last executing test programs: 3m10.674581817s ago: executing program 2 (id=7406): r0 = io_uring_setup(0x11bf, &(0x7f0000000a40)={0x0, 0x2d3b, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) 3m10.414587252s ago: executing program 2 (id=7410): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'syzkaller0\x00'}}, 0x1e) 3m10.159333136s ago: executing program 2 (id=7415): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000340), 0x4) 3m9.990202006s ago: executing program 2 (id=7418): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 3m8.695158451s ago: executing program 2 (id=7435): mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) init_module(&(0x7f0000000e00)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2, 0x0, 0x8, 0xc, 0x2, 0x3e, 0x4, 0x0, 0x40, 0x6c, 0xfffffe31, 0x4, 0x38, 0x0, 0x7, 0x305, 0x9}}, 0x40, 0x0) 3m7.046461335s ago: executing program 2 (id=7456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2}) 3m6.535115904s ago: executing program 32 (id=7456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2}) 2m18.926550506s ago: executing program 4 (id=8099): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x8}}, 0x24, 0x0) 2m18.593369995s ago: executing program 4 (id=8104): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x27, 0xa, 0x2, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x38414762}) 2m18.452133733s ago: executing program 4 (id=8107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 2m18.213959217s ago: executing program 4 (id=8110): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@s, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0xab}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) 2m18.140140811s ago: executing program 4 (id=8112): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m17.384551194s ago: executing program 3 (id=8126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x200, 0x178, 0x178, 0x200, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xf0, 0x118, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0xff}], 0x2, 0x1}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 2m17.136572729s ago: executing program 4 (id=8130): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, 0x0, 0x0) 2m17.045143004s ago: executing program 3 (id=8133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x28}}, 0x20040800) 2m16.879611503s ago: executing program 3 (id=8136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x4, 0x3, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1200}]}}}]}, 0x44}}, 0x0) 2m16.719378842s ago: executing program 3 (id=8139): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0800e800"], 0x48) 2m16.563083531s ago: executing program 3 (id=8141): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m15.577595518s ago: executing program 3 (id=8152): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f}) 2m2.705928947s ago: executing program 33 (id=8130): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, 0x0, 0x0) 2m1.138041447s ago: executing program 34 (id=8152): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f}) 2.198431224s ago: executing program 5 (id=10311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 2.026864023s ago: executing program 7 (id=10313): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x2, 0x1}, 0x2, 0xc3, 0x0, 0x0, 0x4, 0x4, 0x0, 0x5, 0x2, 0x0}) 2.026421044s ago: executing program 5 (id=10314): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b', 0x1}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {&(0x7f0000000380)="a6", 0x1}], 0x3}, 0x24008004) 1.91251309s ago: executing program 7 (id=10315): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x1, 0x2}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {}], 0x70) 1.858585103s ago: executing program 5 (id=10316): r0 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x40) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000500)=@multiplanar_mmap={0x7f, 0xe, 0x4, 0x70000, 0xf6, {}, {0x1, 0x0, 0x5, 0x0, 0xe8, 0x80, "8cf3b0ee"}, 0x6, 0x1, {0x0}, 0xc16}) 1.634228156s ago: executing program 7 (id=10318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x4}, {0x8, 0xd, 0x0, 0x0, 0x101}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.624930067s ago: executing program 5 (id=10319): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) 1.595211658s ago: executing program 1 (id=10320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0xb3f19c44429efdb1, 0x0, 0x0, {0x0, 0x0, 0xfffb}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) 1.38167588s ago: executing program 1 (id=10324): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000040)='T', 0x1}], 0x1) 1.170045453s ago: executing program 7 (id=10326): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000340)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc00800190007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.169861523s ago: executing program 1 (id=10327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x0) 1.169763383s ago: executing program 6 (id=10328): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x2, "000000400000000405f887f800000000590b00000000000000000000000400", 0x34363248}) 1.152461914s ago: executing program 0 (id=10329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.007186582s ago: executing program 6 (id=10330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x4, 0x0, 0x1}, {}, 0x6}}, 0xb8}}, 0x0) 989.924053ms ago: executing program 1 (id=10331): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x10000, 0x40200) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) 861.793701ms ago: executing program 7 (id=10332): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 861.128501ms ago: executing program 0 (id=10342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 778.486245ms ago: executing program 6 (id=10333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x281, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee2, 0x0) 778.340085ms ago: executing program 1 (id=10334): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}, 0x400c804) 680.619211ms ago: executing program 0 (id=10335): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000fbf04cad40c732000000170a001700000000040037000f00130025332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 606.124645ms ago: executing program 1 (id=10336): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@usrquota}]}, 0x21, 0x4cc, &(0x7f0000000b80)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) 590.996936ms ago: executing program 6 (id=10337): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0xda180f10ef8ddb20}, 0xc) 410.422556ms ago: executing program 0 (id=10338): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1625eb43203f8fb6}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 382.607338ms ago: executing program 6 (id=10339): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x4051, r0, 0xfba7d000) 290.955824ms ago: executing program 0 (id=10340): set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) mincore(&(0x7f000057b000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/172) 208.280368ms ago: executing program 5 (id=10341): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 92.904055ms ago: executing program 6 (id=10343): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000000)) 92.385685ms ago: executing program 0 (id=10344): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) 66.966066ms ago: executing program 7 (id=10345): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f00000001c0)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) 0s ago: executing program 5 (id=10346): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x20000000, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): :aa:3e) already exists on: batadv_slave_0 [ 780.293521][T23734] loop5: detected capacity change from 0 to 32768 [ 780.319765][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.341437][ T4272] Bluetooth: hci6: command 0x0419 tx timeout [ 780.356303][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.380205][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.402618][T23466] EXT4-fs (loop6): unmounting filesystem. [ 780.421857][ T9726] usb 1-1: USB disconnect, device number 126 [ 780.446202][T23734] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 780.496616][ T26] audit: type=1326 audit(794.239:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23743 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762439bf79 code=0x7ffc0000 [ 780.505000][T23514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.559956][ T26] audit: type=1326 audit(794.270:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23743 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f762439bf79 code=0x7ffc0000 [ 780.591436][T23734] OCFS2: ERROR (device loop5): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 780.627125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 780.655713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 780.665756][ T26] audit: type=1326 audit(794.270:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23743 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762439bf79 code=0x7ffc0000 [ 780.684287][T23734] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 780.705967][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.750420][T23734] OCFS2: File system is now read-only. [ 780.755489][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.756028][T23734] (syz.5.8445,23734,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 780.834914][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.886041][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.930074][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.979618][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.015665][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.061474][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.111955][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.125752][T23754] loop0: detected capacity change from 0 to 256 [ 781.141084][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.169845][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.194212][T23754] exfat: Deprecated parameter 'utf8' [ 781.221092][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.266113][T23754] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 781.274508][T23514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.299490][T21250] ocfs2: Unmounting device (7,5) on (node local) [ 781.350874][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 781.359632][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 781.405428][T23514] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.441239][T23514] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.474294][T23514] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.483043][T23514] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.589690][ T7] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 781.697295][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.715325][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.755147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 781.765030][T23766] loop6: detected capacity change from 0 to 4096 [ 781.791012][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.808735][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.835634][T23766] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 781.846083][ T7] usb 1-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.852410][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.880287][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 781.922663][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.929339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 782.007486][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 782.049566][ T7] usb 1-1: SerialNumber: syz [ 782.094566][ T7] cdc_ether 1-1:1.0: skipping garbage [ 782.100018][ T7] usb 1-1: bad CDC descriptors [ 782.291728][ T7] usb 1-1: USB disconnect, device number 127 [ 782.321114][T23781] cgroup: subsys name conflicts with all [ 782.811544][T23801] loop7: detected capacity change from 0 to 4096 [ 782.922139][T23801] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 782.996002][ T26] audit: type=1800 audit(796.864:226): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8474" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 783.020997][T23801] ntfs3: loop7: ino=1e, "file1" attr_set_size [ 783.031005][T23809] netlink: 'syz.0.8479': attribute type 2 has an invalid length. [ 783.247402][ T11] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 783.254044][T23514] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 783.272541][T23514] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 783.312990][T23514] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 783.319401][ T4350] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 783.350868][T23514] ntfs3: loop7: ntfs_evict_inode r=3 failed, -22. [ 783.352974][T23820] netlink: 'syz.6.8483': attribute type 5 has an invalid length. [ 783.394755][T23820] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8483'. [ 783.471405][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8485'. [ 783.545282][T23824] loop5: detected capacity change from 0 to 4096 [ 783.790246][T23828] loop1: detected capacity change from 0 to 4096 [ 784.136840][T23836] loop7: detected capacity change from 0 to 128 [ 784.176640][T23836] FAT-fs (loop7): Directory bread(block 162) failed [ 784.192716][T23836] FAT-fs (loop7): Directory bread(block 163) failed [ 784.219250][T23836] FAT-fs (loop7): Directory bread(block 164) failed [ 784.238856][T23836] FAT-fs (loop7): Directory bread(block 165) failed [ 784.242664][T23817] loop0: detected capacity change from 0 to 32768 [ 784.258480][T23836] FAT-fs (loop7): Directory bread(block 166) failed [ 784.266265][T23842] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8494'. [ 784.285300][T23836] FAT-fs (loop7): Directory bread(block 167) failed [ 784.321986][T23836] FAT-fs (loop7): Directory bread(block 168) failed [ 784.372683][T23836] FAT-fs (loop7): Directory bread(block 169) failed [ 784.382153][T23817] (syz.0.8484,23817,0):ocfs2_clear_journal_error:1114 ERROR: File system error 1 recorded in journal 0. [ 784.414257][T23836] FAT-fs (loop7): Directory bread(block 162) failed [ 784.438436][T23836] FAT-fs (loop7): Directory bread(block 163) failed [ 784.454749][T23817] (syz.0.8484,23817,0):ocfs2_clear_journal_error:1116 ERROR: File system on device loop0 needs checking. [ 784.473171][T23836] syz.7.8492: attempt to access beyond end of device [ 784.473171][T23836] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 784.497600][T23850] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8498'. [ 784.514413][T23817] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 784.537890][T23836] syz.7.8492: attempt to access beyond end of device [ 784.537890][T23836] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 784.609067][T23817] (syz.0.8484,23817,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 784.680870][T23817] (syz.0.8484,23817,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 784.720297][T23817] (syz.0.8484,23817,0):ocfs2_mknod:298 ERROR: status = -2 [ 784.749666][T23817] (syz.0.8484,23817,0):ocfs2_mknod:502 ERROR: status = -2 [ 784.787864][T23817] (syz.0.8484,23817,0):ocfs2_mkdir:659 ERROR: status = -2 [ 784.897009][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 784.988518][T23863] netlink: 'syz.1.8506': attribute type 4 has an invalid length. [ 785.111401][ T4339] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 785.311143][ T4339] usb 8-1: Using ep0 maxpacket: 16 [ 785.318117][ T4339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 785.363460][ T4339] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 785.396943][ T4339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.420517][ T4339] usb 8-1: Product: syz [ 785.424726][ T4339] usb 8-1: Manufacturer: syz [ 785.443075][ T4339] usb 8-1: SerialNumber: syz [ 785.454863][ T4339] usb 8-1: config 0 descriptor?? [ 785.462767][ T4339] hub 8-1:0.0: bad descriptor, ignoring hub [ 785.485322][ T4339] hub: probe of 8-1:0.0 failed with error -5 [ 785.509281][ T4339] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input52 [ 785.605231][T23882] loop6: detected capacity change from 0 to 4096 [ 786.193849][T23906] netlink: 'syz.5.8524': attribute type 5 has an invalid length. [ 786.502684][T23916] netlink: 'syz.6.8530': attribute type 12 has an invalid length. [ 786.932434][T23929] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 787.002068][T23935] loop0: detected capacity change from 0 to 47 [ 787.102882][T23908] loop1: detected capacity change from 0 to 32768 [ 787.131986][T23908] [ 787.131986][T23908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.131986][T23908] [ 787.204695][T23940] netlink: 'syz.6.8541': attribute type 3 has an invalid length. [ 787.221300][T23908] [ 787.221300][T23908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.221300][T23908] [ 787.272021][T23908] [ 787.272021][T23908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.272021][T23908] [ 787.315357][T23908] [ 787.315357][T23908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.315357][T23908] [ 787.347049][T23908] [ 787.347049][T23908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.347049][T23908] [ 787.395318][T23908] [ 787.395318][T23908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.395318][T23908] [ 787.440277][ T108] [ 787.440277][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.440277][ T108] [ 787.546635][ T4350] [ 787.546635][ T4350] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.546635][ T4350] [ 787.582342][ T4350] [ 787.582342][ T4350] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.582342][ T4350] [ 787.615565][ T4266] [ 787.615565][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.615565][ T4266] [ 787.646378][ T108] [ 787.646378][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.646378][ T108] [ 787.676377][ T4266] [ 787.676377][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 787.676377][ T4266] [ 787.842969][T23961] loop7: detected capacity change from 0 to 16 [ 788.043482][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 788.236819][ T7] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 788.263669][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.299854][ T7] usb 2-1: config 0 descriptor?? [ 788.408041][ T26] audit: type=1326 audit(802.547:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23977 comm="syz.0.