last executing test programs: 8m28.287760786s ago: executing program 1 (id=9406): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x80, [[0x9ef8, 0x2, 0x0, 0x0, 0x0, 0x10], [0x0, 0x10000001, 0x0, 0x0, 0x0, 0x10001, 0x400000], [0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0x2}, {0x63f}, {0xffffffe, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0xc, 0x6}, {0x1ff, 0x7f}, {0x17}, {0x0, 0x1}, {0x401}], '\x00', 0x1, 0x0, 0x0, 0xf8}) 8m28.203325951s ago: executing program 1 (id=9407): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0xa}}) 8m28.08758706s ago: executing program 1 (id=9410): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 8m27.859428388s ago: executing program 1 (id=9414): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 8m27.37775983s ago: executing program 1 (id=9420): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x7, &(0x7f0000000200)=""/208, &(0x7f0000000040)=0xd0) 8m26.947405072s ago: executing program 1 (id=9426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 8m26.60711431s ago: executing program 32 (id=9426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 2.526076231s ago: executing program 4 (id=17447): set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x8) modify_ldt$write2(0x11, &(0x7f0000002040)={0x3, 0x20000000, 0x1000, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x10) 2.325939014s ago: executing program 4 (id=17448): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r0, 0x3a0fd261, 0xa8, 0x0, 0x0) 2.111683365s ago: executing program 4 (id=17450): r0 = add_key$fscrypt_v1(&(0x7f0000002dc0), &(0x7f0000002e00)={'fscrypt:', @auto=[0x66, 0x33, 0x39, 0x64, 0x5b, 0x31, 0x63, 0x65, 0x63, 0x30, 0x36, 0x61, 0x39, 0x36, 0x35, 0x63]}, &(0x7f0000002e40)={0x0, "575cf3318d3f0ffe77e467089a6f2a1720546957fed69f8313ed9f67d4b49fa475c2e095d04a9436d523c952fbd3c8aa248f64ee9112cccfaa5e22074c53d280", 0x1e}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) 1.955806117s ago: executing program 4 (id=17453): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.019642346s ago: executing program 3 (id=17471): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000080)) 887.471362ms ago: executing program 0 (id=17472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24000020}, 0x20000000) 853.719695ms ago: executing program 2 (id=17473): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 787.699144ms ago: executing program 3 (id=17474): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0xff00}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 766.94082ms ago: executing program 0 (id=17475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 742.200395ms ago: executing program 3 (id=17476): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x31, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 670.923572ms ago: executing program 2 (id=17477): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'caif0\x00'}) 664.836211ms ago: executing program 3 (id=17478): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) futex(&(0x7f0000000000), 0xa, 0x0, 0x0, 0x0, 0x1) 596.613519ms ago: executing program 0 (id=17479): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'rti800\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0xafa3, 0x0, 0x4, 0x54c6cff4, 0x2, 0x5, 0x9, 0x1, 0x9, 0x6, 0x8, 0xbffffffe, 0x4, 0x8, 0xa, 0x89, 0xcaa3, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x3, 0x7, 0x49, 0x0, 0x2f5]}) 573.488695ms ago: executing program 2 (id=17480): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0xffffffffffffffff, 0x0) 503.776142ms ago: executing program 3 (id=17481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) 473.857287ms ago: executing program 2 (id=17482): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb) 435.391089ms ago: executing program 4 (id=17483): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 410.595925ms ago: executing program 3 (id=17484): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) 396.700022ms ago: executing program 2 (id=17485): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r0, 0xc00c5512, 0x0) 388.928581ms ago: executing program 0 (id=17486): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f000000b800)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@dots}, {@fat=@flush}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@fat=@gid}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x1fe, &(0x7f0000002380)="$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") 224.537631ms ago: executing program 4 (id=17487): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 167.634351ms ago: executing program 0 (id=17488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x3, 0xc8, 0x9, 0x1100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 153.397098ms ago: executing program 2 (id=17489): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x300, 0x0, 0x41565559, 0x0, 0x0, [{}, {}, {0x0, 0x5}, {}, {}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x5}}) 0s ago: executing program 0 (id=17490): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e21, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@hopopts={{0x18, 0x29, 0x36, {0x2e}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x40}, 0x90) kernel console output (not intermixed with test programs): et: 0 [ 1075.256958][T19451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1075.796885][T19533] loop4: detected capacity change from 0 to 64 [ 1075.845662][T19533] Trying to free block not in datazone [ 1075.913104][ T28] audit: type=1326 audit(1075.880:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.2.15576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x0 [ 1076.306046][T19557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15580'. [ 1076.335671][T19557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15580'. [ 1076.367350][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15580'. [ 1076.399280][T19562] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1076.540080][T19576] netlink: 'syz.0.15587': attribute type 10 has an invalid length. [ 1076.563048][T19576] veth0_vlan: entered promiscuous mode [ 1076.577437][T19576] veth0_vlan: entered allmulticast mode [ 1076.588328][T19576] bridge0: port 1(veth0_vlan) entered blocking state [ 1076.603145][T19576] bridge0: port 1(veth0_vlan) entered disabled state [ 1076.616256][T19576] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1077.023016][T30949] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1077.245431][T30949] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1077.262934][T30949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.283643][T30949] usb 5-1: Product: syz [ 1077.290249][T30949] usb 5-1: Manufacturer: syz [ 1077.301649][T30949] usb 5-1: SerialNumber: syz [ 1077.312067][T19619] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 1077.328940][T30949] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1077.351961][T30952] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1077.801452][T30949] usb 5-1: USB disconnect, device number 32 [ 1077.937971][T19654] netlink: 'syz.3.15613': attribute type 1 has an invalid length. [ 1077.947347][T19654] __nla_validate_parse: 2 callbacks suppressed [ 1077.947361][T19654] netlink: 236 bytes leftover after parsing attributes in process `syz.3.15613'. [ 1078.281168][T19668] loop0: detected capacity change from 0 to 1024 [ 1078.298883][T19668] EXT4-fs: Ignoring removed mblk_io_submit option [ 1078.389361][T19668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.412989][T30952] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1078.420219][T30952] ath9k_htc: Failed to initialize the device [ 1078.427988][T30949] usb 5-1: ath9k_htc: USB layer deinitialized [ 1078.460772][T19668] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.636066][T19686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15621'. [ 1078.703950][T19689] netlink: 'syz.4.15623': attribute type 1 has an invalid length. [ 1078.711832][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15623'. [ 1078.825751][T19665] loop3: detected capacity change from 0 to 32768 [ 1078.848346][T19665] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.15617 (19665) [ 1078.896972][T19665] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1078.925875][T19665] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1078.965310][T19665] BTRFS info (device loop3): force zlib compression, level 3 [ 1078.983372][T19665] BTRFS info (device loop3): force clearing of disk cache [ 1078.990581][T19665] BTRFS info (device loop3): setting nodatasum [ 1079.011700][T19665] BTRFS info (device loop3): allowing degraded mounts [ 1079.057257][T19665] BTRFS info (device loop3): enabling disk space caching [ 1079.095387][T19665] BTRFS info (device loop3): disk space caching is enabled [ 1079.283771][T19665] BTRFS info (device loop3): auto enabling async discard [ 1079.305616][T19665] BTRFS info (device loop3): rebuilding free space tree [ 1079.334827][T19665] BTRFS info (device loop3): disabling free space tree [ 1079.341816][T19665] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1079.391988][T19665] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1079.592006][T19744] netlink: 'syz.4.15635': attribute type 10 has an invalid length. [ 1079.616708][T19744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15635'. [ 1079.633298][ T5770] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1079.677987][T19744] bridge0: port 4(dummy0) entered blocking state [ 1079.691220][T19744] bridge0: port 4(dummy0) entered disabled state [ 1079.706244][T19744] dummy0: entered allmulticast mode [ 1079.716056][T19744] dummy0: entered promiscuous mode [ 1079.737136][T19744] bridge0: port 4(dummy0) entered blocking state [ 1079.743693][T19744] bridge0: port 4(dummy0) entered forwarding state [ 1079.883631][ T5763] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (5763) [ 1080.183134][T19768] netlink: 'syz.0.15644': attribute type 21 has an invalid length. [ 1080.191245][T19768] netlink: 'syz.0.15644': attribute type 1 has an invalid length. [ 1080.218530][T19768] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15644'. [ 1080.693949][T19792] usb usb7: usbfs: process 19792 (syz.3.15653) did not claim interface 0 before use [ 1081.142948][T19823] loop3: detected capacity change from 0 to 64 [ 1081.149664][T19820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.335682][T19832] program syz.3.15666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1081.577459][T19846] netlink: 'syz.2.15671': attribute type 1 has an invalid length. [ 1081.590092][T19846] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.15671'. [ 1081.629991][T19848] netlink: 'syz.0.15672': attribute type 5 has an invalid length. [ 1081.826443][T19859] netlink: 'syz.2.15676': attribute type 10 has an invalid length. [ 1081.843596][T19859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15676'. [ 1082.576029][T19903] loop3: detected capacity change from 0 to 1024 [ 1082.585760][T19903] EXT4-fs: Ignoring removed mblk_io_submit option [ 1082.626714][T19903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.648285][T19903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.789988][T19882] loop0: detected capacity change from 0 to 32768 [ 1082.840007][T19882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.15685 (19882) [ 1082.912539][T19882] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1082.937938][T19882] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1082.968537][T19882] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1082.989846][T19882] BTRFS info (device loop0): trying to use backup root at mount time [ 1083.022340][T19882] BTRFS info (device loop0): setting nodatasum [ 1083.038358][T19882] BTRFS info (device loop0): enabling ssd optimizations [ 1083.073074][T19882] BTRFS info (device loop0): using spread ssd allocation scheme [ 1083.080775][T19882] BTRFS info (device loop0): turning on flush-on-commit [ 1083.103819][T19882] BTRFS info (device loop0): force zlib compression, level 3 [ 1083.111271][T19882] BTRFS info (device loop0): using free space tree [ 1083.455342][ T5768] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1083.507866][T19960] netlink: 'syz.3.15703': attribute type 75 has an invalid length. [ 1083.987611][T19982] loop4: detected capacity change from 0 to 256 [ 1083.990857][T19982] exfat: Deprecated parameter 'namecase' [ 1084.029968][T19982] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5474c335, utbl_chksum : 0xe619d30d) [ 1084.031635][ T788] IPVS: starting estimator thread 0... [ 1084.173065][T19985] IPVS: using max 21 ests per chain, 50400 per kthread [ 1084.485701][T20000] loop0: detected capacity change from 0 to 1024 [ 1084.714732][T20015] netlink: 'syz.3.15720': attribute type 10 has an invalid length. [ 1084.722694][T20015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15720'. [ 1084.773042][T20015] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1084.780318][T20015] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1084.853869][T20015] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1085.417131][T20055] tmpfs: Bad value for 'mpol' [ 1085.427019][T20057] loop3: detected capacity change from 0 to 256 [ 1085.491348][T20057] FAT-fs (loop3): Directory bread(block 64) failed [ 1085.511810][T20057] FAT-fs (loop3): Directory bread(block 65) failed [ 1085.544349][T20057] FAT-fs (loop3): Directory bread(block 66) failed [ 1085.550948][T20057] FAT-fs (loop3): Directory bread(block 67) failed [ 1085.591731][T20057] FAT-fs (loop3): Directory bread(block 68) failed [ 1085.614634][T20057] FAT-fs (loop3): Directory bread(block 69) failed [ 1085.633274][T20057] FAT-fs (loop3): Directory bread(block 70) failed [ 1085.654818][T20066] loop0: detected capacity change from 0 to 256 [ 1085.662169][T20057] FAT-fs (loop3): Directory bread(block 71) failed [ 1085.669701][T20066] exfat: Deprecated parameter 'utf8' [ 1085.690985][T20057] FAT-fs (loop3): Directory bread(block 72) failed [ 1085.708635][T20057] FAT-fs (loop3): Directory bread(block 73) failed [ 1085.739095][T20066] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1085.855116][T20076] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15740'. [ 1085.880316][T20076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15740'. [ 1085.906296][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15740'. [ 1086.078848][T20089] loop0: detected capacity change from 0 to 256 [ 1086.500055][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15752'. [ 1087.138879][T20159] ieee802154 phy1 wpan1: encryption failed: -22 [ 1087.153453][T30952] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1087.264052][T20167] No such timeout policy "syz1" [ 1087.384010][T30952] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1087.393425][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.418960][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.440492][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.461324][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.473076][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.473105][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.474613][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.474663][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.474707][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.475981][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.476030][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.476058][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.477340][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.477437][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.477468][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.478762][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.478807][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.478844][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.479932][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.479981][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.480021][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.481137][T30952] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1087.481184][T30952] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1087.481213][T30952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.492258][T30952] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1087.669425][T30952] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1087.713806][T30952] usb 