last executing test programs: 2m24.217005109s ago: executing program 2 (id=7155): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 2m24.151286752s ago: executing program 2 (id=7158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x110, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x9e6}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @coaddr={0x14, 0xe, @in=@empty}]}, 0x110}}, 0x0) 2m23.804196563s ago: executing program 2 (id=7162): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e1e, @empty}}) 2m23.642108672s ago: executing program 2 (id=7166): r0 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 2m23.5086105s ago: executing program 2 (id=7169): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m22.636249262s ago: executing program 2 (id=7185): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) 2m8.439540544s ago: executing program 32 (id=7185): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) 2.56475369s ago: executing program 4 (id=9307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 2.418782119s ago: executing program 4 (id=9310): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 2.183437162s ago: executing program 4 (id=9314): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0x10, 0xbe, 0x40, 0x733, 0x430, 0xce72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x0, 0xc, 0xef, 0x20}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.771936036s ago: executing program 3 (id=9321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x80) 1.592945657s ago: executing program 3 (id=9324): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa32, &(0x7f0000001740)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1.38183552s ago: executing program 3 (id=9327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}}, 0x0) 1.157337663s ago: executing program 3 (id=9330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000000000220a00fb0005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012400000ffff11000300686173683a69702c706f7274"], 0x58}}, 0x0) 1.097403606s ago: executing program 0 (id=9332): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x0, 0xfc3c}) 1.001592591s ago: executing program 3 (id=9333): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1a2, &(0x7f0000000580)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) 768.709645ms ago: executing program 0 (id=9343): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 682.605351ms ago: executing program 3 (id=9336): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003200000002003"]}, 0x0) 654.095032ms ago: executing program 1 (id=9337): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 624.125714ms ago: executing program 0 (id=9338): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 533.977279ms ago: executing program 1 (id=9339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 460.748744ms ago: executing program 1 (id=9340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 437.776445ms ago: executing program 4 (id=9341): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) 437.172075ms ago: executing program 0 (id=9350): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1800000015007f089e", 0x9}, {&(0x7f0000000300)="68ca8abda8fbff0200258f2e440bb8", 0xf}], 0x2}, 0x0) 332.891821ms ago: executing program 1 (id=9342): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 266.728805ms ago: executing program 1 (id=9344): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000040)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 244.115626ms ago: executing program 4 (id=9345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x8ed56000) 121.667964ms ago: executing program 4 (id=9346): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1a2, &(0x7f0000000580)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) 119.685584ms ago: executing program 0 (id=9355): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 9.44822ms ago: executing program 1 (id=9347): r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=9348): prctl$PR_SET_THP_DISABLE(0x29, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) kernel console output (not intermixed with test programs): 937.103696][T23210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 937.377256][T23219] loop4: detected capacity change from 0 to 764 [ 937.494966][T23221] loop1: detected capacity change from 0 to 4096 [ 937.516011][T23221] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 937.623649][T23223] loop4: detected capacity change from 0 to 1024 [ 937.645899][T23213] loop3: detected capacity change from 0 to 32768 [ 937.669789][T23223] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 937.693831][T23213] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7458 (23213) [ 937.709868][T23223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 937.744367][T23223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 937.792444][T23213] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 937.868016][T23213] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 937.910741][T23213] BTRFS info (device loop3): turning off barriers [ 937.933524][T23213] BTRFS info (device loop3): enabling all of the rescue options [ 937.978676][T23213] BTRFS info (device loop3): ignoring data csums [ 938.007039][T23213] BTRFS info (device loop3): ignoring bad roots [ 938.027574][T23054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.041192][T23213] BTRFS info (device loop3): disabling log replay at mount time [ 938.078203][T23213] BTRFS info (device loop3): disabling tree log [ 938.101104][T23213] BTRFS info (device loop3): turning on flush-on-commit [ 938.108108][T23213] BTRFS info (device loop3): using free space tree [ 938.337534][T23213] BTRFS info (device loop3: state C): enabling ssd optimizations [ 938.852573][ T5764] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 938.875285][T23275] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.939866][T23278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7480'. [ 939.098297][T23055] Bluetooth: hci4: command tx timeout [ 939.364767][T23286] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 939.431862][T23286] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 939.729117][ T28] audit: type=1326 audit(1771384084.275:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23303 comm="syz.1.7492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 939.825757][ T28] audit: type=1326 audit(1771384084.275:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23303 comm="syz.1.7492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 939.897474][ T28] audit: type=1326 audit(1771384084.296:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23303 comm="syz.1.7492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 939.952570][ T28] audit: type=1326 audit(1771384084.296:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23303 comm="syz.1.7492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 940.031252][ T28] audit: type=1326 audit(1771384084.296:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23303 comm="syz.1.7492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 940.277884][T23322] loop4: detected capacity change from 0 to 128 [ 940.329124][T23322] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 940.378080][T23322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 940.470376][T23298] loop0: detected capacity change from 0 to 32768 [ 940.699784][T23331] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.731913][T23331] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 940.825398][T23337] overlayfs: overlapping lowerdir path [ 941.094136][T23347] netlink: 'syz.1.7512': attribute type 3 has an invalid length. [ 941.447593][T23356] loop4: detected capacity change from 0 to 2048 [ 941.473690][T23356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 941.804286][ T28] audit: type=1326 audit(1771384086.485:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23368 comm="syz.3.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 941.848906][ T28] audit: type=1326 audit(1771384086.485:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23368 comm="syz.3.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 941.879001][ T28] audit: type=1326 audit(1771384086.528:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23368 comm="syz.3.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 941.936744][ T28] audit: type=1326 audit(1771384086.528:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23368 comm="syz.3.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 941.985933][ T28] audit: type=1326 audit(1771384086.528:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23368 comm="syz.3.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 942.414875][T23397] netlink: 'syz.1.7536': attribute type 1 has an invalid length. [ 942.798344][T20000] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 942.900145][T23420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7546'. [ 943.014159][T20000] usb 4-1: Using ep0 maxpacket: 32 [ 943.041485][T20000] usb 4-1: unable to get BOS descriptor or descriptor too short [ 943.060459][T20000] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 943.077687][T20000] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 943.095667][T20000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.106589][T20000] usb 4-1: Product: syz [ 943.110817][T20000] usb 4-1: Manufacturer: syz [ 943.115422][T20000] usb 4-1: SerialNumber: syz [ 943.151421][T23428] vivid-003: ================= START STATUS ================= [ 943.167590][T23428] vivid-003: RDS Tx I/O Mode: Controls [ 943.175864][T23428] vivid-003: RDS Program ID: 32904 [ 943.187727][T23428] vivid-003: RDS Program Type: 3 [ 943.214646][T23428] vivid-003: RDS PS Name: VIVID-TX [ 943.233496][T23428] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 943.258218][T23428] vivid-003: RDS Stereo: true [ 943.262982][T23428] vivid-003: RDS Artificial Head: false [ 943.296762][T23428] vivid-003: RDS Compressed: false [ 943.311608][T23428] vivid-003: RDS Dynamic PTY: false [ 943.339092][T23428] vivid-003: RDS Traffic Announcement: false [ 943.353153][T20000] usb 4-1: Not enough endpoints found in device, aborting! [ 943.360948][T23428] vivid-003: RDS Traffic Program: true [ 943.377703][T23428] vivid-003: RDS Music: true [ 943.382370][T23428] vivid-003: ================== END STATUS ================== [ 943.568893][ T5893] usb 4-1: USB disconnect, device number 125 [ 943.585937][T23441] IPv6: Can't replace route, no match found [ 943.954870][T12511] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 944.000511][T23460] netlink: 'syz.1.7567': attribute type 8 has an invalid length. [ 944.142811][T12511] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 944.159811][T12511] usb 5-1: config 1 has no interface number 0 [ 944.172316][T12511] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 944.213623][T12511] usb 5-1: config 1 interface 105 has no altsetting 0 [ 944.251506][T12511] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 944.265733][T12511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.284755][T12511] usb 5-1: Product: syz [ 944.296936][T12511] usb 5-1: Manufacturer: syz [ 944.309014][T12511] usb 5-1: SerialNumber: syz [ 944.550372][T12511] aqc111: probe of 5-1:1.105 failed with error -22 [ 944.763733][T20000] usb 5-1: USB disconnect, device number 2 [ 944.773603][T23488] netlink: 'syz.0.7580': attribute type 5 has an invalid length. [ 944.812457][T23488] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7580'. [ 945.241831][T23486] loop3: detected capacity change from 0 to 32768 [ 945.277816][T23486] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 945.483186][T20000] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 945.551532][T23518] loop4: detected capacity change from 0 to 2048 [ 945.562325][T23486] XFS (loop3): Ending clean mount [ 945.577823][T23518] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 945.602659][T23486] XFS (loop3): Quotacheck needed: Please wait. [ 945.688020][T20000] usb 1-1: Using ep0 maxpacket: 32 [ 945.699575][T20000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.730558][T20000] usb 1-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40 [ 945.737362][T23486] XFS (loop3): Quotacheck: Done. [ 945.781217][T20000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.815171][T20000] usb 1-1: Product: syz [ 945.829335][T20000] usb 1-1: Manufacturer: syz [ 945.834166][T20000] usb 1-1: SerialNumber: syz [ 945.868694][T20000] usb 1-1: config 0 descriptor?? [ 945.900235][T20000] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 945.993206][T23529] bridge_slave_0: left allmulticast mode [ 946.007113][T23529] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.021984][T23529] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 946.083144][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 946.292945][T20000] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 946.341547][T20000] pac7311: probe of 1-1:0.0 failed with error -71 [ 946.370617][T20000] usb 1-1: USB disconnect, device number 107 [ 947.155209][T23567] loop0: detected capacity change from 0 to 64 [ 947.157496][T23566] netlink: 'syz.1.7615': attribute type 9 has an invalid length. [ 947.267878][T23567] Trying to free block not in datazone [ 947.292136][T23567] minix_free_block (loop0:21): bit already cleared [ 947.506422][T23580] loop1: detected capacity change from 0 to 256 [ 947.527661][T23582] loop0: detected capacity change from 0 to 256 [ 947.827814][T23588] bridge_slave_0: left allmulticast mode [ 947.846194][T23588] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.865928][T23588] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 947.889553][T23587] loop0: detected capacity change from 0 to 2048 [ 947.904668][T23587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.964332][T23592] warning: `syz.1.7627' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 948.396020][T23601] loop0: detected capacity change from 0 to 4096 [ 948.567972][T23612] netlink: 'syz.1.7637': attribute type 1 has an invalid length. [ 948.587506][T23612] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7637'. [ 948.849603][T23618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7640'. [ 949.131989][T23606] loop4: detected capacity change from 0 to 32768 [ 949.145170][T23606] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7634 (23606) [ 949.181972][T23606] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 949.203244][T23606] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 949.220358][T23606] BTRFS info (device loop4): turning off barriers [ 949.253427][T23606] BTRFS info (device loop4): enabling all of the rescue options [ 949.286821][T23606] BTRFS info (device loop4): ignoring data csums [ 949.294067][T23606] BTRFS