defaulting to 1000 [ 658.770930][T30814] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 658.851382][T30786] vcan0 speed is unknown, defaulting to 1000 [ 659.259237][T30835] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.580818][ T5036] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 659.630471][T30877] loop4: detected capacity change from 0 to 256 [ 659.687888][T30885] netlink: 'syz.1.9606': attribute type 11 has an invalid length. [ 659.735775][T30877] FAT-fs (loop4): Directory bread(block 64) failed [ 659.747658][T30877] FAT-fs (loop4): Directory bread(block 65) failed [ 659.777804][T30877] FAT-fs (loop4): Directory bread(block 66) failed [ 659.797463][T30877] FAT-fs (loop4): Directory bread(block 67) failed [ 659.820985][T30877] FAT-fs (loop4): Directory bread(block 68) failed [ 659.849387][ T5036] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 659.867518][ T5036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.885874][T30877] FAT-fs (loop4): Directory bread(block 69) failed [ 659.897554][ T5036] usb 3-1: Product: syz [ 659.901792][ T5036] usb 3-1: Manufacturer: syz [ 659.906743][T30877] FAT-fs (loop4): Directory bread(block 70) failed [ 659.923524][T30877] FAT-fs (loop4): Directory bread(block 71) failed [ 659.934849][ T5036] usb 3-1: SerialNumber: syz [ 659.945193][ T5036] usb 3-1: config 0 descriptor?? [ 659.954288][T30877] FAT-fs (loop4): Directory bread(block 72) failed [ 659.974315][T30877] FAT-fs (loop4): Directory bread(block 73) failed [ 659.981595][ T5036] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 660.183257][T30902] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9611'. [ 660.377714][ T5036] gspca_sunplus: reg_r err -71 [ 660.383081][ T5036] sunplus: probe of 3-1:0.0 failed with error -71 [ 660.415191][ T5036] usb 3-1: USB disconnect, device number 41 [ 661.005118][T30949] loop4: detected capacity change from 0 to 128 [ 661.083382][T30949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 661.155106][T30949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 661.549628][T30977] IPv6: sit2: Disabled Multicast RS [ 661.763859][T30936] loop6: detected capacity change from 0 to 32768 [ 661.844915][T30936] JBD2: Invalid start block of journal: 67108866 [ 661.877471][T30936] (syz.6.9620,30936,1):ocfs2_journal_wipe:1183 ERROR: status = -22 [ 661.885616][T30936] (syz.6.9620,30936,1):ocfs2_check_volume:2420 ERROR: status = -22 [ 661.897885][T30936] (syz.6.9620,30936,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 661.944379][T30936] (syz.6.9620,30936,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 662.061319][T30936] (syz.6.9620,30936,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 662.226990][T30936] FAT-fs (loop6): invalid media value (0x66) [ 662.231047][T31015] loop5: detected capacity change from 0 to 8 [ 662.277776][T31020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9645'. [ 662.288049][T30936] FAT-fs (loop6): Can't find a valid FAT filesystem [ 662.598557][T31038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9651'. [ 662.665660][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9648'. [ 662.677590][T31037] netlink: 74 bytes leftover after parsing attributes in process `syz.5.9648'. [ 663.453710][T31094] Zero length message leads to an empty skb [ 663.733291][T31114] loop4: detected capacity change from 0 to 256 [ 664.505621][T31157] loop5: detected capacity change from 0 to 64 [ 664.767043][T31170] loop6: detected capacity change from 0 to 256 [ 664.788966][T31172] netlink: 'syz.4.9691': attribute type 1 has an invalid length. [ 664.793312][T31170] FAT-fs (loop6): "posix" option is obsolete, not supported now [ 664.910284][T31172] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.9691'. [ 665.147652][T31188] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 665.551894][T31213] loop4: detected capacity change from 0 to 256 [ 666.674526][ T4990] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 666.684605][T31291] loop2: detected capacity change from 0 to 512 [ 666.706768][T31291] EXT4-fs: Ignoring removed i_version option [ 666.723922][T31291] EXT4-fs: Ignoring removed mblk_io_submit option [ 666.815160][T31291] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.9727: inode #13: comm syz.2.9727: iget: illegal inode # [ 666.831286][T31291] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9727: couldn't read orphan inode 13 (err -117) [ 666.854486][T31291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 666.871455][ T4990] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 666.881497][ T4990] usb 7-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 666.889812][ T4990] usb 7-1: Product: syz [ 666.894221][ T4990] usb 7-1: Manufacturer: syz [ 666.898941][ T4990] usb 7-1: SerialNumber: syz [ 666.905973][ T4990] r8152-cfgselector 7-1: config 0 descriptor?? [ 666.966498][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 667.284913][T31324] netlink: 'syz.5.9734': attribute type 1 has an invalid length. [ 667.323724][T31324] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9734'. [ 667.334853][ T4990] r8152-cfgselector 7-1: Unknown version 0x0000 [ 667.351965][ T4990] r8152-cfgselector 7-1: USB disconnect, device number 5 [ 667.788706][T31354] XFS (nullb0): Invalid superblock magic number [ 668.044733][T31369] netlink: 'syz.4.9746': attribute type 1 has an invalid length. [ 668.052725][T31369] netlink: 'syz.4.9746': attribute type 3 has an invalid length. [ 668.073779][T31369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9746'. [ 668.161584][T31333] loop2: detected capacity change from 0 to 32768 [ 668.276062][T31333] XFS (loop2): Mounting V5 Filesystem [ 668.399744][T31395] Cannot find add_set index 0 as target [ 668.515691][T31333] XFS (loop2): Ending clean mount [ 668.714015][T31406] loop5: detected capacity change from 0 to 4096 [ 668.740034][ T4282] XFS (loop2): Unmounting Filesystem [ 668.744669][T31417] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9756'. [ 668.772511][T31406] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 668.882585][T31406] ntfs3: loop5: Failed to load $Extend. [ 669.017629][ T5557] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 669.035425][T31425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9759'. [ 669.227438][ T5557] usb 5-1: Using ep0 maxpacket: 16 [ 669.239142][ T5557] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 669.265989][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 669.266007][ T26] audit: type=1326 audit(669.226:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31432 comm="syz.6.9763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 669.327441][ T5557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.355317][ T5557] usb 5-1: Product: syz [ 669.367443][ T5557] usb 5-1: Manufacturer: syz [ 669.377605][ T5557] usb 5-1: SerialNumber: syz [ 669.382451][ T26] audit: type=1326 audit(669.256:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31432 comm="syz.6.9763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 669.435091][ T5557] usb 5-1: config 0 descriptor?? [ 669.470894][ T26] audit: type=1326 audit(669.256:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31432 comm="syz.6.9763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 669.557537][ T26] audit: type=1326 audit(669.256:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31432 comm="syz.6.9763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891719aeb9 code=0x7ffc0000 [ 669.690078][ T5557] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 669.703235][ T5557] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 669.966081][ T5557] usb 5-1: USB disconnect, device number 48 [ 670.587556][ T5557] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 670.605353][T31521] netlink: 'syz.2.9782': attribute type 1 has an invalid length. [ 670.614342][T31517] netlink: 'syz.1.9785': attribute type 10 has an invalid length. [ 670.646942][T31520] loop6: detected capacity change from 0 to 2048 [ 670.729971][T31520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 670.795597][ T5557] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 670.816176][ T5557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.896176][ T5557] usb 6-1: config 0 descriptor?? [ 670.906627][ T5557] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 671.149386][T31539] loop2: detected capacity change from 0 to 4096 [ 671.329876][ T5557] gspca_cpia1: usb_control_msg 03, error -71 [ 671.352747][ T5557] gspca_cpia1: usb_control_msg 01, error -71 [ 671.374936][ T5557] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 671.396084][T31560] tmpfs: Bad value for 'mpol' [ 671.419988][ T5557] usb 6-1: USB disconnect, device number 20 [ 671.638414][T31575] netlink: 'syz.6.9797': attribute type 2 has an invalid length. [ 671.657136][T31575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.699194][T31580] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.9798'. [ 671.893027][T31593] netlink: 'syz.6.9803': attribute type 2 has an invalid length. [ 671.961185][T31612] netlink: 'syz.6.9805': attribute type 21 has an invalid length. [ 672.035273][T31612] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9805'. [ 672.387880][ T5036] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 672.587958][ T5036] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 672.599452][ T5036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.669402][ T5036] usb 3-1: config 0 descriptor?? [ 672.691705][ T5036] cp210x 3-1:0.0: cp210x converter detected [ 672.884494][ T5036] usb 3-1: cp210x converter now attached to ttyUSB0 [ 673.099903][ T5036] usb 3-1: USB disconnect, device number 42 [ 673.139057][ T5036] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 673.179277][ T5036] cp210x 3-1:0.0: device disconnected [ 673.572851][T31726] netlink: 'syz.6.9835': attribute type 3 has an invalid length. [ 675.789504][T31801] loop4: detected capacity change from 0 to 32768 [ 676.416309][T31879] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 676.600492][T31857] loop6: detected capacity change from 0 to 32768 [ 676.669639][T31857] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 676.699389][T31857] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 676.755389][T31857] BTRFS info (device loop6): using free space tree [ 676.799709][T31857] BTRFS