last executing test programs: 2m38.549069452s ago: executing program 2 (id=9008): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 2m38.309482451s ago: executing program 2 (id=9012): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x1c) 2m38.104290688s ago: executing program 2 (id=9016): r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x84) write$damon_target_ids(r0, 0x0, 0x3f) 2m37.859521168s ago: executing program 2 (id=9019): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='>'], 0xf, 0xa02, &(0x7f0000001ec0)="$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") rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000340)={0x8000010, 0x7, 0x8000}) 2m37.46399846s ago: executing program 2 (id=9025): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m36.338905481s ago: executing program 2 (id=9041): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x201, 0x4) 2m20.233552973s ago: executing program 32 (id=9041): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x201, 0x4) 8.511659481s ago: executing program 1 (id=10900): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @loopback={0xffff0000}}, 0x1c) 8.072511976s ago: executing program 1 (id=10904): r0 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2276, 0xfffffffffffffffe) 7.599036795s ago: executing program 1 (id=10908): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) 7.071222728s ago: executing program 1 (id=10912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003c00128009000100766c616e000000002c000280280004800c00010048000000f80e00000c00012100000000000000000c0001003bf000001500000014000300766c616e30"], 0x70}}, 0x0) 6.402301671s ago: executing program 4 (id=10917): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) 6.002237234s ago: executing program 4 (id=10920): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x5, 0x1ff, 0x4, "9e8614d719"}) 5.582142068s ago: executing program 4 (id=10923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x80) 5.226428427s ago: executing program 4 (id=10925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c00028008000100"], 0x38}}, 0x0) 4.07243884s ago: executing program 0 (id=10932): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x70, 0x2, 0x1, "70e92500eacce86200", 0x31364d59}) 3.804746312s ago: executing program 0 (id=10934): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.528904164s ago: executing program 0 (id=10936): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f0000001d00)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.260268956s ago: executing program 0 (id=10938): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 3.251820986s ago: executing program 3 (id=10939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.004703297s ago: executing program 3 (id=10940): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r0, &(0x7f0000000440)=[{0x9, 0x5, 0x5, 0x83, @time={0xb9, 0x5}, {0xfd}, {}, @raw32={[0xb, 0x1, 0x100]}}], 0x1c) 2.942383731s ago: executing program 0 (id=10941): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.762919666s ago: executing program 3 (id=10942): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x32, 0xffffffffffffffff, 0x0) 2.478682379s ago: executing program 3 (id=10943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000900150009"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2.46004566s ago: executing program 0 (id=10944): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000004000000081000000000000000000000008000f00fe0010"], 0x24}}, 0x0) 2.160854205s ago: executing program 3 (id=10945): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100bd9100000000000006241a00001008241c0000000000090581030002000000090401"], 0x0) 584.624522ms ago: executing program 4 (id=10946): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x5) 573.957323ms ago: executing program 1 (id=10947): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000111467ef0000000900000000080005"], 0x18}}, 0x0) 379.162969ms ago: executing program 3 (id=10948): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x300, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x2, 0xffffffffffffffff}) 161.514947ms ago: executing program 1 (id=10949): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=10950): r0 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x0, "a3a1b56a4c84226a928a751f1cb50b3e6421ca43d00c7441b04e9026e3dbaf07"}) kernel console output (not intermixed with test programs): ][ T27] audit: type=1326 audit(1755753482.721:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26117 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1109.182962][T26126] loop0: detected capacity change from 0 to 32768 [ 1109.258426][T26126] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1109.426867][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1109.433598][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1109.612543][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 1109.988903][T26162] loop2: detected capacity change from 0 to 764 [ 1110.016126][T26162] rock: directory entry would overflow storage [ 1110.043284][T26162] rock: sig=0x4654, size=5, remaining=4 [ 1110.137725][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8945'. [ 1110.146763][T26166] netlink: 'syz.0.8945': attribute type 2 has an invalid length. [ 1110.166426][T26140] loop3: detected capacity change from 0 to 32768 [ 1110.201370][T26166] netlink: 'syz.0.8945': attribute type 1 has an invalid length. [ 1110.773761][T26181] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1110.939772][T26186] netlink: 'syz.2.8962': attribute type 10 has an invalid length. [ 1110.947965][T26186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8962'. [ 1111.022461][T26190] netlink: 'syz.0.8961': attribute type 6 has an invalid length. [ 1111.050776][T26186] team0: Port device geneve0 added [ 1111.076340][T26188] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1111.089498][T26188] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1111.111522][T26188] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1111.314287][T26193] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1111.419854][T26196] loop1: detected capacity change from 0 to 2048 [ 1111.441266][T26196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1111.879281][T26184] loop3: detected capacity change from 0 to 32768 [ 1112.249054][T26216] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.8975' sets config #0 [ 1113.119095][T26246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8991'. [ 1113.182671][T26250] loop3: detected capacity change from 0 to 8 [ 1113.382951][T26254] loop2: detected capacity change from 0 to 256 [ 1113.468023][T26256] loop3: detected capacity change from 0 to 1024 [ 1113.586001][T26254] FAT-fs (loop2): Directory bread(block 64) failed [ 1113.621549][T26254] FAT-fs (loop2): Directory bread(block 65) failed [ 1113.634178][T26254] FAT-fs (loop2): Directory bread(block 66) failed [ 1113.644978][T26254] FAT-fs (loop2): Directory bread(block 67) failed [ 1113.651754][T26254] FAT-fs (loop2): Directory bread(block 68) failed [ 1113.677690][T26254] FAT-fs (loop2): Directory bread(block 69) failed [ 1113.684599][T26254] FAT-fs (loop2): Directory bread(block 70) failed [ 1113.735100][T26254] FAT-fs (loop2): Directory bread(block 71) failed [ 1113.771558][T26254] FAT-fs (loop2): Directory bread(block 72) failed [ 1113.790060][T26254] FAT-fs (loop2): Directory bread(block 73) failed [ 1113.792916][T26262] binder: 26261:26262 ioctl c0306201 200000000380 returned -14 [ 1114.071965][T26272] netlink: 'syz.0.9002': attribute type 10 has an invalid length. [ 1114.080641][T26272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1114.208328][T26272] team0: Port device geneve0 added [ 1114.930258][T26299] loop1: detected capacity change from 0 to 64 [ 1115.270403][T26306] loop2: detected capacity change from 0 to 2048 [ 1115.299035][T26306] NILFS (loop2): unrecognized mount option ">" [ 1115.346467][T26310] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1115.613584][T26317] loop2: detected capacity change from 0 to 8 [ 1115.999574][T26330] IPv6: sit1: Disabled Multicast RS [ 1116.033351][T26332] loop1: detected capacity change from 0 to 2048 [ 1116.067809][T26332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1116.329713][T26338] loop1: detected capacity change from 0 to 164 [ 1116.473150][ T27] audit: type=1800 audit(1755753490.541:119): pid=26317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9025" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 1116.672802][T26346] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1117.033315][T26358] loop1: detected capacity change from 0 to 1024 [ 1117.079959][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9046'. [ 1117.289739][T26364] netlink: 'syz.3.9049': attribute type 10 has an invalid length. [ 1117.297714][T26364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1117.403459][T26364] team0: Port device geneve0 added [ 1118.309415][T26373] loop0: detected capacity change from 0 to 32768 [ 1118.424591][T26373] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1118.833643][T26373] XFS (loop0): Ending clean mount [ 1118.855406][T26373] XFS (loop0): Quotacheck needed: Please wait. [ 1118.937750][T26373] XFS (loop0): Quotacheck: Done. [ 1119.285717][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1119.602594][T26434] netlink: 'syz.1.9082': attribute type 3 has an invalid length. [ 1121.310873][T26480] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9104'. [ 1121.699493][T26492] xt_hashlimit: max too large, truncated to 1048576 [ 1121.836759][T26494] loop0: detected capacity change from 0 to 2048 [ 1121.935556][T26494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.060174][T26494] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1122.182687][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.969403][T26533] loop1: detected capacity change from 0 to 512 [ 1122.984413][T26533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1123.016879][T26533] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.9130: invalid indirect mapped block 83886080 (level 1) [ 1123.087427][T26540] netlink: 'syz.3.9132': attribute type 10 has an invalid length. [ 1123.097752][T26533] EXT4-fs (loop1): Remounting filesystem read-only [ 1123.131297][T26533] EXT4-fs (loop1): 1 orphan inode deleted [ 1123.134976][T26540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.137238][T26533] EXT4-fs (loop1): 1 truncate cleaned up [ 1123.138466][T26533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.214131][T26540] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1123.349812][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.534710][T26548] IPv6: NLM_F_CREATE should be specified when creating new route [ 1123.661809][T26553] pim6reg: entered allmulticast mode [ 1124.086575][T26567] loop0: detected capacity change from 0 to 256 [ 1124.172043][T26567] FAT-fs (loop0): Directory bread(block 64) failed [ 1124.179017][T26567] FAT-fs (loop0): Directory bread(block 65) failed [ 1124.187858][T26567] FAT-fs (loop0): Directory bread(block 66) failed [ 1124.206748][T26567] FAT-fs (loop0): Directory bread(block 67) failed [ 1124.213977][T26567] FAT-fs (loop0): Directory bread(block 68) failed [ 1124.221870][T26567] FAT-fs (loop0): Directory bread(block 69) failed [ 1124.233088][T26567] FAT-fs (loop0): Directory bread(block 70) failed [ 1124.243115][T26567] FAT-fs (loop0): Directory bread(block 71) failed [ 1124.250571][T26567] FAT-fs (loop0): Directory bread(block 72) failed [ 1124.257784][T26567] FAT-fs (loop0): Directory bread(block 73) failed [ 1124.462657][T26577] binder: 26576:26577 ioctl 40046210 0 returned -14 [ 1125.023868][T26590] loop0: detected capacity change from 0 to 2048 [ 1125.076056][T26590] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1125.174398][T26593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9157'. [ 1125.340581][T26579] loop1: detected capacity change from 0 to 32768 [ 1125.362602][T26579] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1125.528556][ T6074] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1125.821793][T26608] netlink: 'syz.0.9165': attribute type 2 has an invalid length. [ 1125.905811][T26611] netlink: 'syz.3.9166': attribute type 10 has an invalid length. [ 1125.913825][T26611] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9166'. [ 1126.729112][T26631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1127.065736][T26641] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 1127.351641][T26649] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1127.368889][T26649] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1128.105110][T26673] loop0: detected capacity change from 0 to 2048 [ 1128.178552][T26673] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.706400][ T28] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1128.930822][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 1128.945170][ T28] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1128.961579][ T28] usb 1-1: config 6 has no interface number 0 [ 1128.973878][ T28] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1129.008095][ T28] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1129.029868][ T28] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1129.040564][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.043451][T26704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9212'. [ 1129.056718][ T28] usb 1-1: Product: syz [ 1129.080564][ T28] usb 1-1: Manufacturer: syz [ 1129.088851][ T28] usb 1-1: SerialNumber: syz [ 1129.127917][ T28] hso 1-1:6.2: Failed to find INT IN ep [ 1129.398428][T16404] usb 1-1: USB disconnect, device number 65 [ 1130.393934][T26736] xt_ecn: cannot match TCP bits for non-tcp packets [ 1130.824412][ T28] IPVS: starting estimator thread 0... [ 1130.930185][T26747] IPVS: using max 19 ests per chain, 45600 per kthread [ 1130.966155][T26751] bond0: Unable to set up delay as MII monitoring is disabled [ 1131.161215][T26732] loop1: detected capacity change from 0 to 32768 [ 1131.226269][T26732] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1131.284077][T26732] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1131.541374][T26732] XFS (loop1): Ending clean mount [ 1131.574877][T26732] XFS (loop1): Quotacheck needed: Please wait. [ 1131.738005][T26732] XFS (loop1): Quotacheck: Done. [ 1131.787617][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9246'. [ 1131.872814][ T5790] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1132.117609][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9249'. [ 1132.156893][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9249'. [ 1132.420209][T26792] comedi comedi4: bad chanlist[0]=0x04080007 chan=7 range length=2 [ 1132.630280][T26798] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1133.679135][T25982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1133.697359][T25982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1133.719685][T26830] netlink: 'syz.3.9269': attribute type 21 has an invalid length. [ 1133.729694][T25982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1133.731578][T26830] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1133.749605][T25982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1133.761202][T25982] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1133.772194][T25982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1133.961854][T26835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9273'. [ 