info (device loop4): ignoring bad roots [ 949.312943][T23606] BTRFS info (device loop4): disabling log replay at mount time [ 949.325881][T23606] BTRFS info (device loop4): disabling tree log [ 949.336215][T23606] BTRFS info (device loop4): turning on flush-on-commit [ 949.370188][T23606] BTRFS info (device loop4): using free space tree [ 949.482679][T23647] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 949.500672][T23606] BTRFS info (device loop4: state C): enabling ssd optimizations [ 949.735966][T23662] syz.0.7654 (23662): /proc/23661/oom_adj is deprecated, please use /proc/23661/oom_score_adj instead. [ 949.892835][T23054] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 949.965355][ T28] audit: type=1400 audit(1771384095.250:77): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=23668 comm="syz.1.7656" [ 950.023304][ T6211] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (6211) [ 950.327402][T23680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7662'. [ 950.410753][T23680] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 950.439213][T23682] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7663'. [ 950.480775][T23682] openvswitch: netlink: Key type 2832 is out of range max 32 [ 950.495922][T23684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7664'. [ 950.536038][T23684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7664'. [ 950.571591][T23684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7664'. [ 950.677463][T23690] netlink: 'syz.3.7667': attribute type 1 has an invalid length. [ 950.693954][T23690] netlink: 'syz.3.7667': attribute type 1 has an invalid length. [ 950.725535][T23690] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7667'. [ 950.799324][T23694] loop0: detected capacity change from 0 to 256 [ 950.948214][T23700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7672'. [ 950.994993][T23700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7672'. [ 951.260143][T23712] loop1: detected capacity change from 0 to 256 [ 951.298177][T23712] exfat: Deprecated parameter 'namecase' [ 951.310666][T23716] netlink: 'syz.4.7678': attribute type 1 has an invalid length. [ 951.361654][T23712] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5474c335, utbl_chksum : 0xe619d30d) [ 951.545609][T23724] xt_connbytes: Forcing CT accounting to be enabled [ 951.960270][T23743] loop3: detected capacity change from 0 to 1024 [ 952.358217][T23758] openvswitch: netlink: Actions may not be safe on all matching packets [ 952.543423][T23756] loop0: detected capacity change from 0 to 8192 [ 952.562710][T23764] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 952.572974][T23756] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 952.615929][T23764] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 952.645315][T23767] loop3: detected capacity change from 0 to 8192 [ 952.653794][T23756] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 952.663556][T23756] REISERFS (device loop0): using ordered data mode [ 952.678393][T23767] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 952.728717][T23756] reiserfs: using flush barriers [ 952.765076][T23767] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 952.774790][T23771] loop4: detected capacity change from 0 to 1024 [ 952.780400][T23756] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 952.809518][T23767] REISERFS (device loop3): using ordered data mode [ 952.821486][T23771] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 952.835356][T23756] REISERFS (device loop0): checking transaction log (loop0) [ 952.835621][T23767] reiserfs: using flush barriers [ 952.869768][T23767] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 952.911821][T23767] REISERFS (device loop3): checking transaction log (loop3) [ 952.957373][T23767] REISERFS (device loop3): Using r5 hash to sort names [ 953.075430][T23756] REISERFS (device loop0): Using tea hash to sort names [ 953.089757][T23756] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 953.401032][T23779] __nla_validate_parse: 1 callbacks suppressed [ 953.401049][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7710'. [ 953.763919][T23787] syz.3.7713: attempt to access beyond end of device [ 953.763919][T23787] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 953.798511][T23787] FAT-fs (loop7): unable to read boot sector [ 953.823930][T23789] netlink: 174 bytes leftover after parsing attributes in process `syz.0.7714'. [ 953.936404][T23792] Cannot find add_set index 0 as target [ 954.363960][T23783] loop4: detected capacity change from 0 to 32768 [ 954.490917][T23783] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 954.582627][ T5893] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 954.774272][T23783] XFS (loop4): Ending clean mount [ 954.789093][T23783] XFS (loop4): Quotacheck needed: Please wait. [ 954.832933][ T5893] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 954.867096][ T5893] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 954.897733][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.918980][ T5893] usb 2-1: Product: syz [ 954.923204][ T5893] usb 2-1: Manufacturer: syz [ 954.931775][ T5893] usb 2-1: SerialNumber: syz [ 954.935209][T23783] XFS (loop4): Quotacheck: Done. [ 954.942258][ T5893] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 955.045282][T23823] gretap1: entered promiscuous mode [ 955.190913][T23054] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 955.353363][ T5893] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 955.390931][ T5893] usb 2-1: USB disconnect, device number 14 [ 955.568405][ T28] audit: type=1326 audit(1771384101.257:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 955.640482][ T28] audit: type=1326 audit(1771384101.257:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 955.728389][ T28] audit: type=1326 audit(1771384101.268:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 955.792936][ T28] audit: type=1326 audit(1771384101.268:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 955.873547][ T28] audit: type=1326 audit(1771384101.289:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 955.962115][ T28] audit: type=1326 audit(1771384101.289:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 956.009855][T23849] loop1: detected capacity change from 0 to 64 [ 956.054597][ T28] audit: type=1326 audit(1771384101.289:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 956.114499][ T28] audit: type=1326 audit(1771384101.311:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 956.212280][ T28] audit: type=1326 audit(1771384101.311:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23830 comm="syz.4.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 956.869215][T23882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7757'. [ 957.368243][T23905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7768'. [ 957.512034][T23911] loop3: detected capacity change from 0 to 1024 [ 957.717123][T23917] vlan1: entered allmulticast mode [ 957.722301][T23917] veth0_vlan: entered allmulticast mode [ 958.047442][T23929] gretap2: entered promiscuous mode [ 958.526907][T23953] loop0: detected capacity change from 0 to 64 [ 958.855002][T23965] netlink: 'syz.0.7797': attribute type 1 has an invalid length. [ 958.863872][ T28] audit: type=1326 audit(1771384104.797:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23966 comm="syz.1.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 959.008656][T23971] vlan1: entered allmulticast mode [ 959.014181][ T5885] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 959.027730][T23971] veth0_vlan: entered allmulticast mode [ 959.196866][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 959.207223][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.218329][ T5885] usb 4-1: config 0 descriptor?? [ 959.235776][ T5885] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 959.253370][T23978] loop1: detected capacity change from 0 to 2048 [ 959.280098][T23978] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 959.354499][T23983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 959.356501][T23978] syz.1.7805: attempt to access beyond end of device [ 959.356501][T23978] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 959.403990][T23984] loop4: detected capacity change from 0 to 512 [ 959.428948][T23984] EXT4-fs: Ignoring removed orlov option [ 959.451564][T23984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 959.466515][T23984] EXT4-fs (loop4): orphan cleanup on readonly fs [ 959.486262][T23984] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.7807: bg 0: block 248: padding at end of block bitmap is not set [ 959.503866][T23984] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.7807: Failed to acquire dquot type 1 [ 959.533519][T23978] syz.1.7805: attempt to access beyond end of device [ 959.533519][T23978] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 959.554015][T23984] EXT4-fs (loop4): 1 truncate cleaned up [ 959.582665][T23978] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 959.607543][T23984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 959.612415][ T5885] gspca_stv06xx: I2C: Read error writing address: -71 [ 959.640492][ T5885] usb 4-1: USB disconnect, device number 126 [ 959.687802][T23984] EXT4-fs: Ignoring removed orlov option [ 959.707321][T23984] EXT4-fs: can't change dax mount option while remounting [ 959.808439][T23054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.236261][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 960.236277][ T28] audit: type=1326 audit(1771384106.267:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24011 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 960.350799][ T28] audit: type=1326 audit(1771384106.310:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24011 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 960.427615][ T28] audit: type=1326 audit(1771384106.310:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24011 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 960.536599][ T28] audit: type=1326 audit(1771384106.310:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24011 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 960.601580][ T28] audit: type=1326 audit(1771384106.310:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24011 comm="syz.3.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3531d9bf79 code=0x7ffc0000 [ 960.643450][T24025] comedi comedi0: Cannot bond this driver to itself! [ 960.751401][T24034] bridge0: port 1(netdevsim2) entered blocking state [ 960.775801][T24034] bridge0: port 1(netdevsim2) entered disabled state [ 960.794299][T24034] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 960.814305][T24034] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 960.836971][T24034] bridge0: port 1(netdevsim2) entered blocking state [ 960.845473][T24034] bridge0: port 1(netdevsim2) entered forwarding state [ 961.123855][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7836'. [ 961.148166][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7836'. [ 961.148552][T24050] x_tables: duplicate entry at hook 2 [ 961.372941][T24058] xt_HMARK: spi-set and port-set can't be combined [ 961.537489][T24064] bridge0: port 1(netdevsim2) entered blocking state [ 961.548835][T24062] loop0: detected capacity change from 0 to 2048 [ 961.558183][T24064] bridge0: port 1(netdevsim2) entered disabled state [ 961.595099][T24068] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 961.612845][T24064] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 961.638937][T24064] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 961.651596][T24064] bridge0: port 1(netdevsim2) entered blocking state [ 961.658608][T24064] bridge0: port 1(netdevsim2) entered forwarding state [ 961.690932][T24062] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 961.721336][T24062] Remounting filesystem read-only [ 961.940730][T24077] loop0: detected capacity change from 0 to 1024 [ 962.118989][T17340] hfsplus: b-tree write err: -5, ino 4 [ 962.277875][T24087] ip6tnl1: entered allmulticast mode [ 962.514023][T24071] loop4: detected capacity change from 0 to 32768 [ 962.550163][T24071] [ 962.550163][T24071] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 962.550163][T24071] [ 962.558432][T24095] loop1: detected capacity change from 0 to 1024 [ 962.571353][ T5885] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 962.638036][T24071] read_mapping_page failed! [ 962.649386][T24071] ERROR: (device loop4): txCommit: [ 962.649386][T24071] [ 962.707362][T24071] ERROR: (device loop4): remounting filesystem as read-only [ 962.719016][T14198] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 962.757006][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 962.788723][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 962.807885][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 962.823575][ T5885] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 962.840113][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.858469][ T5885] usb 4-1: Product: syz [ 962.862696][ T5885] usb 4-1: Manufacturer: syz [ 962.867303][ T5885] usb 4-1: SerialNumber: syz [ 962.911090][ T5885] usb 4-1: config 0 descriptor?? [ 962.927183][T14198] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 962.956632][T14198] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.983503][T14198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 963.026929][T14198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.045499][T14198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.070432][T14198] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 963.094996][T14198] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 963.120184][T14198] usb 1-1: Product: syz [ 963.124408][T14198] usb 1-1: Manufacturer: syz [ 963.149283][T14198] cdc_wdm 1-1:1.0: skipping garbage [ 963.154545][T14198] cdc_wdm 1-1:1.0: skipping garbage [ 963.186047][T14198] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 963.191991][T14198] cdc_wdm 1-1:1.0: Unknown control protocol [ 963.215724][ T5885] usb 4-1: USB disconnect, device number 127 [ 963.358582][T24093] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 963.391657][ T5886] usb 1-1: USB disconnect, device number 108 [ 963.697594][ T5808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 963.760430][T24127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7873'. [ 963.843788][T24131] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7875'. [ 963.913270][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 963.943209][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 963.973605][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 964.015021][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 964.052554][ T5808] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 964.070618][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.090125][ T5808] usb 5-1: Product: syz [ 964.094382][ T5808] usb 5-1: Manufacturer: syz [ 964.106637][ T5808] usb 5-1: SerialNumber: syz [ 964.148280][ T5808] usb 5-1: config 0 descriptor?? [ 964.378685][ T5808] adutux 5-1:0.0: Could not retrieve serial number [ 964.385350][ T5808] adutux: probe of 5-1:0.0 failed with error -5 [ 964.494287][T24154] loop3: detected capacity change from 0 to 256 [ 964.543642][T24154] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 964.575335][ T28] audit: type=1326 audit(1771384110.934:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24155 comm="syz.1.7887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 964.627761][ T5886] usb 5-1: USB disconnect, device number 3 [ 964.634641][ T28] audit: type=1326 audit(1771384110.955:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24155 comm="syz.1.7887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 964.717331][T24154] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 964.729855][ T28] audit: type=1326 audit(1771384110.966:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24155 comm="syz.1.7887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 964.767149][T24158] loop0: detected capacity change from 0 to 512 [ 964.779929][T24154] exFAT-fs (loop3): Filesystem has been set read-only [ 964.806459][ T28] audit: type=1326 audit(1771384110.966:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24155 comm="syz.1.7887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 964.841979][T24158] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 964.850532][T24158] EXT4-fs (loop0): orphan cleanup on readonly fs [ 964.881209][T24158] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.7888: corrupted inode contents [ 964.970622][T24158] EXT4-fs (loop0): Remounting filesystem read-only [ 964.979527][T24158] EXT4-fs (loop0): 1 truncate cleaned up [ 964.993449][T24168] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 964.993779][T17340] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 965.017058][T17340] Quota error (device loop0): write_blk: dquota write failed [ 965.024810][T17340] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 965.044144][T17340] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 965.058022][T17340] Quota error (device loop0): write_blk: dquota write failed [ 965.079255][T17340] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 965.094865][T17340] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 965.115840][T17340] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 965.136376][T17340] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 965.157127][T24158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 965.343568][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 965.361936][T24180] loop1: detected capacity change from 0 to 256 [ 965.481155][T24180] FAT-fs (loop1): Directory bread(block 64) failed [ 965.520296][T24180] FAT-fs (loop1): Directory bread(block 65) failed [ 965.553410][T24180] FAT-fs (loop1): Directory bread(block 66) failed [ 965.574878][T24180] FAT-fs (loop1): Directory bread(block 67) failed [ 965.614385][T24180] FAT-fs (loop1): Directory bread(block 68) failed [ 965.646496][T24180] FAT-fs (loop1): Directory bread(block 69) failed [ 965.653296][T24180] FAT-fs (loop1): Directory bread(block 70) failed [ 965.668806][T24180] FAT-fs (loop1): Directory bread(block 71) failed [ 965.676369][T24180] FAT-fs (loop1): Directory bread(block 72) failed [ 965.684751][T24180] FAT-fs (loop1): Directory bread(block 73) failed [ 965.685413][T24189] loop0: detected capacity change from 0 to 256 [ 966.087065][T24201] autofs4:pid:24201:autofs_fill_super: called with bogus options [ 966.484550][T24221] loop4: detected capacity change from 0 to 128 [ 966.523570][T24221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 966.564094][T24221] System zones: 1-3, 19-19, 35-36 [ 966.597853][T24221] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 966.834956][T24232] loop1: detected capacity change from 0 to 2048 [ 966.863283][T23054] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 966.880808][T24232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.299804][T24252] netlink: 'syz.4.7934': attribute type 1 has an invalid length. [ 967.307801][T24252] netlink: 'syz.4.7934': attribute type 3 has an invalid length. [ 967.342048][T24252] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7934'. [ 967.351788][T24252] NCSI netlink: No device for ifindex 0 [ 967.373370][T24254] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 967.776724][T24274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7943'. [ 967.936366][T24280] nfs: Unknown parameter 'ntext' [ 968.060778][T24284] loop3: detected capacity change from 0 to 256 [ 968.192292][T24284] FAT-fs (loop3): Directory bread(block 64) failed [ 968.198928][T24284] FAT-fs (loop3): Directory bread(block 65) failed [ 968.231234][T24289] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 968.234542][T24284] FAT-fs (loop3): Directory bread(block 66) failed [ 968.260191][T24284] FAT-fs (loop3): Directory bread(block 67) failed [ 968.274402][T24284] FAT-fs (loop3): Directory bread(block 68) failed [ 968.280984][T24284] FAT-fs (loop3): Directory bread(block 69) failed [ 968.302857][T24284] FAT-fs (loop3): Directory bread(block 70) failed [ 968.324346][T24284] FAT-fs (loop3): Directory bread(block 71) failed [ 968.355739][T24284] FAT-fs (loop3): Directory bread(block 72) failed [ 968.367364][T24284] FAT-fs (loop3): Directory bread(block 73) failed [ 968.843747][T24306] [U]  [ 969.509394][T24331] loop3: detected capacity change from 0 to 4096 [ 969.603980][T24331] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 969.624109][T24331] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 969.703592][T24343] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 969.870711][ T1087] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 969.882218][ T5764] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 969.910578][ T5764] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 969.938811][ T5764] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 969.957988][ T3506] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 970.413775][T24372] openvswitch: netlink: Missing valid actions attribute. [ 970.431259][T24372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.591212][T24378] netlink: 'syz.1.7996': attribute type 21 has an invalid length. [ 970.621159][T24378] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.629697][T24378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 970.636999][T24378] IPv6: NLM_F_CREATE should be set when creating new route [ 970.644325][T24378] IPv6: NLM_F_CREATE should be set when creating new route [ 970.651625][T24378] IPv6: NLM_F_CREATE should be set when creating new route [ 970.665694][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 970.687695][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 971.429072][T24418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8015'. [ 972.263905][T24453] loop3: detected capacity change from 0 to 128 [ 972.281759][T24458] kAFS: unparsable volume name [ 972.413542][T18151] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 972.438556][T24463] loop1: detected capacity change from 0 to 64 [ 973.447770][ T5808] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 973.539691][T24510] loop4: detected capacity change from 0 to 128 [ 973.599599][T24510] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 973.656200][T24510] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 973.667037][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 973.694195][ T5808] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 973.712341][ T5808] usb 4-1: config 0 has no interface number 0 [ 973.741161][ T5808] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 973.775135][ T5808] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 973.812334][T23054] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 973.827131][ T5808] usb 4-1: config 0 interface 85 has no altsetting 0 [ 973.850360][ T5808] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 973.866082][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.904879][ T5808] usb 4-1: Product: syz [ 973.919072][ T5808] usb 4-1: Manufacturer: syz [ 973.932667][ T5808] usb 4-1: SerialNumber: syz [ 973.973561][ T5808] usb 4-1: config 0 descriptor?? [ 974.316253][T24531] netlink: 'syz.4.8069': attribute type 21 has an invalid length. [ 974.343010][T24531] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.370653][T24531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 974.377973][T24531] IPv6: NLM_F_CREATE should be set when creating new route [ 974.385319][T24531] IPv6: NLM_F_CREATE should be set when creating new route [ 974.392622][T24531] IPv6: NLM_F_CREATE should be set when creating new route [ 974.397390][ T5808] appletouch 4-1:0.85: Failed to request geyser raw mode [ 974.414463][ T5808] appletouch: probe of 4-1:0.85 failed with error -5 [ 974.441274][ T5808] usb 4-1: USB disconnect, device number 2 [ 975.305646][T24568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 975.390689][T24572] loop0: detected capacity change from 0 to 164 [ 975.491078][T24574] loop4: detected capacity change from 0 to 2048 [ 975.584187][T24574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.626656][T24581] netlink: 'syz.3.8094': attribute type 10 has an invalid length. [ 975.635236][T24581] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.8094'. [ 975.645353][T24581] openvswitch: netlink: Flow key attr not present in new flow. [ 975.788949][T24574] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #12: block 2: comm syz.4.8091: lblock 0 mapped to illegal pblock 2 (length 1) [ 976.066997][T23054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.477736][T24609] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8106'. [ 977.667860][T24651] loop0: detected capacity change from 0 to 256 [ 978.065716][T24666] netlink: 'syz.1.8131': attribute type 9 has an invalid length. [ 978.108707][T13461] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 978.290208][T13461] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 978.313967][T13461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.330479][T13461] usb 5-1: Product: syz [ 978.340477][T13461] usb 5-1: Manufacturer: syz [ 978.360164][T13461] usb 5-1: SerialNumber: syz [ 978.375020][T13461] usb 5-1: config 0 descriptor?? [ 978.604297][T13461] usb-storage 5-1:0.0: USB Mass Storage device detected [ 978.720394][T24695] netlink: 'syz.1.8143': attribute type 3 has an invalid length. [ 978.843990][T13461] usb 5-1: USB disconnect, device number 4 [ 978.995739][T24705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8147'. [ 979.004984][T24705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8147'. [ 979.035931][T24707] netlink: 'syz.1.8148': attribute type 3 has an invalid length. [ 979.060561][T24707] netlink: 'syz.1.8148': attribute type 27 has an invalid length. [ 979.175984][T24710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 979.287898][T24711] loop0: detected capacity change from 0 to 8192 [ 979.314792][T24711] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 979.351475][T24711] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 979.380396][T24711] FAT-fs (loop0): Filesystem has been set read-only [ 980.420252][T12511] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 980.597292][T12511] usb 2-1: Using ep0 maxpacket: 8 [ 980.609430][T12511] usb 2-1: config 0 interface 0 has no altsetting 0 [ 980.623813][T12511] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 980.633290][T12511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.649348][T12511] usb 2-1: Product: syz [ 980.655091][T12511] usb 2-1: Manufacturer: syz [ 980.659827][T12511] usb 2-1: SerialNumber: syz [ 980.671276][T12511] usb 2-1: config 0 descriptor?? [ 980.696429][T12511] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 980.839907][T24774] loop0: detected capacity change from 0 to 1764 [ 980.867613][T14198] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 980.879612][T12511] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 980.904193][T12511] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 980.979215][T24776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8181'. [ 981.060952][T14198] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 981.083137][T13461] usb 2-1: USB disconnect, device number 15 [ 981.091361][T14198] usb 4-1: config 2 interface 0 has no altsetting 0 [ 981.102287][T14198] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 981.131863][T14198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.146930][T14198] usb 4-1: Product: syz [ 981.155814][T14198] usb 4-1: Manufacturer: syz [ 981.163683][T14198] usb 4-1: SerialNumber: syz [ 981.181603][T14198] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 981.200544][T14198] usb 4-1: selecting invalid altsetting 0 [ 981.212314][T14198] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 981.376108][T14198] usb 4-1: USB disconnect, device number 3 [ 981.671260][T24800] loop4: detected capacity change from 0 to 256 [ 981.683579][T24800] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 981.690691][T12511] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 981.704574][T24800] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 981.728980][T24800] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 981.875197][T12511] usb 1-1: Using ep0 maxpacket: 16 [ 981.901490][T12511] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 981.931441][T12511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.956154][T12511] usb 1-1: Product: syz [ 981.966401][T12511] usb 1-1: Manufacturer: syz [ 981.977266][T12511] usb 1-1: SerialNumber: syz [ 981.998035][T12511] r8152-cfgselector 1-1: config 0 descriptor?? [ 982.432782][T12511] r8152-cfgselector 1-1: Unknown version 0x0000 [ 982.459833][T12511] r8152-cfgselector 1-1: USB disconnect, device number 109 [ 982.884399][T24818] loop1: detected capacity change from 0 to 32768 [ 982.933332][T24818] ialloc: diAlloc returned -5! [ 983.791974][T24858] netlink: 'syz.3.8222': attribute type 1 has an invalid length. [ 983.819623][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8222'. [ 984.201303][T24873] netlink: 'syz.3.8229': attribute type 10 has an invalid length. [ 984.215527][T24874] loop0: detected capacity change from 0 to 1024 [ 984.229019][T24874] EXT4-fs: inline encryption not supported [ 984.236016][T24873] macvlan1: entered allmulticast mode [ 984.243187][T24874] EXT4-fs: Ignoring removed bh option [ 984.257672][T24873] veth1_vlan: entered allmulticast mode [ 984.274540][T24874] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 984.281787][T24873] team0: Port device macvlan1 added [ 984.309785][T24874] EXT4-fs (loop0): orphan cleanup on readonly fs [ 984.338794][T24874] EXT4-fs error (device loop0): ext4_quota_enable:7140: comm syz.0.8230: inode #2304: comm syz.0.8230: iget: illegal inode # [ 984.406026][T24874] EXT4-fs (loop0): Remounting filesystem read-only [ 984.418269][T24874] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 984.438205][T24874] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 984.441992][T24879] netlink: 'syz.1.8239': attribute type 10 has an invalid length. [ 984.446528][T24874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 984.502898][T24879] macvlan1: entered allmulticast mode [ 984.564021][T24879] veth1_vlan: entered allmulticast mode [ 984.623587][T24879] team0: Port device macvlan1 added [ 984.636744][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.706867][T24864] loop4: detected capacity change from 0 to 40427 [ 984.754544][T24864] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 984.801074][T24864] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 984.805749][T24885] __vm_enough_memory: pid: 24885, comm: syz.0.8233, not enough memory for the allocation [ 984.841404][T24864] F2FS-fs (loop4): invalid crc value [ 984.887549][T24864] F2FS-fs (loop4): Found nat_bits in checkpoint [ 985.004770][T24893] netlink: 'syz.3.8236': attribute type 2 has an invalid length. [ 985.028491][T24864] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 985.044208][T24864] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 985.125161][T24897] loop0: detected capacity change from 0 to 1024 [ 985.266259][T24901] Sensor A: ================= START STATUS ================= [ 985.307815][T24901] Sensor A: Test Pattern: 75% Colorbar [ 985.328919][T24901] Sensor A: Show Information: All [ 985.340428][ T1107] hfsplus: b-tree write err: -5, ino 4 [ 985.350493][T24901] Sensor A: Vertical Flip: false [ 985.376868][T24901] Sensor A: Horizontal Flip: false [ 985.407313][T24901] Sensor A: Brightness: 128 [ 985.421235][T24901] Sensor A: Contrast: 128 [ 985.425638][T24901] Sensor A: Hue: 0 [ 985.440835][T24901] Sensor A: Saturation: 128 [ 985.447235][T24901] Sensor A: ================== END STATUS ================== [ 985.812461][T24917] netlink: 'syz.3.8250': attribute type 7 has an invalid length. [ 986.348788][T24938] netlink: 'syz.0.8259': attribute type 10 has an invalid length. [ 986.406461][T24938] macvlan1: entered allmulticast mode [ 986.448497][T24938] veth1_vlan: entered allmulticast mode [ 986.492625][T24938] team0: Port device macvlan1 added [ 986.666154][T24948] loop4: detected capacity change from 0 to 512 [ 986.744553][T24948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.759856][T24948] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.953555][T24957] loop0: detected capacity change from 0 to 16 [ 986.964401][T24957] erofs: (device loop0): mounted with root inode @ nid 36. [ 987.003376][T23054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.022581][T23055] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 987.026138][T24942] loop1: detected capacity change from 0 to 32768 [ 987.046799][T24957] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 987.074359][ T28] audit: type=1800 audit(1771384135.061:101): pid=24957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8267" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 987.135097][T24942] (syz.1.8261,24942,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 987.201611][T24942] (syz.1.8261,24942,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 987.325713][T24942] JBD2: Ignoring recovery information on journal [ 987.444732][T24942] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 987.849703][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 988.001267][T24991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 988.698095][T25020] netlink: 'syz.3.8297': attribute type 13 has an invalid length. [ 988.722447][T25020] netlink: 'syz.3.8297': attribute type 27 has an invalid length. [ 988.904306][T25034] xt_connbytes: Forcing CT accounting to be enabled [ 988.926617][T25034] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 989.083399][T25038] loop4: detected capacity change from 0 to 16 [ 989.122380][T25038] erofs: (device loop4): mounted with root inode @ nid 36. [ 989.186576][T25044] xt_TCPMSS: Only works on TCP SYN packets [ 989.371950][T25050] @0Ù: renamed from dummy0 (while UP) [ 989.590667][T25058] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 989.719183][T25064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8318'. [ 989.972415][T25074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.131070][T25081] loop4: detected capacity change from 0 to 164 [ 990.417564][T25090] loop0: detected capacity change from 0 to 256 [ 990.463581][T25090] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 990.581024][T25068] loop1: detected capacity change from 0 to 32768 [ 990.599740][T25068] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.8320 (25068) [ 990.645207][T25068] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 990.682028][T25068] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 990.693909][T25098] loop3: detected capacity change from 0 to 8 [ 990.720494][T25068] BTRFS info (device loop1): force zlib compression, level 3 [ 990.721536][T25098] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 990.761207][T25068] BTRFS info (device loop1): turning on flush-on-commit [ 990.809323][T25098] cramfs: Error -3 while decompressing! [ 990.813622][T25068] BTRFS info (device loop1): max_inline at 4096 [ 990.834034][T25068] BTRFS info (device loop1): using free space tree [ 990.851483][T25098] cramfs: ffffffff973f8348(18)->ffff888043536000(4096) [ 990.869962][T25098] cramfs: Error -3 while decompressing! [ 990.894945][T25098] cramfs: ffffffff973f8348(18)->ffff888043536000(4096) [ 990.928039][ T28] audit: type=1800 audit(1771384139.201:102): pid=25098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8334" name="file1" dev="loop3" ino=324 res=0 errno=0 [ 991.019436][T25068] BTRFS info (device loop1): enabling ssd optimizations [ 991.026438][T25068] BTRFS info (device loop1): auto enabling async discard [ 991.308831][ T5762] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 991.593415][ T6211] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (6211) [ 991.858176][T25152] __vm_enough_memory: pid: 25152, comm: syz.1.8352, not enough memory for the allocation [ 992.167199][T25163] cgroup: name respecified [ 992.178543][T25164] loop0: detected capacity change from 0 to 64 [ 992.319183][T25159] loop4: detected capacity change from 0 to 4096 [ 992.442706][T25169] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 992.577982][T25159] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 992.653219][T25167] loop3: detected capacity change from 0 to 4096 [ 992.698709][T25167] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 992.828913][T25176] geneve2: entered promiscuous mode [ 992.936765][T25167] ntfs3: loop3: failed to convert "c46c" to cp855 [ 993.022359][T25180] binder: binder_mmap: 25179 200000001000-20000000b000 bad vm_flags failed -1 [ 993.079521][T25184] overlayfs: conflicting options: metacopy=off,verity=on [ 993.489403][T25202] loop3: detected capacity change from 0 to 256 [ 993.516402][T25202] exfat: Deprecated parameter 'utf8' [ 993.551171][T25202] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 993.665545][T13461] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 993.910875][T13461] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 993.927495][T13461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.943331][T13461] usb 5-1: Product: syz [ 993.948340][T13461] usb 5-1: Manufacturer: syz [ 993.959362][T13461] usb 5-1: SerialNumber: syz [ 993.977224][T13461] usb 5-1: config 0 descriptor?? [ 994.136308][T25225] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.200843][T13461] hso 5-1:0.0: Can't find BULK IN endpoint [ 994.226664][T13461] usb-storage 5-1:0.0: USB Mass Storage device detected [ 994.400872][ T5808] usb 5-1: USB disconnect, device number 5 [ 995.092300][T25267] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8407'. [ 995.255941][T25273] IPv6: NLM_F_CREATE should be specified when creating new route [ 995.549247][T25257] loop1: detected capacity change from 0 to 32768 [ 995.624944][T25257] jfs_lookup: iget failed on inum 4 [ 995.885190][ T5886] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 996.082506][ T5886] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 996.115731][ T5886] usb 1-1: config 0 has no interface number 0 [ 996.131525][ T5886] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 996.148981][ T5886] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 996.166087][ T5886] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 996.182760][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.211300][ T5886] usb 1-1: config 0 descriptor?? [ 996.222020][ T5886] ttusbir 1-1:0.83: cannot find expected altsetting [ 996.468236][ T5808] usb 1-1: USB disconnect, device number 110 [ 997.138070][T25331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8439'. [ 997.465081][T25322] loop4: detected capacity change from 0 to 32768 [ 997.478632][T25322] (syz.4.8434,25322,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 997.519090][T25322] (syz.4.8434,25322,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 997.641134][T25322] JBD2: Ignoring recovery information on journal [ 997.755797][T25354] bond0: Unable to set up delay as MII monitoring is disabled [ 997.772796][T25356] loop1: detected capacity change from 0 to 256 [ 997.832123][T25322] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 997.868119][T25356] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 997.909444][T25356] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 998.159194][T23054] ocfs2: Unmounting device (7,4) on (node local) [ 998.540022][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8459'. [ 998.567222][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8459'. [ 998.776875][T25387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8471'. [ 999.474428][T25385] loop3: detected capacity change from 0 to 32768 [ 999.503359][T25385] (syz.3.8463,25385,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 999.550208][T25385] (syz.3.8463,25385,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 999.622342][T25385] JBD2: Ignoring recovery information on journal [ 999.750768][T25385] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 999.941554][T25402] loop1: detected capacity change from 0 to 32768 [ 1000.024004][T25402] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1000.195369][T25402] XFS (loop1): Ending clean mount [ 1000.232217][T25402] XFS (loop1): Quotacheck needed: Please wait. [ 1000.256176][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 1000.323583][T25440] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1000.350368][T25440] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1000.365446][T25402] XFS (loop1): Quotacheck: Done. [ 1000.492572][ T5762] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1000.680579][T25447] loop0: detected capacity change from 0 to 164 [ 1001.136289][T25460] netlink: 'syz.3.8495': attribute type 8 has an invalid length. [ 1001.351587][T25466] netlink: 'syz.1.8498': attribute type 6 has an invalid length. [ 1001.549466][T25476] netlink: 'syz.1.8503': attribute type 10 has an invalid length. [ 1001.588137][T25477] tmpfs: Bad value for 'mpol' [ 1001.608420][T25476] team0: Device veth1_macvtap failed to register rx_handler [ 1001.790730][T25483] binfmt_misc: register: failed to install interpreter file ./bus [ 1001.804889][T25484] loop4: detected capacity change from 0 to 256 [ 1001.859703][T25484] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1001.907085][T25484] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1002.353831][T25504] tmpfs: Bad value for 'mpol' [ 1002.411140][T25506] netlink: 'syz.4.8518': attribute type 12 has an invalid length. [ 1002.663605][T25521] netlink: 'syz.3.8524': attribute type 2 has an invalid length. [ 1002.759518][T25524] netlink: 'syz.4.8526': attribute type 8 has an invalid length. [ 1002.999622][T25532] (null): rxe_set_mtu: Set mtu to 4096 [ 1003.028293][T25532] lo speed is unknown, defaulting to 1000 [ 1003.052389][T25532] lo speed is unknown, defaulting to 1000 [ 1003.082616][T25532] lo speed is unknown, defaulting to 1000 [ 1003.332699][T14198] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1003.364781][ T28] audit: type=1326 audit(1771384152.536:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 1003.413159][ T28] audit: type=1326 audit(1771384152.536:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 1003.457816][ T28] audit: type=1326 audit(1771384152.568:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 1003.498625][ T5886] lo speed is unknown, defaulting to 1000 [ 1003.516175][T25532] infiniband syz0: set active [ 1003.528565][T14198] usb 1-1: Using ep0 maxpacket: 8 [ 1003.528639][T25532] infiniband syz0: added lo [ 1003.546889][ T28] audit: type=1326 audit(1771384152.579:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 1003.558491][T14198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1003.597984][ T28] audit: type=1326 audit(1771384152.579:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102059bf79 code=0x7ffc0000 [ 1003.655861][T14198] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1003.700339][T14198] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1003.726363][T14198] usb 1-1: Product: syz [ 1003.748441][T14198] usb 1-1: Manufacturer: syz [ 1003.754469][T25532] RDS/IB: syz0: added [ 1003.760078][T25532] smc: adding ib device syz0 with port count 1 [ 1003.775029][T14198] usb 1-1: SerialNumber: syz [ 1003.820071][T25532] smc: ib device syz0 port 1 has pnetid [ 1003.832553][ T8] lo speed is unknown, defaulting to 1000 [ 1003.847672][T25532] lo speed is unknown, defaulting to 1000 [ 1003.863165][T25545] loop1: detected capacity change from 0 to 32768 [ 1003.951981][T25545] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1004.028478][T14198] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1004.051131][T14198] usb 1-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 1004.059088][T14198] usb 1-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 1004.089004][T14198] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1004.167465][T25545] XFS (loop1): Ending clean mount [ 1004.202040][T25545] XFS (loop1): Quotacheck needed: Please wait. [ 1004.237556][T14198] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1004.245937][T14198] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1004.269767][T25532] lo