last executing test programs: 4.189029075s ago: executing program 0 (id=1939): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xbc5) 3.71091837s ago: executing program 0 (id=1944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000001280)=""/4105, &(0x7f00000000c0)=0x1009) 3.364155874s ago: executing program 0 (id=1949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 3.039841412s ago: executing program 0 (id=1955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 2.481675999s ago: executing program 0 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x37ea}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 2.338533505s ago: executing program 5 (id=1966): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd", 0x44, r0) 2.035671843s ago: executing program 2 (id=1968): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) 2.034887764s ago: executing program 5 (id=1969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a84001280110001006272696467655f736c617665000000006c00058005001900030000000500090001000000050005000000080025003f00000006001f00d5000000080022000000", @ANYRES32=0x0, @ANYBLOB="050007000000000005000800000000000500060001000000060002000100000005001e0000000000050009000100000008002200", @ANYRES32=0x0, @ANYBLOB="140003006272696467655f736c6176655f30"], 0xb8}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.967730182s ago: executing program 1 (id=1970): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0a00000009800089", 0x69) 1.904359214s ago: executing program 3 (id=1971): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0xffff, 0xfffb, 0x2, 0x3, 0x3}) 1.849669921s ago: executing program 4 (id=1972): r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40000001) 1.630131564s ago: executing program 0 (id=1973): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109023b000101000000090400000302060000052406000005240000000d240f00fff200000000000000090582024000000000090503020002"], 0x0) syz_usb_ep_write(r0, 0x3, 0x0, 0x0) 1.571969792s ago: executing program 2 (id=1974): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r0, 0x541b, 0x7ffffffffffffffe) 1.566331907s ago: executing program 1 (id=1975): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 1.425371822s ago: executing program 3 (id=1976): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x2000) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000340)={0x3, 0x1, 0x7, 0x1, 0x0, 0x1, "2e07e53c10cfc65bb9a9958850d268a6", 0x10, 0x1, 0x0, 0xfc, 0x8, 0x6, 0xad}) 1.412120121s ago: executing program 4 (id=1977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff0f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x201}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x94) 1.342618397s ago: executing program 5 (id=1978): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000380)=""/195, 0xc3, 0x100000000000060) 1.242310649s ago: executing program 1 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f00000001c0), &(0x7f00000003c0)=@v2={0x3, 0x0, 0x5, 0x2}, 0x9, 0x0) 1.15525521s ago: executing program 2 (id=1980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000680)="33a462c6a45e0001000000000000a7", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.153916553s ago: executing program 3 (id=1981): modify_ldt$write2(0x11, &(0x7f0000000080)={0x2e, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0x20001000, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 1.053654504s ago: executing program 4 (id=1982): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @netrom={'nr', 0x0}, 0x0, [@default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) 1.052892995s ago: executing program 5 (id=1983): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'batadv0\x00', 0x1}) 861.453769ms ago: executing program 1 (id=1984): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) 845.679232ms ago: executing program 3 (id=1985): unshare(0x2a020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 734.50157ms ago: executing program 4 (id=1986): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e00440002800600020001000000080001"], 0x84}}, 0x20008040) 731.547018ms ago: executing program 5 (id=1987): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 690.088042ms ago: executing program 2 (id=1988): setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) 501.018787ms ago: executing program 1 (id=1989): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 493.761567ms ago: executing program 3 (id=1990): r0 = getpid() kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 385.827037ms ago: executing program 4 (id=1991): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 367.511745ms ago: executing program 5 (id=1992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9fb030060be250d040000006490", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 304.394276ms ago: executing program 2 (id=1993): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 260.978769ms ago: executing program 3 (id=1994): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) 111.118081ms ago: executing program 4 (id=1995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffe7d, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) 41.472255ms ago: executing program 1 (id=1996): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000300)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@usrquota}, {@errors_continue}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x84) 0s ago: executing program 2 (id=1997): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): dc424e-7990-42cb-9f91-9cb7200a101d [ 166.949905][ T7121] FAT-fs (loop3): Directory bread(block 68) failed [ 166.967796][ T7137] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 167.013990][ T7121] FAT-fs (loop3): Directory bread(block 69) failed [ 167.022519][ T7121] FAT-fs (loop3): Directory bread(block 70) failed [ 167.029479][ T7121] FAT-fs (loop3): Directory bread(block 71) failed [ 167.036970][ T7121] FAT-fs (loop3): Directory bread(block 72) failed [ 167.048835][ T7121] FAT-fs (loop3): Directory bread(block 73) failed [ 167.166141][ T7079] XFS (loop0): Ending clean mount [ 167.219331][ T7079] XFS (loop0): Quotacheck needed: Please wait. [ 167.319116][ T7079] XFS (loop0): Quotacheck: Done. [ 167.667532][ T5824] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.280886][ T7164] fuse: blksize only supported for fuseblk [ 168.354985][ T7170] netlink: 'syz.5.496': attribute type 21 has an invalid length. [ 168.394722][ T7168] openvswitch: netlink: Message has 4 unknown bytes. [ 168.401921][ T7167] loop1: detected capacity change from 0 to 512 [ 168.408316][ T7170] netlink: 128 bytes leftover after parsing attributes in process `syz.5.496'. [ 168.432424][ T7170] netlink: 3 bytes leftover after parsing attributes in process `syz.5.496'. [ 168.563182][ T7167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.643177][ T7167] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.013208][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.330275][ T7199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.478792][ T7204] netlink: 'syz.3.510': attribute type 5 has an invalid length. [ 169.629647][ T974] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.802119][ T974] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 169.828031][ T974] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 169.876894][ T974] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 169.909214][ T974] usb 1-1: config 220 has no interface number 2 [ 169.951328][ T974] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 169.986238][ T974] usb 1-1: config 220 interface 0 has no altsetting 0 [ 170.019924][ T974] usb 1-1: config 220 interface 76 has no altsetting 0 [ 170.039744][ T974] usb 1-1: config 220 interface 1 has no altsetting 0 [ 170.071967][ T974] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.095302][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.133531][ T974] usb 1-1: Product: syz [ 170.144265][ T974] usb 1-1: Manufacturer: syz [ 170.160228][ T974] usb 1-1: SerialNumber: syz [ 170.326506][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 170.400233][ T5927] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 170.426989][ T974] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 170.457109][ T974] uvcvideo 1-1:220.0: No valid video chain found. [ 170.480245][ T974] usb 1-1: selecting invalid altsetting 0 [ 170.561443][ T974] usb 1-1: selecting invalid altsetting 0 [ 170.588934][ T974] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 170.591082][ T5927] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 170.630351][ T974] usb 1-1: USB disconnect, device number 4 [ 170.650326][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.658420][ T5927] usb 4-1: Product: syz [ 170.683174][ T5927] usb 4-1: Manufacturer: syz [ 170.687831][ T5927] usb 4-1: SerialNumber: syz [ 170.718687][ T5927] usb 4-1: config 0 descriptor?? [ 170.753774][ T5927] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now attached [ 170.800958][ T7238] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 170.889917][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.530'. [ 171.036760][ T974] usb 4-1: USB disconnect, device number 4 [ 171.046340][ T974] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now disconnected [ 171.470238][ T5927] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.474208][ T7258] netlink: 5 bytes leftover after parsing attributes in process `syz.2.536'. [ 171.511766][ T7258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.649727][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 171.674069][ T5927] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 171.705292][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.758856][ T5927] usb 6-1: Product: syz [ 171.763533][ T5927] usb 6-1: Manufacturer: syz [ 171.778822][ T5927] usb 6-1: SerialNumber: syz [ 171.787862][ T7266] xt_nfacct: accounting object `syz0' does not exist [ 171.809896][ T5927] usb 6-1: config 0 descriptor?? [ 172.066595][ T5927] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 172.080316][ T974] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 172.109089][ T5927] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 172.115572][ T7277] netlink: 108 bytes leftover after parsing attributes in process `syz.1.546'. [ 172.171717][ T5927] usb 6-1: USB disconnect, device number 3 [ 172.269901][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 172.314157][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.369663][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 172.414945][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 172.454065][ T974] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 172.490181][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.517602][ T7288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.518296][ T974] usb 4-1: Product: syz [ 172.580150][ T974] usb 4-1: Manufacturer: syz [ 172.589730][ T974] usb 4-1: SerialNumber: syz [ 172.645523][ T974] usb 4-1: config 0 descriptor?? [ 172.665049][ T7290] loop0: detected capacity change from 0 to 16 [ 172.732270][ T7290] erofs (device loop0): mounted with root inode @ nid 36. [ 172.812561][ T7290] erofs (device loop0): xattr_isize 12 of nid 86 is not supported yet [ 172.896710][ T974] adutux 4-1:0.0: Could not retrieve serial number [ 172.925424][ T974] adutux 4-1:0.0: probe with driver adutux failed with error -5 [ 173.165289][ T5927] usb 4-1: USB disconnect, device number 5 [ 173.224193][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 173.355882][ T7308] loop5: detected capacity change from 0 to 256 [ 173.453002][ T7308] FAT-fs (loop5): Directory bread(block 64) failed [ 173.479681][ T7308] FAT-fs (loop5): Directory bread(block 65) failed [ 173.486443][ T7308] FAT-fs (loop5): Directory bread(block 66) failed [ 173.545783][ T7308] FAT-fs (loop5): Directory bread(block 67) failed [ 173.567736][ T7308] FAT-fs (loop5): Directory bread(block 68) failed [ 173.604264][ T7318] loop2: detected capacity change from 0 to 8 [ 173.615677][ T7308] FAT-fs (loop5): Directory bread(block 69) failed [ 173.636346][ T7308] FAT-fs (loop5): Directory bread(block 70) failed [ 173.660830][ T7318] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 173.669375][ T7308] FAT-fs (loop5): Directory bread(block 71) failed [ 173.714091][ T5988] udevd[5988]: incorrect cramfs checksum on /dev/loop2 [ 173.723437][ T7308] FAT-fs (loop5): Directory bread(block 72) failed [ 173.749936][ T7308] FAT-fs (loop5): Directory bread(block 73) failed [ 173.750666][ T7318] overlay: filesystem on ./file0 is read-only [ 173.806588][ T5847] udevd[5847]: incorrect cramfs checksum on /dev/loop2 [ 173.874260][ T7316] loop4: detected capacity change from 0 to 4096 [ 173.943658][ T7316] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 174.069084][ T7316] ntfs3(loop4): ino=19, mi_enum_attr [ 174.100937][ T7316] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 174.407874][ T7328] geneve2: entered promiscuous mode [ 174.440179][ T7328] geneve2: entered allmulticast mode [ 174.489614][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.516887][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.568841][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.649792][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.113228][ T30] audit: type=1326 audit(1775064896.943:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.129020][ T7349] netlink: 100 bytes leftover after parsing attributes in process `syz.5.580'. [ 175.147091][ T7315] loop1: detected capacity change from 0 to 32768 [ 175.188913][ T7349] netlink: 100 bytes leftover after parsing attributes in process `syz.5.580'. [ 175.228586][ T30] audit: type=1326 audit(1775064896.943:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.277912][ T30] audit: type=1326 audit(1775064896.943:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.304273][ T7315] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.304646][ T30] audit: type=1326 audit(1775064896.943:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.336413][ T30] audit: type=1326 audit(1775064896.973:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.359376][ T30] audit: type=1326 audit(1775064896.973:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.381967][ T30] audit: type=1326 audit(1775064896.973:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.407080][ T30] audit: type=1326 audit(1775064896.973:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.430309][ T30] audit: type=1326 audit(1775064896.973:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.491255][ T30] audit: type=1326 audit(1775064896.973:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 175.698842][ T7315] XFS (loop1): Ending clean mount [ 175.980884][ T5829] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.335710][ T7386] loop0: detected capacity change from 0 to 256 [ 176.449337][ T7386] FAT-fs (loop0): Directory bread(block 64) failed [ 176.466423][ T7386] FAT-fs (loop0): Directory bread(block 65) failed [ 176.509925][ T7386] FAT-fs (loop0): Directory bread(block 66) failed [ 176.533653][ T7386] FAT-fs (loop0): Directory bread(block 67) failed [ 176.581946][ T7386] FAT-fs (loop0): Directory bread(block 68) failed [ 176.634402][ T7386] FAT-fs (loop0): Directory bread(block 69) failed [ 176.641423][ T7390] loop4: detected capacity change from 0 to 2048 [ 176.688290][ T7386] FAT-fs (loop0): Directory bread(block 70) failed [ 176.709007][ T7390] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.750935][ T7386] FAT-fs (loop0): Directory bread(block 71) failed [ 176.757716][ T7386] FAT-fs (loop0): Directory bread(block 72) failed [ 176.817909][ T7386] FAT-fs (loop0): Directory bread(block 73) failed [ 177.413110][ T7408] loop5: detected capacity change from 0 to 16 [ 177.463582][ T7408] erofs (device loop5): mounted with root inode @ nid 36. [ 177.533697][ T7408] syz.5.607: attempt to access beyond end of device [ 177.533697][ T7408] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 177.612711][ T7408] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 177.654598][ T7408] erofs (device loop5): read error -117 @ 0 of nid 89 [ 178.350134][ T7437] netlink: 'syz.0.621': attribute type 3 has an invalid length. [ 178.732282][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 178.766549][ T7450] netlink: 224 bytes leftover after parsing attributes in process `syz.0.628'. [ 180.557317][ T7508] netlink: 'syz.0.652': attribute type 29 has an invalid length. [ 180.574349][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 180.713370][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'. [ 180.750536][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'. [ 180.856504][ T7514] loop5: detected capacity change from 0 to 1024 [ 180.875675][ T7514] EXT4-fs: Ignoring removed oldalloc option [ 180.921038][ T7514] EXT4-fs: Ignoring removed bh option [ 180.972397][ T7514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.406022][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.067445][ T7549] openvswitch: netlink: IP tunnel dst address not specified [ 182.468130][ T7561] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 182.715741][ T7539] loop2: detected capacity change from 0 to 32768 [ 182.792125][ T5988] Dev loop2 SGI disklabel: csum bad, label corrupted [ 182.823954][ T7539] Dev loop2 SGI disklabel: csum bad, label corrupted [ 183.309345][ T7586] loop3: detected capacity change from 0 to 128 [ 183.319301][ T7587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'. [ 183.349905][ T7587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'. [ 183.422301][ T5834] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 183.432279][ T5834] Bluetooth: hci1: Injecting HCI hardware error event [ 183.451630][ T5834] Bluetooth: hci1: hardware error 0x00 [ 183.465292][ T7589] loop5: detected capacity change from 0 to 64 [ 183.706484][ T7589] Bad inode number on dev loop5: 2 is out of range [ 184.100979][ T7603] IPVS: length: 228 != 24 [ 184.119772][ T7605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.700'. [ 184.128980][ T7605] netlink: 43 bytes leftover after parsing attributes in process `syz.1.700'. [ 184.184424][ T7605] netlink: 'syz.1.700': attribute type 6 has an invalid length. [ 184.249683][ T7605] netlink: 'syz.1.700': attribute type 5 has an invalid length. [ 184.258689][ T7605] netlink: 43 bytes leftover after parsing attributes in process `syz.1.700'. [ 184.295370][ T7600] loop3: detected capacity change from 0 to 4096 [ 184.404959][ T7600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.541739][ T7600] __quota_error: 1 callbacks suppressed [ 184.541770][ T7600] Quota error (device loop3): do_check_range: Getting block 1024 out of range 0-5 [ 184.784148][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.849619][ T790] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 185.075447][ T790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 185.091287][ T790] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 7 [ 185.143767][ T790] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 185.177688][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.206897][ T790] usb 1-1: Product: syz [ 185.228414][ T790] usb 1-1: Manufacturer: syz [ 185.243777][ T790] usb 1-1: SerialNumber: syz [ 185.282904][ T7640] ip6gre1: entered promiscuous mode [ 185.293527][ T7641] nfs: Unknown parameter 'ntext' [ 185.309736][ T7640] ip6gre1: entered allmulticast mode [ 185.454905][ T7643] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 185.584556][ T790] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 185.603611][ T790] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 185.668838][ T5834] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 185.990323][ T790] usb 1-1: USB disconnect, device number 5 [ 186.171405][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.491702][ T7671] vti0: entered promiscuous mode [ 186.496741][ T7671] vti0: entered allmulticast mode [ 186.572222][ T7669] loop5: detected capacity change from 0 to 4096 [ 186.732678][ T7675] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 186.819788][ T7677] netlink: 'syz.3.734': attribute type 4 has an invalid length. [ 186.827582][ T7677] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 186.889719][ T7677] netlink: 228 bytes leftover after parsing attributes in process `syz.3.734'. [ 187.439919][ T5899] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 187.481809][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 187.618115][ T7705] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.635407][ T5899] usb 6-1: unable to get BOS descriptor or descriptor too short [ 187.650003][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 187.658648][ T10] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 187.679636][ T5899] usb 6-1: config 66 has an invalid interface number: 108 but max is 0 [ 187.686869][ T10] usb 2-1: config 251 has no interface number 0 [ 187.696629][ T5899] usb 6-1: config 66 has an invalid descriptor of length 101, skipping remainder of the config [ 187.731912][ T10] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 187.743958][ T7708] loop0: detected capacity change from 0 to 64 [ 187.751181][ T5899] usb 6-1: config 66 has no interface number 0 [ 187.757384][ T5899] usb 6-1: too many endpoints for config 66 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 187.772987][ T10] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 187.820298][ T5899] usb 6-1: config 66 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 187.828531][ T10] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 187.869625][ T10] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 187.898962][ T10] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 70 [ 187.921144][ T5899] usb 6-1: config 66 interface 108 has no altsetting 0 [ 187.953130][ T5899] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 187.972824][ T10] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.973864][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.013521][ T7712] AppArmor: change_hat: Invalid input '=' [ 188.052471][ T10] usb 2-1: config 251 interface 202 has no altsetting 0 [ 188.067692][ T5899] usb 6-1: Product: syz [ 188.092109][ T5899] usb 6-1: Manufacturer: syz [ 188.096780][ T5899] usb 6-1: SerialNumber: syz [ 188.102337][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 188.130965][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.167833][ T10] usb 2-1: Product: syz [ 188.182624][ T10] usb 2-1: Manufacturer: syz [ 188.208323][ T10] usb 2-1: SerialNumber: syz [ 188.278151][ T7690] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.286830][ T7690] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.290242][ T7718] binder: 7717:7718 ioctl 400c620e 200000000080 returned -22 [ 188.423716][ T5899] usb 6-1: USB disconnect, device number 4 [ 188.569681][ T5964] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 188.589342][ T10] cxacru 2-1:251.202: send of cm 0x90 failed (-71) [ 188.639792][ T10] cxacru 2-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 188.655180][ T10] cxacru 2-1:251.202: probe with driver cxacru failed with error -22 [ 188.704731][ T10] usb 2-1: USB disconnect, device number 5 [ 188.734452][ T5964] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.746871][ T5964] usb 5-1: not running at top speed; connect to a high speed hub [ 188.779349][ T5964] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 188.817605][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.830975][ T5964] usb 5-1: Product: syz [ 188.835214][ T5964] usb 5-1: Manufacturer: syz [ 188.841310][ T5964] usb 5-1: SerialNumber: syz [ 188.980066][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.136000][ T5964] usb 5-1: 1:1 : sample bitwidth 41 in over sample bytes 2 [ 189.159996][ T5927] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 189.164622][ T5964] usb 5-1: 1:1: All rates were zero [ 189.193926][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.205446][ T5964] usb 5-1: 1:1 : invalid channels 0 [ 189.219438][ T5964] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 189.228341][ T5927] usb 4-1: Product: syz [ 189.251888][ T5927] usb 4-1: Manufacturer: syz [ 189.297564][ T5927] usb 4-1: SerialNumber: syz [ 189.338937][ T5927] usb 4-1: config 0 descriptor?? [ 189.355837][ T5927] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 189.365068][ T5964] usb 5-1: USB disconnect, device number 5 [ 189.620126][ T6383] udevd[6383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.780464][ T5927] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 189.794982][ T5927] sq905c 4-1:0.0: Reading version command failed [ 189.826784][ T5927] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 189.909364][ T7747] loop1: detected capacity change from 0 to 4096 [ 189.910569][ T5927] usb 4-1: USB disconnect, device number 6 [ 189.941008][ T7747] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 190.017514][ T7747] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 190.229755][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 190.633272][ T7776] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 190.704085][ T7774] loop2: detected capacity change from 0 to 1024 [ 190.746919][ T7776] team0: Device vxcan1 is of different type [ 190.782613][ T7774] hfsplus: b-tree write err: -5, ino 2 [ 190.937110][ T7784] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 190.946624][ T13] hfsplus: b-tree write err: -5, ino 25 [ 190.977794][ T13] hfsplus: b-tree write err: -5, ino 4 [ 190.981911][ T7786] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 190.987490][ T7784] netlink: 152 bytes leftover after parsing attributes in process `syz.3.787'. [ 191.013821][ T13] hfsplus: b-tree write err: -5, ino 2 [ 191.040065][ T13] hfsplus: b-tree write err: -5, ino 26 [ 191.606948][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.796'. [ 191.650267][ T7807] netlink: 'syz.2.798': attribute type 12 has an invalid length. [ 191.770347][ T7811] netlink: zone id is out of range [ 191.787400][ T7811] netlink: del zone limit has 8 unknown bytes [ 191.950010][ T5964] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.047095][ T7821] ip6t_srh: unknown srh invflags 7F00 [ 192.122736][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 192.159757][ T5964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.189239][ T5964] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 192.242925][ T5964] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 192.305979][ T5964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 192.351749][ T5964] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 192.383390][ T5964] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 192.443311][ T5964] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.479275][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.542994][ T5964] usb 4-1: SerialNumber: syz [ 192.567665][ T7834] loop1: detected capacity change from 0 to 512 [ 192.580747][ T7809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.604303][ T7809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.629420][ T7834] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 192.659919][ T7834] EXT4-fs (loop1): failed to open journal device unknown-block(8,3) -6 [ 192.926717][ T5964] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 192.991950][ T5964] usb 4-1: USB disconnect, device number 7 [ 193.521287][ T7861] loop0: detected capacity change from 0 to 512 [ 193.544387][ T7861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.610557][ T7861] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 193.641711][ T7861] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 193.671104][ T7861] EXT4-fs (loop0): orphan cleanup on readonly fs [ 193.677612][ T7861] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 193.779843][ T7861] EXT4-fs warning (device loop0): ext4_enable_quotas:7257: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 193.860004][ T7861] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 193.909169][ T7861] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.825: bg 0: block 40: padding at end of block bitmap is not set [ 193.967004][ T7877] loop5: detected capacity change from 0 to 256 [ 194.010020][ T7861] loop0: lost filesystem error report for type 5 error -117 [ 194.019835][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 194.034105][ C1] EXT4-fs (loop0): initial error at time 1775064915: ext4_validate_block_bitmap:440 [ 194.043615][ C1] EXT4-fs (loop0): last error at time 1775064915: ext4_validate_block_bitmap:440 [ 194.055116][ T7861] EXT4-fs (loop0): Remounting filesystem read-only [ 194.079334][ T7861] EXT4-fs (loop0): 1 truncate cleaned up [ 194.086453][ T7877] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.088795][ T7861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.120117][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.312912][ T5899] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 194.340127][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.380433][ T5899] usb 5-1: config 0 has no interface number 0 [ 194.380489][ T7883] loop2: detected capacity change from 0 to 1024 [ 194.386617][ T5899] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 194.431267][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.468050][ T5899] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.551765][ T5899] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 194.576751][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.625610][ T5899] usb 5-1: Product: syz [ 194.651725][ T5899] usb 5-1: Manufacturer: syz [ 194.656524][ T5899] usb 5-1: SerialNumber: syz [ 194.710942][ T5899] usb 5-1: config 0 descriptor?? [ 194.810625][ T7892] loop0: detected capacity change from 0 to 16 [ 194.838377][ T7892] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 194.857431][ T7895] Cannot find del_set index 0 as target [ 194.921646][ T7892] erofs (device loop0): mounted with root inode @ nid 36. [ 194.995675][ T7892] syz.0.838: attempt to access beyond end of device [ 194.995675][ T7892] loop0: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 195.055390][ T7892] erofs (device loop0): read error -5 @ 0 of nid 36 [ 195.261458][ T9] usb 5-1: USB disconnect, device number 6 [ 195.399804][ T7905] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 