last executing test programs: 6m57.809761959s ago: executing program 4 (id=5199): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1075d, &(0x7f0000002140)={[{@noinit_itable}, {@mblk_io_submit}, {@noload}, {@errors_remount}, {@abort, 0x0}, {@noload}, {@nouid32}, {@grpquota}, {@usrjquota}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x511, &(0x7f0000000400)="$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") ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 6m57.054661988s ago: executing program 4 (id=5211): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgsnd(0x0, 0x0, 0x401, 0x0) 6m56.699290969s ago: executing program 4 (id=5217): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x2, 0x0, 0x0, 0x0) 6m56.384811996s ago: executing program 4 (id=5222): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000001240)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x2}}, {@quota}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m54.890527044s ago: executing program 4 (id=5249): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 6m53.566862096s ago: executing program 4 (id=5270): sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff8a"], 0x0) 6m52.959738326s ago: executing program 32 (id=5270): sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff8a"], 0x0) 6m9.576090569s ago: executing program 0 (id=5824): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)={0x10, 0x14, 0x801, 0x70bd26, 0x25dfdbfe}, 0x10}, {&(0x7f0000001c80)={0x10, 0x41, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}], 0x2, 0x0, 0x0, 0x40880}, 0x4) 6m9.281675846s ago: executing program 0 (id=5829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m9.020275147s ago: executing program 0 (id=5834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) 6m8.838946715s ago: executing program 0 (id=5836): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) 6m8.623985071s ago: executing program 0 (id=5841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0097f9d2ffffff925782a5000000", 0x0, 0xead, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m8.326567031s ago: executing program 0 (id=5845): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 5m52.150721288s ago: executing program 33 (id=5845): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 2m56.655638161s ago: executing program 6 (id=8561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x3c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004045}, 0x20040844) 2m56.154120169s ago: executing program 6 (id=8567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) 2m55.854118752s ago: executing program 6 (id=8572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000006c00028008000700020000000a000100aa"], 0x48}}, 0x4c000) 2m55.517275136s ago: executing program 6 (id=8579): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000500)={'erspan0\x00', 0x0}) 2m55.288817216s ago: executing program 6 (id=8582): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0) 2m54.946765409s ago: executing program 6 (id=8586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m38.787809471s ago: executing program 34 (id=8586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.902503929s ago: executing program 5 (id=11056): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000b07412d2a8de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.684913691s ago: executing program 5 (id=11061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x14, 0x15, 0x1, 0x70bd2b, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x400c4) 2.32431564s ago: executing program 5 (id=11067): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000300)="aa1696e9f7db133a") 2.010883129s ago: executing program 5 (id=11075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x8, 0x1, ':]$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000810) 1.644042494s ago: executing program 5 (id=11081): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.613730436s ago: executing program 7 (id=11082): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.580346417s ago: executing program 8 (id=11083): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@echo=0x5) 1.569604881s ago: executing program 2 (id=11085): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xffffffff, 0x1, 0x8, "42e28d2ce0287589a4b2075c93404bd8d1147976430c4a6961ff38ab73b56b57", 0x50323234}) 1.345761403s ago: executing program 5 (id=11086): r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000015c0)='./file0\x00', 0x2000000, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000001600)="$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") ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000100)={0x0, 0x1, 0x1, [0x9009, 0x7146, 0x7, 0x5, 0x4], [0xb, 0x7, 0x100000001, 0x400, 0xffffffffffff0001, 0x1, 0x0, 0x3, 0x2, 0x6, 0x6b59c17c, 0x3, 0x5, 0x8, 0x3, 0x1, 0x7, 0x3, 0x3, 0x0, 0x6a3, 0x7c, 0x4, 0xffffffff80000001, 0x9, 0x4, 0x3, 0x1, 0x1, 0x9, 0x1, 0x5, 0x5ae0, 0x7, 0x1, 0xce, 0x4, 0x6, 0x6, 0x3, 0x40000000004, 0x2, 0x200, 0x9, 0xc7, 0x40101, 0x9, 0x34d, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x588, 0x100000000000003, 0xf, 0x7c, 0x7, 0x7, 0x8, 0x4, 0x3, 0x2, 0x10f, 0xae9b, 0x0, 0x6, 0x8, 0xb5, 0x23, 0x80000001, 0x1, 0x1, 0xae, 0x0, 0x7, 0xaa59, 0x4, 0x7fff, 0x8, 0x1, 0x8, 0x9, 0x7, 0x3, 0x96d, 0x100000001, 0x2, 0x5, 0x1, 0x6, 0x20000010, 0xb, 0x1, 0x7, 0x5, 0xe582, 0xffff, 0x4, 0x13, 0xb0dd, 0x3, 0x80, 0x65b, 0x0, 0xca, 0x7, 0x7, 0x9, 0x2, 0x76, 0x91, 0x8001, 0xfffffffe000000, 0x100, 0x4, 0x30, 0x7fffffffffffffff, 0x2, 0x1, 0x1ff, 0x8]}) 1.345609197s ago: executing program 1 (id=11087): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x5, @pix_mp={0x9, 0x2, 0x3631564e, 0x6, 0x1, [{0x1, 0x4}, {0xd3, 0x4}, {0x5, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000000}, {0x3ff, 0x1}, {0x5, 0x800000}], 0x9, 0xbe, 0x3, 0x2}}) 1.34318126s ago: executing program 7 (id=11088): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) 1.304077601s ago: executing program 2 (id=11089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newlink={0x4c, 0x10, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x6897c, 0x13}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xe}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x24008014) 1.267808691s ago: executing program 8 (id=11090): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00', @random="1805aa000020"}) 1.239373594s ago: executing program 3 (id=11091): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x141200) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r0, 0x800a6f2f, &(0x7f0000000100)) 1.09401991s ago: executing program 1 (id=11092): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"61ffffff", 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a4380002d5c010", "b0af22b85f6c12180bff00", "0000efffffffffffbfff00"]}) 1.093580103s ago: executing program 7 (id=11093): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 961.618862ms ago: executing program 8 (id=11094): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/') mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) 960.550924ms ago: executing program 2 (id=11095): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) 878.631207ms ago: executing program 3 (id=11096): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) 836.976874ms ago: executing program 1 (id=11097): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000005000/0x4000)=nil, 0x1020, 0x8, 0x11, r0, 0x81000000) 788.314965ms ago: executing program 7 (id=11098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xc0, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) 693.195569ms ago: executing program 2 (id=11099): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x16, 0x0, 0x0, 0x5, 0xfffffffffffffedc, 0x0}) 691.600656ms ago: executing program 8 (id=11100): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) ppoll(&(0x7f00000001c0)=[{r0, 0x2082}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) 691.450721ms ago: executing program 3 (id=11101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000ffffff7f18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000000d000000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000007756fa500b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 616.757049ms ago: executing program 1 (id=11102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 565.916934ms ago: executing program 7 (id=11103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) getresuid(&(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)) 431.649919ms ago: executing program 7 (id=11104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x4c}}, 0x0) 426.018388ms ago: executing program 2 (id=11105): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002bfe0103"], 0xa0}}, 0x0) 416.245206ms ago: executing program 3 (id=11106): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000000)) 368.749666ms ago: executing program 8 (id=11107): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x2, @pix={0xa18, 0x6, 0x55595659, 0x5, 0x400, 0x7, 0x3, 0x10, 0x1, 0x8, 0x1, 0x5}}) 330.559146ms ago: executing program 1 (id=11108): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x1ff, '\x00', @value64=0xfffffffffffffffe}}) 179.09181ms ago: executing program 3 (id=11109): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000d40)={0x6, 0x1, 0x100, "9514604dbe4f6cbb97181cf41d4752430b7ba826e02fd2758cec770c65b8a2ab", 0x36314d59}) 70.54594ms ago: executing program 1 (id=11110): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000368060100000800030002000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 66.331473ms ago: executing program 2 (id=11111): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000002c0)=0xfffffffd) 32.060029ms ago: executing program 8 (id=11112): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) 0s ago: executing program 3 (id=11113): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000015c0)=0xe845, 0x4) kernel console output (not intermixed with test programs): cpver:1219692001,blkaddr:4098] [ 888.073589][ T2772] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 888.149449][ T2779] loop1: detected capacity change from 0 to 512 [ 888.212839][ T2779] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 888.263179][ T2779] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.9395: bad orphan inode 131083 [ 888.284684][ T2779] loop1: lost filesystem error report for type 5 error -117 [ 888.292355][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 888.305590][ T2779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.306156][ C0] EXT4-fs (loop1): initial error at time 4475: ext4_orphan_get:1417 [ 888.326158][ C0] EXT4-fs (loop1): last error at time 4475: ext4_orphan_get:1417 [ 888.342879][ T2792] loop7: detected capacity change from 0 to 256 [ 888.384917][ T2794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.488655][ T2792] FAT-fs (loop7): Directory bread(block 64) failed [ 888.506050][ T2792] FAT-fs (loop7): Directory bread(block 65) failed [ 888.525674][ T2792] FAT-fs (loop7): Directory bread(block 66) failed [ 888.560495][ T6214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.607922][ T2792] FAT-fs (loop7): Directory bread(block 67) failed [ 888.657985][ T2792] FAT-fs (loop7): Directory bread(block 68) failed [ 888.699807][ T2792] FAT-fs (loop7): Directory bread(block 69) failed [ 888.744815][ T2792] FAT-fs (loop7): Directory bread(block 70) failed [ 888.751427][ T2792] FAT-fs (loop7): Directory bread(block 71) failed [ 888.799387][ T2792] FAT-fs (loop7): Directory bread(block 72) failed [ 888.837075][ T2792] FAT-fs (loop7): Directory bread(block 73) failed [ 889.016221][ T2838] loop1: detected capacity change from 0 to 512 [ 889.050351][ T2838] EXT4-fs: Ignoring removed orlov option [ 889.102489][ T2838] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 889.146518][ T2838] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.9407: corrupted in-inode xattr: e_value size too large [ 889.190940][ T2838] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 889.191838][ T2838] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9407: couldn't read orphan inode 15 (err -117) [ 889.201111][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 889.201136][ C1] EXT4-fs (loop1): initial error at time 4476: ext4_iget_extra_inode:5025: inode 15 [ 889.201173][ C1] EXT4-fs (loop1): last error at time 4476: ext4_iget_extra_inode:5025: inode 15 [ 889.271587][ T2838] loop1: lost filesystem error report for type 5 error -117 [ 889.274078][ T2838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.533994][ T6214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.726248][ T2893] loop8: detected capacity change from 0 to 736 [ 889.771689][ T2918] ipt_REJECT: TCP_RESET invalid for non-tcp [ 889.804584][ T2884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 889.845836][ T2887] netlink: 'syz.3.9420': attribute type 29 has an invalid length. [ 889.963565][ T2926] loop5: detected capacity change from 0 to 1024 [ 890.006535][ T2926] hfsplus: bad catalog file entry [ 890.011891][ T6343] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 890.133582][ T2938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9426'. [ 890.221653][ T6343] usb 8-1: unable to get BOS descriptor or descriptor too short [ 890.248011][ T6343] usb 8-1: config 129 has an invalid interface number: 135 but max is 0 [ 890.272277][ T6343] usb 8-1: config 129 has an invalid interface number: 5 but max is 0 [ 890.284815][ T2948] loop1: detected capacity change from 0 to 512 [ 890.295863][ T6343] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 890.316647][ T2948] EXT4-fs: Ignoring removed i_version option [ 890.344349][ T6343] usb 8-1: config 129 has no interface number 0 [ 890.350702][ T6343] usb 8-1: config 129 has no interface number 1 [ 890.384949][ T6343] usb 8-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 890.400252][ T2948] EXT4-fs error (device loop1): __ext4_iget:5378: inode #11: block 1: comm syz.1.9429: invalid block [ 890.420148][ T6343] usb 8-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 890.445868][ T6343] usb 8-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 890.449418][ T2948] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 890.478230][ T6343] usb 8-1: config 129 interface 135 has no altsetting 0 [ 890.484467][ T2962] loop3: detected capacity change from 0 to 64 [ 890.494860][ T6343] usb 8-1: config 129 interface 5 has no altsetting 0 [ 890.522315][ T6343] usb 8-1: string descriptor 0 read error: -22 [ 890.528561][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 890.528587][ C0] EXT4-fs (loop1): initial error at time 4477: __ext4_iget:5378: inode 11: block 1 [ 890.528639][ C0] EXT4-fs (loop1): last error at time 4477: __ext4_iget:5378: inode 11: block 1 [ 890.567172][ T2948] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9429: couldn't read orphan inode 11 (err -117) [ 890.587825][ T2948] loop1: lost filesystem error report for type 5 error -117 [ 890.588244][ T6343] usb 8-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 890.607403][ T6343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.619161][ T2948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.800662][ T6214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.817961][ T6343] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 890.838973][ T6343] usb 8-1: MIDIStreaming interface descriptor not found [ 891.150001][ T3002] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9439'. [ 891.234131][ T3002] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9439'. [ 891.313471][ T6343] usb 8-1: USB disconnect, device number 12 [ 891.526497][ T3030] sctp: [Deprecated]: syz.8.9445 (pid 3030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.526497][ T3030] Use