speed is unknown, defaulting to 1000 [ 1004.291250][T25545] XFS (loop1): Quotacheck: Done. [ 1004.291368][T14198] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1004.354384][T14198] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1004.408860][T14198] usb 1-1: USB disconnect, device number 111 [ 1004.496413][T14198] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1004.522410][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1004.551844][T14198] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1004.579047][T14198] visor 1-1:1.0: device disconnected [ 1004.838640][T25532] lo speed is unknown, defaulting to 1000 [ 1005.085852][T25580] loop4: detected capacity change from 0 to 512 [ 1005.194621][T25580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.207865][T25580] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.249224][T25580] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1005.312398][T23054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.432452][T25532] lo speed is unknown, defaulting to 1000 [ 1005.905245][T25532] lo speed is unknown, defaulting to 1000 [ 1006.133117][T25591] loop0: detected capacity change from 0 to 32768 [ 1006.181048][T25591] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1006.239204][T25616] netlink: 'syz.4.8562': attribute type 10 has an invalid length. [ 1006.263254][T25616] team0: Device veth1_macvtap failed to register rx_handler [ 1006.428470][T25591] XFS (loop0): Ending clean mount [ 1006.482814][T25591] XFS (loop0): Quotacheck needed: Please wait. [ 1006.644036][T25591] XFS (loop0): Quotacheck: Done. [ 1006.788524][ T5763] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1007.022452][T25641] loop1: detected capacity change from 0 to 2048 [ 1007.043133][T25641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.624135][T25662] netlink: 'syz.1.8584': attribute type 5 has an invalid length. [ 1007.877787][T25672] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.994770][T25674] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 1008.200009][T25682] netlink: 'syz.0.8571': attribute type 3 has an invalid length. [ 1008.207802][T25682] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8571'. [ 1008.274167][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1008.478559][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1008.492580][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1008.516692][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1008.526763][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.536882][T25696] loop0: detected capacity change from 0 to 256 [ 1008.554189][ T5886] usb 5-1: config 0 descriptor?? [ 1008.779982][ T5886] usb 5-1: string descriptor 0 read error: -71 [ 1008.816608][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input77 [ 1008.873236][ T5122] bcm5974 5-1:0.0: could not read from device [ 1008.909914][ T5886] usb 5-1: USB disconnect, device number 6 [ 1009.059459][T25709] loop1: detected capacity change from 0 to 4096 [ 1009.361858][T25720] sctp: [Deprecated]: syz.3.8612 (pid 25720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1009.361858][T25720] Use struct sctp_sack_info instead [ 1010.080440][T25746] netlink: 'syz.3.8624': attribute type 5 has an invalid length. [ 1010.270474][T25754] netlink: 'syz.3.8628': attribute type 6 has an invalid length. [ 1010.287904][T25754] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8628'. [ 1010.326799][T25756] netlink: 'syz.0.8629': attribute type 7 has an invalid length. [ 1010.401546][T25760] loop1: detected capacity change from 0 to 2048 [ 1010.448505][T25760] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1010.799760][ T5886] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1010.949792][T25784] loop3: detected capacity change from 0 to 65 [ 1010.965271][T25784] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1010.972865][T25784] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1011.004916][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 1011.026906][ T5886] usb 2-1: config 7 has an invalid interface number: 143 but max is 1 [ 1011.052598][ T5886] usb 2-1: config 7 has an invalid interface number: 217 but max is 1 [ 1011.065236][ T5886] usb 2-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 1011.078372][ T5886] usb 2-1: config 7 has no interface number 0 [ 1011.085077][ T5886] usb 2-1: config 7 has no interface number 1 [ 1011.091693][ T5886] usb 2-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 1011.109565][ T5886] usb 2-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1011.123242][ T5886] usb 2-1: config 7 interface 143 has no altsetting 0 [ 1011.130222][T13461] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1011.157679][ T5886] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 1011.181503][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.206215][ T5886] usb 2-1: Product: syz [ 1011.229392][ T5886] usb 2-1: Manufacturer: syz [ 1011.234077][ T5886] usb 2-1: SerialNumber: syz [ 1011.350822][T13461] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1011.369121][T13461] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.400941][T13461] usb 5-1: config 0 has no interface number 0 [ 1011.408517][T13461] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1011.420924][T13461] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1011.438132][T13461] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.463076][ T5886] qmi_wwan: probe of 2-1:7.143 failed with error -22 [ 1011.471996][T13461] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1011.487531][T13461] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1011.499161][T13461] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1011.510956][T13461] usb 5-1: Product: syz [ 1011.515175][T13461] usb 5-1: Manufacturer: syz [ 1011.524850][ T5886] usb 2-1: USB disconnect, device number 16 [ 1011.540381][T13461] usb 5-1: SerialNumber: syz [ 1011.583655][T13461] usb 5-1: config 0 descriptor?? [ 1011.808977][T13461] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1011.827709][T13461] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 1012.009497][T13461] usb 5-1: USB disconnect, device number 7 [ 1012.671694][T25839] loop4: detected capacity change from 0 to 1764 [ 1013.200614][T25855] loop0: detected capacity change from 0 to 4096 [ 1013.335085][T25855] ntfs: volume version 3.1. [ 1013.482450][T25855] ntfs: (device loop0): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1013.754677][T23055] Bluetooth: hci4: command tx timeout [ 1013.772478][T25878] loop0: detected capacity change from 0 to 512 [ 1014.335804][T25902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1014.335831][T25902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1014.841294][T25920] loop4: detected capacity change from 0 to 4096 [ 1016.300899][T25950] loop3: detected capacity change from 0 to 32768 [ 1016.320406][T25950] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.8723 (25950) [ 1016.358407][T25950] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1016.393832][T25950] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1016.417613][T25950] BTRFS info (device loop3): setting nodatasum [ 1016.425374][T25950] BTRFS info (device loop3): using free space tree [ 1016.460905][T14198] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1016.558272][T25950] BTRFS info (device loop3): enabling ssd optimizations [ 1016.566202][T25950] BTRFS info (device loop3): auto enabling async discard [ 1016.662804][T14198] usb 5-1: Using ep0 maxpacket: 32 [ 1016.680595][T14198] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.712804][T14198] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1016.732254][T14198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.752022][T14198] usb 5-1: Product: syz [ 1016.766315][T14198] usb 5-1: Manufacturer: syz [ 1016.771117][T14198] usb 5-1: SerialNumber: syz [ 1016.796452][T14198] usb 5-1: config 0 descriptor?? [ 1016.850939][T14198] usb 5-1: bad CDC descriptors [ 1016.856175][T14198] usb 5-1: unsupported MDLM descriptors [ 1016.994471][ T5764] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1017.040233][T14198] usb 5-1: USB disconnect, device number 8 [ 1017.198547][T26008] tmpfs: Bad value for 'mpol' [ 1017.414788][T26012] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1017.451890][T26012] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1017.493613][T26012] overlayfs: missing 'lowerdir' [ 1017.511773][T26014] loop3: detected capacity change from 0 to 1764 [ 1017.780217][T26020] netlink: 'syz.4.8750': attribute type 27 has an invalid length. [ 1018.173153][T26034] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1018.274787][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1018.564524][T26054] loop0: detected capacity change from 0 to 64 [ 1018.602840][T26054] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1018.665593][T26050] loop3: detected capacity change from 0 to 4096 [ 1018.707999][T26050] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1018.830410][T26050] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1018.861934][T26060] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8769'. [ 1018.939311][T26050] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1018.939311][T26050] [ 1019.351344][T26074] loop1: detected capacity change from 0 to 64 [ 1019.377806][T26074] hfs: unable to locate alternate MDB [ 1019.383234][T26074] hfs: continuing without an alternate MDB [ 1019.484244][ T28] audit: type=1800 audit(1771384169.829:108): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8766" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1020.081932][T26097] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1020.127212][T26097] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1020.136995][T26097] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1020.168134][T26097] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1020.182295][T26097] geneve3: entered promiscuous mode [ 1020.191566][T26097] geneve3: entered allmulticast mode [ 1020.208084][T26097] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1020.224025][T26097] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1020.254998][T26097] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1020.273933][T26100] loop1: detected capacity change from 0 to 4096 [ 1020.281066][T26097] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1020.304595][T26100] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1020.316305][T26100] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1020.342892][T26100] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1020.371160][T26100] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1020.416952][T26106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8792'. [ 1020.433604][T26100] ntfs: volume version 3.1. [ 1020.442247][T26106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8792'. [ 1020.453024][T26106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8792'. [ 1020.503428][ T5885] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1020.700065][ T5885] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1020.717736][ T5885] usb 4-1: config 0 has no interface number 0 [ 1020.741468][ T5885] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1020.754410][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.789376][ T5885] usb 4-1: Product: syz [ 1020.795889][ T5885] usb 4-1: Manufacturer: syz [ 1020.800537][ T5885] usb 4-1: SerialNumber: syz [ 1020.848155][ T5885] usb 4-1: config 0 descriptor?? [ 1020.865146][ T5885] hub 4-1:0.132: bad descriptor, ignoring hub [ 1020.880333][ T5885] hub: probe of 4-1:0.132 failed with error -5 [ 1020.905815][ T5885] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input80 [ 1020.962650][T26118] tmpfs: Bad value for 'mpol' [ 1021.410310][T26132] loop0: detected capacity change from 0 to 1764 [ 1021.454326][T26136] loop4: detected capacity change from 0 to 8 [ 1021.461685][T26136] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1021.527997][T18151] udevd[18151]: incorrect cramfs checksum on /dev/loop4 [ 1021.571087][T26136] cramfs: Error -3 while decompressing! [ 1021.631644][T26136] cramfs: ffffffff973f4368(1306)->ffff888058476000(4096) [ 1021.639604][T18151] udevd[18151]: incorrect cramfs checksum on /dev/loop4 [ 1021.667634][T26136] cramfs: bad data blocksize 3221485966 [ 1021.674490][T26142] netlink: 'syz.1.8810': attribute type 3 has an invalid length. [ 1021.705294][T26136] cramfs: Error -3 while decompressing! [ 1021.715787][T26136] cramfs: ffffffff973f4368(1306)->ffff888058476000(4096) [ 1021.737488][ T28] audit: type=1800 audit(1771384172.254:109): pid=26136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8807" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1021.930546][T26150] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1021.969087][T26150] overlayfs: missing 'lowerdir' [ 1022.034068][T26154] C: renamed from lo (while UP) [ 1022.064592][T26154] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1022.113291][T26158] cgroup: Name too long [ 1022.321107][ T5885] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1022.423833][T26168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8823'. [ 1022.490428][T26170] loop4: detected capacity change from 0 to 4096 [ 1022.512365][T26170] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1022.525851][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 1022.537687][ T5885] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1022.563908][ T5885] usb 1-1: config 179 has no interface number 0 [ 1022.570270][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1022.601698][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1022.622146][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1022.635204][ T5885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1022.647490][ T5885] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1022.694697][ T5885] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1022.703637][ T5885] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1022.722625][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.737828][T26170] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1022.806163][T26170] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1022.806163][T26170] [ 1022.842991][ T5885] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input81 [ 1022.943265][T26176] xt_ecn: cannot match TCP bits for non-tcp packets [ 1023.204103][T26179] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1023.223091][T26179] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1023.227505][T26166] loop3: detected capacity change from 0 to 40427 [ 1023.255072][T26166] F2FS-fs (loop3): invalid crc value [ 