5-1: Product: syz [ 1087.718022][T30952] usb 5-1: Manufacturer: syz [ 1087.734317][T30952] usb 5-1: SerialNumber: syz [ 1087.752155][T30952] usb 5-1: config 0 descriptor?? [ 1087.788755][T30952] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1087.867665][ T28] audit: type=1400 audit(1087.840:4367): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=20196 comm="syz.3.15779" [ 1087.966450][T20200] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1088.008195][T26338] usb 5-1: USB disconnect, device number 33 [ 1088.026784][T26338] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1088.113809][T30952] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1088.181970][ T28] audit: type=1326 audit(1088.150:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.2.15785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1088.233121][ T28] audit: type=1326 audit(1088.150:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.2.15785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1088.277825][ T28] audit: type=1326 audit(1088.180:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.2.15785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1088.299835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.311947][ T28] audit: type=1326 audit(1088.180:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.2.15785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1088.334001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.345368][T30952] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1088.357090][ T28] audit: type=1326 audit(1088.180:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.2.15785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1088.359581][T30952] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.432272][T30952] usb 1-1: config 220 has no interface number 2 [ 1088.442444][T30952] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1088.472322][T30952] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1088.479730][T30952] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1088.486942][T30952] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1088.497095][T30952] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1088.506836][T30952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.515545][T30952] usb 1-1: Product: syz [ 1088.524358][T30952] usb 1-1: Manufacturer: syz [ 1088.529038][T30952] usb 1-1: SerialNumber: syz [ 1088.714944][T20241] xt_ecn: cannot match TCP bits for non-tcp packets [ 1088.783256][T30952] usb 1-1: selecting invalid altsetting 0 [ 1088.803465][T30952] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1088.809873][T30952] usb 1-1: No valid video chain found. [ 1088.856223][T30952] usb 1-1: selecting invalid altsetting 0 [ 1088.862403][T30952] usbtest: probe of 1-1:220.1 failed with error -22 [ 1088.880878][T30952] usb 1-1: USB disconnect, device number 84 [ 1089.205954][T20276] loop3: detected capacity change from 0 to 4096 [ 1089.253171][T30949] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1089.463825][T30949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1089.506172][T30949] usb 5-1: New USB device found, idVendor=07cf, idProduct=6802, bcdDevice= 0.40 [ 1089.525944][T30949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.546663][T30949] usb 5-1: Product: syz [ 1089.550928][T30949] usb 5-1: Manufacturer: syz [ 1089.573228][T30949] usb 5-1: SerialNumber: syz [ 1089.824169][T30949] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1089.891481][T30949] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 1089.938875][T30949] usb 5-1: USB disconnect, device number 34 [ 1090.006069][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.324821][T20379] netlink: 'syz.3.15821': attribute type 21 has an invalid length. [ 1090.347484][T20379] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15821'. [ 1090.361012][T20379] netlink: 'syz.3.15821': attribute type 5 has an invalid length. [ 1090.380357][T20379] netlink: 'syz.3.15821': attribute type 6 has an invalid length. [ 1090.397485][T20379] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15821'. [ 1090.459817][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15823'. [ 1090.604229][T30949] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1090.803233][T30949] usb 1-1: Using ep0 maxpacket: 32 [ 1090.822244][T30949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.859624][T30949] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1090.873422][T30949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.895230][T30949] usb 1-1: Product: syz [ 1090.899466][T30949] usb 1-1: Manufacturer: syz [ 1090.923683][T30949] usb 1-1: SerialNumber: syz [ 1090.964024][T30949] usb 1-1: config 0 descriptor?? [ 1090.974382][T30949] usb 1-1: bad CDC descriptors [ 1090.979744][T30949] usb 1-1: unsupported MDLM descriptors [ 1091.098253][T20426] : renamed from veth0_vlan (while UP) [ 1091.212338][T26338] usb 1-1: USB disconnect, device number 85 [ 1091.432512][T20450] loop4: detected capacity change from 0 to 1764 [ 1091.484105][T20450] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1092.271536][T20521] xt_limit: Overflow, try lower: 0/0 [ 1092.490416][T20529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1092.503782][T20529] ip6gretap3: entered allmulticast mode [ 1092.671145][T20545] libceph: resolve 'c' (ret=-3): failed [ 1092.978184][T20564] ieee802154 phy1 wpan1: encryption failed: -90 [ 1093.242976][ T788] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1093.428119][ T788] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1093.451107][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.470866][ T788] usb 4-1: Product: syz [ 1093.480244][T20594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15888'. [ 1093.489786][T30950] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1093.493858][ T788] usb 4-1: Manufacturer: syz [ 1093.501989][ T788] usb 4-1: SerialNumber: syz [ 1093.525407][ T788] usb 4-1: config 0 descriptor?? [ 1093.697807][T30950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.714654][T30950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1093.726273][T30950] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1093.742967][T30950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1093.760937][T30950] usb 5-1: SerialNumber: syz [ 1093.773895][ T788] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 1093.781390][ T788] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1093.800873][ T788] f81604: probe of 4-1:0.0 failed with error -32 [ 1093.810661][T30950] usb 5-1: 0:2 : does not exist [ 1093.829433][ T788] usb 4-1: USB disconnect, device number 79 [ 1093.931600][T20614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15891'. [ 1094.229624][T26338] usb 5-1: USB disconnect, device number 35 [ 1094.450050][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15901'. [ 1094.520273][ T28] audit: type=1326 audit(1094.490:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1094.567626][ T28] audit: type=1326 audit(1094.490:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1094.605234][ T28] audit: type=1326 audit(1094.490:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1094.634212][ T28] audit: type=1326 audit(1094.490:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25d0b9c502 code=0x7ffc0000 [ 1094.665473][ T28] audit: type=1326 audit(1094.530:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25d0b5cfce code=0x7ffc0000 [ 1094.723069][ T28] audit: type=1326 audit(1094.570:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f25d0b9c5c7 code=0x7ffc0000 [ 1094.803181][ T28] audit: type=1326 audit(1094.570:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d0b5cfce code=0x7ffc0000 [ 1094.806410][T20669] netlink: 666 bytes leftover after parsing attributes in process `syz.2.15906'. [ 1094.853220][ T28] audit: type=1326 audit(1094.570:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25d0b5cfce code=0x7ffc0000 [ 1094.927088][ T28] audit: type=1326 audit(1094.600:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1095.004978][ T28] audit: type=1326 audit(1094.610:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.2.15902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d0b9c799 code=0x7ffc0000 [ 1095.465859][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15916'. [ 1095.485270][T20737] netlink: 540 bytes leftover after parsing attributes in process `syz.4.15916'. [ 1095.952146][T20765] overlayfs: workdir and upperdir must be separate subtrees [ 1096.031470][T20771] loop4: detected capacity change from 0 to 512 [ 1096.107012][T20771] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 1096.138799][T20771] System zones: 0-2, 18-18, 34-35 [ 1096.162703][T20771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.294924][T20771] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.15933: invalid size [ 1096.474427][T29846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.962566][T20835] loop3: detected capacity change from 0 to 16 [ 1096.990366][T20835] erofs: (device loop3): mounted with root inode @ nid 36. [ 1097.055038][T20835] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 1097.088758][T20835] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 1097.127342][T20835] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 32811 of nid 36 [ 1097.204981][T20843] binfmt_misc: register: failed to install interpreter file ./file0 [ 1097.236313][T20847] netlink: set zone limit has 8 unknown bytes [ 1097.940809][T20852] loop4: detected capacity change from 0 to 32768 [ 1097.955906][T20852] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.15961 (20852) [ 1097.976950][T20852] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1098.006930][T20852] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1098.042117][T20852] BTRFS info (device loop4): using free space tree [ 1098.106460][T20852] BTRFS info (device loop4): enabling ssd optimizations [ 1098.117239][T20852] BTRFS info (device loop4): auto enabling async discard [ 1098.363710][T20913] xt_policy: neither incoming nor outgoing policy selected [ 1098.390120][T29846] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1098.512727][T20922] usb usb7: usbfs: process 20922 (syz.0.15980) did not claim interface 0 before use [ 1099.442094][T20973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15997'. [ 1099.452002][T20973] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1100.485121][T21043] overlayfs: workdir and upperdir must be separate subtrees [ 1101.033044][T26338] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1101.232988][T26338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.247968][T26338] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1101.259921][T26338] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1101.276729][T26338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.306400][T26338] usb 4-1: config 0 descriptor?? [ 1101.543158][T30952] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1101.741964][T26338] Bluetooth: Can't get state to change to load configuration err [ 1101.742995][T30952] usb 3-1: Using ep0 maxpacket: 8 [ 1101.765628][T30952] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1101.772652][T26338] Bluetooth: Loading sysconfig file failed [ 1101.781064][T26338] ath3k: probe of 4-1:0.0 failed with error -16 [ 1101.790882][T26338] usb 4-1: USB disconnect, device number 80 [ 1101.797553][T30952] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 1101.826363][T30952] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.849067][T30952] usb 3-1: config 9 has no interface number 0 [ 1101.863541][T30952] usb 3-1: config 9 interface 27 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1101.884790][T30952] usb 3-1: config 9 interface 27 altsetting 9 endpoint 0xF has invalid wMaxPacketSize 0 [ 1101.904824][T30952] usb 3-1: config 9 interface 27 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1101.929721][T21124] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1101.936940][T30952] usb 3-1: config 9 interface 27 has no altsetting 0 [ 1101.948264][T30952] usb 3-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=f3.b6 [ 1101.957744][T30952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.973022][T30952] usb 3-1: Product: syz [ 1101.977218][T30952] usb 3-1: Manufacturer: syz [ 1101.992053][T30952] usb 3-1: SerialNumber: syz [ 1102.034794][T30952] sierra 3-1:9.27: Sierra USB modem converter detected [ 1102.213495][T30952] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1102.235962][T30952] usb 3-1: USB disconnect, device number 89 [ 1102.282437][T30952] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1102.305172][T30952] sierra 3-1:9.27: device disconnected [ 1102.399719][T21153] loop3: detected capacity change from 0 to 256 [ 1102.536461][T21118] loop0: detected capacity change from 0 to 32768 [ 1102.567838][T21118] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.16044 (21118) [ 1102.597984][T21118] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1102.644394][T21118] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1102.671585][T21118] BTRFS info (device loop0): using free space tree [ 1102.682699][T21166] netlink: 'syz.4.16052': attribute type 10 has an invalid length. [ 1102.717638][T21166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16052'. [ 1102.727801][T21166] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1102.744819][T21166] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1102.788088][T21166] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1102.881479][T21118] BTRFS info (device loop0): enabling ssd optimizations [ 1102.892896][T21118] BTRFS info (device loop0): auto enabling async discard [ 1103.112515][ T5768] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1103.296630][ T5222] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1103.362646][ T5763] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (5763) [ 1103.514945][ T5222] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1103.531938][ T5222] usb 3-1: not running at top speed; connect to a high speed hub [ 1103.559464][ T5222] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1103.580409][ T5222] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1103.620355][ T5222] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1103.650036][ T5222] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 1103.673500][ T5222] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1103.698460][ T5222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.708815][ T5222] usb 3-1: Product: syz [ 1103.717302][ T5222] usb 3-1: Manufacturer: syz [ 1103.722153][ T5222] usb 3-1: SerialNumber: syz [ 1103.937568][ T5774] Bluetooth: hci0: command tx timeout [ 1104.014234][ T5222] usb 3-1: 0:2 : does not exist [ 1104.091395][ T5222] usb 3-1: USB disconnect, device number 90 [ 1104.140027][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.256863][T21206] loop3: detected capacity change from 0 to 32768 [ 1104.286579][T21206] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1104.331018][T21206] XFS (loop3): Ending clean mount [ 1104.340834][T21206] XFS (loop3): Quotacheck needed: Please wait. [ 1104.391225][T21206] XFS (loop3): Quotacheck: Done. [ 1104.446086][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1104.666532][T21271] loop0: detected capacity change from 0 to 64 [ 1105.514911][ T5222] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1105.591573][T21291] loop3: detected capacity change from 0 to 32768 [ 1105.609428][T21319] loop0: detected capacity change from 0 to 256 [ 1105.621519][T21291] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1105.734656][ T5222] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 