struct sctp_sack_info instead [ 891.910117][ T3056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9451'. [ 892.351402][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 892.530673][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 892.546327][ T24] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 892.574186][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.593574][ T24] usb 9-1: Product: syz [ 892.598965][ T24] usb 9-1: Manufacturer: syz [ 892.615156][ T24] usb 9-1: SerialNumber: syz [ 892.670388][ T24] r8152-cfgselector 9-1: Unknown version 0x0000 [ 892.681983][ T24] r8152-cfgselector 9-1: config 0 descriptor?? [ 892.940079][ T3113] loop7: detected capacity change from 0 to 2048 [ 892.970683][ T24] r8152-cfgselector 9-1: Unknown version 0x0000 [ 892.977518][ T24] r8152-cfgselector 9-1: bad CDC descriptors [ 893.022803][ T3130] loop2: detected capacity change from 0 to 256 [ 893.083151][ T3130] FAT-fs (loop2): Directory bread(block 64) failed [ 893.104994][ T3130] FAT-fs (loop2): Directory bread(block 65) failed [ 893.126192][ T3136] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 893.126597][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9475'. [ 893.152312][ T3130] FAT-fs (loop2): Directory bread(block 66) failed [ 893.174393][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 893.193826][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9475'. [ 893.200240][ T24] r8152-cfgselector 9-1: USB disconnect, device number 3 [ 893.204781][ T3130] FAT-fs (loop2): Directory bread(block 67) failed [ 893.218336][ T3130] FAT-fs (loop2): Directory bread(block 68) failed [ 893.224869][ T3130] FAT-fs (loop2): Directory bread(block 69) failed [ 893.239661][ T3130] FAT-fs (loop2): Directory bread(block 70) failed [ 893.246507][ T3130] FAT-fs (loop2): Directory bread(block 71) failed [ 893.254608][ T3130] FAT-fs (loop2): Directory bread(block 72) failed [ 893.261152][ T3113] NILFS (loop7): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 893.261421][ T3113] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 893.302877][ T3113] Remounting filesystem read-only [ 893.312863][ T3113] NILFS (loop7): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 893.333207][ T3130] FAT-fs (loop2): Directory bread(block 73) failed [ 893.361521][ T3113] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16) [ 893.391164][ T3113] NILFS (loop7): error -5 truncating bmap (ino=16) [ 893.391658][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 893.418446][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.426484][ T9] usb 4-1: Product: syz [ 893.450699][ T9] usb 4-1: Manufacturer: syz [ 893.461593][ T9] usb 4-1: SerialNumber: syz [ 893.475219][T20645] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 893.498251][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 893.498275][ T30] audit: type=1800 audit(4480.206:310): pid=3130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9474" name="file1" dev="loop2" ino=1048792 res=0 errno=0 [ 893.532037][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 893.607264][ T6343] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 893.731773][ T3155] netlink: 'syz.7.9476': attribute type 10 has an invalid length. [ 893.748174][ T3097] loop5: detected capacity change from 0 to 32768 [ 893.776634][ T3097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9465 (3097) [ 893.837999][ T3163] loop2: detected capacity change from 0 to 65 [ 893.856910][ T3097] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 893.895577][ T3097] BTRFS info (device loop5): using crc32c checksum algorithm [ 893.908996][ T3163] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 893.917507][ T3122] random: crng reseeded on system resumption [ 894.106982][ T3183] netlink: 'syz.8.9481': attribute type 92 has an invalid length. [ 894.193580][ T3188] netlink: 156 bytes leftover after parsing attributes in process `syz.7.9480'. [ 894.270347][ T9] usb 4-1: USB disconnect, device number 107 [ 894.271186][ T3097] BTRFS info (device loop5): turning off barriers [ 894.300846][ T3188] netlink: 156 bytes leftover after parsing attributes in process `syz.7.9480'. [ 894.312898][ T3097] BTRFS info (device loop5): enabling free space tree [ 894.336906][ T3097] BTRFS info (device loop5): use zstd compression, level 3 [ 894.453055][ T6225] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 894.470419][ T30] audit: type=1400 audit(4481.095:311): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=3196 comm="syz.1.9482" [ 894.757536][ T6343] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 894.823315][ T6343] ath9k_htc: Failed to initialize the device [ 894.860584][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 895.316073][ T6302] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 895.585446][ T6302] usb 8-1: Using ep0 maxpacket: 8 [ 895.605526][ T6302] usb 8-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 895.636442][ T6302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.659959][ T6302] usb 8-1: Product: syz [ 895.672849][ T3250] loop2: detected capacity change from 0 to 2048 [ 895.680088][ T6302] usb 8-1: Manufacturer: syz [ 895.720825][ T6302] usb 8-1: SerialNumber: syz [ 895.742134][ T3250] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 895.790097][ T3250] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 895.824598][ T3250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 896.051693][ T3269] x_tables: unsorted underflow at hook 3 [ 896.142431][ T3275] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 896.223193][ T6302] mxuport 8-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 896.248094][ T3283] netlink: 'syz.2.9505': attribute type 1 has an invalid length. [ 896.278093][ T6302] mxuport 8-1:254.0: probe with driver mxuport failed with error -5 [ 896.330050][ T6302] usb 8-1: USB disconnect, device number 13 [ 896.991684][ T3325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9517'. [ 897.387996][ T3356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9525'. [ 897.411562][ T3356] netlink: 276 bytes leftover after parsing attributes in process `syz.1.9525'. [ 897.429908][ T3358] netlink: 'syz.5.9526': attribute type 1 has an invalid length. [ 897.931959][ T6343] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 898.110534][ T6343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.135062][ T6343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.146435][ T6343] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 898.169600][ T6343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 898.194356][ T6343] usb 4-1: SerialNumber: syz [ 898.390929][ T3411] loop7: detected capacity change from 0 to 4096 [ 898.438158][ T3411] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 898.476985][ T6343] usb 4-1: 0:2 : does not exist [ 898.510732][ T6343] usb 4-1: unit 5: unexpected type 0x03 [ 898.679166][ T6343] usb 4-1: USB disconnect, device number 108 [ 898.842313][ T6163] udevd[6163]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.890698][ T3447] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16 [ 898.908502][ T3442] loop5: detected capacity change from 0 to 1024 [ 898.942600][ T3442] EXT4-fs: Ignoring removed orlov option [ 899.011518][ T3442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.183210][ T3442] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 899.375300][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.440007][ T3406] loop8: detected capacity change from 0 to 32768 [ 899.531098][ T3406] ERROR: (device loop8): dbAlloc: the hint is outside the map [ 899.531098][ T3406] [ 899.588163][ T3406] ERROR: (device loop8): remounting filesystem as read-only [ 899.762564][ T3498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9556'. [ 899.957767][ T6343] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 900.084403][ T3512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.155990][ T6343] usb 4-1: Using ep0 maxpacket: 8 [ 900.195088][ T6343] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 900.223540][ T6343] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 900.277931][ T6343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 9669, setting to 1024 [ 900.308497][ T3522] delete_channel: no stack [ 900.310017][ T3523] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9564'. [ 900.334299][ T6343] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.403166][ T6343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 900.418223][ T3530] program syz.1.9566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 900.436507][ T6343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.444541][ T6343] usb 4-1: Product: syz [ 900.499081][ T6343] usb 4-1: Manufacturer: syz [ 900.503754][ T6343] usb 4-1: SerialNumber: syz [ 900.561396][ T3489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 900.594694][ T3489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 900.655352][ T6343] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 900.689331][ T6343] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 900.712653][ T6343] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 900.954793][ T6343] usb 4-1: USB disconnect, device number 109 [ 901.011797][ T3559] loop5: detected capacity change from 0 to 256 [ 901.175364][ T3559] FAT-fs (loop5): Directory bread(block 64) failed [ 901.182010][ T3559] FAT-fs (loop5): Directory bread(block 65) failed [ 901.248022][ T3559] FAT-fs (loop5): Directory bread(block 66) failed [ 901.276461][ T3559] FAT-fs (loop5): Directory bread(block 67) failed [ 901.310644][ T3559] FAT-fs (loop5): Directory bread(block 68) failed [ 901.340023][ T3559] FAT-fs (loop5): Directory bread(block 69) failed [ 901.369380][ T3559] FAT-fs (loop5): Directory bread(block 70) failed [ 901.385555][ T3586] QAT: failed to copy from user cfg_data. [ 901.420675][ T3559] FAT-fs (loop5): Directory bread(block 71) failed [ 901.427362][ T3559] FAT-fs (loop5): Directory bread(block 72) failed [ 901.480523][ T3559] FAT-fs (loop5): Directory bread(block 73) failed [ 901.611251][ T30] audit: type=1800 audit(4487.800:312): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9575" name="cpu.stat" dev="loop5" ino=1048793 res=0 errno=0 [ 901.980602][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9592'. [ 902.229049][ T6302] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 902.429509][ T6302] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 902.448749][ T6302] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 902.475989][ T6302] usb 6-1: config 0 has no interface number 0 [ 902.528286][ T6295] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 902.536597][ T3661] loop3: detected capacity change from 0 to 512 [ 902.539501][ T6302] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 902.566262][ T6302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.585787][ T3661] EXT4-fs (loop3): orphan cleanup on readonly fs [ 902.593203][ T6302] usb 6-1: Product: syz [ 902.605745][ T3661] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 902.613534][ T6302] usb 6-1: Manufacturer: syz [ 902.618604][ T6302] usb 6-1: SerialNumber: syz [ 902.636512][ T3661] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 902.656083][ T3661] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.9605: attempt to clear invalid blocks 2 len 1 [ 902.662927][ T3667] netlink: zone id is out of range [ 902.669007][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 902.669040][ C1] EXT4-fs (loop3): initial error at time 4488: ext4_mb_generate_buddy:1315 [ 902.669073][ C1] EXT4-fs (loop3): last error at time 4488: ext4_mb_generate_buddy:1315 [ 902.670119][ T3661] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 902.699471][ T6302] usb 6-1: config 0 descriptor?? [ 902.752477][ T6295] usb 8-1: Using ep0 maxpacket: 8 [ 902.767510][ T6295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 902.782431][ T3661] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9605: invalid indirect mapped block 1819239214 (level 0) [ 902.810087][ T6295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.835054][ T3661] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 902.835311][ T6295] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.856034][ T6295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 902.867367][ T3661] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9605: invalid indirect mapped block 1819239214 (level 1) [ 902.881648][ T3661] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 902.881911][ T6295] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 902.903484][ T3667] netlink: set zone limit has 4 unknown bytes [ 902.909144][ T3661] EXT4-fs (loop3): 1 truncate cleaned up [ 902.921136][ T6295] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 902.936539][ T3661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 902.992824][ T3661] EXT4-fs error (device loop3): __ext4_remount:6804: comm syz.3.9605: Abort forced by user [ 903.006856][ T3661] EXT4-fs (loop3): Remounting filesystem read-only [ 903.020001][ T6295] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.041091][ T3661] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 903.066987][ T6295] usb 8-1: config 0 descriptor?? [ 903.085034][ T3642] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 903.127064][ T6343] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 903.170659][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.206862][ T6302] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 903.224623][ T6302] uvcvideo 6-1:0.64: No valid video chain found. [ 903.237917][ T6302] usb 6-1: USB disconnect, device number 95 [ 903.292183][ T3696] loop1: detected capacity change from 0 to 1024 [ 903.342525][ T6343] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 903.364911][ T3696] hfsplus: invalid length 32517 has been corrected to 255 [ 903.378316][ T3706] netlink: 'syz.2.9613': attribute type 1 has an invalid length. [ 903.387797][ T6343] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.404273][ T3706] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9613'. [ 903.429050][ T3706] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9613'. [ 903.463956][ T3706] netlink: 658 bytes leftover after parsing attributes in process `syz.2.9613'. [ 903.465335][ T6343] usb 9-1: config 0 descriptor?? [ 903.605714][ T9] usb 8-1: USB disconnect, device number 14 [ 903.616120][T17768] Bluetooth: hci8: Opcode 0x0c03 failed: -19 [ 903.635759][T20128] hfsplus: b-tree write err: -5, ino 20 [ 903.794999][ T3729] loop3: detected capacity change from 0 to 256 [ 903.880952][ T3729] exFAT-fs (loop3): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 903.987545][ T6343] ath6kl: Failed to submit usb control message: -71 [ 904.018062][ T6343] ath6kl: unable to send the bmi data to the device: -71 [ 904.048271][ T6343] ath6kl: Unable to send get target info: -71 [ 904.089239][ T6343] ath6kl: Failed to init ath6kl core: -71 [ 904.129060][ T6343] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 904.192763][ T6343] usb 9-1: USB disconnect, device number 4 [ 904.281472][ T3757] binfmt_misc: register: failed to install interpreter file ./file0 [ 904.670938][ T3775] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9627'. [ 904.930674][ T3786] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 905.019197][ T3736] syz.1.9615 (3736): drop_caches: 2 [ 905.196639][ T3798] netlink: 'syz.1.9634': attribute type 2 has an invalid length. [ 905.221014][ T6343] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 905.292217][ T3798] : entered promiscuous mode [ 905.415130][ T6343] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.488960][ T6343] usb 9-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 905.514276][ T6343] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.561095][ T6343] usb 9-1: Product: syz [ 905.573249][ T6343] usb 9-1: Manufacturer: syz [ 905.588767][ T6343] usb 9-1: SerialNumber: syz [ 905.613003][ T3819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9640'. [ 905.635435][ T6343] usb 9-1: config 0 descriptor?? [ 905.881047][ T6343] cdc_subset 9-1:0.0: probe with driver cdc_subset failed with error -22 [ 906.134289][ T6356] usb 9-1: USB disconnect, device number 5 [ 906.426080][ T3876] : renamed from team_slave_1 (while UP) [ 906.970140][ T3905] loop8: detected capacity change from 0 to 1764 [ 906.991205][ T30] audit: type=1326 audit(4492.837:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.075564][ T30] audit: type=1326 audit(4492.837:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.117515][ T3905] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 907.195046][ T30] audit: type=1326 audit(4492.837:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.280347][ T30] audit: type=1326 audit(4492.875:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.305358][ T30] audit: type=1326 audit(4492.875:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.327527][ T30] audit: type=1326 audit(4492.875:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.351310][ T30] audit: type=1326 audit(4492.884:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.394243][ T30] audit: type=1326 audit(4492.884:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.2.