195.415082][ T7907] netlink: 'syz.2.849': attribute type 9 has an invalid length. [ 195.435480][ T7905] netlink: 248 bytes leftover after parsing attributes in process `syz.3.846'. [ 196.124179][ T7923] loop1: detected capacity change from 0 to 512 [ 196.124384][ T7925] xt_ipcomp: unknown flags 1D [ 196.213914][ T30] audit: type=1800 audit(1775064918.043:34): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.855" name="file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.220104][ T7929] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 196.674171][ T7939] loop0: detected capacity change from 0 to 1024 [ 196.824814][ T7939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.983242][ T7939] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #11: comm syz.0.862: directory missing '..' [ 197.246460][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.500097][ T7919] loop3: detected capacity change from 0 to 32768 [ 197.520867][ T5927] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 197.600922][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.607422][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.723814][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.760972][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 197.818671][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 197.863683][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 197.960226][ T5927] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 197.994421][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 198.033975][ T5927] usb 5-1: Product: syz [ 198.040387][ T5927] usb 5-1: Manufacturer: syz [ 198.058449][ T5927] usb 5-1: SerialNumber: syz [ 198.074763][ T5927] usb 5-1: config 0 descriptor?? [ 198.142701][ T7978] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 198.162602][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 198.169887][ T7978] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.241164][ T7980] random: crng reseeded on system resumption [ 198.311760][ T5927] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 198.321365][ T5927] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 198.353001][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.371152][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.395284][ T7982] loop2: detected capacity change from 0 to 4096 [ 198.400143][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 198.415548][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.420809][ T7982] ntfs3(loop2): ino=3, Correct links count -> 2. [ 198.438538][ T9] usb 1-1: SerialNumber: syz [ 198.485065][ T9] usb 1-1: 0:2 : does not exist [ 198.524673][ T5927] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 198.544916][ T5927] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 198.547401][ T7982] ntfs3(loop2): ino=1a, mi_enum_attr [ 198.557056][ T5927] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 198.567568][ T7982] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 198.583593][ T5927] usb 5-1: USB disconnect, device number 7 [ 198.697001][ T30] audit: type=1800 audit(1775064920.523:35): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.884" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 198.941096][ T5964] usb 1-1: USB disconnect, device number 6 [ 199.119721][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.362666][ T30] audit: type=1400 audit(1775064921.193:36): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7993 comm="syz.5.889" [ 199.805640][ T8010] netdevsim netdevsim5: Direct firmware load for / [ 199.805640][ T8010] failed with error -2 [ 199.869194][ T8010] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 199.869194][ T8010] [ 201.452537][ T8062] misc userio: The device must be registered before sending interrupts [ 201.484687][ T8064] openvswitch: netlink: Flow key attribute not present in set flow. [ 202.481731][ T8092] loop5: detected capacity change from 0 to 164 [ 202.493981][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 202.679830][ T5927] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 202.878601][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.902769][ T5927] usb 2-1: not running at top speed; connect to a high speed hub [ 202.953976][ T5927] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 202.977476][ T8102] block device autoloading is deprecated and will be removed. [ 202.995514][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.023775][ T5927] usb 2-1: Product: syz [ 203.042175][ T5927] usb 2-1: Manufacturer: syz [ 203.063164][ T5927] usb 2-1: SerialNumber: syz [ 203.326328][ T8109] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 203.394391][ T5927] usb 2-1: 1:1 : sample bitwidth 41 in over sample bytes 2 [ 203.411228][ T5927] usb 2-1: 1:1: All rates were zero [ 203.445984][ T5927] usb 2-1: 1:1 : invalid channels 0 [ 203.475719][ T5927] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 203.698683][ T8119] netlink: 'syz.5.946': attribute type 1 has an invalid length. [ 203.741734][ T5927] usb 2-1: USB disconnect, device number 6 [ 203.795339][ T8044] syz.0.910 (8044): drop_caches: 2 [ 203.837602][ T8123] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 203.907849][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.339784][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 204.519618][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 204.536632][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.559833][ T8144] loop0: detected capacity change from 0 to 64 [ 204.584335][ T5927] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 204.618606][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 204.657013][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 204.708136][ T5927] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 204.759574][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 204.830432][ T5927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.850757][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.889679][ T5927] usb 3-1: SerialNumber: syz [ 204.928037][ T8128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.946444][ T8128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.077166][ T8151] hfs: unable to load iocharset "io#harset" [ 205.109030][ T9] IPVS: starting estimator thread 0... [ 205.128696][ T9] IPVS: starting estimator thread 0... [ 205.202568][ T5927] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 205.232416][ T8162] IPVS: using max 23 ests per chain, 55200 per kthread [ 205.247567][ T5927] usb 3-1: USB disconnect, device number 3 [ 205.267971][ T8161] IPVS: using max 24 ests per chain, 57600 per kthread [ 205.713928][ T8176] lo speed is unknown, defaulting to 1000 [ 205.783771][ T8176] lo speed is unknown, defaulting to 1000 [ 205.850531][ T8176] lo speed is unknown, defaulting to 1000 [ 206.373935][ T8200] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.744412][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 206.818594][ T30] audit: type=1326 audit(1775064928.633:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 206.899831][ T30] audit: type=1326 audit(1775064928.643:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 206.930889][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 206.981217][ T30] audit: type=1326 audit(1775064928.643:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 207.059926][ T30] audit: type=1326 audit(1775064928.643:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 207.127148][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.143590][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.159669][ T24] usb 1-1: Product: syz [ 207.170185][ T30] audit: type=1326 audit(1775064928.643:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 207.193078][ T24] usb 1-1: Manufacturer: syz [ 207.209677][ T24] usb 1-1: SerialNumber: syz [ 207.234608][ T974] lo speed is unknown, defaulting to 1000 [ 207.254948][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.279790][ T8176] infiniband syz0: set active [ 207.284815][ T8176] infiniband syz0: added lo [ 207.294156][ T30] audit: type=1326 audit(1775064928.643:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 207.370123][ T30] audit: type=1326 audit(1775064928.643:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 207.371915][ T8176] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 207.401480][ T974] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.450792][ T30] audit: type=1326 audit(1775064928.643:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 207.513766][ T8176] infiniband syz0: Couldn't open port 1 [ 207.676942][ T8231] loop2: detected capacity change from 0 to 8 [ 207.767760][ T8231] SQUASHFS error: Unable to read inode 0xa7 [ 207.778961][ T8176] RDS/IB: syz0: added [ 207.820951][ T8176] smc: adding ib device syz0 with port count 1 [ 207.866830][ T8176] smc: ib device syz0 port 1 has no pnetid [ 207.895665][ T790] lo speed is unknown, defaulting to 1000 [ 207.916981][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 207.942821][ T8176] lo speed is unknown, defaulting to 1000 [ 207.956987][ T790] usb 1-1: USB disconnect, device number 7 [ 208.270883][ T8243] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1004'. [ 208.468520][ T974] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 208.500358][ T974] ath9k_htc: Failed to initialize the device [ 208.541278][ T790] usb 1-1: ath9k_htc: USB layer deinitialized [ 208.679410][ T8248] loop3: detected capacity change from 0 to 4096 [ 208.716427][ T8248] ntfs3(loop3): ino=3, Correct links count -> 2. [ 208.734443][ T8252] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 208.889593][ T8248] ntfs3(loop3): ino=1a, mi_enum_attr [ 208.894994][ T8248] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 209.014141][ T30] audit: type=1800 audit(1775064930.843:45): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1006" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 209.196726][ T8261] binder: BC_ATTEMPT_ACQUIRE not supported [ 209.223115][ T8261] binder: 8260:8261 ioctl c0306201 200000001a80 returned -22 [ 209.327807][ T8176] lo speed is unknown, defaulting to 1000 [ 209.559149][ T8272] dlm: no locking on control device [ 209.852766][ T8282] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.925387][ T8279] loop5: detected capacity change from 0 to 1764 [ 210.039886][ T8279] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 210.454207][ T8297] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1030'. [ 210.552415][ T8176] lo speed is unknown, defaulting to 1000 [ 210.692554][ T8302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1033'. [ 211.023548][ T790] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.584310][ T8326] netlink: 2056 bytes leftover after parsing attributes in process `syz.5.1046'. [ 211.982122][ T8339] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 212.008936][ T8176] lo speed is unknown, defaulting to 1000 [ 212.025586][ T8339] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1052'. [ 212.486862][ T8315] loop2: detected capacity change from 0 to 32768 [ 212.544157][ T8315] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.679712][ T790] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 212.777399][ T8315] XFS (loop2): Ending clean mount [ 212.784103][ T8367] netlink: 'syz.3.1061': attribute type 27 has an invalid length. [ 212.796010][ T8369] cgroup: Name too long [ 212.855202][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 212.888568][ T790] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 212.909674][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.928196][ T790] usb 5-1: Product: syz [ 212.941047][ T790] usb 5-1: Manufacturer: syz [ 212.945733][ T790] usb 5-1: SerialNumber: syz [ 212.993635][ T790] usb 5-1: config 0 descriptor?? [ 213.031940][ T8347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.066463][ T5826] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.070979][ T8347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.175147][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 213.205016][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 213.220355][ T790] port100 5-1:0.0: NFC: Could not get supported command types [ 213.248312][ T8371] loop0: detected capacity change from 0 to 4096 [ 213.285869][ T8371] ntfs3(loop0): ino=3, Correct links count -> 2. [ 213.294394][ T8375] loop5: detected capacity change from 0 to 256 [ 213.334733][ T8374] loop3: detected capacity change from 0 to 764 [ 213.342761][ T8375] exfat: Deprecated parameter 'utf8' [ 213.404222][ T8375] exfat: Deprecated parameter 'namecase' [ 213.427804][ T8176] lo speed is unknown, defaulting to 1000 [ 213.457270][ T8375] exfat: Deprecated parameter 'utf8' [ 213.509287][ T8371] ntfs3(loop0): ino=1a, mi_enum_attr [ 213.550072][ T8371] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 213.592478][ T8375] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 213.602813][ T24] usb 5-1: USB disconnect, device number 8 [ 213.683978][ T30] audit: type=1800 audit(1775064935.513:46): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1064" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 213.828364][ T8375] Invalid source name [ 214.333025][ T8389] netlink: 'syz.3.1073': attribute type 8 has an invalid length. [ 214.757638][ T8402] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1079'. [ 214.798512][ T8402] bridge_slave_1: default FDB implementation only supports local addresses [ 214.996656][ T8407] netlink: 'syz.5.1082': attribute type 1 has an invalid length. [ 215.105712][ T8176] lo speed is unknown, defaulting to 1000 [ 215.109814][ T8407] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1082'. [ 215.186754][ T8413] loop0: detected capacity change from 0 to 2048 [ 215.591150][ T8422] ip6t_rpfilter: unknown options [ 215.610662][ T8425] program syz.0.