last executing test programs: 4.395765294s ago: executing program 1 (id=5179): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 4.132374885s ago: executing program 1 (id=5182): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x0, 0x3], [0x0, 0x20000232]], '\x00', [{0x0, 0x1, 0x1}]}) 3.940353781s ago: executing program 1 (id=5185): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x2d) 3.798886443s ago: executing program 1 (id=5187): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJMkOSTJIUmSJMkpIWmSLQmJIaekIQnJYUgOQ0gOE5PG+Xw+JCRJkyQhOSXrf0342+3a3977233bd31z/67ruaz7Xc+9nvW89/u8z8HMfNdlaM3Gtao1JCL4t+DFf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9exthf65HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nJfsu/Pw/O+Pz//8hmaXHfrW29I1dAWL+2RSuf/bG9f8/K/hnVuL6Z29c/+wq9mpPgP0vwMd/dpDj7/Zw/bM3rj9j2dnVfv58tReIZO/34Gp//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/BUKAC63r/a8GGOMMcYYY4wx9ufxOa72DBhjjDHGGGOMMfY/D0GABAUBxEAOiIWckAsEAFwLeeA6iMD1EAc3QF64EfJBfigABSEeCkFh0GAgBghCKAJFIQo3QTG4GYpDCSgJpcBBaUiAW6AM3Apl4TYoB7dDebgDKkBFqASV4U6oAndBVbgbqsE9UB1qQE2oBfdCbbgP6sD9UBcegHrwINSHh6ABPAwN4RFoBI9CY3gMmsDj0BSaQXNoAS3/W/kvQQ94GXpCL0iC3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAxDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8pMAEmAjvwiR4DybDFJgK0yAVpsMMeB9mwiyYDR/AHPgQ5sI8mA8LIA0+goWwCNLhY1gMn0AGLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJn8Iu+Ax2wx7YC5/DPvjiX8w//Tf5XREQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwL+bFfJgPC2ABjMd4LIyF0aBBQsIiWASjGMViWAyLY3EsiSXRocMETMAyeCuWxbJYDstheSyPFbAiVsTKWBmrYBWsilWxGlbD6lgda2JNvBfvxd5YB+tgXayL9bDe5cdT2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2wlbYGltjW2yL7bAdtsf2mIiJ2AE7YEfsiJ2wE3bGztgFu2BX7IbdMl/KAfgyvoy9sLrojX2wD/bF5Bz9cQAOwFdxEL6Gr+HrmIxDcCi+gW/gmzgcT+EIHImjcBRWEe/gGByLJMZjCqbgRJyIk3ASTsYpOAWnYSpOxxk4A2fiLJyFH+Ac/BA/xHk4DxdgGqbhQlyE6ZiOi/E0ZuASXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgpKgD8DPfgHkzGfbgP9+N+PIAH8CAexEzMxEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI8vxH/T6NMSa5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8oq8Ip/IJwqIAiJexIvCorAwwggSYQwAiKiIimKimCguiouSoqRwwokEkSDKiDKirCgryonbRXlxh6ggKoo2rrKoLKqItq6quFtUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPVFfPCQaiN7YHx8RWZVpLIZgEzEUm4pmQl76BmslhmNr0Ua0FU+JkTgC24tWLlE8KzqIMdhR/EWMxedFZzEeu4gXRVfRTXQXL4keorXrKXqJydhb9BHTsK/oJ/qLAWIm1hAf4JycNcXrIlkMEUPFG2IBvimGi7fECDFSjBJvi9HiHTFGjBXjxHiRIiaIieJdMUm8JyaLKWKqmCZSxXQxQ7wvZopZYrb4QMwRH4q5Yp6YLxaINPGRWCgWiXTxsVgsPhEZYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhW7xGdit9gj9orPxT7xhdgvvhQHxFfioPhaZIpvxCHxrTgsvhNHxPfiqPhBHBPHxQnxozgpfhKnxGlxRpwV58TP4rz4RVwQXoBEKaSUSgYyRuaQsTKnzCWvkbllcOndvV7GyRtkXnmjzCfzywKyoIyXhWRhqaWRVpIMZRFZVEblTbKYvFkWlyVkSVlKOllaJshbZBl5qywrb5Pl5O2yvLxDVpAVZSVZWd4pq8i7JEQubqO6rCFrylryXpkE98k68n5ZVz4g68kHZX35kGwgH5YN5SOykXxUNpaPySbycdlUNpPNZQvZUj4hW8knZWvZRraVT8l28mnZXj4jE+WzsoP0lz4iz8vO8gXZRb4ou8pusrv8RV6QXvaUvST0BtlHviL7yn6yvxwgB8pX5SD5mhwsX5fJcogcKt+Qw+Sbcrh8S46QI+Uo+bYcLd+RY+RYOU6Olylygpwo35WT5Htyspwip8ppMlVOl/0vjTRbyn+Y/+4f5A/+deub5Ga5RW6V2+R2uUPulJ/KXXKX3C13y71yr9wn98n9cr88IA/Ig/KgzJSZ8pA8JA/Lw/KIPCKPyqPymDwuz8of5Un5kzwlT8vT8qw8J8/J85feA1CohJJKqUDFqBwqVuVUudQ1Kre6VuVR16mIul7FqRtUXnWjyqfyqwKqoIpXhVRhpZVRVpEKVRFVVEXVTXjpA6NKqlLKqdIqQd3yr+SrYupmVVyV+E3+5fkl/Z35tVQtVSvVSrVWrVVb1Va1U+1Ue9VeJapE1UF1UB1VR9VJdVKdVWfVRXVRXVVX1V11Vz1UD9VT9VRJKkn1Ua+ovqqf6q8GqIHqVTVIDVKD1WCVrJLVUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVIpKURPVRDVJTVKT1WQ1VU1VqSpVzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpak0tVAtVOkqXS1Wi1WGWqKWqGVqmVqhVqhVapVao9aodWqd2qA2qAy1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVSZKlMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHrsi8QgQhUkHWmjQlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXCp6NLgpKBbcHBQPSgQlg1KBC0oHCcEtQZng1qBscFtQLrg9KB/cEVQIKgaVgsrBnUGV4K6ganB3UC24J6ge1AhqBrWCe4PawX1BneD+oG7wQFAveDCoHzwUNAgeDhoGjwSNgkeDxsFjQZPg8aBp0CxoHrQIWv6p43t/Kv+TrqfupZN0b91Hv6L76n66vx6gB+pX9SD9mh6sX9fJeogeqt/Qw/Sberh+S4/QI/Uo/bYerd/RY/RYPU6P1yl6gp6o39WT9Ht6sp6ip+ppOlVP1zP0+3qmnqVn6w/0HP2hnqvn6fl6gU7TH+mFepFO1x/rxfoTnaGX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpTvUt/pnfrPXqv/lzv01/o/fpLfUB/pQ/qr3Wm/kYf0t/qw/o7fUR/r4/qH/QxfVyf0D/qk/onfUqf1mf0WX1O/6zP61/0Be2zLu6zTu9GGWViTIyJNbEml8llcpvcJo/JYyImYuJMnMlr8pp8Jp8pYAqYeBNvCpvCJgsZMkVMERM1UVPMFDPFTXFT0pQ0zjiTYBJMGVPGlDVlTTlTzpQ35U0FU8FUMpXMneZOc5e5y9xt7jb3mHtMDVPD1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDfNTUvT0rQyrUxr09q0NW1NO9POtDftTaJJNB1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1Nd9PD9DA9TU+TZJJMH9PH9DV9TX/T3ww0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsg4f844ZY8aacWa8STEpZqKZaCaZSWaymWymmqkm1aSaGWaGmWlmmtlmtplj5pi5Zq6Zb+abNJNmFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bDerPRbDSbzWaz1Ww12812s9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDP5L50vvYm1OW0ue43Nba+1eex19m/jAragjbeFbGGrbT6b/zexsdYWtyVsSVvKOlvaJthbfhdXsBVtJVvZ3mmr2Lts1d/Fte19to6939a1D9ha9t7fxPXsg7a+fcw2QASwzWwj28I2to/ZJvZx29Q2s81tC9vOPm3b22dson3WdrDP/S5eaBfZ1XaNXWvX2d12jz1jz9rD9jt7zv5se9pedqB91Q6yr9nB9nWbbIf8Lh5l37aj7Tt2jB1rx9nxv4un2mk21U63M+z7dqad9bs4zX5k59h0O9fOs/Ptgl/jrDml24/tYvuJzbABLLXL7HK7wq60q/7/XJfZDXaj3WR32c/sVrvNbrc77M7LF8J2j91rP7f77Bf2kP3WHrBf2YP2iM203/waZ+3fEfu9PWp/sMfscXvC/mhP2p/U5eysff/R/mIvWG+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJenV5JKkaPSlEC3UBm6lcrSbVSObqfydAdVoIpUiSrTnVSF7qKqdDdVo3uoOtWgmlSL7qXadB/VofupLjxA9ehBqk8PUQN6mBrSI9SIHqXG9Bg1ocepKTWj5tSCWtIT1IqepNbUhtrSU9SOnqb29Awl0rPUgZ6jjvQX6kTPU2d6gbrQi9SVulF3eol60MvUk3pREvWmPvQK9aV+1J8G0EB6lQbRazSYXqdkGkJD6Q0aRm/ScHqLRtBIGkVv02h6h8bQWBpH4ymFJtBEepcm0Xs0mabQVJpGqTSdZtD7NJNm0Wz6gObQhzSX5tF8WkBp9BEtpEWUTh/TYvqEMmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqUdtFntJv20F76nPbRF7SfvqQD9BUdpK8pk76hQ/QtHabv6Ah973vRD3SMjtMJ+pFO0k90ik7TGTpL5+hnOk+/0AXyBCGGIpShCoMwJswRxoY5w1zhNWHu8NowT3hdGAmvD+PCG8K84Y1hvjB/WCAsGMaHhcLCoQ5NaEMKw7BIWDSMhjeFxcKbw+JhibBkWCp0YekwIbwlLBPeGpYNbwvLhbeH5cM7wgphxfCxByqHd4ZVwrvCquHdYbXwnrB6WCOsGdYK7w1rh/eFdcL7w7rhA2HZ8MGwfvhQ2CB8OGwYPhI2Ch8NG4ePhU3Cx8OmYbOwedgibBk+EbYKnwxbh23CtuFTYbvw6bB9+EyYGD4bdgif+7X/wUV/vz8p7B32CV8JXwm9v1/Ojy6IpkU/ii6MLoqmRz+OLo5+Es2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qLuJlfM3eyKuxKupCvlnCvtElwL19K1dK3ck661a+PauqfcU+5p97R7xj3jnnUd3HOuo/uL6+Sed53dC+4F96Lr6rq57u4l18NNyHPxmExyfVwf19f1df1dfzfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U91Ul+pS3Qw3w810M12VWRe3MtfNdfPdfJfm0txCl3XNmO4Wu8Uuw2W4pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrudbqfb5Xa53f66i4O6fW6/2+8OuAPuoPvaZbpv3CH3rTvsvnNH3PfuqPvBHXPH3Qn3ozvpfnKn3Gl3xp1159zP7rz7xV1w3qVEJkQmRt6NTIq8F5kcmRKZGpkWSY1Mj8yIvB+ZGZkVmR35IDIn8mFkbmReZH5kQSQt8lFkYWRRJD3ycWRx5JNIRmRJZGlkWWR5ZEXE+0JbQ1/EF/VRf5Mv5m/2xX0JX9KX8s6X9gn+Fl/G3+rL+tt8OX+7L+/v8BV8RV/JP+6b+ma+uW/hW/onfCv/pG/t2/i2/infzj/t2/tnfKJ/1nfwz/mO/i++k3/ed/Yv+C7+Rd/Vd/Pd/Uu+h3/Z9/S9fJLv7fv4V3xf38/39wP8QP+qH+Rf84P96z7ZD/FD/Rt+mH/TD/dv+RF+pB8V87YfffkWGcb7FD/BT/Tv+kn+PbjbT/FT/TSf6qf7Gf59P9PP8rP9B36O/9DP9fP8fL/Ap/mP/EK/yKf7j/1i/4nP8EsuP1T2K/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9p36X/8zv9nv8Xv+53+e/8Pv9l/6A/8of9F/7TP+NP+S/9Yf9d/6I/94f9T/4Y/64P+F/9Cf9T/6UP+3P+LP+nP/Zn/e/+Av8O2uMMcYYY/+UCVea4rc9Fx/n9/6DHPFXK/cBgGu3Fcz86/6sK8r1+S62+4n4dhEAeLZXl0cuL9WrJyUlXVo3Q0JQdB7A5f8JyhIDV+Il0BaehkRoA2X+cP79RLdz9A/Gj94OkOuvcmLhSnxl/C8BMOkPxn/iqVELy4dn4v6L8ecBFC96JScnXImXQNtfn6+0gbJ/Z/75W/2D+ef8KgWg9V/l5IYr8ZX5J8CT8Bwk/mZNxhhjjDHGGGPson6iUqfL95+Xf+Lzj+7P49WVnBxwJf5H9+eMMcYYY4wxxhi7+p7v1v2ZJxIT23T61xtV/1tZ/3SjCfxPjcyNP2x4D3D5FQUA/+aAAFkN+Z/ciy3/kW0lXzp0/rZr+VkfwP+OUv4Zjav8xcQYY4wxxhj701256P/t6+pqTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//8BsgGO") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 3.420440083s ago: executing program 1 (id=5193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52) 2.732243919s ago: executing program 1 (id=5204): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 2.374799198s ago: executing program 32 (id=5204): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 2.359273289s ago: executing program 0 (id=5208): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xc, {0x9}}) 2.358054549s ago: executing program 4 (id=5211): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 2.218306931s ago: executing program 0 (id=5212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.143083126s ago: executing program 4 (id=5214): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) 1.932965004s ago: executing program 0 (id=5216): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 1.906708386s ago: executing program 4 (id=5217): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x2}, 0x40}) 1.717544401s ago: executing program 0 (id=5218): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x1, 0x4) 1.507801128s ago: executing program 4 (id=5221): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10) 1.376486749s ago: executing program 0 (id=5222): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg(r0, &(0x7f000000a0c0)={0x0, 0x0, 0x0}, 0x88000) 1.3634836s ago: executing program 3 (id=5223): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000003180)=""/4112, &(0x7f0000000000)=0x1010) 1.195804094s ago: executing program 4 (id=5225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x26180, 0x41680}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) 1.12197523s ago: executing program 3 (id=5227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000400)=0xc00) 1.012849638s ago: executing program 0 (id=5228): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 968.435752ms ago: executing program 2 (id=5229): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x110, 0xb, {[@noop]}}}], 0x18}, 0x0) 820.244944ms ago: executing program 3 (id=5230): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x9, 0x9, 0x4}, &(0x7f0000000300)=0x10) 740.77324ms ago: executing program 2 (id=5231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 630.732669ms ago: executing program 3 (id=5232): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 627.185319ms ago: executing program 4 (id=5233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 555.413645ms ago: executing program 2 (id=5234): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)={0x20, 0x140e, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) 416.687507ms ago: executing program 3 (id=5235): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 416.566236ms ago: executing program 2 (id=5236): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@v={0x93, 0x0, 0xa0, 0x0, @generic=0x77}], 0x8) 225.453702ms ago: executing program 3 (id=5237): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') pread64(r0, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) 119.105171ms ago: executing program 2 (id=5238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b00830000000500000007000000fe8000000000000000000000000000aa000004d63c0000000a000000ff01000000000000000000000000000102350000020007007f0000000000000004000000e0000001000000000000000000000000000004d56c00000002000000000000000000000000000000000000000000000004030300040000000200000003000000fc000000000000000000000000000000000004d33c00000002000000200100000000000000000000000000020000000000000200faffffff0104000081000000fe880000000000000000000000000001000004d32b"], 0x23c}}, 0x4000) 0s ago: executing program 2 (id=5239): r0 = socket(0x848000000015, 0x805, 0x0) readv(r0, &(0x7f0000002ac0)=[{&(0x7f0000000680)=""/208, 0xd0}], 0x1) kernel console output (not intermixed with test programs): cleaned up [ 353.837662][T11389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.938895][ T7299] usb 3-1: USB disconnect, device number 51 [ 353.968115][T11407] xt_TCPMSS: Only works on TCP SYN packets [ 354.034771][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 354.152086][T11415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3060'. [ 354.272583][T11419] loop4: detected capacity change from 0 to 512 [ 354.297264][T11419] EXT4-fs: Ignoring removed orlov option [ 354.325387][T11419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.370683][T11419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 354.394336][T11419] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3064: bg 0: block 248: padding at end of block bitmap is not set [ 354.424302][T11419] Quota error (device loop4): write_blk: dquota write failed [ 354.447368][T11419] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 354.478549][T11419] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.3064: Failed to acquire dquot type 1 [ 354.538010][T11419] EXT4-fs (loop4): 1 truncate cleaned up [ 354.545880][T11419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 354.614918][T11419] EXT4-fs: Ignoring removed orlov option [ 354.638220][T11419] EXT4-fs: can't change dax mount option while remounting [ 354.701116][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 355.077576][T11448] loop3: detected capacity change from 0 to 2048 [ 355.140299][T11448] loop3: p2 < > [ 355.477038][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 355.485967][T11460] loop3: detected capacity change from 0 to 4096 [ 355.523581][T11460] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 355.690789][T11460] ntfs3: loop3: failed to convert "c46c" to koi8-r [ 356.000316][T11488] xt_l2tp: invalid flags combination: 8 [ 356.389571][T11503] sctp: [Deprecated]: syz.0.3105 (pid 11503) Use of int in maxseg socket option. [ 356.389571][T11503] Use struct sctp_assoc_value instead [ 356.671574][T11519] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3113'. [ 356.956079][T11533] netlink: 'syz.4.3120': attribute type 10 has an invalid length. [ 357.022040][T11533] team0: Device hsr_slave_0 failed to register rx_handler [ 357.092440][ T4814] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 357.297183][ T4814] usb 2-1: Using ep0 maxpacket: 32 [ 357.304323][ T4814] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 357.323724][ T4814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.344371][ T4814] usb 2-1: config 0 has no interface number 0 [ 357.361406][ T4814] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.433325][ T4814] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 357.483860][ T4814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.491917][ T4814] usb 2-1: Product: syz [ 357.514079][ T4814] usb 2-1: Manufacturer: syz [ 357.519112][ T4814] usb 2-1: SerialNumber: syz [ 357.542720][ T4814] usb 2-1: config 0 descriptor?? [ 357.585071][ T4814] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 357.601574][ T4814] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 357.804239][ T4814] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 357.971134][T11570] loop3: detected capacity change from 0 to 4096 [ 358.020777][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3141'. [ 358.030778][ T4814] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 358.045924][ T4814] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 358.078493][ T4814] usb 2-1: USB disconnect, device number 54 [ 358.095973][T11570] ntfs3: loop3: ino=9, attr_set_size [ 358.099311][ T4814] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 358.368539][T11581] loop4: detected capacity change from 0 to 4096 [ 358.419906][T11583] loop0: detected capacity change from 0 to 1764 [ 358.772938][ T27] audit: type=1326 audit(30529589.815:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.2.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c778ebe9 code=0x7ffc0000 [ 358.873212][ T27] audit: type=1326 audit(30529589.852:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.2.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f10c778ebe9 code=0x7ffc0000 [ 358.895733][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.980466][ T27] audit: type=1326 audit(30529589.852:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.2.