last executing test programs: 9.366225263s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x2000, 0x0, 0x0) 8.861100548s ago: executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000001, 0x0, 0x0) 8.606836761s ago: executing program 1: timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r1, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x202}, {0x6}]}) 5.519643457s ago: executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 2.789732101s ago: executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 2.400326146s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.213037042s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.076935555s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.716303987s ago: executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fsopen(&(0x7f00000001c0)='9p\x00', 0x0) 768.485011ms ago: executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) 579.551748ms ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) 0s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1}, 0x102) kernel console output (not intermixed with test programs): 4, inode=12, rec_len=16, size=1024 fake=0 [ 8458.928276][ T4335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8459.886410][ T4671] loop0: detected capacity change from 0 to 512 [ 8459.993866][ T4671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 8459.996119][ T4671] System zones: 1-12 [ 8460.016353][ T4671] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.0: invalid block [ 8460.030547][ T4671] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 8460.059470][ T4671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 8460.066235][ T4671] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 8460.087049][ T4671] EXT4-fs error (device loop0): ext4_clear_blocks:881: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 8460.099697][ T4671] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 8460.115512][ T4671] EXT4-fs (loop0): 1 truncate cleaned up [ 8460.131391][ T4671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8460.148580][ T4671] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 8460.279469][ T4335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8461.199272][ T4683] loop0: detected capacity change from 0 to 128 [ 8461.274312][ T4683] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 8461.368023][ T4683] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 8461.435704][ T4683] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 8461.437538][ T4683] EXT4-fs error (device loop0): __ext4_find_entry:1693: inode #2: comm syz-executor.0: checksumming directory block 0 [ 8461.604893][ T4335] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 8461.961893][ T4691] loop1: detected capacity change from 0 to 512 [ 8462.008980][ T4691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 8462.010828][ T4691] System zones: 1-12 [ 8462.032235][ T4691] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 8462.053655][ T4691] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 8462.075007][ T4691] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 8462.082765][ T4691] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 8462.109193][ T4691] EXT4-fs error (device loop1): ext4_clear_blocks:881: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 8462.116491][ T4691] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 8462.126157][ T4691] EXT4-fs (loop1): 1 truncate cleaned up [ 8462.136994][ T4691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8462.159302][ T4691] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 8462.300054][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8467.207650][ T4731] loop0: detected capacity change from 0 to 1024 [ 8467.381603][ T4731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8467.408951][ T4731] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: bad e_name length [ 8467.561956][ T4335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8479.481676][ T4795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8479.495776][ T4795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8481.514706][ T4803] serio: Serial port pts0 [ 8487.071863][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 7980 seconds [ 8496.194486][ T4868] serio: Serial port pts0 [ 8507.072183][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 8510.935128][ T4881] can: request_module (can-proto-0) failed. [ 8512.842280][ T4894] serio: Serial port pts0 [ 8517.178690][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8010 seconds [ 8544.676466][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8547.227793][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8040 seconds [ 8555.425522][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8555.846055][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8555.849260][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8557.901956][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8557.912059][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8560.456317][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 8563.884529][ T669] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 8563.962786][ T5118] serio: Serial port pts0 [ 8564.104672][ T669] usb 1-1: Using ep0 maxpacket: 8 [ 8564.201299][ T669] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 8564.205525][ T669] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 8564.206975][ T669] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 8564.208724][ T669] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 8564.210210][ T669] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 8564.215457][ T669] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 8564.216765][ T669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8564.535862][ T669] usb 1-1: usb_control_msg returned -32 [ 8564.537349][ T669] usbtmc 1-1:16.0: can't read capabilities [ 8566.008171][ T5121] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 8566.029180][ T2406] usb 1-1: USB disconnect, device number 47 [ 8569.727321][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8569.732000][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8571.503932][ T5136] serio: Serial port pts0 [ 8577.306472][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8070 seconds [ 8578.634562][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8578.638093][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8583.838433][ T5179] loop1: detected capacity change from 0 to 512 [ 8583.909780][ T5179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 8583.921812][ T5179] System zones: 1-12 [ 8583.962286][ T5179] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 8583.977260][ T5179] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 8583.997657][ T5179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 8584.010383][ T5179] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 8584.037720][ T5179] EXT4-fs error (device loop1): ext4_clear_blocks:881: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 8584.045105][ T5179] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 8584.079155][ T5179] EXT4-fs (loop1): 1 truncate cleaned up [ 8584.129495][ T5179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8584.170852][ T5179] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 8584.387264][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8584.610498][T13030] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 8585.049272][ T5183] loop1: detected capacity change from 0 to 2048 [ 8585.140718][ T5183] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 8585.168847][ T5183] EXT4-fs (loop1): get root inode failed [ 8585.170073][ T5183] EXT4-fs (loop1): mount failed [ 8591.837551][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8591.841368][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8601.175733][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8601.181155][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8603.617946][ T5229] serio: Serial port pts0 [ 8607.385948][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8100 seconds [ 8616.732125][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8616.740187][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8629.652167][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8630.044394][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8630.047975][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8637.470516][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8130 seconds [ 8654.121585][ T5358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8654.141291][ T5358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8662.637157][ T29] audit: type=1326 audit(2536873771.568:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5365 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=172 compat=0 ip=0xffff9de5b50c code=0x0 [ 8667.566227][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8160 seconds [ 8675.751352][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8675.780034][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8678.153793][ T5394] hsr_slave_0: entered promiscuous mode [ 8678.208972][ T5394] hsr_slave_1: entered promiscuous mode [ 8678.254847][ T5394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 8678.256684][ T5394] Cannot create hsr debugfs directory [ 8679.219676][ T5394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8679.350863][ T5394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8679.485213][ T5394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8679.639043][ T5394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8680.152247][ T5394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 8680.206063][ T5394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 8680.229126][ T5394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 8680.246768][ T5394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 8682.363148][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8689.512116][ T5394] veth0_vlan: entered promiscuous mode [ 8689.620314][ T5394] veth1_vlan: entered promiscuous mode [ 8689.960115][ T5394] veth0_macvtap: entered promiscuous mode [ 8690.005960][ T5394] veth1_macvtap: entered promiscuous mode [ 8690.196750][ T5394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8690.199121][ T5394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8690.200480][ T5394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8690.219358][ T5394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8691.609178][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8695.834841][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8695.838463][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8697.563522][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8697.643717][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8190 seconds [ 8708.079107][ T5569] dvmrp0: entered allmulticast mode [ 8709.245729][T29690] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 8709.494516][T29690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 8709.495837][T29690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 8709.496645][T29690] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 8709.497261][T29690] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 8709.498005][T29690] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 8709.498649][T29690] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 8709.548719][T29690] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 8709.549542][T29690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8709.550081][T29690] usb 1-1: Product: syz [ 8709.550491][T29690] usb 1-1: Manufacturer: syz [ 8709.550896][T29690] usb 1-1: SerialNumber: syz [ 8709.706602][ T5583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8709.717103][ T5583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8709.868514][T29690] cdc_ncm 1-1:1.0: bind() failure [ 8709.941947][T29690] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 8709.954398][T29690] cdc_ncm 1-1:1.1: bind() failure [ 8709.995228][T29690] usb 1-1: USB disconnect, device number 48 [ 8712.701013][ T5594] serio: Serial port pts0 [ 8726.177677][ T5631] loop0: detected capacity change from 0 to 2048 [ 8726.271665][ T5631] loop0: p1 < > p4 [ 8726.325362][ T5631] loop0: p4 size 8388608 extends beyond EOD, truncated [ 8727.709493][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8220 seconds [ 8728.171397][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 8728.181062][ T7168] udevd[7168]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 8739.814366][ T5694] veth0_vlan: left promiscuous mode [ 8757.786395][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8250 seconds [ 8763.571000][ T5778] loop1: detected capacity change from 0 to 1024 [ 8763.596359][ T5778] EXT4-fs: Ignoring removed nobh option [ 8763.637828][ T5778] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 8763.724707][ T5778] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 8763.736627][ T5778] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 8763.768123][ T5778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8763.861671][ T5778] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz-executor.1: