last executing test programs: 2.178524089s ago: executing program 4 (id=3566): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="02000000000a"}) 1.878037456s ago: executing program 3 (id=3573): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) 1.855287627s ago: executing program 4 (id=3574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x4, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x24001850}, 0x0) 1.72816158s ago: executing program 3 (id=3576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x4000840) 1.692723311s ago: executing program 4 (id=3578): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x5, 0x12b, 0x0, 0x0, @binary='F'}]}, 0x18}], 0x1}, 0x0) 1.624391692s ago: executing program 3 (id=3579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 1.492402625s ago: executing program 4 (id=3581): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a0000a, &(0x7f0000000040)={[{@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x200}}]}, 0x1, 0x5c2, &(0x7f0000001f80)="$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") symlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.473801065s ago: executing program 3 (id=3582): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0001, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000400)='{', 0x1}, {0x0, 0x2}], 0x2) 1.347534869s ago: executing program 3 (id=3584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 1.200572002s ago: executing program 3 (id=3586): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) 760.195822ms ago: executing program 1 (id=3593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0xfffffeaa}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x3c}}, 0x0) 700.321794ms ago: executing program 0 (id=3595): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x8918, 0x0) 635.040025ms ago: executing program 2 (id=3596): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x100, "9e00bfb06d3b8616cfb990900563084db892db971a7b986d0eb1a638763a7ec6", 0x4c314356}) 625.771356ms ago: executing program 0 (id=3597): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x5, &(0x7f0000000180)=""/3, &(0x7f00000001c0)=0x3) 562.750317ms ago: executing program 1 (id=3598): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) 500.135709ms ago: executing program 0 (id=3599): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, 0xfffffffffffffffe) 500.041819ms ago: executing program 1 (id=3600): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) 456.416409ms ago: executing program 2 (id=3601): r0 = syz_open_dev$vim2m(&(0x7f0000005680), 0x404000000000007c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200", 0x32314d56}) 378.720701ms ago: executing program 0 (id=3602): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ftruncate(r0, 0x100000001) 368.322551ms ago: executing program 4 (id=3603): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x40, 0x1) mount$cgroup(0x0, &(0x7f0000002300)='./file0\x00', &(0x7f0000002340), 0x10000, &(0x7f0000002380)={[{@name={'name', 0x3d, '.pending_reads\x00'}}]}) 367.715322ms ago: executing program 2 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 342.383132ms ago: executing program 1 (id=3605): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x300) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, 0x0) 201.919546ms ago: executing program 0 (id=3606): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0x10, &(0x7f0000000080)) 201.366046ms ago: executing program 2 (id=3607): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$sequencer(r0, &(0x7f0000000a40)=[@t={0x81, 0x8, 0x2, 0x4, @generic}, @t={0x81, 0x5, 0x9, 0x38, @generic=0x9}, @v={0x93, 0x9, 0xa0, 0x0, @generic=0x6, 0x2, 0x7ff}, @echo=0x68], 0x1c) 152.358147ms ago: executing program 1 (id=3608): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffe, 0x4) 97.672808ms ago: executing program 2 (id=3609): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) 78.988269ms ago: executing program 1 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3f81215595743979}}}, 0x50}}, 0x10) 69.595318ms ago: executing program 4 (id=3611): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 12.0674ms ago: executing program 0 (id=3612): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003b40), 0x80, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000003b80)=@v={0x93, 0x3, 0x80, 0xe, @MIDI_NOTEON=@special, 0x9}) 0s ago: executing program 2 (id=3613): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x31, 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): 59 code=0x7ffc0000 [ 113.852096][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.013037][ T5797] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.032702][ T5797] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.145555][ T7053] netlink: 'syz.4.1166': attribute type 5 has an invalid length. [ 114.230925][ T5799] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 114.297105][ T5797] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.340290][ T7069] netlink: 'syz.4.1173': attribute type 21 has an invalid length. [ 114.509820][ T7084] x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 40 [ 114.551340][ T7087] nvme_fabrics: missing parameter 'transport=%s' [ 114.564356][ T7087] nvme_fabrics: missing parameter 'nqn=%s' [ 114.687427][ T7100] openvswitch: netlink: Actions may not be safe on all matching packets [ 114.784978][ T5799] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 114.801872][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.810307][ T7039] ceph: No mds server is up or the cluster is laggy [ 114.825450][ T5799] usb 1-1: Product: syz [ 114.829744][ T5799] usb 1-1: Manufacturer: syz [ 114.834401][ T5799] usb 1-1: SerialNumber: syz [ 114.861250][ T5797] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 114.879439][ T5799] r8152-cfgselector 1-1: config 0 descriptor?? [ 115.072179][ T7131] loop1: detected capacity change from 0 to 512 [ 115.127335][ T7131] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 115.159693][ T7131] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1205: invalid indirect mapped block 256 (level 1) [ 115.193349][ T7131] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1205: invalid indirect mapped block 2683928664 (level 1) [ 115.236246][ T7131] EXT4-fs (loop1): 1 truncate cleaned up [ 115.241943][ T7131] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 115.290622][ T7131] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1205: Invalid block bitmap block 3 in block_group 0 [ 115.326920][ T7149] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 115.337544][ T7149] netlink: 'syz.2.1212': attribute type 2 has an invalid length. [ 115.346562][ T7149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1212'. [ 115.364892][ T5799] r8152-cfgselector 1-1: Unknown version 0x0000 [ 115.375031][ T5799] r8152-cfgselector 1-1: bad CDC descriptors [ 115.427431][ T5799] r8152-cfgselector 1-1: Unknown version 0x0000 [ 115.441169][ T5799] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 115.516143][ T7157] loop1: detected capacity change from 0 to 2048 [ 115.568869][ T4179] loop1: p3 p4 < > [ 115.583423][ T4179] loop1: p3 start 4284289 is beyond EOD, truncated [ 115.604737][ T6437] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.621181][ T7157] loop1: p3 p4 < > [ 115.628608][ T7157] loop1: p3 start 4284289 is beyond EOD, truncated [ 115.650597][ T3558] loop1: p3 p4 < > [ 115.660415][ T3558] loop1: p3 start 4284289 is beyond EOD, truncated [ 115.702097][ T7171] loop2: detected capacity change from 0 to 2048 [ 115.759504][ T7171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.811818][ T4179] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 115.859011][ T4179] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.868451][ T4186] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 115.914238][ T4179] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 115.915514][ T7173] loop2: detected capacity change from 0 to 764 [ 115.932697][ T4179] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.951171][ T4179] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 115.961742][ T4179] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.986028][ T6437] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.013491][ T6437] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.023622][ T4179] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 116.032025][ T6437] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 116.042600][ T4179] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.054386][ T6437] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.059678][ T7173] ISOFS: Bad logical zone size 43776 [ 116.070821][ T4179] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 116.082727][ T6437] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 116.103841][ T4179] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.134777][ T6437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.154751][ T4179] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 116.247956][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 116.280986][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 116.316682][ T7191] loop1: detected capacity change from 0 to 256 [ 116.403544][ T7191] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 116.455702][ T6437] snd-usb-caiaq 4-1:1.0: invalid EPs [ 116.461066][ T6437] usb 4-1: unable to init card! (ret=-22) [ 116.484967][ T6437] snd-usb-caiaq: probe of 4-1:1.0 failed with error -22 [ 116.543585][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 116.659123][ T6437] usb 4-1: USB disconnect, device number 5 [ 116.751392][ T4901] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.798762][ T7226] netlink: 'syz.1.1247': attribute type 21 has an invalid length. [ 116.934076][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 116.960988][ T7239] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1252'. [ 117.012689][ T4901] usb 3-1: Using ep0 maxpacket: 32 [ 117.144986][ T4901] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 117.163799][ T4901] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 117.178501][ T4901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 117.198424][ T4901] usb 3-1: config 1 has no interface number 0 [ 117.204606][ T4901] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.235043][ T4901] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.260293][ T4901] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.275231][ T4901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.314175][ T7267] delete_channel: no stack [ 117.380272][ T4901] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 117.502505][ T7283] loop1: detected capacity change from 0 to 764 [ 117.562249][ T7283] Symlink component flag not implemented [ 117.575029][ T7283] Symlink component flag not implemented (128) [ 117.606132][ T4901] snd_usb_pod 3-1:1.1: invalid control EP [ 117.612032][ T4901] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 117.629075][ T4901] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 117.646265][ T4901] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 117.690096][ T7293] SET target dimension over the limit! [ 117.857602][ T4901] usb 3-1: USB disconnect, device number 4 [ 117.908339][ T7301] loop0: detected capacity change from 0 to 4096 [ 117.945296][ T7301] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 118.055846][ T7301] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 118.101914][ T7301] ntfs3: loop0: mft corrupted [ 118.107071][ T7301] ntfs3: loop0: Failed to load $Extend. [ 118.214459][ T7327] loop3: detected capacity change from 0 to 164 [ 118.255336][ T1345] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.277889][ T7327] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 118.367002][ T7335] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 118.540515][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 118.574201][ T7349] Unsupported ieee802154 address type: 0 [ 118.674944][ T1345] usb 2-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x6D, skipping [ 118.712054][ T1345] usb 2-1: config 5 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.723417][ T7365] loop0: detected capacity change from 0 to 16 [ 118.727978][ T1345] usb 2-1: config 5 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 118.784415][ T7369] openvswitch: netlink: Missing key (keys=40, expected=100) [ 118.824235][ T7365] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.953516][ T1345] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 118.981679][ T1345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.008851][ T1345] usb 2-1: Product: syz [ 119.019818][ T1345] usb 2-1: Manufacturer: syz [ 119.031241][ T1345] usb 2-1: SerialNumber: syz [ 119.082744][ T7389] misc userio: No port type given on /dev/userio [ 119.337466][ T1345] usb 2-1: Not enough endpoints found in device, aborting! [ 119.381092][ T7415] loop0: detected capacity change from 0 to 1024 [ 119.394845][ T5799] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.435172][ T7415] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 119.453270][ T7415] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.465765][ T7415] EXT4-fs error (device loop0): ext4_quota_enable:6444: comm syz.0.1338: inode #17152: comm syz.0.1338: iget: illegal inode # [ 119.502383][ T7415] EXT4-fs (loop0): Remounting filesystem read-only [ 119.519684][ T7415] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.1338: Bad quota inode: 17152, type: 2 [ 119.543551][ T7415] EXT4-fs (loop0): Remounting filesystem read-only [ 119.561746][ T7415] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 119.569092][ T4900] usb 2-1: USB disconnect, device number 7 [ 119.583733][ T7415] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 119.597257][ T7420] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 119.610567][ T7415] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,noauto_da_alloc,errors=remount-ro,jqfmt=vfsv0,discard,usrjquota=,grpquota,nojournal_checksum,. Quota mode: writeback. [ 119.644718][ T5799] usb 4-1: Using ep0 maxpacket: 32 [ 119.672799][ T7415] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 119.692779][ T7415] /dev/loop0: Can't open blockdev [ 119.765007][ T5799] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 119.773190][ T5799] usb 4-1: config 0 has no interface number 0 [ 119.801352][ T5799] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 119.824211][ T5799] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 119.927814][ T7424] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1343: attempt to clear invalid blocks 2 len 1 [ 119.961814][ T7413] XFS (loop2): Mounting V5 Filesystem [ 119.971879][ T7424] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 