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c778ebe9 code=0x7ffc0000 [ 359.003344][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.027322][T11605] loop0: detected capacity change from 0 to 256 [ 359.049478][ T27] audit: type=1326 audit(30529589.852:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.2.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c778ebe9 code=0x7ffc0000 [ 359.293223][ T27] audit: type=1326 audit(30529590.301:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 359.367002][T11604] loop3: detected capacity change from 0 to 8192 [ 359.401161][ T27] audit: type=1326 audit(30529590.310:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 359.463467][T11604] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 359.464545][ T4814] kernel write not supported for file /1187/net/sockstat (pid: 4814 comm: kworker/1:12) [ 359.511628][T11604] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 359.522601][T11604] REISERFS (device loop3): using ordered data mode [ 359.540025][ T27] audit: type=1326 audit(30529590.310:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 359.562875][ T27] audit: type=1326 audit(30529590.310:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 359.589498][T11604] reiserfs: using flush barriers [ 359.648898][T11604] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.690358][T11604] REISERFS (device loop3): checking transaction log (loop3) [ 359.749107][T11604] REISERFS (device loop3): Using r5 hash to sort names [ 359.753933][T11630] loop4: detected capacity change from 0 to 128 [ 359.802570][T11604] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 360.066626][T11641] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3173'. [ 360.121970][T11643] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3172'. [ 361.134237][T11693] loop4: detected capacity change from 0 to 1024 [ 362.013520][T11737] cgroup: none used incorrectly [ 362.206931][T11747] loop2: detected capacity change from 0 to 256 [ 362.339570][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'. [ 362.349613][T11747] FAT-fs (loop2): Directory bread(block 64) failed [ 362.356291][T11747] FAT-fs (loop2): Directory bread(block 65) failed [ 362.382965][T11755] netlink: 'syz.4.3225': attribute type 2 has an invalid length. [ 362.385911][T11747] FAT-fs (loop2): Directory bread(block 66) failed [ 362.406850][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3225'. [ 362.443268][T11747] FAT-fs (loop2): Directory bread(block 67) failed [ 362.454775][T11747] FAT-fs (loop2): Directory bread(block 68) failed [ 362.461667][T11747] FAT-fs (loop2): Directory bread(block 69) failed [ 362.519431][T11747] FAT-fs (loop2): Directory bread(block 70) failed [ 362.526374][T11747] FAT-fs (loop2): Directory bread(block 71) failed [ 362.561463][T11747] FAT-fs (loop2): Directory bread(block 72) failed [ 362.568272][T11747] FAT-fs (loop2): Directory bread(block 73) failed [ 362.624217][T11762] loop1: detected capacity change from 0 to 256 [ 362.978253][ T4383] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 363.194948][ T4383] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 363.204030][ T4383] usb 2-1: config 0 has an invalid descriptor of length 181, skipping remainder of the config [ 363.221764][ T4383] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 363.231121][ T4383] usb 2-1: config 0 has no interface number 0 [ 363.274998][ T4383] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 363.292041][ T4383] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 363.297967][T11788] netlink: 'syz.2.3241': attribute type 10 has an invalid length. [ 363.318750][ T4383] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 27768, setting to 64 [ 363.357032][ T4383] usb 2-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 363.372362][T11788] team0: Device hsr_slave_0 failed to register rx_handler [ 363.390706][ T4383] usb 2-1: config 0 interface 206 has no altsetting 0 [ 363.417915][ T4383] usb 2-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 363.427110][ T4383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.448198][ T4383] usb 2-1: Product: syz [ 363.461798][T11792] loop4: detected capacity change from 0 to 256 [ 363.470117][ T4383] usb 2-1: Manufacturer: syz [ 363.474831][ T4383] usb 2-1: SerialNumber: syz [ 363.489044][ T4383] usb 2-1: config 0 descriptor?? [ 363.511190][T11762] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.528318][T11792] FAT-fs (loop4): Directory bread(block 64) failed [ 363.544363][T11792] FAT-fs (loop4): Directory bread(block 65) failed [ 363.553583][T11762] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.580654][T11792] FAT-fs (loop4): Directory bread(block 66) failed [ 363.602772][T11792] FAT-fs (loop4): Directory bread(block 67) failed [ 363.620993][T11792] FAT-fs (loop4): Directory bread(block 68) failed [ 363.629273][T11792] FAT-fs (loop4): Directory bread(block 69) failed [ 363.645241][T11792] FAT-fs (loop4): Directory bread(block 70) failed [ 363.657232][T11792] FAT-fs (loop4): Directory bread(block 71) failed [ 363.680497][T11792] FAT-fs (loop4): Directory bread(block 72) failed [ 363.693061][T11792] FAT-fs (loop4): Directory bread(block 73) failed [ 363.774615][T11782] loop3: detected capacity change from 0 to 32768 [ 363.785771][T11782] XFS: noikeep mount option is deprecated. [ 363.804025][T11792] FAT-fs (loop4): Filesystem has been set read-only [ 363.824311][ T27] audit: type=1800 audit(30529594.531:60): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3243" name="pids.current" dev="loop4" ino=1048628 res=0 errno=0 [ 363.845426][T11792] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006c61) [ 363.859470][ T4383] usb 2-1: USB disconnect, device number 55 [ 363.903586][T11782] XFS (loop3): Mounting V5 Filesystem [ 363.941912][ T4423] udevd[4423]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.074725][T11782] XFS (loop3): Ending clean mount [ 364.117594][T11782] XFS (loop3): Quotacheck needed: Please wait. [ 364.200305][T11782] XFS (loop3): Quotacheck: Done. [ 364.382164][ T4270] XFS (loop3): Unmounting Filesystem [ 364.786088][ T27] audit: type=1326 audit(30529595.448:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 364.822731][ T27] audit: type=1326 audit(30529595.448:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 364.845236][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.864076][ T27] audit: type=1326 audit(30529595.448:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 364.936827][ T27] audit: type=1326 audit(30529595.448:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 364.971690][ T27] audit: type=1326 audit(30529595.448:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 365.068318][T11845] capability: warning: `syz.0.3266' uses 32-bit capabilities (legacy support in use) [ 365.604410][T11836] loop2: detected capacity change from 0 to 32768 [ 365.611879][T11836] XFS: noikeep mount option is deprecated. [ 365.706922][T11873] loop4: detected capacity change from 0 to 256 [ 365.777999][T11836] XFS (loop2): Mounting V5 Filesystem [ 366.002321][T11836] XFS (loop2): Ending clean mount [ 366.063387][T11836] XFS (loop2): Quotacheck needed: Please wait. [ 366.116196][T11888] SET target dimension over the limit! [ 366.134033][T11891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3283'. [ 366.175223][T11836] XFS (loop2): Quotacheck: Done. [ 366.306777][ T4280] XFS (loop2): Unmounting Filesystem [ 366.604433][T11905] openvswitch: netlink: Missing key (keys=40, expected=80) [ 366.972406][T11922] loop4: detected capacity change from 0 to 128 [ 366.979358][T11919] cgroup: Invalid name [ 367.182427][ T4272] sysv_free_block: flc_count > flc_size [ 367.211947][ T4272] sysv_free_block: flc_count > flc_size [ 367.217579][ T4272] sysv_free_block: flc_count > flc_size [ 367.238811][ T4272] sysv_free_block: flc_count > flc_size [ 367.257082][ T4272] sysv_free_block: flc_count > flc_size [ 367.262689][ T4272] sysv_free_block: flc_count > flc_size [ 367.286986][ T4272] sysv_free_block: flc_count > flc_size [ 367.292586][ T4272] sysv_free_block: flc_count > flc_size [ 367.323743][ T4272] sysv_free_block: flc_count > flc_size [ 367.354784][ T4272] sysv_free_block: flc_count > flc_size [ 367.371961][ T4272] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 367.498468][T11946] netlink: 'syz.0.3309': attribute type 21 has an invalid length. [ 367.728148][T11956] x_tables: unsorted underflow at hook 4 [ 367.916526][T11964] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3318'. [ 368.474639][T11986] loop4: detected capacity change from 0 to 512 [ 368.488630][T11989] netlink: 920 bytes leftover after parsing attributes in process `syz.1.3331'. [ 368.524397][T11986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 368.533318][T11991] netlink: 'syz.0.3332': attribute type 10 has an invalid length. [ 368.559001][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3331'. [ 368.619913][T11991] team0: Device hsr_slave_0 failed to register rx_handler [ 368.640273][T11986] EXT4-fs (loop4): 1 truncate cleaned up [ 368.668623][T11986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 368.793023][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 368.814974][T11994] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3333'. [ 368.856831][T11994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 369.013798][T11977] loop2: detected capacity change from 0 to 32768 [ 369.033048][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3338'. [ 369.070955][T12003] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3338'. [ 369.076948][T11977] ERROR: (device loop2): diAllocBit: iag inconsistent [ 369.076948][T11977] [ 369.092595][T12003] tc_dump_action: action bad kind [ 369.174480][T11977] ERROR: (device loop2): remounting filesystem as read-only [ 369.201974][T11977] ialloc: diAlloc returned -5! [ 369.542683][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3348'. [ 370.241243][T12017] loop3: detected capacity change from 0 to 32768 [ 370.354212][T12017] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 370.421067][T12017] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 370.555201][T12017] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 370.587819][T12017] OCFS2: Returning error to the calling process. [ 370.598610][T12017] (syz.3.3344,12017,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 370.619666][T12067] device netdevsim0 entered promiscuous mode [ 370.644207][T12067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 370.664960][T12017] (syz.3.3344,12017,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 370.677138][T12017] (syz.3.3344,12017,0):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 370.736022][T12017] (syz.3.3344,12017,1):ocfs2_mknod:306 ERROR: status = -5 [ 370.746278][T12017] (syz.3.3344,12017,1):ocfs2_mknod:502 ERROR: status = -5 [ 370.771181][T12017] (syz.3.3344,12017,1):ocfs2_mkdir:659 ERROR: status = -5 [ 370.964554][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 370.968465][T12080] loop4: detected capacity change from 0 to 256 [ 371.344014][ T27] audit: type=1326 audit(30529601.575:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c778ebe9 code=0x7ffc0000 [ 371.366366][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.450936][ T27] audit: type=1326 audit(30529601.622:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f10c778ebe9 code=0x7ffc0000 [ 371.560419][ T27] audit: type=1326 audit(30529601.622:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c778ebe9 code=0x7ffc0000 [ 371.593651][T12108] loop3: detected capacity change from 0 to 256 [ 371.640520][T12108] exfat: Deprecated parameter 'utf8' [ 371.709014][T12108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 371.811415][T12117] loop0: detected capacity change from 0 to 136 [ 371.875045][T12117] Attempt to read inode for relocated directory [ 372.273929][T12132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3400'. [ 372.587787][T12144] x_tables: duplicate underflow at hook 4 [ 372.652814][T12150] device geneve2 entered promiscuous mode [ 373.034688][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'. [ 373.081129][T12169] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 373.138031][T12169] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 373.636616][T12193] netlink: 'syz.3.3428': attribute type 7 has an invalid length. [ 373.666562][T12193] netlink: 'syz.3.3428': attribute type 8 has an invalid length. [ 373.893539][T12201] netlink: 'syz.3.3433': attribute type 1 has an invalid length. [ 374.112689][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 374.170921][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 374.194832][T12180] loop0: detected capacity change from 0 to 32768 [ 374.264911][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 374.288200][T12180] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 374.329240][T12180] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #0 [ 374.385317][T12180] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 374.480538][T12180] OCFS2: File system is now read-only. [ 374.498405][T12227] loop4: detected capacity change from 0 to 2048 [ 374.503277][T12180] (syz.0.3422,12180,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 374.537368][T12227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.586914][T12180] (syz.0.3422,12180,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 374.668206][T12180] (syz.0.3422,12180,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 374.701504][T12180] (syz.0.3422,12180,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 374.771226][T12180] (syz.0.3422,12180,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 374.779545][T12180] (syz.0.3422,12180,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 374.864547][T12180] (syz.0.3422,12180,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 374.912763][T12180] (syz.0.3422,12180,0):ocfs2_mknod:385 ERROR: status = -30 [ 374.913378][T12241] loop1: detected capacity change from 0 to 64 [ 374.952648][T12180] (syz.0.3422,12180,0):ocfs2_mknod:502 ERROR: status = -30 [ 374.959907][T12180] (syz.0.3422,12180,0):ocfs2_mkdir:659 ERROR: status = -30 [ 375.161373][T12247] loop2: detected capacity change from 0 to 1024 [ 375.268364][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 375.343276][T12253] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (8) [ 375.390316][ T34] hfsplus: b-tree write err: -5, ino 4 [ 375.527448][T12258] loop2: detected capacity change from 0 to 1024 [ 375.702876][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3459'. [ 376.067843][T12283] loop1: detected capacity change from 0 to 256 [ 376.159827][ T4383] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 376.362988][ T4383] usb 5-1: Using ep0 maxpacket: 16 [ 376.372515][ T4383] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 376.435932][ T4383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.448820][ T4383] usb 5-1: Product: syz [ 376.453143][ T4383] usb 5-1: Manufacturer: syz [ 376.457756][ T4383] usb 5-1: SerialNumber: syz [ 376.520746][ T4383] r8152-cfgselector 5-1: config 0 descriptor?? [ 376.680684][T12305] openvswitch: netlink: ufid size 312 bytes exceeds the range (1, 16) [ 376.756327][T12305] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 376.851746][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3497'. [ 376.987484][ T4383] r8152-cfgselector 5-1: Unknown version 0x0000 [ 377.008909][ T4383] r8152-cfgselector 5-1: USB disconnect, device number 61 [ 377.437860][T12339] xt_l2tp: missing protocol rule (udp|l2tpip) [ 377.874374][T12355] netlink: 'syz.0.3508': attribute type 1 has an invalid length. [ 377.879119][T12356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3509'. [ 377.896296][T12355] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.3508'. [ 377.941534][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3511'. [ 378.152685][ T27] audit: type=1326 audit(30529607.945:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 378.204928][ T27] audit: type=1326 audit(30529607.973:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 378.231201][T12370] loop3: detected capacity change from 0 to 2048 [ 378.288637][ T27] audit: type=1326 audit(30529607.973:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 378.288675][ T27] audit: type=1326 audit(30529607.973:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 378.391409][T12376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.400059][T12370] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 378.412296][T12370] Remounting filesystem read-only [ 378.622131][T12386] loop1: detected capacity change from 0 to 256 [ 378.900955][T12395] loop4: detected capacity change from 0 to 512 [ 379.031565][T12395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 379.087525][T12404] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 379.127466][T12406] loop2: detected capacity change from 0 to 256 [ 379.168342][T12406] exfat: Deprecated parameter 'namecase' [ 379.221718][T12406] exfat: Deprecated parameter 'utf8' [ 379.276752][T12406] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 379.328940][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 379.644151][ T27] audit: type=1326 audit(30529609.339:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.2.3539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10c778ebe9 code=0x0 [ 379.843164][T12431] loop3: detected capacity change from 0 to 1024 [ 379.884214][T12431] EXT4-fs (loop3): orphan cleanup on readonly fs [ 379.952388][T12431] EXT4-fs (loop3): 1 truncate cleaned up [ 379.963420][T12431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 380.110697][T12446] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 380.189795][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 380.290828][T12448] program syz.4.3551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.528676][ T27] audit: type=1326 audit(30529610.162:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.3.