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.966725][ T8403] loop2: detected capacity change from 0 to 32768 [ 216.024990][ T8435] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 216.062990][ T8403] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 216.204454][ T8403] XFS (loop2): Ending clean mount [ 216.256266][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.603337][ T5826] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.290906][ T8469] loop2: detected capacity change from 0 to 256 [ 217.389234][ T8469] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x614dc512, utbl_chksum : 0xe619d30d) [ 217.415490][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1111'. [ 217.454868][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 217.522109][ T8469] exFAT-fs (loop2): valid_size(9000) is greater than size(0) [ 217.779992][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 218.069636][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 218.087663][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.089901][ T8488] sctp: [Deprecated]: syz.0.1116 (pid 8488) Use of int in max_burst socket option deprecated. [ 218.089901][ T8488] Use struct sctp_assoc_value instead [ 218.113112][ T24] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 218.129582][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.145230][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 218.155383][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.179622][ T24] usb 6-1: Product: syz [ 218.185980][ T8489] loop2: detected capacity change from 0 to 1764 [ 218.195421][ T24] usb 6-1: Manufacturer: syz [ 218.228924][ T24] usb 6-1: SerialNumber: syz [ 218.349004][ T24] usb 6-1: config 0 descriptor?? [ 218.659769][ T8501] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1124'. [ 218.829020][ T24] gs_usb 6-1:0.0: Couldn't get device config: (err=-71) [ 218.856654][ T24] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 218.961759][ T24] usb 6-1: USB disconnect, device number 5 [ 220.051456][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.220108][ T24] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 220.238988][ T24] usb 2-1: config 0 has no interface number 0 [ 220.279871][ T24] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 220.309648][ T24] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.347595][ T24] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 220.370201][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.419644][ T24] usb 2-1: Product: syz [ 220.424245][ T24] usb 2-1: Manufacturer: syz [ 220.428903][ T24] usb 2-1: SerialNumber: syz [ 220.462205][ T24] usb 2-1: config 0 descriptor?? [ 220.472091][ T8530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.540491][ T24] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 220.620387][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.632340][ T790] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.653657][ T24] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 220.883158][ T8562] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1153'. [ 220.997124][ T8565] loop0: detected capacity change from 0 to 256 [ 221.008337][ T8565] exfat: Deprecated parameter 'namecase' [ 221.039792][ T8565] exfat: Deprecated parameter 'utf8' [ 221.085253][ T24] usb 2-1: USB disconnect, device number 7 [ 221.169358][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 221.170733][ T8565] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 221.232729][ T24] cyberjack 2-1:0.69: device disconnected [ 221.738920][ T8578] loop4: detected capacity change from 0 to 256 [ 221.832619][ T8578] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 221.988056][ T8578] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 222.441404][ T8566] syz.2.1154 (8566): drop_caches: 2 [ 222.472083][ T8602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.651919][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 222.745184][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 222.839611][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 222.865139][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 222.884789][ T9] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 222.907185][ T9] usb 1-1: Product: syz [ 222.922297][ T9] usb 1-1: Manufacturer: syz [ 222.927221][ T9] usb 1-1: SerialNumber: syz [ 222.973012][ T9] usb 1-1: config 0 descriptor?? [ 223.013387][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 223.426583][ T9] gspca_zc3xx: reg_r err -71 [ 223.437774][ T9] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 223.439911][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1187'. [ 223.511503][ T9] usb 1-1: USB disconnect, device number 8 [ 224.034753][ T8646] loop3: detected capacity change from 0 to 64 [ 224.135248][ T8646] Trying to free block not in datazone [ 224.518299][ T8631] syz.5.1188 (8631): drop_caches: 2 [ 225.393628][ T8685] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 225.946742][ T8702] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 225.954772][ T8702] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1222'. [ 225.999834][ T8702] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1222'. [ 226.031190][ T8702] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1222'. [ 226.068115][ T8706] loop2: detected capacity change from 0 to 256 [ 226.099095][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1223'. [ 226.132632][ T8706] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 226.263669][ T8707] bridge_slave_0 (unregistering): left allmulticast mode [ 226.309763][ T8707] bridge_slave_0 (unregistering): left promiscuous mode [ 226.337345][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.442593][ T8714] loop3: detected capacity change from 0 to 256 [ 226.558797][ T8714] FAT-fs (loop3): Directory bread(block 64) failed [ 226.599406][ T8714] FAT-fs (loop3): Directory bread(block 65) failed [ 226.627103][ T8714] FAT-fs (loop3): Directory bread(block 66) failed [ 226.669037][ T8714] FAT-fs (loop3): Directory bread(block 67) failed [ 226.719718][ T8714] FAT-fs (loop3): Directory bread(block 68) failed [ 226.726321][ T8714] FAT-fs (loop3): Directory bread(block 69) failed [ 226.769694][ T8714] FAT-fs (loop3): Directory bread(block 70) failed [ 226.776317][ T8714] FAT-fs (loop3): Directory bread(block 71) failed [ 226.815611][ T8714] FAT-fs (loop3): Directory bread(block 72) failed [ 226.854614][ T8714] FAT-fs (loop3): Directory bread(block 73) failed [ 227.125945][ T8729] loop1: detected capacity change from 0 to 1024 [ 227.166224][ T8734] comedi comedi3: comedi_config --init_data is deprecated [ 227.218072][ T8729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.567206][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.612211][ T8742] loop0: detected capacity change from 0 to 4096 [ 227.798837][ T8742] ntfs3(loop0): ino=b, mi_enum_attr [ 227.824073][ T8742] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 227.870140][ T8742] ntfs3(loop0): Failed to load $Extend (-22). [ 227.903494][ T8742] ntfs3(loop0): Failed to initialize $Extend. [ 228.005601][ C1] sd 0:0:1:0: [sda] tag#2737 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 228.016193][ C1] sd 0:0:1:0: [sda] tag#2737 CDB: Read(6) 08 00 00 00 02 00 00 00 06 00 00 00 [ 228.306860][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.334053][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.497180][ T8766] loop5: detected capacity change from 0 to 512 [ 228.604368][ T8766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.630183][ T8766] ext4 filesystem being mounted at /213/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.806818][ T8774] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1256'. [ 228.900274][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 228.932217][ T8780] netlink: 'syz.0.1259': attribute type 2 has an invalid length. [ 228.932345][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.262184][ T8792] loop1: detected capacity change from 0 to 8 [ 229.388961][ T8792] SQUASHFS error: lzo decompression failed, data probably corrupt [ 229.463878][ T8792] SQUASHFS error: Failed to read block 0x0: -5 [ 229.489745][ T8796] usb usb9: usbfs: process 8796 (syz.2.1267) did not claim interface 0 before use [ 229.531644][ T8792] SQUASHFS error: lzo decompression failed, data probably corrupt [ 229.573921][ T8799] openvswitch: netlink: IP tunnel dst address not specified [ 229.581935][ T8792] SQUASHFS error: Failed to read block 0x0: -5 [ 229.600118][ T30] audit: type=1800 audit(1775064951.433:47): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1264" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 229.942006][ T8806] __vm_enough_memory: pid: 8806, comm: syz.2.1272, bytes: 4115879641088 not enough memory for the allocation [ 230.300498][ T5899] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.380705][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 230.381969][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 230.387403][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 230.392891][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 230.489615][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 230.550218][ T5899] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 230.558272][ T5899] usb 6-1: config 0 has no interface number 0 [ 230.580171][ T5899] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.603665][ T5899] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 230.625105][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 230.639593][ T5899] usb 6-1: Product: syz [ 230.650086][ T5899] usb 6-1: SerialNumber: syz [ 230.670642][ T8794] loop4: detected capacity change from 0 to 32768 [ 230.716909][ T8794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1266 (8794) [ 230.737580][ T5899] usb 6-1: config 0 descriptor?? [ 230.776709][ T5899] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 230.804460][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 230.812640][ T5899] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input10 [ 230.911264][ T8794] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.939717][ T8794] BTRFS info (device loop4): using sha256 checksum algorithm [ 231.195737][ T8794] BTRFS info (device loop4): enabling ssd optimizations [ 231.261239][ T8794] BTRFS info (device loop4): turning on async discard [ 231.266835][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 231.268069][ T8794] BTRFS info (device loop4): enabling free space tree [ 231.275654][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.290825][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.298209][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.307073][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.316539][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.329754][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.339716][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.346949][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.354182][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.361475][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.380733][ T5899] usb 6-1: USB disconnect, device number 6 [ 231.380816][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 231.462984][ T5899] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 231.737710][ T8857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1290'. [ 231.792246][ T8860] netlink: 'syz.0.1291': attribute type 5 has an invalid length. [ 231.802765][ T5825] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.050167][ T5899] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 232.087953][ T8865] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1295'. [ 232.186275][ T8825] loop2: detected capacity change from 0 to 32768 [ 232.255436][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.285757][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.338625][ T8825] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.347823][ T5899] usb 4-1: Product: syz [ 232.359852][ T5899] usb 4-1: Manufacturer: syz [ 232.364552][ T5899] usb 4-1: SerialNumber: syz [ 232.424854][ T5899] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 232.454307][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.484940][ T8877] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 232.499824][ T8877] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1297'. [ 232.640920][ T8825] XFS (loop2): Ending clean mount [ 232.727236][ T8825] XFS (loop2): Quotacheck needed: Please wait. [ 232.891916][ T8825] XFS (loop2): Quotacheck: Done. [ 233.064796][ T9] usb 4-1: USB disconnect, device number 8 [ 233.284181][ T5826] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.285690][ T8891] loop4: detected capacity change from 0 to 1024 [ 233.435642][ T8891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.526683][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'. [ 233.652328][ T8891] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 233.682863][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 233.720409][ T8891] EXT4-fs error (device loop4) in ext4_setattr:6028: error 28 [ 233.723343][ T24] ath9k_htc: Failed to initialize the device [ 233.749612][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 233.834711][ T8903] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 233.987414][ T8907] netlink: get zone limit has 4 unknown bytes [ 234.011798][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.306128][ T8918] loop2: detected capacity change from 0 to 64 [ 234.509655][ T5964] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 234.631018][ T8929] netlink: 'syz.3.1320': attribute type 4 has an invalid length. [ 234.631059][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 234.681154][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 234.684141][ T5964] usb 6-1: unable to get BOS descriptor or descriptor too short [ 234.697635][ T5964] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 234.697683][ T5964] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 234.697722][ T5964] usb 6-1: config 17 has no interface number 0 [ 234.697780][ T5964] usb 6-1: config 17 interface 8 altsetting 6 has an endpoint descriptor with address 0x56, changing to 0x6 [ 234.697826][ T5964] usb 6-1: config 17 interface 8 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 204 [ 234.697869][ T5964] usb 6-1: config 17 interface 8 has no altsetting 0 [ 234.748232][ T5964] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 234.748290][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.748328][ T5964] usb 6-1: Product: syz [ 234.748357][ T5964] usb 6-1: Manufacturer: syz [ 234.748386][ T5964] usb 6-1: SerialNumber: syz [ 234.755427][ T8914] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.878924][ T8934] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 234.995617][ T5964] usb 6-1: selecting invalid altsetting 0 [ 235.134362][ T5964] usb 6-1: USB disconnect, device number 7 [ 235.265885][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.348192][ T8946] loop4: detected capacity change from 0 to 256 [ 235.462812][ T8946] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 236.346145][ T8959] syz.3.1334 (8959): drop_caches: 2 [ 236.414337][ T8976] loop4: detected capacity change from 0 to 512 [ 236.436111][ T8974] netlink: 'syz.2.1342': attribute type 23 has an invalid length. [ 236.507259][ T8976] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 236.773183][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.789035][ T8986] loop5: detected capacity change from 0 to 64 [ 236.969812][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 236.982742][ T8976] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 237.005478][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 237.067609][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.107947][ T10] usb 1-1: config 0 descriptor?? [ 237.174510][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 237.189770][ T8976] loop4: detected capacity change from 0 to 8 [ 237.213501][ T8976] SQUASHFS error: xz decompression failed, data probably corrupt [ 237.238390][ T8976] SQUASHFS error: Failed to read block 0x108: -5 [ 237.279426][ T8976] SQUASHFS error: Unable to read metadata cache entry [106] [ 237.305052][ T8976] SQUASHFS error: Unable to read inode 0x11f [ 237.595268][ T10] gspca_nw80x: reg_r err -71 [ 237.609690][ T10] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 237.660241][ T10] usb 1-1: USB disconnect, device number 9 [ 