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 788.469370][ T26] audit: type=1326 audit(802.568:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23977 comm="syz.0.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 788.513396][ T7] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 788.520064][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8561'. [ 788.548494][ T26] audit: type=1326 audit(802.568:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23977 comm="syz.0.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 788.555216][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 788.652559][T23959] loop6: detected capacity change from 0 to 32768 [ 788.664090][ T26] audit: type=1326 audit(802.568:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23977 comm="syz.0.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 788.708407][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 788.815417][ T7] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 788.819310][T23996] netlink: 'syz.7.8566': attribute type 2 has an invalid length. [ 788.822914][ T7] [drm] Initialized udl on minor 2 [ 788.841353][T23998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8564'. [ 788.875467][ T7] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 788.891774][T23996] device .*! entered promiscuous mode [ 788.908263][ T7] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 788.990318][ T7] usb 2-1: USB disconnect, device number 20 [ 789.029950][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 789.044534][ T26] audit: type=1326 audit(803.219:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23999 comm="syz.0.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 789.065024][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 789.110777][ T14] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 789.163771][ T26] audit: type=1326 audit(803.261:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23999 comm="syz.0.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 789.215759][T23959] XFS (loop6): Mounting V5 Filesystem [ 789.282382][T23959] XFS (loop6): Ending clean mount [ 789.311434][ T26] audit: type=1326 audit(803.261:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23999 comm="syz.0.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 789.335831][ T26] audit: type=1326 audit(803.261:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23999 comm="syz.0.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935ef9bf79 code=0x7ffc0000 [ 789.374849][T23959] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 789.409597][T24014] kernel profiling enabled (shift: 63) [ 789.450660][T24016] netlink: 'syz.0.8573': attribute type 1 has an invalid length. [ 789.464395][T24014] profiling shift: 63 too large [ 789.696740][T23466] XFS (loop6): Unmounting Filesystem [ 789.873785][ T7048] usb 8-1: USB disconnect, device number 2 [ 789.985695][T24033] loop7: detected capacity change from 0 to 256 [ 790.041058][T24035] loop0: detected capacity change from 0 to 16 [ 790.056102][T24035] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 790.106621][T24033] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 790.110798][T24035] erofs: (device loop0): mounted with root inode @ nid 36. [ 790.869292][T24062] loop6: detected capacity change from 0 to 64 [ 790.954585][T24062] syz.6.8595: attempt to access beyond end of device [ 790.954585][T24062] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 790.989061][T24068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8597'. [ 791.055404][T24062] buffer_io_error: 14 callbacks suppressed [ 791.055420][T24062] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 791.109754][T24071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8598'. [ 791.198673][T24062] syz.6.8595: attempt to access beyond end of device [ 791.198673][T24062] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 791.311162][T24062] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 791.379439][T24082] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8603'. [ 791.404673][T24082] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8603'. [ 791.779713][T24096] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 792.311372][T24122] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8623'. [ 792.355581][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8623'. [ 792.385373][T24122] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8623'. [ 792.460971][ T26] audit: type=1326 audit(806.800:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24126 comm="syz.7.8626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 792.547209][ T26] audit: type=1326 audit(806.800:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24126 comm="syz.7.8626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 792.663700][T24136] kernel profiling enabled (shift: 63) [ 792.692013][T24136] profiling shift: 63 too large [ 792.791744][T24141] loop7: detected capacity change from 0 to 64 [ 792.880158][ T9726] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 793.074722][ T9726] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 793.108799][ T9726] usb 6-1: config 0 has no interface number 0 [ 793.116360][ T9726] usb 6-1: config 0 interface 222 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 793.145611][ T9726] usb 6-1: config 0 interface 222 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 793.182649][ T9726] usb 6-1: config 0 interface 222 has no altsetting 0 [ 793.228165][ T9726] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 793.257248][ T9726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.298362][ T9726] usb 6-1: Product: syz [ 793.303005][ T9726] usb 6-1: Manufacturer: syz [ 793.307631][ T9726] usb 6-1: SerialNumber: syz [ 793.348678][ T9726] usb 6-1: config 0 descriptor?? [ 793.366461][T24135] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 793.403924][T24135] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 793.412244][ T9726] ums-alauda 6-1:0.222: USB Mass Storage device detected [ 793.461386][ T9726] scsi host1: usb-storage 6-1:0.222 [ 794.058919][T24190] bond0: option arp_validate: invalid value (18446744073491447809) [ 794.059557][ T4374] bond0: (slave bond_slave_0): interface is now down [ 794.106848][ T4374] bond0: (slave bond_slave_1): interface is now down [ 794.118995][ T4374] bond0: (slave netdevsim0): interface is now down [ 794.125893][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 794.133270][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 794.158609][ T4374] bond0: now running without any active interface! [ 794.384639][T24198] No such timeout policy "syz1" [ 794.437243][ T9062] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 794.497707][ T9062] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 794.533848][T24197] team0: Port device syz_tun removed [ 794.542795][ T4316] usb 6-1: USB disconnect, device number 7 [ 794.550235][ T11] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 794.557295][T24197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 794.580593][ T9062] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 794.604843][T24197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 794.611904][ T4951] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 794.626204][ T9062] scsi 1:0:0:1: Attached scsi generic sg2 type 0 [ 794.642056][T24197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 794.651478][ T4374] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 794.663197][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 794.703855][ T4374] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 794.718929][T24197] device bridge_slave_0 left promiscuous mode [ 794.734859][ T4374] sd 1:0:0:1: [sdc] Sense not available. [ 794.752936][T24197] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.770634][ T4374] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 794.793755][ T4374] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 794.802579][T24197] device bridge_slave_1 left promiscuous mode [ 794.809291][ T4374] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 794.832352][ T4374] sd 1:0:0:1: [sdc] Asking for cache data failed [ 794.836714][T24197] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.857184][ T4374] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 794.883173][T24197] bond0: (slave bond_slave_0): Releasing backup interface [ 794.919065][ T4374] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 794.948283][T24197] bond0: (slave bond_slave_1): Releasing backup interface [ 795.053967][T24197] team0: Port device team_slave_0 removed [ 795.112466][T24197] team0: Port device team_slave_1 removed [ 795.135961][T24197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.158348][T24197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.203412][T24197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.221169][T24197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.274543][T24197] bond0: (slave netdevsim0): Releasing backup interface [ 795.534711][ T4407] udevd[4407]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 795.561694][ T4951] udevd[4951]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 795.865587][T24236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.882395][ T7842] udevd[7842]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 795.900015][T24240] device wireguard0 entered promiscuous mode [ 795.978701][ T4951] udevd[4951]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 796.518651][T24259] loop1: detected capacity change from 0 to 1024 [ 796.584025][T24259] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 796.644811][T24259] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 796.739586][T24259] EXT4-fs error (device loop1): ext4_get_journal_inode:5756: inode #5: comm syz.1.8685: unexpected bad inode w/o EXT4_IGET_BAD [ 796.813431][T24259] EXT4-fs (loop1): no journal found [ 796.818677][T24259] EXT4-fs (loop1): can't get journal size [ 796.862734][T24277] openvswitch: netlink: Message has 4 unknown bytes. [ 796.898729][T24259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0102] [ 796.975695][T24259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 797.215004][T24291] usb usb1: usbfs: process 24291 (syz.5.8700) did not claim interface 0 before use [ 797.240346][T24294] tmpfs: Bad value for 'mpol' [ 797.289714][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 797.313127][T24296] tmpfs: Bad value for 'mpol' [ 797.467652][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8706'. [ 797.516362][T24298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.736368][T24310] netlink: 'syz.5.8710': attribute type 3 has an invalid length. [ 797.743530][T24314] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8712'. [ 798.174483][ T7048] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 798.370147][ T7048] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 798.404377][ T7048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.450332][ T7048] usb 2-1: Product: syz [ 798.454545][ T7048] usb 2-1: Manufacturer: syz [ 798.479591][ T7048] usb 2-1: SerialNumber: syz [ 798.506790][ T7048] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 798.564710][ T7048] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 798.974309][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 798.974325][ T26] audit: type=1400 audit(813.638:242): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=24358 comm="syz.7.8734" [ 799.032494][ T4339] usb 2-1: USB disconnect, device number 21 [ 799.141481][T24365] netlink: 'syz.0.8738': attribute type 30 has an invalid length. [ 799.603292][ T7048] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 799.610316][ T7048] ath9k_htc: Failed to initialize the device [ 799.645530][ T4339] usb 2-1: ath9k_htc: USB layer deinitialized [ 799.743055][T24387] loop5: detected capacity change from 0 to 256 [ 799.791630][T24387] exfat: Deprecated parameter 'utf8' [ 799.849912][T24387] exfat: Deprecated parameter 'namecase' [ 799.885928][T24387] exfat: Deprecated parameter 'namecase' [ 799.923930][T24387] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 800.842425][T24427] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8769'. [ 800.874524][T24431] netlink: zone id is out of range [ 801.000166][T24399] loop1: detected capacity change from 0 to 32768 [ 801.049812][T24433] loop7: detected capacity change from 0 to 256 [ 801.090794][T24399] jfs_lookup: dtSearch returned -5 [ 801.096801][T24433] FAT-fs (loop7): Directory bread(block 64) failed [ 801.116265][ T4339] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 801.125889][T24433] FAT-fs (loop7): Directory bread(block 65) failed [ 801.164188][T24433] FAT-fs (loop7): Directory bread(block 66) failed [ 801.170764][T24433] FAT-fs (loop7): Directory bread(block 67) failed [ 801.200307][T24433] FAT-fs (loop7): Directory bread(block 68) failed [ 801.224620][T24399] Process accounting paused [ 801.229214][T24433] FAT-fs (loop7): Directory bread(block 69) failed [ 801.272136][T24433] FAT-fs (loop7): Directory bread(block 70) failed [ 801.316382][T24433] FAT-fs (loop7): Directory bread(block 71) failed [ 801.318255][ T4339] usb 1-1: config 0 interface 0 has no altsetting 0 [ 801.340590][T24433] FAT-fs (loop7): Directory bread(block 72) failed [ 801.357259][T24433] FAT-fs (loop7): Directory bread(block 73) failed [ 801.363691][ T4339] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 801.372845][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.413688][ T4339] usb 1-1: config 0 descriptor?? [ 801.430111][ T4339] usb 1-1: selecting invalid altsetting 0 [ 801.485774][ T4339] usb 1-1: can't set first interface for hiFace device. [ 801.503504][ T4339] snd-usb-hiface: probe of 1-1:0.0 failed with error -5 [ 801.617458][ T4339] usb 1-1: USB disconnect, device number 2 [ 801.828343][T24428] loop6: detected capacity change from 0 to 40427 [ 801.868282][T24428] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 