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 380.623468][ T27] audit: type=1326 audit(30529610.209:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.3.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 380.695517][ T27] audit: type=1326 audit(30529610.237:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.3.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 380.819388][ T27] audit: type=1326 audit(30529610.237:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.3.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 380.927900][ T27] audit: type=1326 audit(30529610.237:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.3.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 380.972186][T12474] loop4: detected capacity change from 0 to 8 [ 381.048523][T12474] SQUASHFS error: Failed to read block 0x6e6: -5 [ 381.055397][T12474] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 381.103067][T12474] SQUASHFS error: Unable to read directory block [631:26] [ 381.157165][T12482] loop1: detected capacity change from 0 to 64 [ 381.325010][T12487] netlink: 'syz.3.3570': attribute type 7 has an invalid length. [ 381.864157][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 381.902433][T12513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.023691][T12518] loop4: detected capacity change from 0 to 64 [ 382.711401][T12544] loop2: detected capacity change from 0 to 64 [ 382.905129][T12506] loop1: detected capacity change from 0 to 40427 [ 382.942725][T12506] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 382.962976][T12554] xt_TCPMSS: Only works on TCP SYN packets [ 383.000138][T12506] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 383.056327][T12506] F2FS-fs (loop1): invalid crc value [ 383.171366][T12506] F2FS-fs (loop1): Found nat_bits in checkpoint [ 383.368800][T12506] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 383.400217][T12506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 383.462748][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3610'. [ 384.059589][T12597] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 384.329520][T12608] syz.3.3628 (12608): /proc/12606/oom_adj is deprecated, please use /proc/12606/oom_score_adj instead. [ 384.472276][T12607] loop4: detected capacity change from 0 to 4096 [ 384.499822][T12607] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 384.735844][T12618] loop3: detected capacity change from 0 to 256 [ 385.064712][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'. [ 385.136459][T12624] loop0: detected capacity change from 0 to 4096 [ 385.177804][T12624] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 385.230591][T12630] loop4: detected capacity change from 0 to 1024 [ 386.380698][T12668] loop3: detected capacity change from 0 to 4096 [ 386.423573][T12668] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 386.583201][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'. [ 386.821787][T12692] ipt_REJECT: TCP_RESET invalid for non-tcp [ 387.585306][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3684'. [ 387.629099][T12726] netlink: 'syz.2.3686': attribute type 2 has an invalid length. [ 387.649069][T12726] netlink: 'syz.2.3686': attribute type 1 has an invalid length. [ 387.649251][T12691] loop3: detected capacity change from 0 to 32768 [ 387.660121][T12726] netlink: 'syz.2.3686': attribute type 1 has an invalid length. [ 387.756615][T12691] XFS (loop3): Mounting V5 Filesystem [ 387.831130][T12691] XFS (loop3): Ending clean mount [ 387.858897][T12691] XFS (loop3): Quotacheck needed: Please wait. [ 387.941067][ T127] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 387.966253][T12691] XFS (loop3): Quotacheck: Done. [ 388.072200][T12740] loop2: detected capacity change from 0 to 4096 [ 388.090272][ T4270] XFS (loop3): Unmounting Filesystem [ 388.111017][T12740] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 388.154843][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 388.163916][ T127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 388.199871][ T127] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 388.218491][ T127] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 388.262419][ T127] usb 2-1: Product: syz [ 388.266660][ T127] usb 2-1: Manufacturer: syz [ 388.283439][ T127] usb 2-1: SerialNumber: syz [ 388.499454][ T27] audit: type=1326 audit(30529617.626:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 388.534763][ T127] usb 2-1: Invalid connection information received from device [ 388.614548][ T27] audit: type=1326 audit(30529617.626:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 388.663337][ T27] audit: type=1326 audit(30529617.645:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 388.693901][ T27] audit: type=1326 audit(30529617.645:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 388.724732][ T27] audit: type=1326 audit(30529617.645:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 388.797551][ T4819] usb 2-1: USB disconnect, device number 56 [ 388.913455][T12748] loop0: detected capacity change from 0 to 32768 [ 389.248326][T12776] usb usb1: check_ctrlrecip: process 12776 (syz.2.3708) requesting ep 01 but needs 81 [ 389.279756][T12776] usb usb1: usbfs: process 12776 (syz.2.3708) did not claim interface 0 before use [ 389.754361][T12790] netlink: 'syz.2.3715': attribute type 13 has an invalid length. [ 389.784602][T12790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3715'. [ 389.784770][T12790] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 390.052406][T12802] loop1: detected capacity change from 0 to 64 [ 390.186314][T12804] loop0: detected capacity change from 0 to 1024 [ 390.331867][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3721'. [ 390.389371][T12806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3721'. [ 390.402550][ T11] hfsplus: b-tree write err: -5, ino 4 [ 390.457285][T12783] loop4: detected capacity change from 0 to 32768 [ 390.528575][T12783] XFS: noikeep mount option is deprecated. [ 390.577499][T12815] netlink: 'syz.0.3724': attribute type 13 has an invalid length. [ 390.624359][T12815] netlink: 'syz.0.3724': attribute type 12 has an invalid length. [ 390.689615][T12783] XFS (loop4): Mounting V5 Filesystem [ 390.772719][T12831] misc userio: Invalid payload size [ 390.784847][T12783] XFS (loop4): Ending clean mount [ 390.832679][T12834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3732'. [ 390.842575][T12834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3732'. [ 390.853407][T12783] XFS (loop4): Quotacheck needed: Please wait. [ 390.933732][T12783] XFS (loop4): Quotacheck: Done. [ 390.991275][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 391.005471][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3733'. [ 391.042855][ T4272] XFS (loop4): Unmounting Filesystem [ 391.137599][T12841] netlink: 'syz.3.3735': attribute type 21 has an invalid length. [ 391.178082][T12841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3735'. [ 391.449203][T12850] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3740'. [ 391.659506][T12856] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 391.723371][T12860] loop1: detected capacity change from 0 to 64 [ 391.787874][T12827] loop2: detected capacity change from 0 to 32768 [ 391.963191][T12868] loop3: detected capacity change from 0 to 64 [ 392.380000][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.386462][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.480579][T12882] loop0: detected capacity change from 0 to 2048 [ 392.497383][T12876] loop4: detected capacity change from 0 to 4096 [ 392.530911][T12876] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 392.545464][T12887] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.628442][ T4383] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 392.734190][T12887] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 392.769641][T12887] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 392.810827][T12887] Remounting filesystem read-only [ 392.827838][ T4265] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 392.849530][ T4383] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 392.881559][ T4383] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 392.914559][ T4383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.967451][ T4383] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 392.988232][T12891] loop2: detected capacity change from 0 to 4096 [ 393.051793][T12899] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 393.085266][T12891] ntfs3: loop2: ino=3, Correct links count -> 2. [ 393.113174][T12899] CIFS mount error: No usable UNC path provided in device string! [ 393.113174][T12899] [ 393.145117][T12891] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 393.162580][T12899] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 393.226220][ T27] audit: type=1800 audit(30529622.042:84): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3760" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 393.616404][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3771'. [ 393.726597][T12916] loop2: detected capacity change from 0 to 4096 [ 393.756227][T12916] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 394.088973][ T4383] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 394.304472][ T4383] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 394.323624][ T4383] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 394.339685][ T4383] usb 2-1: USB disconnect, device number 57 [ 394.356629][T12911] loop0: detected capacity change from 0 to 32768 [ 394.466277][T12911] XFS (loop0): Mounting V5 Filesystem [ 394.563155][T12911] XFS (loop0): Ending clean mount [ 394.705972][ T4265] XFS (loop0): Unmounting Filesystem [ 394.930656][T12963] sctp: [Deprecated]: syz.4.3793 (pid 12963) Use of int in maxseg socket option. [ 394.930656][T12963] Use struct sctp_assoc_value instead [ 395.374462][T12978] tmpfs: Bad value for 'nr_inodes' [ 395.519735][T12977] loop4: detected capacity change from 0 to 4096 [ 395.561252][T12977] ntfs3: loop4: ino=3, Correct links count -> 2. [ 395.861778][T12961] loop2: detected capacity change from 0 to 32768 [ 395.893118][T12971] loop1: detected capacity change from 0 to 32768 [ 395.934657][T12961] [ 395.934657][T12961] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 395.934657][T12961] [ 395.966228][T12971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3797 (12971) [ 396.045813][T12961] JFS: metapage_get_blocks failed [ 396.054180][T12971] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.095308][T12961] ERROR: (device loop2): release_metapage: write_one_page() failed [ 396.095308][T12961] [ 396.120028][T12971] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 396.166471][T12961] ERROR: (device loop2): diWrite: ixpxd invalid [ 396.166471][T12961] [ 396.175902][T12971] BTRFS info (device loop1): using free space tree [ 396.228163][T12961] ERROR: (device loop2): txCommit: [ 396.228163][T12961] [ 396.423006][ T4280] [ 396.423006][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 396.423006][ T4280] [ 396.532469][ T4280] [ 396.532469][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 396.532469][ T4280] [ 396.589598][T12971] BTRFS info (device loop1): enabling ssd optimizations [ 396.675861][T13026] __nla_validate_parse: 3 callbacks suppressed [ 396.675877][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3814'. [ 396.723658][T13028] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3812' sets config #-3 [ 396.748630][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3814'. [ 396.772234][ T4267] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 397.522668][T13053] netlink: 'syz.2.3829': attribute type 2 has an invalid length. [ 398.118876][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3840'. [ 398.532436][T13097] binder: 13096:13097 ioctl c018620c 200000000080 returned -22 [ 398.757022][ T27] audit: type=1326 audit(30529627.214:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13104 comm="syz.3.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 398.826234][ T52] block nbd0: Attempted send on invalid socket [ 398.832558][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 398.855711][T13110] loop4: detected capacity change from 0 to 2048 [ 398.879522][ T27] audit: type=1326 audit(30529627.261:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13104 comm="syz.3.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 398.904849][ T27] audit: type=1326 audit(30529627.261:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13104 comm="syz.3.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 399.000432][T13113] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.048540][ T27] audit: type=1326 audit(30529627.261:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13104 comm="syz.3.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 399.105521][ T27] audit: type=1326 audit(30529627.261:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13104 comm="syz.3.