info (device loop6): enabling ssd optimizations [ 676.924252][T31857] BTRFS warning (device loop6: state M): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead [ 676.962857][T31857] BTRFS info (device loop6: state M): disabling log replay at mount time [ 677.034491][T31857] BTRFS error (device loop6: state M): nologreplay must be used with ro mount option [ 677.073459][ T26] audit: type=1326 audit(677.036:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.2.9890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 677.143172][ T26] audit: type=1326 audit(677.076:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.2.9890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 677.198800][T26333] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 677.206395][ T26] audit: type=1326 audit(677.076:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.2.9890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 677.247558][ T4990] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 677.273437][ T26] audit: type=1326 audit(677.076:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.2.9890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 677.336739][ T26] audit: type=1326 audit(677.076:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.2.9890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9339aeb9 code=0x7ffc0000 [ 677.479939][ T4990] usb 2-1: Using ep0 maxpacket: 16 [ 677.487898][ T4990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.519406][ T4990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.543293][T17425] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 677.563787][ T4990] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.583326][ T4990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.608308][ T4990] usb 2-1: Product: syz [ 677.638475][ T4990] usb 2-1: Manufacturer: syz [ 677.643231][ T4990] usb 2-1: SerialNumber: syz [ 677.729682][T17425] usb 5-1: Using ep0 maxpacket: 32 [ 677.745746][T17425] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 677.775822][T17425] usb 5-1: config 0 has no interface number 0 [ 677.797006][T17425] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 677.827034][T17425] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 677.866398][T17425] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 677.891916][ T4990] usb 2-1: 0:2 : does not exist [ 677.891992][T17425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.923612][ T4990] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 677.939848][T17425] usb 5-1: Product: syz [ 677.956464][T17425] usb 5-1: Manufacturer: syz [ 677.985761][T17425] usb 5-1: SerialNumber: syz [ 678.018913][T17425] usb 5-1: config 0 descriptor?? [ 678.041101][T17425] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 678.051208][ T4990] usb 2-1: USB disconnect, device number 36 [ 678.233391][T17425] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 678.247513][T17425] quatech2: probe of 5-1:0.51 failed with error -90 [ 678.321686][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.381182][T32027] netlink: 'syz.6.9904': attribute type 1 has an invalid length. [ 678.427389][T32027] netlink: 'syz.6.9904': attribute type 3 has an invalid length. [ 678.458220][T32027] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9904'. [ 678.505336][T17425] usb 5-1: USB disconnect, device number 49 [ 678.507127][T32034] loop5: detected capacity change from 0 to 764 [ 678.525367][T32027] NCSI netlink: No device for ifindex 52229 [ 678.590735][T32034] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 679.987731][T32127] netlink: 'syz.2.9931': attribute type 30 has an invalid length. [ 680.092373][T32134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9934'. [ 680.125704][T32139] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9935'. [ 680.137455][T32134] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9934'. [ 680.159370][T32138] netlink: 'syz.5.9933': attribute type 2 has an invalid length. [ 680.168540][T32134] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9934'. [ 680.198643][T32134] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 680.326838][T32147] netlink: 'syz.4.9939': attribute type 21 has an invalid length. [ 680.342504][T32147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9939'. [ 680.355885][T32147] netlink: 'syz.4.9939': attribute type 1 has an invalid length. [ 681.635074][T32216] loop2: detected capacity change from 0 to 256 [ 681.760537][T32216] FAT-fs (loop2): Directory bread(block 64) failed [ 681.791650][T32216] FAT-fs (loop2): Directory bread(block 65) failed [ 681.835707][T32216] FAT-fs (loop2): Directory bread(block 66) failed [ 681.866253][T32216] FAT-fs (loop2): Directory bread(block 67) failed [ 681.905877][T32216] FAT-fs (loop2): Directory bread(block 68) failed [ 681.947821][T32216] FAT-fs (loop2): Directory bread(block 69) failed [ 681.981341][T32216] FAT-fs (loop2): Directory bread(block 70) failed [ 682.016944][T32230] loop6: detected capacity change from 0 to 1024 [ 682.023642][T32216] FAT-fs (loop2): Directory bread(block 71) failed [ 682.043421][T32216] FAT-fs (loop2): Directory bread(block 72) failed [ 682.072101][T32216] FAT-fs (loop2): Directory bread(block 73) failed [ 682.092456][T32230] fuse: Invalid rootmode [ 682.257755][T20557] hfsplus: b-tree write err: -5, ino 4 [ 682.264733][T32240] loop5: detected capacity change from 0 to 256 [ 682.321758][T32240] exfat: Deprecated parameter 'utf8' [ 682.363265][T32240] exfat: Deprecated parameter 'utf8' [ 682.447228][T32240] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 682.545642][T32256] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 682.693858][T32260] netlink: 'syz.4.9972': attribute type 5 has an invalid length. [ 683.152233][ T4990] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 683.199292][T32295] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 683.367998][ T4990] usb 7-1: Using ep0 maxpacket: 8 [ 683.384733][ T4990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.417461][ T4990] usb 7-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 683.447816][ T4990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.488491][ T4990] usb 7-1: config 0 descriptor?? [ 683.509925][ T4990] usb 7-1: Found UVC 0.00 device (2801:0201) [ 683.540294][ T4990] usb 7-1: No valid video chain found. [ 683.634081][T32323] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 683.728068][ T5557] usb 7-1: USB disconnect, device number 6 [ 684.124229][T32358] netlink: 'syz.1.9999': attribute type 8 has an invalid length. [ 684.453063][T32374] 9pnet_fd: Insufficient options for proto=fd [ 684.527751][T32371] loop2: detected capacity change from 0 to 4096 [ 684.578616][T32371] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 684.599862][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.671416][T32371] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 684.710935][T32387] overlayfs: missing 'lowerdir' [ 684.721532][T32371] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 684.737045][T32371] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 684.776753][T32349] loop4: detected capacity change from 0 to 32768 [ 684.829047][T32371] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 684.923533][T32371] ntfs: volume version 3.1. [ 684.972049][T32371] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 685.012874][T32371] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 685.085969][T20557] read_mapping_page failed! [ 685.107737][T32398] loop5: detected capacity change from 0 to 256 [ 685.127094][T20557] ERROR: (device loop4): txCommit: [ 685.127094][T20557] [ 685.137228][T32398] exfat: Deprecated parameter 'utf8' [ 685.201169][T20557] ERROR: (device loop4): remounting filesystem as read-only [ 685.249194][T20557] jfs_write_inode: jfs_commit_inode failed! [ 685.819373][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.848322][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.237720][T32517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10046'. [ 687.511977][T32533] netlink: 'syz.5.10051': attribute type 15 has an invalid length. [ 687.566587][T32533] netlink: 666 bytes leftover after parsing attributes in process `syz.5.10051'. [ 687.804818][T32547] netlink: 6 bytes leftover after parsing attributes in process `syz.5.10055'. [ 687.844500][T32547] netlink: 6 bytes leftover after parsing attributes in process `syz.5.10055'. [ 688.142474][T32557] loop2: detected capacity change from 0 to 4096 [ 688.174371][T32557] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 688.388027][T32557] ntfs3: loop2: ntfs_sync_inode r=1e failed, -22. [ 688.407641][T32557] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 688.659729][ T51] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 688.691567][ T4282] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 688.705707][T32591] loop5: detected capacity change from 0 to 128 [ 688.744272][T32591] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 688.796974][T32591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.234739][T32619] --map-set only usable from mangle table [ 689.691316][T32648] loop6: detected capacity change from 0 to 256 [ 689.802251][T32648] FAT-fs (loop6): Directory bread(block 64) failed [ 689.815206][T32648] FAT-fs (loop6): Directory bread(block 65) failed [ 689.847130][T32648] FAT-fs (loop6): Directory bread(block 66) failed [ 689.867422][T32648] FAT-fs (loop6): Directory bread(block 67) failed [ 689.895094][T32648] FAT-fs (loop6): Directory bread(block 68) failed [ 689.925256][T32648] FAT-fs (loop6): Directory bread(block 69) failed [ 689.957726][T32648] FAT-fs (loop6): Directory bread(block 70) failed [ 689.984767][T32659] netlink: 216 bytes leftover after parsing attributes in process `syz.5.10089'. [ 689.990582][T32648] FAT-fs (loop6): Directory bread(block 71) failed [ 690.040333][T32648] FAT-fs (loop6): Directory bread(block 72) failed [ 690.074374][T32648] FAT-fs (loop6): Directory bread(block 73) failed [ 691.453837][T32736] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 691.484170][T32736] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 691.697392][ T5036] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 691.922322][ T5036] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 691.942106][ T5036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.976418][ T5036] usb 7-1: Product: syz [ 691.999766][ T5036] usb 7-1: Manufacturer: syz [ 692.014993][ T5036] usb 7-1: SerialNumber: syz [ 692.037152][T32763] loop2: detected capacity change from 0 to 1024 [ 692.046921][ T5036] r8152-cfgselector 7-1: config 0 descriptor?? [ 692.248128][ T5302] hfsplus: b-tree write err: -5, ino 4 [ 692.486414][ T5036] r8152-cfgselector 7-1: Unknown version 0x0000 [ 692.503958][ T5036] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 692.802490][ T340] loop2: detected capacity change from 0 to 128 [ 693.260274][ T356] device wlan0 entered promiscuous mode [ 693.744748][ T384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10144'. [ 693.895375][ T26] audit: type=1326 audit(693.856:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=387 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 693.966888][ T26] audit: type=1326 audit(693.856:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=387 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 694.065049][ T26] audit: type=1326 audit(693.856:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=387 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 694.095412][ T394] netlink: 'syz.4.10147': attribute type 2 has an invalid length. [ 694.135625][ T26] audit: type=1326 audit(693.856:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=387 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 694.359320][ T374] loop5: detected capacity change from 0 to 32768 [ 694.692121][ T416] netlink: 'syz.6.10154': attribute type 21 has an invalid length. [ 694.839456][ T374] XFS (loop5): Mounting V5 Filesystem [ 694.984255][ T374] XFS (loop5): Ending clean mount [ 694.995111][ T374] XFS (loop5): Quotacheck needed: Please wait. [ 695.081366][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 695.091042][ T437] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 695.125879][ T374] XFS (loop5): Quotacheck: Done. [ 695.331892][T15499] XFS (loop5): Unmounting Filesystem [ 695.450463][ T457] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.10164'. [ 696.165071][ T494] netlink: 'syz.5.10165': attribute type 10 has an invalid length. [ 696.187637][ T494] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10165'. [ 696.211920][ T494] netlink: 'syz.5.10165': attribute type 10 has an invalid length. [ 696.240622][ T494] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10165'. [ 696.598210][ T521] netlink: 'syz.1.10184': attribute type 1 has an invalid length. [ 696.646036][ T521] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10184'. [ 696.949221][ T26] audit: type=1400 audit(696.906:392): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=533 comm="syz.2.10189" [ 696.977544][ T544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10191'. [ 697.690533][ T590] usb usb8: check_ctrlrecip: process 590 (syz.5.10208) requesting ep 01 but needs 81 [ 697.723322][ T590] usb usb8: usbfs: process 590 (syz.5.10208) did not claim interface 0 before use [ 697.870959][ T600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10209'. [ 698.649658][ T651] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 699.331267][T17423] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 699.527713][T17423] usb 3-1: Using ep0 maxpacket: 32 [ 699.538607][T17423] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 699.566068][T17423] usb 3-1: config 0 has no interface number 1 [ 699.599219][T17423] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 699.634638][T17423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.657509][T17423] usb 3-1: Product: syz [ 699.662843][T17423] usb 3-1: Manufacturer: syz [ 699.696406][T17423] usb 3-1: SerialNumber: syz [ 699.718605][T17423] usb 3-1: config 0 descriptor?? [ 699.731372][ T728] futex_wake_op: syz.1.10251 tries to shift op by 32; fix this program [ 699.795085][T17423] snd-usb-audio: probe of 3-1:0.74 failed with error -22 [ 699.896083][ T746] loop6: detected capacity change from 0 to 16 [ 699.922479][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.978530][ T746] erofs: (device loop6): mounted with root inode @ nid 36. [ 700.044617][T17423] usb 3-1: USB disconnect, device number 43 [ 700.055681][ T746] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 700.148119][ T746] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 700.206158][ T746] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 700.375468][ T777] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10260'. [ 700.855600][ T809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10270'. [ 700.885015][ T809] netlink: zone id is out of range [ 700.903758][ T809] netlink: zone id is out of range [ 700.925109][ T809] netlink: zone id is out of range [ 700.943315][ T809] netlink: zone id is out of range [ 700.966417][ T809] netlink: zone id is out of range [ 700.993145][ T809] netlink: zone id is out of range [ 701.024299][ T809] netlink: zone id is out of range [ 701.046366][ T809] netlink: zone id is out of range [ 701.068941][ T809] netlink: zone id is out of range [ 701.084545][ T809] netlink: zone id is out of range [ 701.604127][ T860] loop4: detected capacity change from 0 to 64 [ 