1133.977382][T26835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9273'. [ 1134.009142][T26835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9273'. [ 1134.018375][T26835] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9273'. [ 1134.037374][T26835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9273'. [ 1134.092146][T26826] lo speed is unknown, defaulting to 1000 [ 1134.276411][T26844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9276'. [ 1134.295292][T26844] veth1_to_team: entered allmulticast mode [ 1134.471598][ T27] audit: type=1326 audit(1755753507.388:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26848 comm="syz.1.9278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1134.513609][ T27] audit: type=1326 audit(1755753507.388:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26848 comm="syz.1.9278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1134.671319][ T27] audit: type=1326 audit(1755753507.416:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26848 comm="syz.1.9278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1134.765622][ T27] audit: type=1326 audit(1755753507.416:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26848 comm="syz.1.9278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1134.789242][T26856] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1134.824581][T26856] bond0: (slave lo): Error: Device can not be enslaved while up [ 1134.966283][T26826] chnl_net:caif_netlink_parms(): no params data found [ 1135.405711][T26826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.438735][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.482624][T26826] bridge_slave_0: entered allmulticast mode [ 1135.497967][T26826] bridge_slave_0: entered promiscuous mode [ 1135.527700][T26826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.535033][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.562520][T26826] bridge_slave_1: entered allmulticast mode [ 1135.594094][T26826] bridge_slave_1: entered promiscuous mode [ 1135.816327][T26826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.872568][T26826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.040497][T26826] team0: Port device team_slave_0 added [ 1136.044421][T25982] Bluetooth: hci4: command tx timeout [ 1136.091881][T26826] team0: Port device team_slave_1 added [ 1136.207972][T26906] netlink: 'syz.3.9305': attribute type 1 has an invalid length. [ 1136.229261][T26826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.250917][T26826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.340241][T26826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.399270][T26826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.446392][T26826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.585170][T26826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.837619][T26826] hsr_slave_0: entered promiscuous mode [ 1136.867289][T26826] hsr_slave_1: entered promiscuous mode [ 1136.908041][T26826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.937711][T26826] Cannot create hsr debugfs directory [ 1137.239155][ T27] audit: type=1326 audit(1755753509.980:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26931 comm="syz.0.9318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1137.314420][ T27] audit: type=1326 audit(1755753509.980:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26931 comm="syz.0.9318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1137.353235][ T27] audit: type=1326 audit(1755753509.980:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26931 comm="syz.0.9318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1137.404330][T26935] delete_channel: no stack [ 1137.441157][ T27] audit: type=1326 audit(1755753509.980:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26931 comm="syz.0.9318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1137.514929][ T27] audit: type=1326 audit(1755753509.980:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26931 comm="syz.0.9318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1137.743238][T26946] program syz.3.9324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1137.773709][T26826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1137.846841][T26826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1137.867495][T26826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1137.876223][T26949] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1137.893026][T26826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1138.003452][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9327'. [ 1138.202047][T26962] bond2: entered allmulticast mode [ 1138.241946][T25982] Bluetooth: hci4: command tx timeout [ 1138.430849][T26826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.522502][T26826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.568647][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.576116][T15060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.617430][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.624703][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.328089][T26826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.857137][T27014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9350'. [ 1140.202241][T26826] veth0_vlan: entered promiscuous mode [ 1140.242920][T26826] veth1_vlan: entered promiscuous mode [ 1140.350317][T26826] veth0_macvtap: entered promiscuous mode [ 1140.411291][T26826] veth1_macvtap: entered promiscuous mode [ 1140.446150][T27028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9356'. [ 1140.466140][T25982] Bluetooth: hci4: command tx timeout [ 1140.469638][T27029] netlink: 'syz.1.9357': attribute type 1 has an invalid length. [ 1140.505061][T27029] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1140.506403][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.527980][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.538867][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.550490][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.561665][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.572670][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.582550][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.593954][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.606376][T26826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.650172][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.701386][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.743995][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.769298][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.781452][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.821338][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.837760][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.849023][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.863284][T26826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.901284][T26826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.921737][T26826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.939082][T26826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.963411][T26826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.976342][T27031] lo speed is unknown, defaulting to 1000 [ 1141.028473][T27039] loop1: detected capacity change from 0 to 8192 [ 1141.064135][T16404] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1141.097633][T27039] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1141.146606][T27039] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1141.169621][T27039] REISERFS (device loop1): using ordered data mode [ 1141.176900][T27039] reiserfs: using flush barriers [ 1141.183857][T27039] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1141.201449][T27039] REISERFS (device loop1): checking transaction log (loop1) [ 1141.233915][T27039] REISERFS (device loop1): Using r5 hash to sort names [ 1141.241713][T27039] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1141.248338][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.300971][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.312734][T16404] usb 1-1: Using ep0 maxpacket: 8 [ 1141.336786][T16404] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1141.377585][T16404] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.416581][T16404] usb 1-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.437415][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.458358][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.458364][T16404] usb 1-1: config 12 interface 0 has no altsetting 0 [ 1141.469963][T16404] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1141.505341][T16404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.529945][T16404] usb 1-1: Product: syz [ 1141.542714][T16404] usb 1-1: Manufacturer: syz [ 1141.552987][T16404] usb 1-1: SerialNumber: syz [ 1141.844014][T16404] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1141.858071][T16404] usb 1-1: selecting invalid altsetting 0 [ 1142.012940][T16404] usb 1-1: USB disconnect, device number 66 [ 1142.097316][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.550364][T27067] dvmrp0: entered allmulticast mode [ 1142.691183][T25982] Bluetooth: hci4: command tx timeout [ 1143.028445][T27086] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1143.498562][T27102] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1143.540172][T27100] loop4: detected capacity change from 0 to 1024 [ 1143.876488][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1144.098259][T27120] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1145.080485][T27146] loop4: detected capacity change from 0 to 4096 [ 1145.128290][T27146] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1145.356535][T27146] ntfs3: loop4: failed to convert "c46c" to ascii [ 1145.363696][T25759] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1145.591739][T27135] loop1: detected capacity change from 0 to 32768 [ 1145.606533][T25759] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.626401][T25759] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1145.637249][T25759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.672970][T25759] usb 4-1: config 0 descriptor?? [ 1145.702029][T27161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1145.840759][T27163] loop0: detected capacity change from 0 to 512 [ 1145.915799][T27166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9417'. [ 1145.936929][T27166] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9417'. [ 1145.939884][T27163] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.9416: corrupted in-inode xattr: invalid ea_ino [ 1145.975035][T27163] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9416: couldn't read orphan inode 15 (err -117) [ 1146.049358][T27170] comedi comedi0: adq12b: I/O port conflict (0x5,16) [ 1146.058273][T27163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.156565][T27163] overlayfs: failed to resolve '/Ææ´': -2 [ 1146.235968][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.245048][T27042] usb 4-1: USB disconnect, device number 70 [ 1146.377609][T27177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9422'. [ 1146.393416][T27177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9422'. [ 1147.275311][T27199] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9432'. [ 1147.326275][T27199] hsr_slave_0: left promiscuous mode [ 1147.363016][T27199] hsr_slave_1: left promiscuous mode [ 1147.572352][T27210] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1148.064517][T27224] loop1: detected capacity change from 0 to 256 [ 1148.139821][T27224] FAT-fs (loop1): Directory bread(block 64) failed [ 1148.153683][T27224] FAT-fs (loop1): Directory bread(block 65) failed [ 1148.178528][T27224] FAT-fs (loop1): Directory bread(block 66) failed [ 1148.199160][T27224] FAT-fs (loop1): Directory bread(block 67) failed [ 1148.219376][T27224] FAT-fs (loop1): Directory bread(block 68) failed [ 1148.245098][T27224] FAT-fs (loop1): Directory bread(block 69) failed [ 1148.255558][T27228] loop4: detected capacity change from 0 to 2048 [ 1148.276028][T27224] FAT-fs (loop1): Directory bread(block 70) failed [ 1148.310217][T27224] FAT-fs (loop1): Directory bread(block 71) failed [ 1148.336352][T27224] FAT-fs (loop1): Directory bread(block 72) failed [ 1148.343497][T27224] FAT-fs (loop1): Directory bread(block 73) failed [ 1148.380811][T27233] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1148.539103][T27233] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1148.589444][T27233] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1148.624371][T27233] Remounting filesystem read-only [ 1148.732664][T26826] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1148.743270][T26826] NILFS (loop4): discard dirty page: offset=0, ino=12 [ 1148.756881][T26826] NILFS (loop4): discard dirty block: blocknr=17, size=1024 [ 1148.796785][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1148.814233][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1148.845058][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1148.868723][T26826] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1148.875525][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1148.908010][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1148.918485][T27243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1148.928299][T26826] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 1148.946600][T26826] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 1148.953286][T27243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1148.997879][T26826] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 1149.027350][T26826] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 1149.050754][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.059819][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.099759][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.111001][T26826] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 1149.118207][T26826] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 1149.126143][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.136047][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.145458][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.190744][T26826] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1149.198843][T26826] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 1149.232390][T26826] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 1149.253414][T26826] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 1149.265492][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.332967][T26826] NILFS (loop4): discard dirty page: offset=131072, ino=3 [ 1149.358041][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.382812][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.412895][T26826] NILFS (loop4): discard dirty block: blocknr=46, size=1024 [ 1149.435009][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1149.703510][T27260] loop0: detected capacity change from 0 to 2048 [ 