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 907.405230][ T3905] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 907.435385][ T3935] loop2: detected capacity change from 0 to 1024 [ 907.449816][ T3920] bond2: option arp_validate: invalid value (18446744073709551614) [ 907.461108][ T3935] EXT4-fs: Ignoring removed orlov option [ 907.487632][ T3935] EXT4-fs: Ignoring removed bh option [ 907.521647][ T3920] bond2 (unregistering): Released all slaves [ 907.567553][ T3935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.619547][ T3935] EXT4-fs error (device loop2): __ext4_remount:6804: comm syz.2.9672: Abort forced by user [ 907.634412][ T3935] EXT4-fs (loop2): Remounting filesystem read-only [ 907.675569][ T3935] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 907.713428][ T4008] netlink: zone id is out of range [ 907.797050][ T6223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.904489][ T4009] loop7: detected capacity change from 0 to 4096 [ 907.969686][ T4009] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 908.014407][ T30] audit: type=1326 audit(4493.774:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4018 comm="syz.5.9678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebe19c799 code=0x7ffc0000 [ 908.014537][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9679'. [ 908.153344][ T30] audit: type=1326 audit(4493.792:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4018 comm="syz.5.9678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebe19c799 code=0x7ffc0000 [ 908.397432][ T4037] Device name not specified. [ 908.397432][ T4037] [ 909.207084][ T4087] [U] .h0FwZ,iqgҏV2sO [ 909.256249][ T4087] [U] ` w*BBOLhU [ 909.260822][ T4087] [U] w$n|#%o.z\̧mРw [ 909.265945][ T4087] [U] R{ꫢ S [ 909.337816][ T4087] [U] [ 909.340592][ T4087] [U] [ 909.343326][ T4087] [U] [ 909.395970][ T4097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9703'. [ 909.409560][ T4087] [U] [ 909.412304][ T4087] [U] [ 909.415214][ T4087] [U] [ 909.417949][ T4087] [U] [ 909.463991][ T4087] [U] [ 909.466769][ T4087] [U] [ 909.469488][ T4087] [U] [ 909.472210][ T4087] [U] [ 909.526744][ T4087] [U] [ 909.529523][ T4087] [U] [ 909.532237][ T4087] [U] [ 909.534965][ T4087] [U] [ 909.544878][ T4087] [U] [ 909.547648][ T4087] [U] [ 909.550563][ T4087] [U] [ 909.553284][ T4087] [U] [ 909.614981][ T4087] [U] [ 909.617765][ T4087] [U] [ 909.620487][ T4087] [U] [ 909.623206][ T4087] [U] [ 909.701667][ T4087] [U] [ 909.704445][ T4087] [U] [ 909.707164][ T4087] [U] [ 909.709876][ T4087] [U] [ 909.712588][ T4087] [U] [ 909.740492][ T4087] [U] [ 909.743256][ T4087] [U] [ 909.745978][ T4087] [U] [ 909.748687][ T4087] [U] [ 909.790437][ T4087] [U] [ 909.793196][ T4087] [U] [ 909.795907][ T4087] [U] [ 909.798617][ T4087] [U] [ 909.834454][ T4087] [U] [ 909.837220][ T4087] [U] [ 909.839939][ T4087] [U] [ 909.842660][ T4087] [U] [ 909.872510][ T4087] [U] [ 909.875380][ T4087] [U] [ 909.878110][ T4087] [U] [ 909.880832][ T4087] [U] [ 909.913447][ T4087] [U] [ 909.916212][ T4087] [U] [ 909.919047][ T4087] [U] [ 909.921775][ T4087] [U] [ 909.963105][ T4087] [U] [ 909.965894][ T4087] [U] [ 909.968614][ T4087] [U] [ 909.971338][ T4087] [U] [ 910.042500][ T4087] [U] [ 910.045285][ T4087] [U] [ 910.048029][ T4087] [U] [ 910.050759][ T4087] [U] [ 910.091820][ T4087] [U] [ 910.094614][ T4087] [U] [ 910.097335][ T4087] [U] [ 910.100104][ T4087] [U] [ 910.174252][ T4087] [U] [ 910.495666][ T6295] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 910.646715][ T4169] loop8: detected capacity change from 0 to 256 [ 910.689899][ T6295] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 910.711289][ T6295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.741202][ T6295] usb 2-1: Product: syz [ 910.763344][ T6295] usb 2-1: Manufacturer: syz [ 910.783190][ T6295] usb 2-1: SerialNumber: syz [ 910.863572][ T6295] usb 2-1: config 0 descriptor?? [ 910.939856][ T4126] loop7: detected capacity change from 0 to 32768 [ 910.982251][ T4126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9712 (4126) [ 911.079291][ T4126] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 911.105448][ T4126] BTRFS info (device loop7): using sha256 checksum algorithm [ 911.125896][ T6295] mos7840 2-1:0.0: required endpoints missing [ 911.260001][ T4126] BTRFS info (device loop7): enabling ssd optimizations [ 911.306615][ T4126] BTRFS info (device loop7): turning on async discard [ 911.334471][ T4126] BTRFS info (device loop7): enabling free space tree [ 911.370152][ T6295] usb 2-1: USB disconnect, device number 89 [ 911.650555][ T4244] loop5: detected capacity change from 0 to 64 [ 911.685412][T20645] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 911.749952][ T4247] loop2: detected capacity change from 0 to 2048 [ 911.884404][ T4255] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9745'. [ 911.939749][ T4247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.047150][T17768] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 912.323599][ T6223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.341370][ T4280] loop3: detected capacity change from 0 to 128 [ 912.368284][ T4280] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 912.416677][ T4280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.743144][ T4291] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 913.645702][ T4269] loop8: detected capacity change from 0 to 32768 [ 913.666939][ T4335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 913.720606][ T4269] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 913.890758][ T4269] XFS (loop8): Ending clean mount [ 913.940300][ T4269] XFS (loop8): Quotacheck needed: Please wait. [ 914.001438][ T4362] program syz.3.9772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.121187][ T4269] XFS (loop8): Quotacheck: Done. [ 914.463316][T32451] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 914.803265][ T4399] loop7: detected capacity change from 0 to 1024 [ 915.053970][ T4399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 915.215540][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9791'. [ 915.331609][T20645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 915.376054][ T4433] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9794'. [ 915.385218][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9794'. [ 915.435371][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9794'. [ 915.445512][ T4438] loop1: detected capacity change from 0 to 512 [ 915.453272][ T4438] EXT4-fs: Ignoring removed bh option [ 915.473753][ T4438] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 915.512482][ T4438] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 915.588807][ T4438] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 915.677339][ T4438] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 915.775540][ T4438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.890974][ T4464] loop7: detected capacity change from 0 to 512 [ 915.958313][ T4464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.047391][ T4465] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 916.062667][ T6214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.211765][T20645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.434129][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 916.434154][ T30] audit: type=1326 audit(4501.686:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 916.598814][ T30] audit: type=1326 audit(4501.686:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 916.730407][ T30] audit: type=1326 audit(4501.714:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 916.759945][ T4512] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 916.827402][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9818'. [ 916.845797][ T30] audit: type=1326 audit(4501.742:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 916.874212][ T4516] loop2: detected capacity change from 0 to 2048 [ 916.918895][ T4516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.944542][ T30] audit: type=1326 audit(4501.742:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 917.090979][ T30] audit: type=1326 audit(4501.742:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 917.224244][ T30] audit: type=1326 audit(4501.742:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 917.312112][ T30] audit: type=1326 audit(4501.742:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 917.352982][ T4541] dlm: no locking on control device [ 917.396123][ T30] audit: type=1326 audit(4501.742:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.2.9812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 917.630271][ T9] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 917.825521][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 917.841457][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 917.894216][ T9] usb 6-1: config 6 has an invalid interface number: 118 but max is 0 [ 917.938833][ T9] usb 6-1: config 6 has no interface number 0 [ 917.944980][ T9] usb 6-1: config 6 interface 118 has no altsetting 0 [ 917.974672][ T9] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=89.62 [ 917.994132][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.019916][ T9] usb 6-1: Product: syz [ 918.029353][ T9] usb 6-1: Manufacturer: syz [ 918.049316][ T9] usb 6-1: SerialNumber: syz [ 918.340625][ T9] gspca_main: mars-2.14.0 probing 093a:050f [ 918.392740][ T9] usb 6-1: USB disconnect, device number 96 [ 919.043401][ T4644] loop1: detected capacity change from 0 to 256 [ 919.127872][ T4652] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 919.174645][ T4644] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 919.513259][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9862'. [ 919.611056][ T4684] netlink: 480 bytes leftover after parsing attributes in process `syz.8.9864'. [ 919.647440][ T4687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9865'. [ 919.685476][ T4692] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9867'. [ 919.697818][ T4690] netlink: set zone limit has 4 unknown bytes [ 919.943427][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9869'. [ 920.739154][ T4680] loop7: detected capacity change from 0 to 32768 [ 920.769304][ T4680] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9863 (4680) [ 920.857925][ T4680] BTRFS info (device loop7): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 920.897162][ T4680] BTRFS info (device loop7): using xxhash64 checksum algorithm [ 921.094148][ T4680] BTRFS info (device loop7): enabling ssd optimizations [ 921.134467][ T4680] BTRFS info (device loop7): turning on async discard [ 921.175035][ T4680] BTRFS info (device loop7): enabling free space tree [ 921.183949][ T4783] loop1: detected capacity change from 0 to 2048 [ 921.246148][ T4783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.281169][ T6295] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 921.480419][ T4807] lo: entered allmulticast mode [ 921.497363][ T6295] usb 9-1: Using ep0 maxpacket: 8 [ 921.498056][ T4805] lo: left allmulticast mode [ 921.513946][ T6214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.523677][T20645] BTRFS info (device loop7): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 921.548747][ T6295] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.588173][ T6295] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 921.639037][ T6295] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3 [ 921.685901][ T6295] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 254, changing to 11 [ 921.777230][ T6295] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 921.843958][ T6295] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 921.932544][ T6295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.011768][ T4767] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 922.070791][ T6295] hub 9-1:1.0: bad descriptor, ignoring hub [ 922.091101][ T6295] hub 9-1:1.0: probe with driver hub failed with error -5 [ 922.155722][ T6295] cdc_wdm 9-1:1.0: skipping garbage [ 922.181048][ T6295] cdc_wdm 9-1:1.0: skipping garbage [ 922.186744][ T6295] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 922.328440][ T6295] usb 9-1: USB disconnect, device number 6 [ 922.435520][ T4845] loop2: detected capacity change from 0 to 512 [ 922.533908][ T4845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.995858][ T6223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.323974][ T4888] loop3: detected capacity change from 0 to 256 [ 923.397693][ T4888] exfat: Deprecated parameter 'utf8' [ 923.438499][ T4888] exfat: Deprecated parameter 'utf8' [ 923.487715][ T4888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 923.946882][ T4834] loop5: detected capacity change from 0 to 32768 [ 924.007023][ T4834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9903 (4834) [ 924.059579][ T6295] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 924.163658][ T4834] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 924.200639][ T4834] BTRFS info (device loop5): using sha256 checksum algorithm [ 924.336345][ T6295] usb 9-1: config 0 has an invalid interface number: 200 but max is 0 [ 924.366371][ T6295] usb 9-1: config 0 has no interface number 0 [ 924.377186][ T6295] usb 9-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 924.389260][ T6295] usb 9-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 924.404127][ T6295] usb 9-1: config 0 interface 200 has no altsetting 0 [ 924.455750][ T6295] usb 9-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 924.458488][ T4834] BTRFS info (device loop5): enabling ssd optimizations [ 924.465065][ T30] audit: type=1326 audit(4509.196:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.1.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52179c799 code=0x7ffc0000 [ 924.467957][ T30] audit: type=1326 audit(4509.205:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.1.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52179c799 code=0x7ffc0000 [ 924.527574][ T4834] BTRFS info (device loop5): turning on async discard [ 924.538266][ T6295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.548443][ T4834] BTRFS info (device loop5): enabling free space tree [ 924.587132][ T6295] usb 9-1: Product: syz [ 924.591374][ T6295] usb 9-1: Manufacturer: syz [ 924.625827][ T6295] usb 9-1: SerialNumber: syz [ 924.662768][ T6295] usb 9-1: config 0 descriptor?? [ 924.702249][ T4966] netlink: 'syz.7.9930': attribute type 13 has an invalid length. [ 924.711945][ T4834] BTRFS error (device loop5): balance: mixed groups data and metadata options must be the same [ 924.731143][ T30] audit: type=1326 audit(4509.261:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.1.