1105.744475][ T5222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.771981][ T5222] usb 3-1: config 0 has no interface number 0 [ 1105.789470][ T5222] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1105.822970][ T5222] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1105.848228][ T5222] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1105.884135][ T5763] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1105.889922][ T5222] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1105.909035][ T5222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 1105.927380][ T5222] usb 3-1: SerialNumber: syz [ 1105.950091][ T5222] usb 3-1: config 0 descriptor?? [ 1105.972759][ T5222] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1106.110301][ T28] audit: type=1400 audit(1106.080:4383): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=21340 comm="syz.4.16090" [ 1106.199511][ T5222] spca561: probe of 3-1:0.156 failed with error -22 [ 1106.233585][ T5222] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1106.240708][ T5222] usb 3-1: MIDIStreaming interface descriptor not found [ 1106.377252][ T5222] usb 3-1: USB disconnect, device number 91 [ 1106.396693][ T28] audit: type=1326 audit(1106.370:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1106.484868][ T9184] udevd[9184]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1106.533268][ T28] audit: type=1326 audit(1106.390:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1106.563137][ T28] audit: type=1326 audit(1106.420:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1106.584766][T21364] loop0: detected capacity change from 0 to 2048 [ 1106.588118][ T28] audit: type=1326 audit(1106.420:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f545139c502 code=0x7ffc0000 [ 1106.616853][ T28] audit: type=1326 audit(1106.420:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f545135cfce code=0x7ffc0000 [ 1106.682636][T21364] Alternate GPT is invalid, using primary GPT. [ 1106.699742][ T28] audit: type=1326 audit(1106.500:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f545139c5c7 code=0x7ffc0000 [ 1106.703221][T21364] loop0: p2 p3 p7 [ 1106.732543][ T28] audit: type=1326 audit(1106.540:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f545135cfce code=0x7ffc0000 [ 1106.742587][T21384] xt_ipcomp: unknown flags 12 [ 1106.824350][ T28] audit: type=1326 audit(1106.540:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545139c42b code=0x7ffc0000 [ 1106.870566][ T28] audit: type=1326 audit(1106.610:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.0.16096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f545135cfce code=0x7ffc0000 [ 1107.363514][T21420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16107'. [ 1107.451979][T21426] loop3: detected capacity change from 0 to 64 [ 1107.696289][T21442] syz.3.16114: attempt to access beyond end of device [ 1107.696289][T21442] mtdblock0: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=256 [ 1108.101234][T21468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16123'. [ 1108.121903][T21468] netlink: 6 bytes leftover after parsing attributes in process `syz.2.16123'. [ 1108.147315][T21468] netlink: 6 bytes leftover after parsing attributes in process `syz.2.16123'. [ 1108.926064][T21463] loop4: detected capacity change from 0 to 32768 [ 1109.026686][T21463] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1109.161393][T21463] XFS (loop4): Ending clean mount [ 1109.214511][T21463] XFS (loop4): Quotacheck needed: Please wait. [ 1109.245827][T21535] netlink: 196 bytes leftover after parsing attributes in process `syz.0.16141'. [ 1109.319658][T21463] XFS (loop4): Quotacheck: Done. [ 1109.446508][T29846] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1109.533562][T30949] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1109.764104][T30949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1109.816053][T30949] usb 3-1: New USB device found, idVendor=07cf, idProduct=6802, bcdDevice= 0.40 [ 1109.834048][T30949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.867041][T30949] usb 3-1: Product: syz [ 1109.871286][T30949] usb 3-1: Manufacturer: syz [ 1109.892905][T30949] usb 3-1: SerialNumber: syz [ 1110.072525][T21576] loop0: detected capacity change from 0 to 64 [ 1110.085093][T21576] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1110.122453][T30949] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1110.205776][T30949] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 1110.246312][T30949] usb 3-1: USB disconnect, device number 92 [ 1110.289208][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.549085][T21612] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16158'. [ 1110.851387][T21632] comedi comedi3: comedi_config --init_data is deprecated [ 1110.896899][T21625] loop3: detected capacity change from 0 to 4096 [ 1111.046284][T21625] ntfs: volume version 3.1. [ 1111.437395][T21659] netlink: 'syz.4.16176': attribute type 1 has an invalid length. [ 1111.665455][T21667] loop3: detected capacity change from 0 to 2048 [ 1111.728764][T21667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1112.064479][T21686] loop0: detected capacity change from 0 to 4096 [ 1112.109651][T21686] ntfs: volume version 3.1. [ 1112.259159][T21697] netlink: 'syz.2.16188': attribute type 7 has an invalid length. [ 1112.666620][T21719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1112.950663][T21731] loop3: detected capacity change from 0 to 4096 [ 1113.070657][T21736] loop4: detected capacity change from 0 to 4096 [ 1113.166942][T21736] ntfs: volume version 3.1. [ 1113.610149][T21796] loop0: detected capacity change from 0 to 256 [ 1113.647236][T21796] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0xa21f83b3, utbl_chksum : 0xe619d30d) [ 1113.713818][T21801] QAT: Device 3 not found [ 1113.927441][T21810] loop0: detected capacity change from 0 to 2048 [ 1113.947257][T21810] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1114.054419][T21825] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1114.243122][ T788] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1114.303231][ T5222] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1114.435199][T21836] netlink: 196 bytes leftover after parsing attributes in process `syz.2.16217'. [ 1114.447991][ T788] usb 5-1: Using ep0 maxpacket: 16 [ 1114.455745][ T788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.468818][ T788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.482868][ T5222] usb 4-1: Using ep0 maxpacket: 32 [ 1114.491337][ T5222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.513386][ T788] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1114.522459][ T5222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.532679][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.547585][ T788] usb 5-1: Product: syz [ 1114.552114][ T5222] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1114.565123][ T788] usb 5-1: Manufacturer: syz [ 1114.570651][ T788] usb 5-1: SerialNumber: syz [ 1114.579771][ T5222] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1114.593243][ T5222] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1114.601627][ T5222] usb 4-1: Product: syz [ 1114.623419][ T5222] usb 4-1: Manufacturer: syz [ 1114.628134][ T5222] usb 4-1: SerialNumber: syz [ 1114.659363][ T5222] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input54 [ 1114.835879][ T788] usb 5-1: 0:2 : does not exist [ 1114.872073][ T788] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1114.924773][ T788] usb 5-1: USB disconnect, device number 36 [ 1114.966228][ T5222] usb 4-1: USB disconnect, device number 81 [ 1114.992307][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1115.028457][ T5222] appletouch 4-1:1.0: input: appletouch disconnected [ 1115.112971][ T8] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1115.293070][T30950] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1115.300800][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1115.308064][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.318346][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1115.329591][ T8] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1115.338738][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.346798][ T8] usb 1-1: Product: syz [ 1115.351006][ T8] usb 1-1: Manufacturer: syz [ 1115.355725][ T8] usb 1-1: SerialNumber: syz [ 1115.362039][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 1115.485354][T30950] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1115.503110][T30950] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.521573][T30950] usb 3-1: config 220 has no interface number 2 [ 1115.543065][T30950] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1115.568458][T30950] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1115.588728][ T8] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1115.591096][T30950] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1115.627388][T30950] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1115.651232][T30950] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1115.672180][T30950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.690760][T30950] usb 3-1: Product: syz [ 1115.695837][T30950] usb 3-1: Manufacturer: syz [ 1115.700529][T30950] usb 3-1: SerialNumber: syz [ 1115.777578][T21907] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.16228'. [ 1115.792530][T30952] usb 1-1: USB disconnect, device number 86 [ 1115.938418][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.952722][T30950] usb 3-1: selecting invalid altsetting 0 [ 1115.988095][T30950] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1116.003661][T30950] usb 3-1: No valid video chain found. [ 1116.037349][T30950] usb 3-1: selecting invalid altsetting 0 [ 1116.054098][T30950] usbtest: probe of 3-1:220.1 failed with error -22 [ 1116.075298][T30950] usb 3-1: USB disconnect, device number 93 [ 1116.249312][T21942] xt_l2tp: unknown flags: 10 [ 1116.337240][T21948] netlink: 'syz.3.16236': attribute type 21 has an invalid length. [ 1116.363055][T21948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16236'. [ 1116.502271][T21959] loop4: detected capacity change from 0 to 64 [ 1117.373358][T30950] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1117.564466][T30950] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1117.583017][T30950] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.602895][T30950] usb 5-1: config 220 has no interface number 2 [ 1117.619376][T30950] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1117.642852][T30950] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1117.659866][T30950] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1117.681800][T30950] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1117.695868][T30950] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1117.718987][T30950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.743290][T30950] usb 5-1: Product: syz [ 1117.747530][T30950] usb 5-1: Manufacturer: syz [ 1117.752150][T30950] usb 5-1: SerialNumber: syz [ 1117.895138][T22014] loop0: detected capacity change from 0 to 32768 [ 1117.985051][T22014] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1117.999574][T30950] usb 5-1: selecting invalid altsetting 0 [ 1118.042533][T30950] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1118.057369][T22022] loop3: detected capacity change from 0 to 32768 [ 1118.081667][T22022] [ 1118.081667][T22022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.081667][T22022] [ 1118.083337][T30950] usb 5-1: No valid video chain found. [ 1118.141638][T22022] JFS: metapage_get_blocks failed [ 1118.180635][T22014] XFS (loop0): Ending clean mount [ 1118.185961][T22022] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 1118.185961][T22022] [ 1118.204270][T22022] ERROR: (device loop3): remounting filesystem as read-only [ 1118.210907][T30950] usb 5-1: selecting invalid altsetting 0 [ 1118.223962][T22022] ERROR: (device loop3): diWrite: ixpxd invalid [ 1118.223962][T22022] [ 1118.235032][T22014] XFS (loop0): Quotacheck needed: Please wait. [ 1118.242665][T22022] ERROR: (device loop3): txCommit: [ 1118.242665][T22022] [ 1118.260111][T30950] usbtest: probe of 5-1:220.1 failed with error -22 [ 1118.308613][T30950] usb 5-1: USB disconnect, device number 37 [ 1118.434275][T22014] XFS (loop0): Quotacheck: Done. [ 1118.552327][T22067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16268'. [ 1118.582209][T22067] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16268'. [ 1118.626953][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1119.012909][ T8] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1119.125935][T22093] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.16269'. [ 1119.183286][T22097] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1119.210419][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1119.235279][ T8] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1119.248022][ T8] usb 4-1: config 0 has no interface number 0 [ 1119.255472][ T8] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1119.291246][ T8] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1119.310607][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1119.321075][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.338823][ T8] usb 4-1: Product: syz [ 1119.343095][ T8] usb 4-1: Manufacturer: syz [ 1119.347717][ T8] usb 4-1: SerialNumber: syz [ 1119.365556][ T8] usb 4-1: config 0 descriptor?? [ 1119.482331][T22111] loop0: detected capacity change from 0 to 16 [ 1119.499093][T22111] erofs: (device loop0): mounted with root inode @ nid 36. [ 1119.519598][T22111] cifs: Unknown parameter 'cache_strategy' [ 1119.623403][ T8] radio-si470x 4-1:0.35: this is not a si470x device. [ 1119.818128][ T8] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1119.842200][ T8] usb 4-1: USB disconnect, device number 82 [ 1120.248766][T22163] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1120.324823][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1120.324837][ T28] audit: type=1326 audit(1120.300:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22170 comm="syz.4.16299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1120.364019][ T28] audit: type=1326 audit(1120.330:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22170 comm="syz.4.16299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1120.413453][ T28] audit: type=1326 audit(1120.330:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22170 comm="syz.4.16299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1120.455380][ T28] audit: type=1326 audit(1120.330:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22170 comm="syz.4.16299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1120.509615][ T28] audit: type=1326 audit(1120.330:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22170 comm="syz.4.16299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1120.532107][T30949] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1120.743171][T30949] usb 1-1: Using ep0 maxpacket: 32 [ 1120.761109][T30949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.775859][T30949] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1120.794378][T22193] netlink: 'syz.4.16304': attribute type 10 has an invalid length. [ 1120.804813][T30949] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1120.814703][T30949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.822747][T30949] usb 1-1: Product: syz [ 1120.827642][T30949] usb 1-1: Manufacturer: syz [ 1120.832284][T30949] usb 1-1: SerialNumber: syz [ 1120.845850][T22193] hsr0: entered promiscuous mode [ 1120.872068][T22193] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1120.896764][T22193] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1120.910348][T30949] usb 1-1: config 0 descriptor?? [ 1120.916021][T22193] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1120.943367][T22193] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1121.146578][T30949] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 1121.160052][T30949] 