237.909527][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.090788][ T9020] autofs4:pid:9020:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 238.119620][ T9020] autofs4:pid:9020:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 238.333122][ T9027] netlink: 'syz.4.1368': attribute type 2 has an invalid length. [ 238.342703][ T9028] loop5: detected capacity change from 0 to 64 [ 238.630016][ T5964] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 238.815556][ T5964] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 238.836706][ T5964] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 238.894155][ T5964] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 238.939622][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.984355][ T5964] usb 4-1: Product: syz [ 239.007374][ T5964] usb 4-1: Manufacturer: syz [ 239.033165][ T5964] usb 4-1: SerialNumber: syz [ 239.087641][ T5964] usb 4-1: config 0 descriptor?? [ 239.132817][ T5964] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 239.229980][ T9056] openvswitch: netlink: Key type 51 is out of range max 32 [ 239.527952][ T5964] gspca_sunplus: reg_r err -71 [ 239.532986][ T5964] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 239.550989][ T5141] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 239.580017][ T5964] usb 4-1: USB disconnect, device number 9 [ 239.729803][ T9068] netlink: 'syz.1.1388': attribute type 3 has an invalid length. [ 240.040432][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1392'. [ 240.747264][ T9101] loop1: detected capacity change from 0 to 2048 [ 240.787215][ T9101] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.881866][ T9109] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.149725][ T5927] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 241.373049][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 241.423107][ T5927] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 241.471882][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.511857][ T5927] usb 5-1: config 0 descriptor?? [ 241.561200][ T5927] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 241.735372][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 241.777546][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 241.789699][ T5927] usb 5-1: Detected FT232B [ 241.858572][ T9136] loop2: detected capacity change from 0 to 512 [ 241.898377][ T9136] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.995163][ T5927] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 242.021962][ T5927] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 242.057271][ T5927] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 242.106095][ T9136] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 242.132127][ T5927] usb 5-1: USB disconnect, device number 9 [ 242.210533][ T5927] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 242.270363][ T5927] ftdi_sio 5-1:0.0: device disconnected [ 242.698294][ T9148] loop0: detected capacity change from 0 to 4096 [ 242.806328][ T9148] ntfs3(loop0): ino=19, mi_enum_attr [ 242.827769][ T9148] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 242.889153][ T9160] team0: entered allmulticast mode [ 242.903384][ T9164] loop1: detected capacity change from 0 to 512 [ 242.916403][ T9160] team_slave_0: entered allmulticast mode [ 242.973092][ T9164] EXT4-fs warning (device loop1): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 242.977016][ T9160] team_slave_1: entered allmulticast mode [ 243.020126][ T9164] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 243.103670][ T9164] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.1430: Corrupt directory, running e2fsck is recommended [ 243.157195][ T9164] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 243.249799][ T9164] EXT4-fs error (device loop1): ext4_iget_extra_inode:5039: inode #15: comm syz.1.1430: corrupted in-inode xattr: invalid ea_ino [ 243.321300][ T9164] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 243.323679][ T9164] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1430: couldn't read orphan inode 15 (err -117) [ 243.332952][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 243.332995][ C1] EXT4-fs (loop1): initial error at time 1775064965: ext4_iget_extra_inode:5039: inode 15 [ 243.333055][ C1] EXT4-fs (loop1): last error at time 1775064965: ext4_iget_extra_inode:5039: inode 15 [ 243.394419][ T9172] random: crng reseeded on system resumption [ 243.519911][ T9164] loop1: lost filesystem error report for type 5 error -117 [ 243.551163][ T9180] loop0: detected capacity change from 0 to 136 [ 243.575219][ T9180] Attempt to read inode for relocated directory [ 243.584747][ T9164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.646157][ T9180] syz.0.1435: attempt to access beyond end of device [ 243.646157][ T9180] loop0: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 243.681954][ T142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.789682][ T9180] syz.0.1435: attempt to access beyond end of device [ 243.789682][ T9180] loop0: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 243.830185][ T9164] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #2: comm syz.1.1430: corrupted xattr entries [ 243.873747][ T30] audit: type=1800 audit(1775064965.683:48): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1435" name="file1" dev="loop0" ino=1487 res=0 errno=0 [ 243.914677][ T9187] netlink: 'syz.5.1442': attribute type 3 has an invalid length. [ 243.932025][ T9187] netlink: 'syz.5.1442': attribute type 1 has an invalid length. [ 243.955387][ T9187] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1442'. [ 243.977843][ T9188] sock: sock_timestamping_bind_phc: sock not bind to device [ 244.123064][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.300315][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.444374][ T9196] netlink: 660 bytes leftover after parsing attributes in process `syz.3.1447'. [ 245.083037][ T9217] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1456'. [ 246.163049][ T9246] loop4: detected capacity change from 0 to 4096 [ 246.229029][ T9246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.396006][ T9246] Quota error (device loop4): do_check_range: Getting block 3587 out of range 1-5 [ 246.450132][ T9246] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 246.510163][ T9246] EXT4-fs error (device loop4): ext4_acquire_dquot:7024: comm syz.4.1469: Failed to acquire dquot type 1 [ 246.789136][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.909736][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 247.083057][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.105003][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 247.129034][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 247.169631][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50562, setting to 64 [ 247.198893][ T9252] loop1: detected capacity change from 0 to 32768 [ 247.221367][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 247.269567][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 247.321603][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.393283][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 247.407087][ T9284] loop3: detected capacity change from 0 to 16 [ 247.438691][ T9284] erofs (device loop3): DAX unsupported by block device. Turning off DAX. [ 247.443734][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.494291][ T9] usb 1-1: Manufacturer: syz [ 247.519070][ T9284] erofs (device loop3): mounted with root inode @ nid 36. [ 247.536838][ T9] usb 1-1: config 0 descriptor?? [ 247.574358][ T9264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 247.628981][ T9] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 247.659557][ T9] mceusb 1-1:0.0: probe with driver mceusb failed with error -12 [ 247.983818][ T24] usb 1-1: USB disconnect, device number 10 [ 248.570097][ T9313] loop2: detected capacity change from 0 to 16 [ 248.631325][ T9313] erofs (device loop2): mounted with root inode @ nid 36. [ 248.715019][ T9313] erofs (device loop2): read error -117 @ 0 of nid 36 [ 248.877155][ T9317] bridge2: entered promiscuous mode [ 249.421085][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.856238][ T9346] loop2: detected capacity change from 0 to 64 [ 249.915866][ T9346] hfs: unable to locate alternate MDB [ 249.947077][ T9346] hfs: continuing without an alternate MDB [ 250.060102][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.193570][ T9323] loop3: detected capacity change from 0 to 32768 [ 250.249890][ T9323] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.422436][ T9323] XFS (loop3): Ending clean mount [ 250.466901][ T9323] XFS (loop3): Quotacheck needed: Please wait. [ 250.548727][ T9323] XFS (loop3): Quotacheck: Done. [ 250.866305][ T5831] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.235815][ T9384] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 251.704675][ T9397] loop4: detected capacity change from 0 to 64 [ 251.866923][ T30] audit: type=1326 audit(1775064973.693:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735a99c819 code=0x7ffc0000 [ 251.949658][ T30] audit: type=1326 audit(1775064973.693:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735a99c819 code=0x7ffc0000 [ 252.059159][ T30] audit: type=1326 audit(1775064973.723:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f735a99c819 code=0x7ffc0000 [ 252.081818][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 252.179633][ T30] audit: type=1326 audit(1775064973.723:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735a99c819 code=0x7ffc0000 [ 252.325544][ T24] usb 6-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 252.351087][ T24] usb 6-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 252.380080][ T24] usb 6-1: Product: syz [ 252.390966][ T24] usb 6-1: Manufacturer: syz [ 252.428918][ T24] usb 6-1: SerialNumber: syz [ 252.453084][ T24] usb 6-1: config 0 descriptor?? [ 252.478827][ T24] usb 6-1: selecting invalid altsetting 1 [ 252.509651][ T24] comedi comedi5: could not switch to alternate setting 1 [ 252.516846][ T24] usbduxfast 6-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 252.724108][ T10] usb 6-1: USB disconnect, device number 8 [ 252.983825][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 253.109963][ T5964] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 253.212943][ T5899] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 253.231608][ T5899] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 253.289870][ T5899] usb 5-1: config 220 has no interface number 2 [ 253.296292][ T5899] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 253.332080][ T5964] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 253.349039][ T5964] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 253.366526][ T5899] usb 5-1: config 220 interface 0 has no altsetting 0 [ 253.377973][ T5964] usb 2-1: config 220 has no interface number 2 [ 253.389605][ T5899] usb 5-1: config 220 interface 76 has no altsetting 0 [ 253.400261][ T5964] usb 2-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x58, changing to 0x8 [ 253.420810][ T5899] usb 5-1: config 220 interface 1 has no altsetting 0 [ 253.455141][ T5899] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 253.464470][ T5964] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 253.498529][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.519373][ T5964] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 253.540511][ T5899] usb 5-1: Product: syz [ 253.544754][ T5899] usb 5-1: Manufacturer: syz [ 253.549384][ T5899] usb 5-1: SerialNumber: syz [ 253.560048][ T5964] usb 2-1: config 220 interface 0 has no altsetting 0 [ 253.566972][ T5964] usb 2-1: config 220 interface 76 has no altsetting 0 [ 253.603021][ T5964] usb 2-1: config 220 interface 1 has no altsetting 0 [ 253.642547][ T5964] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 253.665125][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.680386][ T5964] usb 2-1: Product: syz [ 253.684665][ T5964] usb 2-1: Manufacturer: syz [ 253.689327][ T5964] usb 2-1: SerialNumber: syz [ 253.851734][ T5899] usb 5-1: selecting invalid altsetting 0 [ 253.880503][ T5899] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 253.939710][ T9460] netlink: 'syz.0.1571': attribute type 2 has an invalid length. [ 253.941730][ T5899] uvcvideo 5-1:220.0: No valid video chain found. [ 253.957890][ T9460] netlink: 'syz.0.1571': attribute type 3 has an invalid length. [ 253.987328][ T5964] usb 2-1: selecting invalid altsetting 0 [ 254.021999][ T5964] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 254.029373][ T5964] uvcvideo 2-1:220.0: No valid video chain found. [ 254.053836][ T5899] usb 5-1: selecting invalid altsetting 0 [ 254.079640][ T5899] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 254.111783][ T5899] usb 5-1: USB disconnect, device number 10 [ 254.142133][ T5964] usb 2-1: selecting invalid altsetting 0 [ 254.174529][ T5964] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 254.216625][ T5964] usb 2-1: USB disconnect, device number 8 [ 254.475856][ T9471] loop2: detected capacity change from 0 to 256 [ 254.912338][ T9483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.180872][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.523886][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 255.598707][ T9502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1589'. [ 255.658552][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 255.811183][ T9512] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.825998][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.415866][ T9534] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 257.340997][ T9562] kAFS: unable to lookup cell '/,' [ 257.498889][ T9520] loop3: detected capacity change from 0 to 32768 [ 257.605609][ T9520] jfs_lookup: dtSearch returned -5 [ 257.662130][ T9568] loop2: detected capacity change from 0 to 16 [ 257.700463][ T9568] erofs (device loop2): mounted with root inode @ nid 36. [ 258.762485][ T9600] syz.0.1639: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 258.815558][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.0.1639 Not tainted syzkaller #0 PREEMPT(full) [ 258.815610][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.815662][ T9600] Call Trace: [ 258.815690][ T9600] [ 258.815705][ T9600] dump_stack_lvl+0x100/0x190 [ 258.815789][ T9600] warn_alloc.cold+0x95/0x1c1 [ 258.815860][ T9600] ? __pfx_warn_alloc+0x10/0x10 [ 258.815909][ T9600] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 258.815980][ T9600] ? lockdep_hardirqs_on+0x78/0x100 [ 258.816022][ T9600] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 258.816099][ T9600] ? kasan_save_stack+0x3f/0x50 [ 258.816148][ T9600] ? kasan_save_stack+0x30/0x50 [ 258.816196][ T9600] ? kasan_save_track+0x14/0x30 [ 258.816249][ T9600] ? xskq_create+0xfb/0x1d0 [ 258.816317][ T9600] __vmalloc_node_range_noprof+0x1252/0x1530 [ 258.816399][ T9600] ? xskq_create+0xfb/0x1d0 [ 258.816465][ T9600] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.816551][ T9600] ? xskq_create+0xfb/0x1d0 [ 258.816604][ T9600] vmalloc_user_noprof+0x9e/0xe0 [ 258.816668][ T9600] ? xskq_create+0xfb/0x1d0 [ 