801.895471][T24428] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 801.978621][T24428] F2FS-fs (loop6): Found nat_bits in checkpoint [ 802.019855][T24458] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 802.143162][T24428] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 802.177027][T24428] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 802.624690][T24478] loop1: detected capacity change from 0 to 22 [ 802.684405][T24478] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 802.719479][T24478] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 803.096585][ T4339] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 803.158953][T24468] loop0: detected capacity change from 0 to 32768 [ 803.296523][ T4339] usb 8-1: Using ep0 maxpacket: 32 [ 803.312608][ T4339] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 803.326644][ T4339] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 803.338647][ T4339] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 803.359799][ T4339] usb 8-1: config 1 has no interface number 0 [ 803.368654][ T4339] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 803.388975][ T4339] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 803.417179][ T4339] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 803.448952][ T4339] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.494126][ T4339] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 803.682292][ T4339] snd_usb_pod 8-1:1.1: invalid control EP [ 803.692667][T24510] netlink: 'syz.1.8804': attribute type 1 has an invalid length. [ 803.699987][ T4339] snd_usb_pod 8-1:1.1: cannot start listening: -22 [ 803.716069][ T4339] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 803.746559][ T4339] snd_usb_pod: probe of 8-1:1.1 failed with error -22 [ 803.814645][T24514] loop5: detected capacity change from 0 to 764 [ 803.846218][T24514] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 803.898717][ T7048] usb 8-1: USB disconnect, device number 3 [ 804.391377][T24534] loop1: detected capacity change from 0 to 512 [ 804.580258][T24542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 804.629709][T24534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 804.649874][T24542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 804.659271][T24542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 804.666842][T24542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 804.680840][T24542] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.716123][T24542] device bridge_slave_1 left promiscuous mode [ 804.724655][T24542] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.748520][T24542] bond0: (slave bond_slave_0): Releasing backup interface [ 804.756733][T24551] netlink: 15 bytes leftover after parsing attributes in process `syz.0.8822'. [ 804.778018][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 804.778370][T24542] bond0: (slave bond_slave_1): Releasing backup interface [ 804.820936][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8822'. [ 804.888245][ T7] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 804.960879][T24542] team0: Port device team_slave_0 removed [ 805.031349][T24542] team0: Port device team_slave_1 removed [ 805.044457][T24542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.077627][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 805.093141][T24542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.102444][ T7] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 805.115235][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.152998][ T7] usb 8-1: Product: syz [ 805.162502][ T7] usb 8-1: Manufacturer: syz [ 805.174515][ T7] usb 8-1: SerialNumber: syz [ 805.189809][T24542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.199396][ T7] usb 8-1: config 0 descriptor?? [ 805.221671][T24542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.414767][ T7] speedtch 8-1:0.0: speedtch_bind: data interface not found! [ 805.438364][ T7] speedtch 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 805.473299][T24570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8831'. [ 805.569174][T24576] netlink: 'syz.5.8833': attribute type 21 has an invalid length. [ 805.607179][T24576] netlink: 'syz.5.8833': attribute type 1 has an invalid length. [ 805.627666][ T9726] usb 8-1: USB disconnect, device number 4 [ 805.664358][T24576] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8833'. [ 805.880470][T24586] loop6: detected capacity change from 0 to 512 [ 805.916603][T24586] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 805.997556][T24586] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.8838: corrupted xattr entries [ 806.024111][T24586] EXT4-fs (loop6): Remounting filesystem read-only [ 806.031202][T24586] EXT4-fs (loop6): 1 truncate cleaned up [ 806.036967][T24586] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 806.063699][T24586] EXT4-fs (loop6): unmounting filesystem. [ 806.168109][T24595] team0: Port device syz_tun removed [ 806.182469][T24595] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 806.241540][T24595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.293275][T24595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.342764][T24595] device bridge_slave_0 left promiscuous mode [ 806.363630][T24595] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.398090][T24595] device bridge_slave_1 left promiscuous mode [ 806.453620][T24595] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.539873][T24595] bond0: (slave bond_slave_0): Releasing backup interface [ 806.551908][T24612] loop7: detected capacity change from 0 to 512 [ 806.568361][T24595] bond0: (slave bond_slave_1): Releasing backup interface [ 806.617732][T24612] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 806.665669][T24612] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.8851: bg 0: block 384: padding at end of block bitmap is not set [ 806.667682][T24595] team0: Port device team_slave_1 removed [ 806.697546][T24595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.705499][T24595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.715122][T24595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.722547][T24595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.723744][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 806.777784][T24620] unsupported nla_type 34 [ 806.788930][T24612] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 806.838442][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 806.846256][T24612] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.8851: attempt to clear invalid blocks 983260 len 1 [ 806.899238][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 806.929700][T24612] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.8851: Invalid inode table block 0 in block_group 0 [ 806.952755][T24626] loop0: detected capacity change from 0 to 8 [ 806.960338][T24595] team0: Port device wlan1 removed [ 806.964198][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 806.995485][T24612] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 807.009041][T24626] SQUASHFS error: Unable to read inode 0xa7 [ 807.095747][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 807.130994][T24612] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 807.153064][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 807.181556][T24612] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.8851: Invalid inode table block 0 in block_group 0 [ 807.187248][T24630] loop5: detected capacity change from 0 to 512 [ 807.241678][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 807.243571][T24630] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 807.255042][T24612] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 807.280670][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 807.324286][T24612] EXT4-fs error (device loop7): ext4_truncate:4318: inode #11: comm syz.7.8851: mark_inode_dirty error [ 807.352427][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 807.381584][T24612] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 807.410369][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 807.416966][T24612] EXT4-fs (loop7): 1 truncate cleaned up [ 807.441129][T24630] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.8858: inode has both inline data and extents flags [ 807.470326][T24612] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 807.547792][T24630] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.8858: couldn't read orphan inode 15 (err -117) [ 807.560330][T24630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 807.612332][T24612] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.8851: Invalid inode table block 0 in block_group 0 [ 807.665005][T24612] EXT4-fs (loop7): Remounting filesystem read-only [ 807.799546][T23514] EXT4-fs (loop7): unmounting filesystem. [ 807.809473][T24650] nft_compat: unsupported protocol 5 [ 807.886986][T21250] EXT4-fs (loop5): unmounting filesystem. [ 807.987108][T24653] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8870'. [ 808.230401][T24664] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 24664 comm: syz.7.8875) [ 809.151618][T24698] loop5: detected capacity change from 0 to 4096 [ 809.187813][T24704] device netdevsim0 entered promiscuous mode [ 809.226439][T24698] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 809.240481][T24704] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 809.268018][T24698] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 809.321223][T24698] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 809.411384][T24698] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 809.575322][T24698] ntfs: volume version 3.1. [ 809.641934][T24698] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 809.715291][T24698] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 809.762410][T24698] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 809.870729][T24698] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 809.882322][T24698] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 810.075441][ T9726] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 810.281425][ T9726] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 810.298050][ T9726] usb 7-1: config 8 has no interface number 0 [ 810.332574][ T9726] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 810.369176][ T9726] usb 7-1: config 8 interface 177 has no altsetting 0 [ 810.405345][ T9726] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 810.435202][ T9726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.463284][T24727] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 810.720432][ T9726] usb 7-1: string descriptor 0 read error: -71 [ 810.734524][ C0] ir_toy 7-1:8.177: out urb status: -71 [ 810.789172][T24761] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 810.789172][T24761] program syz.0.8924 not setting count and/or reply_len properly [ 811.315398][ T26] audit: type=1326 audit(826.609:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24785 comm="syz.7.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 811.418100][ T9726] ir_toy 7-1:8.177: could not write reset command: -110 [ 811.425274][ T9726] ir_toy: probe of 7-1:8.177 failed with error -110 [ 811.465624][ T9726] usb 7-1: USB disconnect, device number 2 [ 811.660536][T24795] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 811.750996][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 811.920053][T24805] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8944'. [ 811.943182][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 811.960125][ T7] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 811.977266][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.986651][T24805] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8944'. [ 812.007037][T24805] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 812.024198][ T7] usb 2-1: config 0 descriptor?? [ 812.035433][ T7] usb 2-1: selecting invalid altsetting 0 [ 812.052775][ T7] usb 2-1: can't set first interface for hiFace device. [ 812.065272][ T7] snd-usb-hiface: probe of 2-1:0.0 failed with error -5 [ 812.104191][T24805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.233311][ T14] usb 2-1: USB disconnect, device number 22 [ 812.244462][T24819] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8949'. [ 812.756657][T24840] Unsupported ieee802154 address type: 0 [ 812.998992][ T7043] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 813.208117][ T7043] usb 6-1: Using ep0 maxpacket: 32 [ 813.215107][ T7043] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.251297][ T7043] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 813.287207][ T7043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.322031][ T7043] usb 6-1: Product: syz [ 813.326240][ T7043] usb 6-1: Manufacturer: syz [ 813.330849][ T7043] usb 6-1: SerialNumber: syz [ 813.379021][ T7043] usb 6-1: config 0 descriptor?? [ 813.408115][ T7043] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 813.593289][ T7043] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 813.612723][ T7043] quatech2: probe of 6-1:0.0 failed with error -8 [ 813.631214][T24877] loop7: detected capacity change from 0 to 512 [ 813.670604][T24870] loop1: detected capacity change from 0 to 8192 [ 813.777167][T24877] EXT4-fs error (device loop7): ext4_iget_extra_inode:4756: inode #15: comm syz.7.8980: corrupted in-inode xattr [ 813.832318][ T7] usb 6-1: USB disconnect, device number 8 [ 813.906854][T24877] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.8980: couldn't read orphan inode 15 (err -117) [ 813.961584][T24877] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 814.326966][T23514] EXT4-fs (loop7): unmounting filesystem. [ 814.479113][T24893] netlink: 'syz.7.8985': attribute type 1 has an invalid length. [ 814.521020][T24893] netlink: 220 bytes leftover after parsing attributes in process `syz.7.8985'. [ 814.579227][T24893] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8985'. [ 815.157826][T24922] loop1: detected capacity change from 0 to 512 [ 815.271471][T24922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 815.552968][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 815.922186][T24955] ubi30: attaching mtd0 [ 815.926879][T24955] ubi30 error: ubi_attach_mtd_dev: bad VID header (10535) or data offsets (10599) [ 816.429140][T24980] xt_CONNSECMARK: invalid mode: 0 [ 816.611885][T24988] loop6: detected capacity change from 0 to 8 [ 816.639113][T24988] SQUASHFS error: zlib decompression failed, data probably corrupt [ 816.667119][T24988] SQUASHFS error: Failed to read block 0x9b: -5 [ 816.673412][T24988] SQUASHFS error: Unable to read metadata cache entry [99] [ 816.721375][T24988] SQUASHFS error: Unable to read inode 0x127 [ 818.657259][T25074] wlan1: mtu greater than device maximum [ 818.722837][T25082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 818.724278][T25071] loop6: detected capacity change from 0 to 4096 [ 818.816065][T25071] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 818.936914][T25071] ntfs3: loop6: failed to convert "c46c" to cp936 [ 819.503471][T25111] xt_policy: output policy not valid in PREROUTING and INPUT [ 819.973514][T25119] loop1: detected capacity change from 0 to 8192 [ 820.151381][T25138] device wlan0 entered promiscuous mode [ 820.317065][T25144] openvswitch: netlink: Missing key (keys=40, expected=80) [ 820.493638][T25152] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9102'. [ 820.539315][T25152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9102'. [ 821.111770][T25180] fuse: Bad value for 'fd' [ 821.249836][T25186] loop0: detected capacity change from 0 to 512 [ 821.321589][T25186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 821.412972][T25186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 821.440927][T25189] loop1: detected capacity change from 0 to 1764 [ 821.544963][T25186] __quota_error: 3 callbacks suppressed [ 821.544979][T25186] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 821.651156][T25186] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 821.693457][T25186] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.9116: Failed to acquire dquot type 0 [ 822.006117][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 822.438394][T25238] netlink: 