31 db 99 aa dd 09 f1 37 [ 1121.175590][T30949] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 1121.236931][ T28] audit: type=1326 audit(1121.210:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.3.16310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1121.237226][ T5222] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1121.290221][ T28] audit: type=1326 audit(1121.230:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.3.16310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1121.314917][ T28] audit: type=1326 audit(1121.240:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.3.16310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1121.338533][ T28] audit: type=1326 audit(1121.240:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.3.16310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1121.362451][ T28] audit: type=1326 audit(1121.240:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.3.16310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1121.395266][ T8] usb 1-1: USB disconnect, device number 87 [ 1121.529630][ T5222] usb 3-1: Using ep0 maxpacket: 16 [ 1121.541809][ T5222] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.562503][ T5222] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1121.583619][ T5222] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 6 [ 1121.593665][ T5222] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1121.607180][ T5222] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1121.617278][ T5222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.635212][T22198] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1121.642591][T22198] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1121.653737][ T5222] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1121.843581][T30952] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1121.870340][ T5222] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1121.896273][ T5222] usb 3-1: USB disconnect, device number 94 [ 1122.000107][T22262] loop4: detected capacity change from 0 to 1024 [ 1122.018296][T22262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1122.033329][T30952] usb 4-1: Using ep0 maxpacket: 16 [ 1122.041675][T30952] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1122.051208][T30952] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1122.082158][T30952] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1122.096820][T22262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.111129][T30952] usb 4-1: config 0 has no interface number 0 [ 1122.118135][T30952] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1122.129892][T30952] usb 4-1: config 0 interface 104 has no altsetting 1 [ 1122.140200][T30952] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1122.149954][T30952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.158291][T30952] usb 4-1: Product: syz [ 1122.162641][T30952] usb 4-1: Manufacturer: syz [ 1122.167701][T30952] usb 4-1: SerialNumber: syz [ 1122.194102][T30952] usb 4-1: config 0 descriptor?? [ 1122.220154][T22262] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.16317: missing EA_INODE flag [ 1122.232944][T30952] asix: probe of 4-1:0.104 failed with error -22 [ 1122.252527][T22262] EXT4-fs (loop4): Remounting filesystem read-only [ 1122.313689][T29846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.418250][ T5222] usb 4-1: USB disconnect, device number 83 [ 1122.609226][T22298] netlink: 'syz.4.16325': attribute type 153 has an invalid length. [ 1122.637694][T22298] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.16325'. [ 1122.971894][T22320] loop0: detected capacity change from 0 to 4096 [ 1122.999868][T22320] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1123.067579][T22320] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1123.089961][T22320] ntfs3: loop0: mft corrupted [ 1123.101996][T22320] ntfs3: loop0: Failed to load $Extend (-22). [ 1123.113143][T30952] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1123.142872][T22320] ntfs3: loop0: Failed to initialize $Extend. [ 1123.199791][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16337'. [ 1123.203646][T22320] ntfs3: loop0: ino=1e, "file1" failed to parse mft record [ 1123.209622][T22333] netlink: 'syz.3.16337': attribute type 1 has an invalid length. [ 1123.228348][T22320] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 1123.306028][T30952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1123.339013][T30952] usb 5-1: not running at top speed; connect to a high speed hub [ 1123.364700][T30952] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 1123.388221][T30952] usb 5-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 1123.429816][T30952] usb 5-1: config 1 has no interface number 0 [ 1123.444175][T30952] usb 5-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid maxpacket 52651, setting to 64 [ 1123.492935][T30952] usb 5-1: config 1 interface 138 has no altsetting 0 [ 1123.523301][T30952] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1123.558710][T30952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.569204][T30952] usb 5-1: Product: syz [ 1123.573613][T30952] usb 5-1: Manufacturer: syz [ 1123.578299][T30952] usb 5-1: SerialNumber: syz [ 1123.602260][T22313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1123.842650][T30952] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1123.883753][ T5222] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1123.916972][T30952] usb 5-1: USB disconnect, device number 38 [ 1123.986788][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1124.116811][ T5222] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1124.132923][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.153536][ T5222] usb 1-1: config 0 descriptor?? [ 1124.381790][ T5222] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1124.391161][ T5222] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1124.593054][ T5222] [drm:udl_init] *ERROR* Selecting channel failed [ 1124.631497][ T5222] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1124.663225][ T5222] [drm] Initialized udl on minor 2 [ 1124.683473][ T5222] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1124.704116][ T5222] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1124.736406][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1124.747527][ T5222] usb 1-1: USB disconnect, device number 88 [ 1124.753899][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1125.168583][T22454] netlink: 'syz.2.16364': attribute type 10 has an invalid length. [ 1125.997728][T22508] xt_l2tp: wrong L2TP version: 0 [ 1126.473433][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16393'. [ 1126.516472][T22537] netlink: 'syz.0.16394': attribute type 1 has an invalid length. [ 1126.543118][T22537] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16394'. [ 1127.192869][T30950] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1127.322966][T22582] xt_TCPMSS: Only works on TCP SYN packets [ 1127.403028][T30950] usb 5-1: Using ep0 maxpacket: 16 [ 1127.410553][T30950] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1127.424208][T30950] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 1127.453165][T30950] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 1127.498739][T30950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1127.515316][T30950] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1127.528418][T30950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.538668][T30950] usb 5-1: Product: syz [ 1127.547315][T30950] usb 5-1: Manufacturer: syz [ 1127.552017][T30950] usb 5-1: SerialNumber: syz [ 1127.557808][T22592] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16412'. [ 1127.582205][T30950] usb 5-1: config 0 descriptor?? [ 1127.843102][T30950] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input55 [ 1128.046358][T30949] usb 5-1: USB disconnect, device number 39 [ 1128.186938][T22587] loop3: detected capacity change from 0 to 32768 [ 1128.214821][T22587] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1128.339843][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16421'. [ 1128.362240][T22587] XFS (loop3): Ending clean mount [ 1128.381883][T22587] XFS (loop3): Quotacheck needed: Please wait. [ 1128.474193][T22587] XFS (loop3): Quotacheck: Done. [ 1128.624889][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1129.405071][T22654] loop0: detected capacity change from 0 to 32768 [ 1129.440986][T22654] jfs_strtoUCS: char2uni returned -22. [ 1129.459479][T22654] charset = cp936, char = 0xd4 [ 1130.420717][T22747] [U] [ 1130.439223][T22753] netlink: 'syz.4.16457': attribute type 32 has an invalid length. [ 1131.062959][T26338] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1131.244982][T26338] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1131.263008][T26338] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1131.281292][T26338] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1131.312958][T26338] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1131.340271][T26338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1131.362833][T26338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1131.393583][T26338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1131.427242][T26338] usb 5-1: string descriptor 0 read error: -22 [ 1131.434787][T26338] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1131.448775][T26338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.482566][T26338] usb 5-1: config 0 descriptor?? [ 1131.498155][T26338] hub 5-1:0.0: bad descriptor, ignoring hub [ 1131.511286][T26338] hub: probe of 5-1:0.0 failed with error -5 [ 1131.546019][T26338] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56 [ 1131.771715][T26338] usb 5-1: USB disconnect, device number 40 [ 1131.791857][T22824] loop3: detected capacity change from 0 to 128 [ 1131.848854][T22824] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1131.885394][T22824] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.16480: reserved inode found cleared - inode=2 [ 1132.041248][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1132.344244][T22864] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1132.841495][T22897] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16502'. [ 1132.887081][T22902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16503'. [ 1133.190593][T22921] netlink: 'syz.0.16516': attribute type 2 has an invalid length. [ 1133.221990][T22921] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.16516'. [ 1133.342277][T22942] --map-set only usable from mangle table [ 1133.432962][ T788] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1133.472996][T26338] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1133.549712][T22954] loop0: detected capacity change from 0 to 1024 [ 1133.624735][ T788] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1133.644210][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.671077][ T788] usb 4-1: config 0 descriptor?? [ 1133.683418][T26338] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1133.710337][T26338] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.740589][T26338] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1133.765224][T26338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.807963][T26338] hub 3-1:4.0: USB hub found [ 1133.918616][ T788] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1133.931136][ T788] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1134.012708][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1134.012723][ T28] audit: type=1326 audit(1133.970:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22976 comm="syz.4.16522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1134.063174][T26338] hub 3-1:4.0: 9 ports detected [ 1134.073015][T26338] usb 3-1: selecting invalid altsetting 1 [ 1134.090329][T26338] hub 3-1:4.0: Using single TT (err -22) [ 1134.101051][ T28] audit: type=1326 audit(1133.970:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22976 comm="syz.4.16522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1134.120168][T26338] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1134.140059][ T788] [drm:udl_init] *ERROR* Selecting channel failed [ 1134.162393][ T28] audit: type=1326 audit(1133.980:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22976 comm="syz.4.16522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1134.186408][ T788] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1134.213649][ T788] [drm] Initialized udl on minor 2 [ 1134.220855][ T28] audit: type=1326 audit(1133.980:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22976 comm="syz.4.16522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1134.237363][ T788] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1134.261200][ T28] audit: type=1326 audit(1133.980:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22976 comm="syz.4.16522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x7ffc0000 [ 1134.261880][ T788] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1134.292966][ T5222] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1134.318301][T26338] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1134.337624][T26338] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1134.351162][ T5222] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1134.360849][ T5222] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1134.379781][ T788] usb 4-1: USB disconnect, device number 84 [ 1134.423055][T26338] usb 3-1: USB disconnect, device number 95 [ 1134.743707][ T5222] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1134.948166][ T5222] usb 1-1: Using ep0 maxpacket: 16 [ 1134.965628][ T5222] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.976870][ T5222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1134.997745][ T5222] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1135.017088][ T5222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.030845][ T5222] usb 1-1: Product: syz [ 1135.040949][ T5222] usb 1-1: Manufacturer: syz [ 1135.047993][ T5222] usb 1-1: SerialNumber: syz [ 1135.465265][T23064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16541'. [ 1135.481025][ T5222] usb 1-1: cannot find UAC_HEADER [ 1135.526901][T23041] loop3: detected capacity change from 0 to 32768 [ 1135.529646][ T5222] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1135.564708][T23041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.16534 (23041) [ 1135.571850][ T5222] usb 1-1: USB disconnect, device number 89 [ 1135.627584][T23041] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1135.649543][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.669233][T23041] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1135.685752][T23041] BTRFS info (device loop3): using free space tree [ 1135.733134][ T788] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1135.774308][T23041] BTRFS info (device loop3): enabling ssd optimizations [ 1135.781390][T23041] BTRFS info (device loop3): auto enabling async discard [ 1135.830304][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1135.932084][ T788] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1135.933121][T30948] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1135.941734][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.999478][ T788] usb 3-1: config 0 descriptor?? [ 1136.223281][T30948] usb 5-1: Using ep0 maxpacket: 8 [ 1136.235953][T30948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.262841][T30948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1136.282427][ T788] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1136.284421][T30948] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1136.301360][ T788] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1136.323000][T30948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.343864][T30948] usb 5-1: Product: syz [ 1136.348077][T30948] usb 5-1: Manufacturer: syz [ 1136.352709][T30948] usb 5-1: SerialNumber: syz [ 1136.400075][T30948] usb 5-1: config 0 descriptor?? [ 1136.441560][T30948] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1136.479763][ T788] [drm:udl_init] *ERROR* Selecting channel failed [ 1136.530906][ T788] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1136.560161][ T788] [drm] Initialized udl on minor 2 [ 1136.578461][ T788] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1136.597954][ T788] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1136.622434][ T5222] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1136.650738][ T788] usb 3-1: USB disconnect, device number 96 [ 1136.652271][T30948] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1136.667629][ T5222] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1136.698850][T30948] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1136.725514][T30948] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 1136.876402][T26338] usb 5-1: USB disconnect, device number 41 [ 1137.312672][ T28] audit: type=1326 audit(1137.280:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23178 comm="syz.0.16558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1137.347552][ T28] audit: type=1326 audit(1137.320:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23178 comm="syz.0.16558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1137.417001][ T28] audit: type=1326 audit(1137.340:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23178 comm="syz.0.16558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1137.466108][ T28] audit: type=1326 audit(1137.340:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23178 comm="syz.0.16558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1137.539892][ T28] audit: type=1326 audit(1137.340:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23178 comm="syz.0.16558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545139c799 code=0x7ffc0000 [ 1137.914235][T23213] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16569'. [ 1138.259049][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16576'. [ 1138.470047][T23247] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071562067969) [ 1138.506102][T23247] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1138.826830][T23260] loop3: detected capacity change from 0 to 4096 [ 1138.840104][T23260] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1139.028666][T23270] netlink: 'syz.2.16589': attribute type 1 has an invalid length. [ 1139.279649][T23286] batadv1: entered promiscuous mode [ 1139.999100][T23335] loop0: detected capacity change from 0 to 16 [ 1140.029212][T23335] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1140.058339][T23335] cramfs: empty filesystem [ 1140.128085][T23348] netlink: 'syz.2.16614': attribute type 8 has an invalid length. [ 1140.313332][T23365] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1140.533375][T30950] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1140.735218][T30950] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1140.755058][T30950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.769161][T23391] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16627'. [ 1140.791236][T30950] usb 5-1: config 0 descriptor?? [ 1140.819499][T23397] loop0: detected capacity change from 0 to 512 [ 1140.991826][T23403] comedi comedi4: bad chanlist[0]=0xfffffffe chan=65534 range length=2 [ 1141.042452][T30950] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1141.063227][T30950] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1141.238051][T30950] [drm:udl_init] *ERROR* Selecting channel failed [ 1141.273985][T30950] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1141.290090][T30950] [drm] Initialized udl on minor 2 [ 1141.300435][T30950] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1141.313050][T30950] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1141.321477][T30948] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1141.340310][T30950] usb 5-1: USB disconnect, device number 42 [ 1141.349930][T30948] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1141.453087][T26338] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1141.488377][T23445] netlink: 'syz.3.16639': attribute type 153 has an invalid length. [ 1141.497469][T23445] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.16639'. [ 1141.671299][T26338] usb 1-1: config 0 has no interfaces? [ 1141.679625][T26338] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1141.695870][T26338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.712994][T26338] usb 1-1: Product: syz [ 1141.720857][T26338] usb 1-1: Manufacturer: syz [ 1141.727416][T26338] usb 1-1: SerialNumber: syz [ 1141.743393][T26338] r8152-cfgselector 1-1: config 0 descriptor?? [ 1141.842606][T23463] netlink: 'syz.2.16646': attribute type 3 has an invalid length. [ 1141.972420][T26338] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1142.096746][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16652'. [ 1142.197672][T26338] usb 1-1: USB disconnect, device number 90 [ 1142.467755][T23505] netlink: 'syz.4.16660': attribute type 1 has an invalid length. [ 1142.576309][T23510] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1142.683136][T30948] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1142.841386][T23524] loop0: detected capacity change from 0 to 512 [ 1142.876226][T23524] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1142.894588][T30948] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1142.915196][T23524] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1142.933042][T30948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.954862][T30948] usb 4-1: config 0 descriptor?? [ 1142.973441][T23524] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.16666: Failed to acquire dquot type 1 [ 1142.997080][T23524] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1143.010735][T23524] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1143.022201][T23524] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.16666: Failed to acquire dquot type 1 [ 1143.038667][T23524] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.16666: bg 0: block 248: padding at end of block bitmap is not set [ 1143.061616][T23524] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 1143.073754][T23524] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1143.090205][T23524] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1143.104772][T23524] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.16666: Failed to acquire dquot type 1 [ 1143.104805][T23537] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16669'. [ 1143.131137][T23524] EXT4-fs (loop0): 1 orphan inode deleted [ 1143.147336][T23537] bridge0: port 3(bond0) entered disabled state [ 1143.154418][T23524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.238187][T30948] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1143.250846][T30948] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1143.277571][T23537] bond0 (unregistering): left allmulticast mode [ 1143.292294][T23537] : left allmulticast mode [ 1143.302670][T23537] bond_slave_1: left allmulticast mode [ 1143.306477][T23524] Quota error (device loop0): do_check_range: Getting block 1536 out of range 0-5 [ 1143.325573][T23537] bridge0: port 3(bond0) entered disabled state [ 1143.424836][T30948] [drm:udl_init] *ERROR* Selecting channel failed [ 1143.467482][T23537] bond0 (unregistering): (slave 30): Releasing backup interface [ 1143.475946][T30948] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1143.490361][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.506271][T23537] : left promiscuous mode [ 1143.510297][T30948] [drm] Initialized udl on minor 2 [ 1143.518656][T30948] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1143.551659][T23537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.561197][T30948] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1143.581758][T23537] bond_slave_1: left promiscuous mode [ 1143.611640][T22736] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1143.634846][T30948] usb 4-1: USB disconnect, device number 85 [ 1143.639430][T23537] bond0 (unregistering): Released all slaves [ 1143.653088][T22736] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1144.133457][T23590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16681'. [ 1144.153243][T23590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.469872][T23608] loop3: detected capacity change from 0 to 512 [ 1145.764283][T23700] netlink: 'syz.0.16718': attribute type 6 has an invalid length. [ 1146.054693][T23719] netlink: 'syz.4.16723': attribute type 32 has an invalid length. [ 1146.233295][T23732] Cannot find del_set index 3 as target [ 1146.852095][T23765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1147.016173][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16746'. [ 1147.041364][T23737] loop0: detected capacity change from 0 to 32768 [ 1147.048263][T23776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16746'. [ 1147.058878][T23776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16746'. [ 1147.070057][T23737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.16731 (23737) [ 1147.125852][T23737] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1147.163820][T23737] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1147.172503][T23737] BTRFS info (device loop0): using free space tree [ 1147.319548][T23802] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16749'. [ 1147.324506][T23737] BTRFS info (device loop0): enabling ssd optimizations [ 1147.356428][T23737] BTRFS info (device loop0): auto enabling async discard [ 1147.468153][T23802] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.495652][T23813] syz.4.16752: attempt to access beyond end of device [ 1147.495652][T23813] nbd0: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=0 [ 1147.527551][T23802] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.554148][T23802] .` (unregistering): Released all slaves [ 1147.584956][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1148.268800][T23842] loop4: detected capacity change from 0 to 4096 [ 1148.438237][T23842] ntfs: volume version 3.1. [ 1148.549231][T23842] ntfs: (device loop4): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1148.702342][T23865] netlink: 'syz.3.16767': attribute type 32 has an invalid length. [ 1148.889874][T23874] loop3: detected capacity change from 0 to 1024 [ 1149.161323][T23894] nfs: Deprecated parameter 'nointr' [ 1150.251157][T23941] loop0: detected capacity change from 0 to 8192 [ 1150.536563][T23963] binder: binder_mmap: 23962 200000001000-20000000b000 bad vm_flags failed -1 [ 1150.884193][T23984] netlink: 'syz.4.16807': attribute type 58 has an invalid length. [ 1150.899525][T23984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16807'. [ 1151.236389][T24011] netlink: 4168 bytes leftover after parsing attributes in process `syz.0.16815'. [ 1151.422379][T24020] loop0: detected capacity change from 0 to 1024 [ 1151.521210][ T48] hfsplus: b-tree write err: -5, ino 25 [ 1151.553136][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1151.558751][ T48] hfsplus: b-tree write err: -5, ino 2 [ 1152.738228][T24091] netlink: 'syz.4.16840': attribute type 13 has an invalid length. [ 1152.785546][T24094] loop3: detected capacity change from 0 to 1764 [ 1152.990050][T24106] netlink: 'syz.2.16844': attribute type 1 has an invalid length. [ 1153.009835][T24106] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.16844'. [ 1153.019720][T24106] netlink: 9 bytes leftover after parsing attributes in process `syz.2.16844'. [ 1153.189931][T24119] bridge_slave_1: left allmulticast mode [ 1153.199689][T24119] bridge_slave_1: left promiscuous mode [ 1153.218786][T24119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.290475][T24119] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1153.358858][T24126] PKCS7: Unknown OID: [4] 0.0 [ 1153.387590][T24126] PKCS7: Only support pkcs7_signedData type [ 1154.069431][T24161] loop4: detected capacity change from 0 to 4096 [ 1154.113301][T24161] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1154.220054][T24161] ntfs3: loop4: failed to convert "c46c" to macceltic [ 1154.499323][T24200] netlink: 'syz.3.16876': attribute type 2 has an invalid length. [ 1154.525575][T24200] netlink: 119 bytes leftover after parsing attributes in process `syz.3.16876'. [ 1154.633685][T24206] netlink: 'syz.3.16879': attribute type 8 has an invalid length. [ 1154.712908][ T5222] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1154.851755][T24212] loop0: detected capacity change from 0 to 4096 [ 1154.879011][T24212] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1154.897011][T24212] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1154.911543][ T5222] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 1154.921128][ T5222] usb 5-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.932369][T24212] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1154.944209][ T5222] usb 5-1: config 160 has no interface number 0 [ 1154.950531][ T5222] usb 5-1: config 160 interface 200 has no altsetting 0 [ 1154.967043][T24212] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1154.981807][T24212] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1155.003407][ T5222] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1155.013474][ T5222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.022856][ T5222] usb 5-1: Product: syz [ 1155.027123][ T5222] usb 5-1: Manufacturer: syz [ 1155.031786][ T5222] usb 5-1: SerialNumber: syz [ 1155.040691][T24212] ntfs: volume version 3.1. [ 1155.052262][T24212] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1155.077730][T24212] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1155.094523][T24212] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1155.105937][T24212] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1155.117810][T24212] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1155.282081][ T5222] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1155.298467][ T5222] usb 5-1: MIDIStreaming interface descriptor not found [ 1155.383252][ T5222] usb 5-1: USB disconnect, device number 43 [ 1155.506296][ T9184] udevd[9184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1155.707704][T24275] netlink: 'syz.0.16891': attribute type 8 has an invalid length. [ 1155.866118][T24282] loop3: detected capacity change from 0 to 256 [ 1155.914738][T24282] FAT-fs (loop3): Directory bread(block 64) failed [ 1155.931683][T24282] FAT-fs (loop3): Directory bread(block 65) failed [ 1155.948713][T24282] FAT-fs (loop3): Directory bread(block 66) failed [ 1155.958260][T24282] FAT-fs (loop3): Directory bread(block 67) failed [ 1155.968421][T24282] FAT-fs (loop3): Directory bread(block 68) failed [ 1155.978041][T24282] FAT-fs (loop3): Directory bread(block 69) failed [ 1155.985793][T24282] FAT-fs (loop3): Directory bread(block 70) failed [ 1155.992356][T24282] FAT-fs (loop3): Directory bread(block 71) failed [ 1156.027018][T24282] FAT-fs (loop3): Directory bread(block 72) failed [ 1156.060542][T24282] FAT-fs (loop3): Directory bread(block 73) failed [ 1156.211876][T24295] batadv0: entered promiscuous mode [ 1156.274238][T24301] nft_compat: unsupported protocol 1 [ 1156.610202][T24325] netlink: 'syz.3.16906': attribute type 6 has an invalid length. [ 1156.749895][T24333] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1156.767262][T24336] netlink: 'syz.4.16909': attribute type 1 has an invalid length. [ 1156.779004][T24336] netlink: 232 bytes leftover after parsing attributes in process `syz.4.16909'. [ 1156.957316][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16915'. [ 1156.967822][T24349] netlink: 440 bytes leftover after parsing attributes in process `syz.2.16915'. [ 1156.996854][T24352] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16916'. [ 1157.157491][T24352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.212231][T24352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.269590][T24352] bond0 (unregistering): Released all slaves [ 1157.368247][T24362] loop4: detected capacity change from 0 to 1764 [ 1157.459137][T24362] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1157.748923][T24350] loop3: detected