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 399.180085][T13113] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 399.235035][T13113] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 399.277702][T13113] Remounting filesystem read-only [ 399.298229][ T4272] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 399.443768][T13089] loop1: detected capacity change from 0 to 32768 [ 399.470458][T13089] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.3845 (13089) [ 399.542879][T13089] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 399.591669][T13089] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 399.646853][T13089] BTRFS info (device loop1): turning off barriers [ 399.659724][T13089] BTRFS info (device loop1): enabling all of the rescue options [ 399.673364][T13135] netlink: 'syz.2.3865': attribute type 21 has an invalid length. [ 399.679473][T13089] BTRFS info (device loop1): ignoring data csums [ 399.687752][T13089] BTRFS info (device loop1): ignoring bad roots [ 399.697771][T13135] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3865'. [ 399.738359][T13089] BTRFS info (device loop1): disabling log replay at mount time [ 399.743383][T13135] netlink: 'syz.2.3865': attribute type 4 has an invalid length. [ 399.754029][T13089] BTRFS info (device loop1): disabling tree log [ 399.754319][T13089] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 399.786284][T13135] netlink: 'syz.2.3865': attribute type 5 has an invalid length. [ 399.794113][T13135] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3865'. [ 399.830166][T13089] BTRFS info (device loop1): trying to use backup root at mount time [ 399.838348][T13089] BTRFS info (device loop1): using free space tree [ 400.120448][T13161] loop2: detected capacity change from 0 to 2048 [ 400.151833][T13089] BTRFS info (device loop1: state C): enabling ssd optimizations [ 400.177407][T13161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.242253][T13089] BTRFS info (device loop1: state MC): enabling all of the rescue options [ 400.280671][T13170] netlink: 'syz.3.3872': attribute type 3 has an invalid length. [ 400.289803][T13089] BTRFS warning (device loop1: state MC): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 400.363478][T13089] BTRFS info (device loop1: state MC): trying to use backup root at mount time [ 400.513186][ T4267] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 401.460355][T13215] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 401.795703][T13228] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 401.971503][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 402.507173][T13264] kernel read not supported for file / Iq"IvQh3JyxvL=QW-. GaǹW (pid: 13264 comm: syz.2.3916) [ 402.531641][ T27] audit: type=1800 audit(30529630.741:90): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3916" name=BD16204971EE22FB4976C3015168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D5118FF572D05992E1A09476115C7B9949DF357A3 dev="mqueue" ino=59756 res=0 errno=0 [ 403.010855][T13274] loop2: detected capacity change from 0 to 4096 [ 403.052184][T13274] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 403.136603][T13274] ntfs3: loop2: failed to convert "c46c" to iso8859-5 [ 403.486918][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3929'. [ 403.728071][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3934'. [ 404.177599][T13322] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.222762][ T4819] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 404.439101][ T4819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.460110][ T4819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 404.511314][ T4819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 404.521220][ T4819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.564900][ T4819] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.607474][ T4819] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 404.616556][ T4819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.660076][ T4819] usb 4-1: config 0 descriptor?? [ 404.684215][T13307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 404.736956][ T4383] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 404.793932][T13344] loop2: detected capacity change from 0 to 4096 [ 404.816566][T13344] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 404.867924][T13344] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 404.937721][ T7298] usb 4-1: USB disconnect, device number 51 [ 404.947529][T13344] ntfs3: loop2: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 404.958270][ T4383] usb 5-1: Using ep0 maxpacket: 32 [ 404.967764][ T4383] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 404.991132][ T4383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.013557][ T4383] usb 5-1: Product: syz [ 405.031864][ T4383] usb 5-1: Manufacturer: syz [ 405.042526][ T4383] usb 5-1: SerialNumber: syz [ 405.137586][ T4280] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 405.138257][T13354] netlink: 'syz.0.3961': attribute type 4 has an invalid length. [ 405.160380][T13354] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3961'. [ 405.176936][T13354] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 405.304561][ T4383] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 405.326838][ T4383] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 405.365766][ T4383] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 405.520017][T13346] loop1: detected capacity change from 0 to 40427 [ 405.542229][ T4383] usb 5-1: USB disconnect, device number 62 [ 405.571639][ T4383] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 405.590096][T13346] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 405.611235][ T4383] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 405.621261][T13346] F2FS-fs (loop1): invalid crc value [ 405.650643][ T4383] visor 5-1:1.0: device disconnected [ 405.662890][T13346] F2FS-fs (loop1): Found nat_bits in checkpoint [ 405.723018][T13366] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 405.808370][T13346] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 406.351526][T13390] loop1: detected capacity change from 0 to 128 [ 406.484597][T13390] FAT-fs (loop1): Directory bread(block 32) failed [ 406.498763][T13390] FAT-fs (loop1): Directory bread(block 33) failed [ 406.519890][T13390] FAT-fs (loop1): Directory bread(block 34) failed [ 406.552739][T13390] FAT-fs (loop1): Directory bread(block 35) failed [ 406.578719][T13390] FAT-fs (loop1): Directory bread(block 36) failed [ 406.603470][T13390] FAT-fs (loop1): Directory bread(block 37) failed [ 406.634195][T13390] FAT-fs (loop1): Directory bread(block 38) failed [ 406.671199][T13390] FAT-fs (loop1): Directory bread(block 39) failed [ 406.692391][T13390] FAT-fs (loop1): Directory bread(block 40) failed [ 406.730057][T13390] FAT-fs (loop1): Directory bread(block 41) failed [ 407.257400][T13413] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.284161][T13413] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.291418][T13413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.321561][T13417] loop2: detected capacity change from 0 to 64 [ 407.628206][T13403] loop4: detected capacity change from 0 to 40427 [ 407.656645][T13403] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 407.676814][ T22] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 407.691806][T13403] F2FS-fs (loop4): invalid crc value [ 407.721628][T13403] F2FS-fs (loop4): Found nat_bits in checkpoint [ 407.836088][T13403] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 407.901985][ T22] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 407.918745][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.944973][ T22] usb 4-1: config 0 descriptor?? [ 407.960271][ T22] cp210x 4-1:0.0: cp210x converter detected [ 408.157420][T13425] loop1: detected capacity change from 0 to 32768 [ 408.178746][ T22] usb 4-1: cp210x converter now attached to ttyUSB0 [ 408.252349][T13425] XFS (loop1): Mounting V5 Filesystem [ 408.441813][ T22] usb 4-1: USB disconnect, device number 52 [ 408.454864][T13425] XFS (loop1): Ending clean mount [ 408.465891][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 408.487055][ T22] cp210x 4-1:0.0: device disconnected [ 408.624059][ T4267] XFS (loop1): Unmounting Filesystem [ 408.833982][T13461] ipt_rpfilter: unknown options [ 408.923129][T13459] loop2: detected capacity change from 0 to 4096 [ 408.999069][T13459] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 409.255032][T13470] loop4: detected capacity change from 0 to 1024 [ 409.286769][T13470] EXT4-fs (loop4): Test dummy encryption mode enabled [ 409.389536][T13470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.457720][T13474] loop2: detected capacity change from 0 to 4096 [ 409.507795][T13474] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 409.582105][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 409.732936][T13487] loop3: detected capacity change from 0 to 2048 [ 409.813771][T13487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.014711][T13499] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4023'. [ 410.048757][T13499] device bond_slave_0 entered promiscuous mode [ 410.055718][T13499] device bond_slave_1 entered promiscuous mode [ 410.423879][T13515] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.4032'. [ 410.469300][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4033'. [ 410.481677][T13517] xt_policy: too many policy elements [ 410.850403][T13534] loop2: detected capacity change from 0 to 764 [ 410.917286][T13534] Symlink component flag not implemented [ 410.944796][T13534] Symlink component flag not implemented (116) [ 411.019855][T13540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4044'. [ 411.053030][T13540] netlink: 'syz.1.4044': attribute type 1 has an invalid length. [ 411.183432][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4047'. [ 411.412122][T13554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4050'. [ 411.555030][T13558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4053'. [ 411.598719][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 411.782374][T13566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4057'. [ 411.813005][T13566] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4057'. [ 411.896938][T13572] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 411.915680][T13572] overlayfs: missing 'lowerdir' [ 412.783894][T13615] x_tables: duplicate underflow at hook 4 [ 412.908680][T13622] loop1: detected capacity change from 0 to 1764 [ 412.972496][T13622] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 413.424323][T13645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.485883][T13692] loop3: detected capacity change from 0 to 2048 [ 414.506332][T13692] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 414.567929][T13692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.198837][T13725] netlink: 'syz.2.4135': attribute type 1 has an invalid length. [ 415.236262][T13723] loop4: detected capacity change from 0 to 4096 [ 415.259480][T13723] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 415.283883][T13723] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 415.333317][T13723] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 415.374956][T13731] __nla_validate_parse: 6 callbacks suppressed [ 415.375038][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4139'. [ 415.401913][T13723] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 415.419150][T13733] loop1: detected capacity change from 0 to 256 [ 415.494044][T13733] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 415.552273][T13723] ntfs: volume version 3.1. [ 415.683201][T13723] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 415.692435][T13723] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 415.966611][ T27] audit: type=1400 audit(30529643.313:91): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13748 comm="syz.3.4148" [ 416.182069][T13762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4151'. [ 416.438979][T13773] x_tables: duplicate entry at hook 3 [ 416.568771][T13781] loop1: detected capacity change from 0 to 1024 [ 416.599384][T13781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.669098][ T27] audit: type=1326 audit(30529643.977:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.4.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 416.691188][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.742357][T13781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 416.780015][T13781] EXT4-fs error (device loop1): ext4_xattr_set_entry:1628: inode #16: comm syz.1.4163: corrupted xattr entries [ 416.826917][ T27] audit: type=1326 audit(30529643.977:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.4.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 416.880609][T13781] EXT4-fs (loop1): Remounting filesystem read-only [ 416.895666][ T27] audit: type=1326 audit(30529643.977:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.4.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9c58ebe9 code=0x7ffc0000 [ 416.929027][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4170'. [ 416.971343][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 417.121009][T13807] loop2: detected capacity change from 0 to 64 [ 417.140565][T13807] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 417.205127][T13807] minix_free_inode: bit 5 already cleared [ 417.471956][T13819] netlink: 'syz.1.4180': attribute type 1 has an invalid length. [ 417.512425][T13822] loop4: detected capacity change from 0 to 1024 [ 417.575409][T13822] syz.4.4182: attempt to access beyond end of device [ 417.575409][T13822] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 417.618356][T13825] loop2: detected capacity change from 0 to 128 [ 417.788732][T13830] loop3: detected capacity change from 0 to 256 [ 417.911993][ T5572] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.052372][T13830] loop3: detected capacity change from 0 to 4096 [ 418.052811][ T5572] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.191343][T13842] netlink: 12296 bytes leftover after parsing attributes in process `syz.1.4192'. [ 418.227586][T13842] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4192'. [ 418.251938][T13844] loop2: detected capacity change from 0 to 1024 [ 418.306656][T13844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 418.404032][T13844] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #11: comm syz.2.4193: directory missing '..' [ 418.459903][T13853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.495251][T13853] bond0: (slave team0): Releasing backup interface [ 418.561920][T13853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.581082][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 418.591736][T13853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.640116][T13853] device bridge_slave_0 left promiscuous mode [ 418.653745][T13853] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.691850][T13853] device bridge_slave_1 left promiscuous mode [ 418.704181][T13853] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.735734][T13853] bond0: (slave bond_slave_0): Releasing backup interface [ 418.770935][T13853] bond0: (slave bond_slave_1): Releasing backup interface [ 418.854372][T13853] team0: Port device team_slave_0 removed [ 418.882298][T13853] team0: Port device team_slave_1 removed [ 418.901973][T13853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.916474][T13853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.929167][T13853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.932000][T13854] loop1: detected capacity change from 0 to 32768 [ 418.941816][T13853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.983602][T13853] team0: Port device wlan1 removed [ 419.019123][T13862] netlink: 344 bytes leftover after parsing attributes in process `syz.4.4201'. [ 419.073590][T13854] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 419.182972][T13854] (syz.1.4196,13854,0):ocfs2_symlink:2065 ERROR: status = -2 [ 419.275598][T13870] loop3: detected capacity