'syz.7.9138': attribute type 5 has an invalid length. [ 822.609119][T25246] netlink: 'syz.5.9141': attribute type 21 has an invalid length. [ 822.649096][T25242] loop1: detected capacity change from 0 to 4096 [ 822.655727][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9141'. [ 822.734431][T25250] netlink: 'syz.7.9143': attribute type 2 has an invalid length. [ 822.762016][T25242] ntfs: volume version 3.1. [ 822.843128][T25250] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9143'. [ 823.195068][T25265] loop1: detected capacity change from 0 to 164 [ 823.300798][T25267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.576362][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 823.776661][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 823.783431][ T7] usb 8-1: config 0 has an invalid interface number: 96 but max is 0 [ 823.819900][ T7] usb 8-1: config 0 has no interface number 0 [ 823.852557][ T7] usb 8-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 823.888037][ T7] usb 8-1: config 0 interface 96 has no altsetting 0 [ 823.936171][T25255] loop0: detected capacity change from 0 to 32768 [ 823.943824][ T7] usb 8-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 823.965369][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.992161][ T7] usb 8-1: Product: syz [ 824.000691][ T7] usb 8-1: Manufacturer: syz [ 824.010742][ T7] usb 8-1: SerialNumber: syz [ 824.022977][ T7] usb 8-1: config 0 descriptor?? [ 824.086600][T25255] XFS (loop0): Mounting V5 Filesystem [ 824.100777][T25298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9161'. [ 824.155981][T25305] loop6: detected capacity change from 0 to 64 [ 824.195128][T25255] XFS (loop0): Ending clean mount [ 824.258277][ T4339] XFS (loop0): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 824.309536][ T4339] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 824.375901][ T4339] XFS (loop0): Unmount and run xfs_repair [ 824.391155][ T4339] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 824.408731][ T4339] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 824.427876][ T4339] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 824.440536][ T4339] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 824.476284][ T4339] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 824.515245][ T4339] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 824.533352][ T4339] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 824.542653][ T4339] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 824.567054][ T4339] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 824.586794][T25255] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 824.587718][ T7043] usb 8-1: USB disconnect, device number 5 [ 824.613550][T25255] XFS (loop0): Failed to initialize disk quotas. [ 824.685972][T25316] loop5: detected capacity change from 0 to 128 [ 824.783838][ T4277] XFS (loop0): Unmounting Filesystem [ 825.001607][T25324] loop6: detected capacity change from 0 to 512 [ 825.087852][T25324] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 825.178477][T25324] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #12: block 32: comm syz.6.9173: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 825.261215][T25324] EXT4-fs (loop6): Remounting filesystem read-only [ 825.295666][T25324] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #12: comm syz.6.9173: directory missing '.' [ 825.347886][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 825.434483][T23466] EXT4-fs (loop6): unmounting filesystem. [ 825.447769][ T7043] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 825.578190][T25343] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 825.606217][T25343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.622331][T25345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9180'. [ 825.651695][ T7043] usb 6-1: Using ep0 maxpacket: 16 [ 825.660603][ T7043] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 825.690044][ T7043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.717966][ T7043] usb 6-1: Product: syz [ 825.750101][ T7043] usb 6-1: Manufacturer: syz [ 825.754763][ T7043] usb 6-1: SerialNumber: syz [ 825.767788][ T7043] usb 6-1: config 0 descriptor?? [ 825.802624][T25347] loop0: detected capacity change from 0 to 8 [ 825.835579][T25347] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 825.886450][ T7842] udevd[7842]: incorrect cramfs checksum on /dev/loop0 [ 825.893139][T25347] cramfs: Error -3 while decompressing! [ 825.911932][T25347] cramfs: ffffffff96d891e8(26)->ffff88804251e000(4096) [ 825.938545][T25347] cramfs: Error -3 while decompressing! [ 825.962544][T25347] cramfs: ffffffff96d89202(26)->ffff888051fb9000(4096) [ 825.972472][ T7043] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 825.985345][T25347] cramfs: Error -3 while decompressing! [ 826.010668][T25347] cramfs: ffffffff96d8921c(16)->ffff888051882000(4096) [ 826.014864][ T7043] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 826.040487][ T7842] udevd[7842]: incorrect cramfs checksum on /dev/loop0 [ 826.054722][T25347] cramfs: Error -3 while decompressing! [ 826.060494][T25347] cramfs: ffffffff96d891e8(26)->ffff88804251e000(4096) [ 826.089901][T25332] loop7: detected capacity change from 0 to 32768 [ 826.181615][ T7043] usb 6-1: USB disconnect, device number 9 [ 826.261154][T25332] XFS (loop7): Mounting V5 Filesystem [ 826.399627][T25332] XFS (loop7): Ending clean mount [ 826.430716][ T26] audit: type=1326 audit(842.479:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.1.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 826.537781][ T26] audit: type=1326 audit(842.521:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.1.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 826.552776][T25377] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.9193'. [ 826.599931][T23514] XFS (loop7): Unmounting Filesystem [ 826.630745][ T26] audit: type=1326 audit(842.521:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.1.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 826.630855][T25377] openvswitch: netlink: Message has 48126 unknown bytes. [ 826.652544][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.681259][ T26] audit: type=1326 audit(842.521:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.1.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 826.702992][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.877538][T25383] loop6: detected capacity change from 0 to 8 [ 826.942442][T25383] cramfs: bad data blocksize 3222268820 [ 826.968376][T25387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9200'. [ 826.978574][T25383] cramfs: bad data blocksize 3222268820 [ 826.984294][ T26] audit: type=1800 audit(843.067:251): pid=25383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9198" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 827.368177][T25399] netlink: 'syz.0.9205': attribute type 17 has an invalid length. [ 827.392062][T25399] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9205'. [ 827.505406][T25407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9196'. [ 827.545229][T25407] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9196'. [ 827.571094][T25407] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9196'. [ 827.650453][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9211'. [ 827.691944][T25413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.698053][T25415] loop0: detected capacity change from 0 to 164 [ 828.034556][T25430] xt_connbytes: Forcing CT accounting to be enabled [ 828.431894][T25448] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9228'. [ 828.693013][T25459] device sit0 entered promiscuous mode [ 828.741674][T25462] loop1: detected capacity change from 0 to 8 [ 828.743571][T25459] netlink: 'syz.0.9233': attribute type 1 has an invalid length. [ 828.767306][T25462] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 828.815473][T25459] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9233'. [ 828.820984][T25462] cramfs: Error -3 while decompressing! [ 828.859992][T25462] cramfs: ffffffff96d8d1e8(26)->ffff888040130000(4096) [ 828.877659][T25462] cramfs: Error -5 while decompressing! [ 828.890623][T25462] cramfs: ffffffff96d8d202(26)->ffff888044c02000(4096) [ 828.946030][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 828.946678][T25462] cramfs: Error -3 while decompressing! [ 828.991758][T25462] cramfs: ffffffff96d8d21c(16)->ffff888030e29000(4096) [ 829.003758][T25462] cramfs: Error -3 while decompressing! [ 829.024487][T25462] cramfs: ffffffff96d8d1e8(26)->ffff888040130000(4096) [ 829.039610][ T26] audit: type=1800 audit(845.220:252): pid=25462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9237" name="file3" dev="loop1" ino=348 res=0 errno=0 [ 829.129018][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.155903][ T7] usb 7-1: config 0 interface 0 has no altsetting 0 [ 829.181019][ T7] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 829.212069][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.240770][ T7] usb 7-1: Product: syz [ 829.251011][ T7] usb 7-1: Manufacturer: syz [ 829.261485][ T7] usb 7-1: SerialNumber: syz [ 829.275301][ T7] usb 7-1: config 0 descriptor?? [ 829.293981][ T7] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 829.316357][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 829.366070][ T7] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 829.414195][ T7] usb 7-1: media controller created [ 829.459310][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.614083][T25496] loop0: detected capacity change from 0 to 8 [ 829.757650][ T7] DVB: Unable to find symbol tda10046_attach() [ 829.763859][ T7] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 829.791839][ T7] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 829.801732][T25499] Process accounting resumed [ 829.990322][T25506] netlink: 'syz.1.9256': attribute type 1 has an invalid length. [ 830.024375][ T7] dvb_usb_m920x: probe of 7-1:0.0 failed with error -71 [ 830.076460][ T7] usb 7-1: USB disconnect, device number 3 [ 830.688787][ T4339] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 830.796628][T25538] xt_ecn: cannot match TCP bits for non-tcp packets [ 830.816910][ T7043] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 830.870757][ T4339] usb 6-1: Using ep0 maxpacket: 32 [ 830.878244][ T4339] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 830.913305][ T4339] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 830.924820][ T4339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.938423][ T4339] usb 6-1: Product: syz [ 830.942616][ T4339] usb 6-1: Manufacturer: syz [ 830.950437][ T4339] usb 6-1: SerialNumber: syz [ 830.963800][ T4339] usb 6-1: config 0 descriptor?? [ 830.975857][T25522] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 831.002977][ T7043] usb 2-1: Using ep0 maxpacket: 8 [ 831.010009][ T7043] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 831.019585][ T4339] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input55 [ 831.041412][ T7043] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.123110][ T7043] usb 2-1: config 0 has no interface number 0 [ 831.157813][ T7043] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 831.205564][ T7043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.238081][ T7043] usb 2-1: Product: syz [ 831.265037][ T7043] usb 2-1: Manufacturer: syz [ 831.274318][ T7043] usb 2-1: SerialNumber: syz [ 831.282901][T25550] __nla_validate_parse: 3 callbacks suppressed [ 831.282916][T25550] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9278'. [ 831.286981][ T7043] usb 2-1: config 0 descriptor?? [ 831.307528][T25550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9278'. [ 831.353759][ T4339] usb 6-1: USB disconnect, device number 10 [ 831.359800][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 831.445937][T25556] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 831.516123][ T7043] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 831.526904][ T7043] usb 2-1: No valid video chain found. [ 831.741159][ T4339] usb 2-1: USB disconnect, device number 23 [ 831.978504][T25555] loop0: detected capacity change from 0 to 32768 [ 832.038452][T25555] (syz.0.9280,25555,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 832.116732][T25555] (syz.0.9280,25555,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 832.196518][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9292'. [ 832.209500][T25555] (syz.0.9280,25555,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 832.241189][T25555] JBD2: Ignoring recovery information on journal [ 832.424317][T25555] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 832.811797][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 833.025708][T25615] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9308'. [ 833.054695][T25615] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9308'. [ 833.066020][ T4339] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 833.245787][T25621] loop5: detected capacity change from 0 to 64 [ 833.268663][ T4339] usb 8-1: Using ep0 maxpacket: 8 [ 833.275864][ T4339] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 833.335615][ T4339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 833.375263][ T4339] usb 8-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 833.420495][ T4339] usb 8-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 833.448698][ T4339] usb 8-1: Product: syz [ 833.459248][ T4339] usb 8-1: Manufacturer: syz [ 833.466926][ T4339] usb 8-1: SerialNumber: syz [ 833.481093][ T4339] usb 8-1: config 0 descriptor?? [ 833.491150][ T4339] smsusb:smsusb_probe: board id=2, interface number 0 [ 833.506259][ T4339] smsusb:smsusb_probe: Device initialized with return code -19 [ 833.719702][ T4339] usb 8-1: USB disconnect, device number 6 [ 834.017675][T25636] wg1 speed is unknown, defaulting to 1000 [ 834.591536][T25665] overlayfs: unrecognized mount option "\" or missing value [ 834.598296][T25666] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 834.935307][ T14] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 834.964745][T25681] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9339'. [ 835.089216][T25682] loop5: detected capacity change from 0 to 4096 [ 835.116191][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 835.131149][ T14] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 835.150248][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.191066][ T14] usb 2-1: config 0 has no interface number 0 [ 835.214515][ T14] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.267718][T25692] netlink: 'syz.0.9344': attribute type 4 has an invalid length. [ 835.276385][ T14] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 835.305567][T25692] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9344'. [ 835.325532][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.333565][ T14] usb 2-1: Product: syz [ 835.342219][ T14] usb 2-1: Manufacturer: syz [ 835.357529][ T14] usb 2-1: SerialNumber: syz [ 835.369477][ T14] usb 2-1: config 0 descriptor?? [ 835.775118][T25706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.796513][ T14] usb 2-1: USB disconnect, device number 24 [ 835.824539][ T4951] udevd[4951]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.842927][T25706] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 835.883326][T25706] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 836.005438][T25714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 836.258883][ T26] audit: type=1326 audit(852.814:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884839bf79 code=0x7ffc0000 [ 836.325031][ T26] audit: type=1326 audit(852.835:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884839bf79 code=0x7ffc0000 [ 836.411003][ T26] audit: type=1326 audit(852.845:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f884839bf79 code=0x7ffc0000 [ 836.432570][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.492553][ T26] audit: type=1326 audit(852.845:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884839bf79 code=0x7ffc0000 [ 836.514287][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.587006][ T26] audit: type=1326 audit(852.845:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884839bf79 