last executing test programs: 2.389859401s ago: executing program 1 (id=15547): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000f40)={&(0x7f0000000f80)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="c805000000000000290000000300000043b6"], 0x5c8}, 0x0) 2.325664772s ago: executing program 1 (id=15549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xf, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20880) 2.170097096s ago: executing program 1 (id=15552): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) 2.111180547s ago: executing program 1 (id=15555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000180)) 1.981977361s ago: executing program 1 (id=15556): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010040494c20000200000010902240001000020100904005b0c0300060009058103"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x1043) 877.906638ms ago: executing program 0 (id=15579): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x30) 791.63026ms ago: executing program 2 (id=15583): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 784.449361ms ago: executing program 0 (id=15584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x4c014) 679.183613ms ago: executing program 0 (id=15588): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x5, @pix_mp={0xfffffefe, 0x0, 0x47504a4d, 0x6, 0x2, [{0x1000009, 0x47}, {0x8, 0x200008}, {0x4, 0xf533}, {0x54b, 0x80000001}, {0x7, 0x8}, {0x0, 0x3fe}, {0x8, 0x8b9}, {0x6, 0x3}], 0x5, 0x8, 0x7, 0x1, 0x7}}) 678.403393ms ago: executing program 2 (id=15589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000180)=0x1e) 623.485975ms ago: executing program 4 (id=15590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}]}, 0x30}}, 0x0) 622.986315ms ago: executing program 2 (id=15591): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f0000000100)={0x706, 0x2d, 0x0, 0xa, 0x800000000000, 0x2c}, 0x48) 606.378505ms ago: executing program 0 (id=15592): capset(&(0x7f0000002280)={0x19980330}, &(0x7f00000022c0)={0x200002, 0x200003, 0x801, 0x4, 0x9, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000012c0), 0xfffffffffffffe50}, 0x48) 542.836967ms ago: executing program 3 (id=15593): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x1, 0x17, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x10, 0xffffffff, 0xc}}) 542.596417ms ago: executing program 4 (id=15594): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 541.965117ms ago: executing program 2 (id=15595): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000840)='./file0\x00', 0x804, &(0x7f0000000d80)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@fat=@flush}, {@shortname_winnt}, {@uni_xlateno}, {@utf8}, {@rodir}, {@shortname_mixed}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@shortname_mixed}, {@rodir}, {@utf8}, {@rodir}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}]}, 0x1, 0x298, &(0x7f0000000940)="$eJzs3c1qa1UUAOB18p97B8nAkQj3gA4cXW59ghapIBYEJQN1oMWmIE0otBCoirEjn8AncOLLOBFfwAdQnFlBeiQ9OfkpJ7WVtCne7xtt1tqrZ+2dnXSUnc9eGx4dHJ8enn/9a7RaSVS2YzsukuhGJQrfRqlffi+PAwCP3EWWxR9ZrpmHzpZn1FdU1ir33hwAcC8W//9vuhcA4GF8+NHH7+3s7e1+kKatiOF3o14S0Zrndw7jixhEP15EJ/6OyGby8Tvv7u1GLZ3oxhvD8ag36kUMP/2pqP8t4qp+KzrRLa/fSnML9eNRrx5Pps/fHkT//R+iE68s1V8W9W+V1EevEW++vtD/8+jEz5/HcQziYNrbtP6vb7bS9O3s+z+/+mQSndQn41GvOZs3nV19sBcFAAAAAAAAAAAAAAAAAAAAAID/vefpTHf5/p3i4v8b8mX3AxW35Czc7/MiTdMsycPz+lq8WovaptYNAAAAAAAAAAAAAAAAAAAAj8np2ZdH+4NB/2Stg+Jr/SWpuFyONCPiNn+5WZp6dvvG8n6iuJ9gkETcbV31aF5V/vvk6h13rD3pp3+S1GJ9L0Eyi7QXU88if9Yk0s4HC5FbP+LHp/kuXk+18khxuo72k+hXbtyx1tIhqa/tHGYlx6+6sqpxPdKO8gVOUjc8vfH0P/WcdVakkoiozzZzec7Vm+zJ/EDW1/teLv24aNzDRxAAAAAAAAAAAAAAAAAAADA1/9JvSfJ8Aw0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAbMf///DoPxtHjVnKw6GdRiGtnwEgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgJ/BMAAP//dw9WdQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='memory.swap.current\x00', 0x275a, 0x0) 480.879288ms ago: executing program 3 (id=15596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000280)) 449.743909ms ago: executing program 4 (id=15597): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @vsb={0x6}}) 424.681289ms ago: executing program 3 (id=15598): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x500, 0x1c0, 0x0, 0x148, 0x1c0, 0x148, 0x468, 0x240, 0x240, 0x468, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x8}], 0x2, 0x2}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 333.998412ms ago: executing program 0 (id=15599): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file1\x00', 0x0, &(0x7f00000022c0)=ANY=[], 0x4, 0x6de, &(0x7f00000002c0)="$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") removexattr(&(0x7f0000000040)='.\x00', &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00') 333.726652ms ago: executing program 3 (id=15600): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x62, 0x5, 0x1368, 0x1180, 0x1180, 0xffffffff, 0x1180, 0x10c8, 0x12d0, 0x12d0, 0xffffffff, 0x12d0, 0x12d0, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe286, 0xc9b0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x7, @ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, @icmp_id=0x68, @port=0x4e20}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @multicast2, @multicast1, @port=0x4e21, @icmp_id=0x68}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13c8) 333.648222ms ago: executing program 4 (id=15601): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) 255.308024ms ago: executing program 3 (id=15602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30, 0x2d, 0x4e, 0x3a, 0x33, 0x2f]}}}, 0x4e}]}) 234.240294ms ago: executing program 2 (id=15603): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x128, 0x0, 0x148, 0x128, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x21, 0x45, 0x42}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0xea9a, 0x7, 'syz0\x00', 'syz0\x00', {0x80000001}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'vcan0\x00', {0xff}}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 233.727645ms ago: executing program 4 (id=15604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="94010000190001002cbd7000fedbdf251d01000015000300040000a0020000001727f7cdd841248604000000150001000000008006020000faca7ffef3f8c466060000001500010003000040050100004fe6d3452be0bc1e0700000015000300020000a005010000ddedebad2b0d2c41060000001e010600012423"], 0x194}, 0x1, 0x0, 0x0, 0x20004010}, 0x8004) 126.048367ms ago: executing program 3 (id=15605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0x3, "91abc12404cf378042f2"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) 125.873547ms ago: executing program 0 (id=15606): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x25}, 0x4e) 115.811217ms ago: executing program 1 (id=15607): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x103902, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x676d1dfa) 69.528578ms ago: executing program 4 (id=15608): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(r0, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd9) 0s ago: executing program 2 (id=15609): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): : device disconnected [ 969.386511][T18484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 969.409144][T18484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 969.437339][T18484] usb 3-1: SerialNumber: syz [ 969.461519][ T1318] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 969.523828][ T1361] netlink: 'syz.1.13249': attribute type 2 has an invalid length. [ 969.544881][ T1361] netlink: 244 bytes leftover after parsing attributes in process `syz.1.13249'. [ 969.623412][ T1368] openvswitch: netlink: IP tunnel dst address not specified [ 969.739803][T18484] cdc_acm 3-1:1.0: skipping garbage [ 969.751257][T18484] usb 3-1: USB disconnect, device number 92 [ 969.783930][ T1372] netlink: 'syz.1.13254': attribute type 7 has an invalid length. [ 969.792009][ T1372] netlink: 'syz.1.13254': attribute type 8 has an invalid length. [ 970.167322][ T1395] x_tables: duplicate underflow at hook 2 [ 970.198873][ T1397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13266'. [ 970.325697][ T1366] loop0: detected capacity change from 0 to 40427 [ 970.370281][ T1366] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 970.402535][ T1366] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 970.441389][ T1366] F2FS-fs (loop0): invalid crc value [ 970.454005][ T1409] trusted_key: encrypted_key: master key parameter is missing [ 970.495989][ T1366] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 970.626301][T18484] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 970.650432][ T1366] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 970.652087][ T1391] loop3: detected capacity change from 0 to 32768 [ 970.667961][ T1366] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 970.944682][ T1432] loop4: detected capacity change from 0 to 8192 [ 971.023825][T18484] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 971.085966][T18484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.126267][T18484] usb 3-1: config 0 descriptor?? [ 971.195349][T18484] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 971.398307][ T1451] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13288'. [ 971.494241][ T1456] netlink: 'syz.3.13292': attribute type 1 has an invalid length. [ 971.668972][T18484] gspca_cpia1: usb_control_msg 03, error -71 [ 971.695775][T18484] gspca_cpia1: usb_control_msg 01, error -71 [ 971.702148][T18484] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 971.723115][T18484] usb 3-1: USB disconnect, device number 93 [ 971.739909][ T1475] usb usb8: usbfs: process 1475 (syz.0.13299) did not claim interface 0 before use [ 971.836825][ T1482] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13302'. [ 971.854458][ T1482] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13302'. [ 972.101563][ T4326] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 972.221400][ T1460] loop1: detected capacity change from 0 to 40427 [ 972.255773][ T1460] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 972.296647][ T1460] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 972.348222][ T1460] F2FS-fs (loop1): invalid crc value [ 972.369213][ T1496] rxe_eth0 speed is unknown, defaulting to 1000 [ 972.388365][ T1460] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 972.489257][ T1490] loop3: detected capacity change from 0 to 32768 [ 972.513037][ T1490] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.13306 (1490) [ 972.525923][ T4326] usb 5-1: not running at top speed; connect to a high speed hub [ 972.568312][ T1490] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 972.588405][ T1490] BTRFS info (device loop3): enabling ssd optimizations [ 972.606760][ T1460] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 972.614772][T18484] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 972.615492][ T4326] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 972.631648][ T1460] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 972.646922][ T1490] BTRFS info (device loop3): not using ssd optimizations [ 972.671287][ T1507] loop2: detected capacity change from 0 to 1024 [ 972.679625][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.688651][ T1490] BTRFS info (device loop3): turning off barriers [ 972.699463][ T1490] BTRFS info (device loop3): use no compression [ 972.743685][ T1490] BTRFS info (device loop3): using free space tree [ 972.763136][ T1496] lo speed is unknown, defaulting to 1000 [ 972.769705][ T1490] BTRFS info (device loop3): has skinny extents [ 972.785920][ T1507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 972.801706][ T1496] vxcan1 speed is unknown, defaulting to 1000 [ 972.818577][ T1507] ext4 filesystem being mounted at /2685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.846842][ T1507] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.13312: corrupted xattr block 128 [ 972.872191][ T26] audit: type=1800 audit(2000001864.703:56): pid=1507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13312" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 