capacity change from 0 to 32768 [ 1157.758107][T24385] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1157.780933][T24350] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.16913 (24350) [ 1157.812514][T24350] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1157.842187][T24350] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1157.881235][T24350] BTRFS info (device loop3): force zlib compression, level 3 [ 1157.936531][T24350] BTRFS info (device loop3): force clearing of disk cache [ 1157.968616][T24350] BTRFS info (device loop3): setting nodatasum [ 1157.993634][T24350] BTRFS info (device loop3): use zlib compression, level 3 [ 1158.000919][T24350] BTRFS info (device loop3): allowing degraded mounts [ 1158.032519][T24350] BTRFS info (device loop3): enabling disk space caching [ 1158.042627][T24350] BTRFS info (device loop3): disk space caching is enabled [ 1158.063908][T24399] loop4: detected capacity change from 0 to 256 [ 1158.078764][T24399] exfat: Deprecated parameter 'utf8' [ 1158.088203][T24399] exfat: Deprecated parameter 'namecase' [ 1158.106625][T24399] exfat: Deprecated parameter 'utf8' [ 1158.196395][T24399] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1158.227574][T24350] BTRFS info (device loop3): enabling ssd optimizations [ 1158.235910][T24350] BTRFS info (device loop3): auto enabling async discard [ 1158.254243][T24350] BTRFS info (device loop3): rebuilding free space tree [ 1158.295336][T24350] BTRFS info (device loop3): disabling free space tree [ 1158.302311][T24350] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1158.343428][T24350] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1158.488223][T24350] BTRFS error (device loop3): balance: invalid convert data profile dup [ 1158.574891][ T5770] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1158.964382][T24454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16939'. [ 1159.083471][T22736] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1159.323886][T22736] usb 4-1: Using ep0 maxpacket: 16 [ 1159.334863][T22736] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1159.355685][T22736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.374596][T22736] usb 4-1: Product: syz [ 1159.384636][T22736] usb 4-1: Manufacturer: syz [ 1159.394726][T22736] usb 4-1: SerialNumber: syz [ 1159.414077][T22736] r8152-cfgselector 4-1: config 0 descriptor?? [ 1159.543847][T24481] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16947'. [ 1159.581191][T24481] bridge0: port 4(bond0) entered disabled state [ 1159.662752][T24481] bond0 (unregistering): left allmulticast mode [ 1159.669449][T24481] bond_slave_0: left allmulticast mode [ 1159.675668][T24481] bond_slave_1: left allmulticast mode [ 1159.681293][T24481] bridge0: port 4(bond0) entered disabled state [ 1159.701079][T24481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.715598][T24481] bond_slave_0: left promiscuous mode [ 1159.747036][T24481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.758814][T24481] bond_slave_1: left promiscuous mode [ 1159.777194][T24481] bond0 (unregistering): Released all slaves [ 1159.882896][T22736] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1159.914115][T22736] r8152-cfgselector 4-1: USB disconnect, device number 86 [ 1160.014476][T24507] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16953'. [ 1160.599616][T24544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16967'. [ 1160.749893][T24555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16980'. [ 1160.760674][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16980'. [ 1160.778238][T24555] netlink: 'syz.0.16980': attribute type 2 has an invalid length. [ 1160.940423][T24563] loop3: detected capacity change from 0 to 4096 [ 1160.984686][T24563] __ntfs_error: 6 callbacks suppressed [ 1160.984701][T24563] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1161.050497][T24563] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1161.121802][T24563] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1161.184692][T24563] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1161.204143][T24578] loop4: detected capacity change from 0 to 2048 [ 1161.226138][T24563] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1161.242560][T24578] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1161.286479][T24578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1161.289252][T24563] ntfs: volume version 3.1. [ 1161.358668][T24563] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1161.403056][T24563] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1161.441451][T24563] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1161.462945][T24563] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1161.503947][T24563] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1162.019594][T24607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.441099][T24629] loop0: detected capacity change from 0 to 256 [ 1162.551797][T24629] FAT-fs (loop0): Directory bread(block 64) failed [ 1162.583668][T24629] FAT-fs (loop0): Directory bread(block 65) failed [ 1162.590360][T24629] FAT-fs (loop0): Directory bread(block 66) failed [ 1162.612865][T24629] FAT-fs (loop0): Directory bread(block 67) failed [ 1162.623832][T24629] FAT-fs (loop0): Directory bread(block 68) failed [ 1162.652838][T24629] FAT-fs (loop0): Directory bread(block 69) failed [ 1162.661239][T24639] pim6reg: entered allmulticast mode [ 1162.667403][T24629] FAT-fs (loop0): Directory bread(block 70) failed [ 1162.690995][T24629] FAT-fs (loop0): Directory bread(block 71) failed [ 1162.698927][T24629] FAT-fs (loop0): Directory bread(block 72) failed [ 1162.705870][T24629] FAT-fs (loop0): Directory bread(block 73) failed [ 1162.974301][T24645] loop3: detected capacity change from 0 to 4096 [ 1163.015944][T24645] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1163.232990][T24645] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1163.259745][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17006'. [ 1163.271475][T24645] ntfs3: loop3: ino=1f, "file2" failed to open parent directory r=5 to update [ 1163.424370][ T48] ntfs3: loop3: ino=1f, failed to open parent directory r=5 to update [ 1163.541341][T24683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17010'. [ 1163.919026][T24706] IPv6: NLM_F_CREATE should be specified when creating new route [ 1164.046611][T24707] loop0: detected capacity change from 0 to 4096 [ 1164.073254][T24707] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1164.198819][T24707] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1164.291878][T24707] ntfs3: loop0: failed to convert "c46c" to maccyrillic [ 1164.613742][T26338] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1164.651797][T24705] loop4: detected capacity change from 0 to 32768 [ 1164.727311][T24705] JBD2: Ignoring recovery information on journal [ 1164.813466][T26338] usb 3-1: Using ep0 maxpacket: 32 [ 1164.869953][T26338] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1164.892953][T26338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.910183][T24705] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1164.933075][T26338] usb 3-1: Product: syz [ 1164.937292][T26338] usb 3-1: Manufacturer: syz [ 1164.955577][T26338] usb 3-1: SerialNumber: syz [ 1165.004873][T26338] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1165.206614][T29846] ocfs2: Unmounting device (7,4) on (node local) [ 1165.422680][T26338] gspca_topro: reg_w err -71 [ 1165.472961][T26338] gspca_topro: Sensor soi763a [ 1165.505397][T26338] usb 3-1: USB disconnect, device number 97 [ 1165.769523][T24800] loop3: detected capacity change from 0 to 256 [ 1165.809106][T24800] FAT-fs (loop3): Directory bread(block 64) failed [ 1165.818489][T24800] FAT-fs (loop3): Directory bread(block 65) failed [ 1165.828598][T24800] FAT-fs (loop3): Directory bread(block 66) failed [ 1165.844411][T24800] FAT-fs (loop3): Directory bread(block 67) failed [ 1165.858596][T24800] FAT-fs (loop3): Directory bread(block 68) failed [ 1165.868329][T24800] FAT-fs (loop3): Directory bread(block 69) failed [ 1165.880886][T24800] FAT-fs (loop3): Directory bread(block 70) failed [ 1165.888565][T24800] FAT-fs (loop3): Directory bread(block 71) failed [ 1165.900670][T24800] FAT-fs (loop3): Directory bread(block 72) failed [ 1165.908057][T24800] FAT-fs (loop3): Directory bread(block 73) failed [ 1165.979628][T24800] syz.3.17043: attempt to access beyond end of device [ 1165.979628][T24800] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1166.220550][T24821] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17048'. [ 1166.248828][T24822] loop3: detected capacity change from 0 to 2048 [ 1166.340137][T24822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1166.455756][T24834] netlink: 'syz.4.17052': attribute type 1 has an invalid length. [ 1166.633723][T24840] 9pnet_fd: p9_fd_create_tcp (24840): problem connecting socket to 127.0.0.1 [ 1167.220509][T24876] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 1167.261286][T24876] (unnamed net_device) (uninitialized): peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 1167.371376][T24876] bond0: entered allmulticast mode [ 1167.690790][T24938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17077'. [ 1167.809024][T24949] netlink: 'syz.4.17080': attribute type 1 has an invalid length. [ 1167.821429][T24949] netlink: 'syz.4.17080': attribute type 2 has an invalid length. [ 1167.829750][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17080'. [ 1167.983524][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17083'. [ 1168.309612][T24972] netlink: 'syz.4.17089': attribute type 1 has an invalid length. [ 1168.351201][T24932] loop3: detected capacity change from 0 to 32768 [ 1168.450964][T24932] ERROR: (device loop3): diAllocBit: iag inconsistent [ 1168.450964][T24932] [ 1168.491825][T24932] ERROR: (device loop3): remounting filesystem as read-only [ 1168.521783][T24932] ialloc: diAlloc returned -5! [ 1169.169516][T25024] loop3: detected capacity change from 0 to 256 [ 1169.193265][T26338] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1169.227157][T25024] FAT-fs (loop3): Directory bread(block 64) failed [ 1169.255903][T25024] FAT-fs (loop3): Directory bread(block 65) failed [ 1169.262592][T25024] FAT-fs (loop3): Directory bread(block 66) failed [ 1169.306122][T25024] FAT-fs (loop3): Directory bread(block 67) failed [ 1169.326279][T25031] libceph: resolve '0.' (ret=-3): failed [ 1169.333129][T25024] FAT-fs (loop3): Directory bread(block 68) failed [ 1169.351833][T25024] FAT-fs (loop3): Directory bread(block 69) failed [ 1169.371300][T25024] FAT-fs (loop3): Directory bread(block 70) failed [ 1169.378237][T25024] FAT-fs (loop3): Directory bread(block 71) failed [ 1169.386635][T25024] FAT-fs (loop3): Directory bread(block 72) failed [ 1169.393459][T25024] FAT-fs (loop3): Directory bread(block 73) failed [ 1169.415362][T26338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1169.427880][T26338] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1169.442941][T26338] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 1169.459461][T26338] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1169.479559][T26338] usb 3-1: config 129 has no interface number 0 [ 1169.492822][T26338] usb 3-1: config 129 has no interface number 1 [ 1169.499144][T26338] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1169.555433][T26338] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1169.573943][T26338] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1169.587595][T26338] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1169.627828][T26338] usb 3-1: config 129 interface 5 has no altsetting 0 [ 1169.654901][T26338] usb 3-1: string descriptor 0 read error: -22 [ 1169.661493][T25038] loop4: detected capacity change from 0 to 4096 [ 1169.668187][T26338] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1169.678685][T26338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.689882][T25038] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1169.749942][T26338] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1169.773240][T26338] usb 3-1: MIDIStreaming interface descriptor not found [ 1169.944030][T25038] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1169.966020][T25038] ntfs3: loop4: ino=1f, "file2" failed to open parent directory r=5 to update [ 1170.093589][T25066] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1170.095860][T23031] ntfs3: loop4: ino=1f, failed to open parent directory r=5 to update [ 1170.118303][ T5222] usb 3-1: USB disconnect, device number 98 [ 1170.125989][T25070] loop0: detected capacity change from 0 to 764 [ 1170.168279][T25070] rock: directory entry would overflow storage [ 1170.207775][T25070] rock: sig=0x4654, size=5, remaining=4 [ 1170.524987][T25102] loop0: detected capacity change from 0 to 8 [ 1170.574949][T25102] cramfs: bad data blocksize 3222268820 [ 1170.582333][T25102] cramfs: Error -3 while decompressing! [ 1170.592007][T25102] cramfs: ffffffff973fa39c(16)->ffff888058b1c000(4096) [ 1170.606639][T25106] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1170.624364][T25102] cramfs: bad data blocksize 4165569313 [ 1170.649475][T25102] cramfs: bad data blocksize 3825676623 [ 1170.663140][T25102] cramfs: bad data blocksize 4294480561 [ 1170.674753][T25102] cramfs: bad data blocksize 1076736 [ 1170.680797][T25110] xt_bpf: check failed: parse error [ 1170.690363][T25102] cramfs: bad data blocksize 485460736 [ 1170.710592][T25102] cramfs: bad data blocksize 3808479469 [ 1170.720791][T25102] cramfs: bad data blocksize 3222268820 [ 1170.753827][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1170.753839][ T28] audit: type=1800 audit(1170.730:4441): pid=25102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17116" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1170.999097][T25126] cgroup: subsys name conflicts with all [ 1171.150745][T25137] loop0: detected capacity change from 0 to 128 [ 1171.498792][T25156] loop0: detected capacity change from 0 to 16 [ 1171.520612][T25156] erofs: (device loop0): mounted with root inode @ nid 36. [ 1171.567432][T25156] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 1171.587616][T25162] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 1171.607345][T25156] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 1171.623048][T25162] (unnamed net_device) (uninitialized): peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 1171.640480][T25156] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1171.738351][T25162] bond0: entered allmulticast mode [ 1172.028388][T25219] loop4: detected capacity change from 0 to 164 [ 1172.729388][ T28] audit: type=1400 audit(1172.700:4442): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=25262 comm="syz.3.17158" [ 1172.936636][T25280] xt_TCPMSS: Only works on TCP SYN packets [ 1173.129289][T25297] netlink: 'syz.0.17169': attribute type 29 has an invalid length. [ 1173.264977][T25304] ip6t_srh: unknown srh match flags 4000 [ 1173.312855][T25306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1173.319419][T25306] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1173.389223][T25306] vhci_hcd vhci_hcd.0: Device attached [ 1173.410532][T25309] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 1173.417091][T25309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1173.464051][T25309] vhci_hcd vhci_hcd.0: Device attached [ 1173.471186][T25313] vhci_hcd: connection closed [ 1173.476182][T25307] vhci_hcd: connection closed [ 1173.486071][ T144] vhci_hcd: stop threads [ 1173.512713][ T144] vhci_hcd: release socket [ 1173.521780][ T144] vhci_hcd: disconnect device [ 1173.541935][ T144] vhci_hcd: stop threads [ 1173.551525][ T144] vhci_hcd: release socket [ 1173.579198][ T144] vhci_hcd: disconnect device [ 1173.832741][T25294] loop4: detected capacity change from 0 to 32768 [ 1174.361440][T25358] netlink: 188 bytes leftover after parsing attributes in process `syz.4.17182'. [ 1174.781549][T25385] netlink: 'syz.0.17197': attribute type 5 has an invalid length. [ 1174.791367][ T8] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1174.860033][T25388] netlink: 'syz.2.17198': attribute type 1 has an invalid length. [ 1174.875108][T25388] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17198'. [ 1175.002849][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1175.020016][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.054566][ T8] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1175.069680][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.078357][ T8] usb 4-1: Product: syz [ 1175.082619][ T8] usb 4-1: Manufacturer: syz [ 1175.091799][ T8] usb 4-1: SerialNumber: syz [ 1175.107746][ T8] usb 4-1: config 0 descriptor?? [ 1175.127574][ T8] cdc_phonet 4-1:0.0: invalid descriptor buffer length [ 1175.150724][ T8] cdc_phonet: probe of 4-1:0.0 failed with error -22 [ 1175.357771][T22736] usb 4-1: USB disconnect, device number 87 [ 1175.437350][T25427] netlink: 220 bytes leftover after parsing attributes in process `syz.0.17209'. [ 1175.466635][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17209'. [ 1175.479661][T25427] tc_dump_action: action bad kind [ 1175.594265][T25438] loop4: detected capacity change from 0 to 1024 [ 1175.606975][T25438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1175.611918][T25440] loop0: detected capacity change from 0 to 164 [ 1175.667825][T25438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.681258][T25440] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1175.803662][ T8] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1175.825834][T29846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.838728][T25450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17214'. [ 1175.972996][T25457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17215'. [ 1175.992938][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1176.001374][ T8] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1176.035118][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.058088][ T8] usb 3-1: config 0 has no interface number 0 [ 1176.077027][ T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1176.108922][ T8] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.135906][ T8] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1176.155925][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1176.182937][ T8] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1176.191100][ T8] usb 3-1: Manufacturer: syz [ 1176.221375][ T8] usb 3-1: config 0 descriptor?? [ 1176.247229][ T8] hub 3-1:0.52: bad descriptor, ignoring hub [ 1176.258967][ T8] hub: probe of 3-1:0.52 failed with error -5 [ 1176.276233][T25462] loop3: detected capacity change from 0 to 4096 [ 1176.352177][T25479] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1176.525616][ T8] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input57 [ 1176.923418][ T8] usb 3-1: USB disconnect, device number 99 [ 1177.224409][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17234'. [ 1177.275260][T25541] SET target dimension over the limit! [ 1177.386283][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.614488][T25560] overlayfs: missing 'lowerdir' [ 1177.791774][T25572] loop0: detected capacity change from 0 to 1024 [ 1177.994640][T25585] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 1179.334414][ T28] audit: type=1326 audit(1179.310:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25661 comm="syz.4.17277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf919c799 code=0x0 [ 1179.363247][T25636] loop0: detected capacity change from 0 to 32768 [ 1179.380332][T25664] netlink: 'syz.2.17278': attribute type 1 has an invalid length. [ 1179.420501][T25636] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1179.549081][T25636] XFS (loop0): Ending clean mount [ 1179.555394][T30948] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1179.569536][T25681] netlink: 'syz.2.17281': attribute type 17 has an invalid length. [ 1179.578924][T25681] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1179.601306][T25636] XFS (loop0): Quotacheck needed: Please wait. [ 1179.697636][T25636] XFS (loop0): Quotacheck: Done. [ 1179.776307][T30948] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1179.806341][T30948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.836122][T30948] usb 4-1: Product: syz [ 1179.840332][T30948] usb 4-1: Manufacturer: syz [ 1179.866240][T30948] usb 4-1: SerialNumber: syz [ 1179.876246][T30948] r8152-cfgselector 4-1: config 0 descriptor?? [ 1179.896984][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1179.900052][T25692] loop4: detected capacity change from 0 to 128 [ 1179.971858][T25692] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1179.999155][T25692] hpfs: filesystem error: improperly stopped [ 1180.006084][T25692] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1180.020222][T25692] hpfs: You really don't want any checks? You are crazy... [ 1180.030600][T25692] hpfs: hpfs_map_sector(): read error [ 1180.048008][T25692] hpfs: code page support is disabled [ 1180.060128][T25692] hpfs: hpfs_map_4sectors(): unaligned read [ 1180.069780][T25692] hpfs: hpfs_map_4sectors(): unaligned read [ 1180.079137][T25692] hpfs: filesystem error: unable to find root dir [ 1180.335818][T30948] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1180.357463][T30948] r8152-cfgselector 4-1: USB disconnect, device number 88 [ 1180.465431][T25720] netlink: 'syz.4.17290': attribute type 39 has an invalid length. [ 1180.569880][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17292'. [ 1181.232834][T25769] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1181.232834][T25769] program syz.0.17306 not setting count and/or reply_len properly [ 1181.469365][T25782] loop0: detected capacity change from 0 to 1024 [ 1181.548876][ T28] audit: type=1326 audit(1181.510:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25786 comm="syz.3.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1181.570890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.579996][T25789] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1181.600385][ T61] hfsplus: b-tree write err: -5, ino 25 [ 1181.614677][ T28] audit: type=1326 audit(1181.520:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25786 comm="syz.3.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1181.636659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.658348][ T61] hfsplus: b-tree write err: -5, ino 4 [ 1181.672998][ T61] hfsplus: b-tree write err: -5, ino 2 [ 1181.725295][ T28] audit: type=1326 audit(1181.550:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25786 comm="syz.3.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1181.835450][ T28] audit: type=1326 audit(1181.630:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25786 comm="syz.3.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1181.876113][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1181.896533][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1181.905118][ T28] audit: type=1326 audit(1181.630:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25786 comm="syz.3.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1181.927314][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1181.935696][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1181.952913][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1181.971096][ T28] audit: type=1326 audit(1181.630:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25790 comm="syz.3.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17d9b5cfce code=0x7ffc0000 [ 1181.993378][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.001190][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.034899][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.043345][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.072907][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.080684][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.088565][ T28] audit: type=1326 audit(1181.800:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25790 comm="syz.3.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f17d9b9c799 code=0x7ffc0000 [ 1182.131349][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.143082][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.161110][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.181404][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.205570][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.220260][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.252983][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.260771][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.312672][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.323627][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.331483][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.339488][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.347918][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.368806][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.381511][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.399753][T30949] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 1182.465358][T30949] hid-generic 0001:2043D8E7:05F6.0001: hidraw0: HID ved.d9 Device [syz0] on syz0 [ 1182.539400][T25826] cifs: Unknown parameter '2Q [ 1182.539400][T25826] @"2ach}#`[T&:"1:ӭ'4,Zz-#F<]%gC [ 1182.539400][T25826] S' [ 1182.695171][T25823] fido_id[25823]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1182.917129][T25847] IPv6: NLM_F_CREATE should be specified when creating new route [ 1182.948369][T25850] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1183.086846][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17334'. [ 1183.155480][T25859] loop0: detected capacity change from 0 to 64 [ 1183.396374][T25869] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1183.422859][T25869] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1183.441713][T25835] loop4: detected capacity change from 0 to 32768 [ 1183.495983][T25835] JBD2: Ignoring recovery information on journal [ 1183.595178][T25835] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1183.746862][T25889] netlink: 'syz.2.17344': attribute type 3 has an invalid length. [ 1183.885970][T29846] ocfs2: Unmounting device (7,4) on (node local) [ 1184.270417][T25914] loop4: detected capacity change from 0 to 1764 [ 1184.399485][T25926] loop0: detected capacity change from 0 to 164 [ 1184.508388][T25926] rock: directory entry would overflow storage [ 1184.520915][T25926] rock: sig=0x4543, size=28, remaining=18 [ 1184.533845][T25933] loop3: detected capacity change from 0 to 256 [ 1184.793260][T25933] FAT-fs (loop3): Directory bread(block 64) failed [ 1184.813051][T25933] FAT-fs (loop3): Directory bread(block 65) failed [ 1184.819729][T25933] FAT-fs (loop3): Directory bread(block 66) failed [ 1184.868758][T25933] FAT-fs (loop3): Directory bread(block 67) failed [ 1184.892902][T25933] FAT-fs (loop3): Directory bread(block 68) failed [ 1184.908368][T25933] FAT-fs (loop3): Directory bread(block 69) failed [ 1184.921999][T25933] FAT-fs (loop3): Directory bread(block 70) failed [ 1184.934646][T25933] FAT-fs (loop3): Directory bread(block 71) failed [ 1184.941281][T25933] FAT-fs (loop3): Directory bread(block 72) failed [ 1184.950149][T25933] FAT-fs (loop3): Directory bread(block 73) failed [ 1185.290468][T25971] netlink: 'syz.4.17367': attribute type 15 has an invalid length. [ 1185.453169][ T788] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1185.671633][ T788] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1185.691502][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.725739][ T788] usb 1-1: config 0 descriptor?? [ 1185.746276][ T788] cp210x 1-1:0.0: cp210x converter detected [ 1185.941221][T26013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17382'. [ 1185.966003][T26013] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1185.987223][ T788] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1186.086400][T26023] C: renamed from team_slave_0 [ 1186.116724][T26023] netlink: 'syz.3.17383': attribute type 3 has an invalid length. [ 1186.127172][T26023] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17383'. [ 1186.139933][T26023] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1186.215715][ T788] usb 1-1: USB disconnect, device number 91 [ 1186.238788][ T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1186.271184][ T788] cp210x 1-1:0.0: device disconnected [ 1186.627973][T26058] binder: 26056:26058 ioctl c0306201 200000000380 returned -14 [ 1187.053038][T26079] netlink: 'syz.3.17398': attribute type 1 has an invalid length. [ 1187.524995][T26107] loop0: detected capacity change from 0 to 64 [ 1187.539110][T26110] netlink: 'syz.3.17409': attribute type 39 has an invalid length. [ 1187.978913][T26130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17414'. [ 1188.011837][T26130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17414'. [ 1188.394207][T26155] netlink: 'syz.0.17423': attribute type 6 has an invalid length. [ 1188.454395][T26157] netlink: 'syz.4.17424': attribute type 3 has an invalid length. [ 1188.491541][T26157] netlink: 'syz.4.17424': attribute type 3 has an invalid length. [ 1188.527115][T26157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17424'. [ 1189.417429][T26218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17445'. [ 1189.502650][T26225] loop0: detected capacity change from 0 to 256 [ 1189.555615][T26225] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 1189.683895][T30949] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1189.893269][T30949] usb 4-1: Using ep0 maxpacket: 32 [ 1189.900968][T30949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.934052][T30949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1189.952914][T30949] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1189.997906][T30949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1190.023071][T30949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.031105][T30949] usb 4-1: Product: syz [ 1190.042914][T30949] usb 4-1: Manufacturer: syz [ 1190.047560][T30949] usb 4-1: SerialNumber: syz [ 1190.069407][T30949] cdc_ncm 4-1:1.0: skipping garbage [ 1190.091255][T30949] cdc_ncm 4-1:1.0: skipping garbage [ 1190.104713][T30949] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1190.111548][T30949] cdc_ncm 4-1:1.0: bind() failure [ 1190.263147][ T8] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1190.328749][T30949] usb 4-1: USB disconnect, device number 89 [ 1190.437955][T26280] netlink: 'syz.0.17460': attribute type 1 has an invalid length. [ 1190.446137][T26281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17461'. [ 1190.461998][ T8] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1190.471330][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.494599][ T8] usb 5-1: config 0 descriptor?? [ 1190.510390][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1190.620844][T26290] netlink: 'syz.2.17464': attribute type 1 has an invalid length. [ 1190.629758][T26290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17464'. [ 1190.912990][ T8] gspca_sunplus: reg_w_riv err -71 [ 1190.927734][T26306] netlink: 'syz.2.17469': attribute type 3 has an invalid length. [ 1190.934998][ T8] sunplus: probe of 5-1:0.0 failed with error -71 [ 1190.942132][T26306] netlink: 'syz.2.17469': attribute type 3 has an invalid length. [ 1190.962616][ T8] usb 5-1: USB disconnect, device number 44 [ 1190.973010][T26306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17469'. [ 1191.430071][T26342] comedi comedi1: rti800: a I/O base address must be specified [ 1191.610294][T26353] loop0: detected capacity change from 0 to 256 [ 1191.777287][T26365] loop4: detected capacity change from 0 to 64 [ 1191.822221][T26365] hfs: unable to locate alternate MDB [ 1191.847595][T26365] hfs: continuing without an alternate MDB [ 1191.868643][ T28] audit: type=1800 audit(1191.840:4451): pid=26365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17487" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 1191.986359][ T144] [ 1191.988826][ T144] ====================================================== [ 1191.995861][ T144] WARNING: possible circular locking dependency detected [ 1192.002905][ T144] syzkaller #0 Not tainted [ 1192.007330][ T144] ------------------------------------------------------ [ 1192.014373][ T144] kworker/u4:5/144 is trying to acquire lock: [ 1192.020455][ T144] ffff88807998f5f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 1192.031299][ T144] [ 1192.031299][ T144] but task is already holding lock: [ 1192.038677][ T144] ffff88801ef4e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1192.048242][ T144] [ 1192.048242][ T144] which lock already depends on the new lock. [ 1192.048242][ T144] [ 1192.058663][ T144] [ 1192.058663][ T144] the existing dependency chain (in reverse order) is: [ 1192.067693][ T144] [ 1192.067693][ T144] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 1192.075817][ T144] __mutex_lock+0x136/0xcc0 [ 1192.080864][ T144] hfs_find_init+0x17e/0x1f0 [ 1192.086010][ T144] hfs_extend_file+0x361/0x1380 [ 1192.091406][ T144] hfs_bmap_reserve+0x107/0x430 [ 1192.096791][ T144] hfs_cat_create+0x1fe/0x6b0 [ 1192.102029][ T144] hfs_mkdir+0x6c/0xe0 [ 1192.106632][ T144] vfs_mkdir+0x296/0x440 [ 1192.111404][ T144] do_mkdirat+0x1dc/0x450 [ 1192.116264][ T144] __x64_sys_mkdirat+0x89/0xa0 [ 1192.121583][ T144] do_syscall_64+0x55/0xa0 [ 1192.126535][ T144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.132984][ T144] [ 1192.132984][ T144] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1192.142205][ T144] __lock_acquire+0x2df1/0x7d40 [ 1192.147594][ T144] lock_acquire+0x19e/0x420 [ 1192.152636][ T144] __mutex_lock+0x136/0xcc0 [ 1192.157683][ T144] hfs_extend_file+0xff/0x1380 [ 1192.162982][ T144] hfs_bmap_reserve+0x107/0x430 [ 1192.168373][ T144] __hfs_ext_write_extent+0x1fa/0x470 [ 1192.174273][ T144] hfs_ext_write_extent+0x17f/0x210 [ 1192.180004][ T144] hfs_write_inode+0xdc/0x880 [ 1192.185216][ T144] __writeback_single_inode+0x705/0xec0 [ 1192.191294][ T144] writeback_sb_inodes+0x7cd/0xf50 [ 1192.196957][ T144] wb_writeback+0x46a/0xbf0 [ 1192.202007][ T144] wb_workfn+0x400/0xe60 [ 1192.206785][ T144] process_scheduled_works+0xa5d/0x15d0 [ 1192.212862][ T144] worker_thread+0xa55/0xfc0 [ 1192.217989][ T144] kthread+0x2fa/0x390 [ 1192.222588][ T144] ret_from_fork+0x48/0x80 [ 1192.227537][ T144] ret_from_fork_asm+0x11/0x20 [ 1192.232835][ T144] [ 1192.232835][ T144] other info that might help us debug this: [ 1192.232835][ T144] [ 1192.243071][ T144] Possible unsafe locking scenario: [ 1192.243071][ T144] [ 1192.250529][ T144] CPU0 CPU1 [ 1192.255907][ T144] ---- ---- [ 1192.261312][ T144] lock(&tree->tree_lock#2/1); [ 1192.266186][ T144] lock(&HFS_I(tree->inode)->extents_lock); [ 1192.274690][ T144] lock(&tree->tree_lock#2/1); [ 1192.282073][ T144] lock(&HFS_I(tree->inode)->extents_lock); [ 1192.288061][ T144] [ 1192.288061][ T144] *** DEADLOCK *** [ 1192.288061][ T144] [ 1192.296209][ T144] 3 locks held by kworker/u4:5/144: [ 1192.301406][ T144] #0: ffff88801ce7b138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1192.312646][ T144] #1: ffffc90002dc7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1192.325110][ T144] #2: ffff88801ef4e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1192.335052][ T144] [ 1192.335052][ T144] stack backtrace: [ 1192.340957][ T144] CPU: 0 PID: 144 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1192.348427][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.358491][ T144] Workqueue: writeback wb_workfn (flush-7:4) [ 1192.364496][ T144] Call Trace: [ 1192.367805][ T144] [ 1192.370746][ T144] dump_stack_lvl+0x18c/0x250 [ 1192.375455][ T144] ? load_image+0x400/0x400 [ 1192.379981][ T144] ? show_regs_print_info+0x20/0x20 [ 1192.385201][ T144] ? print_circular_bug+0x12b/0x1a0 [ 1192.390419][ T144] check_noncircular+0x2fc/0x400 [ 1192.395394][ T144] ? look_up_lock_class+0x75/0x140 [ 1192.400523][ T144] ? print_deadlock_bug+0x5d0/0x5d0 [ 1192.405734][ T144] ? lockdep_lock+0xf5/0x230 [ 1192.410356][ T144] ? _find_first_zero_bit+0xd3/0x100 [ 1192.415685][ T144] __lock_acquire+0x2df1/0x7d40 [ 1192.420566][ T144] ? arch_stack_walk+0x16e/0x190 [ 1192.425517][ T144] ? ret_from_fork_asm+0x11/0x20 [ 1192.430473][ T144] ? verify_lock_unused+0x140/0x140 [ 1192.435689][ T144] ? stack_trace_save+0xaa/0x100 [ 1192.440656][ T144] ? stack_trace_snprint+0xf0/0xf0 [ 1192.445799][ T144] ? check_noncircular+0x18a/0x400 [ 1192.450942][ T144] ? print_deadlock_bug+0x5d0/0x5d0 [ 1192.456163][ T144] lock_acquire+0x19e/0x420 [ 1192.460695][ T144] ? hfs_extend_file+0xff/0x1380 [ 1192.465651][ T144] ? __might_sleep+0xe0/0xe0 [ 1192.470251][ T144] ? read_lock_is_recursive+0x20/0x20 [ 1192.475643][ T144] __mutex_lock+0x136/0xcc0 [ 1192.480160][ T144] ? hfs_extend_file+0xff/0x1380 [ 1192.485110][ T144] ? verify_lock_unused+0x140/0x140 [ 1192.490323][ T144] ? hfs_extend_file+0xff/0x1380 [ 1192.495272][ T144] ? mutex_lock_nested+0x20/0x20 [ 1192.500235][ T144] hfs_extend_file+0xff/0x1380 [ 1192.505010][ T144] ? hfs_ext_write_extent+0x152/0x210 [ 1192.510389][ T144] ? hfs_write_inode+0xdc/0x880 [ 1192.515253][ T144] ? hfs_get_block+0xc50/0xc50 [ 1192.520021][ T144] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1192.526193][ T144] ? rcu_is_watching+0x15/0xb0 [ 1192.530967][ T144] ? trace_contention_end+0x39/0xe0 [ 1192.536178][ T144] ? __asan_memset+0x22/0x40 [ 1192.540790][ T144] ? hfs_brec_find+0x19b/0x500 [ 1192.545576][ T144] ? hfs_find_init+0x17e/0x1f0 [ 1192.550356][ T144] hfs_bmap_reserve+0x107/0x430 [ 1192.555224][ T144] __hfs_ext_write_extent+0x1fa/0x470 [ 1192.560625][ T144] hfs_ext_write_extent+0x17f/0x210 [ 1192.565866][ T144] ? verify_lock_unused+0x140/0x140 [ 1192.571083][ T144] ? hfs_ext_find_block+0x190/0x190 [ 1192.576302][ T144] ? blk_start_plug+0x51/0x1a0 [ 1192.581078][ T144] hfs_write_inode+0xdc/0x880 [ 1192.585767][ T144] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1192.591167][ T144] ? __writeback_single_inode+0x48d/0xec0 [ 1192.596901][ T144] ? __lock_acquire+0x7d40/0x7d40 [ 1192.601933][ T144] ? do_raw_spin_lock+0x11f/0x2c0 [ 1192.606981][ T144] ? __rwlock_init+0x150/0x150 [ 1192.611767][ T144] __writeback_single_inode+0x705/0xec0 [ 1192.617339][ T144] writeback_sb_inodes+0x7cd/0xf50 [ 1192.622487][ T144] ? queue_io+0x550/0x550 [ 1192.626842][ T144] ? rcu_is_watching+0x15/0xb0 [ 1192.631617][ T144] wb_writeback+0x46a/0xbf0 [ 1192.636137][ T144] ? queue_io+0x3b1/0x550 [ 1192.640497][ T144] ? percpu_ref_tryget+0x250/0x250 [ 1192.645626][ T144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1192.651643][ T144] ? _raw_spin_unlock_irq+0x23/0x50 [ 1192.656860][ T144] wb_workfn+0x400/0xe60 [ 1192.661111][ T144] ? try_to_wake_up+0x70a/0x1190 [ 1192.666053][ T144] ? inode_wait_for_writeback+0x230/0x230 [ 1192.671788][ T144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1192.677777][ T144] ? read_lock_is_recursive+0x20/0x20 [ 1192.683158][ T144] ? _raw_spin_unlock_irq+0x23/0x50 [ 1192.688368][ T144] ? process_scheduled_works+0x96f/0x15d0 [ 1192.694097][ T144] ? process_scheduled_works+0x96f/0x15d0 [ 1192.699828][ T144] process_scheduled_works+0xa5d/0x15d0 [ 1192.705409][ T144] ? worker_attach_to_pool+0x380/0x380 [ 1192.710890][ T144] ? assign_work+0x3d2/0x5d0 [ 1192.715499][ T144] worker_thread+0xa55/0xfc0 [ 1192.720121][ T144] kthread+0x2fa/0x390 [ 1192.724211][ T144] ? pr_cont_work+0x560/0x560 [ 1192.728900][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1192.733515][ T144] ret_from_fork+0x48/0x80 [ 1192.737951][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1192.742567][ T144] ret_from_fork_asm+0x11/0x20 [ 1192.747358][ T144] [ 1192.798290][ T144] hfs: new node 0 already hashed? [ 1192.803677][ T144] ------------[ cut here ]------------ [ 1192.809180][ T144] WARNING: CPU: 1 PID: 144 at fs/hfs/bnode.c:520 hfs_bnode_create+0x3b9/0x440 [ 1192.818157][ T144] Modules linked in: [ 1192.822078][ T144] CPU: 1 PID: 144 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1192.829577][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.839697][ T144] Workqueue: writeback wb_workfn (flush-7:4) [ 1192.845795][ T144] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 1192.851459][ T144] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 1192.871409][ T144] RSP: 0018:ffffc90002dc6e18 EFLAGS: 00010246 [ 1192.877537][ T144] RAX: 000000000000001f RBX: ffff88801ef4e000 RCX: 082a14c60fc0dc00 [ 1192.885557][ T144] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1192.893889][ T144] RBP: 0000000000000000 R08: ffffc90002dc6a27 R09: 1ffff920005b8d44 [ 1192.901907][ T144] R10: dffffc0000000000 R11: fffff520005b8d45 R12: 0000000000000000 [ 1192.910250][ T144] R13: ffff88801ef4e0e0 R14: ffff88802f22db00 R15: dffffc0000000000 [ 1192.918293][ T144] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1192.927292][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.933919][ T144] CR2: 0000001b2d921ff8 CR3: 0000000074e01000 CR4: 00000000003506e0 [ 1192.941912][ T144] Call Trace: [ 1192.945230][ T144] [ 1192.948177][ T144] hfs_bmap_alloc+0x541/0x5d0 [ 1192.952899][ T144] ? hfs_bmap_reserve+0x430/0x430 [ 1192.957953][ T144] ? rcu_is_watching+0x15/0xb0 [ 1192.962747][ T144] hfs_btree_inc_height+0x101/0xac0 [ 1192.968034][ T144] ? __rwlock_init+0x150/0x150 [ 1192.972930][ T144] ? hfs_brec_insert+0xbd0/0xbd0 [ 1192.977906][ T144] ? do_raw_spin_unlock+0x121/0x230 [ 1192.983219][ T144] hfs_brec_insert+0x748/0xbd0 [ 1192.988023][ T144] ? hfs_brec_keylen+0x360/0x360 [ 1192.993011][ T144] __hfs_ext_write_extent+0x2a1/0x470 [ 1192.998434][ T144] hfs_ext_write_extent+0x17f/0x210 [ 1193.003694][ T144] ? verify_lock_unused+0x140/0x140 [ 1193.008929][ T144] ? hfs_ext_find_block+0x190/0x190 [ 1193.014223][ T144] ? blk_start_plug+0x51/0x1a0 [ 1193.019016][ T144] hfs_write_inode+0xdc/0x880 [ 1193.023748][ T144] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1193.029192][ T144] ? __writeback_single_inode+0x48d/0xec0 [ 1193.034982][ T144] ? __lock_acquire+0x7d40/0x7d40 [ 1193.040029][ T144] ? do_raw_spin_lock+0x11f/0x2c0 [ 1193.045103][ T144] ? __rwlock_init+0x150/0x150 [ 1193.049916][ T144] __writeback_single_inode+0x705/0xec0 [ 1193.055529][ T144] writeback_sb_inodes+0x7cd/0xf50 [ 1193.060684][ T144] ? queue_io+0x550/0x550 [ 1193.065180][ T144] ? rcu_is_watching+0x15/0xb0 [ 1193.069982][ T144] wb_writeback+0x46a/0xbf0 [ 1193.074680][ T144] ? queue_io+0x3b1/0x550 [ 1193.079067][ T144] ? percpu_ref_tryget+0x250/0x250 [ 1193.084255][ T144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1193.090267][ T144] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.095541][ T144] wb_workfn+0x400/0xe60 [ 1193.099831][ T144] ? try_to_wake_up+0x70a/0x1190 [ 1193.104854][ T144] ? inode_wait_for_writeback+0x230/0x230 [ 1193.110619][ T144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1193.116684][ T144] ? read_lock_is_recursive+0x20/0x20 [ 1193.122088][ T144] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.127594][ T144] ? process_scheduled_works+0x96f/0x15d0 [ 1193.133376][ T144] ? process_scheduled_works+0x96f/0x15d0 [ 1193.139132][ T144] process_scheduled_works+0xa5d/0x15d0 [ 1193.144747][ T144] ? worker_attach_to_pool+0x380/0x380 [ 1193.150250][ T144] ? assign_work+0x3d2/0x5d0 [ 1193.154929][ T144] worker_thread+0xa55/0xfc0 [ 1193.159574][ T144] kthread+0x2fa/0x390 [ 1193.163732][ T144] ? pr_cont_work+0x560/0x560 [ 1193.168459][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1193.173127][ T144] ret_from_fork+0x48/0x80 [ 1193.177594][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1193.182234][ T144] ret_from_fork_asm+0x11/0x20 [ 1193.187073][ T144] [ 1193.190121][ T144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1193.197418][ T144] CPU: 1 PID: 144 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1193.204898][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.214964][ T144] Workqueue: writeback wb_workfn (flush-7:4) [ 1193.220986][ T144] Call Trace: [ 1193.224300][ T144] [ 1193.227272][ T144] dump_stack_lvl+0x18c/0x250 [ 1193.231988][ T144] ? show_regs_print_info+0x20/0x20 [ 1193.237225][ T144] ? load_image+0x400/0x400 [ 1193.241771][ T144] panic+0x2dc/0x730 [ 1193.245707][ T144] ? bpf_jit_dump+0xd0/0xd0 [ 1193.250252][ T144] ? ret_from_fork_asm+0x11/0x20 [ 1193.255235][ T144] __warn+0x2e0/0x470 [ 1193.259257][ T144] ? hfs_bnode_create+0x3b9/0x440 [ 1193.264315][ T144] ? hfs_bnode_create+0x3b9/0x440 [ 1193.269475][ T144] report_bug+0x2be/0x4f0 [ 1193.273847][ T144] ? hfs_bnode_create+0x3b9/0x440 [ 1193.278896][ T144] ? hfs_bnode_create+0x3b9/0x440 [ 1193.283947][ T144] ? hfs_bnode_create+0x3bb/0x440 [ 1193.289000][ T144] handle_bug+0xcf/0x120 [ 1193.293281][ T144] exc_invalid_op+0x1a/0x50 [ 1193.297819][ T144] asm_exc_invalid_op+0x1a/0x20 [ 1193.302683][ T144] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 1193.308327][ T144] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 1193.328032][ T144] RSP: 0018:ffffc90002dc6e18 EFLAGS: 00010246 [ 1193.334124][ T144] RAX: 000000000000001f RBX: ffff88801ef4e000 RCX: 082a14c60fc0dc00 [ 1193.342115][ T144] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1193.350098][ T144] RBP: 0000000000000000 R08: ffffc90002dc6a27 R09: 1ffff920005b8d44 [ 1193.358083][ T144] R10: dffffc0000000000 R11: fffff520005b8d45 R12: 0000000000000000 [ 1193.366058][ T144] R13: ffff88801ef4e0e0 R14: ffff88802f22db00 R15: dffffc0000000000 [ 1193.374174][ T144] ? hfs_bnode_create+0x3b9/0x440 [ 1193.379229][ T144] hfs_bmap_alloc+0x541/0x5d0 [ 1193.383967][ T144] ? hfs_bmap_reserve+0x430/0x430 [ 1193.389013][ T144] ? rcu_is_watching+0x15/0xb0 [ 1193.393800][ T144] hfs_btree_inc_height+0x101/0xac0 [ 1193.399004][ T144] ? __rwlock_init+0x150/0x150 [ 1193.403809][ T144] ? hfs_brec_insert+0xbd0/0xbd0 [ 1193.408759][ T144] ? do_raw_spin_unlock+0x121/0x230 [ 1193.413976][ T144] hfs_brec_insert+0x748/0xbd0 [ 1193.418766][ T144] ? hfs_brec_keylen+0x360/0x360 [ 1193.423724][ T144] __hfs_ext_write_extent+0x2a1/0x470 [ 1193.429112][ T144] hfs_ext_write_extent+0x17f/0x210 [ 1193.434318][ T144] ? verify_lock_unused+0x140/0x140 [ 1193.439518][ T144] ? hfs_ext_find_block+0x190/0x190 [ 1193.444729][ T144] ? blk_start_plug+0x51/0x1a0 [ 1193.449508][ T144] hfs_write_inode+0xdc/0x880 [ 1193.454205][ T144] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1193.459599][ T144] ? __writeback_single_inode+0x48d/0xec0 [ 1193.465344][ T144] ? __lock_acquire+0x7d40/0x7d40 [ 1193.470377][ T144] ? do_raw_spin_lock+0x11f/0x2c0 [ 1193.475421][ T144] ? __rwlock_init+0x150/0x150 [ 1193.480197][ T144] __writeback_single_inode+0x705/0xec0 [ 1193.485762][ T144] writeback_sb_inodes+0x7cd/0xf50 [ 1193.490918][ T144] ? queue_io+0x550/0x550 [ 1193.495285][ T144] ? rcu_is_watching+0x15/0xb0 [ 1193.500072][ T144] wb_writeback+0x46a/0xbf0 [ 1193.504601][ T144] ? queue_io+0x3b1/0x550 [ 1193.508946][ T144] ? percpu_ref_tryget+0x250/0x250 [ 1193.514072][ T144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1193.520064][ T144] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.525286][ T144] wb_workfn+0x400/0xe60 [ 1193.529543][ T144] ? try_to_wake_up+0x70a/0x1190 [ 1193.534507][ T144] ? inode_wait_for_writeback+0x230/0x230 [ 1193.540254][ T144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1193.546244][ T144] ? read_lock_is_recursive+0x20/0x20 [ 1193.551621][ T144] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.556823][ T144] ? process_scheduled_works+0x96f/0x15d0 [ 1193.562554][ T144] ? process_scheduled_works+0x96f/0x15d0 [ 1193.568282][ T144] process_scheduled_works+0xa5d/0x15d0 [ 1193.573847][ T144] ? worker_attach_to_pool+0x380/0x380 [ 1193.579312][ T144] ? assign_work+0x3d2/0x5d0 [ 1193.583916][ T144] worker_thread+0xa55/0xfc0 [ 1193.588546][ T144] kthread+0x2fa/0x390 [ 1193.592634][ T144] ? pr_cont_work+0x560/0x560 [ 1193.597334][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1193.601928][ T144] ret_from_fork+0x48/0x80 [ 1193.606350][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1193.610964][ T144] ret_from_fork_asm+0x11/0x20 [ 1193.615743][ T144] [ 1193.619333][ T144] Kernel Offset: disabled [ 1193.623664][ T144] Rebooting in 86400 seconds..