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb52179c799 code=0x7ffc0000 [ 924.854321][ T30] audit: type=1326 audit(4509.261:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.1.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52179c799 code=0x7ffc0000 [ 924.965076][ T30] audit: type=1326 audit(4509.261:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.1.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52179c799 code=0x7ffc0000 [ 924.990902][ T6225] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 925.010259][ T6295] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.200/input/input56 [ 925.045409][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.052917][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.060265][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.067616][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.074910][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 925.074984][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.090194][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.097614][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.105438][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.112793][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.120158][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.127471][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.134799][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.142207][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.157124][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.164768][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.172566][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.187841][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.195536][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.206012][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.214370][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.221730][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.229057][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.236690][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.244050][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.251457][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.259926][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.267366][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.274704][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.282116][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.289477][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.297067][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.297439][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 925.304479][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.321418][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.328763][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.336089][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.343445][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.350891][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.358257][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.365605][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.372938][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.380290][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.387823][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.395159][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.402568][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.409944][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.417302][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.433467][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.440847][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.448220][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 925.455411][ C1] usb 9-1: hanwang_irq - usb_submit_urb failed with result -1 [ 925.478360][ T6295] usb 9-1: USB disconnect, device number 7 [ 925.505711][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 925.595887][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 925.615220][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 925.651800][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 925.723190][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.767910][ T9] usb 2-1: config 0 descriptor?? [ 926.044411][ T9] hdpvr 2-1:0.0: firmware version 0x0 dated [ 926.054831][ T6350] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 926.099338][ T9] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 926.172506][ T5035] __nla_validate_parse: 4 callbacks suppressed [ 926.172530][ T5035] netlink: 52 bytes leftover after parsing attributes in process `syz.8.9944'. [ 926.254936][ T9] hdpvr 2-1:0.0: device init failed [ 926.268397][ T6350] usb 4-1: Using ep0 maxpacket: 8 [ 926.292747][ T9] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 926.305714][ T30] audit: type=1326 audit(4510.928:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.9946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 926.313321][ T6350] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 926.397906][ T9] usb 2-1: USB disconnect, device number 90 [ 926.413426][ T6350] usb 4-1: config 179 has no interface number 0 [ 926.422351][ T6350] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 926.437236][ T30] audit: type=1326 audit(4510.928:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.9946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 926.455821][ T6350] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 926.576897][ T30] audit: type=1326 audit(4510.928:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.9946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 926.579496][ T6350] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 926.649360][ T6350] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 926.660008][ T6350] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 926.673581][ T6350] usb 4-1: config 179 interface 65 has no altsetting 0 [ 926.680576][ T6350] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 926.689866][ T6350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.702160][ T30] audit: type=1326 audit(4510.938:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.9946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 926.742334][ T30] audit: type=1326 audit(4510.938:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.9946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4639c799 code=0x7ffc0000 [ 926.797952][ T6350] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input57 [ 926.828269][ T5063] loop7: detected capacity change from 0 to 2048 [ 926.934507][ T5076] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 927.001550][ T5063] NILFS (loop7): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 927.014947][ T6350] usb 4-1: USB disconnect, device number 110 [ 927.097510][ T5063] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=16) [ 927.163471][ T5063] Remounting filesystem read-only [ 927.197525][ T5063] NILFS (loop7): error -5 truncating bmap (ino=16) [ 927.235798][ T5098] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9954'. [ 927.294769][ T5098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9954'. [ 927.392361][T20645] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 927.401486][ T6295] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 927.655314][ T6295] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 927.690827][ T6295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.742069][ T6295] usb 3-1: Product: syz [ 927.742274][ T5122] netlink: 'syz.5.9958': attribute type 3 has an invalid length. [ 927.757213][ T6295] usb 3-1: Manufacturer: syz [ 927.761843][ T6295] usb 3-1: SerialNumber: syz [ 927.789538][ T5122] netlink: 'syz.5.9958': attribute type 1 has an invalid length. [ 927.807398][ T6295] usb 3-1: config 0 descriptor?? [ 927.847888][ T5122] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9958'. [ 927.885608][ T6295] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 927.904892][ T5122] NCSI netlink: No device for ifindex 8868644 [ 928.300325][ T6356] usb 3-1: USB disconnect, device number 109 [ 928.912756][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9974'. [ 929.082522][ T5210] netlink: 'syz.3.9977': attribute type 2 has an invalid length. [ 929.205511][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 929.397425][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 929.418168][ T9] usb 2-1: config 0 has no interfaces? [ 929.473071][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 929.493023][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.512298][ T9] usb 2-1: Product: syz [ 929.522879][ T9] usb 2-1: Manufacturer: syz [ 929.533654][ T9] usb 2-1: SerialNumber: syz [ 929.560203][ T9] usb 2-1: config 0 descriptor?? [ 929.758198][ T5164] loop7: detected capacity change from 0 to 32768 [ 929.787134][ T5245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9986'. [ 929.806834][ T9] usb 2-1: USB disconnect, device number 91 [ 929.836276][ T5245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9986'. [ 929.938770][ T5164] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 930.017266][ T5262] loop5: detected capacity change from 0 to 4096 [ 930.043111][ T5262] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 930.274279][ T5164] XFS (loop7): Ending clean mount [ 930.275676][ T5262] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 930.336384][ T5262] ntfs3(loop5): ino=5, mi_enum_attr [ 930.528842][T20645] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 931.024676][ T5313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10001'. [ 932.008588][ T5366] netlink: 'syz.1.10018': attribute type 10 has an invalid length. [ 932.047698][ T5366] ipvlan1: entered promiscuous mode [ 932.073236][ T5366] team0: Device ipvlan1 failed to register rx_handler [ 932.159681][ T5375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10021'. [ 932.284559][ T5320] loop8: detected capacity change from 0 to 32768 [ 932.357550][ T5320] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 932.441811][ T5320] XFS (loop8): Ending clean mount [ 932.520612][ T5392] loop5: detected capacity change from 0 to 2048 [ 932.632869][ T5404] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 932.662126][ T5392] NILFS (loop5): error -2 truncating bmap (ino=16) [ 932.722381][T32451] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 932.842391][ T5404] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 932.914609][ T5404] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 932.981895][ T5404] Remounting filesystem read-only [ 933.006357][ T6225] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 933.470574][ T6356] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 933.670048][ T5461] netlink: 'syz.1.10042': attribute type 2 has an invalid length. [ 933.682171][ T6356] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 933.704333][ T6356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 933.757794][ T5461] hmac(sha224): entered promiscuous mode [ 933.777893][ T6356] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 933.800116][ T6356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.818658][ T6356] usb 3-1: Product: syz [ 933.823181][ T6356] usb 3-1: Manufacturer: syz [ 933.827856][ T6356] usb 3-1: SerialNumber: syz [ 933.961070][ T6356] usb 3-1: config 0 descriptor?? [ 934.273306][ T6356] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input58 [ 934.339118][ C1] powermate: config urb returned -71 [ 934.345071][ C1] powermate: config urb returned -71 [ 934.350645][ C1] powermate: config urb returned -71 [ 934.356216][ C1] powermate: config urb returned -71 [ 934.382003][ T6356] usb 3-1: USB disconnect, device number 110 [ 934.388212][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 934.451631][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 934.546708][ T5531] loop8: detected capacity change from 0 to 22 [ 934.579555][ T5531] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 934.626727][ T5531] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 934.656957][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 934.694877][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 934.714177][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 934.747952][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.770264][ T9] usb 8-1: Product: syz [ 934.774993][ T9] usb 8-1: Manufacturer: syz [ 934.791001][ T9] usb 8-1: SerialNumber: syz [ 935.279001][ T9] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 935.495711][ T9] usb 8-1: USB disconnect, device number 15 [ 935.590577][ T5614] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10074'. [ 935.674918][ T5604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10073'. [ 935.714311][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.088290][ T5658] loop5: detected capacity change from 0 to 8 [ 936.160996][ T5658] SQUASHFS error: zlib decompression failed, data probably corrupt [ 936.223952][ T5658] SQUASHFS error: Failed to read block 0x4de: -5 [ 936.255092][ T5658] SQUASHFS error: zlib decompression failed, data probably corrupt [ 936.257178][ T5664] loop2: detected capacity change from 0 to 1024 [ 936.285080][ T5658] SQUASHFS error: Failed to read block 0x4df: -5 [ 936.310832][ T5664] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 936.311733][ T5658] SQUASHFS error: zlib decompression failed, data probably corrupt [ 936.404393][ T5658] SQUASHFS error: Failed to read block 0x4e0: -5 [ 936.423662][ T5658] SQUASHFS error: zlib decompression failed, data probably corrupt [ 936.476019][ T5658] SQUASHFS error: Failed to read block 0x4de: -5 [ 936.532877][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 936.532908][ T30] audit: type=1800 audit(4520.498:351): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10082" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 936.680855][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10091'. [ 936.975492][ T5640] loop1: detected capacity change from 0 to 32768 [ 936.996753][ T5705] netlink: 'syz.2.10093': attribute type 1 has an invalid length. [ 937.021193][ T5640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10076 (5640) [ 937.083262][ T5640] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.129424][ T5640] BTRFS info (device loop1): using sha256 checksum algorithm [ 937.293260][ T5640] BTRFS info (device loop1): enabling ssd optimizations [ 937.353899][ T5640] BTRFS info (device loop1): turning on async discard [ 937.386298][ T5640] BTRFS info (device loop1): enabling free space tree [ 937.451352][ T5737] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10098'. [ 937.629027][ T5742] loop5: detected capacity change from 0 to 64 [ 937.647181][ T6214] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.762998][ T5742] MINIX-fs: bad superblock [ 938.208671][ T5684] loop3: detected capacity change from 0 to 32768 [ 938.416829][ T5684] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 938.556557][ T5802] loop8: detected capacity change from 0 to 64 [ 938.666545][ T30] audit: type=1800 audit(4522.502:352): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10113" name=E91F7189591E9233614B dev="loop8" ino=22 res=0 errno=0 [ 938.789576][ T5684] XFS (loop3): Ending clean mount [ 939.066077][ T6219] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 939.714899][ T5865] loop2: detected capacity change from 0 to 512 [ 939.733564][ T5871] loop1: detected capacity change from 0 to 256 [ 939.782432][ T5865] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 939.827049][ T5871] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 940.877072][ T5925] loop3: detected capacity change from 0 to 4096 [ 940.899394][ T5925] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 941.144191][ T5944] loop2: detected capacity change from 0 to 1024 [ 941.173378][ T5944] EXT4-fs: inline encryption not supported [ 941.187662][ T5925] ntfs3(loop3): ino=19, mi_enum_attr [ 941.193044][ T5925] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 941.211344][ T5944] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 941.306664][ T5944] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.10148: lblock 2 mapped to illegal pblock 2 (length 1) [ 941.385576][ T5944] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 941.387266][ T5944] EXT4-fs (loop2): Remounting filesystem read-only [ 941.396452][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 941.396480][ C1] EXT4-fs (loop2): initial error at time 4525: ext4_map_blocks:776: inode 3: block 2 [ 941.396532][ C1] EXT4-fs (loop2): last error at time 4525: ext4_map_blocks:776: inode 3: block 2 [ 941.429517][ T30] audit: type=1400 audit(4525.086:353): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=5957 comm="syz.7.10152" [ 941.511939][ T5944] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 941.555338][ T5944] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 941.600704][ T5944] EXT4-fs (loop2): 1 orphan inode deleted [ 941.613321][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10155'. [ 941.624807][ T5944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.649175][ T5971] netlink: 348 bytes leftover after parsing attributes in process `syz.5.10155'. [ 941.683292][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10155'. [ 941.714068][ T5944] Quota error (device loop2): find_next_id: Can't read quota tree block 1 [ 941.744482][ T5971] netlink: 348 bytes leftover after parsing attributes in process `syz.5.10155'. [ 941.773389][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10155'. [ 941.876624][ T6223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.557683][ T6011] loop8: detected capacity change from 0 to 4096 [ 942.591889][ T6011] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 942.603937][ T6024] loop5: detected capacity change from 0 to 1024 [ 942.652169][ T6024] EXT4-fs: Ignoring removed orlov option [ 942.730298][ T6024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 942.777231][ T6037] loop1: detected capacity change from 0 to 64 [ 942.880505][ T5998] loop2: detected capacity change from 0 to 32768 [ 942.936565][ T5998] read_mapping_page failed! [ 942.978151][ T5998] ERROR: (device loop2): txCommit: [ 942.978151][ T5998] [ 943.064181][ T5998] ERROR: (device loop2): remounting filesystem as read-only [ 943.191873][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.465288][ T6064] netlink: 'syz.2.10182': attribute type 3 has an invalid length. [ 943.521493][ T6067] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 943.551542][ T6067] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 943.581510][ T30] audit: type=1326 audit(4527.100:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.8.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25cf9c799 code=0x7ffc0000 [ 943.684758][ T30] audit: type=1326 audit(4527.109:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.8.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25cf9c799 code=0x7ffc0000 [ 943.803919][ T30] audit: type=1326 audit(4527.109:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.8.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff25cf9c799 code=0x7ffc0000 [ 943.910708][ T30] audit: type=1326 audit(4527.109:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.8.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25cf9c799 code=0x7ffc0000 [ 944.041892][ T30] audit: type=1326 audit(4527.109:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.8.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25cf9c799 code=0x7ffc0000 [ 944.206762][ T30] audit: type=1326 audit(4527.689:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.5.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebe19c799 code=0x7ffc0000 [ 944.327416][ T30] audit: type=1326 audit(4527.689:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.5.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebe19c799 code=0x7ffc0000 [ 944.432060][ T30] audit: type=1326 audit(4527.689:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.5.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebe19c799 code=0x7ffc0000 [ 944.479766][ T30] audit: type=1326 audit(4527.689:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.5.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1ebe19c799 code=0x7ffc0000 [ 944.583596][ T30] audit: type=1326 audit(4527.689:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.5.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebe19c799 code=0x7ffc0000 [ 945.095060][ T6153] set_capacity_and_notify: 2 callbacks suppressed [ 945.095086][ T6153] loop2: detected capacity change from 0 to 2048 [ 945.143757][ T6153] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 945.163324][ T6171] loop7: detected capacity change from 0 to 128 [ 945.171855][ T6170] loop1: detected capacity change from 0 to 512 [ 945.193600][ T6171] FAT-fs (loop7): Directory bread(block 162) failed [ 945.200316][ T6171] FAT-fs (loop7): Directory bread(block 163) failed [ 945.225336][ T6171] FAT-fs (loop7): Directory bread(block 164) failed [ 945.232055][ T6171] FAT-fs (loop7): Directory bread(block 165) failed [ 945.239846][ T6170] EXT4-fs: Ignoring removed bh option [ 945.258432][ T6180] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.270009][ T6171] FAT-fs (loop7): Directory bread(block 166) failed [ 945.279622][ T6171] FAT-fs (loop7): Directory bread(block 167) failed [ 945.286280][ T6170] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 945.304314][ T6153] syz.2.10208: attempt to access beyond end of device [ 945.304314][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 945.323870][ T6171] FAT-fs (loop7): Directory bread(block 168) failed [ 945.330685][ T6171] FAT-fs (loop7): Directory bread(block 169) failed [ 945.356764][ T6170] EXT4-fs (loop1): 1 truncate cleaned up [ 945.365353][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.377420][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 945.377724][ T6153] syz.2.10208: attempt to access beyond end of device [ 945.377724][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 945.395239][ T6171] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 945.404406][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 945.421263][ T6153] syz.2.10208: attempt to access beyond end of device [ 945.421263][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 945.440758][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 945.500188][ T6153] syz.2.10208: attempt to access beyond end of device [ 945.500188][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 945.537543][ T6171] FAT-fs (loop7): Directory bread(block 162) failed [ 945.554479][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 945.585121][ T6171] FAT-fs (loop7): Directory bread(block 163) failed [ 945.608146][ T6171] syz.7.10212: attempt to access beyond end of device [ 945.608146][ T6171] loop7: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 945.618671][ T6153] syz.2.10208: attempt to access beyond end of device [ 945.618671][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 945.744399][ T6171] syz.7.10212: attempt to access beyond end of device [ 945.744399][ T6171] loop7: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 945.783608][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 945.836381][ T6153] syz.2.10208: attempt to access beyond end of device [ 945.836381][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 945.880617][ T6214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.972045][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.006157][ T6153] syz.2.10208: attempt to access beyond end of device [ 946.006157][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 946.074839][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.112661][ T6153] syz.2.10208: attempt to access beyond end of device [ 946.112661][ T6153] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 946.154608][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.204723][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.257247][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.286683][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10225'. [ 946.296159][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.327293][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.360752][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.399300][ T6153] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 946.970600][ T6330] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 947.023158][ T6323] loop1: detected capacity change from 0 to 4096 [ 947.116830][ T6342] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 947.211783][ T6323] overlayfs: missing 'lowerdir' [ 947.353237][ T6359] loop3: detected capacity change from 0 to 1024 [ 947.408935][ T6359] EXT4-fs: Ignoring removed bh option [ 947.462021][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.495943][ T6367] loop7: detected capacity change from 0 to 64 [ 947.661174][ T6359] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #11: comm syz.3.10244: directory missing '.' [ 947.740372][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10252'. [ 947.766364][ T6359] EXT4-fs (loop3): Remounting filesystem read-only [ 947.803819][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10252'. [ 947.951997][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.968913][ T6393] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 947.975456][ T6393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 948.034232][ T6393] vhci_hcd vhci_hcd.0: Device attached [ 948.112375][ T6394] vhci_hcd: connection closed [ 948.115543][T20128] vhci_hcd vhci_hcd.7: stop threads [ 948.158098][T20128] vhci_hcd vhci_hcd.7: release socket [ 948.210265][T20128] vhci_hcd vhci_hcd.7: disconnect device [ 948.406861][T31027] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 948.426262][ T6420] netlink: 'syz.1.10259': attribute type 1 has an invalid length. [ 948.439804][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10259'. [ 948.565982][ T6383] loop8: detected capacity change from 0 to 32768 [ 948.575223][T31027] usb 3-1: Using ep0 maxpacket: 8 [ 948.590157][T31027] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 948.620687][T31027] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 948.640666][ T6383] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 948.663989][T31027] usb 3-1: config 0 has no interface number 1 [ 948.671830][T31027] usb 3-1: config 0 has no interface number 2 [ 948.685941][T31027] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 948.698753][T31027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.713043][T31027] usb 3-1: config 0 descriptor?? [ 948.793835][ T6383] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 948.855866][ T6443] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 948.892178][ T6383] XFS (loop8): Starting recovery (logdev: internal) [ 948.939797][ T6383] XFS (loop8): Ending recovery (logdev: internal) [ 948.954133][T31027] qcserial 3-1:0.6: Qualcomm USB modem converter detected [ 949.043698][ T6452] loop3: detected capacity change from 0 to 164 [ 949.129989][T32451] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 949.173537][ T6452] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 949.195999][ T6295] usb 3-1: USB disconnect, device number 111 [ 949.242896][ T6295] qcserial 3-1:0.6: device disconnected [ 950.056021][ T6513] loop2: detected capacity change from 0 to 512 [ 950.081552][ T6513] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 950.117013][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 950.117061][ T30] audit: type=1326 audit(4533.223:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.7.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdadd9c799 code=0x7ffc0000 [ 950.212222][ T6513] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 950.220225][ T6513] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 950.231919][ T30] audit: type=1326 audit(4533.261:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.7.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdadd9c799 code=0x7ffc0000 [ 950.254932][ T30] audit: type=1326 audit(4533.280:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.7.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7efdadd9c799 code=0x7ffc0000 [ 950.307439][ T30] audit: type=1326 audit(4533.280:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.7.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdadd9c799 code=0x7ffc0000 [ 950.387323][ T30] audit: type=1326 audit(4533.280:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.7.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdadd9c799 code=0x7ffc0000 [ 950.553518][ T6547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10293'. [ 951.131407][ T6578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 951.194487][ T6578] block device autoloading is deprecated and will be removed. [ 951.415719][ T6602] loop7: detected capacity change from 0 to 1024 [ 952.842920][ T6672] loop2: detected capacity change from 0 to 4096 [ 952.910983][ T6685] xt_hashlimit: max too large, truncated to 1048576 [ 953.014609][ T6685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 953.033399][ T6609] loop1: detected capacity change from 0 to 40427 [ 953.054562][ T6672] ntfs3(loop2): ino=18, mi_enum_attr [ 953.059919][ T6672] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 953.102481][ T6609] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 953.124021][ T6672] ntfs3(loop2): ino=1a, mi_enum_attr [ 953.140954][ T6609] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 953.181454][ T6672] ntfs3(loop2): ino=5, "/" indx_read_ra [ 953.191806][ T6609] F2FS-fs (loop1): Encoding requested by superblock is unknown [ 953.599058][ T6712] loop3: detected capacity change from 0 to 2048 [ 953.680349][ T6712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 954.334049][ T6754] loop1: detected capacity change from 0 to 1764 [ 954.440275][ T6763] loop5: detected capacity change from 0 to 2048 [ 954.499023][ T6763] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 954.547291][ T6763] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 954.630663][ T6775] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10364'. [ 955.084418][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10370'. [ 955.263077][ T9] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 955.484275][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 955.521522][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.567659][ T6757] loop2: detected capacity change from 0 to 32768 [ 955.595421][ T9] usb 2-1: config 0 descriptor?? [ 955.710362][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 955.832102][ T6833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10380'. [ 955.986948][ T6839] loop5: detected capacity change from 0 to 1024 [ 956.047704][ T9] gp8psk: usb out operation failed. [ 956.081976][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 956.128005][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 956.147269][ T6794] loop8: detected capacity change from 0 to 32768 [ 956.207561][ T6854] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 