code=0x7ffc0000 [ 836.801857][ T4339] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 836.852860][T25742] MTD: Couldn't look up './bus': -15 [ 837.020704][ T4339] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.048645][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 837.073810][T25722] loop0: detected capacity change from 0 to 32768 [ 837.089216][ T4339] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 837.151324][ T4339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.159978][ T4339] usb 6-1: Product: syz [ 837.164617][ T4339] usb 6-1: Manufacturer: syz [ 837.169239][ T4339] usb 6-1: SerialNumber: syz [ 837.176027][ T4339] usb 6-1: config 0 descriptor?? [ 837.184770][ T4339] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 837.185356][T25722] XFS (loop0): Mounting V5 Filesystem [ 837.199883][ T4339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 837.210955][ T4339] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 837.219613][ T4339] usb 6-1: media controller created [ 837.239451][ T4339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.371482][ T4339] DVB: Unable to find symbol tda10046_attach() [ 837.392290][T25722] XFS (loop0): Ending clean mount [ 837.398456][ T4339] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 837.434805][ T4339] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 837.478043][ T8241] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 837.661199][ T4277] XFS (loop0): Unmounting Filesystem [ 837.677820][ T4339] dvb_usb_m920x: probe of 6-1:0.0 failed with error -71 [ 837.707493][ T4339] usb 6-1: USB disconnect, device number 11 [ 837.849082][ T9726] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 838.105857][ T9726] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 838.131786][T25783] loop1: detected capacity change from 0 to 764 [ 838.403928][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9391'. [ 838.589289][T25799] x_tables: duplicate underflow at hook 3 [ 838.772123][T25805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9396'. [ 838.829276][ T9726] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 838.849597][ T9726] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.718167][T25817] loop7: detected capacity change from 0 to 32768 [ 839.743265][ T9726] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.939636][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9420'. [ 839.983628][T25854] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 839.996356][T25854] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 840.428128][T25862] loop0: detected capacity change from 0 to 4096 [ 840.464392][T25862] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 840.518174][T25862] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 841.022417][T25878] loop5: detected capacity change from 0 to 512 [ 841.109963][T25878] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 841.249776][T25878] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 841.287564][T25890] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 841.295932][T25878] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 841.331283][T25890] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 841.362400][T25893] loop0: detected capacity change from 0 to 512 [ 841.431439][T25893] EXT4-fs (loop0): orphan cleanup on readonly fs [ 841.483513][T25893] Quota error (device loop0): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 841.535475][T25893] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 841.559994][T21250] EXT4-fs (loop5): unmounting filesystem. [ 841.619114][T25893] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 841.634628][T25893] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.9438: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 841.734236][T25893] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9438: couldn't read orphan inode 13 (err -117) [ 841.778830][T25893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 841.953117][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 842.145901][T25917] openvswitch: netlink: Key type 29 is not supported [ 842.371169][ T14] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 842.398747][T25900] loop1: detected capacity change from 0 to 32768 [ 842.407858][T25921] loop6: detected capacity change from 0 to 4096 [ 842.435846][T25900] (syz.1.9440,25900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 842.517236][T25900] (syz.1.9440,25900,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 842.563219][ T14] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 842.577931][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.618997][ T14] usb 6-1: config 0 has no interface number 0 [ 842.669489][ T14] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 842.704090][T25900] (syz.1.9440,25900,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 842.704113][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.704134][ T14] usb 6-1: Product: syz [ 842.730296][ T14] usb 6-1: Manufacturer: syz [ 842.739718][ T14] usb 6-1: SerialNumber: syz [ 842.746550][ T14] usb 6-1: config 0 descriptor?? [ 842.760943][T25936] xt_TCPMSS: Only works on TCP SYN packets [ 842.762611][ T14] hub 6-1:0.31: bad descriptor, ignoring hub [ 842.778151][ T14] hub: probe of 6-1:0.31 failed with error -5 [ 842.785877][ T14] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 842.792428][ T14] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 842.804213][ T14] usb 6-1: Failed to create links for entity 6 [ 842.810477][ T14] usb 6-1: Failed to register entities (-22). [ 842.841091][T25900] JBD2: Ignoring recovery information on journal [ 843.013251][T25900] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 843.022892][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 843.113830][ T8241] usb 6-1: USB disconnect, device number 12 [ 843.222966][T25949] loop6: detected capacity change from 0 to 64 [ 843.263955][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 843.668479][T25964] loop5: detected capacity change from 0 to 8 [ 843.681026][T25964] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 843.682387][ T26] audit: type=1326 audit(860.597:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25963 comm="syz.6.9472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762439bf79 code=0x0 [ 843.711441][T25964] cramfs: Error -3 while decompressing! [ 843.733088][T25964] cramfs: ffffffff96d891e8(26)->ffff888052741000(4096) [ 843.740249][T25964] cramfs: Error 2 while decompressing! [ 843.774111][ T4951] udevd[4951]: incorrect cramfs checksum on /dev/loop5 [ 843.837457][T25964] cramfs: ffffffff96d89202(26)->ffff888052742000(4096) [ 843.844370][T25964] cramfs: Error -3 while decompressing! [ 843.869085][ T4951] udevd[4951]: incorrect cramfs checksum on /dev/loop5 [ 843.879701][T25972] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9473'. [ 843.894902][T25964] cramfs: ffffffff96d8921c(16)->ffff888052743000(4096) [ 843.901816][T25964] cramfs: Error -3 while decompressing! [ 843.924972][T25964] cramfs: ffffffff96d891e8(26)->ffff888052741000(4096) [ 844.056210][ T8241] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 844.247066][ T8241] usb 2-1: Using ep0 maxpacket: 8 [ 844.254107][ T8241] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 844.280704][ T8241] usb 2-1: config 179 has no interface number 0 [ 844.294878][ T8241] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 844.340836][ T8241] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 844.371130][ T8241] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 844.402104][ T8241] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 844.446586][ T8241] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 844.485207][ T8241] usb 2-1: config 179 interface 65 has no altsetting 0 [ 844.492170][ T8241] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 844.521362][ T8241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.587724][ T8241] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input57 [ 844.737607][T26001] loop0: detected capacity change from 0 to 1024 [ 844.770309][T26001] hfsplus: Filesystem is marked locked, mounting read-only. [ 844.794394][T26004] netlink: set zone limit has 4 unknown bytes [ 844.852543][ T4339] usb 2-1: USB disconnect, device number 25 [ 844.852597][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 844.869191][ T4339] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 844.910047][T26002] loop5: detected capacity change from 0 to 4096 [ 845.740810][T26035] loop1: detected capacity change from 0 to 512 [ 845.841431][T26035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 845.906557][T26045] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 845.971568][ T26] audit: type=1326 audit(863.012:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26046 comm="syz.7.9512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 846.007950][ T26] audit: type=1326 audit(863.033:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26046 comm="syz.7.9512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 846.009180][T26035] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 846.029604][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.074591][T26035] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 846.100293][ T26] audit: type=1326 audit(863.033:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26046 comm="syz.7.9512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 846.122062][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.304994][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 846.416305][T26058] loop7: detected capacity change from 0 to 2048 [ 846.471936][T26067] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 846.772666][T26067] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 846.825553][T26067] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 846.898398][T26067] Remounting filesystem read-only [ 846.912582][T23514] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 846.945018][T26081] loop1: detected capacity change from 0 to 256 [ 847.096243][T26081] FAT-fs (loop1): Directory bread(block 64) failed [ 847.102822][T26081] FAT-fs (loop1): Directory bread(block 65) failed [ 847.169498][T26081] FAT-fs (loop1): Directory bread(block 66) failed [ 847.179065][T26081] FAT-fs (loop1): Directory bread(block 67) failed [ 847.205109][T26081] FAT-fs (loop1): Directory bread(block 68) failed [ 847.217301][T26081] FAT-fs (loop1): Directory bread(block 69) failed [ 847.233934][T26081] FAT-fs (loop1): Directory bread(block 70) failed [ 847.264756][T26081] FAT-fs (loop1): Directory bread(block 71) failed [ 847.293518][T26081] FAT-fs (loop1): Directory bread(block 72) failed [ 847.319537][T26081] FAT-fs (loop1): Directory bread(block 73) failed [ 847.476463][T26099] loop0: detected capacity change from 0 to 128 [ 847.516280][T26099] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 847.639334][T26099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.833641][T26079] comedi comedi2: reset error (fatal) [ 848.174553][T26124] tc_dump_action: action bad kind [ 848.393788][T26133] device macvlan1 entered promiscuous mode [ 848.559429][T26139] wg1 speed is unknown, defaulting to 1000 [ 848.664633][ T7048] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 848.877341][ T7048] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 848.899000][ T7048] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 848.922537][ T7048] usb 6-1: Product: syz [ 848.927391][ T7048] usb 6-1: SerialNumber: syz [ 848.958548][ T7048] usb 6-1: config 0 descriptor?? [ 849.163743][ T7048] hso 6-1:0.0: Failed to find BULK IN ep [ 849.247421][ T26] audit: type=1326 audit(866.447:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26168 comm="syz.1.9570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 849.330829][ T26] audit: type=1326 audit(866.447:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26168 comm="syz.1.9570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 849.357288][ T4339] usb 6-1: USB disconnect, device number 13 [ 849.427729][ T26] audit: type=1326 audit(866.478:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26168 comm="syz.1.9570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 849.497959][ T26] audit: type=1326 audit(866.478:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26168 comm="syz.1.9570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 849.539288][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.552009][T26181] netlink: 'syz.0.9575': attribute type 10 has an invalid length. [ 849.558675][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.566207][ T26] audit: type=1326 audit(866.478:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26168 comm="syz.1.9570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4318b9bf79 code=0x7ffc0000 [ 849.567424][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.599562][T26181] device veth1_macvtap left promiscuous mode [ 849.625468][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.633189][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.640740][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.659098][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.693134][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.716443][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.744422][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.773007][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.797802][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.814460][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.824590][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.843709][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.852715][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.869806][ T8241] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 849.899730][ T8241] hid-generic C990:0003:007F.