258.816731][ T9600] xskq_create+0xfb/0x1d0 [ 258.816790][ T9600] xsk_setsockopt+0x743/0xab0 [ 258.816840][ T9600] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.816894][ T9600] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.816947][ T9600] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.816996][ T9600] ? find_held_lock+0x2b/0x80 [ 258.817051][ T9600] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.817098][ T9600] ? aa_sock_opt_perm+0xfe/0x1b0 [ 258.817166][ T9600] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.817229][ T9600] do_sock_setsockopt+0xf3/0x1d0 [ 258.817282][ T9600] __sys_setsockopt+0x195/0x220 [ 258.817354][ T9600] __x64_sys_setsockopt+0xbd/0x160 [ 258.817414][ T9600] ? do_syscall_64+0x95/0xf80 [ 258.817450][ T9600] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.817497][ T9600] ? lockdep_hardirqs_on+0x78/0x100 [ 258.817537][ T9600] do_syscall_64+0x106/0xf80 [ 258.817574][ T9600] ? irqentry_exit+0x138/0x670 [ 258.817618][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.817659][ T9600] RIP: 0033:0x7f735a99c819 [ 258.817696][ T9600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.817742][ T9600] RSP: 002b:00007f735b897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.817797][ T9600] RAX: ffffffffffffffda RBX: 00007f735ac15fa0 RCX: 00007f735a99c819 [ 258.817822][ T9600] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 258.817843][ T9600] RBP: 00007f735aa32c91 R08: 0000000000000004 R09: 0000000000000000 [ 258.817866][ T9600] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.817890][ T9600] R13: 00007f735ac16038 R14: 00007f735ac15fa0 R15: 00007ffdb2b2ff58 [ 258.817942][ T9600] [ 259.170255][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.176662][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.239554][ T9600] Mem-Info: [ 259.270008][ T9600] active_anon:7965 inactive_anon:0 isolated_anon:0 [ 259.270008][ T9600] active_file:4038 inactive_file:40048 isolated_file:0 [ 259.270008][ T9600] unevictable:768 dirty:475 writeback:0 [ 259.270008][ T9600] slab_reclaimable:6965 slab_unreclaimable:102105 [ 259.270008][ T9600] mapped:35640 shmem:2250 pagetables:1479 [ 259.270008][ T9600] sec_pagetables:0 bounce:0 [ 259.270008][ T9600] kernel_misc_reclaimable:0 [ 259.270008][ T9600] free:1309113 free_pcp:9924 free_cma:0 [ 259.372562][ T9600] Node 0 active_anon:32860kB inactive_anon:0kB active_file:16152kB inactive_file:159988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142560kB dirty:1900kB writeback:0kB shmem:8564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12588kB pagetables:5316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 259.485770][ T9600] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 259.527306][ T9608] loop4: detected capacity change from 0 to 1764 [ 259.590012][ T9600] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.799685][ T9600] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 259.805572][ T9600] Node 0 DMA32 free:1265840kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40360kB inactive_anon:0kB active_file:16152kB inactive_file:159988kB unevictable:1536kB writepending:1900kB zspages:0kB present:3129332kB managed:2537176kB mlocked:0kB bounce:0kB free_pcp:40328kB local_pcp:21696kB free_cma:0kB [ 259.960581][ T9600] lowmem_reserve[]: 0 0 1 1 1 [ 259.965944][ T9600] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 260.057545][ T9600] lowmem_reserve[]: 0 0 0 0 0 [ 260.064561][ T9600] Node 1 Normal free:3947268kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.225706][ T9600] lowmem_reserve[]: 0 0 0 0 0 [ 260.239702][ T9600] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 260.264611][ T9596] loop2: detected capacity change from 0 to 40427 [ 260.264996][ T9600] Node 0 DMA32: 1751*4kB (UE) 1399*8kB (UME) 497*16kB (UME) 46*32kB (UE) 106*64kB (UME) 99*128kB (UME) 42*256kB (UME) 19*512kB (UME) 5*1024kB (UM) 5*2048kB (UME) 287*4096kB (UM) = 1258468kB [ 260.341342][ T9600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.358638][ T9596] F2FS-fs (loop2): build fault injection rate: 771 [ 260.386222][ T9630] syz.1.1650 uses obsolete (PF_INET,SOCK_PACKET) [ 260.397630][ T9596] F2FS-fs (loop2): invalid crc value [ 260.409636][ T9600] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 9*16kB (UM) 7*32kB (UM) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3947268kB [ 260.489932][ T9600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.548281][ T9600] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.588352][ T9600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.631083][ T9600] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.679630][ T30] audit: type=1326 audit(1775064982.503:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 260.722729][ T9600] 51508 total pagecache pages [ 260.727906][ T9637] syz.3.1654 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 260.769743][ T9600] 0 pages in swap cache [ 260.773985][ T9600] Free swap = 124996kB [ 260.778162][ T9600] Total swap = 124996kB [ 260.786170][ T9596] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 260.844812][ T9596] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.869705][ T30] audit: type=1326 audit(1775064982.543:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 260.899556][ T9600] 2097051 pages RAM [ 260.903426][ T9600] 0 pages HighMem/MovableOnly [ 260.908130][ T9600] 430879 pages reserved [ 260.956504][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.959212][ T9600] 0 pages cma reserved [ 260.979677][ T30] audit: type=1326 audit(1775064982.543:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 261.112548][ T30] audit: type=1326 audit(1775064982.553:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 261.228342][ T30] audit: type=1326 audit(1775064982.613:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 261.298779][ T5826] syz-executor: attempt to access beyond end of device [ 261.298779][ T5826] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.303000][ T30] audit: type=1326 audit(1775064982.613:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 261.404343][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 261.404396][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.404419][ T5826] Call Trace: [ 261.404432][ T5826] [ 261.404446][ T5826] dump_stack_lvl+0x100/0x190 [ 261.404516][ T5826] f2fs_handle_critical_error+0x5d7/0x970 [ 261.404568][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.404616][ T5826] ? f2fs_build_fault_attr+0x53/0x280 [ 261.404664][ T5826] f2fs_write_end_io+0xc3f/0xf30 [ 261.404736][ T5826] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 261.404797][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.404862][ T5826] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 261.404917][ T5826] bio_endio+0x7a3/0x910 [ 261.404969][ T5826] submit_bio_noacct+0x64c/0x2010 [ 261.405048][ T5826] f2fs_submit_write_bio+0x133/0x350 [ 261.405096][ T5826] __submit_merged_bio+0x331/0x7b0 [ 261.405153][ T5826] __submit_merged_write_cond+0x3fe/0x510 [ 261.405214][ T5826] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 261.405276][ T5826] ? __pfx___might_resched+0x10/0x10 [ 261.405322][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.405379][ T5826] f2fs_write_cache_pages+0x21c0/0x2720 [ 261.405462][ T5826] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 261.405520][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.405571][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.405617][ T5826] ? __kasan_check_byte+0x13/0x50 [ 261.405677][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.405739][ T5826] ? unwind_next_frame+0x3be/0x1ea0 [ 261.405791][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.405840][ T5826] ? rcu_is_watching+0x12/0xc0 [ 261.405884][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.405946][ T5826] ? bpf_ksym_find+0x124/0x1c0 [ 261.406071][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.406120][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.406167][ T5826] ? add_lock_to_list+0x99/0x110 [ 261.406220][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.406267][ T5826] ? rcu_is_watching+0x12/0xc0 [ 261.406316][ T5826] f2fs_write_data_pages+0x799/0x16d0 [ 261.406386][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 261.406442][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.406495][ T5826] ? do_writepages+0x4b5/0x600 [ 261.406559][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.406611][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 261.406676][ T5826] do_writepages+0x278/0x600 [ 261.406782][ T5826] ? __pfx_do_writepages+0x10/0x10 [ 261.406841][ T5826] ? do_raw_spin_unlock+0x145/0x1e0 [ 261.406885][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.406932][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 261.406998][ T5826] filemap_writeback+0x22d/0x2e0 [ 261.407066][ T5826] ? __pfx_filemap_writeback+0x10/0x10 [ 261.407125][ T5826] ? check_noncircular+0x97/0x160 [ 261.407230][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.407278][ T5826] ? find_held_lock+0x2b/0x80 [ 261.407325][ T5826] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 261.407384][ T5826] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 261.407443][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.407495][ T5826] f2fs_sync_dirty_inodes+0x452/0x990 [ 261.407571][ T5826] block_operations+0x2a6/0xfc0 [ 261.407629][ T5826] ? check_noncircular+0x97/0x160 [ 261.407694][ T5826] ? __pfx_block_operations+0x10/0x10 [ 261.407760][ T5826] ? check_noncircular+0x97/0x160 [ 261.407865][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.407923][ T5826] ? ktime_get+0x200/0x300 [ 261.407975][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.408024][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.408069][ T5826] ? rcu_is_watching+0x12/0xc0 [ 261.408119][ T5826] f2fs_write_checkpoint+0x582/0x5550 [ 261.408199][ T5826] ? f2fs_stop_gc_thread+0x79/0xd0 [ 261.408236][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.408286][ T5826] ? kasan_quarantine_put+0x104/0x240 [ 261.408335][ T5826] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 261.408396][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.408450][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.408493][ T5826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 261.408582][ T5826] kill_f2fs_super+0x3e5/0x490 [ 261.408642][ T5826] ? __pfx_kill_f2fs_super+0x10/0x10 [ 261.408727][ T5826] ? lockdep_hardirqs_on+0x78/0x100 [ 261.408763][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.408809][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.408869][ T5826] deactivate_locked_super+0xc1/0x1b0 [ 261.408920][ T5826] deactivate_super+0xe7/0x110 [ 261.408969][ T5826] cleanup_mnt+0x21f/0x450 [ 261.409030][ T5826] task_work_run+0x150/0x240 [ 261.409071][ T5826] ? __pfx_task_work_run+0x10/0x10 [ 261.409111][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.409158][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.409281][ T5826] exit_to_user_mode_loop+0x100/0x4a0 [ 261.409350][ T5826] do_syscall_64+0x67c/0xf80 [ 261.409395][ T5826] ? irqentry_exit+0x138/0x670 [ 261.409446][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.409485][ T5826] RIP: 0033:0x7fcb2f39da57 [ 261.409516][ T5826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 261.409553][ T5826] RSP: 002b:00007ffc0b2e7728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 261.409589][ T5826] RAX: 0000000000000000 RBX: 00007fcb2f432048 RCX: 00007fcb2f39da57 [ 261.409615][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0b2e77e0 [ 261.409639][ T5826] RBP: 00007ffc0b2e77e0 R08: 00007ffc0b2e87e0 R09: 00000000ffffffff [ 261.409664][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0b2e8870 [ 261.409688][ T5826] R13: 00007fcb2f432048 R14: 000000000003fbb7 R15: 00007ffc0b2e88b0 [ 261.409746][ T5826] [ 261.412500][ T30] audit: type=1326 audit(1775064982.613:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 261.464118][ T5826] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 261.542170][ T30] audit: type=1326 audit(1775064982.613:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff49859c819 code=0x7ffc0000 [ 261.683288][ T142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.119744][ T9656] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 262.310416][ T9661] program syz.3.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.448765][ T9663] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 262.469780][ T9663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1668'. [ 262.567411][ T9663] team0: Port device geneve0 added [ 262.675570][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1670'. [ 263.017835][ T9677] loop3: detected capacity change from 0 to 256 [ 263.048560][ T9679] loop4: detected capacity change from 0 to 16 [ 263.089225][ T9679] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 263.810180][ T9696] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1683'. [ 264.057621][ T9706] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 264.092245][ T9706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1686'. [ 264.221573][ T9706] team0: Port device geneve0 added [ 265.202752][ T9746] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 265.223306][ T9751] netlink: 'syz.5.1708': attribute type 10 has an invalid length. [ 265.255992][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1708'. [ 265.390007][ T9751] team0: Port device geneve0 added [ 266.308149][ T9796] ip6gre2: entered promiscuous mode [ 266.487555][ T9809] loop1: detected capacity change from 0 to 2048 [ 266.512990][ T9809] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 266.592711][ T9804] loop4: detected capacity change from 0 to 4096 [ 266.691686][ T9829] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.703417][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.809648][ T5964] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 267.003023][ T5964] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 267.034308][ T5964] usb 3-1: config 0 has no interface number 0 [ 267.070591][ T5964] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 267.113913][ T5964] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 267.173586][ T5964] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 267.208021][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.300337][ T5964] usb 3-1: config 0 descriptor?? [ 267.348261][ T5964] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input14 [ 267.648338][ T5899] usb 3-1: USB disconnect, device number 4 [ 267.981558][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.170328][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 268.349955][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 268.379287][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 268.399398][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.419264][ T24] usb 6-1: Product: syz [ 268.426278][ T24] usb 6-1: Manufacturer: syz [ 268.446371][ T24] usb 6-1: SerialNumber: syz [ 268.452206][ T9836] loop3: detected capacity change from 0 to 40427 [ 268.478397][ T24] usb 6-1: config 0 descriptor?? [ 268.491860][ T9836] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 