973.020753][T18484] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 973.020983][ C0] port100 5-1:1.0: NFC: Received an invalid ack [ 973.030514][T18484] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 973.046685][ T4326] port100 5-1:1.0: NFC: Could not get supported command types [ 973.085010][ C0] port100 5-1:1.0: NFC: The urb has been stopped (status -2) [ 973.210848][T18480] usb 5-1: USB disconnect, device number 97 [ 973.395313][T18484] usb 1-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 973.413765][T18484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.424541][T18484] usb 1-1: Product: syz [ 973.437902][T18484] usb 1-1: Manufacturer: syz [ 973.442665][T18484] usb 1-1: SerialNumber: syz [ 973.504780][T18484] qcserial 1-1:1.0: Qualcomm USB modem converter detected [ 973.534419][ T1535] loop2: detected capacity change from 0 to 4096 [ 973.565071][ T1535] ntfs3: loop2: mft corrupted [ 973.598554][ T1535] ntfs3: loop2: Failed to load $MFT. [ 973.617095][ T1537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13313'. [ 973.783836][T18484] usb 1-1: USB disconnect, device number 85 [ 973.797966][T18484] qcserial 1-1:1.0: device disconnected [ 973.842454][ T1541] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.13318'. [ 974.220130][ T1564] device geneve4 entered promiscuous mode [ 974.389424][ T1108] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 974.643144][ T1601] loop0: detected capacity change from 0 to 256 [ 974.887061][ T1108] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 974.914097][ T1108] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 974.954381][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 974.999706][ T1624] netlink: 'syz.4.13360': attribute type 7 has an invalid length. [ 975.023038][ T1629] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 975.041575][ T1624] netlink: 'syz.4.13360': attribute type 8 has an invalid length. [ 975.050116][ T1627] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 975.165551][ T1636] comedi comedi3: dmm32at: I/O port conflict (0xcf7,16) [ 975.173788][ T1108] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 975.201498][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.218968][ T1108] usb 4-1: Product: syz [ 975.238087][ T1108] usb 4-1: Manufacturer: syz [ 975.256883][ T1108] usb 4-1: SerialNumber: syz [ 975.284831][ T1108] usb 4-1: config 0 descriptor?? [ 975.323378][ T1646] netlink: 'syz.2.13370': attribute type 9 has an invalid length. [ 975.340906][ T1646] netlink: 'syz.2.13370': attribute type 7 has an invalid length. [ 975.348797][ T1646] netlink: 'syz.2.13370': attribute type 8 has an invalid length. [ 975.394971][ T1646] netlink: 'syz.2.13370': attribute type 13 has an invalid length. [ 975.418817][ T1649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13372'. [ 975.423746][ T1641] loop1: detected capacity change from 0 to 4096 [ 975.573266][ T1657] netlink: 'syz.0.13376': attribute type 7 has an invalid length. [ 975.599287][ T1641] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 975.603841][ T1657] netlink: 'syz.0.13376': attribute type 8 has an invalid length. [ 975.651318][ T1641] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 975.826865][ T7305] usb 4-1: USB disconnect, device number 88 [ 975.964881][ T1673] loop1: detected capacity change from 0 to 4096 [ 976.013898][ T1673] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 976.036208][ T1673] NILFS (loop1): mounting unchecked fs [ 976.041768][ T1673] NILFS (loop1): recovery required for readonly filesystem [ 976.041789][ T1673] NILFS (loop1): write access will be enabled during recovery [ 976.072857][ T1673] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 976.078692][ T1108] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 976.103713][ T4348] udevd[4348]: incorrect nilfs2 checksum on /dev/loop1 [ 976.367138][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 976.536465][ T1690] loop4: detected capacity change from 0 to 4096 [ 976.549146][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.642698][ T1690] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 976.666450][ T1690] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 976.685798][ T1690] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 976.729709][ T1690] ntfs: volume version 3.1. [ 976.741875][ T1108] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 976.765679][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.822398][ T4189] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 976.823246][ T1108] usb 3-1: Product: syz [ 976.890907][ T1108] usb 3-1: Manufacturer: syz [ 976.899262][ T1108] usb 3-1: SerialNumber: syz [ 976.932969][ T1108] usb 3-1: config 0 descriptor?? [ 976.957395][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13404'. [ 977.009954][ T1108] gspca_main: t613-2.14.0 probing 17a1:0128 [ 977.236052][ T1737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13414'. [ 977.265971][ T1108] gspca_t613: unknown sensor 0000 [ 977.271297][ T1108] t613: probe of 3-1:0.0 failed with error -22 [ 977.317024][ T1108] usb 3-1: USB disconnect, device number 94 [ 977.574068][ T1759] netlink: 'syz.4.13426': attribute type 6 has an invalid length. [ 977.723036][ T1767] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 977.746905][ T1771] loop1: detected capacity change from 0 to 64 [ 978.109861][T18484] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 978.119597][ T1779] loop3: detected capacity change from 0 to 4096 [ 978.252357][ T1779] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 978.280410][ T1779] ntfs3: loop3: Failed to load $Extend. [ 978.303939][ T1789] netlink: 'syz.4.13441': attribute type 21 has an invalid length. [ 978.347571][ T1789] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13441'. [ 978.348138][ T1779] ntfs3: loop3: ino=5, "/" directory corrupted [ 978.369858][ T1758] loop0: detected capacity change from 0 to 32768 [ 978.378170][ T1789] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13441'. [ 978.462974][T18484] usb 3-1: not running at top speed; connect to a high speed hub [ 978.548366][T18484] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.578604][T18484] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 978.625104][T18484] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 978.649874][ T1799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13443'. [ 978.665590][T18484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.007930][T18484] usb 3-1: string descriptor 0 read error: -71 [ 979.014350][T18484] usb 3-1: Found UVC 1.00 device (046d:0825) [ 979.039831][T18484] usb 3-1: No valid video chain found. [ 979.072498][T18484] usb 3-1: USB disconnect, device number 95 [ 979.118427][ T1823] x_tables: unsorted underflow at hook 3 [ 979.290301][ T1833] xt_TCPMSS: Only works on TCP SYN packets [ 979.449580][ T1843] loop0: detected capacity change from 0 to 256 [ 979.488507][ T1847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13470'. [ 979.501188][ T1847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13470'. [ 979.564270][ T1849] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13471'. [ 979.627778][ T1849] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13471'. [ 979.680648][ T1849] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13471'. [ 979.784439][ T1805] loop4: detected capacity change from 0 to 32768 [ 980.085596][ T1805] XFS (loop4): Mounting V5 Filesystem [ 980.299515][ T1805] XFS (loop4): Ending clean mount [ 980.391710][ T4189] XFS (loop4): Unmounting Filesystem [ 980.508090][ T1920] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13502'. [ 980.578262][ T1925] loop1: detected capacity change from 0 to 256 [ 980.671254][ T1931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13508'. [ 980.833392][ T1937] loop2: detected capacity change from 0 to 2048 [ 980.946471][ T1944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 981.041598][ T1948] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 981.168814][ T1956] loop2: detected capacity change from 0 to 512 [ 981.336565][ T1970] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13524'. [ 981.346181][ T1970] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13524'. [ 981.355396][ T1956] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 981.402446][ T1956] ext4 filesystem being mounted at /2720/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.546276][ T1983] loop3: detected capacity change from 0 to 64 [ 981.902981][ T1997] tmpfs: Bad value for 'mpol' [ 981.947615][ T7305] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 982.031986][ T1975] loop1: detected capacity change from 0 to 32768 [ 982.138113][ T1975] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 982.172522][ T1975] BTRFS info (device loop1): setting nodatasum [ 982.178823][ T1975] BTRFS info (device loop1): force zlib compression, level 3 [ 982.221549][ T1975] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 982.253660][ T2013] loop2: detected capacity change from 0 to 512 [ 982.260354][ T7305] usb 5-1: Using ep0 maxpacket: 16 [ 982.266504][ T1975] BTRFS info (device loop1): use lzo compression, level 0 [ 982.299454][ T1975] BTRFS info (device loop1): turning on flush-on-commit [ 982.317071][ T1975] BTRFS info (device loop1): enabling auto defrag [ 982.341598][ T1975] BTRFS info (device loop1): max_inline at 4096 [ 982.363871][ T2013] EXT4-fs (loop2): Ignoring removed nobh option [ 982.380830][ T1975] BTRFS info (device loop1): using free space tree [ 982.402256][ T1975] BTRFS info (device loop1): has skinny extents [ 982.412019][ T2013] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 982.429020][ T7305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.449267][ T2013] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.13544: attempt to clear invalid blocks 1 len 1 [ 982.484244][ T7305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 982.514990][ T2013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 982.557498][ T2013] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.13544: invalid indirect mapped block 1819239214 (level 0) [ 982.600450][ T2013] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.13544: invalid indirect mapped block 1819239214 (level 1) [ 982.669841][ T2013] EXT4-fs (loop2): 1 truncate cleaned up [ 982.696093][ T7305] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 982.705538][ T2013] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 982.724379][ T7305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.749409][ T1975] BTRFS info (device loop1): enabling ssd optimizations [ 982.770813][ T7305] usb 5-1: Product: syz [ 982.775077][ T7305] usb 5-1: Manufacturer: syz [ 982.779710][ T7305] usb 5-1: SerialNumber: syz [ 983.145290][ T7305] usb 5-1: 0:2 : does not exist [ 983.174042][ T7305] usb 5-1: USB disconnect, device number 98 [ 983.481083][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.046000][ T2080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13570'. [ 984.700469][ T2126] nvme_tcp: malformed address passed: 1::8009 [ 985.097745][ T2107] loop1: detected capacity change from 0 to 32768 [ 985.182272][ T2107] XFS (loop1): Mounting V5 Filesystem [ 985.322785][ T2107] XFS (loop1): Ending clean mount [ 985.357903][ T13] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 985.425697][ T4199] XFS (loop1): Unmounting Filesystem [ 985.556399][ T2181] x_tables: unsorted entry at hook 3 [ 985.812201][ T2189] __nla_validate_parse: 2 callbacks suppressed [ 985.812220][ T2189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13617'. [ 985.830245][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.858784][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 985.941580][ T2193] rxe_eth0 speed is unknown, defaulting to 1000 [ 985.993135][ T2202] vivid-001: ================= START STATUS ================= [ 985.997828][ T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 986.019843][ T2202] vivid-001: Enable Output Cropping: true [ 