701.797380][T17425] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 702.010041][T17425] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 702.029630][T17425] usb 3-1: config 0 has no interface number 0 [ 702.035917][T17425] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 702.074462][T17425] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 702.107757][T17425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.124546][T17425] usb 3-1: Product: syz [ 702.137418][T17425] usb 3-1: Manufacturer: syz [ 702.147628][T17425] usb 3-1: SerialNumber: syz [ 702.170505][T17425] usb 3-1: config 0 descriptor?? [ 702.178206][ T848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 702.202403][T17425] usb-storage 3-1:0.20: USB Mass Storage device detected [ 702.246159][T17425] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 702.373363][ T904] loop6: detected capacity change from 0 to 1764 [ 702.433235][ T931] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 702.441806][T17425] scsi host1: usb-storage 3-1:0.20 [ 702.486906][ T904] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 702.642717][ T4990] usb 3-1: USB disconnect, device number 44 [ 702.884084][ T26] audit: type=1326 audit(702.846:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.5.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd9b9aeb9 code=0x7ffc0000 [ 702.989286][ T26] audit: type=1326 audit(702.846:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.5.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f8cd9b9aeb9 code=0x7ffc0000 [ 703.041070][ T26] audit: type=1326 audit(702.846:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.5.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd9b9aeb9 code=0x7ffc0000 [ 703.093175][ T972] xt_CT: No such helper "snmp_trap" [ 703.153049][ T26] audit: type=1326 audit(702.846:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.5.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd9b9aeb9 code=0x7ffc0000 [ 703.316490][ T995] netlink: 'syz.2.10315': attribute type 10 has an invalid length. [ 703.345165][ T995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10315'. [ 703.738345][ T1017] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10321'. [ 703.820828][ T979] loop6: detected capacity change from 0 to 32768 [ 703.958173][ T979] XFS (loop6): Mounting V5 Filesystem [ 704.103288][ T979] XFS (loop6): Ending clean mount [ 704.398087][T26333] XFS (loop6): Unmounting Filesystem [ 704.567008][ T1068] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10335'. [ 704.630648][ T1076] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10336'. [ 704.860828][ T1084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10338'. [ 706.031585][ T1334] netlink: 'syz.2.10344': attribute type 13 has an invalid length. [ 706.057599][ T1564] net_ratelimit: 112 callbacks suppressed [ 706.057618][ T1564] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 706.294603][ T1642] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10348'. [ 706.354086][ T1342] loop4: detected capacity change from 0 to 32768 [ 706.498271][ T1342] XFS (loop4): Mounting V5 Filesystem [ 706.699750][ T1342] XFS (loop4): Ending clean mount [ 706.859443][ T4277] XFS (loop4): Unmounting Filesystem [ 706.956292][ T1681] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 707.155183][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.675961][ T1717] devpts: called with bogus options [ 708.053882][ T1741] loop4: detected capacity change from 0 to 2048 [ 708.136173][ T1741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 708.165427][ T1746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 708.442863][ T26] audit: type=1326 audit(708.406:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1763 comm="syz.4.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 708.537990][ T26] audit: type=1326 audit(708.446:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1763 comm="syz.4.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 708.634185][ T26] audit: type=1326 audit(708.446:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1763 comm="syz.4.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 708.742107][ T26] audit: type=1326 audit(708.446:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1763 comm="syz.4.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7cb9aeb9 code=0x7ffc0000 [ 709.166148][ T1802] loop6: detected capacity change from 0 to 4096 [ 709.410675][ T1802] ntfs3: loop6: ino=1f, "file2" attr_set_size [ 709.477697][ T1802] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 709.917568][T17423] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 709.934678][ T1845] device bridge2 entered promiscuous mode [ 710.135541][T17423] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 710.147433][ T22] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 710.155126][T17423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.200297][T17423] usb 3-1: config 0 descriptor?? [ 710.222107][T17423] cp210x 3-1:0.0: cp210x converter detected [ 710.349174][ T22] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 710.368084][ T22] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.399123][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 710.428892][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.472574][ T22] hub 5-1:4.0: USB hub found [ 710.629270][ T1878] loop5: detected capacity change from 0 to 8 [ 710.630626][T17423] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 710.649065][ T1878] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 710.673619][T24079] udevd[24079]: incorrect cramfs checksum on /dev/loop5 [ 710.677637][ T22] hub 5-1:4.0: 4 ports detected [ 710.686097][ T22] usb 5-1: selecting invalid altsetting 1 [ 710.686811][T17423] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 710.696199][ T22] hub 5-1:4.0: Using single TT (err -22) [ 710.711472][ T1878] cramfs: Error -3 while decompressing! [ 710.712754][T17423] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 710.737136][T17423] usb 3-1: cp210x converter now attached to ttyUSB0 [ 710.737389][ T1878] cramfs: ffffffff96d8b1e8(26)->ffff888043e3e000(4096) [ 710.761282][ T1878] cramfs: Error -3 while decompressing! [ 710.790146][ T1878] cramfs: ffffffff96d8b202(26)->ffff888043e3f000(4096) [ 710.799628][T17423] usb 3-1: USB disconnect, device number 45 [ 710.809483][ T1878] cramfs: Error -3 while decompressing! [ 710.824476][T17423] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 710.828885][ T1878] cramfs: ffffffff96d8b21c(16)->ffff88804cdd6000(4096) [ 710.849818][ T1878] cramfs: Error -3 while decompressing! [ 710.864030][T17423] cp210x 3-1:0.0: device disconnected [ 710.867692][ T1878] cramfs: ffffffff96d8b1e8(26)->ffff888043e3e000(4096) [ 710.894088][ T22] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 710.904166][ T22] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 710.925098][ T26] audit: type=1800 audit(710.886:401): pid=1878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10415" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 711.008649][ T22] usb 5-1: USB disconnect, device number 50 [ 711.445148][ T1930] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 711.488312][ T1930] Error parsing options; rc = [-22] [ 711.516751][ T1935] netlink: 196 bytes leftover after parsing attributes in process `syz.6.10425'. [ 711.623848][ T1939] netlink: 209848 bytes leftover after parsing attributes in process `syz.5.10426'. [ 711.661231][ T1944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10428'. [ 711.707778][ T1939] netlink: zone id is out of range [ 712.997873][ T2068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10433'. [ 713.007114][ T2068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10433'. [ 713.337758][ T27] INFO: task syz-executor:4271 blocked for more than 143 seconds. [ 713.346085][ T27] Not tainted syzkaller #0 [ 713.377494][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.386548][ T27] task:syz-executor state:D stack:20112 pid:4271 ppid:1 flags:0x00004004 [ 713.437321][ T27] Call Trace: [ 713.440717][ T27] [ 713.443800][ T27] __schedule+0x11d1/0x40e0 [ 713.477418][ T27] ? mark_lock+0x94/0x320 [ 713.481845][ T27] ? __sched_text_start+0x8/0x8 [ 713.497397][ T4272] Bluetooth: hci5: command 0x0406 tx timeout [ 713.507590][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 713.513747][ T27] ? lock_chain_count+0x20/0x20 [ 713.529152][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 713.534271][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 713.540272][ T27] schedule+0xb9/0x180 [ 713.544438][ T27] io_schedule+0x7c/0xd0 [ 713.549135][ T27] folio_wait_bit_common+0x70a/0xfa0 [ 713.554608][ T27] ? folio_wait_bit+0x30/0x30 [ 713.560443][ T27] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 713.577617][ T27] ? folio_mapping+0x1ba/0x4d0 [ 713.582767][ T27] truncate_inode_pages_range+0x9fe/0x1090 [ 713.603049][ T27] ? mapping_evict_folio+0x520/0x520 [ 713.615878][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 713.622379][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 713.628146][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 713.633395][ T27] evict+0x4dc/0x8d0 [ 713.637750][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 713.642688][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 713.648727][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 713.653968][ T27] evict_inodes+0x60c/0x6a0 [ 713.658944][ T27] ? clear_inode+0x150/0x150 [ 713.663599][ T27] generic_shutdown_super+0x93/0x340 [ 713.669170][ T27] kill_block_super+0x7c/0xe0 [ 713.673934][ T27] deactivate_locked_super+0x93/0xf0 [ 713.679534][ T27] cleanup_mnt+0x42c/0x4b0 [ 713.683986][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 713.689306][ T27] task_work_run+0x1d0/0x260 [ 713.693926][ T27] ? task_work_cancel+0x220/0x220 [ 713.699193][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 713.704804][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 713.710396][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 713.716000][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 713.721574][ T27] do_syscall_64+0x58/0xa0 [ 713.726019][ T27] ? clear_bhb_loop+0x60/0xb0 [ 713.730783][ T27] ? clear_bhb_loop+0x60/0xb0 [ 713.736027][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.742065][ T27] RIP: 0033:0x7f760659c117 [ 713.746507][ T27] RSP: 002b:00007ffca2fcee48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 713.755050][ T27] RAX: 0000000000000000 RBX: 00007f760660471f RCX: 00007f760659c117 [ 713.763149][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca2fcef00 [ 713.771445][ T27] RBP: 00007ffca2fcef00 R08: 00007ffca2fcff00 R09: 00000000ffffffff [ 713.779776][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca2fcff90 [ 713.787925][ T27] R13: 00007f760660471f R14: 000000000008b176 R15: 00007ffca2fcffd0 [ 713.796009][ T27] [ 713.799198][ T27] [ 713.799198][ T27] Showing all locks held in the system: [ 713.806997][ T27] 1 lock held by rcu_tasks_kthre/12: [ 713.813240][ T27] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 713.824922][ T27] 1 lock held by rcu_tasks_trace/13: [ 713.832998][ T27] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 713.850492][ T27] 1 lock held by khungtaskd/27: [ 713.855696][ T27] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 713.867973][ T27] 2 locks held by kworker/u4:4/75: [ 713.873166][ T27] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 713.883387][ T27] #1: ffffc900015d7d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 713.896045][ T27] 2 locks held by getty/4031: [ 713.901001][ T27] #0: ffff88814dab3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 713.911219][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 713.921786][ T27] 1 lock held by syz-executor/4271: [ 713.927105][ T27] #0: ffff8880782aa0e0 (&type->s_umount_key#100){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 713.937692][ T27] 4 locks held by kworker/u4:7/4356: [ 713.943459][ T27] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 713.953853][ T27] #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 713.966023][ T27] #2: ffff8880b8e28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 713.975619][ T27] #3: ffffffff96efe308 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4f0 [ 713.986429][ T27] 5 locks held by kworker/u4:8/5302: [ 713.991804][ T27] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 714.001960][ T27] #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 714.013663][ T27] #2: ffff8880b8e28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 714.026548][ T27] #3: ffffffff96e3db58 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4f0 [ 714.037074][ T27] #4: ffffffff96ed3e58 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x136/0x530 [ 714.048516][ T27] [ 714.050866][ T27] ============================================= [ 714.050866][ T27] [ 714.060039][ T27] NMI backtrace for cpu 1 [ 714.064399][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 714.071599][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.081669][ T27] Call Trace: [ 714.084943][ T27] [ 714.087886][ T27] dump_stack_lvl+0x188/0x24e [ 714.092591][ T27] ? irq_work_queue+0xb8/0x140 [ 714.097388][ T27] ? show_regs_print_info+0x12/0x12 [ 714.102656][ T27] ? load_image+0x400/0x400 [ 714.107153][ T27] ? vprintk_emit+0x59f/0x6a0 [ 714.112434][ T27] ? printk_sprint+0x460/0x460 [ 714.117429][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 714.122495][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 714.128657][ T27] ? _printk+0xda/0x130 [ 714.133443][ T27] ? load_image+0x400/0x400 [ 714.137953][ T27] ? load_image+0x400/0x400 [ 714.142477][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 714.148567][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 714.154677][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 714.160860][ T27] watchdog+0xeee/0xf30 [ 714.165023][ T27] ? watchdog+0x1ed/0xf30 [ 714.169465][ T27] kthread+0x29d/0x330 [ 714.173720][ T27] ? hungtask_pm_notify+0x40/0x40 [ 714.178848][ T27] ? kthread_blkcg+0xd0/0xd0 [ 714.184539][ T27] ret_from_fork+0x1f/0x30 [ 714.189044][ T27] [ 714.192205][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.198539][ T27] Sending NMI from CPU 1 to CPUs 0: [ 714.204458][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 714.217569][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 714.224540][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 714.231765][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.241824][ T27] Call Trace: [ 714.245800][ T27] [ 714.248728][ T27] dump_stack_lvl+0x188/0x24e [ 714.253417][ T27] ? memcpy+0x3c/0x60 [ 714.257402][ T27] ? show_regs_print_info+0x12/0x12 [ 714.262608][ T27] ? load_image+0x400/0x400 [ 714.267207][ T27] panic+0x2e5/0x730 [ 714.271135][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 714.276785][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 714.281297][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 714.286940][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 714.293104][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 714.299330][ T27] watchdog+0xf2d/0xf30 [ 714.303497][ T27] ? watchdog+0x1ed/0xf30 [ 714.307833][ T27] kthread+0x29d/0x330 [ 714.311998][ T27] ? hungtask_pm_notify+0x40/0x40 [ 714.317326][ T27] ? kthread_blkcg+0xd0/0xd0 [ 714.321924][ T27] ret_from_fork+0x1f/0x30 [ 714.326429][ T27] [ 714.330020][ T27] Kernel Offset: disabled [ 714.334358][ T27] Rebooting in 86400 seconds..