change from 0 to 764 [ 419.292877][ T4267] (syz-executor,4267,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 419.314561][T13870] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 419.379286][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 419.450273][T13876] netlink: 12296 bytes leftover after parsing attributes in process `syz.0.4206'. [ 419.481481][T13876] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4206'. [ 419.741117][T13878] loop1: detected capacity change from 0 to 4096 [ 419.768125][T13884] snd_dummy snd_dummy.0: control 2:0:128:syz0:0 is already present [ 419.795866][T13878] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 419.873420][T13878] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 419.911185][T13878] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 419.940160][T13878] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 419.961610][T13888] loop3: detected capacity change from 0 to 512 [ 419.986129][T13888] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 420.062510][T13888] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 420.077155][T13888] System zones: 0-2, 18-18, 34-34 [ 420.110420][T13888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 420.286631][T13872] loop4: detected capacity change from 0 to 32768 [ 420.322154][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 420.371251][T13872] JBD2: Ignoring recovery information on journal [ 420.525927][T13872] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 420.648802][T13910] netlink: 'syz.3.4219': attribute type 1 has an invalid length. [ 420.723347][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 421.321643][T13937] netlink: 'syz.4.4235': attribute type 1 has an invalid length. [ 421.329656][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4235'. [ 421.519589][T13943] loop1: detected capacity change from 0 to 1024 [ 421.626639][T13943] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 421.694995][T13943] hfsplus: xattr search failed [ 421.885114][ T51] hfsplus: b-tree write err: -5, ino 4 [ 422.294040][T13939] loop0: detected capacity change from 0 to 32768 [ 422.317993][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 422.318012][ T27] audit: type=1400 audit(30529649.252:95): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13973 comm="syz.2.4254" [ 422.371735][T13939] ea_get: invalid extended attribute [ 422.409628][T13939] ffff888053e90c70: 04 00 00 00 .... [ 422.923944][T13999] netlink: 'syz.3.4265': attribute type 1 has an invalid length. [ 423.238150][T14008] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4260'. [ 423.448567][T14020] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 424.442720][T14065] loop3: detected capacity change from 0 to 256 [ 424.487890][T14065] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.549747][T14065] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 424.603828][T14065] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 424.616525][T14071] xt_hashlimit: size too large, truncated to 1048576 [ 424.648452][T14071] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 424.766520][T14039] loop1: detected capacity change from 0 to 32768 [ 424.996425][T14039] XFS (loop1): Mounting V5 Filesystem [ 425.074211][T14094] loop4: detected capacity change from 0 to 512 [ 425.105742][T14039] XFS (loop1): Ending clean mount [ 425.123836][T14039] XFS (loop1): Quotacheck needed: Please wait. [ 425.204232][T14039] XFS (loop1): Quotacheck: Done. [ 425.208682][T14094] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 425.230566][T14039] XFS (loop1): Unmounting Filesystem [ 425.403789][T14110] xt_policy: neither incoming nor outgoing policy selected [ 425.507456][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 425.527517][T14113] loop3: detected capacity change from 0 to 128 [ 425.737857][T14120] netlink: 'syz.0.4320': attribute type 1 has an invalid length. [ 425.746358][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 426.184845][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4329'. [ 426.429411][T14152] loop2: detected capacity change from 0 to 128 [ 426.482537][T14152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 426.516433][T14152] EXT4-fs (loop2): resizing filesystem from 64 to 1 blocks [ 426.525035][T14152] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 426.586425][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 426.614951][T14159] binfmt_misc: register: failed to install interpreter file ./file2 [ 426.770976][T14162] device bond1 entered promiscuous mode [ 426.777171][T14162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.007260][T14178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.031126][T14178] bond0: (slave team0): Releasing backup interface [ 427.067551][T14178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.087082][T14178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.105549][T14178] device bridge_slave_0 left promiscuous mode [ 427.113871][T14182] binder: 14180:14182 ioctl c018620c 200000001180 returned -22 [ 427.116260][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.166487][T14178] device bridge_slave_1 left promiscuous mode [ 427.174347][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.223924][T14178] bond0: (slave bond_slave_0): Releasing backup interface [ 427.292301][T14186] loop4: detected capacity change from 0 to 764 [ 427.311619][T14186] rock: directory entry would overflow storage [ 427.321427][T14186] rock: sig=0x4654, size=5, remaining=4 [ 427.327963][T14178] bond0: (slave bond_slave_1): Releasing backup interface [ 427.428582][T14178] team0: Port device team_slave_0 removed [ 427.494582][T14178] team0: Port device team_slave_1 removed [ 427.503103][T14178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.511569][T14178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.520707][T14178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.529008][T14178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.598944][T14188] netlink: 'syz.3.4352': attribute type 10 has an invalid length. [ 427.624526][T14188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4352'. [ 427.643026][T14188] device batadv0 entered promiscuous mode [ 427.650256][T14188] bridge0: port 1(batadv0) entered blocking state [ 427.687712][T14188] bridge0: port 1(batadv0) entered disabled state [ 427.698779][T14188] bridge0: port 1(batadv0) entered blocking state [ 427.707491][T14188] bridge0: port 1(batadv0) entered forwarding state [ 427.896063][T14206] ubi31: attaching mtd0 [ 427.911995][ T27] audit: type=1326 audit(30529654.481:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.1.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 427.920653][T14206] ubi31: scanning is finished [ 427.954900][ T27] audit: type=1326 audit(30529654.519:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.1.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 427.970772][ T75] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 427.987027][ T75] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 427.999122][T14206] ubi31: empty MTD device detected [ 428.029757][ T27] audit: type=1326 audit(30529654.556:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.1.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 428.082207][ T27] audit: type=1326 audit(30529654.556:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.1.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 428.114209][ T27] audit: type=1326 audit(30529654.556:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.1.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c38ebe9 code=0x7ffc0000 [ 428.228082][T14215] loop3: detected capacity change from 0 to 512 [ 428.236294][T14206] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 428.249342][T14219] netlink: 'syz.1.4367': attribute type 4 has an invalid length. [ 428.276441][T14206] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 428.283874][T14206] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 428.332644][T14206] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 428.343087][T14215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 428.410749][T14206] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 428.465902][T14206] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 428.468120][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 428.474520][T14206] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1664152149 [ 428.502425][T14206] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 428.529627][T14225] loop1: detected capacity change from 0 to 2048 [ 428.576497][T14217] ubi31: background thread "ubi_bgt31d" started, PID 14217 [ 428.606391][T14228] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.903035][T14237] loop3: detected capacity change from 0 to 256 [ 428.969200][T14237] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 429.335437][T14252] loop1: detected capacity change from 0 to 512 [ 429.517365][T14252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 429.536479][T14263] tmpfs: Bad value for 'nr_blocks' [ 429.606983][T14252] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.4378: invalid size [ 429.745486][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 429.932368][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4387'. [ 429.964158][T14274] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 430.348966][T14297] netlink: 'syz.3.4398': attribute type 1 has an invalid length. [ 430.401884][T14299] loop4: detected capacity change from 0 to 256 [ 430.467289][T14299] MINIX-fs: mounting file system with errors, running fsck is recommended [ 430.802009][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4406'. [ 430.843280][T14317] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 430.914630][T14321] rdma_rxe: rxe_register_device failed with error -23 [ 430.928207][T14321] rdma_rxe: failed to add bridge0 [ 431.042459][T14328] usb usb8: usbfs: process 14328 (syz.1.4412) did not claim interface 0 before use [ 431.130314][T14322] loop3: detected capacity change from 0 to 4096 [ 431.172471][T14322] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 431.256412][T14322] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 431.480264][T14343] loop1: detected capacity change from 0 to 128 [ 431.548644][ T27] audit: type=1326 audit(30529657.895:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14347 comm="syz.3.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 431.658384][ T27] audit: type=1326 audit(30529657.895:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14347 comm="syz.3.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 431.776206][ T27] audit: type=1326 audit(30529657.923:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14347 comm="syz.3.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 431.816090][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4428'. [ 431.883179][ T27] audit: type=1326 audit(30529657.923:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14347 comm="syz.3.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 431.929932][T14360] loop1: detected capacity change from 0 to 512 [ 431.948080][T14362] loop0: detected capacity change from 0 to 64 [ 431.972099][T14360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 431.976913][T14358] netlink: set zone limit has 4 unknown bytes [ 432.050723][ T27] audit: type=1326 audit(30529657.923:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14347 comm="syz.3.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 432.097644][T14360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 432.380671][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 432.383203][T14378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 432.542475][T14385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4438'. [ 432.775509][T14396] loop3: detected capacity change from 0 to 1024 [ 432.837363][T14396] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 432.891959][T14402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4448'. [ 432.942180][T14405] netlink: 'syz.1.4450': attribute type 10 has an invalid length. [ 432.991840][T14405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.045213][T14405] team0: Port device bond0 added [ 433.740620][T14439] loop4: detected capacity change from 0 to 1024 [ 433.795434][T14439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 433.884135][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4472'. [ 433.893349][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4472'. [ 433.899214][T14444] loop2: detected capacity change from 0 to 1024 [ 433.940543][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 434.047962][T14451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4473'. [ 434.125461][ T75] hfsplus: b-tree write err: -5, ino 4 [ 434.313163][T14462] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 434.347389][T14463] loop0: detected capacity change from 0 to 2048 [ 434.359551][T14462] overlayfs: conflicting options: userxattr,redirect_dir=off [ 434.418895][T14463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.393920][T14509] loop4: detected capacity change from 0 to 2048 [ 435.432160][T14509] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 435.493792][T14509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.812088][T14529] overlayfs: missing 'lowerdir' [ 436.224223][T14549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4520'. [ 436.245897][T14551] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 436.265884][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4520'. [ 436.285061][ T7295] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 436.497551][ T7295] usb 2-1: Using ep0 maxpacket: 16 [ 436.504636][ T7295] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 436.528343][T14557] IPv6: sit1: Disabled Multicast RS [ 436.532328][ T7295] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 436.557301][T14553] loop2: detected capacity change from 0 to 8192 [ 436.564813][ T7295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.590405][ T7295] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.595244][T14539] loop0: detected capacity change from 0 to 32768 [ 436.614859][ T7295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.634116][ T7295] usb 2-1: Product: syz [ 436.639231][T14553] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 436.658977][T14539] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.4515 (14539) [ 436.673258][T14553] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 436.679145][ T7295] usb 2-1: Manufacturer: syz [ 436.688852][T14553] REISERFS (device loop2): using ordered data mode [ 436.696337][T14553] reiserfs: using flush barriers [ 436.703742][T14553] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 436.708096][ T7295] usb 2-1: SerialNumber: syz [ 436.720605][T14553] REISERFS (device loop2): checking transaction log (loop2) [ 436.735726][T14553] REISERFS (device loop2): Using rupasov hash to sort names [ 436.745567][T14553] REISERFS (device loop2): using 3.5.x disk format [ 436.752866][T14553] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 436.777164][T14563] loop3: detected capacity change from 0 to 512 [ 436.781545][T14553] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 436.804327][T14563] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 436.825395][T14563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 436.839897][T14553] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 436.854063][T14563] EXT4-fs (loop3): orphan cleanup on readonly fs [ 436.860468][T14563] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.4526: bad orphan inode 267 [ 436.877291][T14539] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 