Invalid block bitmap block 0 in block_group 0 [ 8763.891062][ T5778] Quota error (device loop1): write_blk: dquota write failed [ 8763.892274][ T5778] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 8763.901670][ T5778] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz-executor.1: Failed to acquire dquot type 0 [ 8764.068251][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8764.086289][ T2457] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 8764.087626][ T2457] EXT4-fs error (device loop1): ext4_release_dquot:6881: comm kworker/u8:4: Failed to release dquot type 0 [ 8767.024806][ T669] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 8767.420017][ T669] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 8767.428252][ T669] usb 1-1: language id specifier not provided by device, defaulting to English [ 8777.676636][ T669] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.40 [ 8777.678121][ T669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8777.679103][ T669] usb 1-1: Product: syz [ 8777.679818][ T669] usb 1-1: SerialNumber: syz [ 8777.752367][ T669] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 8777.964366][ T669] usb 1-1: USB disconnect, device number 49 [ 8780.314146][ T5791] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 8780.563759][ T5791] usb 1-1: Using ep0 maxpacket: 8 [ 8780.654020][ T5791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 8780.655823][ T5791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 8780.657087][ T5791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 8780.659156][ T5791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 8780.734373][ T5791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 8780.736216][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 8780.737287][ T5791] usb 1-1: SerialNumber: syz [ 8780.800487][ T5799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 8780.889479][ T5791] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 8780.895104][ T5791] usb-storage 1-1:1.0: USB Mass Storage device detected [ 8780.941655][ T5791] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 8780.966528][ T5791] scsi host0: usb-storage 1-1:1.0 [ 8782.294741][ T5802] usb 1-1: reset high-speed USB device number 50 using dummy_hcd [ 8783.301374][ T669] usb 1-1: USB disconnect, device number 50 [ 8786.447829][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8786.450815][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8787.878169][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8280 seconds [ 8800.241366][T16398] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 8800.443978][T16398] usb 1-1: Using ep0 maxpacket: 8 [ 8800.497294][T16398] usb 1-1: config 0 has no interfaces? [ 8800.498731][T16398] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 8800.499999][T16398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8800.551316][T16398] usb 1-1: config 0 descriptor?? [ 8812.744000][T13421] usb 1-1: USB disconnect, device number 51 [ 8813.306636][T13421] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 8813.574447][T13421] usb 1-1: Using ep0 maxpacket: 16 [ 8813.736258][T13421] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 8813.737620][T13421] usb 1-1: config 0 has no interface number 0 [ 8813.766731][T13421] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 8813.767832][T13421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8813.768842][T13421] usb 1-1: Product: syz [ 8813.769600][T13421] usb 1-1: Manufacturer: syz [ 8813.770440][T13421] usb 1-1: SerialNumber: syz [ 8813.798134][T13421] usb 1-1: config 0 descriptor?? [ 8814.071788][T13421] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 8814.168890][ T3832] usb 1-1: USB disconnect, device number 52 [ 8814.457357][T13030] udevd[13030]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 8816.435145][ T5854] serio: Serial port pts0 [ 8817.957177][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8310 seconds [ 8818.296632][ T5859] loop0: detected capacity change from 0 to 512 [ 8818.353736][ T5859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 8818.356347][ T5859] System zones: 1-12 [ 8818.378362][ T5859] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.0: invalid block [ 8818.386133][ T5859] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 8818.430436][ T5859] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 8818.436211][ T5859] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 8818.449631][ T5859] EXT4-fs error (device loop0): ext4_clear_blocks:881: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 8818.480523][ T5859] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 8818.498179][ T5859] EXT4-fs (loop0): 1 truncate cleaned up [ 8818.549894][ T5859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8818.568268][ T5859] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 8818.746034][ T5394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8820.197906][ T5871] loop0: detected capacity change from 0 to 512 [ 8820.309808][ T5871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 8820.321065][ T5871] System zones: 1-12 [ 8820.351059][ T5871] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 8820.384715][ T5871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 8820.389289][ T5871] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 8820.397919][ T5871] EXT4-fs error (device loop0): ext4_clear_blocks:881: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 8820.414058][ T5871] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 8820.422181][ T5871] EXT4-fs (loop0): 1 truncate cleaned up [ 8820.459401][ T5871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8820.489609][ T5871] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 8820.640137][ T5394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8830.578972][ T29] audit: type=1326 audit(2536873939.498:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5917 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9de5e068 code=0x0 [ 8833.051952][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8833.065790][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8834.829955][ T5927] loop0: detected capacity change from 0 to 512 [ 8834.985042][ T5927] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 8834.986279][ T5927] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 8835.001181][ T5927] System zones: 0-1, 15-15, 18-18, 34-34 [ 8835.015997][ T5927] EXT4-fs (loop0): orphan cleanup on readonly fs [ 8835.017831][ T5927] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 8835.019365][ T5927] EXT4-fs warning (device loop0): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 8835.021364][ T5927] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 8835.077635][ T5927] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 16 [ 8835.105536][ T5927] ext4_test_bit(bit=15, block=18) = 1 [ 8835.107102][ T5927] is_bad_inode(inode)=0 [ 8835.107983][ T5927] NEXT_ORPHAN(inode)=0 [ 8835.109165][ T5927] max_ino=32 [ 8835.109851][ T5927] i_nlink=2 [ 8835.169979][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 8835.217728][ T5927] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 8835.402056][ T5394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8835.709597][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8835.728263][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8839.124278][ T5943] serio: Serial port pts0 [ 8842.289166][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8842.537397][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8842.540375][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8844.274775][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8845.855974][ T5327] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 8846.082122][ T5327] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 8846.086264][ T5327] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 8846.090141][ T5327] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 8846.091438][ T5327] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 8846.141811][ T5327] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 8846.145764][ T5327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8846.146765][ T5327] usb 1-1: Product: syz [ 8846.147506][ T5327] usb 1-1: Manufacturer: syz [ 8846.148632][ T5327] usb 1-1: SerialNumber: syz [ 8846.411947][ T5327] cdc_ncm 1-1:1.0: bind() failure [ 8846.479880][ T5327] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 8846.480830][ T5327] cdc_ncm 1-1:1.1: bind() failure [ 8846.536877][ T5327] usb 1-1: USB disconnect, device number 53 [ 8848.025580][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8340 seconds [ 8848.679337][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8848.682815][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8848.705043][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8849.205917][ T5791] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 8849.445822][ T5791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 8849.446668][ T5791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 8849.447504][ T5791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 8849.448168][ T5791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 8849.491949][ T5791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 8849.494315][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 8849.495729][ T5791] usb 1-1: Product: syz [ 8849.496543][ T5791] usb 1-1: Manufacturer: syz [ 8849.497283][ T5791] usb 1-1: SerialNumber: syz [ 8849.752676][ T5791] cdc_ncm 1-1:1.0: bind() failure [ 8849.779843][ T5791] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 8849.781083][ T5791] cdc_ncm 1-1:1.1: bind() failure [ 8849.814489][ T5791] usb 1-1: USB disconnect, device number 54 [ 8857.974470][ T5791] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 8858.174552][ T5791] usb 1-1: Using ep0 maxpacket: 8 [ 8858.336586][ T5791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 8858.338349][ T5791] usb 1-1: config 0 has no interfaces? [ 8858.339649][ T5791] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 8858.340983][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8858.366139][ T5791] usb 1-1: config 0 descriptor?? [ 8859.352246][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8859.357123][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8866.222464][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8866.240264][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8868.309468][ T6062] loop1: detected capacity change from 0 to 512 [ 8868.514454][ T6062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8868.530827][ T6062] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 8868.605999][ T6062] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 8868.611850][ T6062] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 8868.619557][ T6062] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 8868.624630][ T6062] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 8868.740075][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8870.554469][ T5794] usb 1-1: USB disconnect, device number 55 [ 8871.473845][ T6076] loop0: detected capacity change from 0 to 512 [ 8871.636610][ T6076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8871.642212][ T6076] ext4 filesystem being mounted at /syzkaller-testdir990588849/syzkaller.Nlu2Dv/101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 8871.732814][ T6076] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 8871.742237][ T6076] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 8871.757413][ T6076] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 8871.769814][ T6076] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 8871.909792][ T5394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8872.858159][ T6091] loop1: detected capacity change from 0 to 512 [ 8873.010837][ T6091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8873.015099][ T6091] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 8873.120495][ T6091] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 8873.126759][ T6091] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 8873.135368][ T6091] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 8873.142540][ T6091] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 8873.287756][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8874.358041][ T6106] loop0: detected capacity change from 0 to 512 [ 8874.546281][ T6106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8874.548507][ T6106] ext4 filesystem being mounted at /syzkaller-testdir990588849/syzkaller.Nlu2Dv/108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 8874.631675][ T6106] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 8874.648303][ T6106] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 8874.655159][ T6106] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 8874.667550][ T6106] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 8874.759261][ T5394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8878.117411][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8370 seconds [ 8878.241143][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8878.246573][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8879.195649][ T6124] loop0: detected capacity change from 0 to 512 [ 8879.358464][ T6124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8879.360485][ T6124] ext4 filesystem being mounted at /syzkaller-testdir990588849/syzkaller.Nlu2Dv/111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 8879.429172][ T6124] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 8879.437703][ T6124] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 8879.451639][ T6124] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 8879.457873][ T6124] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 8879.589392][ T5394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8896.406198][ T6221] serio: Serial port pts0 [ 8896.740009][ T6223] loop1: detected capacity change from 0 to 1024 [ 8896.752406][ T6223] EXT4-fs: Ignoring removed orlov option [ 8896.771347][ T6223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 8896.772714][ T6223] EXT4-fs (loop1): Test dummy encryption mode enabled [ 8896.780482][ T6223] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 8896.782174][ T6223] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 8896.829039][ T6223] EXT4-fs (loop1): invalid journal inode [ 8896.830462][ T6223] EXT4-fs (loop1): can't get journal size [ 8896.875354][ T6223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 8897.195199][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8898.332667][ T6235] loop1: detected capacity change from 0 to 512 [ 8898.381095][ T6235] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 8898.535562][ T6235] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #17: comm syz-executor.1: iget: bad i_size value: -6917529027641081756 [ 8898.542351][ T6235] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 17 (err -117) [ 8898.581536][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8898.708301][ T6235] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 65: padding at end of block bitmap is not set [ 8898.727302][ T6235] Quota error (device loop1): write_blk: dquota write failed [ 8898.739782][ T6235] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 8898.741742][ T6235] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz-executor.1: Failed to acquire dquot type 0 [ 8898.844602][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8900.451036][ T6248] serio: Serial port pts1 [ 8906.349505][ T6265] loop1: detected capacity change from 0 to 1024 [ 8906.379962][ T6265] EXT4-fs: Ignoring removed orlov option [ 8906.404817][ T6265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 8906.408735][ T6265] EXT4-fs (loop1): Test dummy encryption mode enabled [ 8906.411896][ T6265] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 8906.424773][ T6265] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 8906.444079][ T6265] EXT4-fs (loop1): invalid journal inode [ 8906.445397][ T6265] EXT4-fs (loop1): can't get journal size [ 8906.547812][ T6265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 8907.341877][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8908.191802][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8400 seconds [ 8913.509587][ T29] audit: type=1326 audit(2536874022.438:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9de5e068 code=0x0 [ 8924.607957][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 8927.988869][ T6349] loop1: detected capacity change from 0 to 2048 [ 8928.107414][ T6349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8928.111898][ T6349] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 8928.266229][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8938.266009][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8430 seconds [ 8945.151251][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8945.157713][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8955.271230][ T6427] loop1: detected capacity change from 0 to 512 [ 8955.331379][ T6427] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945729 > max in inode 13 [ 8955.336202][ T6427] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945730 > max in inode 13 [ 8955.339864][ T6427] EXT4-fs (loop1): 1 truncate cleaned up [ 8955.396793][ T6427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8955.614591][ T6427] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 8955.759087][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8958.518935][ T6444] loop1: detected capacity change from 0 to 512 [ 8958.560188][ T6444] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945729 > max in inode 13 [ 8958.561640][ T6444] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945730 > max in inode 13 [ 8958.568459][ T6444] EXT4-fs (loop1): 1 truncate cleaned up [ 8958.594746][ T6444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8958.705848][ T6444] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 8958.798133][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8960.267785][ T6457] loop1: detected capacity change from 0 to 512 [ 8960.369184][ T6457] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945729 > max in inode 13 [ 8960.370631][ T6457] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945730 > max in inode 13 [ 8960.375121][ T6457] EXT4-fs (loop1): 1 truncate cleaned up [ 8960.385405][ T6457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8960.487287][ T6457] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 8960.580315][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8960.862027][ T6461] loop1: detected capacity change from 0 to 512 [ 8961.010904][ T6461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 8961.014391][ T6461] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 8961.102529][ T6461] EXT4-fs: test_dummy_encryption requires encrypt feature [ 8961.358934][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8963.668016][ T6474] loop1: detected capacity change from 0 to 512 [ 8963.727210][ T6474] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945729 > max in inode 13 [ 8963.728969][ T6474] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279945730 > max in inode 13 [ 8963.731117][ T6474] EXT4-fs (loop1): 1 truncate cleaned up [ 8963.744243][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 8963.831447][ T6474] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 8963.916861][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 8965.329555][ T6488] Soft offlining pfn 0x74222 at process virtual address 0x20000000 [ 8965.448748][ T6488] Soft offlining pfn 0x4f861 at process virtual address 0x20001000 [ 8965.461505][ T6488] Soft offlining pfn 0x78551 at process virtual address 0x20002000 [ 8965.480481][ T6488] Soft offlining pfn 0x51cce at process virtual address 0x20003000 [ 8965.496876][ T6488] Soft offlining pfn 0x51409 at process virtual address 0x20004000 [ 8965.513814][ T6488] Soft offlining pfn 0x741ff at process virtual address 0x20005000 [ 8965.551264][ T6488] Soft offlining pfn 0x4bef4 at process virtual address 0x20006000 [ 8965.601487][ T6488] Soft offlining pfn 0x751fd at process virtual address 0x20007000 [ 8965.646417][ T6488] Soft offlining pfn 0x51495 at process virtual address 0x20008000 [ 8965.691335][ T6488] Soft offlining pfn 0x4c6c3 at process virtual address 0x20009000 [ 8965.712427][ T6488] Soft offlining pfn 0x51496 at process virtual address 0x2000a000 [ 8965.737382][ T6488] Soft offlining pfn 0x4afee at process virtual address 0x2000b000 [ 8965.772555][ T6488] Soft offlining pfn 0x4e5d8 at process virtual address 0x2000c000 [ 8965.809173][ T6488] Soft offlining pfn 0x4c590 at process virtual address 0x2000d000 [ 8965.831599][ T6488] Soft offlining pfn 0x72f4b at process virtual address 0x2000e000 [ 8965.856520][ T6488] soft_offline: 0x72f4b: invalidated [ 8966.328558][ T6493] loop1: detected capacity change from 0 to 2048 [ 8966.394217][ T6493] loop1: p1 < > p4 [ 8966.410384][ T6493] loop1: p4 size 8388608 extends beyond EOD, truncated [ 8968.548222][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8460 seconds [ 9000.374236][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8490 seconds [ 9000.822715][ T6523] loop1: detected capacity change from 0 to 2048 [ 9000.929059][ T6523] loop1: p1 < > p4 [ 9000.964184][ T6523] loop1: p4 size 8388608 extends beyond EOD, truncated [ 9001.914589][ T6502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9001.949736][ T6502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9003.455561][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9005.675664][ T6502] hsr_slave_0: entered promiscuous mode [ 9005.726798][ T6502] hsr_slave_1: entered promiscuous mode [ 9005.764411][ T6502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9005.765811][ T6502] Cannot create hsr debugfs directory [ 9006.695748][ T6502] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9006.816709][ T6502] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9006.911369][ T6502] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9007.031568][ T6502] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9007.570055][ T6502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 9007.622696][ T6502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 9007.681157][ T6502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 9007.721256][ T6502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 9009.574819][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9016.290121][ T6502] veth0_vlan: entered promiscuous mode [ 9016.345228][ T6502] veth1_vlan: entered promiscuous mode [ 9016.612512][ T6502] veth0_macvtap: entered promiscuous mode [ 9016.668452][ T6502] veth1_macvtap: entered promiscuous mode [ 9016.936263][ T6502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9016.937843][ T6502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9016.939111][ T6502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9016.940622][ T6502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9030.436501][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8520 seconds [ 9032.185584][ T5791] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 9032.464095][ T5791] usb 1-1: string descriptor 0 read error: -22 [ 9032.466376][ T5791] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 9032.467421][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9032.490914][ T5791] usb 1-1: config 0 descriptor?? [ 9032.716189][T16398] usb 1-1: USB disconnect, device number 56 [ 9050.530954][ T6702] serio: Serial port pts0 [ 9060.506336][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8550 seconds [ 9061.134837][ T6735] loop0: detected capacity change from 0 to 512 [ 9061.238098][ T6735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 9061.239367][ T6735] System zones: 1-12 [ 9061.270379][ T6735] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 9061.288305][ T6735] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 9061.302320][ T6735] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 9061.318689][ T6735] EXT4-fs error (device loop0): ext4_clear_blocks:881: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 9061.326004][ T6735] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 9061.344211][ T6735] EXT4-fs (loop0): 1 truncate cleaned up [ 9061.357834][ T6735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9061.380545][ T6735] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 9061.471421][ T6502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9068.779940][ T6766] loop1: detected capacity change from 0 to 1024 [ 9068.806928][ T6766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 9068.809424][ T6766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 9068.928405][ T6766] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 1056964608 [ 9068.955777][ T6766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9069.079267][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9079.232011][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9079.239780][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9081.639316][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9081.657108][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9086.445405][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9086.449522][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9090.610091][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8580 seconds [ 9091.696288][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9091.698769][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9096.810546][ T6889] serio: Serial port pts0 [ 9101.487198][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 9101.806899][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9101.811254][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9106.648647][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9106.651924][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9120.465390][T13421] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 9120.675606][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8610 seconds [ 9120.704246][T13421] usb 1-1: Using ep0 maxpacket: 8 [ 9120.758884][T13421] usb 1-1: config 0 has no interfaces? [ 9120.759505][T13421] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 