986.029087][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 986.037511][ T2202] vivid-001: Enable Output Composing: true [ 986.047993][ T2202] vivid-001: Enable Output Scaler: true [ 986.048594][ T13] usb 4-1: SerialNumber: syz [ 986.063530][ T2202] vivid-001: Tx RGB Quantization Range: Automatic [ 986.074466][ T2202] vivid-001: Transmit Mode: HDMI [ 986.096791][ T2202] vivid-001: Display Present: true inactive [ 986.117076][ T2202] vivid-001: Hotplug Present: 0x00000001 [ 986.137738][ T13] usb 4-1: 0:2 : does not exist [ 986.138991][ T2202] vivid-001: RxSense Present: 0x00000001 [ 986.167634][ T2202] vivid-001: EDID Present: 0x00000001 [ 986.176632][ T2208] loop1: detected capacity change from 0 to 64 [ 986.181816][ T2202] vivid-001: ================== END STATUS ================== [ 986.277551][ T7305] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 986.416155][ T1108] usb 4-1: USB disconnect, device number 89 [ 986.467404][ T2193] lo speed is unknown, defaulting to 1000 [ 986.497806][ T2193] vxcan1 speed is unknown, defaulting to 1000 [ 986.681718][ T2222] UBIFS error (pid: 2222): cannot open "ubi0:testvol", error -19 [ 986.737234][ T7305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 986.765774][ T7305] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 986.866485][ T2210] loop0: detected capacity change from 0 to 32768 [ 986.935646][ T2210] [ 986.935646][ T2210] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 986.935646][ T2210] [ 987.004588][ T7305] usb 3-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 987.013728][ T7305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.023738][ T2210] ERROR: (device loop0): dtSearch: stack overrun! [ 987.023738][ T2210] [ 987.052305][ T7305] usb 3-1: Product: syz [ 987.059478][ T2210] btstack dump: [ 987.063004][ T2210] bn = 0, index = 0 [ 987.066858][ T2210] bn = 0, index = 0 [ 987.076336][ T7305] usb 3-1: Manufacturer: syz [ 987.089784][ T7305] usb 3-1: SerialNumber: syz [ 987.094616][ T2210] bn = 0, index = 0 [ 987.098469][ T2210] bn = 0, index = 0 [ 987.122295][ T2210] bn = 0, index = 0 [ 987.126581][ T2210] bn = 0, index = 0 [ 987.130425][ T2210] bn = 0, index = 0 [ 987.155798][ T7305] qcserial 3-1:1.0: Qualcomm USB modem converter detected [ 987.167804][ T2210] bn = 0, index = 0 [ 987.171708][ T2210] jfs_rename did not expect dtDelete to return rc = -5 [ 987.197332][ T2210] ERROR: (device loop0): jfs_rename: [ 987.197332][ T2210] [ 987.444563][ T4248] ERROR: (device loop0): diWrite: ixpxd invalid [ 987.444563][ T4248] [ 987.485513][ T4248] ERROR: (device loop0): txCommit: [ 987.485513][ T4248] [ 987.493213][ T4248] jfs_write_inode: jfs_commit_inode failed! [ 987.528503][ T4205] [ 987.528503][ T4205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 987.528503][ T4205] [ 987.550019][ T4205] [ 987.550019][ T4205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 987.550019][ T4205] [ 987.577323][ T2243] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 987.592602][T18664] usb 3-1: USB disconnect, device number 96 [ 987.612805][T18664] qcserial 3-1:1.0: device disconnected [ 987.651187][ T2241] loop4: detected capacity change from 0 to 4096 [ 987.766249][ T2250] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 987.885313][ T2257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.899494][ T2252] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 987.899651][ T2257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.927432][ T2257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.960440][ T2257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.977830][ T2260] validate_nla: 2 callbacks suppressed [ 987.977850][ T2260] netlink: 'syz.4.13649': attribute type 1 has an invalid length. [ 988.024380][ T2260] netlink: 244 bytes leftover after parsing attributes in process `syz.4.13649'. [ 988.368070][ T2277] loop3: detected capacity change from 0 to 4096 [ 988.422261][ T2277] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 988.500725][ T2289] device gtp0 entered promiscuous mode [ 988.517160][ T2277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 988.694740][ T2301] loop3: detected capacity change from 0 to 256 [ 988.827330][ T2304] rxe_eth0 speed is unknown, defaulting to 1000 [ 989.018461][ T2269] loop0: detected capacity change from 0 to 32768 [ 989.111125][ T2318] loop2: detected capacity change from 0 to 64 [ 989.141021][ T2269] JBD2: Ignoring recovery information on journal [ 989.154772][ T2318] hfs: file_umask requires a value [ 989.163929][T18468] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 989.199387][ T2318] hfs: unable to parse mount options [ 989.211320][ T2304] lo speed is unknown, defaulting to 1000 [ 989.275406][ T2304] vxcan1 speed is unknown, defaulting to 1000 [ 989.286444][ T2269] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 989.373516][ T2326] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13680'. [ 989.409927][ T2326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13680'. [ 989.548933][T18468] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 989.584633][T18468] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 989.596283][ T2330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13682'. [ 989.615714][ T4205] ocfs2: Unmounting device (7,0) on (node local) [ 989.684259][ T2334] xt_l2tp: v2 sid > 0xffff: 262144 [ 989.784080][T18468] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 989.804157][T18468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.825750][T18468] usb 2-1: Product: syz [ 989.837268][T18468] usb 2-1: Manufacturer: syz [ 989.841988][T18468] usb 2-1: SerialNumber: syz [ 989.948158][T18468] qcserial 2-1:1.0: Qualcomm USB modem converter detected [ 990.158163][ T4284] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 990.301167][T18485] usb 2-1: USB disconnect, device number 98 [ 990.318653][T18485] qcserial 2-1:1.0: device disconnected [ 990.543043][ T4284] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 990.566419][ T2344] loop3: detected capacity change from 0 to 32768 [ 990.576250][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.618273][ T4284] usb 5-1: config 0 descriptor?? [ 990.672643][ T4284] cp210x 5-1:0.0: cp210x converter detected [ 990.699175][ T2344] XFS (loop3): Mounting V5 Filesystem [ 990.737432][ T2371] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13699'. [ 990.809760][ T2344] XFS (loop3): Ending clean mount [ 990.821251][ T2371] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13699'. [ 990.907026][ T4191] XFS (loop3): Unmounting Filesystem [ 991.030475][ T2376] xt_l2tp: invalid flags combination: 8 [ 991.101011][ T2355] loop0: detected capacity change from 0 to 32768 [ 991.142322][ T4284] usb 5-1: cp210x converter now attached to ttyUSB0 [ 991.176142][ T4284] usb 5-1: USB disconnect, device number 99 [ 991.217501][ T4284] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 991.272843][ T4284] cp210x 5-1:0.0: device disconnected [ 991.357286][ T2384] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 992.185711][ T2426] nvme_fabrics: missing parameter 'nqn=%s' [ 992.241745][ T2432] loop2: detected capacity change from 0 to 64 [ 992.499813][ T2445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13732'. [ 992.510113][ T2394] loop1: detected capacity change from 0 to 32768 [ 992.583486][ T2447] loop3: detected capacity change from 0 to 1764 [ 992.679109][ T2447] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 992.950601][ T2474] netlink: 'syz.2.13746': attribute type 1 has an invalid length. [ 992.958536][ T2474] openvswitch: netlink: Actions may not be safe on all matching packets [ 993.329588][ T2508] loop1: detected capacity change from 0 to 256 [ 993.395508][ T2511] loop4: detected capacity change from 0 to 1764 [ 993.410420][ T2518] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 993.519223][ T2511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 993.554040][ T2511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 993.583309][ T2511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 993.615659][ T2511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 993.661472][ T2511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 993.690847][ T2517] loop0: detected capacity change from 0 to 4096 [ 993.738772][ T2511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 993.781135][ T2517] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 993.833438][ T2511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 993.869259][ T2517] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 993.977598][ T2511] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 994.019728][ T2511] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 994.265395][ T2555] netlink: 'syz.2.13778': attribute type 21 has an invalid length. [ 994.575134][ T2574] xt_TCPMSS: Only works on TCP SYN packets [ 994.605871][ T2576] device geneve1 entered promiscuous mode [ 994.922641][ T2598] loop2: detected capacity change from 0 to 256 [ 995.027658][ T2543] loop0: detected capacity change from 0 to 32768 [ 995.191987][ T2543] XFS (loop0): Mounting V5 Filesystem [ 995.255313][ T2566] loop1: detected capacity change from 0 to 32768 [ 995.373718][ T2543] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 995.385181][ T2632] loop2: detected capacity change from 0 to 256 [ 995.443916][ T2543] XFS (loop0): Starting recovery (logdev: internal) [ 995.532233][ T2543] XFS (loop0): Ending recovery (logdev: internal) [ 995.802059][ T4205] XFS (loop0): Unmounting Filesystem [ 995.869509][ T2650] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.13812'. [ 996.201483][ T2682] xt_hashlimit: size too large, truncated to 1048576 [ 996.393753][ T2696] loop2: detected capacity change from 0 to 256 [ 996.510302][ T2702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13833'. [ 996.530095][ T2698] loop4: detected capacity change from 0 to 2048 [ 996.578330][ T2698] loop4: p1 < > p3 p4 [ 996.578330][ T2698] p4: [ 996.615568][ T2698] loop4: p3 start 458752 is beyond EOD, truncated [ 996.622087][ T2698] loop4: p4 size 722688 extends beyond EOD, truncated [ 996.661795][ T2698] loop4: p5 start 262464109 is beyond EOD, truncated [ 996.703651][ T2698] loop4: p6 size 2304 extends beyond EOD, truncated [ 996.981537][ T2728] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 997.471862][ T2756] loop0: detected capacity change from 0 to 1764 [ 997.575606][ T2756] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 997.607265][ T2756] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 997.664382][ T2756] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 997.733492][ T2756] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 997.771690][ T2756] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 997.798236][ T2756] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 997.827296][ T2756] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 997.871880][ T2756] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 997.892071][ T2756] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 998.045095][ T2731] XFS (loop3): Mounting V5 Filesystem [ 998.180189][ T2731] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 998.239216][ T2788] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13857'. [ 998.280546][ T2731] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 998.392428][ T2731] XFS (loop3): Ending clean mount [ 998.544463][ T2792] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 998.560509][ T4191] XFS (loop3): Unmounting Filesystem [ 998.613986][ T2792] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 998.685370][ T2792] ntfs: volume version 3.1. [ 998.706831][ T2792] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 998.828168][ T2792] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 998.841056][ T2792] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 998.971339][ T2792] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 999.010052][ T2792] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 999.069947][ T2792] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 