436.885707][T14553] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 436.913060][T14563] EXT4-fs (loop3): Remounting filesystem read-only [ 436.955172][T14539] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 436.966218][T14563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.986931][T14539] BTRFS info (device loop0): force zlib compression, level 3 [ 437.035442][T14563] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.4526: dx entry: limit 0 != root limit 125 [ 437.068186][T14539] BTRFS info (device loop0): force clearing of disk cache [ 437.099577][T14563] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4526: Corrupt directory, running e2fsck is recommended [ 437.120553][T14539] BTRFS info (device loop0): setting nodatasum [ 437.150668][T14539] BTRFS info (device loop0): doing ref verification [ 437.199258][T14539] BTRFS info (device loop0): allowing degraded mounts [ 437.231331][T14539] BTRFS info (device loop0): enabling disk space caching [ 437.245001][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 437.280115][ T7295] usb 2-1: 0:2 : does not exist [ 437.302641][T14539] BTRFS info (device loop0): disk space caching is enabled [ 437.355945][ T7295] usb 2-1: USB disconnect, device number 58 [ 437.560803][T14539] BTRFS info (device loop0): enabling ssd optimizations [ 437.584352][T14539] BTRFS info (device loop0): rebuilding free space tree [ 437.675680][ T4571] udevd[4571]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.702254][T14539] BTRFS info (device loop0): disabling free space tree [ 437.723009][T14539] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 437.779795][T14539] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 437.950745][ T4265] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 438.145347][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4542'. [ 438.161936][ T4571] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop0 scanned by udevd (4571) [ 438.174265][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4542'. [ 438.248375][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4542'. [ 438.404938][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.500716][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.550382][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.622498][T14623] device netdevsim0 left promiscuous mode [ 438.683627][T14633] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4550'. [ 438.695783][T14625] loop2: detected capacity change from 0 to 8192 [ 438.702868][T14623] device ip6gre1 left promiscuous mode [ 438.744878][T14625] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 438.849575][T14625] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 438.859076][T14625] REISERFS (device loop2): using ordered data mode [ 438.882690][T14625] reiserfs: using flush barriers [ 438.951966][T14625] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 438.998126][T14625] REISERFS (device loop2): checking transaction log (loop2) [ 439.317944][T14625] REISERFS (device loop2): Using tea hash to sort names [ 439.330935][T14625] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 439.661838][T14663] loop1: detected capacity change from 0 to 8 [ 439.715910][T14663] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 439.756104][ T5572] udevd[5572]: incorrect cramfs checksum on /dev/loop1 [ 439.778865][T14663] cramfs: Error -3 while decompressing! [ 439.822627][T14663] cramfs: ffffffff96d711a8(26)->ffff8880474ac000(4096) [ 439.829737][T14663] cramfs: Error -3 while decompressing! [ 439.873253][ T5572] udevd[5572]: incorrect cramfs checksum on /dev/loop1 [ 439.905116][T14663] cramfs: ffffffff96d711c2(26)->ffff8880474ad000(4096) [ 439.947162][T14663] cramfs: Error -3 while decompressing! [ 439.976385][T14663] cramfs: ffffffff96d711dc(16)->ffff888051341000(4096) [ 440.015081][T14663] cramfs: Error -3 while decompressing! [ 440.020858][T14663] cramfs: ffffffff96d711a8(26)->ffff8880474ac000(4096) [ 440.101487][ T27] audit: type=1800 audit(30529665.893:106): pid=14663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4565" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 440.152862][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 440.181556][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.208256][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.221901][T14676] loop2: detected capacity change from 0 to 4096 [ 440.231047][T14680] device bridge_slave_0 left promiscuous mode [ 440.256589][T14676] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 440.277861][T14680] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.310949][T14676] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 440.340379][T14680] device bridge_slave_1 left promiscuous mode [ 440.377027][T14680] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.397368][T14676] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 440.431947][T14676] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 440.448643][T14680] bond0: (slave bond_slave_0): Releasing backup interface [ 440.494167][T14676] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 440.508904][T14680] device bond_slave_0 left promiscuous mode [ 440.544054][T14676] ntfs: volume version 3.1. [ 440.562139][T14676] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 440.586326][T14680] bond0: (slave bond_slave_1): Releasing backup interface [ 440.614211][T14676] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 440.629696][T14680] device bond_slave_1 left promiscuous mode [ 440.649498][T14676] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 440.687782][T14676] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 440.728749][T14680] team0: Port device team_slave_0 removed [ 440.748012][T14697] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4581'. [ 440.791078][T14680] team0: Port device team_slave_1 removed [ 440.821410][T14680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.859889][T14680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.900270][T14680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.919133][T14680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.961993][T14680] batman_adv: batadv0: Interface deactivated: vlan1 [ 440.996097][T14680] batman_adv: batadv0: Removing interface: vlan1 [ 441.099109][T14694] netlink: 'syz.4.4580': attribute type 10 has an invalid length. [ 441.123671][T14694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4580'. [ 441.216780][T14694] team0: Port device geneve0 added [ 441.247191][T14709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.258035][T14707] loop1: detected capacity change from 0 to 4096 [ 441.268049][T14709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.275707][T14707] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 441.300767][T14709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.360305][T14709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.213538][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4607'. [ 442.231951][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4607'. [ 442.258730][T14750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 442.283558][T14750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.367303][T14750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.449323][T14750] device netdevsim0 left promiscuous mode [ 442.476477][T14750] device ip6gretap1 left promiscuous mode [ 443.274610][T14785] loop4: detected capacity change from 0 to 4096 [ 443.339800][T14785] ntfs: volume version 3.1. [ 443.700634][T14772] loop0: detected capacity change from 0 to 32768 [ 443.784462][T14799] loop2: detected capacity change from 0 to 128 [ 443.795902][T14772] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 443.872270][T14774] loop3: detected capacity change from 0 to 40427 [ 443.912264][ T4265] (syz-executor,4265,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 443.957711][T14774] F2FS-fs (loop3): Found nat_bits in checkpoint [ 443.959745][ T4273] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 444.005482][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 444.150514][T14774] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 444.187563][ T4273] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.205842][T14774] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 444.229757][ T4273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.261944][ T4273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.309477][ T4273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.353254][ T4273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.386817][ T4273] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.418103][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.442378][ T4273] usb 2-1: Product: syz [ 444.451682][ T4273] usb 2-1: Manufacturer: syz [ 444.485726][ T4273] cdc_wdm 2-1:1.0: skipping garbage [ 444.507030][ T4273] cdc_wdm 2-1:1.0: skipping garbage [ 444.600747][ T4273] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 444.611499][ T4273] cdc_wdm 2-1:1.0: Unknown control protocol [ 444.760079][T14795] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 444.785292][ T4273] usb 2-1: USB disconnect, device number 59 [ 444.807077][T14803] loop4: detected capacity change from 0 to 32768 [ 444.880955][T14803] JBD2: Ignoring recovery information on journal [ 444.993916][T14803] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 445.088829][T14803] (syz.4.4631,14803,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 445.130169][T14803] ocfs2: Unmounting device (7,4) on (node local) [ 445.145779][T14830] loop3: detected capacity change from 0 to 4096 [ 445.186387][T14830] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 445.257038][T14830] ntfs3: loop3: ino=5, "/" The size of extended attributes must not exceed 64KiB [ 445.430659][T14843] netlink: 'syz.2.4649': attribute type 3 has an invalid length. [ 445.802218][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4656'. [ 445.864400][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 445.888225][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4657'. [ 445.898516][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 446.354369][ T4273] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 446.397317][T14883] netlink: 'syz.1.4669': attribute type 10 has an invalid length. [ 446.416385][T14883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4669'. [ 446.469910][T14883] team0: Port device geneve0 added [ 446.579377][ T4273] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.588089][ T4273] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.615928][ T4273] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.640204][T14863] loop0: detected capacity change from 0 to 32768 [ 446.647836][ T4273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.692289][ T4273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.722169][T14863] syz.0.4659: attempt to access beyond end of device [ 446.722169][T14863] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 446.745202][T14863] metapage_write_end_io: I/O error [ 446.755844][ T4273] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.773931][ T4273] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.787617][T14863] blkno = 8ed2c, nblocks = 1 [ 446.792402][T14863] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 446.792402][T14863] [ 446.816097][ T4273] usb 3-1: Product: syz [ 446.820432][ T4273] usb 3-1: Manufacturer: syz [ 446.829879][T14863] ERROR: (device loop0): remounting filesystem as read-only [ 446.852819][ T4273] cdc_wdm 3-1:1.0: skipping garbage [ 446.864454][T14863] UFO tlock:0xffffc900028ba090 [ 446.873727][ T4273] cdc_wdm 3-1:1.0: skipping garbage [ 446.908578][ T4273] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 446.929836][ T4273] cdc_wdm 3-1:1.0: Unknown control protocol [ 446.943378][T14897] device bond3 entered promiscuous mode [ 446.958290][T14897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.996142][ T107] blkno = 8ed2c, nblocks = 4 [ 447.000787][ T107] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 447.000787][ T107] [ 447.033315][T14900] device batadv0 entered promiscuous mode [ 447.054148][ T4265] syz-executor: attempt to access beyond end of device [ 447.054148][ T4265] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 447.068894][ T4265] metapage_write_end_io: I/O error [ 447.075251][ T4265] JFS: metapage_get_blocks failed [ 447.080482][ T4265] JFS: metapage_get_blocks failed [ 447.107750][ T4265] JFS: metapage_get_blocks failed [ 447.112857][ T4265] JFS: metapage_get_blocks failed [ 447.119077][T14870] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 447.136975][ T127] usb 3-1: USB disconnect, device number 52 [ 447.221366][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4682'. [ 447.269826][T14908] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 447.363824][T14912] netlink: 'syz.1.4683': attribute type 9 has an invalid length. [ 447.396073][T14912] netlink: 'syz.1.4683': attribute type 7 has an invalid length. [ 447.408212][T14912] netlink: 'syz.1.4683': attribute type 8 has an invalid length. [ 447.478233][T14916] loop3: detected capacity change from 0 to 16 [ 447.528647][T14916] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 447.578035][T14916] erofs: (device loop3): mounted with root inode @ nid 36. [ 447.643486][T14916] syz.3.4686: attempt to access beyond end of device [ 447.643486][T14916] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 447.750451][T14921] loop4: detected capacity change from 0 to 16 [ 447.770826][T14921] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 447.790400][T14924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.505142][T14954] netlink: 'syz.0.4701': attribute type 10 has an invalid length. [ 448.532808][T14956] loop3: detected capacity change from 0 to 1024 [ 448.544621][T14954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4701'. [ 448.602297][T14954] team0: Port device geneve0 added [ 448.610664][T14956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 448.652917][ T7302] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 448.746630][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 448.817776][T14968] netlink: 'syz.4.4708': attribute type 3 has an invalid length. [ 448.856073][T14968] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4708'. [ 448.867413][ T7302] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 448.875804][ T7302] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 448.902415][ T7302] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 448.944856][T14973] loop0: detected capacity change from 0 to 8 [ 448.951082][ T7302] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 448.976163][ T7302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 448.989282][ T7302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 449.035616][T14973] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 449.046596][ T7302] usb 3-1: string descriptor 0 read error: -22 [ 449.054903][ T7302] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 449.082177][ T7302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.115856][ T7302] usb 3-1: config 0 descriptor?? [ 449.138617][ T7302] hub 3-1:0.0: bad descriptor, ignoring hub [ 449.150935][ T7302] hub: probe of 3-1:0.0 failed with error -5 [ 449.369980][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 449.369997][ T27] audit: type=1326 audit(30529674.564:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 449.453031][ T27] audit: type=1326 audit(30529674.564:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 449.492311][ T7302] usb 3-1: USB disconnect, device number 53 [ 449.529224][ T27] audit: type=1326 audit(30529674.611:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 