1149.767017][T27264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1149.803346][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1149.923834][T27264] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1149.972032][T27264] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1149.999694][T27264] Remounting filesystem read-only [ 1150.108816][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1150.118248][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 1150.150822][ T5792] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 1150.158706][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.189328][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.202648][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.213725][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 1150.239430][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.282755][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.311199][ T5792] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 1150.318612][ T5792] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 1150.372629][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 1150.409572][ T5792] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 1150.429904][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.457101][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.477622][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.488380][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 1150.505576][ T5792] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 1150.515052][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.515329][T27283] netlink: 'syz.1.9474': attribute type 10 has an invalid length. [ 1150.524056][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.547823][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.559017][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1150.566433][ T5792] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1150.599663][ T5792] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1150.607649][ T5792] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1150.624387][T27283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.631568][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.656482][ T5792] NILFS (loop0): discard dirty page: offset=131072, ino=3 [ 1150.665081][T27283] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1150.679105][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.691147][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1150.703645][ T5792] NILFS (loop0): discard dirty block: blocknr=46, size=1024 [ 1150.714506][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1151.619560][T27318] netlink: 'syz.4.9489': attribute type 10 has an invalid length. [ 1151.695209][T27318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.735892][T27318] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1151.753546][T27319] loop1: detected capacity change from 0 to 2048 [ 1151.825817][T27324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1151.913017][T27324] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1151.942552][T27328] syz.0.9491 uses obsolete (PF_INET,SOCK_PACKET) [ 1151.957198][T27324] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1151.996011][T27324] Remounting filesystem read-only [ 1152.093043][T27330] loop4: detected capacity change from 0 to 128 [ 1152.106247][ T5790] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1152.148361][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 1152.177798][ T5790] NILFS (loop1): discard dirty block: blocknr=17, size=1024 [ 1152.182825][T27330] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1152.186968][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.207247][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.223669][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.235158][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1152.242377][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.251610][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.261704][ T5790] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1152.270002][ T5790] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1152.279342][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 1152.286111][ T5790] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 1152.290561][T27330] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.294105][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.317668][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.342765][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.352046][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 1152.385364][T27336] loop0: detected capacity change from 0 to 2048 [ 1152.402439][ T5790] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 1152.417467][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.426424][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.428485][T27336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1152.458317][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.471049][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1152.477907][ T5790] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1152.489089][ T5790] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1152.497278][ T5790] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1152.505224][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.520038][ T27] audit: type=1800 audit(1755753524.264:129): pid=27336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9498" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 1152.534366][ T5790] NILFS (loop1): discard dirty page: offset=131072, ino=3 [ 1152.571772][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.598781][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.607840][ T5790] NILFS (loop1): discard dirty block: blocknr=46, size=1024 [ 1152.616261][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.627125][T26826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1153.425807][T27360] __nla_validate_parse: 1 callbacks suppressed [ 1153.425831][T27360] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9509'. [ 1154.181387][T27382] netlink: 'syz.0.9517': attribute type 10 has an invalid length. [ 1154.298865][T27382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.320705][T27382] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1155.130428][T27406] netlink: 'syz.4.9532': attribute type 10 has an invalid length. [ 1155.357788][T27410] netlink: 'syz.1.9542': attribute type 10 has an invalid length. [ 1155.759475][T27422] loop0: detected capacity change from 0 to 16 [ 1155.801803][T27422] erofs: (device loop0): mounted with root inode @ nid 36. [ 1155.842554][T27422] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 32811 of nid 36 [ 1156.280215][T27432] netlink: 'syz.3.9553': attribute type 1 has an invalid length. [ 1156.318787][T27432] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9553'. [ 1156.552162][T27418] loop1: detected capacity change from 0 to 32768 [ 1156.996371][T27451] netlink: 'syz.0.9554': attribute type 21 has an invalid length. [ 1157.029726][T27451] netlink: 'syz.0.9554': attribute type 1 has an invalid length. [ 1157.038449][T27451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9554'. [ 1157.943687][ T5844] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1158.044481][T27463] loop0: detected capacity change from 0 to 32768 [ 1158.168293][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 1158.189772][ T5844] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1158.223156][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1158.239278][ T5844] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1158.263992][ T5844] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1158.272538][T27466] loop4: detected capacity change from 0 to 32768 [ 1158.278917][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.318829][ T5844] usb 4-1: Product: syz [ 1158.323773][ T5844] usb 4-1: Manufacturer: syz [ 1158.329154][ T5844] usb 4-1: SerialNumber: syz [ 1158.337658][ T5844] usb 4-1: config 0 descriptor?? [ 1158.346013][T27468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1158.369330][ T5844] mceusb 4-1:0.0: mceusb_dev_probe: device setup failed! [ 1158.383568][ T5844] mceusb: probe of 4-1:0.0 failed with error -12 [ 1158.467088][T27476] loop1: detected capacity change from 0 to 256 [ 1158.563590][T27476] FAT-fs (loop1): Directory bread(block 64) failed [ 1158.572229][T27476] FAT-fs (loop1): Directory bread(block 65) failed [ 1158.594842][T27476] FAT-fs (loop1): Directory bread(block 66) failed [ 1158.600500][ T5844] usb 4-1: USB disconnect, device number 71 [ 1158.603355][T27476] FAT-fs (loop1): Directory bread(block 67) failed [ 1158.616312][T27476] FAT-fs (loop1): Directory bread(block 68) failed [ 1158.641442][T27476] FAT-fs (loop1): Directory bread(block 69) failed [ 1158.648485][T27476] FAT-fs (loop1): Directory bread(block 70) failed [ 1158.658381][T27476] FAT-fs (loop1): Directory bread(block 71) failed [ 1158.667792][T27476] FAT-fs (loop1): Directory bread(block 72) failed [ 1158.674674][T27476] FAT-fs (loop1): Directory bread(block 73) failed [ 1159.275129][T27488] loop0: detected capacity change from 0 to 512 [ 1159.304510][T27488] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.9572: iget: bad i_size value: 38620345925642 [ 1159.383463][T27488] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9572: couldn't read orphan inode 15 (err -117) [ 1159.435356][T27488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.560258][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.854937][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1160.163012][T27513] loop0: detected capacity change from 0 to 4096 [ 1160.221156][T27513] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1160.660416][T27527] loop4: detected capacity change from 0 to 512 [ 1160.709614][T27527] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.9588: iget: bad i_size value: 38620345925642 [ 1160.719098][T27529] xt_ecn: cannot match TCP bits for non-tcp packets [ 1160.800722][T27527] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9588: couldn't read orphan inode 15 (err -117) [ 1160.850923][T27527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.070520][T26826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.321648][T25759] IPVS: starting estimator thread 0... [ 1161.437754][T27542] IPVS: using max 23 ests per chain, 55200 per kthread [ 1161.495642][T27546] 9pnet_fd: p9_fd_create_unix (27546): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1161.593121][T27552] netlink: 'syz.1.9600': attribute type 1 has an invalid length. [ 1161.761461][T27552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1162.028367][T27566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9614'. [ 1162.305333][ T5798] IPVS: starting estimator thread 0... [ 1162.413379][T27577] IPVS: using max 18 ests per chain, 43200 per kthread [ 1162.733445][T27583] loop4: detected capacity change from 0 to 4096 [ 1162.763222][T27583] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1163.336649][T27606] comedi comedi4: bad chanlist[0]=0x04080007 chan=7 range length=2 [ 1163.628763][T27616] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1163.659136][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9631'. [ 1163.673090][ T27] audit: type=1326 audit(1755753534.694:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27617 comm="syz.1.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1163.691915][T27620] loop0: detected capacity change from 0 to 64 [ 1163.758996][ T27] audit: type=1326 audit(1755753534.694:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27617 comm="syz.1.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1163.817341][ T27] audit: type=1326 audit(1755753534.722:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27617 comm="syz.1.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1163.919315][ T27] audit: type=1326 audit(1755753534.722:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27617 comm="syz.1.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1163.982754][T27626] 9pnet_fd: p9_fd_create_unix (27626): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1164.004364][ T27] audit: type=1326 audit(1755753534.722:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27617 comm="syz.1.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1164.193947][ T27] audit: type=1326 audit(1755753535.181:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27629 comm="syz.3.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1164.217157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.300461][T27634] netlink: 'syz.0.9641': attribute type 21 has an invalid length. [ 1164.310334][ T27] audit: type=1326 audit(1755753535.181:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27629 comm="syz.3.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1164.328983][T27634] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9641'. [ 1164.400437][ T27] audit: type=1326 audit(1755753535.237:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27629 comm="syz.3.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1164.400489][ T27] audit: type=1326 audit(1755753535.237:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27629 comm="syz.3.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1165.180792][T25759] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1165.415883][T25759] usb 2-1: Using ep0 maxpacket: 16 [ 1165.440999][T25759] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1165.459716][T25759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1165.491089][T25759] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1165.547228][T25759] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1165.562287][T25759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.576686][T25759] usb 2-1: Product: syz [ 1165.581013][T25759] usb 2-1: Manufacturer: syz [ 1165.585647][T25759] usb 2-1: SerialNumber: syz [ 1165.617396][T25759] usb 2-1: config 0 descriptor?? [ 1165.629893][T27677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9661'. [ 1165.657660][T27654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1165.711794][T25759] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 1165.752418][T25759] mceusb: probe of 2-1:0.0 failed with error -12 [ 1165.976007][T27685] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 1165.992759][ T5844] usb 2-1: USB disconnect, device number 62 [ 1166.534536][T27699] netlink: 'syz.0.9672': attribute type 1 has an invalid length. [ 1166.943444][T27710] usb usb8: check_ctrlrecip: process 27710 (syz.0.9678) requesting ep 01 but needs 81 [ 1167.008050][T27710] usb usb8: usbfs: process 27710 (syz.0.9678) did not claim interface 0 before use [ 1167.538028][T27727] loop1: detected capacity change from 0 to 64 [ 1167.636105][T27727] hfs: unable to locate alternate MDB [ 1167.666897][T27727] hfs: continuing without an alternate MDB [ 1167.714497][T27727] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1168.034042][ T27] audit: type=1326 audit(1755753538.773:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27744 comm="syz.1.