119.987720][ T5799] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 120.004980][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.022634][ T7424] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1343: invalid indirect mapped block 1819239214 (level 0) [ 120.036860][ T5799] usb 4-1: Product: syz [ 120.041143][ T5799] usb 4-1: Manufacturer: syz [ 120.090357][ T5799] usb 4-1: SerialNumber: syz [ 120.109873][ T7424] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1343: invalid indirect mapped block 1819239214 (level 1) [ 120.125064][ T5799] usb 4-1: config 0 descriptor?? [ 120.132272][ T7413] XFS (loop2): Ending clean mount [ 120.153950][ T7424] EXT4-fs (loop4): 1 truncate cleaned up [ 120.164922][ T7424] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 120.200328][ T4185] XFS (loop2): Unmounting Filesystem [ 120.388635][ T5799] radio-si470x 4-1:0.35: this is not a si470x device. [ 120.518498][ T7462] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 120.534123][ T7462] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1357'. [ 120.564075][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.594849][ T5799] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 120.641090][ T7471] dlm: dev_write: no op 0 0 [ 120.647442][ T5799] usb 4-1: USB disconnect, device number 6 [ 120.803867][ T7485] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.1367'. [ 120.813854][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 120.883201][ T7492] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1371'. [ 120.981320][ T13] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.003187][ T13] usb 1-1: config 0 has no interface number 0 [ 121.018421][ T13] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 121.044485][ T13] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.068733][ T13] usb 1-1: config 0 interface 41 has no altsetting 0 [ 121.129046][ T7514] MTD: Couldn't look up 'mtd0/file0': -2 [ 121.178067][ T7518] set_capacity_and_notify: 2 callbacks suppressed [ 121.178082][ T7518] loop4: detected capacity change from 0 to 512 [ 121.274836][ T13] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 121.283922][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.315477][ T13] usb 1-1: Product: syz [ 121.319796][ T13] usb 1-1: Manufacturer: syz [ 121.320734][ T7518] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.324469][ T13] usb 1-1: SerialNumber: syz [ 121.348991][ T26] audit: type=1400 audit(1792667060.332:12): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=7531 comm="syz.3.1389" [ 121.385067][ T7518] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.405388][ T13] usb 1-1: config 0 descriptor?? [ 121.426566][ T7540] mmap: syz.1.1394 (7540) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 121.475114][ T7450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.482500][ T7450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.547662][ T7549] loop3: detected capacity change from 0 to 512 [ 121.678360][ T7549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.697324][ T7549] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.754967][ T7450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.755102][ T7450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.859783][ T7572] netlink: 'syz.4.1409': attribute type 13 has an invalid length. [ 121.960250][ T7574] loop3: detected capacity change from 0 to 512 [ 121.995118][ T13] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 122.023825][ T13] usb 1-1: USB disconnect, device number 8 [ 122.048359][ T7574] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 122.085398][ T7574] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1406: corrupted in-inode xattr [ 122.103952][ T7574] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1406: couldn't read orphan inode 15 (err -117) [ 122.116855][ T7574] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 122.148609][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.239809][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 122.273921][ T7593] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 122.282190][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'. [ 122.297918][ T7593] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 122.334056][ T7597] loop1: detected capacity change from 0 to 8 [ 122.354709][ T7599] comedi comedi4: commands at RT priority not supported in this driver [ 122.401963][ T7597] Filesystem uses "unknown" compression. This is not supported [ 122.471377][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1424'. [ 122.679611][ T13] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 122.698786][ T6437] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 123.024947][ T6437] usb 2-1: not running at top speed; connect to a high speed hub [ 123.056059][ T1345] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.074869][ T13] usb 3-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 123.105051][ T6437] usb 2-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 123.118149][ T6437] usb 2-1: config 1 interface 1 has no altsetting 0 [ 123.128601][ T6437] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 123.140024][ T6437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.176262][ T13] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 123.187299][ T13] usb 3-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 123.195878][ T13] usb 3-1: Product: syz [ 123.207450][ T6437] usb 2-1: Found UVC 1.00 device (046d:0825) [ 123.208421][ T7656] netlink: 'syz.3.1449': attribute type 3 has an invalid length. [ 123.220636][ T6437] usb 2-1: selecting invalid altsetting 0 [ 123.222609][ T7601] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 123.228759][ T7656] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 123.267496][ T13] usbhid 3-1:15.0: fixing wrong optional hid class descriptors count [ 123.282095][ T13] usbhid 3-1:15.0: can't add hid device: -22 [ 123.288493][ T13] usbhid: probe of 3-1:15.0 failed with error -22 [ 123.424950][ T6437] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 123.444876][ T6437] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 123.453976][ T6437] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 123.463822][ T6437] usb 2-1: selecting invalid altsetting 0 [ 123.472593][ T6437] usb 2-1: selecting invalid altsetting 0 [ 123.479828][ T6437] usbtest: probe of 2-1:1.1 failed with error -22 [ 123.499093][ T6437] usb 2-1: USB disconnect, device number 8 [ 123.539566][ T5797] usb 3-1: USB disconnect, device number 5 [ 123.635051][ T1345] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 123.649370][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.660058][ T1345] usb 1-1: Product: syz [ 123.664262][ T1345] usb 1-1: Manufacturer: syz [ 123.674338][ T1345] usb 1-1: SerialNumber: syz [ 123.683709][ T1345] usb 1-1: config 0 descriptor?? [ 123.710007][ T7670] loop3: detected capacity change from 0 to 32768 [ 123.746135][ T1345] hub 1-1:0.0: bad descriptor, ignoring hub [ 123.752132][ T1345] hub: probe of 1-1:0.0 failed with error -5 [ 123.764079][ T1345] f81232 1-1:0.0: f81534a converter detected [ 123.797940][ T7670] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 123.823172][ T7670] XFS (loop3): Unmounting Filesystem [ 123.993186][ T1345] usb 1-1: f81534a converter now attached to ttyUSB0 [ 124.044331][ T7683] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 124.051874][ T7683] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffff,4) [ 124.064858][ T7683] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 124.191137][ T7691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1462'. [ 124.235357][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 124.245868][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 124.274839][ T4901] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 124.309100][ T7697] affs: No valid root block on device nbd2 [ 124.354498][ T1345] usb 1-1: USB disconnect, device number 9 [ 124.365855][ T1345] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 124.374214][ T1345] f81232 1-1:0.0: device disconnected [ 124.486138][ T7711] xt_addrtype: ipv6 does not support BROADCAST matching [ 124.609736][ T7723] netlink: 'syz.3.1478': attribute type 10 has an invalid length. [ 124.671760][ T7723] team0: Device hsr_slave_0 failed to register rx_handler [ 124.694783][ T4901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.726410][ T7723] syz.3.1478 (7723) used greatest stack depth: 19632 bytes left [ 124.750139][ T4901] usb 2-1: not running at top speed; connect to a high speed hub [ 124.765021][ T7729] xt_TCPMSS: Only works on TCP SYN packets [ 124.806579][ T7733] loop0: detected capacity change from 0 to 24 [ 124.826526][ T7733] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 124.867945][ T4901] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 124.885842][ T7733] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 124.905487][ T4901] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 124.971100][ T7739] loop2: detected capacity change from 0 to 4096 [ 125.153613][ T7751] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1491'. [ 125.185155][ T4901] usb 2-1: string descriptor 0 read error: -22 [ 125.191451][ T4901] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 125.204388][ T4901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.505812][ T4901] snd-usb-6fire 2-1:2.0: unknown device firmware state received from device: [ 125.505836][ T4901] 00 00 00 00 00 00 00 00 [ 125.505930][ T4901] snd-usb-6fire: probe of 2-1:2.0 failed with error -5 [ 125.731917][ T1345] usb 2-1: USB disconnect, device number 9 [ 126.078387][ T7822] netlink: 192444 bytes leftover after parsing attributes in process `syz.2.1526'. [ 126.098946][ T7822] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 126.144235][ T7823] loop4: detected capacity change from 0 to 4096 [ 126.240526][ T7829] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.297412][ T7835] CIFS: Invalid mount helper version specified [ 126.333922][ T7836] loop3: detected capacity change from 0 to 736 [ 126.635638][ T7854] ecryptfs_parse_options: eCryptfs: unrecognized option [ecry/_cipher=aes] [ 126.756641][ T7865] tc_dump_action: action bad kind [ 126.876726][ T7854] Could not find key with description: [syz ] [ 126.912007][ T7854] process_request_key_err: No key [ 126.920392][ T7854] Could not find valid key in user session keyring for sig specified in mount option: [syz ] [ 126.923199][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 126.953869][ T7854] One or more global auth toks could not properly register; rc = [-2] [ 126.982746][ T7854] Error parsing options; rc = [-2] [ 127.179454][ T7904] loop1: detected capacity change from 0 to 8 [ 127.313242][ T7904] SQUASHFS error: Unable to read directory block [631:72] [ 127.354798][ T6437] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.381103][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1572'. [ 127.474530][ T7927] program syz.1.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.643502][ T7944] netlink: 'syz.0.1584': attribute type 1 has an invalid length. [ 127.651308][ T7943] loop4: detected capacity change from 0 to 512 [ 127.674993][ T7944] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1584'. [ 127.720303][ T7943] EXT4-fs (loop4): 1 truncate cleaned up [ 127.732192][ T7943] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 127.735281][ T6437] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 127.814006][ T6437] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.856166][ T6437] usb 4-1: config 220 has no interface number 2 [ 127.880564][ T6437] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.924055][ T6437] usb 4-1: config 220 interface 0 has no altsetting 0 [ 127.931351][ T6437] usb 4-1: config 220 interface 76 has no altsetting 0 [ 127.951930][ T6437] usb 4-1: config 220 interface 1 has no altsetting 0 [ 128.135113][ T6437] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.155480][ T6437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.175103][ T6437] usb 4-1: Product: syz [ 128.179326][ T6437] usb 4-1: Manufacturer: syz [ 128.201451][ T6437] usb 4-1: SerialNumber: syz [ 128.585864][ T6437] usb 4-1: selecting invalid altsetting 0 [ 128.592121][ T6437] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 128.614924][ T6437] usb 4-1: No valid video chain found. [ 128.696251][ T6437] usb 4-1: selecting invalid altsetting 0 [ 128.702041][ T6437] usbtest: probe of 4-1:220.1 failed with error -22 [ 128.735774][ T6437] usb 4-1: USB disconnect, device number 7 [ 128.794849][ T1345] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.878966][ T8028] loop4: detected capacity change from 0 to 4096 [ 129.107786][ T8048] sp0: Synchronizing with TNC [ 129.203431][ T8050] netlink: 'syz.3.1629': attribute type 3 has an invalid length. [ 129.211720][ T8050] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1629'. [ 129.317626][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 129.404070][ T8061] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 129.437790][ T1345] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 129.454745][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 129.469758][ T1345] usb 1-1: Product: syz [ 129.498692][ T1345] usb 1-1: Manufacturer: syz [ 129.509617][ T1345] usb 1-1: SerialNumber: syz [ 129.537254][ T1345] usb 1-1: config 0 descriptor?? [ 129.580618][ T1345] usb 1-1: selecting invalid altsetting 1 [ 129.592771][ T1345] comedi comedi5: could not switch to alternate setting 1 [ 129.604712][ T1345] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 129.838996][ T1345] usb 1-1: USB disconnect, device number 10 [ 129.857926][ T8095] xt_hl: Unknown Hop Limit match mode: 4 [ 129.982349][ T8094] loop3: detected capacity change from 0 to 4096 [ 130.016603][ T8107] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 130.043825][ T8109] netlink: 'syz.4.1657': attribute type 3 has an invalid length. [ 130.060378][ T8111] tmpfs: Bad value for 'uid' [ 130.066768][ T8109] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1657'. [ 130.137872][ T8094] ntfs3: loop3: Failed to load $Extend. [ 130.166384][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.195741][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.215144][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.234767][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.258619][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.274091][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.286900][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.298281][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.457600][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 130.512698][ T8133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1671'. [ 130.544404][ T8135] rxe_eth0 speed is unknown, defaulting to 1000 [ 130.586869][ T8143] netlink: 'syz.2.1672': attribute type 13 has an invalid length. [ 130.601484][ T8143] netlink: 'syz.2.1672': attribute type 12 has an invalid length. [ 131.253232][ T8194] netlink: 'syz.0.1698': attribute type 11 has an invalid length. [ 131.302238][ T8197] loop2: detected capacity change from 0 to 256 [ 131.392241][ T8197] FAT-fs (loop2): Directory bread(block 64) failed [ 131.444873][ T8197] FAT-fs (loop2): Directory bread(block 65) failed [ 131.451532][ T8197] FAT-fs (loop2): Directory bread(block 66) failed [ 131.465541][ T8197] FAT-fs (loop2): Directory bread(block 67) failed [ 131.472297][ T8197] FAT-fs (loop2): Directory bread(block 68) failed [ 131.494076][ T8197] FAT-fs (loop2): Directory bread(block 69) failed [ 131.519633][ T8197] FAT-fs (loop2): Directory bread(block 70) failed [ 131.563392][ T8197] FAT-fs (loop2): Directory bread(block 71) failed [ 131.582536][ T8197] FAT-fs (loop2): Directory bread(block 72) failed [ 131.591063][ T8197] FAT-fs (loop2): Directory bread(block 73) failed [ 131.685096][ T8221] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.955796][ T8241] loop4: detected capacity change from 0 to 256 [ 132.789016][ T8298] qrtr: Invalid version 0 [ 132.931270][ T8308] netlink: 'syz.1.1755': attribute type 2 has an invalid length. [ 132.942163][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.942261][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.977181][ T8311] netlink: 'syz.0.1756': attribute type 1 has an invalid length. [ 133.229151][ T8332] loop4: detected capacity change from 0 to 1024 [ 133.423365][ T9] hfsplus: b-tree write err: -5, ino 25 [ 133.432986][ T9] hfsplus: b-tree write err: -5, ino 4 [ 133.463931][ T9] hfsplus: b-tree write err: -5, ino 2 [ 133.477564][ T8346] unsupported nlmsg_type 40 [ 133.494818][ T1345] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 133.597985][ T8354] netlink: 'syz.1.1778': attribute type 8 has an invalid length. [ 133.645456][ T8354] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1778'. [ 133.763349][ T26] audit: type=1326 audit(1792667072.742:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff46f960559 code=0x0 [ 133.911915][ T8376] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 133.932258][ T8376] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 134.072761][ T1345] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 134.100150][ T1345] usb 1-1: config 1 interface 0 has no altsetting 0 [ 134.421363][ T1345] usb 1-1: string descriptor 0 read error: -22 [ 134.431422][ T1345] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 134.487191][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.514728][ T6437] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.555018][ T8330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.754776][ T6437] usb 3-1: Using ep0 maxpacket: 32 [ 134.809155][ T8424] loop4: detected capacity change from 0 to 512 [ 134.884905][ T6437] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 134.893033][ T6437] usb 3-1: config 0 has no interface number 0 [ 134.904987][ T6437] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 134.910388][ T1345] usbhid 1-1:1.0: can't add hid device: -71 [ 134.924696][ T6437] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 134.935830][ T1345] usbhid: probe of 1-1:1.0 failed with error -71 [ 134.971849][ T1345] usb 1-1: USB disconnect, device number 11 [ 134.985459][ T8424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.034916][ T8424] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.049601][ T8424] EXT4-fs warning (device loop4): verify_group_input:165: Last group not full [ 135.104819][ T6437] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 135.113991][ T6437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.139249][ T8435] loop1: detected capacity change from 0 to 256 [ 135.154825][ T6437] usb 3-1: Product: syz [ 135.159043][ T6437] usb 3-1: Manufacturer: syz [ 135.163860][ T6437] usb 3-1: SerialNumber: syz [ 135.187158][ T6437] usb 3-1: config 0 descriptor?? [ 135.411232][ T8441] syz.0.1820 (8441): attempted to duplicate a private mapping with mremap. This is not supported. [ 135.452337][ T8443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1821'. [ 135.468646][ T6437] radio-si470x 3-1:0.35: this is not a si470x device. [ 135.580188][ T8428] loop3: detected capacity change from 0 to 32768 [ 135.676813][ T6437] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 135.737397][ T6437] usb 3-1: USB disconnect, device number 6 [ 135.839548][ T8428] XFS (loop3): Mounting V5 Filesystem [ 135.861167][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 135.925691][ T8466] loop4: detected capacity change from 0 to 256 [ 136.002827][ T8466] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 136.089973][ T8469] loop1: detected capacity change from 0 to 4096 [ 136.137336][ T8428] XFS (loop3): Ending clean mount [ 136.157595][ T8428] XFS (loop3): Quotacheck needed: Please wait. [ 136.169118][ T8469] EXT4-fs (loop1): Ignoring removed orlov option [ 136.217167][ T8469] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d2,auto_da_alloc,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 136.316608][ T8447] loop0: detected capacity change from 0 to 32768 [ 136.346791][ T8428] XFS (loop3): Quotacheck: Done. [ 136.365406][ T8447] XFS: ikeep mount option is deprecated. [ 136.464381][ T8447] XFS (loop0): Mounting V5 Filesystem [ 136.495466][ T4198] XFS (loop3): Unmounting Filesystem [ 136.680767][ T8447] XFS (loop0): Ending clean mount [ 136.759364][ T4191] XFS (loop0): Unmounting Filesystem [ 137.292692][ T8530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1853'. [ 137.304965][ T8529] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1855'. [ 137.339734][ T8534] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1857'. [ 137.373110][ T8536] loop0: detected capacity change from 0 to 512 [ 137.428186][ T8540] xt_connbytes: Forcing CT accounting to be enabled [ 137.508143][ T8536] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.544975][ T8536] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.750310][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 137.770796][ T8559] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 137.857738][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1871'. [ 137.891739][ T8563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1871'. [ 138.070771][ T8575] loop3: detected capacity change from 0 to 64 [ 138.147686][ T26] audit: type=1800 audit(1792667077.132:14): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1876" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 138.530669][ T8608] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 138.953166][ T8646] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1911'. [ 139.031515][ T8648] loop1: detected capacity change from 0 to 4096 [ 139.068803][ T13] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 139.167159][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 139.178877][ T8648] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 139.213757][ T8648] ntfs3: loop1: Failed to load $Extend. [ 139.704866][ T13] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 139.713996][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.734847][ T13] usb 4-1: Product: syz [ 139.739072][ T13] usb 4-1: Manufacturer: syz [ 139.743775][ T13] usb 4-1: SerialNumber: syz [ 139.770068][ T13] usb 4-1: config 0 descriptor?? [ 139.827069][ T13] usb 4-1: selecting invalid altsetting 1 [ 139.832953][ T13] technisat-usb2: could not set alternate setting to 0 [ 140.054963][ T13] technisat-usb2: firmware version: 0.0 [ 140.060652][ T13] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 140.095367][ T8676] loop2: detected capacity change from 0 to 1024 [ 140.167930][ T8678] netlink: 'syz.0.1928': attribute type 4 has an invalid length. [ 140.327333][ T13] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 140.342112][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 140.348565][ T13] usb 4-1: USB disconnect, device number 8 [ 140.418056][ T8693] loop4: detected capacity change from 0 to 128 [ 140.432457][ T8695] device geneve1 entered promiscuous mode [ 140.462393][ T8693] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 140.500015][ T8693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.562615][ T8697] loop2: detected capacity change from 0 to 256 [ 140.608069][ T8697] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 141.021424][ T8733] x_tables: unsorted entry at hook 3 [ 141.074175][ T8725] nvme_fabrics: missing parameter 'nqn=%s' [ 141.204291][ T8748] xt_connbytes: Forcing CT accounting to be enabled [ 141.562532][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1975'. [ 141.576455][ T8779] loop4: detected capacity change from 0 to 8 [ 141.727794][ T8788] netlink: 'syz.1.1979': attribute type 4 has an invalid length. [ 141.908258][ T8744] loop2: detected capacity change from 0 to 32768 [ 141.956875][ T8744] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1959 (8744) [ 142.032630][ T8744] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 142.069861][ T8744] BTRFS info (device loop2): enabling auto defrag [ 142.118452][ T8744] BTRFS info (device loop2): force clearing of disk cache [ 142.142902][ T8744] BTRFS info (device loop2): ignoring data csums [ 142.160857][ T8744] BTRFS info (device loop2): turning on async discard [ 142.169005][ T8744] BTRFS info (device loop2): setting nodatacow, compression disabled [ 142.193371][ T8744] BTRFS info (device loop2): turning off async discard [ 142.217312][ T8744] BTRFS info (device loop2): disabling free space tree [ 142.242307][ T8744] BTRFS info (device loop2): has skinny extents [ 142.270590][ T8812] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 142.411927][ T8843] ip6t_srh: unknown srh invflags 4000 [ 142.578601][ T8867] xt_TCPMSS: Only works on TCP SYN packets [ 142.674700][ T6437] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.924857][ T6437] usb 4-1: Using ep0 maxpacket: 32 [ 143.044966][ T6437] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 143.058497][ T8894] dlm: dev_write: no op 0 74000000000000 [ 143.067691][ T6437] usb 4-1: config 0 has no interface number 0 [ 143.073845][ T6437] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 143.255142][ T6437] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 143.268887][ T6437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.300911][ T6437] usb 4-1: Product: syz [ 143.319443][ T6437] usb 4-1: Manufacturer: syz [ 143.342984][ T6437] usb 4-1: SerialNumber: syz [ 143.366630][ T6437] usb 4-1: config 0 descriptor?? [ 143.395261][ T8842] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.404116][ T8920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2032'. [ 143.413579][ T7] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 143.426426][ T8919] netlink: 'syz.1.2033': attribute type 13 has an invalid length. [ 143.619060][ T8842] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.805098][ T7] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 143.813828][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.834564][ T7] usb 1-1: config 0 has no interface number 0 [ 143.840860][ T7] usb 1-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.874844][ T6437] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 143.895783][ T6437] asix: probe of 4-1:0.188 failed with error -71 [ 143.936459][ T6437] usb 4-1: USB disconnect, device number 9 [ 144.074489][ T8962] device geneve1 entered promiscuous mode [ 144.085073][ T7] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 144.094183][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.124715][ T7] usb 1-1: Product: syz [ 144.128964][ T7] usb 1-1: Manufacturer: syz [ 144.145441][ T7] usb 1-1: SerialNumber: syz [ 144.165841][ T7] usb 1-1: config 0 descriptor?? [ 144.236062][ T7] asix: probe of 1-1:0.251 failed with error -22 [ 144.456905][ T7] usb 1-1: USB disconnect, device number 12 [ 144.472941][ T8987] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2061'. [ 144.567492][ T8990] device gtp0 entered promiscuous mode [ 144.917412][ T9020] ax25_connect(): syz.1.2075 uses autobind, please contact jreuter@yaina.de [ 145.109064][ T9032] loop0: detected capacity change from 0 to 64 [ 145.128417][ T9036] netlink: 'syz.4.2083': attribute type 3 has an invalid length. [ 145.179661][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2085'. [ 145.363320][ T9049] loop3: detected capacity change from 0 to 512 [ 145.412099][ T9006] loop2: detected capacity change from 0 to 32768 [ 145.445456][ T9053] loop0: detected capacity change from 0 to 128 [ 145.463355][ T9049] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.499668][ T9049] EXT4-fs (loop3): 1 truncate cleaned up [ 145.573927][ T9049] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 145.827798][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.846829][ T9072] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2102'. [ 145.869025][ T9072] netlink: 'syz.4.2102': attribute type 1 has an invalid length. [ 145.912251][ T9072] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2102'. [ 145.932895][ T9072] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 146.255281][ T7] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 146.274498][ T7] usb 1-1: config 220 has an invalid interface number: 218 but max is 183 [ 146.293201][ T7] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 146.323371][ T7] usb 1-1: config 220 has no interface number 0 [ 146.344742][ T7] usb 1-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 146.374828][ T7] usb 1-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 146.381723][ T9094] loop3: detected capacity change from 0 to 8192 [ 146.399296][ T7] usb 1-1: config 220 interface 218 has no altsetting 0 [ 146.414480][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 146.427348][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.492134][ T9094] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 146.544938][ T9094] REISERFS (device loop3): using ordered data mode [ 146.551869][ T9094] reiserfs: using flush barriers [ 146.612419][ T9094] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.659642][ T9094] REISERFS (device loop3): checking transaction log (loop3) [ 146.691742][ T9094] REISERFS (device loop3): Using r5 hash to sort names [ 146.705630][ T9094] REISERFS (device loop3): using 3.5.x disk format [ 146.714422][ T9094] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 146.784928][ T7] usb 1-1: string descriptor 0 read error: -71 [ 146.804036][ T7] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 146.842613][ T7] gspca_sn9c2028: read1 error -71 [ 146.887734][ T7] gspca_sn9c2028: read1 error -71 [ 146.914807][ T7] gspca_sn9c2028: read1 error -71 [ 146.920118][ T7] sn9c2028: probe of 1-1:220.218 failed with error -71 [ 146.953293][ T7] usb 1-1: USB disconnect, device number 13 [ 146.976847][ T9132] netlink: 212400 bytes leftover after parsing attributes in process `syz.4.2132'. [ 147.146597][ T9138] printk: syz.2.2135 (9138): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 147.210653][ T9122] loop1: detected capacity change from 0 to 32768 [ 147.267124][ T9122] XFS: ikeep mount option is deprecated. [ 147.341826][ T9154] loop2: detected capacity change from 0 to 256 [ 147.403075][ T9154] exfat: Deprecated parameter 'namecase' [ 147.415268][ T9154] exfat: Deprecated parameter 'namecase' [ 147.420962][ T9154] exfat: Deprecated parameter 'namecase' [ 147.450349][ T9154] exfat: Deprecated parameter 'utf8' [ 147.450391][ T9122] XFS (loop1): Mounting V5 Filesystem [ 147.474589][ T9154] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 147.655591][ T9122] XFS (loop1): Ending clean mount [ 147.834653][ T4186] XFS (loop1): Unmounting Filesystem [ 147.947475][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2159'. [ 147.970419][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2159'. [ 147.999255][ T9190] netlink: 'syz.0.2158': attribute type 5 has an invalid length. [ 148.111400][ T9204] xt_nat: multiple ranges no longer supported [ 148.298146][ T9203] loop0: detected capacity change from 0 to 4096 [ 148.441761][ T9203] ntfs3: loop0: Failed to load $Extend. [ 148.454479][ T9226] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by ""[9226] [ 148.609090][ T9234] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2178'. [ 148.771132][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2183'. [ 148.815592][ T9251] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 148.977827][ T9266] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2194'. [ 149.189617][ T9283] loop4: detected capacity change from 0 to 512 [ 149.243528][ T9289] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.288804][ T9283] EXT4-fs (loop4): inline encryption not supported [ 149.316402][ T9283] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 149.316402][ T9283] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 149.316402][ T9283] [ 149.370219][ T9283] EXT4-fs (loop4): Ignoring removed bh option [ 149.402619][ T151] block nbd2: Attempted send on invalid socket [ 149.410572][ T151] blk_update_request: I/O error, dev nbd2, sector 8388608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.424876][ T151] block nbd2: Attempted send on invalid socket [ 149.431077][ T151] blk_update_request: I/O error, dev nbd2, sector 8388608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.444766][ T151] Buffer I/O error on dev nbd2p4, logical block 1048560, async page read [ 149.455128][ T9283] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.492934][ T9283] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.556773][ T4179] udevd[4179]: inotify_add_watch(7, /dev/nbd2p4, 10) failed: No such file or directory [ 149.580001][ T9283] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 149.606390][ T9283] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2202: invalid indirect mapped block 2683928664 (level 1) [ 149.643725][ T9283] EXT4-fs (loop4): 1 truncate cleaned up [ 149.648668][ T9315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2217'. [ 149.650860][ T9283] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,max_batch_time=0x0000000000000008,nodiscard,inlinecrypt,usrjquota=.min_batch_time=0x0000000000001000,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,bh,test_dummy_encryption,,,errors=continue. Quota mode: writeback. [ 149.690183][ T9315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.896543][ T9337] loop4: detected capacity change from 0 to 24 [ 149.914893][ T8879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.923252][ T9333] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 149.973438][ T9337] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 150.037843][ T9337] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 150.105484][ T9337] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 150.174765][ T8879] usb 4-1: Using ep0 maxpacket: 32 [ 150.198074][ T9351] loop2: detected capacity change from 0 to 1764 [ 150.296237][ T8879] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.304340][ T8879] usb 4-1: config 0 has no interface number 0 [ 150.339074][ T9363] loop1: detected capacity change from 0 to 512 [ 150.398653][ T9363] EXT4-fs (loop1): Ignoring removed oldalloc option [ 150.423276][ T9363] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.452163][ T9363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 150.504972][ T8879] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 150.514095][ T8879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.516044][ T9363] EXT4-fs (loop1): orphan cleanup on readonly fs [ 150.529414][ T8879] usb 4-1: Product: syz [ 150.529438][ T8879] usb 4-1: Manufacturer: syz [ 150.529455][ T8879] usb 4-1: SerialNumber: syz [ 150.538443][ T8879] usb 4-1: config 0 descriptor?? [ 150.584464][ T9363] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.2241: bad orphan inode 267 [ 150.591341][ T8879] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 150.603637][ T8879] usb 4-1: selecting invalid altsetting 1 [ 150.609708][ T8879] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 150.622403][ T8879] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.633204][ T8879] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 150.648376][ T8879] usb 4-1: media controller created [ 150.660897][ T9363] EXT4-fs (loop1): Remounting filesystem read-only [ 150.681599][ T9363] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 150.686335][ T8879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.779607][ T9363] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2241: dx entry: limit 0 != root limit 125 [ 150.797757][ T9377] loop2: detected capacity change from 0 to 4096 [ 150.823583][ T9363] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2241: Corrupt directory, running e2fsck is recommended [ 150.824817][ T8879] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 150.861044][ T8879] zl10353_read_register: readreg error (reg=127, ret==-71) [ 150.909870][ T9377] ntfs3: loop2: Failed to load $Extend. [ 150.916026][ T8879] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 150.976128][ T9391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.037617][ T8879] usb 4-1: USB disconnect, device number 10 [ 151.360650][ T9412] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2263'. [ 151.396163][ T9414] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2264'. [ 151.446609][ T9414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2264'. [ 151.982197][ T9456] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2285'. [ 152.084207][ T9464] loop1: detected capacity change from 0 to 128 [ 152.097861][ T9400] loop0: detected capacity change from 0 to 40427 [ 152.163322][ T9400] F2FS-fs (loop0): invalid crc value [ 152.236442][ T9464] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 152.250812][ T9400] F2FS-fs (loop0): Found nat_bits in checkpoint [ 152.269946][ T9464] hpfs: filesystem error: improperly stopped [ 152.289689][ T9464] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 152.314853][ T9464] hpfs: You really don't want any checks? You are crazy... [ 152.322134][ T9464] hpfs: Code page index out of array [ 152.365530][ T9464] hpfs: code page support is disabled [ 152.392180][ T9464] hpfs: hpfs_map_4sectors(): unaligned read [ 152.434237][ T9464] hpfs: hpfs_map_4sectors(): unaligned read [ 152.447802][ T9400] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 152.453976][ T9464] hpfs: filesystem error: unable to find root dir [ 152.648019][ T9500] netlink: 'syz.4.2307': attribute type 21 has an invalid length. [ 152.688002][ T9500] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2307'. [ 152.700762][ T9500] netlink: 'syz.4.2307': attribute type 5 has an invalid length. [ 152.710617][ T9500] netlink: 'syz.4.2307': attribute type 6 has an invalid length. [ 152.737341][ T9500] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2307'. [ 152.980398][ T4901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.255041][ T4901] usb 2-1: Using ep0 maxpacket: 8 [ 153.374544][ T9550] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 153.417503][ T5670] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 153.426785][ T4901] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 153.451670][ T4901] usb 2-1: config 0 has no interface number 0 [ 153.472780][ T4901] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 238, setting to 64 [ 153.505441][ T4901] usb 2-1: config 0 interface 200 has no altsetting 0 [ 153.545228][ T9559] sctp: [Deprecated]: syz.0.2334 (pid 9559) Use of int in max_burst socket option deprecated. [ 153.545228][ T9559] Use struct sctp_assoc_value instead [ 153.707795][ T4901] usb 2-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 153.732152][ T4901] usb 2-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 153.759590][ T4901] usb 2-1: Product: syz [ 153.774246][ T4901] usb 2-1: Manufacturer: syz [ 153.775854][ T9524] loop4: detected capacity change from 0 to 32768 [ 153.784866][ T4901] usb 2-1: SerialNumber: syz [ 153.815609][ T4901] usb 2-1: config 0 descriptor?? [ 153.887848][ T9567] loop3: detected capacity change from 0 to 4096 [ 153.941657][ T9567] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 154.151279][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 154.167250][ T4901] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 154.194164][ T4901] usb 2-1: USB disconnect, device number 10 [ 154.754414][ T9606] loop1: detected capacity change from 0 to 2048 [ 154.853215][ T9618] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.916114][ T9606] attempt to access beyond end of device [ 154.916114][ T9606] loop1: rw=0, want=2198922592330, limit=2048 [ 154.964592][ T9606] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 155.028968][ T9628] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 155.241007][ T9648] xt_socket: unknown flags 0xc [ 155.266281][ T9649] loop0: detected capacity change from 0 to 512 [ 155.359728][ T9649] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 155.365574][ T9655] loop2: detected capacity change from 0 to 512 [ 155.387935][ T9655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.420018][ T9649] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.463020][ T9655] EXT4-fs (loop2): 1 truncate cleaned up [ 155.464293][ T9649] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0). [ 155.472690][ T9655] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 155.494961][ T9649] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.555518][ T9649] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 155.635492][ T9649] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2378: bg 0: block 40: padding at end of block bitmap is not set [ 155.636060][ T9655] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #2: block 13: comm syz.2.2381: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1 [ 155.684538][ T9680] loop3: detected capacity change from 0 to 16 [ 155.701288][ T9649] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 155.734395][ T9655] EXT4-fs (loop2): Remounting filesystem read-only [ 155.737508][ T9680] erofs: (device loop3): mounted with root inode @ nid 36. [ 155.763789][ T9655] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #2: comm syz.2.2381: directory missing '..' [ 155.767775][ T9649] EXT4-fs (loop0): 1 truncate cleaned up [ 155.784122][ T9649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.789648][ T9682] loop4: detected capacity change from 0 to 2048 [ 155.822839][ T9680] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 1862 in[58, 4038] out[2639] [ 155.864885][ T9680] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 155.947947][ T9682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.010485][ T9684] CIFS: Attempting to mount \\127.0.0.1\test [ 156.022677][ T9684] CIFS: VFS: Error connecting to socket. Aborting operation. [ 156.088933][ T9684] CIFS: VFS: cifs_mount failed w/return code = -111 [ 156.369714][ T9704] loop4: detected capacity change from 0 to 64 [ 156.434695][ T4901] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.437380][ T9676] loop1: detected capacity change from 0 to 32768 [ 156.478792][ T9676] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2390 (9676) [ 156.573344][ T9676] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 156.628203][ T9676] BTRFS info (device loop1): enabling auto defrag [ 156.643445][ T9676] BTRFS info (device loop1): force clearing of disk cache [ 156.663920][ T9676] BTRFS info (device loop1): ignoring data csums [ 156.694347][ T9676] BTRFS info (device loop1): turning on async discard [ 156.705096][ T4901] usb 3-1: Using ep0 maxpacket: 8 [ 156.705512][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2410'. [ 156.724801][ T9676] BTRFS info (device loop1): setting nodatacow, compression disabled [ 156.733060][ T9676] BTRFS info (device loop1): turning off async discard [ 156.752208][ T9676] BTRFS info (device loop1): disabling free space tree [ 156.773391][ T9723] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 156.784718][ T9676] BTRFS info (device loop1): has skinny extents [ 156.885005][ T4901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.894900][ T5814] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.985064][ T4901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 156.997520][ T4901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.007903][ T4901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 157.019878][ T4901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 157.032007][ T4901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 157.052022][ T4901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 157.062234][ T4901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 157.272569][ T4901] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 157.286923][ T4901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.298621][ T4901] usb 3-1: Product: syz [ 157.308362][ T4901] usb 3-1: Manufacturer: syz [ 157.318504][ T4901] usb 3-1: SerialNumber: syz [ 157.365805][ T4901] usb 3-1: config 0 descriptor?? [ 157.379716][ T9770] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 157.395512][ T9686] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.419907][ T5814] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 