9120.760083][T13421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9120.782125][T13421] usb 1-1: config 0 descriptor?? [ 9121.026083][T13421] usb 1-1: USB disconnect, device number 57 [ 9123.873796][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9126.039744][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9135.586385][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9135.590718][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9142.493609][ T29] audit: type=1326 audit(2536874251.408:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7068 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c00000b7 syscall=172 compat=0 ip=0xffffbce5b50c code=0x0 [ 9150.746807][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8640 seconds [ 9161.010003][ T7147] loop0: detected capacity change from 0 to 512 [ 9161.111038][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9161.257504][ T6502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9162.768435][ T7164] input: syz0 as /devices/virtual/input/input67 [ 9162.860584][ T7165] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 9162.879378][ T7165] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 9163.021480][ T6502] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 9163.046715][ T6502] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 9163.050657][ T6502] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 9167.414351][T10323] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 9167.689706][T10323] usb 1-1: config index 0 descriptor too short (expected 68, got 36) [ 9167.704492][T10323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9167.707110][T10323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9167.708483][T10323] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 9167.709901][T10323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9167.740928][T10323] usb 1-1: config 0 descriptor?? [ 9168.247837][T10323] hid-generic 0003:06CB:81A7.0009: item fetching failed at offset 4/5 [ 9168.251491][T10323] hid-generic 0003:06CB:81A7.0009: probe with driver hid-generic failed with error -22 [ 9168.436045][ T5794] usb 1-1: USB disconnect, device number 58 [ 9174.455767][T22783] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 9174.654050][T22783] usb 1-1: Using ep0 maxpacket: 16 [ 9174.782209][T22783] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 9174.807425][T22783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 9174.809126][T22783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 9174.810332][T22783] usb 1-1: SerialNumber: syz [ 9174.897199][T22783] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 9174.898493][T22783] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 9174.899520][T22783] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 9175.094676][ T5793] usb 1-1: USB disconnect, device number 59 [ 9177.384674][ T5873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9177.531328][ T5873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9177.665115][ T5873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9177.760888][ T5873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9179.444203][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9179.500005][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9179.595133][ T5873] bond0 (unregistering): Released all slaves [ 9179.965633][ T5873] hsr_slave_0: left promiscuous mode [ 9180.011755][ T5873] hsr_slave_1: left promiscuous mode [ 9180.156779][ T5873] veth1_macvtap: left promiscuous mode [ 9180.159428][ T5873] veth0_macvtap: left promiscuous mode [ 9180.162419][ T5873] veth1_vlan: left promiscuous mode [ 9180.184599][ T5873] veth0_vlan: left promiscuous mode [ 9180.826688][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8670 seconds [ 9187.617127][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9187.641837][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9190.202595][ T7252] dvmrp0: entered allmulticast mode [ 9191.901138][ T7194] hsr_slave_0: entered promiscuous mode [ 9191.959492][ T7194] hsr_slave_1: entered promiscuous mode [ 9192.014586][ T7194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9192.015868][ T7194] Cannot create hsr debugfs directory [ 9193.539419][ T7262] loop1: detected capacity change from 0 to 32768 [ 9194.498869][ T7194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 9194.559269][ T7194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 9194.600608][ T7194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 9194.681692][ T7194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 9199.115685][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9201.595335][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9203.292796][ T7343] loop1: detected capacity change from 0 to 512 [ 9203.424166][ T7343] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 9203.491460][ T7343] EXT4-fs (loop1): 1 truncate cleaned up [ 9203.518922][ T7343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9203.538176][ T7343] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 4: comm syz-executor.1: lblock 0 mapped to illegal pblock 4 (length 1) [ 9203.558861][ T7343] EXT4-fs (loop1): Remounting filesystem read-only [ 9203.667505][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9209.827707][ T7398] loop1: detected capacity change from 0 to 512 [ 9210.884480][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9210.890807][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9210.919058][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8700 seconds [ 9211.466778][ T7194] veth0_vlan: entered promiscuous mode [ 9211.538797][ T7194] veth1_vlan: entered promiscuous mode [ 9211.790850][ T7194] veth0_macvtap: entered promiscuous mode [ 9211.845697][ T7194] veth1_macvtap: entered promiscuous mode [ 9212.146873][ T7194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9212.149880][ T7194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9212.155981][ T7194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9212.157660][ T7194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9213.140979][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9215.070795][ T7431] serio: Serial port pts0 [ 9220.969825][ T7451] serio: Serial port pts0 [ 9240.918098][ T7537] serio: Serial port pts0 [ 9240.998602][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8730 seconds [ 9241.318740][ T7539] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 9252.081350][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9252.115528][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9253.434557][ T2406] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 9253.614442][ T2406] usb 1-1: Using ep0 maxpacket: 8 [ 9253.635745][ T2406] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9253.636963][ T2406] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 9253.637616][ T2406] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 9253.638259][ T2406] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 9253.659165][ T2406] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 9253.660403][ T2406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 9253.660979][ T2406] usb 1-1: SerialNumber: syz [ 9253.698835][ T7620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9253.820949][ T2406] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 9253.830723][ T2406] usb-storage 1-1:1.0: USB Mass Storage device detected [ 9253.871733][ T2406] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 9253.879877][ T2406] scsi host0: usb-storage 1-1:1.0 [ 9255.474355][ T7623] usb 1-1: reset high-speed USB device number 60 using dummy_hcd [ 9256.416721][ T5794] usb 1-1: USB disconnect, device number 60 [ 9271.085610][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8760 seconds [ 9273.189224][ T7725] serio: Serial port pts0 [ 9282.775705][ T5793] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 9283.074113][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 9283.335201][ T5793] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 9283.393947][ T5793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 9283.395541][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9283.396561][ T5793] usb 1-1: Product: syz [ 9283.397200][ T5793] usb 1-1: Manufacturer: syz [ 9283.397981][ T5793] usb 1-1: SerialNumber: syz [ 9283.664392][ T5794] usb 1-1: USB disconnect, device number 61 [ 9285.727187][ T7775] loop1: detected capacity change from 0 to 512 [ 9285.770888][ T7775] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 9285.856477][ T7775] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #17: comm syz-executor.1: iget: bad i_size value: -6917529027641081756 [ 9285.862782][ T7775] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 17 (err -117) [ 9285.914877][ T7775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9286.040553][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9288.800427][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9294.688810][ T29] audit: type=1326 audit(2536874403.618:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9de5e068 code=0x0 [ 9299.884321][ T7874] input: syz0 as /devices/virtual/input/input68 [ 9301.168453][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8790 seconds [ 9310.657250][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9331.225934][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8820 seconds [ 9335.490948][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9335.515317][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9342.774547][ T8048] serio: Serial port pts0 [ 9344.957526][ T8054] loop1: detected capacity change from 0 to 512 [ 9345.121902][ T8054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9345.127137][ T8054] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/922/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 9345.245168][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9351.778734][ T8070] loop1: detected capacity change from 0 to 512 [ 9351.900971][ T8070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9351.905788][ T8070] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/927/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 9352.004867][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9353.855214][ T8086] loop0: detected capacity change from 0 to 2048 [ 9353.932984][ T8086] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 9353.943490][ T8086] EXT4-fs (loop0): get root inode failed [ 9353.944070][ T8086] EXT4-fs (loop0): mount failed [ 9356.408780][ T8091] serio: Serial port pts0 [ 9361.219156][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9361.225939][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9361.256215][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9361.262232][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9361.318109][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8850 seconds [ 9362.256645][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9365.127870][ T8123] serio: Serial port pts0 [ 9371.576863][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9371.579874][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9373.422336][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9377.339496][ T29] audit: type=1326 audit(2536874486.268:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8177 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9de5e068 code=0x0 [ 9385.564646][T22783] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 9385.825272][T22783] usb 1-1: Using ep0 maxpacket: 8 [ 9385.999880][T22783] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 9386.001553][T22783] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 9386.002754][T22783] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 9386.085438][T22783] usb 1-1: string descriptor 0 read error: -22 [ 9386.087377][T22783] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 9386.088732][T22783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9386.195252][T22783] usb 1-1: 0:2 : does not exist [ 9386.352318][T22783] usb 1-1: USB disconnect, device number 62 [ 9386.892712][ T7168] udevd[7168]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 9391.394139][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8880 seconds [ 9396.010221][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9396.014482][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9400.461568][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9400.484898][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9402.832065][ T8324] loop0: detected capacity change from 0 to 512 [ 9403.007640][ T8324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9403.009675][ T8324] ext4 filesystem being mounted at /syzkaller-testdir659816607/syzkaller.LUOp3a/169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 9403.090963][ T8324] EXT4-fs: test_dummy_encryption requires encrypt feature [ 9403.367688][ T7194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9404.162288][ T8337] loop1: detected capacity change from 0 to 2048 [ 9404.182580][ T8337] EXT4-fs: Ignoring removed nobh option [ 9404.188687][ T8337] EXT4-fs: Ignoring removed mblk_io_submit option [ 9404.286290][ T8337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9404.369705][ T8337] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 9404.386968][ T8337] EXT4-fs (loop1): Remounting filesystem read-only [ 9404.506987][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9421.476087][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8910 seconds [ 9422.074661][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9422.076617][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9425.281271][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9425.306230][ T8414] loop1: detected capacity change from 0 to 128 [ 9425.354525][ T8414] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 9425.445817][ T8414] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 9425.497466][ T8414] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 9425.499403][ T8414] EXT4-fs error (device loop1): __ext4_find_entry:1693: inode #2: comm syz-executor.1: checksumming directory block 0 [ 9425.636856][ T3880] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 9429.750045][ T8435] loop1: detected capacity change from 0 to 128 [ 9429.768294][ T8435] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 9429.800434][ T8435] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 9429.835442][ T8435] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 9429.836449][ T8435] EXT4-fs error (device loop1): __ext4_find_entry:1693: inode #2: comm syz-executor.1: checksumming directory block 0 [ 9429.987236][ T3880] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 9431.407905][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 9431.674661][ T8449] loop1: detected capacity change from 0 to 128 [ 9431.714146][ T8449] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 9431.776898][ T8449] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 9431.826008][ T8449] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 9431.827971][ T8449] EXT4-fs error (device loop1): __ext4_find_entry:1693: inode #2: comm syz-executor.1: checksumming directory block 0 [ 9431.967460][ T3880] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 9432.456069][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9432.464585][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9435.069975][ T8473] loop1: detected capacity change from 0 to 128 [ 9435.098238][ T8473] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 9435.140290][ T8473] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 9435.163958][ T8473] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 9435.174915][ T8473] EXT4-fs error (device loop1): __ext4_find_entry:1693: inode #2: comm syz-executor.1: checksumming directory block 0 [ 9435.288287][ T3880] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 9435.841477][ T8478] loop1: detected capacity change from 0 to 512 [ 9435.937714][ T8478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 9435.939453][ T8478] System zones: 1-12 [ 9435.987457][ T8478] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 9435.996678][ T8478] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 9436.005062][ T8478] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 9436.010594][ T8478] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 9436.016301][ T8478] EXT4-fs error (device loop1): ext4_clear_blocks:881: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 9436.022324][ T8478] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 9436.036189][ T8478] EXT4-fs (loop1): 1 truncate cleaned up [ 9436.046635][ T8478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9436.058912][ T8478] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 9436.157849][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9436.920823][ T8490] loop1: detected capacity change from 0 to 512 [ 9437.032353][ T8490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 9437.035517][ T8490] System zones: 1-12 [ 9437.062064][ T8490] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 9437.086333][ T8490] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 9437.099027][ T8490] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 9437.110665][ T8490] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 9437.127629][ T8490] EXT4-fs error (device loop1): ext4_clear_blocks:881: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 9437.149275][ T8490] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 9437.159511][ T8490] EXT4-fs (loop1): 1 truncate cleaned up [ 9437.182184][ T8490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9437.217772][ T8490] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 9437.390759][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9442.376572][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 9443.192133][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9443.209381][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9451.200100][ T8590] ptrace attach of "/syz-executor.1 exec"[3880] was attempted by "/syz-executor.1 exec"[8590] [ 9451.550305][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8940 seconds [ 9452.381853][ T8598] loop1: detected capacity change from 0 to 512 [ 9452.538040][ T8598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9452.539856][ T8598] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/1054/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 9452.635150][ T8598] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 9452.709588][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9453.621060][ T8607] loop1: detected capacity change from 0 to 512 [ 9453.680363][ T8607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 9453.750273][ T8607] EXT4-fs (loop1): 1 orphan inode deleted [ 9453.751217][ T8607] EXT4-fs (loop1): 1 truncate cleaned up [ 9453.775763][ T8607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9453.835925][ T8607] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 9453.851780][ T8607] EXT4-fs (loop1): Remounting filesystem read-only [ 9453.987608][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9457.186989][ T8631] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9466.835273][ T5793] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 9467.104854][ T5793] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 9467.306815][ T5793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 9467.307486][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9467.308048][ T5793] usb 1-1: Product: syz [ 9467.308521][ T5793] usb 1-1: Manufacturer: syz [ 9467.308900][ T5793] usb 1-1: SerialNumber: syz [ 9467.630620][ T5793] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 9467.658744][ T5793] usb 1-1: USB disconnect, device number 63 [ 9468.705537][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9468.708559][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9471.756917][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9471.759773][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9481.631273][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 8970 seconds [ 9487.268056][ T8758] serio: Serial port pts0 [ 9501.040107][ T8819] loop1: detected capacity change from 0 to 1024 [ 9501.075831][ T8819] EXT4-fs: Ignoring removed orlov option [ 9501.094805][ T8819] EXT4-fs (loop1): Test dummy encryption mode enabled [ 9501.105618][ T8819] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 9501.106379][ T8819] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 9501.122901][ T8819] EXT4-fs (loop1): invalid journal inode [ 9501.124375][ T8819] EXT4-fs (loop1): can't get journal size [ 9501.160791][ T8819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9501.427626][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9506.226526][ T8857] loop0: detected capacity change from 0 to 1024 [ 9506.252662][ T8857] EXT4-fs: Ignoring removed orlov option [ 9506.279535][ T8857] EXT4-fs (loop0): Test dummy encryption mode enabled [ 9506.288855][ T8857] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 9506.290292][ T8857] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 9506.316042][ T8857] EXT4-fs (loop0): invalid journal inode [ 9506.317238][ T8857] EXT4-fs (loop0): can't get journal size [ 9506.378054][ T8857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9506.589210][ T7194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9507.384899][ T8865] loop0: detected capacity change from 0 to 1024 [ 9507.417229][ T8865] EXT4-fs: Ignoring removed orlov option [ 9507.430948][ T8865] EXT4-fs (loop0): Test dummy encryption mode enabled [ 9507.434332][ T8865] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 9507.435817][ T8865] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 9507.445753][ T8865] EXT4-fs (loop0): invalid journal inode [ 9507.446764][ T8865] EXT4-fs (loop0): can't get journal size [ 9507.469675][ T8865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9507.601880][ T7194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9507.851404][ T8868] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9511.550783][ T8887] loop1: detected capacity change from 0 to 2048 [ 9511.731440][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9000 seconds [ 9511.904993][ T8887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9511.907744][ T8887] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/1102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 9512.015269][ T8887] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9512.307701][ T8892] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 9512.347563][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9512.934524][ T8896] loop0: detected capacity change from 0 to 2048 [ 9513.051174][ T8897] loop1: detected capacity change from 0 to 2048 [ 9513.081544][ T8896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9513.094513][ T8896] ext4 filesystem being mounted at /syzkaller-testdir659816607/syzkaller.LUOp3a/267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 9513.178927][ T8896] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9513.230408][ T8897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9513.245938][ T8897] ext4 filesystem being mounted at /syzkaller-testdir323391552/syzkaller.dhqii2/1103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 9513.514604][ T7194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9513.647468][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9515.801673][ T8918] loop1: detected capacity change from 0 to 1024 [ 9515.818291][ T8918] EXT4-fs: Ignoring removed orlov option [ 9515.831452][ T8918] EXT4-fs (loop1): Test dummy encryption mode enabled [ 9515.839421][ T8918] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 9515.857138][ T8918] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 9515.926518][ T8918] EXT4-fs (loop1): invalid journal inode [ 9515.928177][ T8918] EXT4-fs (loop1): can't get journal size [ 9516.019115][ T8918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9516.252874][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9524.942897][ T8971] loop1: detected capacity change from 0 to 1024 [ 9524.960288][ T8971] EXT4-fs: Ignoring removed orlov option [ 9524.976387][ T8971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 9524.979823][ T8971] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 9524.981015][ T8971] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 9525.018383][ T8971] EXT4-fs (loop1): invalid journal inode [ 9525.019599][ T8971] EXT4-fs (loop1): can't get journal size [ 9525.079786][ T8971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9525.226975][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9541.827139][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9030 seconds [ 9543.223943][ T9080] IPv4: Oversized IP packet from 172.20.20.24 [ 9543.229585][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 9543.232114][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 9544.017231][ T9084] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9544.900595][ T9069] kexec: Could not allocate control_code_buffer [ 9546.000816][ T9093] netlink: 65047 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9562.323905][ T29] audit: type=1326 audit(2536874671.248:8583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9de5e068 code=0x0 [ 9562.919728][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 9571.644581][ T9216] tap0: tun_chr_ioctl cmd 2147767519 [ 9571.867615][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9060 seconds [ 9576.667813][ T9236] input: syz1 as /devices/virtual/input/input70 [ 9581.415406][ T9253] loop0: detected capacity change from 0 to 512 [ 9581.501481][ T9253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 9581.578304][ T9253] EXT4-fs (loop0): orphan cleanup on readonly fs [ 9581.616738][ T9253] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 9581.631870][ T9253] Quota error (device loop0): write_blk: dquota write failed [ 9581.646414][ T9253] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 9581.647834][ T9253] EXT4-fs error (device loop0): ext4_acquire_dquot:6858: comm syz-executor.0: Failed to acquire dquot type 1 [ 9581.695939][ T9253] EXT4-fs (loop0): 1 truncate cleaned up [ 9583.422066][ T9253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9583.475191][ T9253] EXT4-fs