1023.270083][T26179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1023.470024][T26166] F2FS-fs (loop3): Start checkpoint disabled! [ 1023.488649][T26166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1023.551620][T26166] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 1023.930769][ T28] audit: type=1326 audit(1771384174.603:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1023.988413][ T28] audit: type=1326 audit(1771384174.603:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.040925][ T28] audit: type=1326 audit(1771384174.603:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.091708][T20000] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1024.107079][ T28] audit: type=1326 audit(1771384174.603:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.182717][ T28] audit: type=1326 audit(1771384174.603:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.209010][ T28] audit: type=1326 audit(1771384174.603:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.260509][ T28] audit: type=1326 audit(1771384174.603:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.287227][T20000] usb 5-1: Using ep0 maxpacket: 16 [ 1024.317823][T20000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 1024.343453][ T28] audit: type=1326 audit(1771384174.603:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.347064][T20000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 1024.424510][T20000] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1024.429869][ T28] audit: type=1326 audit(1771384174.603:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.8837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1024.441105][T20000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.482233][T26209] loop3: detected capacity change from 0 to 1024 [ 1024.491688][T20000] usb 5-1: Product: syz [ 1024.506294][T20000] usb 5-1: Manufacturer: syz [ 1024.521121][T20000] usb 5-1: SerialNumber: syz [ 1024.543925][T20000] usb 5-1: config 0 descriptor?? [ 1024.561890][T20000] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1024.573402][T20000] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 1024.584111][T26209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.652443][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.680938][T26216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8844'. [ 1024.722981][T26216] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1024.828567][T20000] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1024.896813][T13461] usb 1-1: USB disconnect, device number 112 [ 1024.903020][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1024.914792][T13461] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1024.945486][T20000] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1024.984672][T20000] em28xx 5-1:0.0: board has no eeprom [ 1025.072677][T20000] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1025.100598][T20000] em28xx 5-1:0.0: dvb set to isoc mode. [ 1025.109993][T26228] loop3: detected capacity change from 0 to 64 [ 1025.127791][ T5808] em28xx 5-1:0.0: Binding DVB extension [ 1025.151528][T20000] usb 5-1: USB disconnect, device number 9 [ 1025.180038][T20000] em28xx 5-1:0.0: Disconnecting em28xx [ 1025.340394][ T5808] em28xx 5-1:0.0: Registering input extension [ 1025.349822][T26233] netdevsim netdevsim1 ªªªªªª: set [1, 1] type 2 family 0 port 20000 - 0 [ 1025.367918][T20000] em28xx 5-1:0.0: Closing input extension [ 1025.375234][T26233] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1025.399254][T20000] em28xx 5-1:0.0: Freeing device [ 1025.404362][T26233] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1025.424968][T26233] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1025.437107][T26235] loop0: detected capacity change from 0 to 2048 [ 1025.446276][T26233] geneve2: entered promiscuous mode [ 1025.452666][T26233] geneve2: entered allmulticast mode [ 1025.517567][T26235] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.532098][T26233] netdevsim netdevsim1 ªªªªªª: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1025.544196][T26233] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1025.554637][T26233] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1025.590264][T26233] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1025.674144][ T5886] usb 4-1: USB disconnect, device number 4 [ 1026.037355][T26249] netlink: 'syz.3.8859': attribute type 21 has an invalid length. [ 1026.353151][T26261] netlink: 'syz.3.8867': attribute type 29 has an invalid length. [ 1026.367808][T26263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.691012][T26245] loop4: detected capacity change from 0 to 32768 [ 1026.807246][T26281] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1026.820776][T26245] find_entry called with index = 0 [ 1027.496166][T14198] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1027.657149][T26307] loop4: detected capacity change from 0 to 8192 [ 1027.678890][T26307] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1027.692252][T14198] usb 2-1: Using ep0 maxpacket: 8 [ 1027.717872][T14198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1027.719050][T26314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1027.730205][T26307] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1027.748377][T26307] REISERFS (device loop4): using ordered data mode [ 1027.754921][T26307] reiserfs: using flush barriers [ 1027.756056][T14198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.775952][T26307] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1027.819986][T14198] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1027.856667][T26307] REISERFS (device loop4): checking transaction log (loop4) [ 1027.880130][T14198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1027.896721][T26307] REISERFS (device loop4): Using r5 hash to sort names [ 1027.912279][T14198] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1027.927322][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1027.933288][T26307] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1027.933972][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1027.964446][T26307] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1027.975333][T14198] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1027.992351][T14198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.020207][T14198] usb 2-1: config 0 descriptor?? [ 1028.031244][T26295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1028.370544][T26323] loop3: detected capacity change from 0 to 4096 [ 1028.398216][T26325] loop4: detected capacity change from 0 to 1764 [ 1028.407479][T26323] ntfs3: loop3: ino=3, Correct links count -> 2. [ 1028.495170][T26325] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1028.552029][T14198] usb 2-1: USB disconnect, device number 17 [ 1028.555072][T23055] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1028.797128][T26329] libceph: resolve '0' (ret=-3): failed [ 1028.974929][T26337] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1028.984248][T26337] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1028.993833][T26337] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.002967][T26337] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.012529][T26337] geneve3: entered promiscuous mode [ 1029.018401][T26337] geneve3: entered allmulticast mode [ 1029.025929][T26337] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1029.035345][T26337] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1029.044503][T26337] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1029.053776][T26337] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1029.063005][ T5886] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1029.234296][T26343] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 1029.281367][ T5886] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.313814][ T5886] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1029.327086][ T5886] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1029.346246][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.403422][T26331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1029.416723][ T5886] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1029.645339][T26357] netlink: 'syz.4.8912': attribute type 2 has an invalid length. [ 1029.736520][T26359] fuse: Unknown parameter 'no' [ 1029.936056][ T5886] usb 1-1: USB disconnect, device number 113 [ 1030.104269][T26373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8920'. [ 1030.267348][T26375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1030.470670][T26377] netlink: 'syz.3.8922': attribute type 21 has an invalid length. [ 1030.499884][T26377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1030.505582][T26372] loop1: detected capacity change from 0 to 32768 [ 1030.522774][T26377] netlink: 'syz.3.8922': attribute type 1 has an invalid length. [ 1030.559937][T26372] find_entry called with index = 0 [ 1030.640153][T26369] loop4: detected capacity change from 0 to 32768 [ 1030.714067][T26369] [ 1030.714067][T26369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1030.714067][T26369] [ 1030.875506][T26385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8926'. [ 1030.878226][T26383] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1030.886619][T26385] netlink: 'syz.0.8926': attribute type 1 has an invalid length. [ 1030.898789][ T1107] [ 1030.898789][ T1107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1030.898789][ T1107] [ 1030.931420][ T1107] [ 1030.931420][ T1107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1030.931420][ T1107] [ 1030.954912][T23054] [ 1030.954912][T23054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1030.954912][T23054] [ 1031.012330][ T111] [ 1031.012330][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1031.012330][ T111] [ 1031.046365][T23054] [ 1031.046365][T23054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1031.046365][T23054] [ 1031.550706][T26399] loop3: detected capacity change from 0 to 1024 [ 1031.594919][T26404] tmpfs: Bad value for 'mpol' [ 1031.621264][T26405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1031.628626][T26405] IPv6: NLM_F_CREATE should be set when creating new route [ 1031.644162][T26399] hfsplus: catalog name length corrupted [ 1031.834901][T26411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1031.865981][T26411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1032.185724][T26425] netlink: 'syz.4.8946': attribute type 1 has an invalid length. [ 1032.205113][T26425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1032.364588][T26433] netlink: 'syz.3.8950': attribute type 2 has an invalid length. [ 1032.391338][T26433] netlink: 'syz.3.8950': attribute type 1 has an invalid length. [ 1032.421203][T26433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8950'. [ 1032.822620][T26451] loop4: detected capacity change from 0 to 2048 [ 1032.913182][T26451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1032.993864][T26451] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 1033.106853][T26461] xfrm0: entered promiscuous mode [ 1033.133508][T26461] xfrm0: entered allmulticast mode [ 1033.465712][T26474] loop4: detected capacity change from 0 to 1024 [ 1033.601498][T26474] hfsplus: failed to extend attributes file [ 1033.877842][T26484] ./file0: Can't lookup blockdev [ 1033.910195][T26486] ipt_ECN: cannot use operation on non-tcp rule [ 1034.169573][T26494] loop4: detected capacity change from 0 to 4096 [ 1034.209622][T26494] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1034.290096][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1034.498627][ T5885] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.513003][T26502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1034.521120][ T5885] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1034.535695][ T5885] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.546306][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.616531][T26490] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1034.627701][ T5885] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1034.695508][T26506] loop4: detected capacity change from 0 to 2048 [ 1034.746250][T26506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1034.981087][T26514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1035.094344][ T5885] usb 4-1: USB disconnect, device number 5 [ 1035.095685][T26512] loop1: detected capacity change from 0 to 8192 [ 1035.172216][T26512] syz.1.8989: attempt to access beyond end of device [ 1035.172216][T26512] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1035.238617][T26512] Buffer I/O error on dev loop1, logical block 57847, async page read [ 1035.328833][T26512] syz.1.8989: attempt to access beyond end of device [ 1035.328833][T26512] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1035.359877][T26512] Buffer I/O error on dev loop1, logical block 57847, async page read [ 1035.382465][ T28] audit: type=1800 audit(1771384186.876:119): pid=26512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8989" name="file2" dev="loop1" ino=1048649 res=0 errno=0 [ 1035.427256][T26512] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 1035.435316][T26512] FAT-fs (loop1): Filesystem has been set read-only [ 1035.729773][T26533] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1036.356779][T26553] loop1: detected capacity change from 0 to 8192 [ 1036.379724][T26553] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1036.414655][T26553] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1036.426478][T26553] REISERFS (device loop1): using ordered data mode [ 1036.457536][T26553] reiserfs: using flush barriers [ 1036.480338][ T5885] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1036.534009][T26553] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1036.550475][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.602122][T26553] REISERFS (device loop1): checking transaction log (loop1) [ 1036.617629][T26553] REISERFS (device loop1): Using r5 hash to sort names [ 1036.640188][T26553] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1036.695973][ T5885] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1036.719323][ T5885] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1036.740506][ T5885] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1036.773109][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.834744][T26554] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1036.864990][ T5885] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1037.300621][ T5885] usb 5-1: USB disconnect, device number 10 [ 1037.332744][T26587] netlink: 'syz.1.9024': attribute type 13 has an invalid length. [ 1037.574856][T26593] loop0: detected capacity change from 0 to 16 [ 1037.608839][T26593] erofs: (device loop0): mounted with root inode @ nid 36. [ 1037.654193][T26593] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1037.677209][T26593] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1037.698331][T26593] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1037.709263][T26593] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1037.725604][ T28] audit: type=1800 audit(1771384189.397:120): pid=26593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9027" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1037.930215][T26602] loop3: detected capacity change from 0 to 64 [ 1038.254058][T26613] C: renamed from team_slave_0 (while UP) [ 1038.300212][T26613] netlink: 'syz.3.9036': attribute type 1 has an invalid length. [ 1038.325528][T26613] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9036'. [ 1038.349930][T26613] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1038.575655][T26626] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1039.870457][T26666] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9062'. [ 1040.318554][T26682] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1040.426638][T26621] syz.1.9041 (26621): drop_caches: 2 [ 1040.516862][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1040.716091][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1040.742259][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1040.764136][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1040.781983][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1040.803115][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1040.821058][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1040.831846][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1040.860914][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.885347][ T8] usb 5-1: config 0 descriptor?? [ 1040.905269][T12511] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1040.922284][T26680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1041.034317][T26707] loop3: detected capacity change from 0 to 256 [ 1041.053794][T26709] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1041.079562][T26707] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1041.101513][T12511] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1041.140148][T12511] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1041.178136][T12511] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1041.205335][T12511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.254940][T26695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1041.286744][T12511] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1041.376498][T26715] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1041.391443][T26715] overlayfs: conflicting options: metacopy=off,verity=require [ 1041.432614][ T8] usb 5-1: USB disconnect, device number 11 [ 1041.441814][T23055] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1041.640758][T26719] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 1041.801719][ T5893] usb 2-1: USB disconnect, device number 18 [ 1041.912710][T26729] xt_hashlimit: overflow, try lower: 6/0 [ 1042.040136][T26733] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1042.518664][T26755] loop0: detected capacity change from 0 to 64 [ 1042.597598][T26758] netlink: 'syz.1.9106': attribute type 7 has an invalid length. [ 1042.610124][T26758] netlink: 'syz.1.9106': attribute type 8 has an invalid length. [ 1042.707296][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1042.893343][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1042.900399][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1042.930467][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1042.949623][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1042.965490][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1042.988228][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1043.005514][T12511] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1043.023689][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1043.032798][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.060399][ T8] usb 4-1: config 0 descriptor?? [ 1043.077931][T26751] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1043.212780][T12511] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1043.229235][T12511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.250546][T12511] usb 1-1: config 0 descriptor?? [ 1043.269421][T12511] cp210x 1-1:0.0: cp210x converter detected [ 1043.346568][T26767] loop4: detected capacity change from 0 to 32768 [ 1043.358792][T26767] (syz.4.9111,26767,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1043.388865][T26767] (syz.4.9111,26767,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1043.424212][T26767] JBD2: Ignoring recovery information on journal [ 1043.515329][T12511] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1043.537769][T23055] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1043.542433][T26767] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1043.603716][T12511] usb 4-1: USB disconnect, device number 6 [ 1043.715994][ T8] usb 1-1: USB disconnect, device number 114 [ 1043.747491][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1043.770199][ T8] cp210x 1-1:0.0: device disconnected [ 1044.019102][T23054] ocfs2: Unmounting device (7,4) on (node local) [ 1044.694252][T26803] loop0: detected capacity change from 0 to 128 [ 1044.743601][T26803] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1044.808560][T26803] ext4 filesystem being mounted at /2385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.851276][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1044.881582][T26811] loop1: detected capacity change from 0 to 256 [ 1044.892828][T26803] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.9128: reserved inode found cleared - inode=2 [ 1044.948065][T26811] FAT-fs (loop1): Directory bread(block 64) failed [ 1044.967372][T26811] FAT-fs (loop1): Directory bread(block 65) failed [ 1044.984393][T26811] FAT-fs (loop1): Directory bread(block 66) failed [ 1045.001923][T26811] FAT-fs (loop1): Directory bread(block 67) failed [ 1045.008940][ T5763] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1045.009409][T26811] FAT-fs (loop1): Directory bread(block 68) failed [ 1045.025183][T26811] FAT-fs (loop1): Directory bread(block 69) failed [ 1045.047225][T26811] FAT-fs (loop1): Directory bread(block 70) failed [ 1045.053977][T26811] FAT-fs (loop1): Directory bread(block 71) failed [ 1045.075877][T26811] FAT-fs (loop1): Directory bread(block 72) failed [ 1045.092762][T26811] FAT-fs (loop1): Directory bread(block 73) failed [ 1045.124284][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1045.134214][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.158612][ T8] usb 4-1: Product: syz [ 1045.183979][ T8] usb 4-1: Manufacturer: syz [ 1045.196461][ T8] usb 4-1: SerialNumber: syz [ 1045.212544][ T8] usb 4-1: config 0 descriptor?? [ 1045.236181][ T8] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1045.672380][T14198] usb 4-1: USB disconnect, device number 7 [ 1045.747996][T26835] netlink: 'syz.1.9142': attribute type 10 has an invalid length. [ 1045.797968][T26835] team0: Device veth1_vlan is already a lower device of the team interface [ 1046.239902][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1046.266740][T26853] loop4: detected capacity change from 0 to 2048 [ 1046.298127][T26855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9153'. [ 1046.314272][T26856] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1046.359198][T26853] NILFS (loop4): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1046.373578][T26853] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1046.407575][T26853] Remounting filesystem read-only [ 1046.420527][T26853] NILFS (loop4): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1046.433486][T26853] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1046.435974][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1046.446293][T26853] NILFS (loop4): error -5 truncating bmap (ino=16) [ 1046.484238][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1046.520937][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 1046.557017][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 1046.585040][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1046.614507][ T8] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1046.615419][T23054] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1046.631496][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.631523][ T8] usb 2-1: Product: syz [ 1046.631538][ T8] usb 2-1: Manufacturer: syz [ 1046.631552][ T8] usb 2-1: SerialNumber: syz [ 1046.642073][ T8] usb 2-1: config 0 descriptor?? [ 1046.670557][T23054] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 1046.674771][T26860] tmpfs: Bad value for 'mpol' [ 1046.688712][T23054] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1046.703488][T23054] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1046.720257][T23054] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1046.731786][T23054] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1046.908250][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input83 [ 1047.020408][T26867] netlink: 'syz.3.9159': attribute type 5 has an invalid length. [ 1047.265343][ T8] usb 2-1: USB disconnect, device number 19 [ 1047.642907][T26888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9169'. [ 1048.172784][T26910] loop0: detected capacity change from 0 to 512 [ 1048.243761][T26910] EXT4-fs (loop0): 1 truncate cleaned up [ 1048.254565][T26910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.432783][T26910] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.9180: bg 0: block 465: padding at end of block bitmap is not set [ 1048.523969][T26910] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1048.563608][T26910] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.9180: invalid indirect mapped block 234881024 (level 0) [ 1048.760118][ T28] audit: type=1326 audit(1771384201.241:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26932 comm="syz.1.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1048.782660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.806111][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.835224][T26936] xt_connbytes: Forcing CT accounting to be enabled [ 1048.842632][T26936] xt_NFQUEUE: number of total queues is 0 [ 1048.886914][ T28] audit: type=1326 audit(1771384201.241:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26932 comm="syz.1.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1048.923117][T26939] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1049.050482][ T28] audit: type=1326 audit(1771384201.241:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26932 comm="syz.1.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1049.060767][T26943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9197'. [ 1049.073452][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.123872][ T28] audit: type=1326 audit(1771384201.241:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26932 comm="syz.1.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7773f9bf79 code=0x7ffc0000 [ 1049.167337][ T5808] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1049.355589][ T5808] usb 5-1: config 0 has no interfaces? [ 1049.365691][ T5808] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1049.385860][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.402470][ T5808] usb 5-1: Product: syz [ 1049.417644][ T5808] usb 5-1: Manufacturer: syz [ 1049.431963][T26957] loop1: detected capacity change from 0 to 1024 [ 1049.439827][ T5808] usb 5-1: SerialNumber: syz [ 1049.459554][ T5808] r8152-cfgselector 5-1: config 0 descriptor?? [ 1049.639032][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1049.709884][ T5808] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1049.922974][T12511] usb 5-1: USB disconnect, device number 12 [ 1049.956699][T26974] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9211'. [ 1050.098886][T26980] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967167 out of range (51000000..2150000000) [ 1050.263863][T26987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9216'. [ 1050.416683][T26997] loop1: detected capacity change from 0 to 512 [ 1050.466687][T26997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.9220: missing EA_INODE flag [ 1050.565227][T26997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9220: error while reading EA inode 11 err=-117 [ 1050.609356][T26997] EXT4-fs (loop1): 1 orphan inode deleted [ 1050.638131][T26997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.761443][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.801183][T27008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9226'. [ 1051.045250][T27014] loop3: detected capacity change from 0 to 1024 [ 1051.114268][T27014] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1051.136456][T27014] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1051.148054][T27014] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.9229: Failed to acquire dquot type 0 [ 1051.216751][T27014] EXT4-fs (loop3): 1 truncate cleaned up [ 1051.228075][T27014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.269409][T27019] loop1: detected capacity change from 0 to 4096 [ 1051.321206][T27019] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1051.368191][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.399156][T27002] loop0: detected capacity change from 0 to 32768 [ 1051.418862][T27002] (syz.0.9222,27002,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1051.445847][T27002] (syz.0.9222,27002,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1051.476820][T27023] xt_NFQUEUE: number of total queues is 0 [ 1051.569055][T27002] JBD2: Ignoring recovery information on journal [ 1051.732614][T27002] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1051.986809][T27033] loop1: detected capacity change from 0 to 2048 [ 1052.024699][T27033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.152152][T27037] netlink: 'syz.4.9240': attribute type 1 has an invalid length. [ 1052.182990][ T5763] ocfs2: Unmounting device (7,0) on (node local) [ 1052.188031][T27037] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.9240'. [ 1052.570445][T27047] netlink: 392 bytes leftover after parsing attributes in process `syz.0.9239'. [ 1052.854592][T27059] loop0: detected capacity change from 0 to 2048 [ 1052.891587][T27059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.002433][T27065] qrtr: Invalid version 0 [ 1053.210714][T27074] loop3: detected capacity change from 0 to 256 [ 1053.248936][T27074] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1053.536156][T27086] netlink: 'syz.3.9264': attribute type 3 has an invalid length. [ 1053.640599][T27090] comedi