956.211290][ T9] usb 2-1: USB disconnect, device number 92 [ 956.266492][ T6794] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 956.337436][T20110] hfsplus: b-tree write err: -5, ino 25 [ 956.388451][T20110] hfsplus: b-tree write err: -5, ino 4 [ 956.430627][T20110] hfsplus: b-tree write err: -5, ino 2 [ 956.508620][ T6794] XFS (loop8): Ending clean mount [ 956.550333][ T6794] XFS (loop8): Quotacheck needed: Please wait. [ 956.750400][ T6794] XFS (loop8): Quotacheck: Done. [ 956.858950][ T6875] loop7: detected capacity change from 0 to 8192 [ 956.937407][ T6875] bio_check_eod: 7 callbacks suppressed [ 956.937433][ T6875] syz.7.10388: attempt to access beyond end of device [ 956.937433][ T6875] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 957.036956][ T6875] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 957.049300][T32451] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 957.087037][ T6875] FAT-fs (loop7): Filesystem has been set read-only [ 957.192045][ T6875] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 957.220689][ T6875] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 958.110997][ T6890] loop3: detected capacity change from 0 to 32768 [ 958.144480][ T6890] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10391 (6890) [ 958.217987][ T6890] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 958.274970][ T6890] BTRFS info (device loop3): using sha256 checksum algorithm [ 958.496998][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10412'. [ 958.528910][ T6890] BTRFS info (device loop3): enabling ssd optimizations [ 958.584664][ T6890] BTRFS info (device loop3): turning on async discard [ 958.633400][ T6890] BTRFS info (device loop3): enabling free space tree [ 958.674614][ T6890] BTRFS info (device loop3): enabling auto defrag [ 958.692482][ T6890] BTRFS info (device loop3): max_inline set to 0 [ 958.971732][ T6219] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 959.218344][ T7016] netlink: zone id is out of range [ 959.223526][ T7016] netlink: zone id is out of range [ 959.279997][ T7016] netlink: zone id is out of range [ 959.307564][ T7016] netlink: zone id is out of range [ 959.492194][ T7030] netlink: 'syz.5.10430': attribute type 303 has an invalid length. [ 959.766376][ T7041] IPv6: NLM_F_CREATE should be specified when creating new route [ 960.271672][ T6343] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 960.363826][ T7010] loop1: detected capacity change from 0 to 32768 [ 960.364851][ T7064] bond5: option xmit_hash_policy: invalid value (14) [ 960.414474][ T7010] (syz.1.10425,7010,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 960.437650][ T7010] (syz.1.10425,7010,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 960.456610][ T7064] bond5 (unregistering): Released all slaves [ 960.474311][ T7010] JBD2: Ignoring recovery information on journal [ 960.504096][ T6343] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 960.513859][ T6343] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 960.543682][ T6343] usb 4-1: Product: syz [ 960.548097][ T6343] usb 4-1: Manufacturer: syz [ 960.557148][ T6343] usb 4-1: SerialNumber: syz [ 960.567009][ T6343] usb 4-1: config 0 descriptor?? [ 960.633283][ T7010] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 960.684968][ T7143] loop8: detected capacity change from 0 to 1024 [ 960.797720][ T6343] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v114 fw v103.169.6 (1 channels) [ 960.815716][ T7143] hfsplus: b-tree write err: -5, ino 2 [ 960.964697][T13944] hfsplus: b-tree write err: -5, ino 25 [ 960.985370][T13944] hfsplus: b-tree write err: -5, ino 4 [ 960.996743][T13944] hfsplus: b-tree write err: -5, ino 2 [ 961.013863][ T6343] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 961.032137][ T6343] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 961.042553][T13944] hfsplus: b-tree write err: -5, ino 26 [ 961.113620][ T6214] ocfs2: Unmounting device (7,1) on (node local) [ 961.236393][ T7177] loop8: detected capacity change from 0 to 1024 [ 961.269796][ T7177] EXT4-fs: inline encryption not supported [ 961.277053][ T6343] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 961.305062][ T6343] usb 4-1: USB disconnect, device number 111 [ 961.425456][ T7177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.760136][T32451] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.839096][ T7214] netlink: 'syz.1.10451': attribute type 4 has an invalid length. [ 961.863870][ T7216] netlink: 'syz.3.10461': attribute type 8 has an invalid length. [ 962.050574][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10462'. [ 962.555663][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10475'. [ 962.621594][ T6343] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 962.814859][ T6343] usb 4-1: Using ep0 maxpacket: 32 [ 962.868218][ T6343] usb 4-1: config 3 has an invalid interface number: 160 but max is 0 [ 962.876444][ T6343] usb 4-1: config 3 has no interface number 0 [ 962.922035][ T6343] usb 4-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 962.973826][ T6343] usb 4-1: config 3 interface 160 has no altsetting 0 [ 962.998014][ T6343] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 963.019438][ T6343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.047140][ T6343] usb 4-1: Product: syz [ 963.064318][ T6343] usb 4-1: Manufacturer: syz [ 963.069023][ T6343] usb 4-1: SerialNumber: syz [ 963.105227][ T7257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 963.276791][ T7314] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 963.390094][ T6343] usbhid 4-1:3.160: couldn't find an input interrupt endpoint [ 963.417637][ T7326] loop8: detected capacity change from 0 to 256 [ 963.449706][ T6343] usb 4-1: USB disconnect, device number 112 [ 963.485899][ T7326] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 963.640191][ T7343] loop1: detected capacity change from 0 to 256 [ 963.679125][ T7345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.746214][ T7343] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 963.805655][ T30] audit: type=1800 audit(4546.043:379): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10495" name="bus" dev="loop1" ino=1048801 res=0 errno=0 [ 964.073609][ T7366] netlink: 'syz.1.10502': attribute type 5 has an invalid length. [ 964.864028][ T7414] binfmt_misc: register: failed to install interpreter file ./file0 [ 964.898714][ T7417] loop5: detected capacity change from 0 to 64 [ 964.963256][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10521'. [ 965.539721][ T7455] loop5: detected capacity change from 0 to 1024 [ 965.660344][ T7455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.778083][ T7455] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #15: comm syz.5.10531: corrupted xattr block 128: invalid header [ 965.927390][ T7470] bond2: option xmit_hash_policy: invalid value (14) [ 965.968441][ T7470] bond2 (unregistering): Released all slaves [ 966.126024][T31027] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 966.141112][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 966.195649][ T7450] loop7: detected capacity change from 0 to 32768 [ 966.230501][ T7450] [ 966.230501][ T7450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 966.230501][ T7450] [ 966.231351][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10541'. [ 966.337578][T31027] usb 3-1: Using ep0 maxpacket: 8 [ 966.345764][T31027] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 966.401554][T31027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.418549][T20645] [ 966.418549][T20645] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 966.418549][T20645] [ 966.436730][ T7561] loop5: detected capacity change from 0 to 128 [ 966.437472][T31027] usb 3-1: config 0 descriptor?? [ 966.489902][T20645] [ 966.489902][T20645] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 966.489902][T20645] [ 966.512525][T31027] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 966.729622][T31027] dvb-usb: bulk message failed: -22 (1/0) [ 966.740136][ T7579] loop1: detected capacity change from 0 to 256 [ 966.810242][T31027] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.836877][ T7577] loop3: detected capacity change from 0 to 1024 [ 966.871622][T31027] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 966.880435][T31027] usb 3-1: media controller created [ 966.896253][ T7577] EXT4-fs: Ignoring removed orlov option [ 966.949883][ T7577] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 967.004687][ T7577] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 967.026400][T31027] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.078036][ T7577] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 967.096232][ T7577] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 967.096232][ T7577] [ 967.173268][ T7577] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 967.224891][T31027] DVB: Unable to find symbol lgdt330x_attach() [ 967.231210][T31027] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 967.258825][T31027] dvb-usb: bulk message failed: -22 (1/0) [ 967.265100][ T7577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 967.278096][T31027] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 967.326936][T31027] usb 3-1: USB disconnect, device number 112 [ 967.372387][ T7577] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 967.372387][ T7577] [ 967.450365][T31027] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 967.569757][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.024825][ T30] audit: type=1107 audit(4549.985:380): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 968.466354][ T7681] xt_hashlimit: max too large, truncated to 1048576 [ 968.651354][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10577'. [ 968.682805][ T7694] netlink: 'syz.5.10577': attribute type 3 has an invalid length. [ 968.751293][T31027] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 968.950394][T31027] usb 2-1: Using ep0 maxpacket: 16 [ 968.993309][T31027] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 969.039463][T31027] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 969.072791][T31027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 969.111771][T31027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 969.151497][T31027] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 969.162872][T31027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.172798][T31027] usb 2-1: Product: syz [ 969.177688][T31027] usb 2-1: Manufacturer: syz [ 969.183657][T31027] usb 2-1: SerialNumber: syz [ 969.204599][T31027] usb 2-1: config 0 descriptor?? [ 969.205080][ T7720] loop3: detected capacity change from 0 to 512 [ 969.293644][ T7672] loop7: detected capacity change from 0 to 32768 [ 969.319355][ T7720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.412643][ T7723] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 969.440285][ T7672] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt [ 969.440285][ T7672] [ 969.459654][T31027] appledisplay: Apple Cinema Display connected [ 969.481142][ T7723] bond1 (unregistering): Released all slaves [ 969.529131][ T7672] xtLookup: xtSearch returned -5 [ 969.567090][ T7672] add_index: get/read_metapage failed! [ 969.605698][ T7672] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt [ 969.605698][ T7672] [ 969.652620][ T7672] xtLookup: xtSearch returned -5 [ 969.664076][ T7672] free_index: error reading directory table [ 969.713392][ T9] usb 2-1: USB disconnect, device number 93 [ 969.716773][ T7672] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt [ 969.716773][ T7672] [ 969.719390][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 969.748243][ T9] appledisplay: Apple Cinema Display disconnected [ 969.792239][ T7672] xtLookup: xtSearch returned -5 [ 969.792265][ T7672] free_index: error reading directory table [ 969.792281][ T7672] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt [ 969.792281][ T7672] [ 969.792332][ T7672] xtLookup: xtSearch returned -5 [ 969.792346][ T7672] free_index: error reading directory table [ 969.792360][ T7672] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt [ 969.792360][ T7672] [ 969.792403][ T7672] xtLookup: xtSearch returned -5 [ 969.792417][ T7672] free_index: error reading directory table [ 969.792431][ T7672] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt [ 969.792431][ T7672] [ 969.792473][ T7672] xtLookup: xtSearch returned -5 [ 969.792487][ T7672] free_index: error reading directory table [ 969.825110][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.060502][ T7822] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 970.429678][ T7846] loop1: detected capacity change from 0 to 1024 [ 970.455581][T13944] hfsplus: b-tree write err: -5, ino 25 [ 970.462040][T13944] hfsplus: b-tree write err: -5, ino 4 [ 970.467820][T13944] hfsplus: b-tree write err: -5, ino 2 [ 971.314463][ T6356] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 971.487572][ T7914] loop5: detected capacity change from 0 to 65 [ 971.494175][ T6356] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 971.494215][ T6356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.494244][ T6356] usb 8-1: Product: syz [ 971.494264][ T6356] usb 8-1: Manufacturer: syz [ 971.494286][ T6356] usb 8-1: SerialNumber: syz [ 971.540859][ T6356] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 971.580472][ T7914] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 971.662578][ T6295] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 971.697294][ T7927] netlink: 1224 bytes leftover after parsing attributes in process `syz.3.10620'. [ 972.152250][ T7947] loop8: detected capacity change from 0 to 736 [ 972.399120][ T7957] netlink: 25 bytes leftover after parsing attributes in process `syz.1.10629'. [ 973.265504][ T7972] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10634'. [ 973.361751][ T7972] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10634'. [ 974.631882][ T6356] usb 8-1: USB disconnect, device number 16 [ 974.645344][ T6295] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 974.658666][ T6295] ath9k_htc: Failed to initialize the device [ 974.679196][ T6356] usb 8-1: ath9k_htc: USB layer deinitialized [ 974.842219][ T8003] loop1: detected capacity change from 0 to 1024 [ 974.867054][ T7951] loop2: detected capacity change from 0 to 32768 [ 974.933341][T20110] hfsplus: b-tree write err: -5, ino 25 [ 974.946897][ T7951] read_mapping_page failed! [ 974.951444][ T7951] diRead: read_metapage failed [ 974.958344][T20110] hfsplus: b-tree write err: -5, ino 4 [ 974.987523][T20110] hfsplus: b-tree write err: -5, ino 2 [ 974.998251][ T7951] jfs_lookup: iget failed on inum 32 [ 975.105677][ T8019] tc_dump_action: action bad kind [ 975.355079][ T7976] loop8: detected capacity change from 0 to 32768 [ 975.395886][ T7976] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.10633 (7976) [ 975.591543][ T7976] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 975.654948][ T7976] BTRFS info (device loop8): using sha256 checksum algorithm [ 975.706849][ T7985] loop5: detected capacity change from 0 to 32768 [ 975.739229][ T7985] (syz.5.10638,7985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 975.797019][ T7985] (syz.5.10638,7985,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 975.878962][ T7976] BTRFS info (device loop8): enabling ssd optimizations [ 975.895669][ T7976] BTRFS info (device loop8): turning on async discard [ 975.912630][ T7985] JBD2: Ignoring recovery information on journal [ 975.943698][ T7976] BTRFS info (device loop8): enabling free space tree [ 976.121376][ T7985] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 976.344467][T32451] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 