error (device loop0): __ext4_remount:6503: comm syz-executor.0: Abort forced by user [ 9583.484559][ T9253] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 9583.524297][ T9253] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 9583.725583][ T7194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9584.145453][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9584.148893][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9592.325684][ T9313] loop1: detected capacity change from 0 to 1024 [ 9592.479140][ T9313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9594.400728][ T3880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9594.497643][ T9327] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 9594.500133][ T9327] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 9594.518798][ T9327] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 9594.531887][ T9327] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 9594.550859][ T9327] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 9594.560202][ T9327] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 9594.571696][ T9327] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 9599.561451][ T9362] loop1: detected capacity change from 0 to 512 [ 9599.577196][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9599.584729][ T9362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 9599.598698][ T9362] EXT4-fs (loop1): Test dummy encryption mode enabled [ 9599.599830][ T9362] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 9599.620637][ T9363] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9600.690478][ T9372] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 9601.952503][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9090 seconds [ 9602.258313][ T9384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9602.262258][ T9384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9603.354187][T13421] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 9603.534540][T13421] usb 1-1: Using ep0 maxpacket: 8 [ 9603.570787][T13421] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 9603.572250][T13421] usb 1-1: config 179 has no interface number 0 [ 9603.575036][T13421] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 9603.576529][T13421] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 9603.578179][T13421] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 9603.579721][T13421] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 9603.580737][T13421] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 9603.582629][T13421] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 9603.585619][T13421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9603.627184][ T9382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9603.930195][T13421] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input71 [ 9604.476874][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9604.504812][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9605.362899][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 9605.365582][T13421] usb 1-1: USB disconnect, device number 64 [ 9605.372774][T13421] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 9621.538174][ T29] audit: type=1107 audit(2536874730.468:8584): pid=9471 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='®' [ 9622.309096][ T9479] netlink: 44378 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9622.470322][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.471742][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.476161][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.477674][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.478851][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.479932][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.481178][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.482507][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.488457][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.489800][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.490944][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.492108][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.505670][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.507161][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.509902][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.511098][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.512373][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.520865][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.522272][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.531801][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.534337][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.535967][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.537236][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.538628][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.540226][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.559647][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.560999][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.562305][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.570620][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.571996][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.580315][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.581891][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.596621][ T2406] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 9622.644510][ T2406] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 9624.567947][ T9503] macvlan0: entered allmulticast mode [ 9628.351954][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9628.369786][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9631.605341][ T9554] IPv6: NLM_F_CREATE should be specified when creating new route [ 9631.610543][ T9554] IPv6: Can't replace route, no match found [ 9632.036840][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9120 seconds [ 9639.554410][ T2406] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 9639.799501][ T2406] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 9639.801545][ T2406] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 9639.807533][ T2406] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 9639.808939][ T2406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9639.869430][ T9612] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9651.441709][ T3832] usb 1-1: USB disconnect, device number 65 [ 9662.115985][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9150 seconds [ 9682.687446][ T8650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9682.807780][ T8650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9682.928082][ T8650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9683.071043][ T8650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9684.552328][ T8650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9684.639540][ T8650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9684.707517][ T8650] bond0 (unregistering): Released all slaves [ 9684.942936][ T8650] hsr_slave_0: left promiscuous mode [ 9684.977897][ T8650] hsr_slave_1: left promiscuous mode [ 9685.092880][ T8650] veth1_macvtap: left promiscuous mode [ 9685.095445][ T8650] veth0_macvtap: left promiscuous mode [ 9685.096935][ T8650] veth1_vlan: left promiscuous mode [ 9685.098071][ T8650] veth0_vlan: left promiscuous mode [ 9690.451432][ T9723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9690.489468][ T9723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9692.190533][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9180 seconds [ 9693.048428][ T9723] hsr_slave_0: entered promiscuous mode [ 9693.097646][ T9723] hsr_slave_1: entered promiscuous mode [ 9693.144768][ T9723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9693.146282][ T9723] Cannot create hsr debugfs directory [ 9695.179747][ T9723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 9695.228062][ T9723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 9695.274784][ T9723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 9695.307123][ T9723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 9697.296699][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9704.389093][ T9723] veth0_vlan: entered promiscuous mode [ 9704.438580][ T9723] veth1_vlan: entered promiscuous mode [ 9704.568734][ T9723] veth0_macvtap: entered promiscuous mode [ 9704.611271][ T9723] veth1_macvtap: entered promiscuous mode [ 9704.809564][ T9723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9704.811150][ T9723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9704.812358][ T9723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9704.825500][ T9723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9711.999877][ T9889] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9712.001960][ T9889] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9712.005641][ T9889] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 9712.006802][ T9889] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 9712.007759][ T9889] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9719.297119][ T9916] binder: 9915:9916 ioctl 400c620e 20000380 returned -22 [ 9722.271173][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9210 seconds [ 9725.715452][ T5794] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 9725.915731][ T5794] usb 1-1: Using ep0 maxpacket: 16 [ 9725.966615][ T5794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 9726.001191][ T5794] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 9726.002856][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9726.005404][ T5794] usb 1-1: Product: syz [ 9726.006280][ T5794] usb 1-1: Manufacturer: syz [ 9726.007342][ T5794] usb 1-1: SerialNumber: syz [ 9726.038358][ T5794] usb 1-1: config 0 descriptor?? [ 9726.099471][ T5794] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 9726.119894][ T5794] usb 1-1: Detected FT232R [ 9726.279334][ T5794] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 9726.539374][ T5794] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 9726.719946][ T6436] usb 1-1: USB disconnect, device number 66 [ 9726.814747][ T6436] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 9726.821562][ T6436] ftdi_sio 1-1:0.0: device disconnected [ 9729.094810][ T8649] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 9729.358342][ T8649] usb 1-1: Using ep0 maxpacket: 8 [ 9729.479615][ T8649] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 9729.481092][ T8649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9729.510601][ T8649] usb 1-1: config 0 descriptor?? [ 9730.805192][ T8649] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 9730.806811][ T8649] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 9730.808996][ T8649] asix 1-1:0.0: probe with driver asix failed with error -71 [ 9730.869084][ T8649] usb 1-1: USB disconnect, device number 67 [ 9734.967223][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9735.867471][ T9969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9735.913770][ T9969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9739.124140][T16398] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 9739.389166][ T9969] hsr_slave_0: entered promiscuous mode [ 9739.420242][T16398] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 9739.421993][T16398] usb 1-1: config 0 has no interface number 0 [ 9739.423895][T16398] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 9739.425198][T16398] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 9739.426642][T16398] usb 1-1: config 0 interface 48 has no altsetting 0 [ 9739.427696][T16398] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 9739.428811][T16398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9739.448499][T16398] usb 1-1: config 0 descriptor?? [ 9739.448792][ T9969] hsr_slave_1: entered promiscuous mode [ 9739.515319][ T9969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9739.517164][ T9969] Cannot create hsr debugfs directory [ 9739.727680][T16398] usb 1-1: string descriptor 0 read error: -32 [ 9739.764335][T16398] usb 1-1: Cannot read MAC address [ 9739.767593][T16398] MOSCHIP usb-ethernet driver 1-1:0.48: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 9739.806335][T16398] usb 1-1: USB disconnect, device number 68 [ 9740.528540][ T9969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9740.658340][ T9969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9740.822853][ T9969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9740.962228][ T9969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9741.508643][ T9969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 9741.607999][ T9969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 9741.657419][ T9969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 9741.691574][ T9969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 9744.146456][ T9969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9745.219047][T10047] loop0: detected capacity change from 0 to 1024 [ 9745.286008][T10047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 9745.459730][T10047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9747.534373][ T9723] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9752.355121][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9240 seconds [ 9752.461931][ T9969] veth0_vlan: entered promiscuous mode [ 9752.572384][ T9969] veth1_vlan: entered promiscuous mode [ 9752.899213][T10091] loop0: detected capacity change from 0 to 512 [ 9752.946268][ T9969] veth0_macvtap: entered promiscuous mode [ 9752.996357][ T9969] veth1_macvtap: entered promiscuous mode [ 9753.030217][T10091] EXT4-fs (loop0): orphan cleanup on readonly fs [ 9753.111505][T10091] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 9753.229851][T10091] Quota error (device loop0): write_blk: dquota write failed [ 9753.250703][T10091] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 9753.292380][T10091] EXT4-fs error (device loop0): ext4_acquire_dquot:6858: comm syz-executor.0: Failed to acquire dquot type 1 [ 9753.417844][T10091] EXT4-fs (loop0): 1 truncate cleaned up [ 9753.498306][T10091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 9753.858977][ T9723] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9753.912712][ T9969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9753.921085][ T9969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9753.922483][ T9969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9753.948401][ T9969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9754.605428][ T9206] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 9754.940282][ T9206] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 9754.941641][ T9206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9754.995055][ T9206] usb 1-1: config 0 descriptor?? [ 9756.735460][ T9206] usb 1-1: Cannot set autoneg [ 9756.737038][ T9206] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 9756.766760][ T9206] usb 1-1: USB disconnect, device number 69 [ 9759.464473][T10110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9759.469761][T10110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9761.051963][T10114] loop0: detected capacity change from 0 to 512 [ 9761.159419][T10114] EXT4-fs (loop0): Test dummy encryption mode enabled [ 9761.248154][T10114] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 9761.265468][T10114] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 9761.297033][T10114] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9761.361790][T10114] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 9762.639313][ T9723] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 9774.238242][ T29] audit: type=1400 audit(2536874883.148:8585): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10174 comm="syz-executor.0" saddr=172.30.0.1 daddr=172.20.20.170 netif=gretap0 [ 9775.849541][T30796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9776.075411][T30796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9776.252534][T30796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9776.378853][T30796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9778.140596][T30796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9778.216655][T30796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9778.282095][T30796] bond0 (unregistering): Released all slaves [ 9778.406057][T30796] bond1 (unregistering): Released all slaves [ 9778.840253][T30796] hsr_slave_0: left promiscuous mode [ 9778.906458][T30796] hsr_slave_1: left promiscuous mode [ 9779.076633][T30796] veth1_macvtap: left promiscuous mode [ 9779.077961][T30796] veth0_macvtap: left promiscuous mode [ 9779.079199][T30796] veth1_vlan: left promiscuous mode [ 9779.080531][T30796] veth0_vlan: left promiscuous mode [ 9779.998125][T10205] loop1: detected capacity change from 0 to 1024 [ 9780.029230][T10205] EXT4-fs: Ignoring removed orlov option [ 9780.052569][T10205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 9780.056552][T10205] EXT4-fs (loop1): Test dummy encryption mode enabled [ 9780.062535][T10205] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 9780.066317][T10205] EXT4-fs (loop1): group descriptors corrupted! [ 9780.601232][T10207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9780.610980][T10207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9782.441883][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9270 seconds [ 9785.413017][T10237] loop1: detected capacity change from 0 to 1024 [ 9785.601907][T10237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 9785.604925][T10237] System zones: 0-1, 3-12 [ 9785.676169][T10237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 9785.915692][T10237] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 9786.038575][T10237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 9786.081989][T10237] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 9786.206118][T10237] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 9786.382289][ T9969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9789.361402][T10186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9789.437574][T10186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9792.393813][ T29] audit: type=1326 audit(2536874901.318:8586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.396428][ T29] audit: type=1326 audit(2536874901.318:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.398568][ T29] audit: type=1326 audit(2536874901.328:8588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.420407][ T29] audit: type=1326 audit(2536874901.348:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.422484][ T29] audit: type=1326 audit(2536874901.348:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.451217][ T29] audit: type=1326 audit(2536874901.348:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.476393][ T29] audit: type=1326 audit(2536874901.348:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.478588][ T29] audit: type=1326 audit(2536874901.348:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.480600][ T29] audit: type=1326 audit(2536874901.348:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9792.524292][ T29] audit: type=1326 audit(2536874901.348:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10297 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x7ffc0000 [ 9793.879254][T10186] hsr_slave_0: entered promiscuous mode [ 9793.936774][T10186] hsr_slave_1: entered promiscuous mode [ 9793.974508][T10186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9793.975913][T10186] Cannot create hsr debugfs directory [ 9796.072297][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9796.092830][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9797.010543][T10186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 9797.060285][T10186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 9797.120352][T10186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 9797.169497][T10186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 9800.650515][T10186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9804.721461][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9804.742581][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9804.802715][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9804.831925][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9812.640492][T10186] veth0_vlan: entered promiscuous mode [ 9812.731010][T10186] veth1_vlan: entered promiscuous mode [ 9813.110765][T10186] veth0_macvtap: entered promiscuous mode [ 9813.176852][T10186] veth1_macvtap: entered promiscuous mode [ 9813.596992][T10186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9813.598453][T10186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9813.599717][T10186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9813.600831][T10186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9820.946046][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9300 seconds [ 9821.937833][T10443] loop1: detected capacity change from 0 to 512 [ 9822.062836][T10445] binder: 10444:10445 tried to acquire reference to desc 0, got 1 instead [ 9822.071910][T10443] EXT4-fs warning (device loop1): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 9822.072715][T10443] EXT4-fs warning (device loop1): dx_probe:879: Enable large directory feature to access it [ 9822.098713][T10443] EXT4-fs warning (device loop1): dx_probe:964: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 9822.101722][T10445] binder: release 10444:10445 transaction 17 out, still active [ 9822.102437][T10445] binder: undelivered TRANSACTION_COMPLETE [ 9822.157813][ T5791] binder: send failed reply for transaction 17, target dead [ 9823.158923][T10443] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 9823.160938][T10443] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 9823.207467][T10443] EXT4-fs (loop1): Remounting filesystem read-only [ 9823.240663][T10443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9823.258763][T10443] EXT4-fs warning (device loop1): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 9823.259567][T10443] EXT4-fs warning (device loop1): dx_probe:879: Enable large directory feature to access it [ 9823.260330][T10443] EXT4-fs warning (device loop1): dx_probe:964: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 9825.041400][ T9969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9835.922213][T10483] loop1: detected capacity change from 0 to 512 [ 9840.947685][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9851.667046][ T52] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9330 seconds [ 9851.682385][T10483] EXT4-fs warning (device loop1): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop1. [ 9860.409822][T10545] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9862.619700][T10562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9862.678496][T10562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9870.721266][ T29] audit: type=1326 audit(2536874979.648:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee5e068 code=0x0 [ 9871.674024][T10595] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9876.160882][T10627] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 9876.162049][T10627] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9876.171703][T10627] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 9876.894781][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9876.902347][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9876.996910][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 9880.261574][T10650] tap0: tun_chr_ioctl cmd 2147767517 [ 9880.489794][ T29] audit: type=1326 audit(2536874989.408:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10651 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa045e068 code=0x0 [ 9881.638936][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9882.281392][T10487] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9360 seconds [ 9883.672441][T10677] tap0: tun_chr_ioctl cmd 2147767507 [ 9884.623802][T10691] tap0: tun_chr_ioctl cmd 1074025698 [ 9900.832633][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9900.837653][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9903.157595][T10762] tap0: tun_chr_ioctl cmd 2147767511 [ 9905.664682][T10098] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 9905.864470][T10098] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 9905.870736][T10098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9905.876643][T10098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9905.878408][T10098] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 9905.904472][T10098] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 9905.906047][T10098] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 9905.907036][T10098] usb 1-1: Manufacturer: syz [ 9905.930818][T10098] usb 1-1: config 0 descriptor?? [ 9906.407413][T10098] hid-generic 0003:05AC:8243.000B: unknown main item tag 0x0 [ 9906.442042][T10098] hid-generic 0003:05AC:8243.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 9907.446928][ T9621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9907.588211][ T9621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9907.696529][ T9621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9907.812481][ T9621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9909.040985][ T9621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9909.117866][ T9621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9909.179071][ T9621] bond0 (unregistering): Released all slaves [ 9909.464883][ T9621] hsr_slave_0: left promiscuous mode [ 9909.516752][ T9621] hsr_slave_1: left promiscuous mode [ 9909.630779][ T9621] veth1_macvtap: left promiscuous mode [ 9909.632002][ T9621] veth0_macvtap: left promiscuous mode [ 9909.639236][ T9621] veth1_vlan: left promiscuous mode [ 9909.640533][ T9621] veth0_vlan: left promiscuous mode [ 9912.353558][T10487] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9390 seconds [ 9915.770119][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9915.818819][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9917.988462][T10792] hsr_slave_0: entered promiscuous mode [ 9918.037122][T10792] hsr_slave_1: entered promiscuous mode [ 9918.085132][T10792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9918.086275][T10792] Cannot create hsr debugfs directory [ 9918.596120][T10098] usb 1-1: USB disconnect, device number 70 [ 9921.203464][T10792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 9921.261523][T10792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 9921.281645][T10792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 9921.330595][T10792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 9927.374188][T10792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9930.476765][T10098] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 9930.748745][T10098] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 9930.750322][T10098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 9930.751693][T10098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 9930.755210][T10098] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 9930.788555][T10098] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 9930.789829][T10098] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 9930.791066][T10098] usb 1-1: Manufacturer: syz [ 9930.831814][T10098] usb 1-1: config 0 descriptor?? [ 9931.471751][T10098] hid-generic 0003:05AC:8243.000C: unknown main item tag 0x0 [ 9931.505630][T10098] hid-generic 0003:05AC:8243.