999.085773][ T4284] kernel write not supported for file /5622/timerslack_ns (pid: 4284 comm: kworker/1:4) [ 999.165948][ T2794] set_capacity_and_notify: 3 callbacks suppressed [ 999.165966][ T2794] loop1: detected capacity change from 0 to 32768 [ 999.274364][ T2794] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.13865 (2794) [ 999.333760][ T2794] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 999.360402][ T2794] BTRFS info (device loop1): enabling auto defrag [ 999.386020][ T2794] BTRFS info (device loop1): force clearing of disk cache [ 999.414934][ T2794] BTRFS info (device loop1): ignoring data csums [ 999.436786][ T2794] BTRFS info (device loop1): turning on async discard [ 999.479744][ T2794] BTRFS info (device loop1): setting nodatacow, compression disabled [ 999.500144][ T2794] BTRFS info (device loop1): turning off async discard [ 999.533536][ T2794] BTRFS info (device loop1): disabling free space tree [ 999.560622][ T2794] BTRFS info (device loop1): has skinny extents [ 1000.026540][ T2873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13891'. [ 1000.035708][ T2873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13891'. [ 1000.554391][ T2911] netlink: 'syz.2.13908': attribute type 3 has an invalid length. [ 1000.600993][ T2911] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13908'. [ 1000.633454][ T2890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1000.824200][ T2924] netlink: 388 bytes leftover after parsing attributes in process `syz.4.13913'. [ 1001.195417][ T2975] loop0: detected capacity change from 0 to 512 [ 1001.252866][ T2975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1001.325847][ T2985] loop2: detected capacity change from 0 to 512 [ 1001.354474][ T2975] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.13931: invalid indirect mapped block 32768 (level 2) [ 1001.424733][ T2985] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1001.447417][ T2975] EXT4-fs (loop0): 1 orphan inode deleted [ 1001.457928][ T2975] EXT4-fs (loop0): 1 truncate cleaned up [ 1001.463849][ T2985] ext4 filesystem being mounted at /2812/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.478599][ T2975] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1001.755499][ T2971] loop3: detected capacity change from 0 to 32768 [ 1001.971125][ T2971] XFS (loop3): Mounting V5 Filesystem [ 1002.134292][ T2971] XFS (loop3): Ending clean mount [ 1002.234854][ T4191] XFS (loop3): Unmounting Filesystem [ 1002.512442][ T4326] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1002.520223][ T1108] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1002.804942][ T4326] usb 2-1: Using ep0 maxpacket: 32 [ 1002.810232][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 1002.879868][ T3043] loop2: detected capacity change from 0 to 32768 [ 1002.954951][ T1108] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1002.963240][ T1108] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1002.982829][ T3079] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1002.993642][ T1108] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1003.009023][ T4326] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1003.043572][ T1108] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1003.070840][ T1108] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1003.106186][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1003.136415][ T4326] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 1003.164092][ T4326] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.209298][ T4326] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1003.228231][ T3043] XFS (loop2): Mounting V5 Filesystem [ 1003.308460][ T3043] XFS (loop2): Ending clean mount [ 1003.339826][ T1108] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1003.348961][ T1108] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1003.366222][ T4190] XFS (loop2): Unmounting Filesystem [ 1003.381324][ T1108] usb 5-1: Product: syz [ 1003.386312][ T1108] usb 5-1: Manufacturer: syz [ 1003.391117][ T1108] usb 5-1: SerialNumber: syz [ 1003.406807][ T1108] usb 5-1: config 0 descriptor?? [ 1003.457780][ T4326] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1003.477764][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.491503][ T1108] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1003.510473][ T4326] usb 2-1: Product: syz [ 1003.514732][ T4326] usb 2-1: Manufacturer: syz [ 1003.519376][ T4326] usb 2-1: SerialNumber: syz [ 1003.522477][T18484] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1003.540870][ T1108] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1003.566436][ T3037] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1003.674058][ T3093] loop3: detected capacity change from 0 to 32768 [ 1003.725052][ T3038] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1003.737453][T18480] usb 5-1: USB disconnect, device number 100 [ 1003.745016][T18480] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1003.809922][T18484] usb 1-1: Using ep0 maxpacket: 8 [ 1003.837826][ T3093] XFS (loop3): Mounting V5 Filesystem [ 1003.907104][ T4326] usblp0: Disabling reads from problematic bidirectional printer [ 1003.926461][ T3093] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1003.942032][ T4326] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 8 proto 1 vid 0x03F0 pid 0x0004 [ 1003.950488][T18484] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1003.961957][ T4326] usb 2-1: USB disconnect, device number 99 [ 1003.986248][ T4326] usblp0: removed [ 1004.011376][ T3093] XFS (loop3): Starting recovery (logdev: internal) [ 1004.049360][ T3093] XFS (loop3): Ending recovery (logdev: internal) [ 1004.094097][ T4191] XFS (loop3): Unmounting Filesystem [ 1004.173641][T18484] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1004.185187][T18484] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1004.193492][T18484] usb 1-1: Product: syz [ 1004.198314][T18484] usb 1-1: Manufacturer: syz [ 1004.202996][T18484] usb 1-1: SerialNumber: syz [ 1004.483487][T18484] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 1004.491772][T18484] visor: probe of 1-1:1.0 failed with error -71 [ 1004.522568][T18484] usb 1-1: USB disconnect, device number 86 [ 1004.545266][ T4348] udevd[4348]: setting owner of /dev/bus/usb/001/086 to uid=0, gid=0 failed: No such file or directory [ 1004.672553][ T3138] loop3: detected capacity change from 0 to 16 [ 1004.782806][ T3138] erofs: (device loop3): mounted with root inode @ nid 36. [ 1004.828259][ T3138] erofs: (device loop3): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1005.062304][ T3156] netlink: 'syz.3.14002': attribute type 2 has an invalid length. [ 1005.112338][ T1108] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1005.127725][ T3160] xt_l2tp: invalid flags combination: 8 [ 1005.195887][ T3135] loop4: detected capacity change from 0 to 32768 [ 1005.275686][ T3135] XFS (loop4): Mounting V5 Filesystem [ 1005.355159][ T3135] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1005.372550][ T3182] loop0: detected capacity change from 0 to 64 [ 1005.418568][ T3135] XFS (loop4): Starting recovery (logdev: internal) [ 1005.434886][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 1005.458471][ T3135] XFS (loop4): Ending recovery (logdev: internal) [ 1005.503484][ T4189] XFS (loop4): Unmounting Filesystem [ 1005.582973][ T3190] loop3: detected capacity change from 0 to 256 [ 1005.596804][ T1108] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1005.605099][ T1108] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1005.624719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.645936][ T1108] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1005.673649][ T3190] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1005.705253][ T1108] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1005.744778][ T1108] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1005.811460][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1005.986069][ T3196] loop3: detected capacity change from 0 to 4096 [ 1006.012401][ T1108] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1006.021574][ T1108] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1006.041419][ T1108] usb 3-1: Product: syz [ 1006.052234][ T1108] usb 3-1: Manufacturer: syz [ 1006.086435][ T3196] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1006.098460][ T1108] usb 3-1: SerialNumber: syz [ 1006.124195][ T1108] usb 3-1: config 0 descriptor?? [ 1006.195818][ T1108] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1006.216174][ T1108] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1006.286059][ T3203] loop0: detected capacity change from 0 to 64 [ 1006.473494][ T3188] loop1: detected capacity change from 0 to 32768 [ 1006.484340][ T3144] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1006.524896][ T4284] usb 3-1: USB disconnect, device number 97 [ 1006.539920][ T4284] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1006.563805][ T3209] loop3: detected capacity change from 0 to 4096 [ 1006.639838][ T3188] XFS (loop1): Mounting V5 Filesystem [ 1006.715995][ T3223] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1006.791885][ T3188] XFS (loop1): Ending clean mount [ 1006.869056][ T4199] XFS (loop1): Unmounting Filesystem [ 1006.891482][ T3234] syz.4.14032 uses old SIOCAX25GETINFO [ 1006.990026][ T3239] netlink: 'syz.4.14036': attribute type 1 has an invalid length. [ 1007.024822][ T3239] netlink: 'syz.4.14036': attribute type 9 has an invalid length. [ 1007.165662][ T3249] nvme_fabrics: missing parameter 'nqn=%s' [ 1007.252407][ T4284] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1007.304651][ T3257] loop4: detected capacity change from 0 to 2048 [ 1007.377614][ T3255] loop2: detected capacity change from 0 to 4096 [ 1007.386427][ T3257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.443006][ T3260] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1007.733806][ T4284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1007.829775][ T4284] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1007.850541][ T4284] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1008.084094][ T3264] XFS (loop1): Mounting V5 Filesystem [ 1008.129348][ T4284] usb 1-1: string descriptor 0 read error: -22 [ 1008.137109][ T4284] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1008.154860][ T3267] XFS (loop3): Mounting V5 Filesystem [ 1008.170735][ T4284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.191976][ T3264] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1008.216943][ T3264] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1008.289359][ T3264] XFS (loop1): Ending clean mount [ 1008.289876][ T3236] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1008.303910][ T3267] XFS (loop3): Ending clean mount [ 1008.335566][ T4284] usb 1-1: MIDIStreaming interface descriptor not found [ 1008.372270][ T4191] XFS (loop3): Unmounting Filesystem [ 1008.550433][ T4199] XFS (loop1): Unmounting Filesystem [ 1008.692611][ T1108] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1008.995173][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 1009.134307][ T1108] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.153870][ T1108] usb 5-1: config 0 has no interface number 0 [ 1009.167965][ T1108] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1009.221838][ T4284] usb 1-1: USB disconnect, device number 87 [ 1009.261303][ T13] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1009.351796][ T3321] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1009.369341][ T1108] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1009.388878][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.408220][ T1108] usb 5-1: Product: syz [ 1009.419064][ T1108] usb 5-1: Manufacturer: syz [ 1009.429936][ T1108] usb 5-1: SerialNumber: syz [ 1009.451907][ T1108] usb 5-1: config 0 descriptor?? [ 1009.561097][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 1009.700787][ T13] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1009.715551][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1009.745383][ T1108] i2c-cp2615: probe of 5-1:0.1 failed with error -22 [ 1009.786268][ T13] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1009.811950][ T3323] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1009.855714][ T13] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1009.887466][ T13] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1009.904726][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1009.925610][ T3315] XFS (loop1): Mounting V5 Filesystem [ 1009.961858][ T4205] ocfs2: Unmounting device (7,0) on (node local) [ 1010.011259][ T4326] usb 5-1: USB disconnect, device number 101 [ 1010.127593][ T3315] XFS (loop1): Ending clean mount [ 1010.138953][ T13] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1010.158948][ T13] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1010.159557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.201330][ T13] usb 4-1: Product: syz [ 1010.213761][ T13] usb 4-1: Manufacturer: syz [ 1010.226676][ T3351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14075'. [ 1010.237420][ T13] usb 4-1: SerialNumber: syz [ 1010.258262][ T13] usb 4-1: config 0 descriptor?? [ 1010.311539][ T13] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1010.342147][ T4199] XFS (loop1): Unmounting Filesystem [ 1010.354800][ T13] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1010.562309][ T3309] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1010.577269][ T3361] set_capacity_and_notify: 5 callbacks suppressed [ 1010.577287][ T3361] loop0: detected capacity change from 0 to 4096 [ 1010.598017][ T13] usb 4-1: USB disconnect, device number 90 [ 1010.609243][ T13] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1010.667253][ T4284] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1010.707767][ T3361] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1010.724845][ T3366] loop4: detected capacity change from 0 to 512 [ 1010.924651][ T3366] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.14082: invalid block [ 1010.951234][ T4284] usb 3-1: Using ep0 maxpacket: 32 [ 1010.977961][ T3366] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.14082: invalid indirect mapped block 4294967295 (level 1) [ 1011.008931][ T3376] loop1: detected capacity change from 0 to 2048 [ 1011.010089][ T3380] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1011.026146][ T3380] overlayfs: missing 'lowerdir' [ 1011.030432][ T3366] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.14082: invalid indirect mapped block 4294967295 (level 1) [ 1011.057779][ T3366] EXT4-fs (loop4): 2 truncates cleaned up [ 1011.064183][ T3366] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1011.098491][ T3376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1011.122762][ T4284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1011.218686][ T4284] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 1011.233177][ T4284] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.319760][ T4284] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1011.445950][ T3399] netlink: 'syz.0.14096': attribute type 23 has an invalid length. [ 1011.523677][ T4284] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1011.542059][ T3407] IPv6: sit1: Disabled Multicast RS [ 1011.556766][ T4284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.576114][ T4284] usb 3-1: Product: syz [ 1011.580358][ T4284] usb 3-1: Manufacturer: syz [ 1011.602277][ T4284] usb 3-1: SerialNumber: syz [ 1011.621169][ T3411] netlink: 'syz.3.14103': attribute type 4 has an invalid length. [ 1011.627914][ T3401] loop4: detected capacity change from 0 to 4096 [ 1011.636238][ T3357] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1011.647517][ T3411] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14103'. [ 1011.670617][ T3401] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1011.693560][ T3411] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1011.821553][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1011.827986][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1011.957035][ T4284] usblp0: Disabling reads from problematic bidirectional printer [ 1011.991695][ T4284] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 8 proto 1 vid 0x03F0 pid 0x0004 [ 1012.024589][ T4284] usb 3-1: USB disconnect, device number 98 [ 1012.043880][ T4284] usblp0: removed [ 1012.083584][ T3436] netlink: 100 bytes leftover after parsing attributes in process `syz.3.14115'. [ 1012.689311][ T3489] loop2: detected capacity change from 0 to 256 [ 1012.938376][ T3495] loop2: detected capacity change from 0 to 512 [ 1012.991719][ T3495] EXT4-fs (loop2): inline encryption not supported [ 1013.025906][ T3495] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1013.065919][ T3495] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1013.075536][ T3507] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1013.110647][ T3495] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1013.156761][ T3495] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1013.188729][ T3495] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.14141: invalid indirect mapped block 2683928664 (level 1) [ 1013.219992][ T3461] loop1: detected capacity change from 0 to 40427 [ 1013.230566][ T3495] EXT4-fs (loop2): Remounting filesystem read-only [ 1013.253980][ T3495] EXT4-fs (loop2): 1 truncate cleaned up [ 1013.259705][ T3495] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,sysvgroups,inlinecrypt,usrjquota=.jqfmt=vfsold,jqfmt=vfsold,nobarrier,mblk_io_submit,noload,errors=remount-ro,mblk_io_submit,,. Quota mode: writeback. [ 1013.332607][ T3461] F2FS-fs (loop1): invalid crc value [ 1013.357561][ T3495] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 1013.370096][ T3461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1013.427795][ T3521] usb usb7: usbfs: process 3521 (syz.4.14149) did not claim interface 0 before use [ 1013.569327][ T3461] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1013.629916][ T3461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1013.975766][ T3563] loop4: detected capacity change from 0 to 256 [ 1014.015601][ T3566] loop3: detected capacity change from 0 to 4096 [ 1014.151730][ T3566] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1014.442370][ T3585] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1014.490297][ T3590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14160'. [ 1014.512649][ T3590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14160'. [ 1014.568609][ T3590] device xfrm0 entered promiscuous mode [ 1014.585660][ T3590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14160'. [ 1014.680749][ T3610] loop1: detected capacity change from 0 to 64 [ 1014.723488][ T3611] IPv6: sit1: Disabled Multicast RS [ 1014.734561][ T3613] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1014.866116][ T26] audit: type=1800 audit(2000001903.981:57): pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14192" name="file0" dev="loop0" ino=21 res=0 errno=0 [ 1014.917138][ T3603] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1015.099152][ T4326] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1015.452346][ T3640] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1015.492129][ T3640] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 1015.522861][ T3640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1015.531751][ T4326] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1015.548218][ T3640] System zones: 0-2, 18-18, 34-34 [ 1015.552590][ T4326] usb 4-1: config 0 has no interface number 0 [ 1015.560723][ T3640] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.14205: bad orphan inode 15 [ 1015.569573][ T4326] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1015.581912][ T3640] ext4_test_bit(bit=14, block=18) = 1 [ 1015.581935][ T3640] is_bad_inode(inode)=0 [ 1015.581946][ T3640] NEXT_ORPHAN(inode)=2264924160 [ 1015.589016][ T4326] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1015.607736][ T4326] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 1015.618989][ T4326] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1015.676457][ T3640] max_ino=32 [ 1015.694869][ T3640] i_nlink=0 [ 1015.702424][ T3640] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.14205: corrupted inode contents [ 1015.731803][ T3640] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #15: comm syz.1.14205: mark_inode_dirty error [ 1015.745393][ T3640] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.14205: corrupted inode contents [ 1015.760539][ T3640] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2957: inode #15: comm syz.1.14205: mark_inode_dirty error [ 1015.780514][ T3640] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2960: inode #15: comm syz.1.14205: mark inode dirty (error -117) [ 1015.807085][ T3623] XFS (loop0): Mounting V5 Filesystem [ 1015.807924][ T3640] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 1015.822429][ T3640] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1015.827593][ T4326] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1015.944172][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.952246][ T4326] usb 4-1: Product: syz [ 1015.957638][ T3663] netlink: 100 bytes leftover after parsing attributes in process `syz.2.14211'. [ 1015.990786][ T4326] usb 4-1: Manufacturer: syz [ 1016.002259][ T4326] usb 4-1: SerialNumber: syz [ 1016.072170][ T4326] usb 4-1: config 0 descriptor?? [ 1016.094135][ T3615] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1016.101379][ T3615] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1016.151452][ T3667] set_capacity_and_notify: 5 callbacks suppressed [ 1016.151474][ T3667] loop1: detected capacity change from 0 to 4096 [ 1016.176885][ T3623] XFS (loop0): Ending clean mount [ 1016.188238][ T3669] loop2: detected capacity change from 0 to 1024 [ 1016.221281][ T4205] XFS (loop0): Unmounting Filesystem [ 1016.337566][ T3667] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1016.346801][ T3673] netlink: 'syz.4.14217': attribute type 5 has an invalid length. [ 1016.430274][ T3677] loop4: detected capacity change from 0 to 256 [ 1016.673779][ T4326] usb 4-1: USB disconnect, device number 91 [ 1016.728410][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.852703][ T3687] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14222'. [ 1016.895387][ T4284] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1016.989629][ T3695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14216'. [ 1017.011654][ T3695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14216'. [ 1017.280331][ T4284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.302532][ T3713] netlink: zone id is out of range [ 1017.312499][ T4284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1017.333177][ T4284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1017.339180][ T3713] netlink: zone id is out of range [ 1017.355605][ T4284] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.376355][ T3713] netlink: zone id is out of range [ 1017.382088][ T3713] netlink: zone id is out of range [ 1017.392856][ T4284] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1017.402352][ T3713] netlink: zone id is out of range [ 1017.416705][ T3713] netlink: zone id is out of range [ 1017.422360][ T4284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.440032][ T3713] netlink: zone id is out of range [ 1017.448432][ T4284] usb 3-1: config 0 descriptor?? [ 1017.462028][ T3713] netlink: zone id is out of range [ 1017.470169][ T3713] netlink: zone id is out of range [ 1017.486646][ T3713] netlink: zone id is out of range [ 1017.523442][ T3721] loop0: detected capacity change from 0 to 1024 [ 1017.621228][ T3721] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.14240: lblock 2 mapped to illegal pblock 2 (length 1) [ 1017.644171][ T3721] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1017.669695][ T3699] loop4: detected capacity change from 0 to 32768 [ 1017.677089][ T3721] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.14240: lblock 0 mapped to illegal pblock 48 (length 1) [ 1017.727740][ T3721] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1017.744053][T18664] usb 3-1: USB disconnect, device number 99 [ 1017.751621][ T3721] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.14240: Failed to acquire dquot type 0 [ 1017.769109][ T3721] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1017.779271][ T3721] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.14240: mark_inode_dirty error [ 1017.800023][ T3721] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 1017.850236][ T3699] XFS (loop4): Mounting V5 Filesystem [ 1017.875764][ T3721] EXT4-fs (loop0): 1 orphan inode deleted [ 1017.890098][ T3721] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1017.912513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.932663][T18624] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1017.973592][ T3699] XFS (loop4): Ending clean mount [ 1018.037623][ T4189] XFS (loop4): Unmounting Filesystem [ 1018.048049][T18624] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1018.092443][T18624] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 1018.236480][T18624] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:8: lblock 2 mapped to illegal pblock 2 (length 1) [ 1018.307701][T18624] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1018.316292][T18624] EXT4-fs error (device loop0): ext4_write_dquot:6216: comm kworker/u4:8: Failed to commit dquot type 0 [ 1018.344706][T18624] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 1018.382695][ T4205] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1018.444223][ T3752] loop2: detected capacity change from 0 to 1024 [ 1018.453055][ T4205] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1018.495981][ T3752] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1018.507318][ T4205] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 1018.575736][ T3752] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1018.651486][ T3752] EXT4-fs error (device loop2): ext4_quota_enable:6444: comm syz.2.14253: inode #17152: comm syz.2.14253: iget: illegal inode # [ 1018.699965][ T3752] EXT4-fs (loop2): Remounting filesystem read-only [ 1018.707043][ T3752] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.14253: Bad quota inode: 17152, type: 2 [ 1018.719856][ T3752] EXT4-fs (loop2): Remounting filesystem read-only [ 1018.726750][ T3752] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 1018.742514][ T3752] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1018.749938][ T3752] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,noauto_da_alloc,errors=remount-ro,jqfmt=vfsv0,discard,usrjquota=,grpquota,nojournal_checksum,. Quota mode: writeback. [ 1018.769930][ T3761] blktrace: Concurrent blktraces are not allowed on sg0 [ 1018.787710][ T3752] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1018.809255][ T3752] /dev/loop2: Can't open blockdev [ 1018.915010][ T3740] loop3: detected capacity change from 0 to 32768 [ 1019.051600][ T3740] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1019.052535][ T3779] loop4: detected capacity change from 0 to 2048 [ 1019.209068][ T3779] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1019.257873][ T4284] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1019.280954][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 1019.335575][ T3779] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 144 not allocated in directory (ino 1376) [ 1019.392838][ T3779] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has too big (3884) entry at pos 144 [ 1019.407270][ T3787] netlink: 'syz.0.14266': attribute type 32 has an invalid length. [ 1019.531378][ T3773] loop2: detected capacity change from 0 to 32768 [ 1019.696339][ T4284] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1019.704398][ T3799] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1019.727358][ T3773] XFS (loop2): Mounting V5 Filesystem [ 1019.805964][ T4284] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1019.828356][ T4284] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1019.853274][ T3773] XFS (loop2): Ending clean mount [ 1019.911036][ T4190] XFS (loop2): Unmounting Filesystem [ 1020.102791][ T4284] usb 2-1: string descriptor 0 read error: -22 [ 1020.109154][ T4284] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1020.144133][ T3833] loop4: detected capacity change from 0 to 256 [ 1020.155854][ T4284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.209698][ T3771] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1020.223028][ T4284] usb 2-1: MIDIStreaming interface descriptor not found [ 1020.289415][ T3833] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d) [ 1020.316317][ T3837] netlink: 'syz.0.14288': attribute type 1 has an invalid length. [ 1020.356807][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14288'. [ 1020.369168][ T3833] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 1020.421478][ T3833] exFAT-fs (loop4): failed to initialize root inode [ 1020.715348][ T3830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.14285 (3830) [ 1020.739653][ T3830] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1020.752252][ T3830] BTRFS info (device loop3): using free space tree [ 1020.760742][ T3830] BTRFS info (device loop3): has skinny extents [ 1020.829752][ T3830] BTRFS info (device loop3): enabling ssd optimizations [ 1020.910154][ T3874] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1021.477036][ T3912] netlink: 'syz.0.14312': attribute type 4 has an invalid length. [ 1021.494929][ T3911] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1021.507416][ T3912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14312'. [ 1021.672081][ T3920] set_capacity_and_notify: 1 callbacks suppressed [ 1021.672099][ T3920] loop0: detected capacity change from 0 to 164 [ 1021.679989][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14316'. [ 1021.758242][ T4284] usb 2-1: USB disconnect, device number 100 [ 1021.760717][ T3920] Unable to read rock-ridge attributes [ 1021.843995][ T3920] Unable to read rock-ridge attributes [ 1021.878577][ T3920] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 1022.136575][ T3950] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1022.160926][ T3952] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_µ¦k¶¢_j“N[sig=syz] [ 1022.183029][ T3952] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1022.213426][ T3954] loop2: detected capacity change from 0 to 256 [ 1022.220150][T18664] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1022.228331][ T3952] Error parsing options; rc = [-22] [ 1022.318098][ T3954] FAT-fs (loop2): Directory bread(block 64) failed [ 1022.324722][ T3954] FAT-fs (loop2): Directory bread(block 65) failed [ 1022.368955][ T3954] FAT-fs (loop2): Directory bread(block 66) failed [ 1022.375669][ T3954] FAT-fs (loop2): Directory bread(block 67) failed [ 1022.383926][ T3960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14334'. [ 1022.401503][ T3954] FAT-fs (loop2): Directory bread(block 68) failed [ 1022.408181][ T3954] FAT-fs (loop2): Directory bread(block 69) failed [ 1022.421856][ T3960] device vlan0 entered promiscuous mode [ 1022.443693][ T3954] FAT-fs (loop2): Directory bread(block 70) failed [ 1022.450391][ T3954] FAT-fs (loop2): Directory bread(block 71) failed [ 1022.468030][ T3926] loop3: detected capacity change from 0 to 32768 [ 1022.486393][ T3954] FAT-fs (loop2): Directory bread(block 72) failed [ 1022.493079][ T3954] FAT-fs (loop2): Directory bread(block 73) failed [ 1022.510949][ T3964] loop0: detected capacity change from 0 to 164 [ 1022.604141][T18664] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1022.619736][T18664] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1022.630413][T18664] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1022.654797][ T3926] XFS (loop3): Mounting V5 Filesystem [ 1022.670512][ T3975] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14339'. [ 1022.807413][T18664] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1022.842133][T18664] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1022.889782][T18664] usb 5-1: Product: syz [ 1022.897334][ T3986] loop0: detected capacity change from 0 to 64 [ 1022.904228][T18664] usb 5-1: Manufacturer: syz [ 1022.910008][T18664] usb 5-1: SerialNumber: syz [ 1022.935174][T18664] usb 5-1: config 0 descriptor?? [ 1022.970858][ T3926] XFS (loop3): Ending clean mount [ 1022.988038][T18664] hub 5-1:0.0: bad descriptor, ignoring hub [ 1022.994262][T18664] hub: probe of 5-1:0.0 failed with error -5 [ 1023.040270][T18664] usb 5-1: selecting invalid altsetting 0 [ 1023.111936][ T4191] XFS (loop3): Unmounting Filesystem [ 1023.264485][ T3997] loop2: detected capacity change from 0 to 1024 [ 1023.331248][T18664] usb 5-1: USB disconnect, device number 102 [ 1023.461714][ T3997] hfsplus: extend alloc file! (16384,256,150995124) [ 1023.618185][ T4007] net_ratelimit: 338 callbacks suppressed [ 1023.618203][ T4007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.681527][ T4010] loop1: detected capacity change from 0 to 512 [ 1023.749649][ T4010] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1023.843335][ T4010] EXT4-fs (loop1): 1 truncate cleaned up [ 1023.865975][ T4010] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 1024.041013][ T4035] loop0: detected capacity change from 0 to 256 [ 1024.056067][ T4010] Invalid option length (771) for dns_resolver key [ 1024.132497][ T4035] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d) [ 1024.187706][ T4035] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 1024.216842][ T4042] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1024.234483][ T4035] exFAT-fs (loop0): failed to initialize root inode [ 1024.479757][ T4056] netlink: 'syz.2.14372': attribute type 4 has an invalid length. [ 1024.507687][ T4056] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14372'. [ 1024.555639][ T4056] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1024.734341][ T4074] loop1: detected capacity change from 0 to 2048 [ 1024.774254][ T4075] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1024.827010][ T4085] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1024.927196][ T4077] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1024.979504][ T4093] usb usb1: usbfs: process 4093 (syz.0.14389) did not claim interface 0 before use [ 1025.110587][ T4103] netlink: 'syz.4.14393': attribute type 4 has an invalid length. [ 1025.136180][ T4103] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14393'. [ 1025.184382][ T4110] overlayfs: workdir and upperdir must be separate subtrees [ 1025.207090][ T4103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1025.255562][ T4111] netlink: 'syz.2.14396': attribute type 3 has an invalid length. [ 1025.305544][T18319] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1025.492677][ T4130] loop0: detected capacity change from 0 to 2048 [ 1025.527643][ T4130] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1025.566315][ T4130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.617456][ T4130] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (36) [ 1025.635806][T18319] usb 4-1: Using ep0 maxpacket: 32 [ 1025.713170][ T4148] netlink: 'syz.1.14414': attribute type 4 has an invalid length. [ 1025.739928][ T4148] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14414'. [ 1025.772413][ T4148] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1025.791080][T18319] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1025.827593][T18319] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1025.878374][T18319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1025.902217][ T4153] futex_wake_op: syz.0.14418 tries to shift op by -1; fix this program [ 1025.902676][T18319] usb 4-1: config 1 has no interface number 0 [ 1025.917177][T18319] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1025.927068][T18319] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1025.971733][T18319] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1026.002758][T18319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.079875][ T4165] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14424'. [ 1026.092542][T18319] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1026.152773][ T4175] nvme_fabrics: missing parameter 'nqn=%s' [ 1026.164862][ T4173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14425'. [ 1026.315710][T18319] snd_usb_pod 4-1:1.1: invalid control EP [ 1026.321512][T18319] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1026.350059][T18319] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1026.371913][T18319] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1026.382646][ T4179] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 1026.425687][ T4179] ext4 filesystem being mounted at /2994/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.501145][ T4179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.14429: inode #327680: comm syz.0.14429: iget: illegal inode # [ 1026.537221][ T4179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.14429: error while reading EA inode 327680 err=-117 [ 1026.554294][T18319] usb 4-1: USB disconnect, device number 92 [ 1026.601369][ T4167] XFS (loop1): Mounting V5 Filesystem [ 1026.653138][ T4167] XFS (loop1): Ending clean mount [ 1026.724770][ T4199] XFS (loop1): Unmounting Filesystem [ 1027.192084][ T4211] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1027.223107][ T4219] netlink: 'syz.3.14430': attribute type 4 has an invalid length. [ 1027.247553][ T4219] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14430'. [ 1027.306894][ T4219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1027.423776][ T4242] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1027.727273][ T4265] set_capacity_and_notify: 3 callbacks suppressed [ 1027.727291][ T4265] loop4: detected capacity change from 0 to 1764 [ 1027.780538][ T4270] netlink: 'syz.3.14452': attribute type 4 has an invalid length. [ 1027.788436][ T4270] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14452'. [ 1027.798344][ T4270] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1027.925683][ T4277] loop3: detected capacity change from 0 to 164 [ 1028.000743][ T4213] loop1: detected capacity change from 0 to 32768 [ 1028.073243][ T26] audit: type=1326 audit(2000001916.337:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.2.14460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc007a559 code=0x7ffc0000 [ 1028.152917][ T26] audit: type=1326 audit(2000001916.337:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.2.14460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc007a559 code=0x7ffc0000 [ 1028.186945][ T26] audit: type=1326 audit(2000001916.384:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.2.14460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cc007a559 code=0x7ffc0000 [ 1028.211915][ T26] audit: type=1326 audit(2000001916.384:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.2.14460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc007a559 code=0x7ffc0000 [ 1028.256682][ T4213] XFS (loop1): Mounting V5 Filesystem [ 1028.291331][T18319] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1028.411623][ T4213] XFS (loop1): Ending clean mount [ 1028.430500][ T4326] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1028.467960][ T4199] XFS (loop1): Unmounting Filesystem [ 1028.592478][ T4316] overlayfs: missing 'lowerdir' [ 1028.648217][ T4313] loop2: detected capacity change from 0 to 4096 [ 1028.699562][T18319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.718640][T18319] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1028.724634][ T4319] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1028.759017][T18319] usb 1-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 1028.778911][T18319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.900911][ T4326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.922070][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1028.932054][ T4326] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1028.954147][ T4326] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.986283][ T4326] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1029.010164][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.048079][ T4326] usb 5-1: config 0 descriptor?? [ 1029.095738][ T4326] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 1029.095791][ T4326] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1029.115259][T18319] usb 1-1: dvb_usb_v2: usb_bulk_msg() write length=12, actual=0 [ 1029.115389][T18319] dvb_usb_af9035: probe of 1-1:1.0 failed with error -5 [ 1029.120720][T18319] usb 1-1: USB disconnect, device number 88 [ 1029.131655][ T4517] udevd[4517]: setting owner of /dev/bus/usb/001/088 to uid=0, gid=0 failed: No such file or directory [ 1029.322989][T18664] usb 5-1: USB disconnect, device number 103 [ 1029.411893][ T4335] loop2: detected capacity change from 0 to 16 [ 1029.455104][ T4335] erofs: (device loop2): mounted with root inode @ nid 36. [ 1029.606415][T18484] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1029.646357][ T4339] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1029.936975][ T4359] xt_bpf: check failed: parse error [ 1029.968986][ T4363] rdma_rxe: rxe creation allowed on top of a real device only [ 1030.012932][T18484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1030.036208][T18484] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1030.082476][T18484] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1030.112392][T18484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.341513][ T4396] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1030.408359][T18484] cxacru 2-1:1.0: send of cm 0x90 failed (-71) [ 1030.414637][T18484] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1030.440380][T18484] cxacru: probe of 2-1:1.0 failed with error -22 [ 1030.465644][ T4390] loop4: detected capacity change from 0 to 4096 [ 1030.483791][T18484] usb 2-1: USB disconnect, device number 101 [ 1030.725367][ T4421] tmpfs: Bad value for 'mpol' [ 1030.857478][ T4427] loop2: detected capacity change from 0 to 512 [ 1030.956258][ T4427] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 1030.979856][ T4427] ext4 filesystem being mounted at /2948/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.014330][ T4439] loop4: detected capacity change from 0 to 16 [ 1031.042973][ T4427] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.14515: inode #327680: comm syz.2.14515: iget: illegal inode # [ 1031.060975][ T4439] erofs: (device loop4): mounted with root inode @ nid 36. [ 1031.083606][ T4430] loop3: detected capacity change from 0 to 4096 [ 1031.093172][ T4427] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14515: error while reading EA inode 327680 err=-117 [ 1031.319089][ T4430] ntfs3: loop3: ino=3, Correct links count -> 2. [ 1031.407293][ T4430] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1031.534824][ T4466] loop4: detected capacity change from 0 to 512 [ 1031.597995][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 1031.628124][ T4466] ext4 filesystem being mounted at /2705/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.657960][ T4472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14536'. [ 1031.672980][ T4466] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.14534: inode #327680: comm syz.4.14534: iget: illegal inode # [ 1031.706030][ T4466] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.14534: error while reading EA inode 327680 err=-117 [ 1032.036753][ T4494] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14546'. [ 1032.062010][ T4495] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1032.073325][ T4494] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14546'. [ 1032.431318][ T4520] usb usb8: usbfs: process 4520 (syz.3.14559) did not claim interface 0 before use [ 1032.759415][ T4550] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1033.170448][ T4556] ntfs3: loop2: Failed to load $Extend. [ 1033.393867][ T4595] netlink: 'syz.0.14595': attribute type 1 has an invalid length. [ 1033.412309][ T4595] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.14595'. [ 1033.440919][ T4595] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14595'. [ 1033.556145][ T4601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14599'. [ 1033.774660][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14607'. [ 1033.817177][ T4624] netlink: 'syz.3.14608': attribute type 1 has an invalid length. [ 1033.839728][ T4624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.983698][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14610'. [ 1034.117303][ T4592] set_capacity_and_notify: 5 callbacks suppressed [ 1034.117320][ T4592] loop2: detected capacity change from 0 to 32768 [ 1034.160915][ T4649] netlink: 84 bytes leftover after parsing attributes in process `syz.4.14622'. [ 1034.196681][ T4653] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 1034.196681][ T4653] program syz.3.14624 not setting count and/or reply_len properly [ 1034.203514][ T4649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14622'. [ 1034.259000][ T4592] find_entry called with index = 0 [ 1034.267223][ T4592] read_mapping_page failed! [ 1034.310394][ T4592] ERROR: (device loop2): txCommit: [ 1034.310394][ T4592] [ 1034.326464][ T4660] ipt_REJECT: ECHOREPLY no longer supported. [ 1034.342790][ T4592] ERROR: (device loop2): remounting filesystem as read-only [ 1034.420954][ T4663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14627'. [ 1034.457038][ T4663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14627'. [ 1034.475305][ T4663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14627'. [ 1034.499790][ T4670] CIFS: Attempting to mount \\127.0.0.1\share [ 1034.577510][ T4670] CIFS: VFS: No username specified [ 1034.821197][ T4695] loop1: detected capacity change from 0 to 256 [ 1034.831115][ T4692] overlayfs: missing 'lowerdir' [ 1035.120527][ T4714] xt_TCPMSS: Only works on TCP SYN packets [ 1035.454265][ T13] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1035.463883][ T4736] loop1: detected capacity change from 0 to 4096 [ 1035.523940][ T4749] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1035.605573][ T4736] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1035.733689][ T4762] loop2: detected capacity change from 0 to 64 [ 1035.753535][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 1035.894117][ T13] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1035.914667][ T13] usb 4-1: config 0 has no interface number 0 [ 1036.093564][T18319] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1036.123191][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1036.145273][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.175616][ T13] usb 4-1: Product: syz [ 1036.186404][ T13] usb 4-1: Manufacturer: syz [ 1036.201938][ T13] usb 4-1: SerialNumber: syz [ 1036.230450][ T13] usb 4-1: config 0 descriptor?? [ 1036.278269][ T13] hub 4-1:0.132: bad descriptor, ignoring hub [ 1036.288526][ T13] hub: probe of 4-1:0.132 failed with error -5 [ 1036.302800][ T13] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input77 [ 1036.374286][T18319] usb 5-1: Using ep0 maxpacket: 32 [ 1036.512807][T18319] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1036.523201][T18319] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1036.531913][T18319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1036.584321][T18319] usb 5-1: config 1 has no interface number 0 [ 1036.606130][T18319] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1036.627873][T18319] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1036.674484][T18319] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1036.697838][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.782644][T18319] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1036.884608][ T4804] loop2: detected capacity change from 0 to 32768 [ 1036.963074][ T4804] XFS (loop2): Mounting V5 