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 850.442879][T26203] fido_id[26203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 850.748453][T26230] loop6: detected capacity change from 0 to 256 [ 850.855771][T26236] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 850.864374][T26230] FAT-fs (loop6): Directory bread(block 64) failed [ 850.870930][T26230] FAT-fs (loop6): Directory bread(block 65) failed [ 850.949867][T26230] FAT-fs (loop6): Directory bread(block 66) failed [ 850.978396][T26230] FAT-fs (loop6): Directory bread(block 67) failed [ 850.985044][T26230] FAT-fs (loop6): Directory bread(block 68) failed [ 851.024413][T26230] FAT-fs (loop6): Directory bread(block 69) failed [ 851.057600][T26230] FAT-fs (loop6): Directory bread(block 70) failed [ 851.076219][T26230] FAT-fs (loop6): Directory bread(block 71) failed [ 851.099387][T26230] FAT-fs (loop6): Directory bread(block 72) failed [ 851.161662][T26230] FAT-fs (loop6): Directory bread(block 73) failed [ 851.212701][T26249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9607'. [ 851.244709][T26249] netlink: 74 bytes leftover after parsing attributes in process `syz.0.9607'. [ 851.501593][T26260] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.9612' sets config #104 [ 851.947273][T26281] netlink: 'syz.1.9622': attribute type 21 has an invalid length. [ 852.006230][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.044933][T26281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9622'. [ 852.618042][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.939569][ T7048] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 852.970526][ T14] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 853.139767][ T7048] usb 6-1: Using ep0 maxpacket: 16 [ 853.147474][ T7048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.150780][ T14] usb 7-1: config 3 has an invalid interface number: 106 but max is 0 [ 853.167062][T26334] netlink: 830 bytes leftover after parsing attributes in process `syz.7.9647'. [ 853.176364][ T7048] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.184453][ T14] usb 7-1: config 3 has no interface number 0 [ 853.188963][ T7048] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 853.206124][ T14] usb 7-1: config 3 interface 106 altsetting 243 endpoint 0xD has invalid wMaxPacketSize 0 [ 853.216428][ T7048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.246262][ T7048] usb 6-1: Product: syz [ 853.248477][ T14] usb 7-1: config 3 interface 106 altsetting 243 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 853.262163][ T7048] usb 6-1: Manufacturer: syz [ 853.262183][ T7048] usb 6-1: SerialNumber: syz [ 853.289973][ T14] usb 7-1: config 3 interface 106 has no altsetting 0 [ 853.327614][ T14] usb 7-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=b7.6a [ 853.354993][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.363176][ T14] usb 7-1: Product: syz [ 853.367360][ T14] usb 7-1: Manufacturer: syz [ 853.378859][ T14] usb 7-1: SerialNumber: syz [ 853.413415][T26340] loop1: detected capacity change from 0 to 8 [ 853.443953][ T8241] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 853.465120][ T7048] usb 6-1: 0:2 : does not exist [ 853.480110][ T7048] usb 6-1: unit 3 not found! [ 853.557789][ T7048] usb 6-1: USB disconnect, device number 14 [ 853.603786][ T14] usbtest 7-1:3.106: usb test device [ 853.613135][ T14] usbtest 7-1:3.106: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 853.637676][ T8241] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 853.655998][ T8241] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.663691][ T4951] udevd[4951]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 853.688924][ T8241] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 853.710468][ T8241] usb 1-1: config 1 has no interface number 1 [ 853.728341][T26348] device bridge_slave_0 entered promiscuous mode [ 853.729195][ T8241] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 853.756876][ T8241] usb 1-1: config 1 interface 105 has no altsetting 0 [ 853.782424][ T8241] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 853.813765][T26350] PKCS7: Unknown OID: [4] 0.0 [ 853.818810][T26350] PKCS7: Only support pkcs7_signedData type [ 853.833302][ T8241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.860508][ T8241] usb 1-1: Product: syz [ 853.864971][ T8241] usb 1-1: Manufacturer: syz [ 853.869585][ T8241] usb 1-1: SerialNumber: syz [ 853.874026][ T7048] usb 7-1: USB disconnect, device number 4 [ 853.954241][T26352] device wlan0 entered promiscuous mode [ 853.976807][T26352] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 854.003094][T26354] xt_CT: No such helper "syz0" [ 854.112084][ T8241] aqc111: probe of 1-1:1.105 failed with error -22 [ 854.221629][T26359] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 854.328163][T26361] loop1: detected capacity change from 0 to 4096 [ 854.349578][ T8241] usb 1-1: USB disconnect, device number 3 [ 855.014500][T26383] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 855.136368][T26385] loop6: detected capacity change from 0 to 4096 [ 855.212535][T26385] ntfs: volume version 3.1. [ 855.404991][T26397] x_tables: ip_tables: osf match: only valid for protocol 6 [ 855.722707][T26409] xt_socket: unknown flags 0x4c [ 855.829345][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9685'. [ 855.852850][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9685'. [ 856.085249][T26421] comedi comedi2: dt2814: I/O port conflict (0xcf7,2) [ 856.113322][T26391] loop7: detected capacity change from 0 to 32768 [ 856.151774][T26391] [ 856.151774][T26391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 856.151774][T26391] [ 856.195368][T26417] loop0: detected capacity change from 0 to 4096 [ 856.213206][T26391] jfs_rename: dtInsert returned -EIO [ 856.251625][T26425] loop1: detected capacity change from 0 to 512 [ 856.255115][T26417] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 856.289076][T26425] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 856.312074][T26417] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 856.330647][T26417] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 856.332781][T23514] [ 856.332781][T23514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 856.332781][T23514] [ 856.339617][T26417] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 856.339670][T26417] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 856.361092][T26417] ntfs: volume version 3.1. [ 856.389711][T23514] [ 856.389711][T23514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 856.389711][T23514] [ 856.483070][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 856.500712][T26417] ntfs: (device loop0): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 856.543537][T26417] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 856.587383][T26417] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 856.653756][T26417] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 856.739653][T26417] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 856.918743][T26443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9700'. [ 856.968631][T26443] device bridge2 entered promiscuous mode [ 857.140784][T26451] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 857.173075][ T93] block nbd5: Attempted send on invalid socket [ 857.179449][ T93] blk_print_req_error: 17 callbacks suppressed [ 857.179463][ T93] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 857.316940][T26460] wg1 speed is unknown, defaulting to 1000 [ 857.373084][T26465] Cannot find set identified by id 65534 to match [ 857.730488][T26478] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 857.730488][T26478] SȘȞZ6' [ 858.346356][T26498] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 858.499713][T26506] Process accounting paused [ 859.395377][T26510] 9pnet_fd: p9_fd_create_tcp (26510): problem connecting socket to 127.0.0.1 [ 859.462255][T26545] netlink: 6 bytes leftover after parsing attributes in process `syz.7.9751'. [ 859.860768][T26569] loop6: detected capacity change from 0 to 1024 [ 859.912025][T26569] EXT4-fs: Ignoring removed orlov option [ 859.917718][T26569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 860.052447][T26569] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 860.098864][T23466] EXT4-fs (loop6): unmounting filesystem. [ 860.181265][T26583] netlink: 'syz.1.9767': attribute type 10 has an invalid length. [ 860.181287][T26583] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9767'. [ 860.750420][T26604] loop5: detected capacity change from 0 to 128 [ 860.798703][T26604] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 860.861909][T26604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.317063][T26629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9789'. [ 861.632449][T26640] loop1: detected capacity change from 0 to 2048 [ 861.683355][T26640] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 861.748380][T26640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.912138][T26656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9803'. [ 861.945776][T26656] netlink: 332 bytes leftover after parsing attributes in process `syz.0.9803'. [ 862.043501][T26660] loop7: detected capacity change from 0 to 64 [ 862.217889][T26668] loop0: detected capacity change from 0 to 256 [ 862.641684][ T4316] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 862.709751][T26686] loop7: detected capacity change from 0 to 1024 [ 862.728512][T26686] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 862.831897][ T4316] usb 7-1: Using ep0 maxpacket: 16 [ 862.839725][T26686] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 862.870853][ T4316] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 862.917334][ T4316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.954904][ T4316] usb 7-1: Product: syz [ 862.973058][ T4316] usb 7-1: Manufacturer: syz [ 862.991597][ T4316] usb 7-1: SerialNumber: syz [ 863.051460][ T4316] usb 7-1: config 0 descriptor?? [ 863.075246][T23514] EXT4-fs (loop7): unmounting filesystem. [ 863.080428][ T4316] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 863.445831][ T4316] ssu100: probe of 7-1:0.0 failed with error -71 [ 863.468968][ T4316] usb 7-1: USB disconnect, device number 5 [ 863.612032][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9836'. [ 863.742572][T26726] loop1: detected capacity change from 0 to 512 [ 863.775546][T26726] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 863.799984][T26726] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 863.828725][T26726] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 863.848314][T26726] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 863.858687][T26726] System zones: 0-2, 18-18, 34-35 [ 863.873833][T26726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 863.908259][T26726] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 864.010261][T26733] netlink: 'syz.0.9840': attribute type 21 has an invalid length. [ 864.019157][T26733] netlink: 'syz.0.9840': attribute type 6 has an invalid length. [ 864.100648][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 864.223713][T26742] qrtr: Invalid version 0 [ 864.320014][T26746] loop6: detected capacity change from 0 to 256 [ 864.420354][T26746] FAT-fs (loop6): Directory bread(block 64) failed [ 864.447245][T26746] FAT-fs (loop6): Directory bread(block 65) failed [ 864.489510][T26746] FAT-fs (loop6): Directory bread(block 66) failed [ 864.518354][T26746] FAT-fs (loop6): Directory bread(block 67) failed [ 864.525006][T26746] FAT-fs (loop6): Directory bread(block 68) failed [ 864.526632][ T9726] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 864.553898][T26746] FAT-fs (loop6): Directory bread(block 69) failed [ 864.581064][T26746] FAT-fs (loop6): Directory bread(block 70) failed [ 864.589423][T26746] FAT-fs (loop6): Directory bread(block 71) failed [ 864.597995][T26746] FAT-fs (loop6): Directory bread(block 72) failed [ 864.606455][T26746] FAT-fs (loop6): Directory bread(block 73) failed [ 864.718614][ T9726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.732970][T26754] loop7: detected capacity change from 0 to 4096 [ 864.735908][ T9726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 864.775632][T26754] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 864.799075][ T9726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 864.819277][ T9726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.845483][ T9726] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 864.857057][ T9726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.887522][ T9726] usb 2-1: config 0 descriptor?? [ 864.952831][ T9726] gspca_main: spca561-2.14.0 probing abcd:cdee [ 865.153471][ T9726] spca561: probe of 2-1:0.0 failed with error -22 [ 865.165396][ T9726] usb 2-1: MIDIStreaming interface descriptor not found [ 865.256965][ T9726] usb 2-1: USB disconnect, device number 26 [ 865.558204][T26782] loop5: detected capacity change from 0 to 2048 [ 865.586176][T26782] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=26504, location=26504 [ 865.609301][T26782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 865.647533][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.287380][T26812] netlink: 'syz.6.9878': attribute type 3 has an invalid length. [ 866.725050][T26796] loop1: detected capacity change from 0 to 32768 [ 866.799301][T26796] (syz.1.9870,26796,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 866.840206][T26796] (syz.1.9870,26796,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 866.878361][ T9726] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 866.945054][T26796] JBD2: Ignoring recovery information on journal [ 867.068803][ T9726] usb 7-1: Using ep0 maxpacket: 8 [ 867.075824][ T9726] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 867.096690][ T9726] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 867.116130][ T9726] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 867.124260][ T9726] usb 7-1: Product: syz [ 867.129717][T26796] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 867.139102][ T9726] usb 7-1: Manufacturer: syz [ 867.150786][ T9726] usb 7-1: SerialNumber: syz [ 867.297019][ T8241] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 867.372672][ T9726] usb 7-1: Invalid connection information received from device [ 867.386330][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 867.488102][ T8241] usb 1-1: Using ep0 maxpacket: 32 [ 867.504102][ T8241] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 867.532550][ T8241] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 867.554090][ T8241] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 867.570582][T26856] xt_l2tp: v2 doesn't support IP mode [ 867.572522][ T4316] usb 7-1: USB disconnect, device number 6 [ 867.576165][ T8241] usb 1-1: config 1 has no interface number 0 [ 867.608019][ T8241] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.639531][ T8241] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.696760][ T8241] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 867.749380][ T8241] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 867.768601][ T8241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.819202][ T8241] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 868.027933][ T8241] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 868.039915][ T8241] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 868.068505][ T8241] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 868.124520][T26875] Timeout policy `syz0' can only be used by L3 protocol number 37120 [ 868.251343][ T9726] usb 1-1: USB disconnect, device number 4 [ 868.409903][T26886] loop6: detected capacity change from 0 to 1024 [ 868.421676][T26889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9915'. [ 868.458705][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 868.510997][ T4339] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 868.552073][T26893] openvswitch: netlink: Message has 4 unknown bytes. [ 868.728685][ T4339] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.760290][ T4339] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 868.790895][ T4339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.823796][ T4339] usb 8-1: Product: syz [ 868.827996][ T4339] usb 8-1: Manufacturer: syz [ 868.858719][ T4339] usb 8-1: SerialNumber: syz [ 868.888929][ T4339] usb 8-1: config 0 descriptor?? [ 868.916470][ T4339] asix: probe of 8-1:0.0 failed with error -22 [ 869.137672][ T4339] usb 8-1: USB disconnect, device number 7 [ 869.236863][T26918] loop1: detected capacity change from 0 to 512 [ 869.258932][T26920] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 869.290447][T26918] EXT4-fs: Ignoring removed mblk_io_submit option [ 869.374972][T26918] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 869.459415][T26918] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.9929: attempt to clear invalid blocks 2 len 1 [ 869.553731][T26918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 869.592074][T26918] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9929: invalid indirect mapped block 1819239214 (level 0) [ 869.640581][T26918] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9929: invalid indirect mapped block 1819239214 (level 1) [ 869.706023][T26918] EXT4-fs (loop1): 1 truncate cleaned up [ 869.716965][T26918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 869.859797][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 870.181418][T26954] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9946'. [ 870.590372][T26976] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 870.794881][T26982] netlink: 'syz.5.9960': attribute type 30 has an invalid length. [ 870.839910][T26982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9960'. [ 870.882162][T26982] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 870.926180][T26982] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 871.297101][T27007] sctp: [Deprecated]: syz.1.9972 (pid 27007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.297101][T27007] Use struct sctp_sack_info instead [ 872.741253][T27078] loop1: detected capacity change from 0 to 256 [ 872.832629][T27078] FAT-fs (loop1): Directory bread(block 64) failed [ 872.856121][T27078] FAT-fs (loop1): Directory bread(block 65) failed [ 872.893839][T27078] FAT-fs (loop1): Directory bread(block 66) failed [ 872.919556][T27078] FAT-fs (loop1): Directory bread(block 67) failed [ 872.965932][T27078] FAT-fs (loop1): Directory bread(block 68) failed [ 872.989960][T27078] FAT-fs (loop1): Directory bread(block 69) failed [ 873.012453][T27078] FAT-fs (loop1): Directory