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 9937.490831][T10792] veth0_vlan: entered promiscuous mode [ 9937.569371][T10792] veth1_vlan: entered promiscuous mode [ 9937.848548][T10792] veth0_macvtap: entered promiscuous mode [ 9937.914962][T10792] veth1_macvtap: entered promiscuous mode [ 9938.248465][T10792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9938.250011][T10792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9938.251167][T10792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9938.252303][T10792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9942.436024][T10487] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9420 seconds [ 9943.654575][ T9620] usb 1-1: USB disconnect, device number 71 [ 9952.375848][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 9955.955597][ T5791] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 9956.299168][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 9956.300510][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 9956.301692][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 9956.307034][ T5791] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 9956.308478][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9956.348530][ T5791] usb 1-1: config 0 descriptor?? [ 9957.257573][ T5791] hid-generic 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 9957.258416][ T5791] hid-generic 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 9957.275861][ T5791] hid-generic 0003:047F:FFFF.000D: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 9957.508436][ T5791] usb 1-1: USB disconnect, device number 72 [ 9959.838623][T11038] loop0: detected capacity change from 0 to 512 [ 9959.860584][T11038] EXT4-fs: Ignoring removed nobh option [ 9959.898809][T11038] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 9959.914710][T11038] EXT4-fs error (device loop0): ext4_clear_blocks:881: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1 [ 9959.976826][T11038] EXT4-fs (loop0): Remounting filesystem read-only [ 9959.982443][T11038] EXT4-fs (loop0): 1 truncate cleaned up [ 9959.992315][T11038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 9960.121749][T10186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 9966.664008][T11003] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 9966.700011][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9966.717822][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9966.869701][T11003] usb 1-1: Using ep0 maxpacket: 8 [ 9966.906355][T11003] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 9966.907195][T11003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9966.922097][T11003] usb 1-1: config 0 descriptor?? [ 9966.997521][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9967.001628][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9968.829402][T11058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9968.842524][T11058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9969.167180][T11003] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 9969.168213][T11003] asix 1-1:0.0: probe with driver asix failed with error -71 [ 9969.212442][T11003] usb 1-1: USB disconnect, device number 73 [ 9974.464084][ T29] audit: type=1326 audit(2536875083.278:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa045e068 code=0x7ffc0000 [ 9974.465697][ T29] audit: type=1326 audit(2536875083.278:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=108 compat=0 ip=0xffffa045e068 code=0x7ffc0000 [ 9974.466847][ T29] audit: type=1326 audit(2536875083.288:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa045e068 code=0x7ffc0000 [ 9974.467885][ T29] audit: type=1326 audit(2536875083.288:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa045e068 code=0x7ffc0000 [ 9974.468923][ T29] audit: type=1326 audit(2536875083.288:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=112 compat=0 ip=0xffffa045e068 code=0x7ffc0000 [ 9974.470117][ T29] audit: type=1326 audit(2536875083.288:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa045e068 code=0x7ffc0000 [ 9974.471178][ T29] audit: type=1326 audit(2536875083.288:8604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa045e068 code=0x7ffc0000 [ 9978.980193][T10487] block nbd0: Possible stuck request 0000000031003170: control (read@0,4096B). Runtime 9450 seconds [ 9985.314072][T11130] loop1: detected capacity change from 0 to 32768 [ 9990.900550][T11147] binder: 11146:11147 got transaction to context manager from process owning it [ 9990.902167][T11147] binder: 11146:11147 transaction call to 11146:0 failed 20/29201/-22, size 0-0 line 3055 [ 9990.976468][T16398] binder: undelivered TRANSACTION_ERROR: 29201 [ 9990.977921][T16398] binder: undelivered death notification, 0000000000000000 [10000.871108][ T2406] usb 1-1: new high-speed USB device number 74 using dummy_hcd [10001.034148][ T29] audit: type=1326 audit(2536875109.958:8605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11196 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb585e068 code=0x0 [10001.156223][ T2406] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10001.195861][ T2406] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [10001.197191][ T2406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10001.198282][ T2406] usb 1-1: Product: syz [10001.198965][ T2406] usb 1-1: Manufacturer: syz [10001.199694][ T2406] usb 1-1: SerialNumber: syz [10001.912559][ T2406] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [10001.916038][ T2406] cdc_ncm 1-1:1.0: bind() failure [10001.962305][ T2406] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [10001.967886][ T2406] cdc_ncm 1-1:1.1: bind() failure [10002.033856][ T2406] usb 1-1: USB disconnect, device number 74 [10002.110581][T13030] udevd[13030]: setting mode of /dev/bus/usb/001/074 to 020664 failed: No such file or directory [10002.112883][T13030] udevd[13030]: setting owner of /dev/bus/usb/001/074 to uid=0, gid=0 failed: No such file or directory [10003.834722][ T29] audit: type=1326 audit(2536875112.758:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11199 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb585e068 code=0x0 [10006.689404][T11221] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [10006.690903][T11221] Mem abort info: [10006.714277][T11221] ESR = 0x0000000096000006 [10006.715544][T11221] EC = 0x25: DABT (current EL), IL = 32 bits [10006.716659][T11221] SET = 0, FnV = 0 [10006.717495][T11221] EA = 0, S1PTW = 0 [10006.719595][T11221] FSC = 0x06: level 2 translation fault [10006.720424][T11221] Data abort info: [10006.720976][T11221] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [10006.721825][T11221] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [10006.722808][T11221] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [10006.726034][T11221] user pgtable: 4k pages, 52-bit VAs, pgdp=0000000050c68280 [10006.727472][T11221] [0000000000000000] pgd=0800000070019003, p4d=0800000068dfc003, pud=080000006ebe8003, pmd=0000000000000000 [10006.755710][T11221] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [10006.757175][T11221] Modules linked in: [10006.758343][T11221] CPU: 0 PID: 11221 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00109-g0cac73eb3875 #0 [10006.759724][T11221] Hardware name: linux,dummy-virt (DT) [10006.760739][T11221] pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [10006.761886][T11221] pc : copy_page_to_iter+0xb0/0x150 [10006.763654][T11221] lr : sk_msg_recvmsg+0xf8/0x37c [10006.764406][T11221] sp : ffff800083c039f0 [10006.765152][T11221] x29: ffff800083c039f0 x28: 0000000000000001 x27: faf000000ce58000 [10006.766585][T11221] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 [10006.768002][T11221] x23: 0000000000000000 x22: 00003e0040000000 x21: fff0000000000000 [10006.769342][T11221] x20: 0000000000001000 x19: ffff800083c03da0 x18: 0000000000000000 [10006.770930][T11221] x17: 0000000000000000 x16: 0000000000000000 x15: fff000002eb0e600 2050/05/22 23:31:55 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [10006.772301][T11221] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [10006.774221][T11221] x11: ffff800083c03cc8 x10: 0000000000000000 x9 : 0000000000000000 [10006.776356][T11221] x8 : ffff800083c03c68 x7 : 0000000000000001 x6 : 00000000200002c1 [10006.778262][T11221] x5 : 00000000200002c1 x4 : 0000000000000000 x3 : ffff800083c03da0 [10006.779442][T11221] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff801000000000 [10006.780845][T11221] Call trace: [10006.781518][T11221] copy_page_to_iter+0xb0/0x150 [10006.782417][T11221] sk_msg_recvmsg+0xf8/0x37c [10006.783316][T11221] unix_bpf_recvmsg+0x13c/0x4f0 [10006.784184][T11221] unix_dgram_recvmsg+0x30/0x4c [10006.785009][T11221] ____sys_recvmsg+0x1d0/0x268 [10006.785892][T11221] ___sys_recvmsg+0x90/0xe8 [10006.786708][T11221] __sys_recvmsg+0x80/0xdc [10006.787579][T11221] __arm64_sys_recvmsg+0x24/0x30 [10006.788425][T11221] invoke_syscall+0x48/0x118 [10006.789185][T11221] el0_svc_common.constprop.0+0x40/0xe0 [10006.790369][T11221] do_el0_svc+0x1c/0x28 [10006.791090][T11221] el0_svc+0x34/0xf8 [10006.791801][T11221] el0t_64_sync_handler+0x100/0x12c [10006.792845][T11221] el0t_64_sync+0x19c/0x1a0 [10006.794514][T11221] Code: 8b160320 d346fc00 8b0032a0 d503201f (f9400323) [10006.796723][T11221] ---[ end trace 0000000000000000 ]--- [10006.797918][T11221] Kernel panic - not syncing: Oops: Fatal exception [10006.799372][T11221] SMP: stopping secondary CPUs [10006.800703][T11221] Kernel Offset: disabled [10006.801412][T11221] CPU features: 0x00,00000006,8f17bd7c,1767f6bf [10006.802606][T11221] Memory Limit: none [10006.803851][T11221] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:09:19 Registers: info registers vcpu 0 CPU#0 PC=ffff8000800fa160 X00=0000000000000000 X01=000007c73e33e000 X02=000007c73e314800 X03=00000000000000f8 X04=0000000000000001 X05=0000000000000000 X06=00000000000000a6 X07=f6f0000005ee6600 X08=fff000007f8d63c0 X09=0000000000000001 X10=0000000000000001 X11=0000000000000000 X12=0000000000000000 X13=00000000000000f8 X14=00000000000000f8 X15=ffff800083c03160 X16=7472697620746120 X17=72646461206c6175 X18=ffffffffffffffff X19=fcf00000225be600 X20=fff000007f8d63c0 X21=fcf00000225be600 X22=fff000007f8d6340 X23=0000000000000001 X24=f6f0000005cec900 X25=fff000007f8d63c0 X26=0000000000000001 X27=faf000000ce58000 X28=f9f0000026d96d80 X29=ffff800083c03470 X30=238f8000800ec444 SP=ffff800083c03490 PSTATE=804000c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe33c1680:0000ffffb5826c78 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe33c1870:0000ffffe33c18a0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe33c1670:ffffff80ffffffd8 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb5980000:000000000098ae6b Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe33c18a0:431bde82d7b634db Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe33c18a0:0000ffffe33c18a0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffe33c1870 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080690360 X00=ffff800082971000 X01=ffff800080690324 X02=000000919f38d0fc X03=ffff80008000bea0 X04=0000000000800000 X05=0000000000000400 X06=0000000000000002 X07=f2f000002b753a10 X08=0000000000000000 X09=fff000007f8ee3c0 X10=f2f00000067e7c00 X11=000004a66423ff9c X12=fffffffffe5cdc00 X13=0000000000000600 X14=f2f000002b753a00 X15=0000000000000002 X16=ffff800080008000 X17=fff07ffffd331000 X18=0000000000000000 X19=f2f0000002c41030 X20=000000000000001a X21=f8f0000002c0e600 X22=000000000000000d X23=ffff8000825ba4b0 X24=0000000000000001 X25=f0f0000003918300 X26=ffff800088bcba2c X27=f0f0000003918300 X28=f2f0000005d5b6c0 X29=ffff80008000bf50 X30=a38f800080125d20 SP=ffff80008000bf50 PSTATE=204000c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa0580000:000000000098ac36 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff7f563e0:431bde82d7b634db Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff7f563e0:0000fffff7f563e0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffff7f563b0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000