449.587841][T14998] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 449.594104][ T27] audit: type=1326 audit(30529674.611:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 449.653022][ T27] audit: type=1326 audit(30529674.611:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14988 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 449.760027][T15004] netlink: 'syz.0.4725': attribute type 11 has an invalid length. [ 450.282912][T15026] device netdevsim0 entered promiscuous mode [ 450.602745][T15041] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 450.621110][T15042] xt_l2tp: v2 doesn't support IP mode [ 450.770052][T15048] xt_limit: Overflow, try lower: 0/0 [ 451.171285][T15066] xt_l2tp: unknown flags: 17 [ 451.514273][T15084] netlink: 'syz.2.4765': attribute type 1 has an invalid length. [ 451.573699][T15084] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4765'. [ 451.604892][T15086] No such timeout policy "syz1" [ 451.665649][T15090] loop4: detected capacity change from 0 to 256 [ 451.951430][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4773'. [ 451.985450][T15102] loop3: detected capacity change from 0 to 16 [ 451.992513][T15100] netlink: 4260 bytes leftover after parsing attributes in process `syz.4.4773'. [ 452.018603][T15102] erofs: (device loop3): mounted with root inode @ nid 36. [ 452.514125][T15127] loop2: detected capacity change from 0 to 8 [ 452.577594][ T4571] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 453.293056][T15160] kernel profiling enabled (shift: 7) [ 453.772856][T15140] loop1: detected capacity change from 0 to 32768 [ 453.820418][T15140] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 453.881749][T15182] device xfrm0 entered promiscuous mode [ 453.901250][T15178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4813'. [ 454.160571][ T4571] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 454.190538][ C1] sd 0:0:1:0: [sda] tag#2491 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 454.201017][ C1] sd 0:0:1:0: [sda] tag#2491 CDB: Read(6) 08 00 00 00 00 00 [ 454.347549][T15196] trusted_key: encrypted_key: keylen parameter is missing [ 454.770818][T15168] loop3: detected capacity change from 0 to 32768 [ 454.774511][T15206] loop1: detected capacity change from 0 to 4096 [ 454.796191][T15168] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 454.821999][T15168] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 454.841199][T15206] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 454.865601][T15168] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 454.896683][ T7302] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 454.903492][ T7302] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 454.980018][ T7302] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 71ms [ 455.011482][ T7302] gfs2: fsid=syz:syz.0: jid=0: Done [ 455.027169][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4830'. [ 455.047229][T15168] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 455.621447][T15198] loop4: detected capacity change from 0 to 40427 [ 455.647450][T15230] netlink: 'syz.3.4837': attribute type 21 has an invalid length. [ 455.700977][T15198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 455.703100][T15232] loop2: detected capacity change from 0 to 256 [ 455.812816][T15198] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 455.820536][T15232] FAT-fs (loop2): Directory bread(block 64) failed [ 455.827647][T15232] FAT-fs (loop2): Directory bread(block 65) failed [ 455.851139][T15232] FAT-fs (loop2): Directory bread(block 66) failed [ 455.865960][T15232] FAT-fs (loop2): Directory bread(block 67) failed [ 455.872885][T15198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 455.889909][T15232] FAT-fs (loop2): Directory bread(block 68) failed [ 455.906893][T15232] FAT-fs (loop2): Directory bread(block 69) failed [ 455.922176][T15232] FAT-fs (loop2): Directory bread(block 70) failed [ 455.970573][T15232] FAT-fs (loop2): Directory bread(block 71) failed [ 455.999676][T15232] FAT-fs (loop2): Directory bread(block 72) failed [ 456.032002][T15232] FAT-fs (loop2): Directory bread(block 73) failed [ 456.365234][T15251] loop3: detected capacity change from 0 to 256 [ 456.434329][T15251] FAT-fs (loop3): Directory bread(block 64) failed [ 456.469558][T15251] FAT-fs (loop3): Directory bread(block 65) failed [ 456.509082][T15251] FAT-fs (loop3): Directory bread(block 66) failed [ 456.535836][T15251] FAT-fs (loop3): Directory bread(block 67) failed [ 456.568146][T15251] FAT-fs (loop3): Directory bread(block 68) failed [ 456.578874][T15251] FAT-fs (loop3): Directory bread(block 69) failed [ 456.612585][T15251] FAT-fs (loop3): Directory bread(block 70) failed [ 456.633644][T15251] FAT-fs (loop3): Directory bread(block 71) failed [ 456.654066][T15251] FAT-fs (loop3): Directory bread(block 72) failed [ 456.675465][T15251] FAT-fs (loop3): Directory bread(block 73) failed [ 457.363322][T15290] loop4: detected capacity change from 0 to 256 [ 457.425240][T15290] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 457.804151][ T22] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 458.009868][ T22] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 458.039165][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.063412][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.069969][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.097042][ T22] usb 5-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 458.132426][T15325] Option ' ' to dns_resolver key: bad/missing value [ 458.148912][ T22] usb 5-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 458.221169][ T22] usb 5-1: config 1 interface 1 has no altsetting 0 [ 458.262477][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.283254][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.295750][ T22] usb 5-1: Product: syz [ 458.300047][ T22] usb 5-1: Manufacturer: syz [ 458.351247][ T22] usb 5-1: SerialNumber: syz [ 458.373631][ T22] usb 5-1: selecting invalid altsetting 0 [ 458.392258][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4880'. [ 458.401403][ T22] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 458.437314][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4880'. [ 458.474988][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4880'. [ 458.591162][ T22] usb 5-1: selecting invalid altsetting 0 [ 458.599018][ T22] usbtest: probe of 5-1:1.1 failed with error -22 [ 458.624398][ T22] usb 5-1: USB disconnect, device number 63 [ 458.815290][T15356] device xfrm0 entered promiscuous mode [ 459.606919][ T4273] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 459.700460][T15396] loop3: detected capacity change from 0 to 256 [ 459.805811][T15396] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 459.819954][ T4273] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 459.835128][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.855663][ T4273] usb 5-1: config 0 descriptor?? [ 459.876564][ T4273] cp210x 5-1:0.0: cp210x converter detected [ 460.113509][ T4273] usb 5-1: cp210x converter now attached to ttyUSB0 [ 460.247905][T15418] netlink: 'syz.2.4913': attribute type 6 has an invalid length. [ 460.266758][T15418] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4913'. [ 460.331421][T15422] Unsupported ieee802154 address type: 0 [ 460.351504][ T4273] usb 5-1: USB disconnect, device number 64 [ 460.372829][ T4273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 460.424876][ T4273] cp210x 5-1:0.0: device disconnected [ 460.764064][T15443] loop0: detected capacity change from 0 to 1024 [ 460.882201][ T51] hfsplus: b-tree write err: -5, ino 4 [ 461.264081][T15463] netlink: 'syz.0.4932': attribute type 13 has an invalid length. [ 461.408669][ T27] audit: type=1326 audit(30529685.826:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 461.443651][T15463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 461.478523][ T27] audit: type=1326 audit(30529685.855:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 461.515653][T15463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.568856][ T27] audit: type=1326 audit(30529685.855:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 461.697829][ T27] audit: type=1326 audit(30529685.855:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 461.873605][T15486] loop3: detected capacity change from 0 to 512 [ 461.954298][T15489] loop1: detected capacity change from 0 to 512 [ 461.996304][T15486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 462.104623][T15489] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 462.142254][T15489] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 462.156708][T15486] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.4942: bg 0: block 18: invalid block bitmap [ 462.196160][T15489] EXT4-fs (loop1): 1 truncate cleaned up [ 462.209486][T15489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 462.238509][T15486] Quota error (device loop3): write_blk: dquota write failed [ 462.248628][T15489] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.4943: Logical block already allocated [ 462.273493][T15486] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 462.305457][T15486] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.4942: Failed to acquire dquot type 1 [ 462.413732][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 462.568102][T15516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4954'. [ 462.590777][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 462.737406][T15524] loop0: detected capacity change from 0 to 64 [ 463.211822][T15541] loop1: detected capacity change from 0 to 1024 [ 463.298786][T15541] hfsplus: bad catalog entry type [ 463.412486][ T11] hfsplus: b-tree write err: -5, ino 4 [ 463.797139][T15527] loop4: detected capacity change from 0 to 32768 [ 463.921950][T15527] XFS (loop4): Mounting V5 Filesystem [ 463.966773][T15574] netlink: 'syz.1.4980': attribute type 13 has an invalid length. [ 464.101222][T15527] XFS (loop4): Ending clean mount [ 464.197116][ T22] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 464.214568][T15579] loop2: detected capacity change from 0 to 64 [ 464.304443][ T4272] XFS (loop4): Unmounting Filesystem [ 464.414824][T15574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.418827][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 464.458611][ T22] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 464.470093][T15574] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.489278][ T22] usb 4-1: config 179 has no interface number 0 [ 464.504917][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 464.524204][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 464.531151][T15587] netlink: 'syz.0.4987': attribute type 2 has an invalid length. [ 464.543707][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 464.562988][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 464.579397][ T22] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 464.601728][ T22] usb 4-1: config 179 interface 65 has no altsetting 0 [ 464.609810][ T22] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 464.625276][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.695296][ T22] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input28 [ 464.741378][T15574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.835444][T15589] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4988'. [ 464.902143][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4990'. [ 465.010066][ T4819] usb 4-1: USB disconnect, device number 53 [ 465.049444][ T4819] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 465.241742][T15599] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.328932][T15603] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.4984'. [ 465.370157][T15603] netlink: del zone limit has 8 unknown bytes [ 465.516419][T15609] loop0: detected capacity change from 0 to 2048 [ 465.577460][T15609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.715223][T15617] netlink: 'syz.3.5002': attribute type 5 has an invalid length. [ 465.723084][T15617] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5002'. [ 465.980517][T15627] loop3: detected capacity change from 0 to 164 [ 466.066573][T15632] netlink: 'syz.2.5006': attribute type 1 has an invalid length. [ 466.135184][ T4270] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 466.207472][ T4270] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 466.492407][T15652] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5019'. [ 466.870952][T15669] loop3: detected capacity change from 0 to 256 [ 466.997386][T15673] loop4: detected capacity change from 0 to 2048 [ 467.068234][T15673] Alternate GPT is invalid, using primary GPT. [ 467.092562][T15673] loop4: p2 p3 p7 [ 467.186560][T15681] loop3: detected capacity change from 0 to 16 [ 467.263829][T15681] erofs: (device loop3): mounted with root inode @ nid 36. [ 467.311399][T15681] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 467.376672][T15681] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 467.406552][T15681] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 467.468551][T15681] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 467.493280][ T4665] udevd[4665]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 467.504195][ T4431] udevd[4431]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 467.513254][ T4571] udevd[4571]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 467.521722][T15681] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 467.687264][T15692] loop4: detected capacity change from 0 to 2048 [ 467.723613][T15692] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2365, location=2365 [ 467.752563][T15692] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 467.811305][T15692] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 467.884098][T15692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.899271][T15703] loop3: detected capacity change from 0 to 64 [ 468.120954][ T4819] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 468.257988][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5050'. [ 468.276409][T15715] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5049'. [ 468.299068][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5049'. [ 468.324523][T15715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5049'. [ 468.344985][ T4819] usb 3-1: Using ep0 maxpacket: 16 [ 468.347993][T15715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5049'. [ 468.361000][ T4819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.394469][ T4819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 468.417760][ T4819] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 468.464375][ T4819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.472436][ T4819] usb 3-1: Product: syz [ 468.494759][ T4819] usb 3-1: Manufacturer: syz [ 468.503139][ T4819] usb 3-1: SerialNumber: syz [ 468.553152][ T4819] usb 3-1: config 0 descriptor?? [ 468.859202][T15739] loop3: detected capacity change from 0 to 64 [ 469.043401][ T4819] usb 3-1: USB disconnect, device number 54 [ 469.245530][T15756] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 469.391825][T15762] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 469.443822][T15764] sctp: [Deprecated]: syz.1.5084 (pid 15764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.443822][T15764] Use struct sctp_sack_info instead [ 469.472287][T15766] netlink: 'syz.4.5074': attribute type 13 has an invalid length. [ 469.492873][T15766] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 469.559519][T15766] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.617841][T15766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.632829][ T4283] Bluetooth: hci2: command 0x2016 tx timeout [ 470.880288][T15827] binder: 15825:15827 unknown command 0 [ 470.885919][T15827] binder: 15825:15827 ioctl c0306201 200000000480 returned -22 [ 471.076071][T15840] Zero length message leads to an empty skb [ 471.231439][ T127] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 471.397816][T15853] printk: syz.3.5116 (15853): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 471.419527][T15856] __nla_validate_parse: 2 callbacks suppressed [ 471.419546][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 471.457343][ T127] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 471.459557][T15856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.465631][ T127] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 471.465668][ T127] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 471.543159][ T127] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 471.555176][ T127] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 471.594875][ T127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.619460][ T127] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 471.640780][ T127] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 471.660358][ T127] usb 5-1: Product: syz [ 471.666102][ T127] usb 5-1: Manufacturer: syz [ 471.676159][ T127] usb 5-1: SerialNumber: syz [ 471.686106][T15859] loop2: detected capacity change from 0 to 4096 [ 471.694975][ T127] usb 5-1: config 0 descriptor?? [ 471.704493][T15832] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 471.725096][ T127] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 471.761498][T15859] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 471.778710][ T127] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 471.793574][T15866] VFS: could not find a valid V7 on nullb0. [ 471.833194][T15859] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 472.045606][ T127] usb 5-1: USB disconnect, device number 65 [ 472.054063][ T127] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 472.099833][ T9] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 472.122520][ T4280] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 472.123348][T15875] loop0: detected capacity change from 0 to 64 [ 472.170523][T15877] libceph: resolve '00' (ret=-3): failed [ 472.428935][ T4283] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 472.438014][ T4283] Bluetooth: hci2: Injecting HCI hardware error event [ 472.446056][T15886] xt_ecn: cannot match TCP bits for non-tcp packets [ 472.448761][ T47] Bluetooth: hci2: hardware error 0x00 [ 472.558615][T15890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5138'. [ 472.660300][T15890] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 472.980982][T15914] netlink: 'syz.3.5148': attribute type 13 has an invalid length. [ 473.164457][T15918] loop4: detected capacity change from 0 to 1764 [ 473.237591][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 473.242525][T15918] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 473.272031][T15914] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.333198][T15914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.606635][T15936] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 473.812460][T15946] loop4: detected capacity change from 0 to 1024 [ 473.963497][ T51] hfsplus: b-tree write err: -5, ino 4 [ 473.992653][T15954] loop1: detected capacity change from 0 to 256 [ 474.228912][T15960] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 474.377419][T15967] loop4: detected capacity change from 0 to 2048 [ 474.450141][ T4571] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 474.472819][T15967] Invalid option length (0) for dns_resolver key [ 474.652650][ T47] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 475.170080][T15999] loop1: detected capacity change from 0 to 256 [ 475.198628][T15999] exfat: Deprecated parameter 'namecase' [ 475.236411][T15999] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 475.346831][T16005] device wlan0 entered promiscuous mode [ 475.818440][T16022] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 476.377879][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.441641][T16036] IPv6: Can't replace route, no match found [ 476.575255][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.682913][T16049] loop2: detected capacity change from 0 to 1764 [ 476.906216][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.066049][ T27] audit: type=1326 audit(30529700.465:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16063 comm="syz.3.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 477.143933][ T27] audit: type=1326 audit(30529700.465:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16063 comm="syz.3.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 477.167517][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.213131][ T27] audit: type=1326 audit(30529700.503:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16063 comm="syz.3.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 477.352997][ T27] audit: type=1326 audit(30529700.503:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16063 comm="syz.3.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 477.474004][ T27] audit: type=1326 audit(30529700.503:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16063 comm="syz.3.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 477.779767][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.791895][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.801896][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.811476][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.819437][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 477.829367][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.842196][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.849560][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.863936][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.872387][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.879915][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 477.887879][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.331343][T16085] xfrm0 speed is unknown, defaulting to 1000 [ 478.573375][ T27] audit: type=1326 audit(30529701.878:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 478.635657][ T27] audit: type=1326 audit(30529701.887:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 478.725028][ T27] audit: type=1326 audit(30529701.887:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 478.874919][ T127] xfrm0 speed is unknown, defaulting to 1000 [ 478.909061][ T127] ================================================================== [ 478.915363][ T27] audit: type=1326 audit(30529701.887:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378ff8ebe9 code=0x7ffc0000 [ 478.917239][ T127] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 478.946589][ T127] Read of size 4 at addr ffff888056cea0e0 by task kworker/1:2/127 [ 478.954383][ T127] [ 478.956695][ T127] CPU: 1 PID: 127 Comm: kworker/1:2 Not tainted 6.1.147-syzkaller #0 [ 478.964925][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.975167][ T127] Workqueue: infiniband ib_cache_event_task [ 478.981067][ T127] Call Trace: [ 478.984332][ T127] [ 478.987260][ T127] dump_stack_lvl+0x168/0x22e [ 478.992014][ T127] ? __lock_acquire+0x7c50/0x7c50 [ 478.997212][ T127] ? show_regs_print_info+0x12/0x12 [ 479.002597][ T127] ? load_image+0x3b0/0x3b0 [ 479.007192][ T127] ? __virt_addr_valid+0x465/0x540 [ 479.012390][ T127] ? siw_query_port+0x358/0x450 [ 479.017230][ T127] print_report+0xa8/0x200 [ 479.021639][ T127] kasan_report+0x10b/0x140 [ 479.026132][ T127] ? siw_query_port+0x358/0x450 [ 479.030972][ T127] siw_query_port+0x358/0x450 [ 479.035702][ T127] ? ib_query_port+0x372/0x820 [ 479.040455][ T127] ib_cache_update+0x1bb/0x980 [ 479.045398][ T127] ? ib_cache_setup_one+0x5d0/0x5d0 [ 479.050669][ T127] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 479.056752][ T127] ? read_lock_is_recursive+0x10/0x10 [ 479.062137][ T127] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 479.068039][ T127] ? _raw_spin_unlock+0x40/0x40 [ 479.072983][ T127] ib_cache_event_task+0xd4/0x1c0 [ 479.078192][ T127] ? process_one_work+0x7a1/0x1160 [ 479.083328][ T127] process_one_work+0x898/0x1160 [ 479.088262][ T127] ? worker_detach_from_pool+0x240/0x240 [ 479.093972][ T127] ? _raw_spin_lock_irq+0xab/0xe0 [ 479.099076][ T127] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 479.104542][ T127] ? kthread_data+0x4b/0xc0 [ 479.109182][ T127] worker_thread+0xaa2/0x1250 [ 479.113959][ T127] ? __kthread_parkme+0x162/0x1c0 [ 479.118987][ T127] kthread+0x29d/0x330 [ 479.123071][ T127] ? worker_clr_flags+0x1a0/0x1a0 [ 479.128086][ T127] ? kthread_blkcg+0xd0/0xd0 [ 479.132756][ T127] ret_from_fork+0x1f/0x30 [ 479.137165][ T127] [ 479.140172][ T127] [ 479.142482][ T127] Allocated by task 4267: [ 479.147365][ T127] kasan_set_track+0x4b/0x70 [ 479.152128][ T127] __kasan_kmalloc+0x8e/0xa0 [ 479.156769][ T127] __kmalloc_node+0xb0/0x240 [ 479.161370][ T127] kvmalloc_node+0x6c/0x180 [ 479.165930][ T127] alloc_netdev_mqs+0x84/0xf00 [ 479.170789][ T127] rtnl_create_link+0x2fb/0xb80 [ 479.175623][ T127] rtnl_newlink+0x13ca/0x1ff0 [ 479.180297][ T127] rtnetlink_rcv_msg+0x79b/0xed0 [ 479.185249][ T127] netlink_rcv_skb+0x1de/0x420 [ 479.190104][ T127] netlink_unicast+0x74d/0x8d0 [ 479.194884][ T127] netlink_sendmsg+0x89e/0xbc0 [ 479.199640][ T127] __sys_sendto+0x44f/0x5c0 [ 479.204128][ T127] __x64_sys_sendto+0xda/0xf0 [ 479.208809][ T127] do_syscall_64+0x4c/0xa0 [ 479.213362][ T127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.219338][ T127] [ 479.221683][ T127] Freed by task 51: [ 479.225490][ T127] kasan_set_track+0x4b/0x70 [ 479.230071][ T127] kasan_save_free_info+0x2d/0x50 [ 479.235093][ T127] ____kasan_slab_free+0x126/0x1e0 [ 479.240212][ T127] slab_free_freelist_hook+0x131/0x1a0 [ 479.245707][ T127] __kmem_cache_free+0xb6/0x1f0 [ 479.250545][ T127] device_release+0x92/0x1c0 [ 479.255218][ T127] kobject_put+0x21d/0x460 [ 479.259620][ T127] netdev_run_todo+0xc8f/0xd80 [ 479.264401][ T127] xfrmi_exit_batch_net+0x30c/0x350 [ 479.269597][ T127] cleanup_net+0x77b/0xb80 [ 479.274010][ T127] process_one_work+0x898/0x1160 [ 479.278965][ T127] worker_thread+0xaa2/0x1250 [ 479.283821][ T127] kthread+0x29d/0x330 [ 479.288086][ T127] ret_from_fork+0x1f/0x30 [ 479.292641][ T127] [ 479.294956][ T127] The buggy address belongs to the object at ffff888056cea000 [ 479.294956][ T127] which belongs to the cache kmalloc-cg-4k of size 4096 [ 479.309693][ T127] The buggy address is located 224 bytes inside of [ 479.309693][ T127] 4096-byte region [ffff888056cea000, ffff888056ceb000) [ 479.323041][ T127] [ 479.325370][ T127] The buggy address belongs to the physical page: [ 479.331773][ T127] page:ffffea00015b3a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56ce8 [ 479.341907][ T127] head:ffffea00015b3a00 order:3 compound_mapcount:0 compound_pincount:0 [ 479.350214][ T127] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 479.358192][ T127] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c280 [ 479.366762][ T127] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 479.375339][ T127] page dumped because: kasan: bad access detected [ 479.381741][ T127] page_owner tracks the page as allocated [ 479.387440][ T127] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4280, tgid 4280 (syz-executor), ts 59303350899, free_ts 13076680074 [ 479.409058][ T127] post_alloc_hook+0x173/0x1a0 [ 479.413914][ T127] get_page_from_freelist+0x1a26/0x1ac0 [ 479.419450][ T127] __alloc_pages+0x1df/0x4e0 [ 479.424053][ T127] alloc_slab_page+0x5d/0x160 [ 479.428817][ T127] new_slab+0x87/0x2c0 [ 479.432963][ T127] ___slab_alloc+0xbc6/0x1220 [ 479.437634][ T127] __kmem_cache_alloc_node+0x1a0/0x260 [ 479.443095][ T127] __kmalloc_node_track_caller+0x9e/0x230 [ 479.448828][ T127] kmemdup+0x27/0x60 [ 479.452709][ T127] __addrconf_sysctl_register+0x99/0x3d0 [ 479.458344][ T127] addrconf_sysctl_register+0x15c/0x1b0 [ 479.463968][ T127] ipv6_add_dev+0xbe0/0x1120 [ 479.468550][ T127] addrconf_notify+0x634/0xf40 [ 479.473386][ T127] raw_notifier_call_chain+0xcb/0x160 [ 479.478832][ T127] register_netdevice+0x1600/0x1aa0 [ 479.484017][ T127] veth_newlink+0x7a0/0xbe0 [ 479.488540][ T127] page last free stack trace: [ 479.493194][ T127] free_unref_page_prepare+0x8b4/0x9a0 [ 479.498645][ T127] free_unref_page+0x2e/0x3f0 [ 479.503416][ T127] free_contig_range+0x9d/0x150 [ 479.508293][ T127] destroy_args+0xef/0x8bf [ 479.513069][ T127] debug_vm_pgtable+0x32a/0x37e [ 479.517924][ T127] do_one_initcall+0x214/0x7a0 [ 479.522780][ T127] do_initcall_level+0x137/0x1e4 [ 479.527702][ T127] do_initcalls+0x4b/0x8a [ 479.532012][ T127] kernel_init_freeable+0x3fa/0x5ac [ 479.537199][ T127] kernel_init+0x19/0x1b0 [ 479.541528][ T127] ret_from_fork+0x1f/0x30 [ 479.545944][ T127] [ 479.548261][ T127] Memory state around the buggy address: [ 479.554003][ T127] ffff888056ce9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 479.562056][ T127] ffff888056cea000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.570212][ T127] >ffff888056cea080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.578337][ T127] ^ [ 479.585534][ T127] ffff888056cea100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.593588][ T127] ffff888056cea180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.601629][ T127] ================================================================== [ 479.919418][ T127] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 479.926661][ T127] CPU: 1 PID: 127 Comm: kworker/1:2 Not tainted 6.1.147-syzkaller #0 [ 479.934736][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.944891][ T127] Workqueue: infiniband ib_cache_event_task [ 479.950830][ T127] Call Trace: [ 479.954123][ T127] [ 479.957058][ T127] dump_stack_lvl+0x168/0x22e [ 479.962033][ T127] ? memcpy+0x3c/0x60 [ 479.966005][ T127] ? show_regs_print_info+0x12/0x12 [ 479.971187][ T127] ? load_image+0x3b0/0x3b0 [ 479.975689][ T127] panic+0x2c9/0x710 [ 479.979574][ T127] ? bpf_jit_dump+0xd0/0xd0 [ 479.984070][ T127] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 479.989952][ T127] ? _raw_spin_unlock+0x40/0x40 [ 479.994872][ T127] ? print_memory_metadata+0x314/0x400 [ 480.000410][ T127] check_panic_on_warn+0x80/0xa0 [ 480.005334][ T127] ? siw_query_port+0x358/0x450 [ 480.010172][ T127] end_report+0x66/0x110 [ 480.014490][ T127] kasan_report+0x118/0x140 [ 480.018986][ T127] ? siw_query_port+0x358/0x450 [ 480.023831][ T127] siw_query_port+0x358/0x450 [ 480.028504][ T127] ? ib_query_port+0x372/0x820 [ 480.033260][ T127] ib_cache_update+0x1bb/0x980 [ 480.038024][ T127] ? ib_cache_setup_one+0x5d0/0x5d0 [ 480.043212][ T127] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 480.049186][ T127] ? read_lock_is_recursive+0x10/0x10 [ 480.054544][ T127] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 480.060437][ T127] ? _raw_spin_unlock+0x40/0x40 [ 480.065275][ T127] ib_cache_event_task+0xd4/0x1c0 [ 480.070303][ T127] ? process_one_work+0x7a1/0x1160 [ 480.075429][ T127] process_one_work+0x898/0x1160 [ 480.080386][ T127] ? worker_detach_from_pool+0x240/0x240 [ 480.086005][ T127] ? _raw_spin_lock_irq+0xab/0xe0 [ 480.091020][ T127] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 480.096377][ T127] ? kthread_data+0x4b/0xc0 [ 480.100873][ T127] worker_thread+0xaa2/0x1250 [ 480.105639][ T127] ? __kthread_parkme+0x162/0x1c0 [ 480.110750][ T127] kthread+0x29d/0x330 [ 480.114805][ T127] ? worker_clr_flags+0x1a0/0x1a0 [ 480.119817][ T127] ? kthread_blkcg+0xd0/0xd0 [ 480.124396][ T127] ret_from_fork+0x1f/0x30 [ 480.128804][ T127] [ 480.132055][ T127] Kernel Offset: disabled [ 480.136373][ T127] Rebooting in 86400 seconds..