comedi0: dt2815: I/O port conflict (0x3,2) [ 1053.709784][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9267'. [ 1053.715918][ T5808] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1053.828778][T27098] loop4: detected capacity change from 0 to 256 [ 1053.847112][T27098] exfat: Deprecated parameter 'utf8' [ 1053.861201][T27098] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1053.940729][ T5808] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 1053.953714][T27102] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.967821][ T5808] usb 1-1: config 5 has no interface number 0 [ 1053.984599][ T5808] usb 1-1: config 5 interface 123 has no altsetting 0 [ 1054.004471][ T5808] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1054.025252][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.052602][ T5808] usb 1-1: Product: syz [ 1054.057104][ T5808] usb 1-1: Manufacturer: syz [ 1054.090813][ T5808] usb 1-1: SerialNumber: syz [ 1054.099205][T27104] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1054.300469][T27113] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1054.308684][T27106] loop4: detected capacity change from 0 to 4096 [ 1054.330170][ T5808] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1054.342610][ T5808] usb 1-1: USB disconnect, device number 115 [ 1054.366615][T27106] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1054.366651][T27106] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1054.366721][T27106] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1054.377578][T27106] ntfs: volume version 3.1. [ 1054.615837][T23054] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1054.831845][T27119] bond3: entered allmulticast mode [ 1054.841665][T27122] loop1: detected capacity change from 0 to 2048 [ 1054.843928][T27119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1054.919372][T27124] loop4: detected capacity change from 0 to 256 [ 1054.943502][T27122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.965026][T27124] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1054.996425][T27122] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 1055.006604][T27126] hfsplus: failed to extend attributes file [ 1055.564341][T27115] F2FS-fs (loop3): invalid crc value [ 1055.592442][T27115] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1055.719730][T27115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1055.872855][T27149] set_capacity_and_notify: 2 callbacks suppressed [ 1055.872873][T27149] loop1: detected capacity change from 0 to 1024 [ 1055.967273][T27149] hfsplus: failed to extend attributes file [ 1056.104014][T27154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9295'. [ 1056.313684][T27160] loop0: detected capacity change from 0 to 8 [ 1056.584045][ T5765] kworker/dying (5765) used greatest stack depth: 15560 bytes left [ 1056.771930][T27176] loop3: detected capacity change from 0 to 256 [ 1057.294505][T27201] loop1: detected capacity change from 0 to 128 [ 1057.338056][T27201] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1057.528893][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1057.741535][ T8] usb 5-1: config 0 has an invalid interface number: 36 but max is 0 [ 1057.770640][ T8] usb 5-1: config 0 has no interface number 0 [ 1057.809155][ T8] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 1057.829096][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.849478][T27217] loop3: detected capacity change from 0 to 1764 [ 1057.862766][ T8] usb 5-1: Product: syz [ 1057.869176][ T8] usb 5-1: Manufacturer: syz [ 1057.888333][ T8] usb 5-1: SerialNumber: syz [ 1057.915459][ T8] usb 5-1: config 0 descriptor?? [ 1057.953736][ T8] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1058.068328][T27225] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9327'. [ 1058.346103][ T8] gspca_spca505: reg write: error -71 [ 1058.361676][ T8] spca505: probe of 5-1:0.36 failed with error -5 [ 1058.387539][ T8] usb 5-1: USB disconnect, device number 13 [ 1058.447814][T27238] loop3: detected capacity change from 0 to 16 [ 1058.480444][T27238] erofs: (device loop3): mounted with root inode @ nid 36. [ 1058.488016][T27239] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9334'. [ 1058.517495][T27238] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1058.528906][T27238] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1058.541865][T27238] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1058.551901][T27238] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1058.571686][ T28] audit: type=1800 audit(1771384211.765:125): pid=27238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9333" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1058.762879][T27247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1058.972205][T27257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9341'. [ 1058.989248][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1059.142622][T27261] loop1: detected capacity change from 0 to 128 [ 1059.163832][T27261] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1059.180797][T27261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1059.180938][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.217547][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1059.237165][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1059.249138][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1059.290250][T27265] loop4: detected capacity change from 0 to 16 [ 1059.296845][ T8] usb 4-1: SerialNumber: syz [ 1059.324696][ T8] usb 4-1: 0:2 : does not exist [ 1059.356053][T27265] erofs: (device loop4): mounted with root inode @ nid 36. [ 1059.416848][T27265] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1059.459258][T27265] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1059.488345][T27265] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1059.498225][T27265] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1059.524889][ T28] audit: type=1800 audit(1771384212.794:126): pid=27265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9346" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1059.551315][ T29] INFO: task syz-executor:5771 blocked for more than 143 seconds. [ 1059.559453][ T29] Not tainted syzkaller #0 [ 1059.565025][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1059.608361][ T29] task:syz-executor state:D stack:21512 pid:5771 ppid:1 flags:0x00004004 [ 1059.654181][ T29] Call Trace: [ 1059.657557][ T29] [ 1059.660610][ T29] __schedule+0x1553/0x45a0 [ 1059.687497][ T29] ? asan.module_dtor+0x20/0x20 [ 1059.699372][ T29] ? mark_lock+0x94/0x320 [ 1059.709249][ T29] ? lock_chain_count+0x20/0x20 [ 1059.718866][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1059.735846][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1059.745556][ T29] schedule+0xbd/0x170 [ 1059.765340][ T29] io_schedule+0x80/0xd0 [ 1059.769686][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1059.787487][ T8] usb 4-1: USB disconnect, device number 8 [ 1059.791923][ T29] ? folio_wait_bit+0x30/0x30 [ 1059.803048][ T29] ? filemap_get_entry+0x379/0x3f0 [ 1059.808345][ T29] ? _compound_head+0x120/0x120 [ 1059.816206][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 1059.830234][ T29] __filemap_get_folio+0xbc/0xbb0 [ 1059.846503][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 1059.852795][ T29] ? mapping_evict_folio+0x510/0x510 [ 1059.858614][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1059.864107][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.870231][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1059.875675][ T29] evict+0x4dd/0x8d0 [ 1059.880097][ T29] ? proc_nr_inodes+0x230/0x230 [ 1059.885001][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1059.890749][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1059.896328][ T29] evict_inodes+0x606/0x6a0 [ 1059.901196][ T29] ? clear_inode+0x150/0x150 [ 1059.906791][ T29] generic_shutdown_super+0x97/0x2b0 [ 1059.912355][ T29] kill_block_super+0x44/0x90 [ 1059.917823][ T29] deactivate_locked_super+0x97/0x100 [ 1059.923997][ T29] cleanup_mnt+0x43b/0x4d0 [ 1059.928646][ T29] task_work_run+0x1d4/0x260 [ 1059.933814][ T29] ? task_work_cancel+0x220/0x220 [ 1059.939104][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1059.945459][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1059.950896][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1059.964421][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1059.971198][ T29] do_syscall_64+0x61/0xa0 [ 1059.975859][ T29] ? clear_bhb_loop+0x40/0x90 [ 1059.984232][ T29] ? clear_bhb_loop+0x40/0x90 [ 1059.996766][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.004584][ T29] RIP: 0033:0x7fe554b9d1d7 [ 1060.009542][ T29] RSP: 002b:00007ffd3348e438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1060.020845][ T29] RAX: 0000000000000000 RBX: 00007fe554c31c3b RCX: 00007fe554b9d1d7 [ 1060.029219][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3348e4f0 [ 1060.037661][ T29] RBP: 00007ffd3348e4f0 R08: 00007ffd3348f4f0 R09: 00000000ffffffff [ 1060.046077][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3348f580 [ 1060.054742][ T29] R13: 00007fe554c31c3b R14: 00000000000e4600 R15: 00007ffd3348f5c0 [ 1060.062810][ T29] [ 1060.075671][ T29] [ 1060.075671][ T29] Showing all locks held in the system: [ 1060.119543][ T29] 1 lock held by khungtaskd/29: [ 1060.128687][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1060.153425][ T29] 2 locks held by kworker/u4:2/42: [ 1060.164006][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1060.183242][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 1060.192208][ T29] 2 locks held by kworker/u4:9/3506: [ 1060.197678][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1060.213202][ T29] #1: ffffc9000cd87d00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1060.225340][ T29] 2 locks held by syslogd/5119: [ 1060.230381][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1060.240653][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 1060.249472][ T29] 2 locks held by getty/5524: [ 1060.254229][ T29] #0: ffff88814cb270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1060.264489][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1060.274983][ T29] 1 lock held by syz-executor/5771: [ 1060.281044][ T29] #0: ffff8880577c00e0 (&type->s_umount_key#75){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1060.291538][ T29] [ 1060.293898][ T29] ============================================= [ 1060.293898][ T29] [ 1060.303157][ T29] NMI backtrace for cpu 1 [ 1060.307783][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1060.315233][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1060.325757][ T29] Call Trace: [ 1060.329060][ T29] [ 1060.332288][ T29] dump_stack_lvl+0x18c/0x250 [ 1060.337006][ T29] ? show_regs_print_info+0x20/0x20 [ 1060.342327][ T29] ? load_image+0x400/0x400 [ 1060.346888][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1060.351877][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1060.358066][ T29] ? _printk+0xde/0x130 [ 1060.362341][ T29] ? load_image+0x400/0x400 [ 1060.366883][ T29] ? load_image+0x400/0x400 [ 1060.371426][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1060.377945][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1060.383947][ T29] watchdog+0xf3d/0xf80 [ 1060.388170][ T29] ? watchdog+0x1e1/0xf80 [ 1060.392595][ T29] kthread+0x2fa/0x390 [ 1060.396767][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1060.401901][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1060.406494][ T29] ret_from_fork+0x48/0x80 [ 1060.410908][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1060.415497][ T29] ret_from_fork_asm+0x11/0x20 [ 1060.420296][ T29] [ 1060.423506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.430291][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1060.435775][ C0] NMI backtrace for cpu 0 [ 1060.435787][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1060.435803][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1060.435812][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1060.435836][ C0] Code: d7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1060.435850][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 1060.435865][ C0] RAX: 381dbc59215f1a00 RBX: ffffffff8162a490 RCX: 381dbc59215f1a00 [ 1060.435877][ C0] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 1060.435888][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 1060.435900][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19d2688 [ 1060.435912][ C0] R13: 1ffffffff19c0fbc R14: 0000000000000000 R15: dffffc0000000000 [ 1060.435923][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1060.435937][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1060.435947][ C0] CR2: 00007f3531fe7198 CR3: 000000007d0f9000 CR4: 00000000003506f0 [ 1060.435962][ C0] Call Trace: [ 1060.435968][ C0] [ 1060.435973][ C0] default_idle+0x13/0x20 [ 1060.435990][ C0] default_idle_call+0x6c/0xa0 [ 1060.436007][ C0] do_idle+0x1f0/0x4e0 [ 1060.436030][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1060.436048][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1060.436193][ C0] cpu_startup_entry+0x43/0x60 [ 1060.436222][ C0] rest_init+0x2e2/0x300 [ 1060.436240][ C0] ? time_init+0x40/0x40 [ 1060.436255][ C0] arch_call_rest_init+0xe/0x10 [ 1060.436276][ C0] start_kernel+0x459/0x4e0 [ 1060.436291][ C0] x86_64_start_reservations+0x2a/0x30 [ 1060.436305][ C0] x86_64_start_kernel+0x60/0x60 [ 1060.436320][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1060.436351][ C0] [ 1060.630387][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1060.637267][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1060.645002][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1060.655201][ T29] Call Trace: [ 1060.658490][ T29] [ 1060.661504][ T29] dump_stack_lvl+0x18c/0x250 [ 1060.666234][ T29] ? show_regs_print_info+0x20/0x20 [ 1060.671619][ T29] ? load_image+0x400/0x400 [ 1060.676250][ T29] panic+0x2dc/0x730 [ 1060.680343][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1060.686068][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1060.690666][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1060.696503][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1060.702772][ T29] watchdog+0xf7c/0xf80 [ 1060.707024][ T29] ? watchdog+0x1e1/0xf80 [ 1060.711390][ T29] kthread+0x2fa/0x390 [ 1060.715540][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1060.721039][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1060.725705][ T29] ret_from_fork+0x48/0x80 [ 1060.730722][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1060.735525][ T29] ret_from_fork_asm+0x11/0x20 [ 1060.740320][ T29] [ 1060.744666][ T29] Kernel Offset: disabled [ 1060.749144][ T29] Rebooting in 86400 seconds..