157.433083][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.442675][ T5814] usb 4-1: Product: syz [ 157.447395][ T5814] usb 4-1: Manufacturer: syz [ 157.452104][ T5814] usb 4-1: SerialNumber: syz [ 157.472270][ T5814] usb 4-1: config 0 descriptor?? [ 157.525964][ T5814] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 157.580791][ T9788] netlink: 'syz.4.2429': attribute type 4 has an invalid length. [ 157.597451][ T4901] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 157.644869][ T4901] usb 3-1: USB disconnect, device number 7 [ 157.866585][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2436'. [ 157.882415][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 157.909175][ T9796] udevd[9796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.940834][ T7] usb 4-1: USB disconnect, device number 11 [ 158.009154][ T9831] x_tables: unsorted entry at hook 3 [ 158.329288][ T9859] loop1: detected capacity change from 0 to 2048 [ 158.421790][ T9859] loop1: p1 < > p3 p4 [ 158.421790][ T9859] p4: [ 158.445802][ T9859] loop1: p3 start 458752 is beyond EOD, truncated [ 158.452376][ T9859] loop1: p4 size 722688 extends beyond EOD, truncated [ 158.462206][ T9859] loop1: p5 start 262464109 is beyond EOD, truncated [ 158.487560][ T9859] loop1: p6 size 2304 extends beyond EOD, truncated [ 158.670248][ T9884] netlink: 'syz.2.2465': attribute type 11 has an invalid length. [ 158.761169][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'. [ 158.832227][ T9796] udevd[9796]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 158.846678][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 158.871345][ T9795] udevd[9795]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 158.969838][ T9910] CIFS mount error: No usable UNC path provided in device string! [ 158.969838][ T9910] [ 159.024564][ T9910] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.044802][ T5814] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 159.424982][ T5814] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 159.444117][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.467359][ T5814] usb 5-1: config 0 descriptor?? [ 159.495488][ T9887] loop1: detected capacity change from 0 to 40427 [ 159.516793][ T5814] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 159.544321][ T9887] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 159.587579][ T9887] F2FS-fs (loop1): invalid crc value [ 159.612156][ T9887] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.706295][ T9887] F2FS-fs (loop1): recover fsync data on readonly fs [ 159.729969][ T9887] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 159.744955][ T9887] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 159.772584][ T9887] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 159.955423][ T5814] gp8psk: usb in 137 operation failed. [ 159.961559][ T5814] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 160.001762][ T5814] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 160.022355][ T5814] usb 5-1: USB disconnect, device number 5 [ 160.184119][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'. [ 160.200993][ T9989] IPv6: Can't replace route, no match found [ 160.413363][ T26] audit: type=1400 audit(1792667099.392:15): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10010 comm="syz.0.2517" [ 160.738934][T10038] netlink: 'syz.0.2530': attribute type 11 has an invalid length. [ 160.762486][T10040] loop2: detected capacity change from 0 to 256 [ 160.764807][T10038] netlink: 448 bytes leftover after parsing attributes in process `syz.0.2530'. [ 160.837549][T10040] FAT-fs (loop2): Directory bread(block 64) failed [ 160.860574][T10040] FAT-fs (loop2): Directory bread(block 65) failed [ 160.881661][T10040] FAT-fs (loop2): Directory bread(block 66) failed [ 160.902656][T10040] FAT-fs (loop2): Directory bread(block 67) failed [ 160.922621][T10040] FAT-fs (loop2): Directory bread(block 68) failed [ 160.937791][T10040] FAT-fs (loop2): Directory bread(block 69) failed [ 160.944572][T10040] FAT-fs (loop2): Directory bread(block 70) failed [ 160.962153][T10040] FAT-fs (loop2): Directory bread(block 71) failed [ 160.978231][T10040] FAT-fs (loop2): Directory bread(block 72) failed [ 160.989551][T10040] FAT-fs (loop2): Directory bread(block 73) failed [ 161.033858][T10060] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.2540'. [ 161.044012][T10058] device geneve1 entered promiscuous mode [ 161.370795][T10083] loop2: detected capacity change from 0 to 1024 [ 161.432675][T10083] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 161.462438][T10083] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 161.515009][T10083] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 161.522640][T10083] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.628526][T10083] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 161.648479][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.657812][T10109] xt_cgroup: path and classid specified [ 161.714749][T10114] loop0: detected capacity change from 0 to 512 [ 161.715209][T10110] loop1: detected capacity change from 0 to 512 [ 161.794856][T10110] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.884097][T10110] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 161.913601][T10110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 161.959265][T10110] System zones: 0-2, 18-18, 34-34 [ 161.968825][T10110] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.2561: bad orphan inode 15 [ 161.980777][T10110] ext4_test_bit(bit=14, block=18) = 1 [ 161.986535][T10110] is_bad_inode(inode)=0 [ 161.991795][T10110] NEXT_ORPHAN(inode)=2264924160 [ 162.001430][T10110] max_ino=32 [ 162.004904][T10110] i_nlink=0 [ 162.024252][T10110] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2561: corrupted inode contents [ 162.040853][T10110] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #15: comm syz.1.2561: mark_inode_dirty error [ 162.053691][T10110] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2561: corrupted inode contents [ 162.064344][T10133] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.2569'. [ 162.079153][T10110] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2957: inode #15: comm syz.1.2561: mark_inode_dirty error [ 162.111904][T10135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2572'. [ 162.128201][T10110] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2960: inode #15: comm syz.1.2561: mark inode dirty (error -117) [ 162.149092][T10110] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 162.202974][T10110] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.339952][T10151] netlink: 'syz.3.2579': attribute type 21 has an invalid length. [ 162.352181][T10151] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2579'. [ 162.390941][T10151] netlink: 'syz.3.2579': attribute type 4 has an invalid length. [ 162.392539][ T13] Bluetooth: hci0: command 0x0c20 tx timeout [ 162.410506][T10151] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2579'. [ 163.071138][ T4901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.238770][T10186] loop3: detected capacity change from 0 to 32768 [ 163.304712][ T5814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 163.344755][ T4901] usb 5-1: Using ep0 maxpacket: 32 [ 163.475017][ T4901] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 163.483269][ T4901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.514031][ T4901] usb 5-1: config 0 has no interface number 0 [ 163.541171][ T4901] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.572139][T10249] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2623'. [ 163.608808][T10251] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 163.608808][T10251] program syz.2.2625 not setting count and/or reply_len properly [ 163.724800][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.745162][ T4901] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 163.754986][ T4901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.763373][ T4901] usb 5-1: Product: syz [ 163.767914][ T4901] usb 5-1: Manufacturer: syz [ 163.772664][ T4901] usb 5-1: SerialNumber: syz [ 163.782204][ T4901] usb 5-1: config 0 descriptor?? [ 163.815074][ T5814] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 163.823215][ T5814] usb 1-1: config 0 has no interface number 0 [ 163.836822][ T4901] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 163.844005][ T5814] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 163.872085][ T5814] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 163.899781][ T5814] usb 1-1: config 0 interface 86 has no altsetting 0 [ 163.984022][T10279] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.042765][T10285] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2641'. [ 164.052789][ T4901] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 164.064847][ T4901] quatech2: probe of 5-1:0.51 failed with error -8 [ 164.095162][ T5814] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 164.104243][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.125775][ T5814] usb 1-1: Product: syz [ 164.130282][ T5814] usb 1-1: Manufacturer: syz [ 164.142829][T10290] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2643'. [ 164.153590][ T5814] usb 1-1: SerialNumber: syz [ 164.168873][ T5814] usb 1-1: config 0 descriptor?? [ 164.185097][T10211] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 164.192213][T10211] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 164.253533][T10300] loop2: detected capacity change from 0 to 256 [ 164.269583][ T1345] usb 5-1: USB disconnect, device number 6 [ 164.358970][T10312] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2651'. [ 164.384791][T10312] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 164.505946][ T5814] omninet 1-1:0.86: ZyXEL - omni.net usb converter detected [ 164.521699][ T5814] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 164.543338][ T5814] usb 1-1: USB disconnect, device number 14 [ 164.557452][ T5814] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 164.580913][ T5814] omninet 1-1:0.86: device disconnected [ 164.641424][T10349] autofs4:pid:10349:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc0189375) [ 164.659737][T10349] autofs4:pid:10349:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 164.862843][ T1345] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 164.911067][T10372] xt_hashlimit: max too large, truncated to 1048576 [ 165.125802][T10392] netem: change failed [ 165.289951][ T1345] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 165.319809][ T1345] usb 2-1: config 0 has no interface number 0 [ 165.334968][ T1345] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 165.372805][ T1345] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 165.414452][ T1345] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 165.441925][ T1345] usb 2-1: config 0 interface 2 has no altsetting 0 [ 165.469023][T10422] loop2: detected capacity change from 0 to 1024 [ 165.511425][T10422] hfsplus: failed to load root directory [ 165.639685][ T1345] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 165.658923][ T1345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.687596][ T1345] usb 2-1: Product: syz [ 165.691815][ T1345] usb 2-1: Manufacturer: syz [ 165.707886][ T1345] usb 2-1: SerialNumber: syz [ 165.741508][ T1345] usb 2-1: config 0 descriptor?? [ 165.780695][T10340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.823538][T10340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.909381][T10464] loop3: detected capacity change from 0 to 64 [ 165.914228][T10463] loop0: detected capacity change from 0 to 1024 [ 165.985320][T10463] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 165.989236][T10464] MINIX-fs: mounting file system with errors, running fsck is recommended [ 166.012393][T10463] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 166.073322][T10463] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 166.094037][T10463] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.190346][T10482] loop4: detected capacity change from 0 to 2048 [ 166.264504][T10463] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 166.279534][ T7] usb 2-1: USB disconnect, device number 11 [ 166.304105][T10506] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.333832][T10507] MTD: Couldn't look up '': -22 [ 166.356695][T10482] attempt to access beyond end of device [ 166.356695][T10482] loop4: rw=0, want=2198922592330, limit=2048 [ 166.373952][T10482] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 166.485119][ T1345] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.783137][T10563] loop4: detected capacity change from 0 to 1024 [ 166.811312][T10563] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 166.824770][T10563] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 166.864447][T10563] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 166.887845][T10563] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.909538][T10570] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 166.924882][ T1345] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.952203][T10563] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 167.145098][ T1345] usb 4-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 167.164822][ T1345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.183973][ T1345] usb 4-1: Product: syz [ 167.198202][ T1345] usb 4-1: Manufacturer: syz [ 167.207616][ T1345] usb 4-1: SerialNumber: syz [ 167.292047][ T1345] ipheth 4-1:1.0: Unable to find endpoints [ 167.374237][T10584] loop1: detected capacity change from 0 to 8192 [ 167.541935][T10584] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 167.586204][ T1345] apple-mfi-fastcharge 4-1: USB disconnect, device number 12 [ 167.789256][T10647] netlink: 'syz.1.2762': attribute type 21 has an invalid length. [ 167.805483][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 168.253760][T10689] netlink: 'syz.2.2781': attribute type 10 has an invalid length. [ 168.299074][T10689] team0: Cannot enslave team device to itself [ 168.394360][T10699] ipt_CLUSTERIP: bad num_local_nodes 18 [ 168.543508][T10711] loop0: detected capacity change from 0 to 2048 [ 168.563133][T10717] netlink: 'syz.4.2796': attribute type 2 has an invalid length. [ 168.580833][T10717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2796'. [ 168.618792][T10711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.309501][T10788] netlink: 'syz.1.2828': attribute type 1 has an invalid length. [ 169.324735][ T8879] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 169.334094][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2829'. [ 169.356355][T10789] IPv6: Can't replace route, no match found [ 169.561568][T10807] loop3: detected capacity change from 0 to 512 [ 169.564325][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2839'. [ 169.570978][T10802] loop1: detected capacity change from 0 to 4096 [ 169.620554][T10807] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.643886][T10807] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 169.653596][T10807] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 169.662069][T10807] System zones: 0-2, 18-18, 34-34 [ 169.683984][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2842'. [ 169.702453][T10807] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.2838: bad orphan inode 15 [ 169.715508][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2842'. [ 169.732049][T10807] ext4_test_bit(bit=14, block=18) = 1 [ 169.754159][T10807] is_bad_inode(inode)=0 [ 169.754907][ T8879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.786267][T10807] NEXT_ORPHAN(inode)=2264924160 [ 169.791263][T10807] max_ino=32 [ 169.794488][T10807] i_nlink=0 [ 169.824873][ T8879] usb 3-1: not running at top speed; connect to a high speed hub [ 169.843018][T10802] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 169.856674][T10807] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.2838: corrupted inode contents [ 169.905357][T10807] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #15: comm syz.3.2838: mark_inode_dirty error [ 169.924909][ T8879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.926496][T10802] ntfs3: loop1: Failed to load $Extend. [ 169.952304][ T8879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 1152, setting to 64 [ 169.975532][T10807] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.2838: corrupted inode contents [ 170.019286][T10807] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2957: inode #15: comm syz.3.2838: mark_inode_dirty error [ 170.039257][T10807] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2960: inode #15: comm syz.3.2838: mark inode dirty (error -117) [ 170.053305][T10807] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 170.063312][T10807] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.154941][ T8879] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 170.183076][ T8879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.204048][ T8879] usb 3-1: Product: syz [ 170.205640][T10845] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2854'. [ 170.213604][ T8879] usb 3-1: Manufacturer: syz [ 170.240218][T10851] loop0: detected capacity change from 0 to 256 [ 170.253162][ T8879] usb 3-1: SerialNumber: syz [ 170.288168][ T8879] usb 3-1: config 0 descriptor?? [ 170.300216][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2853'. [ 170.345023][T10761] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.371640][T10761] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.424685][ C1] usb 3-1: NFC: Urb failure (status -71) [ 170.444669][ C1] usb 3-1: NFC: Urb failure (status -71) [ 170.456876][ T8879] usb 3-1: NFC: Unable to get FW version [ 170.482595][ T8879] pn533_usb: probe of 3-1:0.0 failed with error -71 [ 170.677015][ T8879] usb 3-1: USB disconnect, device number 8 [ 170.704990][ T1345] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 170.742434][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2866'. [ 171.063596][T10873] loop4: detected capacity change from 0 to 32768 [ 171.078299][ T1345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 171.094745][ T1345] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 171.115379][ T1345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.144246][ T1345] usb 2-1: config 0 descriptor?? [ 171.152554][T10911] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2878'. [ 171.197307][T10858] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 171.229608][ T1345] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 171.242003][T10873] JBD2: Ignoring recovery information on journal [ 171.404522][T10929] x_tables: unsorted underflow at hook 4 [ 171.433890][T10873] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 171.456122][ T3543] bcm5974 2-1:0.0: could not read from device [ 171.471136][ T1345] usb 2-1: USB disconnect, device number 12 [ 171.502691][ T3543] bcm5974 2-1:0.0: could not read from device [ 171.520028][T10940] netlink: 'syz.0.2887': attribute type 1 has an invalid length. [ 171.726597][T10962] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 171.748117][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 171.946470][T10975] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 171.954756][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.166855][T10994] netlink: 'syz.3.2908': attribute type 1 has an invalid length. [ 172.180157][T10994] NCSI netlink: No device for ifindex 0 [ 172.395095][ T7] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 172.411708][ T7] usb 3-1: config 0 has no interface number 0 [ 172.426812][ T7] usb 3-1: config 0 interface 3 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 172.429520][T11021] loop3: detected capacity change from 0 to 256 [ 172.448545][ T7] usb 3-1: config 0 interface 3 has no altsetting 0 [ 172.539944][T11021] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 172.677832][ T7] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 172.725581][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.745461][ T7] usb 3-1: Product: syz [ 172.745486][ T7] usb 3-1: Manufacturer: syz [ 172.745501][ T7] usb 3-1: SerialNumber: syz [ 172.779976][ T7] usb 3-1: config 0 descriptor?? [ 173.020500][ T7] usb 3-1: USB disconnect, device number 9 [ 173.273721][T11078] netlink: 'syz.1.2942': attribute type 10 has an invalid length. [ 173.290792][T11078] __nla_validate_parse: 3 callbacks suppressed [ 173.290810][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'. [ 173.444771][T11050] loop3: detected capacity change from 0 to 32768 [ 173.564460][T11134] loop1: detected capacity change from 0 to 256 [ 173.589827][T11050] XFS (loop3): Mounting V5 Filesystem [ 173.645502][T11134] exfat: Deprecated parameter 'utf8' [ 173.685458][T11134] exfat: Deprecated parameter 'utf8' [ 173.692205][T11150] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2956'. [ 173.711429][T11050] XFS (loop3): Ending clean mount [ 173.782545][T11134] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 173.844231][T11161] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 173.874124][ T4198] XFS (loop3): Unmounting Filesystem [ 173.892641][T11134] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 173.990664][T11167] SET target dimension over the limit! [ 174.188606][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2969'. [ 174.438432][T11205] netlink: 'syz.4.2979': attribute type 3 has an invalid length. [ 174.466524][T11205] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2979'. [ 174.502590][T11208] CIFS mount error: No usable UNC path provided in device string! [ 174.502590][T11208] [ 174.527579][T11208] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 174.582970][T11213] usb usb1: check_ctrlrecip: process 11213 (syz.4.2983) requesting ep 01 but needs 81 [ 174.624673][T11213] usb usb1: usbfs: process 11213 (syz.4.2983) did not claim interface 0 before use [ 175.014830][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.081004][T11190] loop0: detected capacity change from 0 to 32768 [ 175.137499][T11254] loop2: detected capacity change from 0 to 512 [ 175.228173][T11190] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 175.267477][T11190] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 175.286299][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 175.381809][T11190] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 175.416794][ T1345] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 175.425615][ T7] usb 2-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 175.437586][ T1345] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 175.454021][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.466298][T11269] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 175.499080][ T7] usb 2-1: config 0 descriptor?? [ 175.547103][ T7] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 175.635066][ T1345] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 197ms [ 175.657562][ T1345] gfs2: fsid=syz:syz.0: jid=0: Done [ 175.664270][T11190] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 175.765018][ T7] pwc: send_video_command error -71 [ 175.770275][ T7] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 175.787170][ T7] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 175.809742][ T7] usb 2-1: USB disconnect, device number 13 [ 175.957029][T11310] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 176.063601][T11190] gfs2: fsid=syz:syz.0: found 1 quota changes [ 176.221093][ T4191] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 176.249065][ T4191] CPU: 0 PID: 4191 Comm: syz-executor Not tainted syzkaller #0 [ 176.256706][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.266785][ T4191] Call Trace: [ 176.270176][ T4191] [ 176.273465][ T4191] dump_stack_lvl+0x188/0x250 [ 176.278247][ T4191] ? show_regs_print_info+0x20/0x20 [ 176.283540][ T4191] ? load_image+0x410/0x410 [ 176.288053][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 176.293261][ T4191] gfs2_assert_warn_i+0x187/0x2c0 [ 176.298296][ T4191] gfs2_quota_cleanup+0x48c/0x670 [ 176.303335][ T4191] gfs2_make_fs_ro+0x523/0x620 [ 176.308098][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 176.313472][ T4191] ? gfs2_dinode_out+0xb00/0xb00 [ 176.318528][ T4191] ? __lock_acquire+0x7d40/0x7d40 [ 176.323576][ T4191] ? do_raw_spin_lock+0x128/0x2f0 [ 176.328792][ T4191] ? __rwlock_init+0x140/0x140 [ 176.333653][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 176.338855][ T4191] gfs2_put_super+0x1d2/0x7c0 [ 176.343742][ T4191] ? gfs2_evict_inode+0x1340/0x1340 [ 176.349045][ T4191] generic_shutdown_super+0x130/0x300 [ 176.354441][ T4191] kill_block_super+0x7c/0xe0 [ 176.359129][ T4191] deactivate_locked_super+0x93/0xf0 [ 176.364420][ T4191] cleanup_mnt+0x426/0x4d0 [ 176.368850][ T4191] task_work_run+0x125/0x1a0 [ 176.373548][ T4191] exit_to_user_mode_loop+0x10f/0x130 [ 176.378920][ T4191] exit_to_user_mode_prepare+0xee/0x180 [ 176.384482][ T4191] syscall_exit_to_user_mode+0x16/0x40 [ 176.390044][ T4191] do_syscall_64+0x58/0xa0 [ 176.394465][ T4191] ? clear_bhb_loop+0x30/0x80 [ 176.399145][ T4191] ? clear_bhb_loop+0x30/0x80 [ 176.403825][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.409718][ T4191] RIP: 0033:0x7f4fd8035797 [ 176.414136][ T4191] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 176.433827][ T4191] RSP: 002b:00007ffe2f754798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 176.442244][ T4191] RAX: 0000000000000000 RBX: 00007f4fd80caf63 RCX: 00007f4fd8035797 [ 176.450223][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2f754850 [ 176.458192][ T4191] RBP: 00007ffe2f754850 R08: 00007ffe2f755850 R09: 00000000ffffffff [ 176.466253][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2f7558e0 [ 176.474312][ T4191] R13: 00007f4fd80caf63 R14: 000000000002afdf R15: 00007ffe2f755920 [ 176.482299][ T4191] [ 176.510384][T11332] loop3: detected capacity change from 0 to 512 [ 176.651712][T11332] EXT4-fs (loop3): 1 truncate cleaned up [ 176.701651][T11332] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 176.785082][T11354] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 177.127003][T11384] CIFS: Attempting to mount \\127.0.0.1\share [ 177.150537][T11386] netlink: 'syz.3.3053': attribute type 2 has an invalid length. [ 177.154395][T11384] CIFS: VFS: Error connecting to socket. Aborting operation. [ 177.181250][T11384] CIFS: VFS: cifs_mount failed w/return code = -111 [ 177.194751][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.595075][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.609973][T11428] xt_CONNSECMARK: invalid mode: 0 [ 177.684995][ T5814] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 177.721304][T11430] loop2: detected capacity change from 0 to 4096 [ 177.824988][T11430] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.854951][ T5814] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 177.864488][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.873535][ T5814] usb 5-1: Product: syz [ 177.878213][ T5814] usb 5-1: Manufacturer: syz [ 177.883294][ T5814] usb 5-1: SerialNumber: syz [ 177.890916][T11430] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 177.919339][T11451] loop1: detected capacity change from 0 to 256 [ 177.926333][T11362] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.024153][T11451] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 178.195051][T11465] loop2: detected capacity change from 0 to 512 [ 178.239875][T11465] EXT4-fs (loop2): Ignoring removed oldalloc option [ 178.263945][T11465] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 178.314925][ T5814] usb 5-1: MIDIStreaming interface descriptor not found [ 178.332562][T11465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 178.352900][T11465] EXT4-fs (loop2): orphan cleanup on readonly fs [ 178.373216][ T5814] usb 5-1: USB disconnect, device number 7 [ 178.415350][T11465] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.3085: bad orphan inode 267 [ 178.496793][T11465] EXT4-fs (loop2): Remounting filesystem read-only [ 178.512713][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 178.520139][T11511] loop1: detected capacity change from 0 to 256 [ 178.533283][T11465] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 178.548118][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 178.624426][T11465] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3085: dx entry: limit 0 != root limit 125 [ 178.655972][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.656881][T11465] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3085: Corrupt directory, running e2fsck is recommended [ 178.924294][T11541] netlink: 'syz.1.3106': attribute type 7 has an invalid length. [ 178.955382][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 179.214942][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 179.365033][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.385807][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.567137][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.578610][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.587127][ T13] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 179.604918][ T7] usb 1-1: Product: syz [ 179.615158][ T7] usb 1-1: Manufacturer: syz [ 179.624870][ T7] usb 1-1: SerialNumber: syz [ 179.786290][T11612] loop4: detected capacity change from 0 to 164 [ 179.831828][T11581] loop2: detected capacity change from 0 to 32768 [ 179.870251][T11612] Unable to read rock-ridge attributes [ 179.891299][T11612] Unable to read rock-ridge attributes [ 179.893948][T11610] loop1: detected capacity change from 0 to 4096 [ 179.927410][T11612] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 179.931296][T11581] XFS (loop2): Mounting V5 Filesystem [ 179.955809][ T7] usb 1-1: 0:2 : does not exist [ 179.973386][ T7] usb 1-1: USB disconnect, device number 15 [ 179.996694][T11626] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.004822][ T13] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 180.021488][ T13] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 180.034492][ T13] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.116716][T11581] XFS (loop2): Ending clean mount [ 180.124853][ T13] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 180.136800][ T13] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 180.151910][ T13] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.189743][T11581] XFS (loop2): Quotacheck needed: Please wait. [ 180.225387][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.279366][ T13] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 180.310116][ T13] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 180.315673][T11581] XFS (loop2): Quotacheck: Done. [ 180.368714][ T13] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.401356][T11654] netlink: 800 bytes leftover after parsing attributes in process `syz.1.3145'. [ 180.410790][T11654] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.3145'. [ 180.429750][ T4185] XFS (loop2): Unmounting Filesystem [ 180.557086][T11660] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 180.578870][T11660] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3149'. [ 180.665027][ T13] usb 4-1: string descriptor 0 read error: -22 [ 180.682292][ T13] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.702982][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.789254][ T13] adutux 4-1:168.0: interrupt endpoints not found [ 181.054927][ T13] usb 4-1: USB disconnect, device number 13 [ 181.439718][T11727] loop2: detected capacity change from 0 to 512 [ 181.562410][T11687] loop4: detected capacity change from 0 to 32768 [ 181.598447][T11727] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 181.636544][T11727] ext4 filesystem being mounted at /682/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.705042][T11687] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.3159 (11687) [ 181.770216][T11687] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 181.783631][T11687] BTRFS info (device loop4): enabling auto defrag [ 181.825089][T11687] BTRFS info (device loop4): force clearing of disk cache [ 181.851773][T11687] BTRFS info (device loop4): ignoring data csums [ 181.863735][T11687] BTRFS info (device loop4): turning on async discard [ 181.886587][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 181.937670][T11687] BTRFS info (device loop4): setting nodatacow, compression disabled [ 181.951750][T11687] BTRFS info (device loop4): turning off async discard [ 181.969982][T11687] BTRFS info (device loop4): disabling free space tree [ 181.986861][T11687] BTRFS info (device loop4): has skinny extents [ 182.143382][T11774] loop1: detected capacity change from 0 to 256 [ 182.174790][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 182.336182][T11790] syz.3.3192 uses old SIOCAX25GETINFO [ 182.378244][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.508063][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.522750][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.725078][ T13] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 182.746796][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.759980][ T13] usb 1-1: Product: syz [ 182.764196][ T13] usb 1-1: Manufacturer: syz [ 182.766443][T11811] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3194'. [ 182.771502][ T13] usb 1-1: SerialNumber: syz [ 182.846505][ T13] usb 1-1: selecting invalid altsetting 1 [ 182.983338][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3200'. [ 183.037667][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3200'. [ 183.072917][ T13] usb 1-1: unit 0 not found! [ 183.099195][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3200'. [ 183.145538][ T13] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 183.148794][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3200'. [ 183.227250][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.264121][T11825] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.280474][ T5801] usb 1-1: USB disconnect, device number 16 [ 183.316695][T11825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.359593][T11825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.472867][T11854] loop3: detected capacity change from 0 to 4096 [ 183.488750][T11852] loop4: detected capacity change from 0 to 4096 [ 183.669093][T11869] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.728614][T11852] ntfs: (device loop4): parse_options(): NLS character set is]9-5 not found. Using previous one cp866. [ 183.754219][T11852] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 183.807137][T11852] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 183.883636][T11852] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 183.925212][T11852] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 183.997205][T11852] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 184.061522][T11852] ntfs: volume version 3.1. [ 184.063685][T11852] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 184.064134][T11852] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 184.065216][T11852] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 184.065242][T11852] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 184.087137][T11886] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 184.547720][T11913] device gretap1 entered promiscuous mode [ 184.729256][T11931] xt_hashlimit: invalid interval [ 184.734776][T11929] __nla_validate_parse: 73 callbacks suppressed [ 184.734792][T11929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3240'. [ 184.840036][T11935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3244'. [ 184.869784][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 184.890814][T11935] IPv6: Can't replace route, no match found [ 184.894942][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 184.956757][T11943] netlink: 'syz.2.3250': attribute type 1 has an invalid length. [ 185.100621][T11957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3254'. [ 185.226329][T11964] netlink: 'syz.1.3257': attribute type 16 has an invalid length. [ 185.277853][T11964] netlink: 'syz.1.3257': attribute type 3 has an invalid length. [ 185.291724][T11971] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnekyptfs_cipher=aes] [ 185.305804][T11964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3257'. [ 185.329547][T11971] ecryptfs_parse_options: eCryptfs: unrecognized option [ecqMIDryptfs_] [ 185.382473][T11971] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 185.400588][T11971] Error parsing options; rc = [-22] [ 185.418261][T11980] loop0: detected capacity change from 0 to 8 [ 185.557078][T11987] dlm: no locking on control device [ 185.600008][T11989] loop4: detected capacity change from 0 to 512 [ 185.661994][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 185.686242][T11989] EXT4-fs (loop4): Ignoring removed oldalloc option [ 185.706005][T11989] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 185.755039][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3271'. [ 185.761809][T11989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 185.791947][T11989] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.844687][T11989] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.3268: bad orphan inode 267 [ 185.844860][T12005] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 185.872063][T12005] netlink: 'syz.1.3272': attribute type 3 has an invalid length. [ 185.880264][T12005] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3272'. [ 185.881393][T12008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3273'. [ 185.890370][T12005] NCSI netlink: No device for ifindex 2986344450 [ 185.915003][T11989] EXT4-fs (loop4): Remounting filesystem read-only [ 185.929093][T11989] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 186.040120][T11989] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.3268: dx entry: limit 0 != root limit 125 [ 186.105802][T12016] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2 [ 186.120107][T11989] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3268: Corrupt directory, running e2fsck is recommended [ 186.217443][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 186.224918][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 186.235060][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 186.251431][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 186.278447][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 186.404723][T12038] x_tables: unsorted underflow at hook 1 [ 186.779439][T12065] overlayfs: missing 'workdir' [ 187.026434][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 187.240935][T12036] loop0: detected capacity change from 0 to 32768 [ 187.299530][T12036] [ 187.299530][T12036] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.299530][T12036] [ 187.404857][ T5814] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 187.415122][ T6811] [ 187.415122][ T6811] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.415122][ T6811] [ 187.437665][ T5814] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 187.455188][ T6811] [ 187.455188][ T6811] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.455188][ T6811] [ 187.474638][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.494165][ T4191] [ 187.494165][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.494165][ T4191] [ 187.507418][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.537219][ T277] [ 187.537219][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.537219][ T277] [ 187.564240][ T4191] [ 187.564240][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.564240][ T4191] [ 187.655079][ T5814] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 187.692759][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 187.711398][ T5814] usb 3-1: Product: syz [ 187.721306][ T5814] usb 3-1: Manufacturer: syz [ 187.734925][ T5814] usb 3-1: SerialNumber: syz [ 187.760783][ T5814] usb 3-1: config 0 descriptor?? [ 187.784878][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 187.815685][ T5814] hub 3-1:0.0: bad descriptor, ignoring hub [ 187.833566][ T5814] hub: probe of 3-1:0.0 failed with error -5 [ 187.860550][ T5814] usb 3-1: selecting invalid altsetting 0 [ 187.886478][T12109] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 187.910009][T12109] netlink: 'syz.0.3315': attribute type 2 has an invalid length. [ 187.928522][ T5801] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 188.034426][T12123] loop0: detected capacity change from 0 to 256 [ 188.095117][ T7] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 188.162864][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.194778][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 188.196930][ T7] usb 2-1: Product: syz [ 188.235146][ T7] usb 2-1: Manufacturer: syz [ 188.239787][ T7] usb 2-1: SerialNumber: syz [ 188.284158][ T7] usb 2-1: config 0 descriptor?? [ 188.308746][ T4900] usb 3-1: USB disconnect, device number 10 [ 188.316604][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.344646][ T5801] usb 4-1: config 0 has no interfaces? [ 188.357700][ T7] gspca_main: spca508-2.14.0 probing 041e:4018 [ 188.363436][T12134] netlink: 'syz.4.3324': attribute type 1 has an invalid length. [ 188.525075][ T5801] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 188.534379][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.567376][ T5801] usb 4-1: Product: syz [ 188.571591][ T5801] usb 4-1: Manufacturer: syz [ 188.604638][ T5801] usb 4-1: SerialNumber: syz [ 188.624860][ T5801] r8152-cfgselector 4-1: config 0 descriptor?? [ 188.775880][ T7] gspca_spca508: reg_read err -71 [ 188.794955][ T7] gspca_spca508: reg_read err -71 [ 188.814961][ T7] gspca_spca508: reg_read err -71 [ 188.854947][ T7] gspca_spca508: reg_read err -71 [ 188.874871][ T7] gspca_spca508: reg write: error -71 [ 188.880496][ T7] spca508: probe of 2-1:0.0 failed with error -71 [ 188.885265][ T5801] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 188.921088][ T156] usb 4-1: config 0 descriptor?? [ 188.945680][ T7] usb 2-1: USB disconnect, device number 14 [ 189.092381][ T5812] usb 4-1: USB disconnect, device number 14 [ 189.098729][ T156] usb 4-1: can't set config #0, error -71 [ 189.175908][T12192] cifs: Unknown parameter 'h}# [ 189.175908][T12192] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 189.175908][T12192] SȘȞZ6' [ 189.436860][T12197] loop4: detected capacity change from 0 to 4096 [ 189.517630][T12197] __ntfs_error: 9 callbacks suppressed [ 189.517649][T12197] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 189.548508][T12197] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 189.561884][T12215] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 189.588186][T12197] ntfs: volume version 3.1. [ 189.597320][T12197] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 189.672342][T12197] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 189.714686][T12197] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 189.826586][T12227] loop2: detected capacity change from 0 to 256 [ 189.831273][T12197] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 189.885648][T12234] __nla_validate_parse: 2 callbacks suppressed [ 189.885667][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3360'. [ 189.917074][T12230] xt_CT: No such helper "snmp" [ 189.945422][T12197] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 189.971439][T12227] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 189.985974][T12197] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 190.434824][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.529521][ T5812] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 190.539438][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3372'. [ 190.714806][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 190.861558][ T7] usb 2-1: config 5 has an invalid interface number: 130 but max is 0 [ 190.881720][ T7] usb 2-1: config 5 has no interface number 0 [ 190.898329][ T7] usb 2-1: config 5 interface 130 has no altsetting 0 [ 190.911821][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 4 [ 190.942833][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24929, setting to 1023 [ 191.037392][T12286] loop3: detected capacity change from 0 to 