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ab8ebe9 code=0x7ffc0000 [ 1168.319776][T27755] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1168.346097][T27749] bond4: entered allmulticast mode [ 1168.978474][T27778] loop0: detected capacity change from 0 to 64 [ 1169.677650][T27796] loop0: detected capacity change from 0 to 4096 [ 1169.798895][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1170.003911][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 1170.018087][T27806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9724'. [ 1170.021771][ T55] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1170.087556][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.095670][ T55] usb 5-1: Product: syz [ 1170.125440][ T55] usb 5-1: Manufacturer: syz [ 1170.138582][ T55] usb 5-1: SerialNumber: syz [ 1170.171258][T27810] dvmrp0: entered allmulticast mode [ 1170.177594][ T55] r8152-cfgselector 5-1: config 0 descriptor?? [ 1170.430779][ T55] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1170.456669][ T55] r8152-cfgselector 5-1: bad CDC descriptors [ 1170.497040][ T55] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1170.517984][ T55] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 1170.978066][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1170.978087][ T27] audit: type=1326 audit(1755753541.532:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.3.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1171.061988][ T27] audit: type=1326 audit(1755753541.532:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.3.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1171.167682][ T27] audit: type=1326 audit(1755753541.579:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.3.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1171.259519][ T27] audit: type=1326 audit(1755753541.579:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.3.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1171.361350][ T27] audit: type=1326 audit(1755753541.579:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.3.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1171.385371][T27843] bridge0: port 4(netdevsim0) entered blocking state [ 1171.408866][T27843] bridge0: port 4(netdevsim0) entered disabled state [ 1171.453833][T27843] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1171.614296][T27852] loop0: detected capacity change from 0 to 64 [ 1171.684391][T27852] hfs: unable to locate alternate MDB [ 1171.689971][T27852] hfs: continuing without an alternate MDB [ 1171.724727][T27852] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1172.557731][T27876] lo speed is unknown, defaulting to 1000 [ 1173.110855][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9778'. [ 1173.137992][T27900] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9778'. [ 1173.318867][T27904] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9770'. [ 1173.848322][T27920] loop1: detected capacity change from 0 to 256 [ 1173.948507][T27920] FAT-fs (loop1): Directory bread(block 64) failed [ 1173.966125][T27920] FAT-fs (loop1): Directory bread(block 65) failed [ 1173.988411][T27920] FAT-fs (loop1): Directory bread(block 66) failed [ 1173.999098][T27920] FAT-fs (loop1): Directory bread(block 67) failed [ 1174.028787][T27920] FAT-fs (loop1): Directory bread(block 68) failed [ 1174.050692][T27920] FAT-fs (loop1): Directory bread(block 69) failed [ 1174.096357][T27920] FAT-fs (loop1): Directory bread(block 70) failed [ 1174.103148][T27920] FAT-fs (loop1): Directory bread(block 71) failed [ 1174.134813][T27920] FAT-fs (loop1): Directory bread(block 72) failed [ 1174.159227][T27920] FAT-fs (loop1): Directory bread(block 73) failed [ 1174.187432][T27924] lo speed is unknown, defaulting to 1000 [ 1174.545969][T27934] xt_l2tp: v2 doesn't support IP mode [ 1174.658210][T27940] bridge0: port 3(netdevsim0) entered blocking state [ 1174.667466][T27940] bridge0: port 3(netdevsim0) entered disabled state [ 1174.675653][T27940] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1174.688493][T27940] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1174.698288][T27940] bridge0: port 3(netdevsim0) entered blocking state [ 1174.706604][T27940] bridge0: port 3(netdevsim0) entered forwarding state [ 1175.162443][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1175.169123][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1175.709293][T27970] bridge0: port 4(netdevsim0) entered blocking state [ 1175.728254][T27970] bridge0: port 4(netdevsim0) entered disabled state [ 1175.756136][T27970] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1175.819631][T27966] lo speed is unknown, defaulting to 1000 [ 1176.208321][T27980] loop0: detected capacity change from 0 to 4096 [ 1176.739958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.168785][T28008] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1177.201941][T28008] hsr_slave_0: left promiscuous mode [ 1177.219097][T28008] hsr_slave_1: left promiscuous mode [ 1177.994194][T28002] loop4: detected capacity change from 0 to 32768 [ 1178.459383][T28032] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1178.465850][T28014] loop1: detected capacity change from 0 to 32768 [ 1178.558987][T28014] (syz.1.9824,28014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1178.607550][T28014] (syz.1.9824,28014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1178.703039][T28014] JBD2: Ignoring recovery information on journal [ 1178.783305][T28014] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1178.832680][T28014] (syz.1.9824,28014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1178.982278][T28014] (syz.1.9824,28014,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1179.038261][T28014] (syz.1.9824,28014,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 1179.062320][T28014] (syz.1.9824,28014,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 1179.076368][T28014] (syz.1.9824,28014,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1179.087768][T28014] (syz.1.9824,28014,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1179.096018][T28014] Quota error (device loop1): find_block_dqentry: Can't read quota tree block 6 [ 1179.106056][T28014] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1179.116964][T28014] (syz.1.9824,28014,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1179.124474][T28042] syz.4.9832 (28042): /proc/28041/oom_adj is deprecated, please use /proc/28041/oom_score_adj instead. [ 1179.142225][T28014] (syz.1.9824,28014,1):ocfs2_mknod:314 ERROR: status = -5 [ 1179.149706][T28014] (syz.1.9824,28014,1):ocfs2_mknod:502 ERROR: status = -5 [ 1179.158013][T28014] (syz.1.9824,28014,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1179.252571][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 1179.740660][T28058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1179.948217][ T27] audit: type=1326 audit(1755753549.923:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.0.9848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1180.021806][ T27] audit: type=1326 audit(1755753549.923:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.0.9848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1180.120108][ T27] audit: type=1326 audit(1755753549.923:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.0.9848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1180.183581][ T27] audit: type=1326 audit(1755753549.923:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.0.9848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1180.268724][T28077] QAT: failed to copy from user. [ 1180.300432][ T27] audit: type=1326 audit(1755753549.923:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.0.9848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1180.487476][T28083] binfmt_misc: register: failed to install interpreter file ./file0 [ 1180.720792][T28093] loop4: detected capacity change from 0 to 256 [ 1180.783196][T28093] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 1181.285975][T28108] binfmt_misc: register: failed to install interpreter file ./file0 [ 1181.348300][ T27] audit: type=1326 audit(1755753551.233:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28111 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1181.443514][ T27] audit: type=1326 audit(1755753551.233:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28111 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1181.542050][ T27] audit: type=1326 audit(1755753551.233:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28111 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f13ed78ebe9 code=0x7ffc0000 [ 1181.835948][T28124] QAT: failed to copy from user. [ 1182.388190][T28118] loop0: detected capacity change from 0 to 32768 [ 1182.561204][T28140] netlink: 'syz.4.9886': attribute type 12 has an invalid length. [ 1183.420620][T28158] loop4: detected capacity change from 0 to 4096 [ 1185.043781][T28215] deleting an unspecified loop device is not supported. [ 1185.193036][ T28] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1185.410261][ T28] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1185.431048][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.471638][ T28] usb 2-1: config 0 descriptor?? [ 1185.871303][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1185.960292][ T28] ath6kl: Failed to submit usb control message: -71 [ 1185.987927][ T28] ath6kl: unable to send the bmi data to the device: -71 [ 1186.005101][ T28] ath6kl: Unable to send get target info: -71 [ 1186.013018][ T28] ath6kl: Failed to init ath6kl core: -71 [ 1186.028153][ T28] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1186.073011][ T28] usb 2-1: USB disconnect, device number 63 [ 1186.081923][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.109710][ T5844] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1186.126840][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.164986][ T5844] usb 5-1: config 0 descriptor?? [ 1186.165764][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9938'. [ 1186.208001][T28248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9938'. [ 1186.718700][ T5844] usb 5-1: USB disconnect, device number 3 [ 1187.227174][T28268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1187.807487][T28286] 9pnet_fd: p9_fd_create_tcp (28286): problem connecting socket to 127.0.0.1 [ 1187.882856][T28288] netlink: 'syz.3.9959': attribute type 1 has an invalid length. [ 1188.213607][T28294] loop4: detected capacity change from 0 to 4096 [ 1188.355799][T28294] ntfs3: loop4: ino=5, "/" directory corrupted [ 1188.378138][T28294] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1188.812086][T28316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9973'. [ 1188.826697][T28316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9973'. [ 1188.872830][T28319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9974'. [ 1189.263835][T28331] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1189.464615][T28343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9984'. [ 1189.554869][ T28] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1189.773420][ T28] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1189.801873][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.826184][T28351] tmpfs: Bad value for 'mpol' [ 1189.831960][ T5844] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1189.849574][ T28] usb 5-1: config 0 descriptor?? [ 1190.049107][ T5844] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1190.069788][ T5844] usb 2-1: config 1 has no interface number 1 [ 1190.088066][ T5844] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1190.142360][ T5844] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1190.187691][ T5844] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1190.228185][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.237363][ T5844] usb 2-1: Product: syz [ 1190.259161][ T5844] usb 2-1: Manufacturer: syz [ 1190.264444][ T5844] usb 2-1: SerialNumber: syz [ 1190.327325][ T28] ath6kl: Failed to submit usb control message: -71 [ 1190.338102][ T28] ath6kl: unable to send the bmi data to the device: -71 [ 1190.369243][ T28] ath6kl: Unable to send get target info: -71 [ 1190.419756][ T28] ath6kl: Failed to init ath6kl core: -71 [ 1190.427122][ T28] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1190.469349][ T28] usb 5-1: USB disconnect, device number 4 [ 1190.522594][ T5844] usb 2-1: 2:1 : unsupported format bits 0x80 [ 1190.593300][ T5844] usb 2-1: USB disconnect, device number 64 [ 1191.247188][T28370] loop0: detected capacity change from 0 to 32768 [ 1191.297384][T28370] (syz.0.9997,28370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1191.351789][T28370] (syz.0.9997,28370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1191.444482][T28370] JBD2: Ignoring recovery information on journal [ 1191.653771][T28370] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1191.673308][T28370] (syz.0.9997,28370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1191.766922][ T55] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1191.841330][T28370] (syz.0.9997,28370,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1191.867696][T28370] (syz.0.9997,28370,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 1191.891071][T28370] (syz.0.9997,28370,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 1191.905932][T28370] (syz.0.9997,28370,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1191.914732][T28370] (syz.0.9997,28370,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1191.929218][T28370] __quota_error: 3 callbacks suppressed [ 1191.929237][T28370] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6 [ 1191.948166][T28370] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1191.961579][T28370] (syz.0.9997,28370,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1191.974102][T28370] (syz.0.9997,28370,0):ocfs2_mknod:314 ERROR: status = -5 [ 1191.984502][T28370] (syz.0.9997,28370,0):ocfs2_mknod:502 ERROR: status = -5 [ 1191.991883][T28370] (syz.0.9997,28370,0):ocfs2_mkdir:659 ERROR: status = -5 [ 1192.004076][ T55] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1192.019737][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.041998][ T55] usb 2-1: config 0 descriptor?? [ 1192.068516][ T55] cp210x 2-1:0.0: cp210x converter detected [ 1192.103666][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 1192.579599][ T55] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1192.601336][ T55] usb 2-1: USB disconnect, device number 65 [ 1192.644355][ T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1192.675520][ T55] cp210x 2-1:0.0: device disconnected [ 1193.654274][T28430] loop0: detected capacity change from 0 to 64 [ 1193.757795][T28430] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1193.823832][T28436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10030'. [ 1194.285153][T28443] loop1: detected capacity change from 0 to 4096 [ 1195.269556][T28476] loop4: detected capacity change from 0 to 2048 [ 1195.277817][T28478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1195.322139][T28478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1195.365199][T28476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1196.325850][T28511] loop4: detected capacity change from 0 to 512 [ 1196.370936][T28511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1196.481584][T28511] EXT4-fs (loop4): 1 truncate cleaned up [ 1196.489744][T28511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.707514][T26826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.203913][T28540] loop1: detected capacity change from 0 to 256 [ 1197.306154][ T27] audit: type=1326 audit(1755753566.154:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28543 comm="syz.4.10081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321718ebe9 code=0x7ffc0000 [ 1197.347825][ T27] audit: type=1326 audit(1755753566.191:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28543 comm="syz.4.10081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321718ebe9 code=0x7ffc0000 [ 1197.458106][ T27] audit: type=1326 audit(1755753566.228:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28543 comm="syz.4.10081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f321718ebe9 code=0x7ffc0000 [ 1197.551526][ T27] audit: type=1326 audit(1755753566.228:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28543 comm="syz.4.10081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321718ebe9 code=0x7ffc0000 [ 1197.644898][ T27] audit: type=1326 audit(1755753566.228:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28543 comm="syz.4.10081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321718ebe9 code=0x7ffc0000 [ 1197.721390][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10086'. [ 1198.571266][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10097'. [ 1198.821414][T28587] loop0: detected capacity change from 0 to 2048 [ 1198.847412][T28587] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1198.916443][T28587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1199.880923][T28621] bpf: Bad value for 'mode' [ 1200.172517][T28632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10123'. [ 1200.195130][T28632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10123'. [ 1200.227859][T28632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10123'. [ 1200.821451][T28655] comedi comedi0: fl512: I/O port conflict (0xee,16) [ 1201.246147][T28669] loop0: detected capacity change from 0 to 512 [ 1201.329536][T28669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1201.386228][T28669] EXT4-fs (loop0): 1 truncate cleaned up [ 1201.424481][T28669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.522950][T28678] loop4: detected capacity change from 0 to 256 [ 1201.589711][T28678] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1201.649873][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.804801][ T5798] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1202.042312][ T5798] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1202.072408][ T5798] usb 4-1: config 1 has no interface number 1 [ 1202.089765][ T5798] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1202.125800][ T5798] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1202.129977][T28667] loop1: detected capacity change from 0 to 32768 [ 1202.151046][ T5798] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1202.160570][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.190045][ T5798] usb 4-1: Product: syz [ 1202.203777][ T5798] usb 4-1: Manufacturer: syz [ 1202.211237][ T5798] usb 4-1: SerialNumber: syz [ 1202.241652][T28667] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1202.444419][ T5798] usb 4-1: 2:1 : unsupported format bits 0x80 [ 1202.498292][ T5798] usb 4-1: USB disconnect, device number 72 [ 1202.552719][T28667] XFS (loop1): Ending clean mount [ 1202.657884][ T8969] udevd[8969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1202.743489][ T5790] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1202.783387][T28683] loop4: detected capacity change from 0 to 40427 [ 1202.886849][T28683] F2FS-fs (loop4): invalid crc value [ 1202.904617][T28683] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1203.045008][T28685] loop0: detected capacity change from 0 to 32768 [ 1203.058654][T28683] F2FS-fs (loop4): Start checkpoint disabled! [ 1203.125486][T28683] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1203.311947][T28697] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1203.319976][T28697] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1203.553746][T28703] netlink: 'syz.3.10155': attribute type 21 has an invalid length. [ 1204.082741][T28717] qrtr: Invalid version 195 [ 1206.908051][T28802] netlink: 'syz.4.10201': attribute type 21 has an invalid length. [ 1207.015700][T28778] loop1: detected capacity change from 0 to 32768 [ 1207.164798][T28778] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1207.377316][T28778] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has 8388607 used bits but only 2048 total [ 1207.423754][T28778] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1207.485609][T28810] loop4: detected capacity change from 0 to 4096 [ 1207.494126][T28778] OCFS2: File system is now read-only. [ 1207.499774][T28778] (syz.1.10189,28778,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1207.523785][T28778] (syz.1.10189,28778,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1207.554602][T28778] (syz.1.10189,28778,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1207.570413][T28810] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1207.578244][T28778] (syz.1.10189,28778,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1207.605978][T28778] (syz.1.10189,28778,0):ocfs2_mknod:385 ERROR: status = -30 [ 1207.626475][T28778] (syz.1.10189,28778,0):ocfs2_mknod:502 ERROR: status = -30 [ 1207.627550][T28810] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1207.679106][T28778] (syz.1.10189,28778,0):ocfs2_create:676 ERROR: status = -30 [ 1207.838194][ T5790] (syz-executor,5790,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1207.859226][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 1208.058691][T28827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1208.537275][T28837] loop4: detected capacity change from 0 to 1024 [ 1208.637229][T28837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1208.774025][T28837] EXT4-fs error (device loop4): __ext4_remount:6741: comm syz.4.10217: Abort forced by user [ 1208.797783][T28837] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1208.904785][T26826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.065703][T28852] loop0: detected capacity change from 0 to 1024 [ 1209.118631][T28852] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1209.196808][T28852] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.10230: Invalid block bitmap block 0 in block_group 0 [ 1209.284532][T28852] Quota error (device loop0): write_blk: dquota write failed [ 1209.351870][T28852] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1209.373500][T28852] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.10230: Failed to acquire dquot type 0 [ 1209.450574][T28852] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.10230: Freeing blocks not in datazone - block = 0, count = 4096 [ 1209.505813][T28852] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.10230: Invalid inode bitmap blk 0 in block_group 0 [ 1209.523818][ T48] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1209.569946][ T48] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 1209.582239][T28852] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 1209.608519][T28852] EXT4-fs (loop0): 1 orphan inode deleted [ 1209.632363][T28852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.865596][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.949612][T28868] xt_hashlimit: max too large, truncated to 1048576 [ 1209.972182][T28868] xt_bpf: check failed: parse error [ 1210.441904][T28886] loop1: detected capacity change from 0 to 1024 [ 1210.491330][T28886] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1210.535846][T28886] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.10239: Invalid block bitmap block 0 in block_group 0 [ 1210.587789][T28886] Quota error (device loop1): write_blk: dquota write failed [ 1210.619850][T28886] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1210.688920][T28886] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.10239: Failed to acquire dquot type 0 [ 1210.738794][T28886] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.10239: Freeing blocks not in datazone - block = 0, count = 4096 [ 1210.810931][T28886] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.10239: Invalid inode bitmap blk 0 in block_group 0 [ 1210.827171][ T48] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 1210.848115][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 1210.900996][T28886] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1210.931991][T28886] EXT4-fs (loop1): 1 orphan inode deleted [ 1210.943951][T28886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.109981][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.499324][T28908] loop1: detected capacity change from 0 to 64 [ 1211.570810][T28890] loop0: detected capacity change from 0 to 32768 [ 1211.660405][T28890] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1212.063237][T28890] XFS (loop0): Ending clean mount [ 1212.181039][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1212.543120][T28930] loop4: detected capacity change from 0 to 1024 [ 1212.653212][T28930] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1212.740886][T28930] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.10254: Invalid block bitmap block 0 in block_group 0 [ 1212.826418][T28930] Quota error (device loop4): write_blk: dquota write failed [ 1212.834111][T28930] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1212.914045][T28930] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.10254: Failed to acquire dquot type 0 [ 1212.944238][T28930] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.10254: Freeing blocks not in datazone - block = 0, count = 4096 [ 1213.004803][T28930] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.10254: Invalid inode bitmap blk 0 in block_group 0 [ 1213.064139][T28930] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 1213.073525][ T42] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 1213.104454][ T42] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 1213.126266][T28930] EXT4-fs (loop4): 1 orphan inode deleted [ 1213.133599][T28930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.348028][T26826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.389205][T28956] loop0: detected capacity change from 0 to 256 [ 1213.585276][T28959] loop1: detected capacity change from 0 to 1024 [ 1213.811219][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1213.979799][T28973] netlink: 'syz.4.10274': attribute type 1 has an invalid length. [ 1214.170263][T28976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10276'. [ 1214.750422][ T8] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1214.985829][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1215.010408][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1215.031107][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.051131][T29004] loop0: detected capacity change from 0 to 512 [ 1215.053585][ T8] usb 2-1: Product: syz [ 1215.080099][ T8] usb 2-1: Manufacturer: syz [ 1215.081822][T29004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1215.109698][ T8] usb 2-1: SerialNumber: syz [ 1215.139643][T29004] EXT4-fs (loop0): 1 truncate cleaned up [ 1215.140514][ T8] usb 2-1: config 0 descriptor?? [ 1215.152635][T29004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.227156][T29004] EXT4-fs error (device loop0): ext4_get_parent:1910: comm syz.0.10290: inode #2: comm syz.0.10290: iget: illegal inode # [ 1215.257834][T29010] loop4: detected capacity change from 0 to 256 [ 1215.444375][ T8] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1215.447263][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.661354][ T8] usb write operation failed. (-71) [ 1215.686304][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1215.702179][ T8] dvbdev: DVB: registering new adapter (Terratec H7) [ 1215.713813][ T8] usb 2-1: media controller created [ 1215.723822][ T8] usb read operation failed. (-71) [ 1215.742384][ T8] usb write operation failed. (-71) [ 1215.769515][ T8] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 1215.806089][ T8] usb 2-1: USB disconnect, device number 66 [ 1216.207462][T29030] netlink: 'syz.0.10301': attribute type 1 has an invalid length. [ 1216.491924][T29039] ip6gre1: entered promiscuous mode [ 1216.720408][T29046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10310'. [ 1216.992833][T29052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10312'. [ 1217.158318][T29060] ip6gre1: entered promiscuous mode [ 1217.262612][ T23] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1217.476268][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1217.490250][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1217.511638][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.528961][ T23] usb 1-1: Product: syz [ 1217.534639][ T23] usb 1-1: Manufacturer: syz [ 1217.539447][ T23] usb 1-1: SerialNumber: syz [ 1217.575212][ T23] usb 1-1: config 0 descriptor?? [ 1217.868422][ T23] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1218.096389][ T23] usb write operation failed. (-71) [ 1218.120391][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1218.152844][ T23] dvbdev: DVB: registering new adapter (Terratec H7) [ 1218.171207][ T23] usb 1-1: media controller created [ 1218.196814][ T23] usb read operation failed. (-71) [ 1218.224808][ T23] usb write operation failed. (-71) [ 1218.239128][ T23] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 1218.295842][ T23] usb 1-1: USB disconnect, device number 67 [ 1218.917426][T29110] loop4: detected capacity change from 0 to 8 [ 1218.976597][T29110] unable to read id index table [ 1219.634144][ C0] vkms_vblank_simulate: vblank timer overrun [ 1220.031300][T29134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10352'. [ 1220.418705][T29126] loop4: detected capacity change from 0 to 32768 [ 1220.488635][T29126] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1220.618424][T29126] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has 8388607 used bits but only 2048 total [ 1220.735115][T29126] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1220.769916][T29126] OCFS2: File system is now read-only. [ 1220.794718][T29126] (syz.4.10348,29126,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1220.854645][T29126] (syz.4.10348,29126,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1220.876788][T29126] (syz.4.10348,29126,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1220.936266][T29126] (syz.4.10348,29126,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1220.988410][T29126] (syz.4.10348,29126,1):ocfs2_mknod:385 ERROR: status = -30 [ 1221.022321][T29126] (syz.4.10348,29126,1):ocfs2_mknod:502 ERROR: status = -30 [ 1221.062901][T29126] (syz.4.10348,29126,1):ocfs2_create:676 ERROR: status = -30 [ 1221.178404][T26826] (syz-executor,26826,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1221.210126][T29162] loop1: detected capacity change from 0 to 256 [ 1221.233608][T26826] ocfs2: Unmounting device (7,4) on (node local) [ 1221.611539][T29172] loop0: detected capacity change from 0 to 1024 [ 1221.865472][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1222.564903][T27042] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1222.719588][T29206] binder: 29205:29206 ioctl c0306201 