976.430379][ T7985] ocfs2: Unmounting device (7,5) on (node local) [ 976.877839][ T8109] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10666'. [ 978.032103][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 978.234982][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 978.263402][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 978.278642][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 978.294306][ T9] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 978.314444][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.333589][ T9] usb 9-1: Product: syz [ 978.357251][ T9] usb 9-1: Manufacturer: syz [ 978.362016][ T9] usb 9-1: SerialNumber: syz [ 978.406368][ T9] usb 9-1: config 0 descriptor?? [ 978.580092][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10695'. [ 978.601703][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 978.737003][ T8094] Bluetooth: hci7: command 0x0406 tx timeout [ 978.844592][ T8212] netlink: 'syz.1.10697': attribute type 1 has an invalid length. [ 978.927451][ T8217] loop3: detected capacity change from 0 to 2048 [ 978.995555][ T8217] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 979.028924][ T8217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.192652][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10702'. [ 979.302421][ T8235] netlink: 'syz.2.10705': attribute type 2 has an invalid length. [ 980.095292][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10719'. [ 980.287473][T31027] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 980.445646][ T8295] openvswitch: netlink: IP tunnel dst address not specified [ 980.454168][ T8294] loop2: detected capacity change from 0 to 64 [ 980.500525][T31027] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 980.560704][T31027] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 980.626536][T31027] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 980.680686][T31027] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 980.689969][T31027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.787584][ T8267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 980.795473][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10727'. [ 981.238658][T31027] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 981.290504][T31027] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input60 [ 981.545915][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 981.554281][T31027] usb 6-1: USB disconnect, device number 97 [ 981.781456][ T30] audit: type=1326 audit(4562.879:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdadd9c799 code=0x7ffc0000 [ 981.815703][ T8290] loop1: detected capacity change from 0 to 32768 [ 981.900490][ T8290] (syz.1.10721,8290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 981.908612][ T30] audit: type=1326 audit(4562.879:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdadd9c799 code=0x7ffc0000 [ 981.980351][ T30] audit: type=1326 audit(4562.879:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdadd5cfce code=0x7ffc0000 [ 982.017686][ T30] audit: type=1326 audit(4562.879:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdadd9c42b code=0x7ffc0000 [ 982.017916][ T8290] (syz.1.10721,8290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 982.041106][ T30] audit: type=1326 audit(4562.879:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdadd9c42b code=0x7ffc0000 [ 982.099421][ T30] audit: type=1326 audit(4562.916:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdadd9c42b code=0x7ffc0000 [ 982.102275][ T6343] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 982.144534][ T30] audit: type=1326 audit(4562.916:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdadd9c42b code=0x7ffc0000 [ 982.148079][ T8366] vti0: entered promiscuous mode [ 982.169726][ T30] audit: type=1326 audit(4563.038:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdadd9c42b code=0x7ffc0000 [ 982.249098][ T30] audit: type=1326 audit(4563.131:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdadd9c42b code=0x7ffc0000 [ 982.261277][ T8290] JBD2: Ignoring recovery information on journal [ 982.278982][ T8366] vti0: entered allmulticast mode [ 982.282986][ T8377] loop2: detected capacity change from 0 to 1024 [ 982.294679][ T30] audit: type=1326 audit(4563.206:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.7.10737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdadd9c42b code=0x7ffc0000 [ 982.317437][ T6343] usb 8-1: Using ep0 maxpacket: 16 [ 982.337034][ T6343] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 982.346019][ T6343] usb 8-1: config 251 has no interface number 0 [ 982.352612][ T6343] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 982.363987][ T6343] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 982.374584][ T6343] usb 8-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 982.386310][ T6343] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 982.400111][ T6343] usb 8-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 982.420481][ T6343] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120 [ 982.436099][ T6343] usb 8-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.464359][ T6343] usb 8-1: config 251 interface 202 has no altsetting 0 [ 982.514870][ T6343] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 982.538249][ T6343] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 982.579087][ T6343] usb 8-1: Product: syz [ 982.594643][ T6343] usb 8-1: SerialNumber: syz [ 982.594959][ T8290] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 982.655240][ T8350] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 982.933015][ T6343] cxacru 8-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 982.990226][ T6343] cxacru 8-1:251.202: probe with driver cxacru failed with error -22 [ 983.055991][ T6343] usb 8-1: USB disconnect, device number 17 [ 983.110497][ T8408] netlink: 'syz.2.10747': attribute type 1 has an invalid length. [ 983.123749][ T6214] ocfs2: Unmounting device (7,1) on (node local) [ 983.328471][ T6356] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 983.527825][ T6356] usb 6-1: Using ep0 maxpacket: 32 [ 983.548741][ T6356] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 983.627593][ T6356] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 983.670296][ T6356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.701930][ T6356] usb 6-1: Product: syz [ 983.734314][ T6356] usb 6-1: Manufacturer: syz [ 983.748126][ T6356] usb 6-1: SerialNumber: syz [ 983.951846][ T8436] nvme_fabrics: missing parameter 'transport=%s' [ 983.972757][ T8436] nvme_fabrics: missing parameter 'nqn=%s' [ 984.015057][ T6356] usb 6-1: selecting invalid altsetting 1 [ 984.229762][ T6356] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 984.229900][ T6356] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 984.304525][ T6356] usb 6-1: USB disconnect, device number 98 [ 985.077888][ T8495] loop8: detected capacity change from 0 to 512 [ 985.161901][ T8505] raw_sendmsg: syz.1.10775 forgot to set AF_INET. Fix it! [ 985.201983][ T8495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.647272][T32451] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.871830][ T6356] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 986.083942][ T6356] usb 2-1: Using ep0 maxpacket: 8 [ 986.108370][ T6356] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 986.124936][ T6356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 986.135232][ T6356] usb 2-1: Product: syz [ 986.151396][ T6356] usb 2-1: Manufacturer: syz [ 986.166929][ T6356] usb 2-1: SerialNumber: syz [ 986.172871][ T6302] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 986.247863][ T6356] usb 2-1: config 0 descriptor?? [ 986.289972][ T6356] gspca_main: sq905-2.14.0 probing 2770:9120 [ 986.307374][ T8556] loop5: detected capacity change from 0 to 2048 [ 986.358011][ T8556] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 986.381681][ T6302] usb 4-1: Using ep0 maxpacket: 32 [ 986.403646][ T6302] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 986.438231][ T6302] usb 4-1: config 0 has no interface number 0 [ 986.483571][ T6302] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 986.556189][ T6302] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 986.617687][ T6302] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 986.681558][ T6302] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 986.729454][ T6356] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 986.746127][ T6302] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 986.772571][ T6356] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 986.813244][ T6302] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 986.831762][ T6356] usb 2-1: USB disconnect, device number 94 [ 986.876045][ T6302] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 986.927457][ T6302] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26980, setting to 1024 [ 986.980525][ T6302] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 987.022674][ T6302] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.053745][ T6302] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 987.109219][ T6302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.131450][ T6302] usb 4-1: Product: syz [ 987.135685][ T6302] usb 4-1: Manufacturer: syz [ 987.157173][ T6302] usb 4-1: SerialNumber: syz [ 987.199909][ T6302] usb 4-1: config 0 descriptor?? [ 987.233478][ T8600] loop5: detected capacity change from 0 to 2048 [ 987.239422][ T8539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 987.251981][ T8539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 987.285107][ T6302] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 987.316159][ T6302] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 987.352430][ T6302] scsi host1: microtekX6 [ 987.385223][ T6156] loop5: p2 p3 p7 [ 987.555357][ T6302] usb 4-1: USB disconnect, device number 113 [ 987.624542][ T8600] loop5: p2 p3 p7 [ 987.705218][ T8637] loop2: detected capacity change from 0 to 256 [ 987.740735][ T8637] exfat: Unknown parameter 'erors' [ 987.878192][ T8637] cifs: Unknown parameter 'h}# [ 987.878192][ T8637] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 987.878192][ T8637] SȘȞZ6' [ 988.175669][ T8785] udevd[8785]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 988.185463][ T6163] udevd[6163]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 988.188672][ T6160] udevd[6160]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 988.644314][ T6155] udevd[6155]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 988.670553][ T8785] udevd[8785]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 988.683859][ T6163] udevd[6163]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 988.834509][ T8655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 988.841248][ T8655] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 988.881172][ T8655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 988.919439][ T8655] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 989.253427][ T8655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 989.298595][ T8655] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 989.449908][ T8655] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 989.476868][ T8655] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 989.501525][ T9] iguanair 9-1:0.0: failed to get version [ 989.509786][ T9] iguanair 9-1:0.0: probe with driver iguanair failed with error -110 [ 989.549799][ T9] usb 9-1: USB disconnect, device number 8 [ 989.586034][ T8655] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 989.640048][ T8655] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 989.735746][ T8655] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 989.757664][ T8655] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 989.780237][ T8774] loop2: detected capacity change from 0 to 8 [ 990.075683][ T8799] kAFS: unparsable volume name [ 990.120154][ T8793] net veth1_virt_wifi : renamed from virt_wifi0 [ 990.510417][ T8824] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 990.730756][ T8836] loop2: detected capacity change from 0 to 256 [ 990.767037][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 991.059884][ T8860] loop7: detected capacity change from 0 to 512 [ 991.197834][ T8860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.280202][ T8860] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.10854: corrupted xattr block 33: invalid checksum [ 991.454760][ T8860] EXT4-fs error (device loop7): ext4_get_inode_usage:888: inode #15: comm syz.7.10854: corrupted xattr block 33: invalid checksum [ 991.720178][T20645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.180374][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10878'. [ 992.284491][ T8936] loop3: detected capacity change from 0 to 1024 [ 992.351540][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10882'. [ 992.530574][ T8958] xt_TCPMSS: Only works on TCP SYN packets [ 992.598261][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 992.617890][ T77] hfsplus: b-tree write err: -5, ino 25 [ 992.641567][ T77] hfsplus: b-tree write err: -5, ino 4 [ 992.676482][ T8967] loop5: detected capacity change from 0 to 1764 [ 992.677287][ T77] hfsplus: b-tree write err: -5, ino 2 [ 992.725669][ T77] hfsplus: b-tree write err: -5, ino 20 [ 992.790617][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 992.825864][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 992.874341][ T9] usb 3-1: config 0 has no interface number 0 [ 992.890346][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 992.922308][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.961563][ T9] usb 3-1: Product: syz [ 992.965793][ T9] usb 3-1: Manufacturer: syz [ 992.993829][ T9] usb 3-1: SerialNumber: syz [ 993.015700][ T9] usb 3-1: config 0 descriptor?? [ 993.250751][ T9] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 993.314513][ T9] usb 3-1: USB disconnect, device number 113 [ 993.815785][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 993.862531][ T9046] netlink: 'syz.7.10907': attribute type 1 has an invalid length. [ 994.037468][ T9] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 994.064608][ T9] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 994.096381][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.173161][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 994.923481][ T9115] netlink: 'syz.1.10927': attribute type 1 has an invalid length. [ 995.121329][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10928'. [ 995.318970][ T9] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 995.430337][ T9138] loop7: detected capacity change from 0 to 1024 [ 995.531381][ T9125] loop3: detected capacity change from 0 to 8192 [ 995.535866][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 995.594118][ T9] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 995.642844][T20110] hfsplus: b-tree write err: -5, ino 25 [ 995.648680][T20110] hfsplus: b-tree write err: -5, ino 4 [ 995.656009][ T9] usb 9-1: USB disconnect, device number 9 [ 995.670353][T31027] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 995.706104][T20110] hfsplus: b-tree write err: -5, ino 2 [ 995.777740][ T9168] loop2: detected capacity change from 0 to 256 [ 995.904290][T31027] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 995.940993][T31027] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 995.959565][T31027] usb 6-1: Product: syz [ 995.970680][ T9168] FAT-fs (loop2): Directory bread(block 64) failed [ 996.001784][ T9168] FAT-fs (loop2): Directory bread(block 65) failed [ 996.008578][T31027] usb 6-1: Manufacturer: syz [ 996.013207][T31027] usb 6-1: SerialNumber: syz [ 996.040087][ T9176] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 996.047805][ T9168] FAT-fs (loop2): Directory bread(block 66) failed [ 996.054386][ T9168] FAT-fs (loop2): Directory bread(block 67) failed [ 996.064786][T31027] usb 6-1: config 0 descriptor?? [ 996.084186][T31027] ch341 6-1:0.0: ch341-uart converter detected [ 996.102216][ T9168] FAT-fs (loop2): Directory bread(block 68) failed [ 996.108992][ T9168] FAT-fs (loop2): Directory bread(block 69) failed [ 996.120617][ T9168] FAT-fs (loop2): Directory bread(block 70) failed [ 996.128190][ T9168] FAT-fs (loop2): Directory bread(block 71) failed [ 996.135041][ T9168] FAT-fs (loop2): Directory bread(block 72) failed [ 996.176046][ T9168] FAT-fs (loop2): Directory bread(block 73) failed [ 996.540202][T31027] usb 6-1: failed to send control message: -71 [ 996.557627][T31027] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 996.603258][T31027] usb 6-1: USB disconnect, device number 99 [ 996.655598][T31027] ch341 6-1:0.0: device disconnected [ 996.701333][ T9215] loop1: detected capacity change from 0 to 1024 [ 996.760728][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10953'. [ 997.246358][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10959'. [ 997.275195][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10959'. [ 997.390352][ T9250] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 997.419407][ T9263] loop8: detected capacity change from 0 to 1764 [ 997.492423][ T9271] loop3: detected capacity change from 0 to 512 [ 997.544161][ T9271] __quota_error: 26 callbacks suppressed [ 997.544184][ T9271] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 997.597126][ T9282] openvswitch: netlink: IPv6 tunnel dst address is zero [ 997.654629][ T9271] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 997.691232][ T9271] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.10965: Failed to acquire dquot type 1 [ 997.707500][ T9271] loop3: lost filesystem error report for type 5 error -5 [ 997.713532][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 997.727189][ C1] EXT4-fs (loop3): last error at time 4577: ext4_acquire_dquot:7001 [ 997.777844][ T9271] EXT4-fs (loop3): 1 truncate cleaned up [ 997.786178][ T9271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.115785][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.148979][ T9311] loop8: detected capacity change from 0 to 64 [ 998.226571][ T9311] syz.8.10976: attempt to access beyond end of device [ 998.226571][ T9311] loop8: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 998.296604][ T9311] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 998.403825][ T9311] syz.8.10976: attempt to access beyond end of device [ 998.403825][ T9311] loop8: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 998.491512][ T9311] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 998.780097][ T9344] xt_cgroup: xt_cgroup: no path or classid specified [ 999.418073][ T9387] futex_wake_op: syz.1.11000 tries to shift op by 32; fix this program [ 999.554846][ T9393] netlink: 'syz.7.11002': attribute type 21 has an invalid length. [ 999.580627][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11002'. [ 999.582279][ T9396] netlink: 'syz.5.11001': attribute type 10 has an invalid length. [ 999.667609][ T9396] team0: Device vxcan1 is of different type [ 1000.091402][ T9425] xt_connbytes: Forcing CT accounting to be enabled [ 1000.093829][ T9426] loop5: detected capacity change from 0 to 1024 [ 1000.123406][ T9425] xt_NFQUEUE: number of total queues is 0 [ 1001.266729][ T9500] loop1: detected capacity change from 0 to 512 [ 1001.362732][ T9500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.470333][ T9518] loop5: detected capacity change from 0 to 64 [ 1001.516721][ T9516] loop2: detected capacity change from 0 to 164 [ 1001.561890][ T9500] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.11033: corrupted xattr block 33: invalid header [ 1001.686634][ T9500] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.11033: corrupted xattr block 33: invalid header [ 1001.783207][ T9500] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 1002.068875][ T6214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.731528][ T9596] netlink: 'syz.2.11062': attribute type 5 has an invalid length. [ 1002.765559][ T9596] netlink: 'syz.2.11062': attribute type 5 has an invalid length. [ 1003.152556][ T9622] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1003.265101][ T9631] netlink: 6 bytes leftover after parsing attributes in process `syz.1.11073'. [ 1003.328558][ T9631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.750983][ T9662] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.11084' sets config #0 [ 1004.081721][ T9679] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1004.999305][ T9673] loop5: detected capacity change from 0 to 32768 [ 1005.014310][ T9673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11086 (9673) [ 1005.064520][ T9673] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1005.129596][ T9728] bond3: entered promiscuous mode [ 1005.139230][ T9673] BTRFS info (device loop5): using sha256 checksum algorithm [ 1005.181085][ T9728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.221798][ T31] INFO: task syz.6.8586:31613 blocked for more than 143 seconds. [ 1005.229687][ T31] Not tainted syzkaller #0 [ 1005.239944][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1005.249493][ T31] task:syz.6.8586 state:D stack:27144 pid:31613 tgid:31612 ppid:17766 task_flags:0x400040 flags:0x00080002 [ 1005.286357][ T31] Call Trace: [ 1005.291083][ T31] [ 1005.297233][ T31] __schedule+0x15dd/0x52d0 [ 1005.305047][ T31] ? __pfx___schedule+0x10/0x10 [ 1005.317936][ T31] ? schedule+0x90/0x360 [ 1005.325164][ T31] schedule+0x164/0x360 [ 1005.367196][ T31] schedule_preempt_disabled+0x13/0x30 [ 1005.414896][ T31] __mutex_lock+0x7fe/0x1300 [ 1005.437271][ T9673] BTRFS info (device loop5): enabling ssd optimizations [ 1005.460913][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1005.466900][ T9673] BTRFS info (device loop5): turning on async discard [ 1005.478649][ T9673] BTRFS info (device loop5): enabling free space tree [ 1005.499075][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1005.538055][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1005.552239][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1005.576804][ T31] ? genlmsg_put+0x137/0x2e0 [ 1005.594509][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1005.612031][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.628431][ T31] ? kmem_cache_free+0x187/0x630 [ 1005.641690][ T31] ? nlmon_xmit+0xb0/0x100 [ 1005.654478][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1005.669155][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.680822][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.691127][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1005.696791][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.702560][ T31] ? __asan_memcpy+0x40/0x70 [ 1005.707424][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1005.713868][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1005.718494][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.723649][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1005.729833][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1005.735472][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1005.740589][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.745737][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.751169][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.756937][ T31] ? down_read+0x272/0x2e0 [ 1005.761453][ T31] ? genl_rcv+0xd/0x40 [ 1005.765697][ T31] genl_rcv+0x28/0x40 [ 1005.769899][ T31] netlink_unicast+0x80f/0x9b0 [ 1005.774773][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.780248][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.786038][ T31] ? skb_put+0x11b/0x210 [ 1005.790534][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.796324][ T31] netlink_sendmsg+0x813/0xb40 [ 1005.801386][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.806997][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.812802][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1005.817846][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.830859][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.836639][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1005.841577][ T31] ? futex_unqueue+0x211/0x240 [ 1005.846376][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.851778][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.857445][ T31] ? import_iovec+0x73/0xa0 [ 1005.862038][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1005.866765][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.872022][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.877765][ T31] ? futex_wait+0x29a/0x380 [ 1005.882345][ T31] ? __fget_files+0x2a/0x420 [ 1005.887104][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.892759][ T31] ? __fget_files+0x3a0/0x420 [ 1005.897567][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1005.902536][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1005.908285][ T31] ? rcu_is_watching+0x15/0xb0 [ 1005.913098][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.918874][ T31] do_syscall_64+0x14d/0xf80 [ 1005.923500][ T31] ? trace_irq_disable+0x3b/0x150 [ 1005.928807][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.935113][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.943195][ T31] RIP: 0033:0x7f190719c799 [ 1005.947924][ T31] RSP: 002b:00007f1907faf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.956524][ T31] RAX: ffffffffffffffda RBX: 00007f1907415fa0 RCX: 00007f190719c799 [ 1005.964718][ T31] RDX: 0000000000000000 RSI: 00002000000032c0 RDI: 0000000000000003 [ 1005.974053][ T31] RBP: 00007f1907232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1005.982583][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.993282][ T31] R13: 00007f1907416038 R14: 00007f1907415fa0 R15: 00007ffcddbc9568 [ 1006.002472][ T31] [ 1006.006623][ T31] [ 1006.006623][ T31] Showing all locks held in the system: [ 1006.016672][ T31] 1 lock held by khungtaskd/31: [ 1006.021925][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1006.032309][ T31] 2 locks held by getty/5572: [ 1006.044449][ T9673] BTRFS warning (device loop5): get dev_stats failed, device not found [ 1006.071757][ T31] #0: ffff8880374390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1006.090823][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1006.111383][ T31] 2 locks held by syz.0.5845/19801: [ 1006.116847][ T31] #0: ffffffff8fc3ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.126082][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1006.136529][ T31] 2 locks held by syz.6.8586/31613: [ 1006.141783][ T31] #0: ffffffff8fc3ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.150020][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1006.160376][ T31] [ 1006.160802][ T6225] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1006.164945][ T31] ============================================= [ 1006.164945][ T31] [ 1006.181916][ T31] NMI backtrace for cpu 1 [ 1006.181937][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1006.181967][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1006.181984][ T31] Call Trace: [ 1006.181995][ T31] [ 1006.182005][ T31] dump_stack_lvl+0xe8/0x150 [ 1006.182048][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1006.182085][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1006.182129][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1006.182168][ T31] sys_info+0x135/0x170 [ 1006.182198][ T31] watchdog+0xfd9/0x1030 [ 1006.182248][ T31] ? watchdog+0x21a/0x1030 [ 1006.182303][ T31] kthread+0x388/0x470 [ 1006.182333][ T31] ? __pfx_watchdog+0x10/0x10 [ 1006.182375][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.182403][ T31] ret_from_fork+0x51e/0xb90 [ 1006.182444][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.182477][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.182510][ T31] ? __switch_to+0xc7d/0x1450 [ 1006.182545][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.182573][ T31] ret_from_fork_asm+0x1a/0x30 [ 1006.182633][ T31] [ 1006.293646][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1006.299038][ C0] NMI backtrace for cpu 0 [ 1006.299059][ C0] CPU: 0 UID: 0 PID: 20110 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1006.299087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1006.299103][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1006.299142][ C0] RIP: 0010:process_scheduled_works+0xaea/0x1830 [ 1006.299178][ C0] Code: 00 fc ff df 0f 84 7a 07 00 00 e8 61 e8 36 00 eb 0f e8 5a e8 36 00 49 be 00 00 00 00 00 fc ff df 48 8b 44 24 78 42 80 3c 30 00 <74> 08 4c 89 ef e8 fc 22 a1 00 4d 8b 5d 00 48 8b 3c 24 2e e8 5e 08 [ 1006.299198][ C0] RSP: 0018:ffffc90002fd7b00 EFLAGS: 00000246 [ 1006.299218][ C0] RAX: 1ffff11006941d63 RBX: ffffffff818eb4a5 RCX: ffff88807cd11e80 [ 1006.299236][ C0] RDX: 0000000000000000 RSI: ffffffff8c27b3e0 RDI: ffffffff8c27b3a0 [ 1006.299254][ C0] RBP: ffffc90002fd7ce8 R08: ffffffff90118bb7 R09: 1ffffffff2023176 [ 1006.299272][ C0] R10: dffffc0000000000 R11: fffffbfff2023177 R12: ffff888029694000 [ 1006.299292][ C0] R13: ffff888034a0eb18 R14: dffffc0000000000 R15: 0000000000000000 [ 1006.299312][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 1006.299332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1006.299349][ C0] CR2: 0000555591eeea28 CR3: 000000007ad71000 CR4: 0000000000350ef0 [ 1006.299369][ C0] Call Trace: [ 1006.299378][ C0] [ 1006.299410][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1006.299446][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.299476][ C0] ? assign_work+0x3d5/0x5e0 [ 1006.299510][ C0] worker_thread+0xa50/0xfc0 [ 1006.299555][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.299591][ C0] kthread+0x388/0x470 [ 1006.299615][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1006.299647][ C0] ? __pfx_kthread+0x10/0x10 [ 1006.299674][ C0] ret_from_fork+0x51e/0xb90 [ 1006.299709][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.299740][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.299770][ C0] ? __switch_to+0xc7d/0x1450 [ 1006.299801][ C0] ? __pfx_kthread+0x10/0x10 [ 1006.299825][ C0] ret_from_fork_asm+0x1a/0x30 [ 1006.299879][ C0] [ 1006.302806][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1006.302827][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1006.302858][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1006.302875][ T31] Call Trace: [ 1006.302888][ T31] [ 1006.302900][ T31] vpanic+0x56c/0xa60 [ 1006.302943][ T31] ? __pfx___schedule+0x10/0x10 [ 1006.302986][ T31] ? __pfx_vpanic+0x10/0x10 [ 1006.303027][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.303072][ T31] panic+0xc5/0xd0 [ 1006.303109][ T31] ? __pfx_panic+0x10/0x10 [ 1006.303157][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.303191][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1006.303229][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.303262][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1006.303305][ T31] watchdog+0x1023/0x1030 [ 1006.303356][ T31] ? watchdog+0x21a/0x1030 [ 1006.303413][ T31] kthread+0x388/0x470 [ 1006.303441][ T31] ? __pfx_watchdog+0x10/0x10 [ 1006.303482][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.303512][ T31] ret_from_fork+0x51e/0xb90 [ 1006.303552][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.303587][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.303620][ T31] ? __switch_to+0xc7d/0x1450 [ 1006.303656][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.303686][ T31] ret_from_fork_asm+0x1a/0x30 [ 1006.303748][ T31] [ 1006.640683][ T31] Kernel Offset: disabled [ 1006.645003][ T31] Rebooting in 86400 seconds..