bread(block 70) failed [ 873.049165][T27078] FAT-fs (loop1): Directory bread(block 71) failed [ 873.065924][T27078] FAT-fs (loop1): Directory bread(block 72) failed [ 873.104401][T27078] FAT-fs (loop1): Directory bread(block 73) failed [ 873.274246][T27095] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10011'. [ 873.287131][T27093] overlayfs: conflicting options: userxattr,redirect_dir=on [ 873.344449][T27095] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10011'. [ 874.024857][T27129] libceph: resolve '96.' (ret=-3): failed [ 874.485903][ T4339] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 874.678039][T27162] libceph: resolve '96.' (ret=-3): failed [ 874.696908][ T4339] usb 6-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 874.716136][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 874.761745][ T4339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 874.794335][ T4339] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 874.832140][ T4339] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 874.860241][ T4339] usb 6-1: Product: syz [ 874.864438][ T4339] usb 6-1: Manufacturer: syz [ 874.903702][ T4339] usb 6-1: SerialNumber: syz [ 874.929312][ T4339] usb 6-1: config 0 descriptor?? [ 874.978360][T27174] netlink: 'syz.0.10051': attribute type 2 has an invalid length. [ 875.010659][T27174] netlink: 'syz.0.10051': attribute type 8 has an invalid length. [ 875.028241][T27174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10051'. [ 875.282914][T27182] tmpfs: Bad value for 'mpol' [ 875.382624][ T4339] usb 6-1: USB disconnect, device number 15 [ 875.863154][T27203] netlink: 'syz.6.10066': attribute type 49 has an invalid length. [ 876.076124][ T4272] Bluetooth: hci2: command 0x0401 tx timeout [ 876.306948][T27219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 876.425503][T27223] netlink: 920 bytes leftover after parsing attributes in process `syz.7.10075'. [ 876.560979][ T4339] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 876.730321][T27231] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 876.761610][T27231] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 876.770875][ T4339] usb 7-1: Using ep0 maxpacket: 32 [ 876.777822][ T4339] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 876.804734][T27231] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 876.816378][ T4339] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 876.841976][ T4339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.868768][ T4339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 876.875490][T27231] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 876.893843][T27208] loop1: detected capacity change from 0 to 32768 [ 876.913893][ T4339] usb 7-1: config 1 has no interface number 0 [ 876.927878][ T4339] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 876.939244][T27231] device geneve2 entered promiscuous mode [ 876.950706][ T4339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.960275][T27208] ERROR: (device loop1): dtSearch: stack overrun! [ 876.960275][T27208] [ 876.973852][T27208] ERROR: (device loop1): remounting filesystem as read-only [ 876.985342][T27231] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 876.992796][ T4339] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 877.014867][T27208] btstack dump: [ 877.015785][T27231] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 877.022088][T27208] bn = 0, index = 4 [ 877.029567][T27231] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 877.040529][T27208] bn = 0, index = 4 [ 877.042435][T27231] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 877.054868][T27208] bn = 0, index = 4 [ 877.069224][T27208] bn = 0, index = 4 [ 877.074774][T27208] bn = 0, index = 4 [ 877.087135][T27208] bn = 0, index = 4 [ 877.095920][T27208] bn = 0, index = 4 [ 877.101699][T27208] bn = 0, index = 0 [ 877.121618][T27208] jfs_lookup: dtSearch returned -5 [ 877.186221][ T4339] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 877.199132][ T4339] snd_usb_pod 7-1:1.1: invalid control EP [ 877.218381][ T4339] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 877.265322][ T4339] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 877.290021][ T4339] snd_usb_pod: probe of 7-1:1.1 failed with error -22 [ 877.419009][ T4339] usb 7-1: USB disconnect, device number 7 [ 877.538561][T27247] loop5: detected capacity change from 0 to 8 [ 877.568726][T27247] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 877.588872][ T7842] udevd[7842]: incorrect cramfs checksum on /dev/loop5 [ 877.685180][T27251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10089'. [ 877.702604][ T4951] udevd[4951]: incorrect cramfs checksum on /dev/loop5 [ 877.775400][ T4951] udevd[4951]: incorrect cramfs checksum on /dev/loop5 [ 878.001920][T27255] loop5: detected capacity change from 0 to 4096 [ 878.196528][T27243] loop7: detected capacity change from 0 to 32768 [ 878.248776][T27243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.10085 (27243) [ 878.355454][T27243] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 878.418863][T27243] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 878.455892][T27243] BTRFS info (device loop7): using free space tree [ 878.730823][T27243] BTRFS info (device loop7): enabling ssd optimizations [ 878.901056][T23514] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 879.032721][T27306] loop1: detected capacity change from 0 to 4096 [ 879.560863][T27306] ntfs3: loop1: Failed to load $Extend. [ 879.639924][T27306] ntfs3: loop1: ino=5, "/" directory corrupted [ 879.864384][T27339] netlink: 'syz.5.10123': attribute type 2 has an invalid length. [ 879.922571][T27339] netlink: 'syz.5.10123': attribute type 2 has an invalid length. [ 879.979240][T27339] netlink: 'syz.5.10123': attribute type 1 has an invalid length. [ 880.011710][T27339] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10123'. [ 880.067643][T27343] netlink: 'syz.7.10125': attribute type 11 has an invalid length. [ 880.331207][T27357] netlink: 'syz.6.10132': attribute type 4 has an invalid length. [ 880.359028][T27356] loop7: detected capacity change from 0 to 512 [ 880.368261][T27357] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.10132'. [ 880.418251][T27356] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 880.451714][T27356] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 880.466470][T27356] EXT4-fs (loop7): orphan cleanup on readonly fs [ 880.531164][T27356] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #13: comm syz.7.10131: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 880.538261][T27364] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 880.549119][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.562994][T27364] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 880.618061][T27356] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.10131: couldn't read orphan inode 13 (err -117) [ 880.692984][T27356] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 880.766197][T27356] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (24564!=0) [ 880.831820][T27372] befs: (nbd5): No write support. Marking filesystem read-only [ 880.869048][ T52] block nbd5: Attempted send on invalid socket [ 880.875567][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 880.897694][T27372] befs: (nbd5): unable to read superblock [ 880.933753][T23514] EXT4-fs (loop7): unmounting filesystem. [ 881.163590][T27386] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10146'. [ 881.331669][ T9726] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 881.513929][ T9726] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 881.535836][ T9726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.598902][ T9726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 881.626962][ T9726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.637374][T27408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10157'. [ 881.650182][ T9726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.736211][ T9726] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 881.789263][ T9726] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 881.865248][ T9726] usb 2-1: Product: syz [ 881.869457][ T9726] usb 2-1: Manufacturer: syz [ 881.934258][ T9726] cdc_wdm 2-1:1.0: skipping garbage [ 881.958894][ T9726] cdc_wdm 2-1:1.0: skipping garbage [ 881.982964][ T9726] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 882.002398][T27425] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.10165'. [ 882.016838][ T9726] cdc_wdm 2-1:1.0: Unknown control protocol [ 882.152379][T27381] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 882.212607][ T7048] usb 2-1: USB disconnect, device number 27 [ 882.215291][T27433] loop6: detected capacity change from 0 to 64 [ 882.279593][T27436] kAFS: unparsable volume name [ 882.744065][T27455] loop6: detected capacity change from 0 to 2048 [ 882.811749][T27460] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 882.823182][T27455] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 882.921500][T27455] Remounting filesystem read-only [ 883.043248][T27462] loop7: detected capacity change from 0 to 4096 [ 883.077440][T27470] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.10185'. [ 883.595012][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10197'. [ 883.632406][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10197'. [ 883.820711][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 883.820725][ T26] audit: type=1326 audit(902.756:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.7.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 883.948345][T27506] loop0: detected capacity change from 0 to 1024 [ 883.966057][ T26] audit: type=1326 audit(902.798:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.7.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 884.016679][T27504] loop6: detected capacity change from 0 to 4096 [ 884.055242][ T26] audit: type=1326 audit(902.798:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.7.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 884.153169][ T26] audit: type=1326 audit(902.798:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.7.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 884.236350][T27506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 884.560843][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 884.901848][ T4339] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 885.021434][ T26] audit: type=1326 audit(904.016:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.7.10223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x0 [ 885.092883][ T4339] usb 2-1: Using ep0 maxpacket: 8 [ 885.125388][ T4339] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 885.151943][ T4339] usb 2-1: config 179 has no interface number 0 [ 885.177778][ T4339] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 885.206143][ T4339] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 885.231321][ T4339] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 885.263431][ T4339] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 885.301863][ T4339] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 885.342114][ T4339] usb 2-1: config 179 interface 65 has no altsetting 0 [ 885.349029][ T4339] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 885.385695][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.438599][ T4339] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input59 [ 885.628453][T27554] loop5: detected capacity change from 0 to 2048 [ 885.878640][ T4339] usb 2-1: USB disconnect, device number 28 [ 885.884722][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 885.920451][ T4339] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 886.081201][T27563] loop6: detected capacity change from 0 to 16 [ 886.152636][T27563] erofs: (device loop6): erofs_init_device: empty device tag @ pos 0 [ 886.179200][T27563] erofs: (device loop6): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 886.201159][T27539] syz.0.10220 (27539): drop_caches: 2 [ 886.207903][T27563] erofs: (device loop6): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 886.216334][T27554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 886.234680][T27563] erofs: (device loop6): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 886.510844][T27570] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 887.008972][T27594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10248'. [ 887.035834][T27591] loop1: detected capacity change from 0 to 1024 [ 887.060865][T27591] hfsplus: unable to change nls mapping [ 887.084991][T27599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10250'. [ 887.094233][T27591] hfsplus: unable to parse mount options [ 887.132660][T27599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10250'. [ 887.177975][T27599] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10250'. [ 887.198618][T27591] Process accounting resumed [ 887.251239][T27603] binder: 27601:27603 ioctl c0046209 0 returned -22 [ 887.499006][T27605] loop0: detected capacity change from 0 to 4096 [ 887.994078][T27632] futex_wake_op: syz.1.10266 tries to shift op by 32; fix this program [ 888.138230][T27635] loop6: detected capacity change from 0 to 4096 [ 888.227130][T27642] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 888.239498][T27635] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 888.277117][T27643] loop1: detected capacity change from 0 to 2048 [ 888.358971][T27643] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 888.376254][T27635] Remounting filesystem read-only [ 888.473188][T27651] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 888.473501][T27643] syz.1.10271: attempt to access beyond end of device [ 888.473501][T27643] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 888.691638][T27643] syz.1.10271: attempt to access beyond end of device [ 888.691638][T27643] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 888.719856][ T4276] Bluetooth: hci5: command 0x0406 tx timeout [ 888.729259][ T4276] Bluetooth: hci6: command 0x0406 tx timeout [ 888.746793][T27643] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 888.814744][T27643] NILFS (loop1): error -5 reading inode: ino=12 [ 889.189275][T27672] loop0: detected capacity change from 0 to 4096 [ 889.202914][ T26] audit: type=1326 audit(908.406:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 889.293660][ T26] audit: type=1326 audit(908.406:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 889.293752][T27672] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 889.315474][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.414660][ T26] audit: type=1326 audit(908.406:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 889.436499][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.520082][T27672] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 889.558208][ T26] audit: type=1326 audit(908.417:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 889.568176][T27672] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 889.580052][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.656295][ T26] audit: type=1326 audit(908.417:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 889.678136][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.698502][T27672] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 889.789194][T27672] ntfs: volume version 3.1. [ 889.793633][T27696] loop1: detected capacity change from 0 to 1024 [ 889.805653][ T26] audit: type=1326 audit(908.417:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4ffff9bf79 code=0x7ffc0000 [ 889.924196][T27696] EXT4-fs (loop1): orphan cleanup on readonly fs [ 889.976999][T27696] EXT4-fs (loop1): 1 truncate cleaned up [ 889.977383][T27696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 890.147954][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 890.508726][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10306'. [ 891.032470][T27733] dlm: no locking on control device [ 891.111410][T27707] syz.6.10300 (27707): drop_caches: 2 [ 891.147758][T27736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10301'. [ 891.351586][T27742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 891.397445][T27749] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 