268.526861][ T24] gspca_main: spca508-2.14.0 probing 041e:4018 [ 268.542516][ T9836] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 268.557489][ T9938] loop0: detected capacity change from 0 to 4096 [ 268.595924][ T9836] F2FS-fs (loop3): invalid crc value [ 268.946649][ T24] gspca_spca508: reg_read err -71 [ 268.969921][ T24] gspca_spca508: reg_read err -71 [ 269.018703][ T24] gspca_spca508: reg_read err -71 [ 269.032276][ T24] gspca_spca508: reg_read err -71 [ 269.059732][ T24] gspca_spca508: reg write: error -71 [ 269.065249][ T24] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 269.141352][ T9836] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 269.156073][ T24] usb 6-1: USB disconnect, device number 9 [ 269.243433][ T9836] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 269.304907][ T9836] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.390301][ T9976] loop2: detected capacity change from 0 to 1764 [ 269.475904][ T9932] loop1: detected capacity change from 0 to 32768 [ 269.487891][ T9836] syz.3.1733: attempt to access beyond end of device [ 269.487891][ T9836] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.510853][ T9932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1746 (9932) [ 269.561513][ T9932] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.626316][ T9932] BTRFS info (device loop1): using sha256 checksum algorithm [ 269.940854][ T9932] BTRFS info (device loop1): rebuilding free space tree [ 269.995096][ T9932] BTRFS info (device loop1): enabling ssd optimizations [ 270.059232][ T9932] BTRFS info (device loop1): using spread ssd allocation scheme [ 270.079901][ T9932] BTRFS info (device loop1): turning on async discard [ 270.108238][ T9932] BTRFS info (device loop1): enabling free space tree [ 270.154688][ T9932] BTRFS info (device loop1): force clearing of disk cache [ 270.499766][ T5829] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.918916][T10029] loop5: detected capacity change from 0 to 4096 [ 271.013082][T10029] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 271.132431][T10029] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 271.195719][T10029] ntfs3(loop5): ino=19, mi_enum_attr [ 272.291408][T10094] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000 out of range (51000000..2150000000) [ 272.460008][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.539651][T10107] syz.2.1785: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.614929][T10107] CPU: 0 UID: 0 PID: 10107 Comm: syz.2.1785 Not tainted syzkaller #0 PREEMPT(full) [ 272.614984][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.615009][T10107] Call Trace: [ 272.615022][T10107] [ 272.615036][T10107] dump_stack_lvl+0x100/0x190 [ 272.615107][T10107] warn_alloc.cold+0x95/0x1c1 [ 272.615177][T10107] ? __pfx_warn_alloc+0x10/0x10 [ 272.615229][T10107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.615291][T10107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.615345][T10107] ? kasan_save_stack+0x3f/0x50 [ 272.615393][T10107] ? kasan_save_stack+0x30/0x50 [ 272.615440][T10107] ? kasan_save_track+0x14/0x30 [ 272.615493][T10107] ? xskq_create+0xfb/0x1d0 [ 272.615558][T10107] __vmalloc_node_range_noprof+0x1252/0x1530 [ 272.615640][T10107] ? xskq_create+0xfb/0x1d0 [ 272.615709][T10107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.615805][T10107] ? xskq_create+0xfb/0x1d0 [ 272.615860][T10107] vmalloc_user_noprof+0x9e/0xe0 [ 272.615926][T10107] ? xskq_create+0xfb/0x1d0 [ 272.615982][T10107] xskq_create+0xfb/0x1d0 [ 272.616041][T10107] xsk_setsockopt+0x743/0xab0 [ 272.616093][T10107] ? __pfx_aa_sk_perm+0x10/0x10 [ 272.616146][T10107] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.616199][T10107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.616245][T10107] ? find_held_lock+0x2b/0x80 [ 272.616299][T10107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.616346][T10107] ? aa_sock_opt_perm+0xfe/0x1b0 [ 272.616414][T10107] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.616485][T10107] do_sock_setsockopt+0xf3/0x1d0 [ 272.616539][T10107] __sys_setsockopt+0x195/0x220 [ 272.616611][T10107] __x64_sys_setsockopt+0xbd/0x160 [ 272.616671][T10107] ? do_syscall_64+0x95/0xf80 [ 272.616711][T10107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.616764][T10107] ? lockdep_hardirqs_on+0x78/0x100 [ 272.616805][T10107] do_syscall_64+0x106/0xf80 [ 272.616843][T10107] ? irqentry_exit+0x138/0x670 [ 272.616888][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.616928][T10107] RIP: 0033:0x7fcb2f39c819 [ 272.616960][T10107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.616998][T10107] RSP: 002b:00007fcb30292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.617036][T10107] RAX: ffffffffffffffda RBX: 00007fcb2f615fa0 RCX: 00007fcb2f39c819 [ 272.617063][T10107] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 272.617087][T10107] RBP: 00007fcb2f432c91 R08: 0000000000000004 R09: 0000000000000000 [ 272.617112][T10107] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.617136][T10107] R13: 00007fcb2f616038 R14: 00007fcb2f615fa0 R15: 00007ffc0b2e84b8 [ 272.617187][T10107] [ 272.730240][T10107] Mem-Info: [ 272.759782][T10112] loop3: detected capacity change from 0 to 764 [ 272.849636][T10107] active_anon:7111 inactive_anon:0 isolated_anon:0 [ 272.849636][T10107] active_file:4038 inactive_file:40056 isolated_file:0 [ 272.849636][T10107] unevictable:768 dirty:550 writeback:0 [ 272.849636][T10107] slab_reclaimable:7062 slab_unreclaimable:102098 [ 272.849636][T10107] mapped:35659 shmem:1435 pagetables:1311 [ 272.849636][T10107] sec_pagetables:0 bounce:0 [ 272.849636][T10107] kernel_misc_reclaimable:0 [ 272.849636][T10107] free:1307991 free_pcp:12101 free_cma:0 [ 272.950001][T10107] Node 0 active_anon:28444kB inactive_anon:0kB active_file:16152kB inactive_file:160020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142636kB dirty:2200kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12652kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.030361][T10107] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.102361][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.115294][T10107] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.145587][T10107] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 273.151581][T10107] Node 0 DMA32 free:1269152kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28444kB inactive_anon:0kB active_file:16152kB inactive_file:160020kB unevictable:1536kB writepending:2200kB zspages:0kB present:3129332kB managed:2537176kB mlocked:0kB bounce:0kB free_pcp:48256kB local_pcp:23036kB free_cma:0kB [ 273.305230][T10112] Symlink component flag not implemented [ 273.321004][T10112] Symlink component flag not implemented (15) [ 273.430207][T10107] lowmem_reserve[]: 0 0 1 1 1 [ 273.451333][T10107] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 273.537589][T10137] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1796'. [ 273.559141][T10107] lowmem_reserve[]: 0 0 0 0 0 [ 273.579403][T10107] Node 1 Normal free:3947268kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.659571][T10107] lowmem_reserve[]: 0 0 0 0 0 [ 273.667858][T10107] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 273.727603][T10145] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 273.738000][T10107] Node 0 DMA32: 2512*4kB (UM) 1909*8kB (UM) 879*16kB (UME) 335*32kB (UME) 98*64kB (UME) 90*128kB (UME) 24*256kB (UME) 17*512kB (UME) 5*1024kB (UM) 5*2048kB (UME) 287*4096kB (UM) = 1273656kB [ 273.838148][T10107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 273.910105][T10107] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 9*16kB (UM) 7*32kB (UM) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3947268kB [ 273.989536][T10107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.050122][T10107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.102280][T10107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.146703][T10107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.182573][T10107] 45442 total pagecache pages [ 274.187315][T10107] 0 pages in swap cache [ 274.225518][T10107] Free swap = 124996kB [ 274.246978][T10107] Total swap = 124996kB [ 274.278822][T10107] 2097051 pages RAM [ 274.299003][T10107] 0 pages HighMem/MovableOnly [ 274.328318][T10107] 430879 pages reserved [ 274.340622][T10107] 0 pages cma reserved [ 274.618912][T10192] netlink: 'syz.1.1811': attribute type 3 has an invalid length. [ 274.678543][T10188] loop5: detected capacity change from 0 to 2048 [ 274.750715][T10188] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 274.889882][T10203] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.622861][T10193] loop3: detected capacity change from 0 to 32768 [ 275.655320][T10193] [ 275.655320][T10193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.655320][T10193] [ 275.708668][T10193] JFS: metapage_get_blocks failed [ 275.782564][T10193] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 275.782564][T10193] [ 275.832309][T10193] ERROR: (device loop3): remounting filesystem as read-only [ 275.890110][T10193] ERROR: (device loop3): diWrite: ixpxd invalid [ 275.890110][T10193] [ 275.930991][T10193] ERROR: (device loop3): txAbort: [ 275.930991][T10193] [ 276.157183][T10241] kAFS: unable to lookup cell '.S•jË¡8' [ 276.359660][T10248] loop5: detected capacity change from 0 to 256 [ 276.418683][T10206] loop1: detected capacity change from 0 to 40427 [ 276.428607][T10248] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 276.451646][T10206] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 276.477062][T10206] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 276.511150][T10206] F2FS-fs (loop1): invalid crc value [ 276.556444][T10255] loop2: detected capacity change from 0 to 2048 [ 276.691348][T10255] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.795139][ T30] audit: type=1800 audit(1775064998.623:61): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1831" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 276.983188][T10206] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 277.043318][ T30] audit: type=1326 audit(1775064998.873:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.082606][T10206] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 277.111483][T10206] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 277.130641][ T30] audit: type=1326 audit(1775064998.903:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.244047][ T30] audit: type=1326 audit(1775064998.923:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.337960][ T30] audit: type=1326 audit(1775064998.923:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.438140][ T30] audit: type=1326 audit(1775064998.923:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.462801][T10206] syz.1.1816: attempt to access beyond end of device [ 277.462801][T10206] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.554993][ T30] audit: type=1326 audit(1775064998.923:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.592671][ T30] audit: type=1326 audit(1775064998.923:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.618510][ T30] audit: type=1326 audit(1775064998.923:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3dad99c819 code=0x7ffc0000 [ 277.781024][T10309] openvswitch: netlink: Missing valid actions attribute. [ 277.801059][T10309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.949599][ T5964] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 278.129577][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 278.143717][ T5964] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 278.167961][ T5964] usb 3-1: config 0 has no interface number 0 [ 278.194153][ T5964] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.220276][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.223230][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.260675][ T5964] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.289260][ T5964] usb 3-1: config 0 interface 89 has no altsetting 0 [ 278.322386][ T5964] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 278.331811][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.360939][ T5964] usb 3-1: Product: syz [ 278.379911][ T5964] usb 3-1: Manufacturer: syz [ 278.396952][ T5964] usb 3-1: SerialNumber: syz [ 278.432964][ T5964] usb 3-1: config 0 descriptor?? [ 278.454836][ T5964] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 278.489394][ T5964] em28xx 3-1:0.89: Video interface 89 found: isoc [ 278.606168][T10338] loop4: detected capacity change from 0 to 22 [ 278.633565][T10338] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 278.688229][T10338] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 278.712905][ T5964] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 278.849922][ T5964] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 278.880625][ T5964] em28xx 3-1:0.89: board has no eeprom [ 278.967164][T10296] loop0: detected capacity change from 0 to 32768 [ 278.969799][ T5964] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 279.015071][ T5964] em28xx 3-1:0.89: analog set to isoc mode. [ 279.061312][ T5990] em28xx 3-1:0.89: Registering V4L2 extension [ 279.192394][ T5964] usb 3-1: USB disconnect, device number 5 [ 279.220202][ T5964] em28xx 3-1:0.89: Disconnecting em28xx [ 279.249069][T10366] mmap: syz.1.1854 (10366): VmData 37478400 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 279.277350][T10364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.344438][ T5990] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 279.371764][ T5990] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 279.408703][ T5990] em28xx 3-1:0.89: No AC97 audio processor [ 279.446697][ T5990] usb 3-1: Decoder not found [ 279.468604][ T5990] em28xx 3-1:0.89: failed to create media graph [ 279.536870][ T5990] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 279.584601][ T5990] em28xx 3-1:0.89: Registering snapshot button... [ 279.660973][ T5990] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input16 [ 279.767355][ T5990] em28xx 3-1:0.89: Remote control support is not available for this card. [ 279.806278][ T5964] em28xx 3-1:0.89: Closing input extension [ 279.834095][ T5964] em28xx 3-1:0.89: Deregistering snapshot button [ 280.049693][T10400] program syz.1.1864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.083240][ T5964] em28xx 3-1:0.89: Freeing device [ 280.213114][T10412] netlink: 'syz.3.1865': attribute type 3 has an invalid length. [ 280.260317][T10412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1865'. [ 280.511563][T10425] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.955536][T10437] loop2: detected capacity change from 0 to 2048 [ 281.080891][T10437] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 281.161847][T10437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.739209][T10469] loop0: detected capacity change from 0 to 2048 [ 281.797696][T10469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.653140][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 282.679600][T10526] netlink: 'syz.0.1899': attribute type 7 has an invalid length. [ 282.687910][T10521] netlink: 'syz.2.1897': attribute type 7 