200000000080 returned -14 [ 1222.797393][T27042] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1222.812501][T27042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.841835][T27042] usb 1-1: config 0 descriptor?? [ 1222.875126][T27042] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1223.279403][T29202] loop1: detected capacity change from 0 to 32768 [ 1223.316107][T27042] gp8psk: usb in 137 operation failed. [ 1223.334247][T27042] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1223.371303][T29202] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1223.377090][T27042] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1223.445800][T29202] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1223.501142][T27042] usb 1-1: USB disconnect, device number 68 [ 1223.585960][T29202] (syz.1.10386,29202,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 1223.618604][T29202] (syz.1.10386,29202,0):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 1223.777293][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 1223.934707][T29226] loop1: detected capacity change from 0 to 8 [ 1224.029519][T29226] unable to read id index table [ 1224.636421][T29240] loop1: detected capacity change from 0 to 512 [ 1224.677139][T29240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1224.769098][T29240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.804530][T29240] ext4 filesystem being mounted at /2606/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.078518][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.358440][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10412'. [ 1225.405533][T29265] openvswitch: netlink: Message has 8 unknown bytes. [ 1227.010063][T29323] autofs4:pid:29323:autofs_fill_super: called with bogus options [ 1227.260437][T29331] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.10449'. [ 1227.495123][T29341] batadv0: entered promiscuous mode [ 1227.510445][T29341] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1227.607134][T29345] loop1: detected capacity change from 0 to 512 [ 1227.614205][T29343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10453'. [ 1227.625175][T29345] EXT4-fs: Ignoring removed bh option [ 1227.642474][T29343] openvswitch: netlink: Message has 8 unknown bytes. [ 1227.694540][T29345] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1227.748253][T29345] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1227.816537][T29345] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1227.828091][T29345] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1227.846985][T29345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.881443][T29345] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1227.923959][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.219738][T29362] loop0: detected capacity change from 0 to 256 [ 1228.327807][T29365] tunl0: entered promiscuous mode [ 1228.363292][T29365] netlink: 'syz.1.10464': attribute type 4 has an invalid length. [ 1228.429932][T29365] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10464'. [ 1228.881322][T29379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10471'. [ 1229.564304][T29369] loop4: detected capacity change from 0 to 32768 [ 1229.648674][T29369] ea_get: invalid extended attribute [ 1229.658780][T29369] ffff88805b8a3170: 04 00 00 00 .... [ 1229.858096][T29403] ieee802154 phy0 wpan0: encryption failed: -22 [ 1229.860949][T29405] autofs4:pid:29405:autofs_fill_super: called with bogus options [ 1230.141029][T29411] batadv0: entered promiscuous mode [ 1230.184496][T29411] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1230.913891][T29436] batadv0: entered promiscuous mode [ 1230.943341][T29436] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1230.963747][T29440] sctp: [Deprecated]: syz.3.10501 (pid 29440) Use of int in max_burst socket option. [ 1230.963747][T29440] Use struct sctp_assoc_value instead [ 1230.982360][T29442] tunl0: left promiscuous mode [ 1231.039282][T29442] ipvlan1: left promiscuous mode [ 1231.143353][T29442] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 1231.531918][T29456] netlink: 'syz.4.10509': attribute type 21 has an invalid length. [ 1231.554967][T29456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10509'. [ 1231.715448][T29462] sctp: [Deprecated]: syz.0.10511 (pid 29462) Use of int in max_burst socket option. [ 1231.715448][T29462] Use struct sctp_assoc_value instead [ 1232.408794][T29488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10525'. [ 1232.501431][T29490] loop4: detected capacity change from 0 to 1024 [ 1233.004849][T29504] loop0: detected capacity change from 0 to 2048 [ 1233.091307][T29507] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1233.143979][T29504] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1233.195102][ T8] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1233.218758][T29504] Remounting filesystem read-only [ 1233.225844][T29511] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1233.245264][T29511] overlayfs: conflicting options: metacopy=off,verity=on [ 1233.264008][T29513] loop1: detected capacity change from 0 to 1024 [ 1233.285942][ T5792] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1233.297420][ T5792] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1233.306466][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.328309][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.332495][T29513] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1233.339122][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.367759][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1233.395814][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1233.399297][T29513] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1233.416172][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.428605][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1233.435543][ T5792] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1233.458910][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1233.468551][ T5792] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1233.476350][ T5792] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1233.481213][T29515] loop4: detected capacity change from 0 to 512 [ 1233.484969][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.497499][ T8] usb 4-1: config 1 has no interface number 1 [ 1233.508837][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1233.536989][T29513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.597680][T29515] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1233.625700][ T8] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1233.653758][T29515] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 1233.662793][ T27] audit: type=1326 audit(1755753600.167:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29522 comm="syz.0.10540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1233.695273][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1233.700564][T29513] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.10537: missing EA_INODE flag [ 1233.710066][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.722729][T29515] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.10539: Corrupt directory, running e2fsck is recommended [ 1233.726766][ T8] usb 4-1: Product: syz [ 1233.744968][ T8] usb 4-1: Manufacturer: syz [ 1233.749785][ T8] usb 4-1: SerialNumber: syz [ 1233.772551][ T27] audit: type=1326 audit(1755753600.204:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29522 comm="syz.0.10540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1233.798866][T29515] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1233.804233][ T27] audit: type=1326 audit(1755753600.232:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29522 comm="syz.0.10540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1233.857065][T29513] EXT4-fs (loop1): Remounting filesystem read-only [ 1233.883857][ T27] audit: type=1326 audit(1755753600.232:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29522 comm="syz.0.10540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1233.903748][T29515] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.10539: corrupted in-inode xattr: invalid ea_ino [ 1233.914885][ T27] audit: type=1326 audit(1755753600.232:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29522 comm="syz.0.10540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811f18ebe9 code=0x7ffc0000 [ 1233.984508][T29515] EXT4-fs (loop4): Remounting filesystem read-only [ 1233.998463][T29515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.021928][ T8] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1234.064802][ T8] usb 4-1: MIDIStreaming interface descriptor not found [ 1234.069781][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.180228][ T8] usb 4-1: USB disconnect, device number 73 [ 1234.212050][T29515] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1234.386075][T26826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.651597][T29534] loop0: detected capacity change from 0 to 4096 [ 1234.661662][T29538] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10546'. [ 1234.667202][T29534] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1234.804372][T29534] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1234.836838][T29534] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1234.868638][T29534] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1234.909581][T29534] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1235.086805][T29534] ntfs: volume version 3.1. [ 1235.562542][T29562] netlink: 'syz.4.10557': attribute type 3 has an invalid length. [ 1235.784220][T29567] x_tables: duplicate underflow at hook 2 [ 1236.072932][ T8] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1236.279973][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1236.291822][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1236.322729][ T8] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1236.354956][ T8] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1236.386919][ T8] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1236.397228][ T8] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1236.443044][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1236.450000][ T8] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1236.494112][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.523545][ T8] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1236.566437][T29572] loop0: detected capacity change from 0 to 32768 [ 1236.606470][T29572] (syz.0.10562,29572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1236.661872][T29572] (syz.0.10562,29572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1236.723654][T29572] JBD2: Ignoring recovery information on journal [ 1236.772180][ T8] scsi host1: usb-storage 2-1:1.0 [ 1236.869377][T29572] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1236.987585][ T8] usb 2-1: USB disconnect, device number 67 [ 1237.115322][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 1237.786709][T29623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10585'. [ 1238.426224][T29642] loop0: detected capacity change from 0 to 2048 [ 1238.551935][T29642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1238.860955][T29655] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10601'. [ 1238.893396][T29655] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1239.354937][T29675] netlink: 'syz.0.10610': attribute type 4 has an invalid length. [ 1239.460383][T29677] Cannot find set identified by id 65535 to match [ 1239.511750][T29679] loop4: detected capacity change from 0 to 8 [ 1239.792008][T29687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10617'. [ 1239.904099][ T28] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1240.079104][T29699] syz.1.10623[29699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1240.079273][T29699] syz.1.10623[29699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1240.150681][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 1240.184784][ T28] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1240.203142][ T28] usb 1-1: config 2 has no interface number 0 [ 1240.214008][ T28] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1240.232150][ T28] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1240.267584][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.276465][ T28] usb 1-1: Product: syz [ 1240.298748][ T28] usb 1-1: Manufacturer: syz [ 1240.320915][ T28] usb 1-1: SerialNumber: syz [ 1240.784743][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.796518][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.849151][ T28] ch9200: probe of 1-1:2.31 failed with error -22 [ 1240.861063][ T28] usb 1-1: USB disconnect, device number 69 [ 1241.113490][T29726] loop1: detected capacity change from 0 to 256 [ 1241.194076][T29726] FAT-fs (loop1): Directory bread(block 64) failed [ 1241.218720][T29726] FAT-fs (loop1): Directory bread(block 65) failed [ 1241.245380][T29726] FAT-fs (loop1): Directory bread(block 66) failed [ 1241.289638][T29726] FAT-fs (loop1): Directory bread(block 67) failed [ 1241.332660][T29726] FAT-fs (loop1): Directory bread(block 68) failed [ 1241.347424][T29726] FAT-fs (loop1): Directory bread(block 69) failed [ 1241.354551][T29726] FAT-fs (loop1): Directory bread(block 70) failed [ 1241.362003][T29732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10639'. [ 1241.369555][T29726] FAT-fs (loop1): Directory bread(block 71) failed [ 1241.378642][T29726] FAT-fs (loop1): Directory bread(block 72) failed [ 1241.385988][T29726] FAT-fs (loop1): Directory bread(block 73) failed [ 1241.964861][T29744] loop4: detected capacity change from 0 to 4096 [ 1241.993765][T29744] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1242.399841][T29756] program syz.3.10651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1242.924963][T29738] loop0: detected capacity change from 0 to 32768 [ 1243.052137][T29738] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1243.212494][T29789] IPVS: length: 250 != 8 [ 1243.317834][T29792] loop1: detected capacity change from 0 to 256 [ 1243.371855][T29738] XFS (loop0): Ending clean mount [ 1243.391909][T29738] XFS (loop0): Quotacheck needed: Please wait. [ 1243.459719][T29792] FAT-fs (loop1): Directory bread(block 64) failed [ 1243.480850][T29792] FAT-fs (loop1): Directory bread(block 65) failed [ 1243.517693][T29792] FAT-fs (loop1): Directory bread(block 66) failed [ 1243.524427][T29792] FAT-fs (loop1): Directory bread(block 67) failed [ 1243.543644][T29738] XFS (loop0): Quotacheck: Done. [ 1243.554692][T29792] FAT-fs (loop1): Directory bread(block 68) failed [ 1243.569997][T29792] FAT-fs (loop1): Directory bread(block 69) failed [ 1243.594345][T29792] FAT-fs (loop1): Directory bread(block 70) failed [ 1243.601159][T29792] FAT-fs (loop1): Directory bread(block 71) failed [ 1243.637790][T29792] FAT-fs (loop1): Directory bread(block 72) failed [ 1243.644617][T29792] FAT-fs (loop1): Directory bread(block 73) failed [ 1243.755713][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1243.998443][T29800] loop4: detected capacity change from 0 to 4096 [ 1244.239393][T29806] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1244.874321][T29823] loop0: detected capacity change from 0 to 2048 [ 1244.936285][T29823] syz.0.10680: attempt to access beyond end of device [ 1244.936285][T29823] loop0: rw=0, sector=562949953421392, nr_sectors = 2 limit=2048 [ 1244.963175][T29826] netlink: 'syz.3.10681': attribute type 13 has an invalid length. [ 1245.007509][T29823] NILFS (loop0): I/O error reading meta-data file (ino=4, block-offset=0) [ 1245.050895][T29823] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2) [ 1246.018582][ T5798] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1246.256179][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 1246.270677][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1246.299987][ T5798] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.328580][ T5798] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1246.359826][ T5798] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1246.395551][ T5798] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1246.424770][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.433049][ T5798] usb 1-1: Product: syz [ 1246.465125][ T5798] usb 1-1: Manufacturer: syz [ 1246.477460][ T5798] usb 1-1: SerialNumber: syz [ 1246.521370][ T5798] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input62 [ 1246.711524][ T5144] bcm5974 1-1:1.0: could not read from device [ 1246.726856][T29880] loop1: detected capacity change from 0 to 512 [ 1246.766602][ T5798] bcm5974 1-1:1.0: could not read from device [ 1246.829908][ T5144] bcm5974 1-1:1.0: could not read from device [ 1246.846882][T29880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.861129][ T5798] input: failed to attach handler mousedev to device input62, error: -5 [ 1246.906852][ T5144] bcm5974 1-1:1.0: could not read from device [ 1246.921455][ T5798] usb 1-1: USB disconnect, device number 70 [ 1246.960237][T29880] ext4 filesystem being mounted at /2681/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.073955][T29880] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.10705: Directory hole found for htree leaf block 0 [ 1247.128750][T29880] EXT4-fs (loop1): Remounting filesystem read-only [ 1247.153738][T29889] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.10708'. [ 1247.246127][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.287896][T15060] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1247.321056][T15060] __quota_error: 3 callbacks suppressed [ 1247.321075][T15060] Quota error (device loop1): write_blk: dquota write failed [ 1247.346118][T15060] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 1247.368473][T15060] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1247.419016][T15060] Quota error (device loop1): write_blk: dquota write failed [ 1247.426618][T15060] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 1247.597711][T29897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10713'. [ 1247.644373][T29897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1247.652060][T29897] IPv6: NLM_F_CREATE should be set when creating new route [ 1247.659601][T29897] IPv6: NLM_F_CREATE should be set when creating new route [ 1247.855801][T29908] program syz.4.10718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1248.192866][T29917] loop4: detected capacity change from 0 to 2048 [ 1248.297614][T29921] batadv1: entered promiscuous mode [ 1248.331278][T29921] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1248.375534][T29924] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1248.511710][T29917] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1248.552285][T29917] Remounting filesystem read-only [ 1248.677130][T26826] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1248.701813][T26826] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 1248.731187][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1248.787306][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1248.818431][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1248.851228][T26826] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1248.864288][T26826] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1248.871739][T26826] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 1248.891630][T26826] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 1248.916757][T26826] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 1248.929679][T26826] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.276130][T29919] loop1: detected capacity change from 0 to 32768 [ 1249.326047][T29919] (syz.1.10723,29919,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1249.384934][T29919] (syz.1.10723,29919,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1249.520930][T29919] JBD2: Ignoring recovery information on journal [ 1249.694691][T29919] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1249.884752][T29956] vivid-004: disconnect [ 1249.911147][T29955] vivid-004: reconnect [ 1250.051352][T29960] loop0: detected capacity change from 0 to 1024 [ 1250.061372][T29960] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1250.062003][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 1250.113889][T29960] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1250.191351][T29960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.295119][T29965] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1250.429794][T29960] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.10742: missing EA_INODE flag [ 1250.540651][T29960] EXT4-fs (loop0): Remounting filesystem read-only [ 1250.661029][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.880951][T29980] loop1: detected capacity change from 0 to 1024 [ 1251.394798][T29993] netlink: 'syz.4.10757': attribute type 15 has an invalid length. [ 1251.425099][T29993] netlink: 25 bytes leftover after parsing attributes in process `syz.4.10757'. [ 1251.684366][T25759] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1251.862739][T30002] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 1251.890554][T25759] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1251.926759][T25759] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.963847][T25759] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1252.003059][T25759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.033137][T25759] usb 1-1: Product: syz [ 1252.044287][T25759] usb 1-1: Manufacturer: syz [ 1252.070505][T25759] usb 1-1: SerialNumber: syz [ 1252.102753][T25759] usb 1-1: config 0 descriptor?? [ 1252.124607][T25759] snd-usb-audio: probe of 1-1:0.0 failed with error -90 [ 1252.275403][T30012] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10766'. [ 1252.295481][T30013] loop4: detected capacity change from 0 to 512 [ 1252.351753][ T23] usb 1-1: USB disconnect, device number 71 [ 1252.373637][T30013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.390077][T30013] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.504183][T30013] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.10765: Directory hole found for htree leaf block 0 [ 1252.564304][T30013] EXT4-fs (loop4): Remounting filesystem read-only [ 1252.624431][T26826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.641769][ T11] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1252.655390][ T11] Quota error (device loop4): write_blk: dquota write failed [ 1252.663616][ T11] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 1252.684138][ T11] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1252.705964][ T11] Quota error (device loop4): write_blk: dquota write failed [ 1252.721349][ T11] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 1253.088333][T30028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1253.340441][T30030] loop0: detected capacity change from 0 to 4096 [ 1253.782495][T30042] loop4: detected capacity change from 0 to 4096 [ 1253.837544][T30042] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1253.972729][T30042] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1254.013024][T30042] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1254.079223][T30042] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1254.153861][T30042] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1254.297311][T30042] ntfs: volume version 3.1. [ 1254.388972][T30042] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 1254.431835][T30042] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 1254.471504][T30058] loop1: detected capacity change from 0 to 4096 [ 1254.502547][T30058] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1254.588343][T30058] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1254.698925][T30058] ntfs3: loop1: failed to convert "c46c" to macceltic [ 1256.046567][T30102] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1256.055442][T30102] bridge0: port 5(veth0_to_bridge) entered disabled state [ 1256.063508][T30102] veth0_to_bridge: entered allmulticast mode [ 1256.072777][T30102] veth0_to_bridge: entered promiscuous mode [ 1256.079832][T30102] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1256.093860][T30102] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1256.101311][T30102] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 1256.400119][T30112] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1256.868381][T30094] loop4: detected capacity change from 0 to 32768 [ 1256.970320][T30094] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1257.142303][T30094] XFS (loop4): Ending clean mount [ 1257.168256][ T8] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1257.210171][T30094] XFS (loop4): Quotacheck needed: Please wait. [ 1257.304065][T30094] XFS (loop4): Quotacheck: Done. [ 1257.394870][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.423040][ T8] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.471282][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1257.484502][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.501995][ T8] usb 1-1: Product: syz [ 1257.518786][ T8] usb 1-1: Manufacturer: syz [ 1257.540338][ T8] usb 1-1: SerialNumber: syz [ 1257.551390][T26826] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1257.579754][ T8] cdc_ncm 1-1:1.0: skipping garbage [ 1257.592246][ T8] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 1257.605072][ T8] cdc_ncm 1-1:1.0: bind() failure [ 1257.617419][ T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1257.631219][ T8] cdc_ncm 1-1:1.1: bind() failure [ 1257.954945][T30151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10830'. [ 1257.986758][T30151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10830'. [ 1258.025188][T25759] usb 1-1: USB disconnect, device number 72 [ 1258.235698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.535317][T30165] netlink: 'syz.3.10836': attribute type 1 has an invalid length. [ 1260.091620][T30217] netlink: 'syz.0.10862': attribute type 10 has an invalid length. [ 1260.153662][T30217] bridge0: port 5(veth0_to_bridge) entered disabled state [ 1260.161543][T30217] bridge0: port 3(dummy0) entered disabled state [ 1260.168506][T30217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.176334][T30217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.288160][T30217] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1260.295945][T30217] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 1260.304657][T30217] bridge0: port 3(dummy0) entered blocking state [ 1260.311281][T30217] bridge0: port 3(dummy0) entered forwarding state [ 1260.318528][T30217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.326115][T30217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.333901][T30217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.341280][T30217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.425572][T30217] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1260.443691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.456701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.470060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.483009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.495963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.508864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.522098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.535163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.548362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.561140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1260.852170][T30232] libceph: resolve '40.' (ret=-3): failed [ 1261.779615][T30248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10876'. [ 1261.834949][T30248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10876'. [ 1262.608281][T30263] geneve3: entered promiscuous mode [ 1263.455283][T30275] netlink: 'syz.4.10891': attribute type 5 has an invalid length. [ 1263.541293][T30275] ip6erspan0: entered promiscuous mode [ 1263.903983][ T27] audit: type=1326 audit(1755753628.436:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.3.10894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13ed78ebe9 code=0x0 [ 1264.903316][T15512] Bluetooth: hci4: command 0x0406 tx timeout [ 1265.795340][ C1] net_ratelimit: 10766 callbacks suppressed [ 1265.795365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.806962][T30313] program syz.3.10909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1265.813991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.836170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.848923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.861861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.874842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.888178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.900987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.913960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1265.926680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1266.087985][T30319] vlan0: entered promiscuous mode [ 1267.149106][T30335] program syz.4.10920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1270.130757][T30380] loop0: detected capacity change from 0 to 512 [ 1270.221573][T30380] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1270.472562][ T5792] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1271.151033][ C1] net_ratelimit: 11217 callbacks suppressed [ 1271.151062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.170181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.172326][ T5798] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1271.183143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.202716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.215498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.228585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.241255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.254395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.267021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.280520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 1271.421434][ T5798] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.439161][ T5798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.460909][ T5798] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1271.479547][ T5798] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1271.489136][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.503692][ T5798] usb 4-1: Product: syz [ 1271.507936][ T5798] usb 4-1: Manufacturer: syz [ 1271.512657][ T5798] usb 4-1: SerialNumber: syz [ 1271.557936][ T5798] usb 4-1: selecting invalid altsetting 1 [ 1271.564005][ T5798] usb 4-1: selecting invalid altsetting 0 [ 1271.581954][ T5798] usb 4-1: selecting invalid altsetting 0 [ 1271.588345][ T5798] cdc_ncm 4-1:1.0: bind() failure [ 1271.607761][ T5798] usb 4-1: selecting invalid altsetting 0 [ 1271.618751][ T5798] usbtest: probe of 4-1:1.1 failed with error -22 [ 1271.861281][ T5798] usb 4-1: USB disconnect, device number 74 [ 1272.945697][ T29] INFO: task syz-executor:5791 blocked for more than 143 seconds. [ 1272.989164][ T29] Not tainted 6.6.101-syzkaller #0 [ 1273.020278][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1273.118020][ T29] task:syz-executor state:D stack:21736 pid:5791 ppid:1 flags:0x00004004 [ 1273.174439][ T29] Call Trace: [ 1273.188756][ T29] [ 1273.215406][ T29] __schedule+0x14d2/0x44d0 [ 1273.249149][ T29] ? asan.module_dtor+0x20/0x20 [ 1273.292811][ T29] ? mark_lock+0x94/0x320 [ 1273.341917][ T29] ? lock_chain_count+0x20/0x20 [ 1273.393402][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1273.439330][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1273.482685][ T29] schedule+0xbd/0x170 [ 1273.522382][ T29] io_schedule+0x80/0xd0 [ 1273.534755][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 1273.565782][ T29] ? folio_wait_bit+0x30/0x30 [ 1273.588505][ T29] ? filemap_get_entry+0x35c/0x3c0 [ 1273.617618][ T29] ? _compound_head+0x120/0x120 [ 1273.640986][ T29] ? find_lock_entries+0xc38/0xfe0 [ 1273.666200][ T29] __filemap_get_folio+0xbc/0xbc0 [ 1273.686859][ T29] truncate_inode_pages_range+0x40a/0xf00 [ 1273.699714][ T29] ? mapping_evict_folio+0x510/0x510 [ 1273.705315][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1273.715272][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1273.732513][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1273.742869][ T29] evict+0x499/0x870 [ 1273.746966][ T29] ? proc_nr_inodes+0x230/0x230 [ 1273.756977][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1273.765298][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1273.776772][ T29] evict_inodes+0x5fe/0x690 [ 1273.783362][ T29] ? clear_inode+0x150/0x150 [ 1273.788141][ T29] generic_shutdown_super+0x97/0x2b0 [ 1273.800574][ T29] kill_block_super+0x44/0x90 [ 1273.805963][ T29] deactivate_locked_super+0x97/0x100 [ 1273.816522][ T29] cleanup_mnt+0x429/0x4c0 [ 1273.825946][ T29] task_work_run+0x1ce/0x250 [ 1273.830879][ T29] ? task_work_cancel+0x240/0x240 [ 1273.844327][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1273.857299][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1273.868418][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 1273.874324][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1273.883192][ T29] do_syscall_64+0x61/0xb0 [ 1273.893316][ T29] ? clear_bhb_loop+0x40/0x90 [ 1273.899970][ T29] ? clear_bhb_loop+0x40/0x90 [ 1273.905377][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1273.918843][ T29] RIP: 0033:0x7ff70498ff17 [ 1273.925020][ T29] RSP: 002b:00007ffd8873e718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1273.940453][ T29] RAX: 0000000000000000 RBX: 00007ff704a11c05 RCX: 00007ff70498ff17 [ 1273.949204][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8873e7d0 [ 1273.964596][ T29] RBP: 00007ffd8873e7d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.985181][ T29] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8873f860 [ 1274.001160][ T29] R13: 00007ff704a11c05 R14: 000000000011247b R15: 00007ffd8873f8a0 [ 1274.011190][ T29] [ 1274.044562][ T29] [ 1274.044562][ T29] Showing all locks held in the system: [ 1274.053329][ T29] 1 lock held by pool_workqueue_/3: [ 1274.067020][ T29] #0: ffffffff8cd35b78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 1274.089860][ T29] 2 locks held by kworker/1:0/23: [ 1274.097382][ T29] 2 locks held by kworker/1:1/28: [ 1274.131457][ T29] 1 lock held by khungtaskd/29: [ 1274.141642][ T29] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1274.159439][ T29] 2 locks held by kworker/1:2/55: [ 1274.164686][ T29] 2 locks held by getty/5554: [ 1274.172104][ T29] #0: ffff888031cb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1274.190619][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 1274.215475][ T29] 1 lock held by syz-executor/5791: [ 1274.225608][ T29] #0: ffff88807e7220e0 (&type->s_umount_key#55){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1274.242228][ T29] 1 lock held by kworker/R-wg-cr/5819: [ 1274.254942][ T29] #0: ffffffff8cbdb988 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x2e/0x380 [ 1274.270393][ T29] 1 lock held by kworker/R-wg-cr/5826: [ 1274.279114][ T29] 1 lock held by kworker/R-wg-cr/5827: [ 1274.290362][ T29] #0: ffffffff8cbdb988 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool+0x4c/0x270 [ 1274.313374][ T29] 2 locks held by kworker/R-wg-cr/26870: [ 1274.323943][ T29] 1 lock held by kworker/R-wg-cr/26871: [ 1274.339577][ T29] #0: ffffffff8cbdb988 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool+0x4c/0x270 [ 1274.355433][ T29] 1 lock held by kworker/R-wg-cr/26872: [ 1274.365669][ T29] #0: ffffffff8cbdb988 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool+0x4c/0x270 [ 1274.385785][ T29] [ 1274.388297][ T29] ============================================= [ 1274.388297][ T29] [ 1274.404710][ T29] NMI backtrace for cpu 0 [ 1274.409116][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 1274.417325][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1274.427459][ T29] Call Trace: [ 1274.430859][ T29] [ 1274.434002][ T29] dump_stack_lvl+0x16c/0x230 [ 1274.438744][ T29] ? show_regs_print_info+0x20/0x20 [ 1274.444085][ T29] ? load_image+0x3b0/0x3b0 [ 1274.448655][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 1274.453758][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1274.460038][ T29] ? _printk+0xd0/0x110 [ 1274.464240][ T29] ? load_image+0x3b0/0x3b0 [ 1274.468979][ T29] ? load_image+0x3b0/0x3b0 [ 1274.473622][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1274.479739][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1274.486058][ T29] watchdog+0xf41/0xf80 [ 1274.490260][ T29] ? watchdog+0x1e1/0xf80 [ 1274.494743][ T29] kthread+0x2fa/0x390 [ 1274.499028][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1274.504094][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1274.508734][ T29] ret_from_fork+0x48/0x80 [ 1274.513217][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1274.517868][ T29] ret_from_fork_asm+0x11/0x20 [ 1274.522793][ T29] [ 1274.527438][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1274.533083][ C1] NMI backtrace for cpu 1 [ 1274.533103][ C1] CPU: 1 PID: 28 Comm: kworker/1:1 Not tainted 6.6.101-syzkaller #0 [ 1274.533121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1274.533132][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 1274.533161][ C1] RIP: 0010:__lock_acquire+0xbb1/0x7c80 [ 1274.533185][ C1] Code: 8e 80 e1 07 80 c1 03 38 c1 0f 8c c1 fe ff ff 48 c7 c7 a0 b9 4a 8e e8 5e c2 75 00 49 b8 00 00 00 00 00 fc ff df e9 a6 fe ff ff <8b> 84 24 88 00 00 00 38 44 24 38 4c 8b 6c 24 20 4c 8b 7c 24 10 76 [ 1274.533200][ C1] RSP: 0018:ffffc900001ef980 EFLAGS: 00000046 [ 1274.533215][ C1] RAX: 0000000000000005 RBX: 0000000000000005 RCX: 0000000000000002 [ 1274.533228][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90da3520 [ 1274.533238][ C1] RBP: ffffc900001efbc8 R08: dffffc0000000000 R09: 1ffffffff21b46a4 [ 1274.533251][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 0000000000000002 [ 1274.533263][ C1] R13: ffff888018298bc8 R14: ffffffff9070cf7a R15: ffff888018298bc8 [ 1274.533276][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1274.533292][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1274.533304][ C1] CR2: 00007f13ed65f1b0 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 1274.533334][ C1] Call Trace: [ 1274.533341][ C1] [ 1274.533355][ C1] ? arch_stack_walk+0x16e/0x190 [ 1274.533374][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1274.533394][ C1] ? verify_lock_unused+0x140/0x140 [ 1274.533410][ C1] ? stack_trace_save+0x9c/0xe0 [ 1274.533427][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1274.533444][ C1] ? __stack_depot_save+0x1f/0x630 [ 1274.533462][ C1] ? kasan_set_track+0x5f/0x70 [ 1274.533478][ C1] ? kasan_set_track+0x4e/0x70 [ 1274.533491][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1274.533510][ C1] lock_acquire+0x197/0x410 [ 1274.533525][ C1] ? debug_check_no_obj_freed+0x13a/0x540 [ 1274.533544][ C1] ? br_nf_hook_thresh+0x3b6/0x480 [ 1274.533562][ C1] ? br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 1274.533602][ C1] ? br_nf_pre_routing_ipv6+0x34d/0x680 [ 1274.533621][ C1] ? __napi_poll+0xc0/0x460 [ 1274.533640][ C1] ? net_rx_action+0x5ea/0xbf0 [ 1274.533657][ C1] ? handle_softirqs+0x280/0x820 [ 1274.533671][ C1] ? do_softirq+0xed/0x180 [ 1274.533683][ C1] ? __local_bh_enable_ip+0x178/0x1c0 [ 1274.533696][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1274.533711][ C1] ? kthread+0x2fa/0x390 [ 1274.533724][ C1] ? ret_from_fork+0x48/0x80 [ 1274.533745][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 1274.533767][ C1] ? debug_check_no_obj_freed+0x13a/0x540 [ 1274.533785][ C1] ? _raw_spin_lock+0x40/0x40 [ 1274.533807][ C1] debug_check_no_obj_freed+0x13a/0x540 [ 1274.533830][ C1] slab_free_freelist_hook+0xd2/0x1b0 [ 1274.533845][ C1] ? ip6_mc_input+0xa7e/0xc70 [ 1274.533859][ C1] kmem_cache_free+0xf8/0x280 [ 1274.533880][ C1] ip6_mc_input+0xa7e/0xc70 [ 1274.533896][ C1] ? ip6_input_finish+0x2c0/0x2c0 [ 1274.533913][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 1274.533927][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 1274.533941][ C1] ip_sabotage_in+0x1f4/0x280 [ 1274.533958][ C1] ? br_nf_post_routing+0xfb0/0xfb0 [ 1274.533976][ C1] nf_hook_slow+0xbd/0x200 [ 1274.533993][ C1] NF_HOOK+0x204/0x390 [ 1274.534008][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 1274.534022][ C1] ? NF_HOOK+0x9b/0x390 [ 1274.534035][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 1274.534049][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 1274.534065][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 1274.534080][ C1] __netif_receive_skb+0xcc/0x290 [ 1274.534100][ C1] ? netif_receive_skb+0x106/0x6f0 [ 1274.534116][ C1] netif_receive_skb+0x1bc/0x6f0 [ 1274.534133][ C1] ? enqueue_to_backlog+0xe30/0xe30 [ 1274.534150][ C1] ? br_netif_receive_skb+0x126/0x190 [ 1274.534168][ C1] NF_HOOK+0x9a/0x380 [ 1274.534182][ C1] ? NF_HOOK+0x380/0x380 [ 1274.534195][ C1] ? NF_HOOK+0xf8/0x380 [ 1274.534209][ C1] ? br_del_frame+0x150/0x150 [ 1274.534223][ C1] ? NF_HOOK+0x380/0x380 [ 1274.534239][ C1] ? br_pass_frame_up+0x275/0x410 [ 1274.534256][ C1] br_handle_frame_finish+0x146c/0x1920 [ 1274.534275][ C1] ? brport_get_ownership+0x80/0x80 [ 1274.534293][ C1] ? ila_free_cb+0x40/0x70 [ 1274.534330][ C1] ? nf_hook_slow+0x16c/0x200 [ 1274.534344][ C1] ? brport_get_ownership+0x80/0x80 [ 1274.534358][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 1274.534380][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 1274.534399][ C1] ? brport_get_ownership+0x80/0x80 [ 1274.534418][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 1274.534437][ C1] ? brport_get_ownership+0x80/0x80 [ 1274.534456][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 1274.534475][ C1] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 1274.534493][ C1] ? br_validate_ipv6+0x720/0x720 [ 1274.534513][ C1] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 1274.534531][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 1274.534551][ C1] ? br_nf_hook_thresh+0x480/0x480 [ 1274.534569][ C1] br_handle_frame+0x96b/0x1480 [ 1274.534587][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 1274.534603][ C1] ? brport_get_ownership+0x80/0x80 [ 1274.534620][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 1274.534635][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 1274.534660][ C1] ? ip_rcv_finish+0x162/0x250 [ 1274.534680][ C1] ? qdisc_run+0x230/0x230 [ 1274.534700][ C1] ? process_backlog+0x2be/0x6e0 [ 1274.534720][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1274.534736][ C1] ? process_backlog+0x2be/0x6e0 [ 1274.534755][ C1] __netif_receive_skb+0x74/0x290 [ 1274.534775][ C1] ? process_backlog+0x2be/0x6e0 [ 1274.534794][ C1] process_backlog+0x380/0x6e0 [ 1274.534818][ C1] ? trigger_rx_softirq+0x60/0x60 [ 1274.534836][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1274.534854][ C1] ? lock_chain_count+0x20/0x20 [ 1274.534869][ C1] __napi_poll+0xc0/0x460 [ 1274.534887][ C1] ? net_rx_action+0x374/0xbf0 [ 1274.534907][ C1] net_rx_action+0x5ea/0xbf0 [ 1274.534931][ C1] ? net_tx_action+0x950/0x950 [ 1274.534949][ C1] ? detach_timer+0x2b0/0x2b0 [ 1274.534965][ C1] ? lock_chain_count+0x20/0x20 [ 1274.534979][ C1] ? try_to_wake_up+0x6f8/0x10b0 [ 1274.535003][ C1] handle_softirqs+0x280/0x820 [ 1274.535018][ C1] ? do_softirq+0xed/0x180 [ 1274.535034][ C1] ? do_softirq+0x180/0x180 [ 1274.535049][ C1] ? neigh_periodic_work+0xb53/0xd70 [ 1274.535064][ C1] do_softirq+0xed/0x180 [ 1274.535077][ C1] [ 1274.535081][ C1] [ 1274.535087][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1274.535101][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 1274.535119][ C1] ? rcu_is_watching+0x15/0xb0 [ 1274.535138][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 1274.535152][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1274.535167][ C1] ? neigh_periodic_work+0xb53/0xd70 [ 1274.535183][ C1] neigh_periodic_work+0xb53/0xd70 [ 1274.535201][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1274.535219][ C1] process_scheduled_works+0xa45/0x15b0 [ 1274.535246][ C1] ? assign_work+0x400/0x400 [ 1274.535264][ C1] ? assign_work+0x39e/0x400 [ 1274.535281][ C1] worker_thread+0xa55/0xfc0 [ 1274.535307][ C1] kthread+0x2fa/0x390 [ 1274.535328][ C1] ? pr_cont_work+0x560/0x560 [ 1274.535343][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1274.535357][ C1] ret_from_fork+0x48/0x80 [ 1274.535372][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1274.535385][ C1] ret_from_fork_asm+0x11/0x20 [ 1274.535408][ C1] [ 1275.303844][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1275.310891][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 1275.318918][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1275.329365][ T29] Call Trace: [ 1275.332684][ T29] [ 1275.335660][ T29] dump_stack_lvl+0x16c/0x230 [ 1275.340753][ T29] ? show_regs_print_info+0x20/0x20 [ 1275.346277][ T29] ? load_image+0x3b0/0x3b0 [ 1275.350847][ T29] panic+0x2c0/0x710 [ 1275.354812][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1275.360532][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1275.365100][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1275.370725][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1275.377042][ T29] watchdog+0xf80/0xf80 [ 1275.381354][ T29] ? watchdog+0x1e1/0xf80 [ 1275.385760][ T29] kthread+0x2fa/0x390 [ 1275.389902][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1275.394983][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1275.399625][ T29] ret_from_fork+0x48/0x80 [ 1275.404389][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1275.409176][ T29] ret_from_fork_asm+0x11/0x20 [ 1275.413993][ T29] [ 1275.417455][ T29] Kernel Offset: disabled [ 1275.421962][ T29] Rebooting in 86400 seconds..