891.404987][T27742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 891.438522][T27742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.504229][T27742] device netdevsim0 left promiscuous mode [ 891.523132][T27742] device wlan0 left promiscuous mode [ 891.775919][T27762] netlink: 'syz.0.10329': attribute type 21 has an invalid length. [ 891.783899][T27762] IPv6: NLM_F_CREATE should be specified when creating new route [ 891.802487][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10329'. [ 891.832478][T27761] netlink: 'syz.7.10326': attribute type 25 has an invalid length. [ 891.881240][T27761] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10326'. [ 891.926239][T27765] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10330'. [ 892.284004][T27778] netlink: 'syz.0.10335': attribute type 19 has an invalid length. [ 892.320088][T27778] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10335'. [ 892.374920][T27780] loop1: detected capacity change from 0 to 512 [ 892.554324][T27775] syz.7.10332 (27775): drop_caches: 2 [ 892.606246][T27780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 892.698963][T27780] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.10336: corrupted xattr block 33 [ 892.765282][T27780] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.10336: corrupted xattr block 33 [ 892.836764][ T27] INFO: task syz-executor:4280 blocked for more than 143 seconds. [ 892.861005][T27780] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 892.876541][ T27] Not tainted syzkaller #0 [ 892.889958][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 892.917047][ T27] task:syz-executor state:D stack:21648 pid:4280 ppid:1 flags:0x00004004 [ 892.939293][ T27] Call Trace: [ 892.942445][T27801] vcan0 speed is unknown, defaulting to 1000 [ 892.948237][ T27] [ 892.954546][ T27] __schedule+0x11d1/0x40e0 [ 892.965872][ T27] ? mark_lock+0x94/0x320 [ 892.978033][ T27] ? __sched_text_start+0x8/0x8 [ 893.010558][T27801] vcan0 speed is unknown, defaulting to 1000 [ 893.012127][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 893.017251][T27801] vcan0 speed is unknown, defaulting to 1000 [ 893.051102][ T27] ? lock_chain_count+0x20/0x20 [ 893.059649][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 893.068949][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 893.083569][ T27] schedule+0xb9/0x180 [ 893.087698][ T27] io_schedule+0x7c/0xd0 [ 893.097267][ T27] folio_wait_bit_common+0x70a/0xfa0 [ 893.107851][ T27] ? folio_wait_bit+0x30/0x30 [ 893.114184][ T27] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 893.120853][ T27] ? folio_mapping+0x1ba/0x4d0 [ 893.125714][ T27] truncate_inode_pages_range+0x9fe/0x1090 [ 893.131829][ T27] ? mapping_evict_folio+0x520/0x520 [ 893.137597][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 893.143722][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 893.149279][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 893.154620][ T27] evict+0x4dc/0x8d0 [ 893.159014][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 893.163951][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 893.169993][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 893.175532][ T27] evict_inodes+0x60c/0x6a0 [ 893.180168][ T27] ? clear_inode+0x150/0x150 [ 893.185114][ T27] generic_shutdown_super+0x93/0x340 [ 893.190535][ T27] kill_block_super+0x7c/0xe0 [ 893.195557][ T27] deactivate_locked_super+0x93/0xf0 [ 893.198872][ T4339] vcan0 speed is unknown, defaulting to 1000 [ 893.200971][ T27] cleanup_mnt+0x42c/0x4b0 [ 893.211985][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 893.215444][T27801] infiniband syz1: set active [ 893.217592][ T27] task_work_run+0x1d0/0x260 [ 893.222455][T27801] infiniband syz1: added vcan0 [ 893.227209][ T27] ? task_work_cancel+0x220/0x220 [ 893.237305][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 893.243083][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 893.248568][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 893.254585][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 893.260196][ T27] do_syscall_64+0x58/0xa0 [ 893.265490][ T27] ? clear_bhb_loop+0x60/0xb0 [ 893.273959][ T27] ? clear_bhb_loop+0x60/0xb0 [ 893.286814][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.291692][T27801] RDS/IB: syz1: added [ 893.299326][T27801] smc: adding ib device syz1 with port count 1 [ 893.302425][ T27] RIP: 0033:0x7f54e7f9d1d7 [ 893.305950][T27801] smc: ib device syz1 port 1 has pnetid [ 893.315287][ T27] RSP: 002b:00007ffdb2b35b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 893.320867][ T4339] vcan0 speed is unknown, defaulting to 1000 [ 893.333775][ T27] RAX: 0000000000000000 RBX: 00007f54e8031c3b RCX: 00007f54e7f9d1d7 [ 893.335901][T27801] vcan0 speed is unknown, defaulting to 1000 [ 893.345121][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb2b35c50 [ 893.370743][ T27] RBP: 00007ffdb2b35c50 R08: 00007ffdb2b36c50 R09: 00000000ffffffff [ 893.387586][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb2b36ce0 [ 893.404680][ T27] R13: 00007f54e8031c3b R14: 00000000000bb88b R15: 00007ffdb2b36d20 [ 893.421089][ T27] [ 893.427477][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 893.438282][T27801] vcan0 speed is unknown, defaulting to 1000 [ 893.451870][ T27] [ 893.451870][ T27] Showing all locks held in the system: [ 893.489564][ T27] 2 locks held by kworker/0:0/7: [ 893.494931][ T27] 1 lock held by rcu_tasks_kthre/12: [ 893.503923][ T27] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 893.521964][ T27] 1 lock held by rcu_tasks_trace/13: [ 893.527369][ T27] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 893.539091][ T27] 1 lock held by khungtaskd/27: [ 893.544067][ T27] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 893.554340][ T27] 2 locks held by getty/4030: [ 893.560027][ T27] #0: ffff88807e378098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 893.570919][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 893.582384][T27801] vcan0 speed is unknown, defaulting to 1000 [ 893.584392][ T27] 1 lock held by syz-executor/4269: [ 893.596429][ T27] #0: ffff88805a24a0e0 (&type->s_umount_key#101){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 893.606875][ T27] 1 lock held by syz-executor/4280: [ 893.612189][ T27] #0: ffff8880563000e0 (&type->s_umount_key#101){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 893.622862][ T27] 2 locks held by kworker/0:16/9726: [ 893.628264][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 893.638886][ T27] #1: ffffc90003fc7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 893.650471][ T27] 7 locks held by syz.5.10346/27801: [ 893.656488][ T27] [ 893.658942][ T27] ============================================= [ 893.658942][ T27] [ 893.668534][ T27] NMI backtrace for cpu 0 [ 893.672873][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 893.680079][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 893.690138][ T27] Call Trace: [ 893.693420][ T27] [ 893.696365][ T27] dump_stack_lvl+0x188/0x24e [ 893.701061][ T27] ? irq_work_queue+0xb8/0x140 [ 893.705838][ T27] ? show_regs_print_info+0x12/0x12 [ 893.705939][T27801] vcan0 speed is unknown, defaulting to 1000 [ 893.711035][ T27] ? load_image+0x400/0x400 [ 893.711054][ T27] ? vprintk_emit+0x59f/0x6a0 [ 893.711079][ T27] ? printk_sprint+0x460/0x460 [ 893.730973][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 893.735928][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 893.742091][ T27] ? _printk+0xda/0x130 [ 893.746253][ T27] ? load_image+0x400/0x400 [ 893.750767][ T27] ? load_image+0x400/0x400 [ 893.755281][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 893.761365][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 893.767453][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 893.773453][ T27] watchdog+0xeee/0xf30 [ 893.777627][ T27] ? watchdog+0x1ed/0xf30 [ 893.781981][ T27] kthread+0x29d/0x330 [ 893.786058][ T27] ? hungtask_pm_notify+0x40/0x40 [ 893.791097][ T27] ? kthread_blkcg+0xd0/0xd0 [ 893.795698][ T27] ret_from_fork+0x1f/0x30 [ 893.800139][ T27] [ 893.803255][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.810218][ T27] Sending NMI from CPU 0 to CPUs 1: [ 893.813301][T27801] vcan0 speed is unknown, defaulting to 1000 [ 893.815618][ C1] NMI backtrace for cpu 1 [ 893.815627][ C1] CPU: 1 PID: 27801 Comm: syz.5.10346 Not tainted syzkaller #0 [ 893.815642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 893.815650][ C1] RIP: 0010:io_serial_in+0x73/0xb0 [ 893.815677][ C1] Code: e8 c2 46 00 fd 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 73 32 51 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 44 89 f9 80 e1 07 38 c1 7c aa 4c [ 893.815689][ C1] RSP: 0018:ffffc9000db962f8 EFLAGS: 00000002 [ 893.815703][ C1] RAX: 1ffffffff2df0600 RBX: 00000000000003fd RCX: 0000000000000000 [ 893.815714][ C1] RDX: 00000000000003fd RSI: 000000000007ffff RDI: 0000000000080000 [ 893.815724][ C1] RBP: ffffc9000db964f0 R08: ffff888024290237 R09: 1ffff11004852046 [ 893.815735][ C1] R10: dffffc0000000000 R11: ffffed1004852047 R12: dffffc0000000000 [ 893.815746][ C1] R13: 0000000000002707 R14: ffffffff96f834a0 R15: 0000000000000000 [ 893.815757][ C1] FS: 00007f884933c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 893.815770][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.815781][ C1] CR2: 00007f88483e96c0 CR3: 0000000064efc000 CR4: 00000000003506e0 [ 893.815794][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 893.815803][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 893.815813][ C1] Call Trace: [ 893.815818][ C1] [ 893.815824][ C1] serial8250_console_write+0xf74/0x17f0 [ 893.815843][ C1] ? msg_add_dict_text+0x3d0/0x3d0 [ 893.815869][ C1] ? serial8250_set_defaults+0x600/0x600 [ 893.815887][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 893.815905][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 893.815918][ C1] ? read_lock_is_recursive+0x10/0x10 [ 893.815936][ C1] ? __rwlock_init+0x140/0x140 [ 893.815950][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 893.815965][ C1] console_emit_next_record+0x79e/0xba0 [ 893.815985][ C1] ? console_emit_next_record+0x683/0xba0 [ 893.816007][ C1] ? info_print_prefix+0x360/0x360 [ 893.816030][ C1] ? mark_lock+0x94/0x320 [ 893.816056][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 893.816071][ C1] ? read_lock_is_recursive+0x10/0x10 [ 893.816091][ C1] console_unlock+0x223/0x630 [ 893.816110][ C1] ? vprintk_emit+0x315/0x6a0 [ 893.816128][ C1] vprintk_emit+0x4b3/0x6a0 [ 893.816145][ C1] ? vprintk_emit+0x315/0x6a0 [ 893.816163][ C1] ? printk_sprint+0x460/0x460 [ 893.816181][ C1] ? rcu_is_watching+0x11/0xa0 [ 893.816200][ C1] ? trace_contention_end+0x5f/0x170 [ 893.816220][ C1] _printk+0xda/0x130 [ 893.816235][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 893.816254][ C1] ? load_image+0x400/0x400 [ 893.816269][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 893.816283][ C1] ? mutex_is_locked+0xe/0x40 [ 893.816298][ C1] ? rtnl_is_locked+0x11/0x20 [ 893.816314][ C1] ? __ethtool_get_link_ksettings+0xe0/0x180 [ 893.816333][ C1] ib_get_eth_speed+0x37f/0x510 [ 893.816350][ C1] ? _ib_modify_qp+0xd30/0xd30 [ 893.816370][ C1] ? kobject_init+0x1d0/0x1d0 [ 893.816391][ C1] ? rxe_query_port+0x35/0x190 [ 893.816414][ C1] rxe_query_port+0x58/0x190 [ 893.816434][ C1] ib_query_port+0x163/0x820 [ 893.816455][ C1] ib_setup_port_attrs+0x258/0x20d0 [ 893.816472][ C1] ? device_add+0xcb6/0xfb0 [ 893.816492][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 893.816510][ C1] ? trace_contention_end+0x5f/0x170 [ 893.816534][ C1] ? ib_free_port_attrs+0x3b0/0x3b0 [ 893.816554][ C1] ? kobject_put+0x41d/0x460 [ 893.816566][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 893.816581][ C1] ? device_add+0xe0d/0xfb0 [ 893.816604][ C1] add_one_compat_dev+0x3d6/0x5c0 [ 893.816626][ C1] enable_device_and_get+0x2ac/0x3d0 [ 893.816645][ C1] ? ib_register_device+0x1360/0x1360 [ 893.816668][ C1] ? device_add+0xe0d/0xfb0 [ 893.816691][ C1] ib_register_device+0x10aa/0x1360 [ 893.816714][ C1] ? remove_all_compat_devs+0x260/0x260 [ 893.816734][ C1] ? __kmem_cache_alloc_node+0x140/0x260 [ 893.816750][ C1] ? crypto_create_tfm_node+0x77/0x3b0 [ 893.816769][ C1] ? rcu_is_watching+0x11/0xa0 [ 893.816786][ C1] ? crypto_create_tfm_node+0x77/0x3b0 [ 893.816803][ C1] ? __kmalloc_node+0xe1/0x240 [ 893.816822][ C1] ? crypto_shash_init_tfm+0x1d5/0x310 [ 893.816839][ C1] ? crc32_pclmul_cra_init+0x9/0x50 [ 893.816856][ C1] ? crypto_create_tfm_node+0x2e8/0x3b0 [ 893.816873][ C1] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 893.816891][ C1] ? crypto_alloc_tfm_node+0x309/0x330 [ 893.816914][ C1] rxe_register_device+0x256/0x380 [ 893.816934][ C1] rxe_net_add+0x77/0xe0 [ 893.816951][ C1] rxe_newlink+0x6b/0xf0 [ 893.816969][ C1] nldev_newlink+0x58f/0x610 [ 893.816984][ C1] ? nldev_set_doit+0x490/0x490 [ 893.817029][ C1] ? aa_get_newest_label+0xf9/0x5b0 [ 893.817044][ C1] ? end_current_label_crit_section+0x170/0x170 [ 893.817059][ C1] ? end_current_label_crit_section+0x170/0x170 [ 893.817074][ C1] ? __might_sleep+0xd0/0xd0 [ 893.817090][ C1] ? apparmor_capable+0x12c/0x190 [ 893.817112][ C1] ? nldev_set_doit+0x490/0x490 [ 893.817126][ C1] rdma_nl_rcv+0x6cd/0x9f0 [ 893.817145][ C1] ? rdma_nl_net_init+0x190/0x190 [ 893.817161][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 893.817183][ C1] ? net_generic+0x1e/0x240 [ 893.817201][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 893.817222][ C1] netlink_unicast+0x74d/0x8d0 [ 893.817243][ C1] netlink_sendmsg+0x8ad/0xbd0 [ 893.817266][ C1] ? netlink_getsockopt+0x550/0x550 [ 893.817286][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 893.817300][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 893.817315][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 893.817335][ C1] ? netlink_getsockopt+0x550/0x550 [ 893.817353][ C1] ____sys_sendmsg+0x5be/0x970 [ 893.817375][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 893.817393][ C1] ? __import_iovec+0x315/0x500 [ 893.817410][ C1] ? import_iovec+0x6f/0xa0 [ 893.817425][ C1] ___sys_sendmsg+0x2a2/0x360 [ 893.817443][ C1] ? try_to_wake_up+0x67c/0x1080 [ 893.817462][ C1] ? __sys_sendmsg+0x290/0x290 [ 893.817501][ C1] __se_sys_sendmsg+0x1bb/0x2a0 [ 893.817521][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 893.817546][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 893.817561][ C1] do_syscall_64+0x4c/0xa0 [ 893.817577][ C1] ? clear_bhb_loop+0x60/0xb0 [ 893.817593][ C1] ? clear_bhb_loop+0x60/0xb0 [ 893.817614][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.817630][ C1] RIP: 0033:0x7f884839bf79 [ 893.817642][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.817657][ C1] RSP: 002b:00007f884933c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.817672][ C1] RAX: ffffffffffffffda RBX: 00007f8848615fa0 RCX: 00007f884839bf79 [ 893.817683][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 893.817693][ C1] RBP: 00007f88484327e0 R08: 0000000000000000 R09: 0000000000000000 [ 893.817702][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.817711][ C1] R13: 00007f8848616038 R14: 00007f8848615fa0 R15: 00007ffe24895878 [ 893.817729][ C1] [ 893.869540][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 893.869556][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 893.869573][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 893.869583][ T27] Call Trace: [ 893.869590][ T27] [ 893.869598][ T27] dump_stack_lvl+0x188/0x24e [ 893.869625][ T27] ? memcpy+0x3c/0x60 [ 893.869649][ T27] ? show_regs_print_info+0x12/0x12 [ 893.869670][ T27] ? load_image+0x400/0x400 [ 893.869698][ T27] panic+0x2e5/0x730 [ 893.869714][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 893.869738][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 893.869758][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 893.869783][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 893.869807][ T27] watchdog+0xf2d/0xf30 [ 893.869831][ T27] ? watchdog+0x1ed/0xf30 [ 893.869854][ T27] kthread+0x29d/0x330 [ 893.869869][ T27] ? hungtask_pm_notify+0x40/0x40 [ 893.869888][ T27] ? kthread_blkcg+0xd0/0xd0 [ 893.869904][ T27] ret_from_fork+0x1f/0x30 [ 893.869936][ T27] [ 893.875878][ T27] Kernel Offset: disabled [ 894.616189][ T27] Rebooting in 86400 seconds..