has an invalid length. [ 282.892743][T10521] : entered promiscuous mode [ 283.321443][T10553] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1907'. [ 283.332184][T10557] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 283.620110][T10568] sctp: [Deprecated]: syz.1.1913 (pid 10568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.620110][T10568] Use struct sctp_sack_info instead [ 283.990384][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.991255][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.009844][T10588] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 284.035656][T10590] loop1: detected capacity change from 0 to 1024 [ 284.130407][T10590] hfsplus: b-tree write err: -5, ino 2 [ 284.351321][ T60] hfsplus: b-tree write err: -5, ino 25 [ 284.393098][ T60] hfsplus: b-tree write err: -5, ino 4 [ 284.456688][ T60] hfsplus: b-tree write err: -5, ino 2 [ 284.495368][ T60] hfsplus: b-tree write err: -5, ino 26 [ 284.749676][ T5990] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 284.922342][ T5990] usb 6-1: Using ep0 maxpacket: 8 [ 284.953965][ T5990] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 284.992682][ T5990] usb 6-1: config 0 has no interface number 0 [ 284.998947][ T5990] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 285.026760][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.035525][T10643] loop2: detected capacity change from 0 to 128 [ 285.053404][T10643] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 285.072449][T10643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.092541][ T5990] usb 6-1: config 0 descriptor?? [ 285.158643][ T5990] usb-storage 6-1:0.99: USB Mass Storage device detected [ 285.228396][ T5990] usb-storage 6-1:0.99: device ignored [ 285.492005][ T5990] usb 6-1: USB disconnect, device number 10 [ 286.101941][T10708] loop2: detected capacity change from 0 to 164 [ 286.433125][T10722] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 286.569314][T10731] netlink: 'syz.2.1957': attribute type 2 has an invalid length. [ 286.599937][T10731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1957'. [ 287.049762][T10759] netlink: 'syz.4.1964': attribute type 11 has an invalid length. [ 287.080762][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1964'. [ 288.511065][T10831] syz.1.1984 (10831): /proc/10830/oom_adj is deprecated, please use /proc/10830/oom_score_adj instead. [ 288.627455][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1986'. [ 288.659093][T10837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1986'. [ 288.868876][T10848] loop1: detected capacity change from 0 to 64 [ 288.906862][T10848] hfs: unable to locate alternate MDB [ 288.933980][T10848] hfs: continuing without an alternate MDB [ 288.985526][ T30] audit: type=1800 audit(1775065010.813:70): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1989" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 289.136811][ T142] hfs: new node 0 already hashed? [ 289.148789][ T142] ------------[ cut here ]------------ [ 289.156682][ T142] 1 [ 289.156706][ T142] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:6/142 [ 289.170859][ T142] Modules linked in: [ 289.175310][ T142] CPU: 1 UID: 0 PID: 142 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 289.185432][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.197661][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.208683][ T142] Workqueue: writeback wb_workfn (flush-7:1) [ 289.215274][ T142] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 289.221708][ T142] Code: bd 07 6b 0a e9 af a2 d0 01 e8 23 73 e1 00 4c 89 f7 e8 ab 07 6b 0a e8 16 73 e1 00 89 ee 48 c7 c7 c0 7d d1 8b e8 f8 e2 fa ff 90 <0f> 0b 90 e9 b1 a5 d0 01 e8 fa 72 e1 00 e8 c5 fc 4d 00 e9 0d a8 d0 [ 289.241947][ T142] RSP: 0018:ffffc90002ed7030 EFLAGS: 00010282 [ 289.248070][ T142] RAX: 000000000000001f RBX: ffff888037ee6200 RCX: 0000000000000000 [ 289.256713][ T142] RDX: 000000000000001f RSI: ffffffff81e7abe9 RDI: fffff520005dadf7 [ 289.268021][ T142] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 289.277547][ T142] R10: 0000000080000000 R11: 0000000000000000 R12: dffffc0000000000 [ 289.286336][ T142] R13: ffff888077bca000 R14: ffff888077bca0e0 R15: 0000000000000000 [ 289.295070][ T142] FS: 0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000 [ 289.304608][ T142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.311728][ T142] CR2: 00007ffbeb9e9f00 CR3: 0000000025779000 CR4: 0000000000350ef0 [ 289.320170][ T142] Call Trace: [ 289.323882][ T142] [ 289.326844][ T142] ? _raw_spin_unlock+0x28/0x50 [ 289.331827][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.337512][ T142] ? hfs_bnode_put+0x208/0x480 [ 289.343061][ T142] hfs_bmap_alloc+0x5a7/0x6b0 [ 289.347808][ T142] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 289.353358][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.359077][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.365988][ T142] ? folio_mark_accessed+0xf3/0x1040 [ 289.372237][ T142] hfs_btree_inc_height.isra.0+0xff/0x820 [ 289.378127][ T142] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 289.384623][ T142] ? do_raw_spin_unlock+0x145/0x1e0 [ 289.390144][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.395869][ T142] ? _raw_spin_unlock+0x28/0x50 [ 289.400913][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.406614][ T142] ? hfs_bnode_put+0x208/0x480 [ 289.411500][ T142] hfs_brec_insert+0x8ba/0xc20 [ 289.416341][ T142] ? __pfx_hfs_brec_insert+0x10/0x10 [ 289.422126][ T142] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 289.427231][ T142] __hfs_ext_write_extent+0x3ef/0x510 [ 289.432739][ T142] ? hfs_find_init+0x273/0x330 [ 289.437574][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.443380][ T142] hfs_ext_write_extent+0x1b7/0x200 [ 289.448653][ T142] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 289.454549][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.460326][ T142] ? __mpage_writepages+0x1a8/0x210 [ 289.466803][ T142] ? __pfx___mpage_writepages+0x10/0x10 [ 289.473430][ T142] hfs_write_inode+0xce/0xab0 [ 289.478204][ T142] ? __pfx_hfs_write_inode+0x10/0x10 [ 289.483629][ T142] ? __lock_acquire+0x4a5/0x2630 [ 289.488687][ T142] ? __writeback_single_inode+0x454/0x13c0 [ 289.494666][ T142] ? __writeback_single_inode+0x454/0x13c0 [ 289.500927][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.506644][ T142] __writeback_single_inode+0xd00/0x13c0 [ 289.512489][ T142] ? __pfx___writeback_single_inode+0x10/0x10 [ 289.518631][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.524795][ T142] ? do_raw_spin_unlock+0x145/0x1e0 [ 289.530146][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.535847][ T142] writeback_sb_inodes+0x766/0x1c70 [ 289.541352][ T142] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 289.547113][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.552926][ T142] ? rcu_is_watching+0x12/0xc0 [ 289.557789][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.563573][ T142] ? queue_io+0x287/0x550 [ 289.569040][ T142] wb_writeback+0x1c0/0xbe0 [ 289.574490][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.580403][ T142] ? __pfx_wb_writeback+0x10/0x10 [ 289.585515][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.591328][ T142] ? mark_held_locks+0x40/0x70 [ 289.596189][ T142] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.601583][ T142] wb_workfn+0x142/0xc00 [ 289.605914][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.611728][ T142] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 289.617664][ T142] ? __pfx_wb_workfn+0x10/0x10 [ 289.622617][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.628323][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.634117][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.639865][ T142] ? rcu_is_watching+0x12/0xc0 [ 289.644701][ T142] process_one_work+0xa23/0x19a0 [ 289.649919][ T142] ? __pfx_process_one_work+0x10/0x10 [ 289.655347][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.661459][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.667177][ T142] worker_thread+0x5ef/0xe50 [ 289.673035][ T142] ? kthread+0x13a/0x450 [ 289.677340][ T142] ? __pfx_worker_thread+0x10/0x10 [ 289.683433][ T142] kthread+0x370/0x450 [ 289.687563][ T142] ? __pfx_kthread+0x10/0x10 [ 289.692276][ T142] ret_from_fork+0x754/0xd80 [ 289.696920][ T142] ? __pfx_ret_from_fork+0x10/0x10 [ 289.702158][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.707858][ T142] ? __switch_to+0x7b4/0x1120 [ 289.712684][ T142] ? __pfx_kthread+0x10/0x10 [ 289.717330][ T142] ret_from_fork_asm+0x1a/0x30 [ 289.722226][ T142] [ 289.725265][ T142] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.732563][ T142] CPU: 1 UID: 0 PID: 142 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 289.741965][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.752051][ T142] Workqueue: writeback wb_workfn (flush-7:1) [ 289.758097][ T142] Call Trace: [ 289.761383][ T142] [ 289.764338][ T142] dump_stack_lvl+0x100/0x190 [ 289.769081][ T142] vpanic+0x552/0x970 [ 289.773112][ T142] ? __pfx_vpanic+0x10/0x10 [ 289.777674][ T142] panic+0xd1/0xe0 [ 289.781433][ T142] ? __pfx_panic+0x10/0x10 [ 289.785892][ T142] ? check_panic_on_warn+0x1f/0x90 [ 289.791147][ T142] check_panic_on_warn.cold+0x19/0x34 [ 289.796660][ T142] ? hfs_bnode_create.cold+0x41/0x49 [ 289.801982][ T142] __warn.cold+0x191/0x348 [ 289.806432][ T142] __report_bug+0x296/0x3d0 [ 289.810977][ T142] ? hfs_bnode_create.cold+0x41/0x49 [ 289.816303][ T142] ? __pfx___report_bug+0x10/0x10 [ 289.821387][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.827101][ T142] ? irq_work_queue+0xce/0x100 [ 289.831915][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.837580][ T142] ? __wake_up_klogd+0xe2/0x140 [ 289.842457][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.848146][ T142] ? vprintk_emit+0x1c9/0x6b0 [ 289.852860][ T142] ? __pfx_vprintk_emit+0x10/0x10 [ 289.857917][ T142] ? hfs_bnode_create.cold+0x41/0x49 [ 289.863261][ T142] report_bug+0xb2/0x220 [ 289.867594][ T142] ? hfs_bnode_create.cold+0x41/0x49 [ 289.872933][ T142] handle_bug+0x16a/0x2a0 [ 289.877316][ T142] exc_invalid_op+0x17/0x50 [ 289.881862][ T142] asm_exc_invalid_op+0x1a/0x20 [ 289.886765][ T142] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 289.892700][ T142] Code: bd 07 6b 0a e9 af a2 d0 01 e8 23 73 e1 00 4c 89 f7 e8 ab 07 6b 0a e8 16 73 e1 00 89 ee 48 c7 c7 c0 7d d1 8b e8 f8 e2 fa ff 90 <0f> 0b 90 e9 b1 a5 d0 01 e8 fa 72 e1 00 e8 c5 fc 4d 00 e9 0d a8 d0 [ 289.912380][ T142] RSP: 0018:ffffc90002ed7030 EFLAGS: 00010282 [ 289.918480][ T142] RAX: 000000000000001f RBX: ffff888037ee6200 RCX: 0000000000000000 [ 289.926477][ T142] RDX: 000000000000001f RSI: ffffffff81e7abe9 RDI: fffff520005dadf7 [ 289.934479][ T142] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 289.942477][ T142] R10: 0000000080000000 R11: 0000000000000000 R12: dffffc0000000000 [ 289.950479][ T142] R13: ffff888077bca000 R14: ffff888077bca0e0 R15: 0000000000000000 [ 289.958590][ T142] ? vprintk_emit+0x1c9/0x6b0 [ 289.963429][ T142] ? _raw_spin_unlock+0x28/0x50 [ 289.968369][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.974044][ T142] ? hfs_bnode_put+0x208/0x480 [ 289.978862][ T142] hfs_bmap_alloc+0x5a7/0x6b0 [ 289.983593][ T142] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 289.988831][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.994508][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.000195][ T142] ? folio_mark_accessed+0xf3/0x1040 [ 290.005641][ T142] hfs_btree_inc_height.isra.0+0xff/0x820 [ 290.011402][ T142] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 290.017800][ T142] ? do_raw_spin_unlock+0x145/0x1e0 [ 290.023037][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.028707][ T142] ? _raw_spin_unlock+0x28/0x50 [ 290.033611][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.039275][ T142] ? hfs_bnode_put+0x208/0x480 [ 290.044171][ T142] hfs_brec_insert+0x8ba/0xc20 [ 290.048996][ T142] ? __pfx_hfs_brec_insert+0x10/0x10 [ 290.054317][ T142] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 290.059481][ T142] __hfs_ext_write_extent+0x3ef/0x510 [ 290.064899][ T142] ? hfs_find_init+0x273/0x330 [ 290.069719][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.075415][ T142] hfs_ext_write_extent+0x1b7/0x200 [ 290.080672][ T142] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 290.086450][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.092123][ T142] ? __mpage_writepages+0x1a8/0x210 [ 290.097370][ T142] ? __pfx___mpage_writepages+0x10/0x10 [ 290.102976][ T142] hfs_write_inode+0xce/0xab0 [ 290.107703][ T142] ? __pfx_hfs_write_inode+0x10/0x10 [ 290.113027][ T142] ? __lock_acquire+0x4a5/0x2630 [ 290.118043][ T142] ? __writeback_single_inode+0x454/0x13c0 [ 290.123988][ T142] ? __writeback_single_inode+0x454/0x13c0 [ 290.129842][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.135530][ T142] __writeback_single_inode+0xd00/0x13c0 [ 290.141226][ T142] ? __pfx___writeback_single_inode+0x10/0x10 [ 290.147333][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.153015][ T142] ? do_raw_spin_unlock+0x145/0x1e0 [ 290.158354][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.164034][ T142] writeback_sb_inodes+0x766/0x1c70 [ 290.169307][ T142] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 290.175054][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.180773][ T142] ? rcu_is_watching+0x12/0xc0 [ 290.185611][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.191340][ T142] ? queue_io+0x287/0x550 [ 290.195719][ T142] wb_writeback+0x1c0/0xbe0 [ 290.200268][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.205960][ T142] ? __pfx_wb_writeback+0x10/0x10 [ 290.211056][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.216739][ T142] ? mark_held_locks+0x40/0x70 [ 290.221582][ T142] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.226847][ T142] wb_workfn+0x142/0xc00 [ 290.231156][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.236832][ T142] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 290.242702][ T142] ? __pfx_wb_workfn+0x10/0x10 [ 290.247619][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.253318][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.259027][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.264714][ T142] ? rcu_is_watching+0x12/0xc0 [ 290.269518][ T142] process_one_work+0xa23/0x19a0 [ 290.274498][ T142] ? __pfx_process_one_work+0x10/0x10 [ 290.279887][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.285574][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.291253][ T142] worker_thread+0x5ef/0xe50 [ 290.295884][ T142] ? kthread+0x13a/0x450 [ 290.300141][ T142] ? __pfx_worker_thread+0x10/0x10 [ 290.305280][ T142] kthread+0x370/0x450 [ 290.309395][ T142] ? __pfx_kthread+0x10/0x10 [ 290.314034][ T142] ret_from_fork+0x754/0xd80 [ 290.318668][ T142] ? __pfx_ret_from_fork+0x10/0x10 [ 290.323886][ T142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.329582][ T142] ? __switch_to+0x7b4/0x1120 [ 290.334313][ T142] ? __pfx_kthread+0x10/0x10 [ 290.338941][ T142] ret_from_fork_asm+0x1a/0x30 [ 290.343769][ T142] [ 290.347278][ T142] Kernel Offset: disabled [ 290.351620][ T142] Rebooting in 86400 seconds..