16 [ 191.084971][ T7] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 191.094822][T12286] erofs: (device loop3): mounted with root inode @ nid 36. [ 191.108263][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.145039][ T5812] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 191.147144][ T7] usb 2-1: Product: syz [ 191.154264][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.174474][ T7] usb 2-1: Manufacturer: syz [ 191.189345][ T7] usb 2-1: SerialNumber: syz [ 191.214507][ T5812] usb 3-1: Product: syz [ 191.244658][ T5812] usb 3-1: Manufacturer: syz [ 191.249480][ T5812] usb 3-1: SerialNumber: syz [ 191.275448][ T5812] usb 3-1: config 0 descriptor?? [ 191.485083][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3402'. [ 191.522448][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3402'. [ 191.552942][ T7] mct_u232 2-1:5.130: MCT U232 converter detected [ 191.555846][ T5812] usbtouchscreen: probe of 3-1:0.0 failed with error -71 [ 191.563384][ T7] mct_u232 ttyUSB0: expected endpoint missing [ 191.596779][ T7] usb 2-1: USB disconnect, device number 15 [ 191.614665][ T5812] usb 3-1: USB disconnect, device number 11 [ 191.623388][ T7] mct_u232 2-1:5.130: device disconnected [ 191.662685][T12332] loop3: detected capacity change from 0 to 8 [ 192.103592][ T5814] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 192.514784][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.549299][ T5814] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.554503][T12374] loop2: detected capacity change from 0 to 128 [ 192.575590][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3413'. [ 192.595015][ T5814] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.615045][T12376] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3413'. [ 192.640320][ T5814] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.667137][T12374] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.738812][T12386] program syz.1.3417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.835043][ T5814] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 192.894654][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.910493][T12394] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3420'. [ 192.924653][ T5814] usb 1-1: Product: syz [ 192.929580][ T5814] usb 1-1: Manufacturer: syz [ 192.934333][ T5814] usb 1-1: SerialNumber: syz [ 193.090795][T12408] loop4: detected capacity change from 0 to 256 [ 193.208530][ T5814] usb 1-1: Limiting number of CPorts to U8_MAX [ 193.236055][ T5814] usb 1-1: Not enough endpoints found in device, aborting! [ 193.328137][T12408] FAT-fs (loop4): Directory bread(block 64) failed [ 193.373587][T12408] FAT-fs (loop4): Directory bread(block 65) failed [ 193.394965][T12408] FAT-fs (loop4): Directory bread(block 66) failed [ 193.401599][T12408] FAT-fs (loop4): Directory bread(block 67) failed [ 193.413453][ T5814] usb 1-1: USB disconnect, device number 17 [ 193.467106][T12408] FAT-fs (loop4): Directory bread(block 68) failed [ 193.473711][T12408] FAT-fs (loop4): Directory bread(block 69) failed [ 193.517289][T12408] FAT-fs (loop4): Directory bread(block 70) failed [ 193.523885][T12408] FAT-fs (loop4): Directory bread(block 71) failed [ 193.574770][T12408] FAT-fs (loop4): Directory bread(block 72) failed [ 193.581488][T12408] FAT-fs (loop4): Directory bread(block 73) failed [ 193.600541][T12441] netlink: 'syz.3.3439': attribute type 21 has an invalid length. [ 193.629296][T12441] netlink: 'syz.3.3439': attribute type 4 has an invalid length. [ 193.659888][T12441] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3439'. [ 194.024829][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3449'. [ 194.387291][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393645][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.671946][T12510] loop4: detected capacity change from 0 to 4096 [ 194.702950][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'. [ 194.737078][T12510] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 194.950629][T12536] deleting an unspecified loop device is not supported. [ 194.962887][T12510] ntfs3: loop4: ino=5, "/" directory corrupted [ 194.974013][T12510] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 194.998847][T12510] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 195.051318][T12541] IPv6: Can't replace route, no match found [ 195.064994][ T4773] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 195.072021][ T4194] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 195.207542][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'. [ 195.268161][T12559] sctp: [Deprecated]: syz.4.3488 (pid 12559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.268161][T12559] Use struct sctp_sack_info instead [ 195.376979][T12567] loop1: detected capacity change from 0 to 256 [ 195.707878][T12587] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~' [ 195.735251][T12591] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.764650][T12587] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 195.806987][T12591] FAT-fs (loop3): unable to read boot sector [ 195.819465][T12587] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 195.865355][T12587] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 195.873765][T12587] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 195.930124][T12587] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 195.952233][T12597] loop4: detected capacity change from 0 to 4096 [ 195.959259][T12587] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 195.988893][T12597] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 195.994651][T12587] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 196.038832][T12587] ALSA: mixer_oss: invalid OSS volume 'y' [ 196.064679][T12587] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 196.073157][T12587] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 196.155926][T12587] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 196.197580][T12587] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 196.224665][T12587] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 196.262142][T12587] ALSA: mixer_oss: invalid OSS volume '' [ 196.310019][T12587] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 196.373920][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3519'. [ 196.399499][T12628] comedi comedi2: pcl816: I/O port conflict (0xffff,16) [ 197.019927][T12673] netlink: 'syz.1.3540': attribute type 2 has an invalid length. [ 197.155072][T12683] netlink: 'syz.2.3544': attribute type 1 has an invalid length. [ 197.720454][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.727867][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.780155][T12732] ubi16: attaching mtd0 [ 197.805909][T12725] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 197.832410][T12732] ubi16: scanning is finished [ 197.846193][T12732] ubi16: empty MTD device detected [ 198.012239][T12738] futex_wake_op: syz.1.3571 tries to shift op by -1; fix this program [ 198.140498][T12732] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 198.185899][T12732] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 198.193243][T12732] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 198.245048][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 198.254484][T12732] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 198.287894][T12732] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 198.320226][T12732] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 198.363098][T12732] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1378013790 [ 198.420286][T12732] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 198.460358][T12761] loop4: detected capacity change from 0 to 512 [ 198.466983][T12748] ubi16: background thread "ubi_bgt16d" started, PID 12748 [ 199.004698][ T5804] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 199.047421][T12761] EXT4-fs (loop4): Test dummy encryption mode enabled [ 199.178226][T12761] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,min_batch_time=0x0000000000000006,grpquota,debug_want_extra_isize=0x0000000000000200,,errors=continue. Quota mode: writeback. [ 199.199079][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.211597][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3593'. [ 199.424437][T12807] [U] v3f"S/4:XTzWtlW= [ 199.455391][T12807] [U] J"e:" [ 199.635446][ T5804] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 199.644544][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.664702][ T5804] usb 4-1: Product: syz [ 199.668914][ T5804] usb 4-1: Manufacturer: syz [ 199.678277][T12821] cgroup: No subsys list or none specified [ 199.694688][ T5804] usb 4-1: SerialNumber: syz [ 199.717008][ T5804] usb 4-1: config 0 descriptor?? [ 199.767113][ T5804] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 199.822503][ T4900] ------------[ cut here ]------------ [ 199.830971][ T4900] WARNING: CPU: 0 PID: 4900 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 199.873518][ T4900] Modules linked in: [ 199.884756][ T4900] CPU: 0 PID: 4900 Comm: kworker/0:15 Not tainted syzkaller #0 [ 199.905391][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 199.920609][ T4900] Workqueue: events nf_tables_trans_destroy_work [ 199.934345][ T4900] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 199.945033][ T4900] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 7b e1 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 9b 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 2a 6b 8e 80 e1 07 80 c1 03 38 c1 [ 199.971958][ T4900] RSP: 0018:ffffc9000339fa68 EFLAGS: 00010293 [ 199.980461][ T4900] RAX: ffffffff883d8780 RBX: ffff8880614178f0 RCX: ffff888029c19dc0 [ 199.987070][ T5804] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 199.989345][ T4900] RDX: 0000000000000000 RSI: ffff888061417800 RDI: ffff88802ae89028 [ 200.004842][ T4900] RBP: ffffc9000339fc30 R08: ffff888029c19dc0 R09: 0000000000000008 [ 200.013124][ T4900] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880614178c0 [ 200.016819][ T5804] sq905c 4-1:0.0: Get version command failed [ 200.021825][ T4900] R13: dffffc0000000000 R14: ffff888061417910 R15: dffffc0000000000 [ 200.035944][ T4900] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 200.045213][ T4900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.049089][ T5804] sq905c: probe of 4-1:0.0 failed with error -71 [ 200.052026][ T4900] CR2: 0000001b32920ff8 CR3: 000000007e971000 CR4: 00000000003506f0 [ 200.080952][ T5804] usb 4-1: USB disconnect, device number 15 [ 200.083340][ T4900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.105109][ T4900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.120230][ T4900] Call Trace: [ 200.129157][ T4900] [ 200.132462][ T4900] ? __lock_acquire+0x7d40/0x7d40 [ 200.139139][ T4900] ? do_raw_spin_lock+0x128/0x2f0 [ 200.145101][ T4900] nft_set_destroy+0x488/0xa30 [ 200.150289][ T4900] ? do_raw_spin_unlock+0x11d/0x230 [ 200.156981][ T4900] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 200.162990][ T4900] ? __lock_acquire+0x7d40/0x7d40 [ 200.168510][ T4900] ? nft_object_dump+0x1e0/0x1e0 [ 200.181100][ T4900] ? _raw_spin_unlock_irq+0x1f/0x40 [ 200.194067][ T4900] process_one_work+0x867/0xff0 [ 200.211598][ T4900] ? worker_detach_from_pool+0x240/0x240 [ 200.230499][ T4900] ? lockdep_hardirqs_off+0x70/0x100 [ 200.241214][ T4900] ? _raw_spin_lock_irq+0xb7/0xf0 [ 200.249283][ T4900] ? _raw_spin_lock_irqsave+0x100/0x100 [ 200.260190][ T4900] ? wq_worker_running+0x97/0x170 [ 200.268039][ T4900] worker_thread+0xad7/0x12a0 [ 200.272904][ T4900] kthread+0x42e/0x520 [ 200.282312][ T4900] ? rcu_lock_release+0x20/0x20 [ 200.291662][ T4900] ? kthread_blkcg+0xd0/0xd0 [ 200.302435][ T4900] ret_from_fork+0x1f/0x30 [ 200.309723][ T4900] [ 200.312957][ T4900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.320260][ T4900] CPU: 0 PID: 4900 Comm: kworker/0:15 Not tainted syzkaller #0 [ 200.327865][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.338026][ T4900] Workqueue: events nf_tables_trans_destroy_work [ 200.344383][ T4900] Call Trace: [ 200.347685][ T4900] [ 200.350637][ T4900] dump_stack_lvl+0x188/0x250 [ 200.355346][ T4900] ? show_regs_print_info+0x20/0x20 [ 200.360566][ T4900] ? load_image+0x410/0x410 [ 200.365096][ T4900] panic+0x2f8/0x850 [ 200.369013][ T4900] ? bpf_jit_dump+0xd0/0xd0 [ 200.373622][ T4900] ? ret_from_fork+0x1f/0x30 [ 200.378233][ T4900] ? nft_pipapo_destroy+0x8b0/0x960 [ 200.383449][ T4900] __warn+0x248/0x2b0 [ 200.387446][ T4900] ? nft_pipapo_destroy+0x8b0/0x960 [ 200.392664][ T4900] report_bug+0x1b9/0x2e0 [ 200.397026][ T4900] handle_bug+0x3a/0x70 [ 200.401195][ T4900] exc_invalid_op+0x16/0x40 [ 200.405716][ T4900] asm_exc_invalid_op+0x16/0x20 [ 200.410582][ T4900] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 200.416400][ T4900] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 7b e1 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 9b 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 2a 6b 8e 80 e1 07 80 c1 03 38 c1 [ 200.436020][ T4900] RSP: 0018:ffffc9000339fa68 EFLAGS: 00010293 [ 200.442103][ T4900] RAX: ffffffff883d8780 RBX: ffff8880614178f0 RCX: ffff888029c19dc0 [ 200.450089][ T4900] RDX: 0000000000000000 RSI: ffff888061417800 RDI: ffff88802ae89028 [ 200.458070][ T4900] RBP: ffffc9000339fc30 R08: ffff888029c19dc0 R09: 0000000000000008 [ 200.466058][ T4900] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880614178c0 [ 200.474046][ T4900] R13: dffffc0000000000 R14: ffff888061417910 R15: dffffc0000000000 [ 200.482048][ T4900] ? nft_pipapo_destroy+0x8b0/0x960 [ 200.487272][ T4900] ? nft_pipapo_destroy+0x8b0/0x960 [ 200.492490][ T4900] ? __lock_acquire+0x7d40/0x7d40 [ 200.497530][ T4900] ? do_raw_spin_lock+0x128/0x2f0 [ 200.502571][ T4900] nft_set_destroy+0x488/0xa30 [ 200.507354][ T4900] ? do_raw_spin_unlock+0x11d/0x230 [ 200.512570][ T4900] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 200.518485][ T4900] ? __lock_acquire+0x7d40/0x7d40 [ 200.523530][ T4900] ? nft_object_dump+0x1e0/0x1e0 [ 200.528658][ T4900] ? _raw_spin_unlock_irq+0x1f/0x40 [ 200.533967][ T4900] process_one_work+0x867/0xff0 [ 200.538849][ T4900] ? worker_detach_from_pool+0x240/0x240 [ 200.544493][ T4900] ? lockdep_hardirqs_off+0x70/0x100 [ 200.549798][ T4900] ? _raw_spin_lock_irq+0xb7/0xf0 [ 200.554836][ T4900] ? _raw_spin_lock_irqsave+0x100/0x100 [ 200.560397][ T4900] ? wq_worker_running+0x97/0x170 [ 200.565437][ T4900] worker_thread+0xad7/0x12a0 [ 200.570167][ T4900] kthread+0x42e/0x520 [ 200.574248][ T4900] ? rcu_lock_release+0x20/0x20 [ 200.579111][ T4900] ? kthread_blkcg+0xd0/0xd0 [ 200.583725][ T4900] ret_from_fork+0x1f/0x30 [ 200.588176][ T4900] [ 200.591291][ T4900] Kernel Offset: disabled [ 200.597370][ T4900] Rebooting in 86400 seconds..