Filesystem [ 1036.992764][ T4804] XFS (loop2): Ending clean mount [ 1037.037052][T18319] snd_usb_pod 5-1:1.1: invalid control EP [ 1037.042850][T18319] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1037.086610][T18319] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1037.108506][T18319] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 1037.146806][ T4190] XFS (loop2): Unmounting Filesystem [ 1037.267347][ T4284] usb 5-1: USB disconnect, device number 104 [ 1037.311914][ T4843] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1037.321604][ T264] block nbd0: Attempted send on invalid socket [ 1037.321639][ T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1037.321788][ T4835] XFS (nbd0): SB validate failed with error -5. [ 1037.833615][ T4878] loop1: detected capacity change from 0 to 16 [ 1037.857868][ T4879] loop0: detected capacity change from 0 to 256 [ 1037.939814][ T4878] erofs: (device loop1): mounted with root inode @ nid 36. [ 1037.947825][ T4879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1037.973848][ T4879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1038.008887][ T4879] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1038.037261][ T4879] UDF-fs: Scanning with blocksize 512 failed [ 1038.049712][ T4878] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1038.080437][ T4879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1038.090241][ T4878] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1038.090360][ T4878] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1038.090382][ T4878] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1038.090454][ T4878] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 1038.184437][ T26] audit: type=1800 audit(2000001925.794:62): pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14725" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1038.235078][ T4879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1038.300849][ T4903] netlink: 'syz.3.14739': attribute type 5 has an invalid length. [ 1038.319101][ T4903] netlink: 'syz.3.14739': attribute type 15 has an invalid length. [ 1038.721703][ T4937] devtmpfs: Unknown parameter 'debug' [ 1039.045192][ T4910] loop0: detected capacity change from 0 to 32768 [ 1039.101112][ T4910] jfs_strtoUCS: char2uni returned -22. [ 1039.121611][ T4910] charset = cp936, char = 0xd4 [ 1039.216688][ C0] sd 0:0:1:0: tag#2310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1039.226642][ C0] sd 0:0:1:0: tag#2310 CDB: Mode Sense(10) [ 1039.232561][ C0] sd 0:0:1:0: tag#2310 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e [ 1039.241655][ C0] sd 0:0:1:0: tag#2310 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30 [ 1039.250795][ C0] sd 0:0:1:0: tag#2310 CDB[20]: 8b 52 18 [ 1039.376258][ T4977] overlayfs: missing 'workdir' [ 1039.411126][ T4983] __nla_validate_parse: 8 callbacks suppressed [ 1039.411145][ T4983] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14775'. [ 1039.707515][ T4996] loop4: detected capacity change from 0 to 4096 [ 1039.722870][ T5005] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 1039.762693][ T5005] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1039.762705][ T4996] EXT4-fs (loop4): Ignoring removed orlov option [ 1039.814175][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d2,auto_da_alloc,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 1039.894704][ T5013] cgroup: noprefix used incorrectly [ 1039.995896][ T5015] netlink: 'syz.1.14789': attribute type 16 has an invalid length. [ 1040.034230][ T5015] netlink: 'syz.1.14789': attribute type 17 has an invalid length. [ 1040.310418][ T5035] loop3: detected capacity change from 0 to 1764 [ 1040.578440][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14809'. [ 1040.771775][ T5068] IPv6: sit1: Disabled Multicast RS [ 1040.993693][ T5083] loop4: detected capacity change from 0 to 128 [ 1041.229794][ T4189] sysv_free_block: flc_count > flc_size [ 1041.272321][ T4189] sysv_free_block: flc_count > flc_size [ 1041.329068][ T4189] sysv_free_block: flc_count > flc_size [ 1041.343435][ T5096] device bond4 entered promiscuous mode [ 1041.378534][ T4189] sysv_free_block: flc_count > flc_size [ 1041.384144][ T4189] sysv_free_block: flc_count > flc_size [ 1041.413060][ T5096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1041.438362][ T4189] sysv_free_block: flc_count > flc_size [ 1041.449060][ T4189] sysv_free_block: flc_count > flc_size [ 1041.481177][ T4189] sysv_free_block: flc_count > flc_size [ 1041.502672][ T4189] sysv_free_block: flc_count > flc_size [ 1041.526477][ T4189] sysv_free_block: flc_count > flc_size [ 1041.550881][ T4189] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1041.563064][ T13] usb 4-1: USB disconnect, device number 93 [ 1041.734930][ T5128] ipt_CLUSTERIP: Please specify destination IP [ 1041.769587][ T5132] tmpfs: Bad value for 'mpol' [ 1041.803881][ T5134] loop4: detected capacity change from 0 to 512 [ 1041.863284][ T5138] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1041.919355][ T5134] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1041.981534][ T5134] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 1042.416113][ T5183] tc_dump_action: action bad kind [ 1042.706822][ T5197] loop1: detected capacity change from 0 to 4096 [ 1042.751891][ T5197] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1042.834967][ T5197] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1042.834969][ T5214] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1042.917325][ T5214] FAT-fs (loop9): unable to read boot sector [ 1043.711968][ T5267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14894'. [ 1043.761413][ T5267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14894'. [ 1043.818594][ T5267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14894'. [ 1043.859398][ T5276] loop3: detected capacity change from 0 to 4096 [ 1043.926807][ T5276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1044.016124][ T5281] CIFS mount error: No usable UNC path provided in device string! [ 1044.016124][ T5281] [ 1044.088454][ T5281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1044.178881][ T5286] IPv6: sit2: Disabled Multicast RS [ 1044.381622][ T5296] openvswitch: netlink: Actions may not be safe on all matching packets [ 1044.455718][T18319] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1044.562102][ T5310] loop1: detected capacity change from 0 to 128 [ 1044.742021][ T4199] sysv_free_block: flc_count > flc_size [ 1044.755229][T18319] usb 1-1: Using ep0 maxpacket: 16 [ 1044.765895][ T4199] sysv_free_block: flc_count > flc_size [ 1044.771548][ T4199] sysv_free_block: flc_count > flc_size [ 1044.806306][ T4199] sysv_free_block: flc_count > flc_size [ 1044.829942][ T4199] sysv_free_block: flc_count > flc_size [ 1044.851293][ T4199] sysv_free_block: flc_count > flc_size [ 1044.856923][ T4199] sysv_free_block: flc_count > flc_size [ 1044.883226][ T4199] sysv_free_block: flc_count > flc_size [ 1044.904289][ T4199] sysv_free_block: flc_count > flc_size [ 1044.915472][T18319] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1044.929762][ T4199] sysv_free_block: flc_count > flc_size [ 1044.935836][ T4199] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1045.107902][T18319] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1045.131169][T18319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.157315][ T5343] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1045.171028][T18319] usb 1-1: Product: syz [ 1045.189614][T18319] usb 1-1: Manufacturer: syz [ 1045.208052][T18319] usb 1-1: SerialNumber: syz [ 1045.236896][T18319] r8152-cfgselector 1-1: config 0 descriptor?? [ 1045.654345][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14937'. [ 1045.759946][T18319] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1045.774217][T18319] r8152-cfgselector 1-1: bad CDC descriptors [ 1045.825592][T18319] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1045.845435][T18480] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1045.856318][ T13] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1045.867207][T18319] r8152-cfgselector 1-1: USB disconnect, device number 89 [ 1045.890389][ T5391] loop4: detected capacity change from 0 to 512 [ 1046.008272][ T5391] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 1046.048552][ T5391] ext4 filesystem being mounted at /2787/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.256087][T18480] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.290908][T18480] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 1046.311506][T18480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.337770][T18480] usb 2-1: config 0 descriptor?? [ 1046.351811][ T5407] loop2: detected capacity change from 0 to 4096 [ 1046.358943][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1046.382565][T18480] gspca_main: kinect-2.14.0 probing 045e:02bf [ 1046.441404][ T5407] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1046.532488][ T5407] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1046.617444][ T7305] usb 2-1: USB disconnect, device number 102 [ 1046.647634][ T13] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1046.678862][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.700577][ T13] usb 4-1: Product: syz [ 1046.708953][ T13] usb 4-1: Manufacturer: syz [ 1046.719737][ T13] usb 4-1: SerialNumber: syz [ 1046.802154][ T5431] loop2: detected capacity change from 0 to 256 [ 1046.847563][ T5431] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1046.934605][ T4326] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1047.086869][ T13] usb 4-1: cannot setup if 1: error -71 [ 1047.093478][ T13] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1047.160380][ T13] usb 4-1: cannot setup if 1: error -71 [ 1047.166524][ T13] snd-usb-audio: probe of 4-1:1.1 failed with error -71 [ 1047.235588][ T4326] usb 1-1: Using ep0 maxpacket: 8 [ 1047.256816][ T13] usb 4-1: cannot setup if 1: error -71 [ 1047.284170][ T5456] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1047.293965][ T13] snd-usb-audio: probe of 4-1:1.2 failed with error -71 [ 1047.326052][ T13] usb 4-1: USB disconnect, device number 94 [ 1047.350812][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.449123][ T4326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1047.463615][ T5466] loop1: detected capacity change from 0 to 8 [ 1047.575478][ T5466] unable to read inode lookup table [ 1047.759336][ T4326] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 1047.799498][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.818694][ T4326] usb 1-1: Product: syz [ 1047.822937][ T4326] usb 1-1: Manufacturer: syz [ 1047.861932][ T4326] usb 1-1: SerialNumber: syz [ 1048.289325][ T5530] loop4: detected capacity change from 0 to 2048 [ 1048.328301][ T4326] usb 1-1: USB disconnect, device number 90 [ 1048.379330][ T5530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1048.614433][ T7305] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1048.646494][T18664] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1048.661924][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.870868][ T7305] usb 2-1: Using ep0 maxpacket: 8 [ 1048.941592][ T5580] loop0: detected capacity change from 0 to 512 [ 1048.983969][ T5580] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.15013: attempt to clear invalid blocks 2 len 1 [ 1049.007871][ T5580] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1049.031452][ T7305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1049.042674][T18664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.043890][ T7305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1049.063499][ T7305] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1049.063528][ T5580] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.15013: invalid indirect mapped block 1819239214 (level 0) [ 1049.073236][ T7305] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 1049.097518][ T4326] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1049.105213][ T7305] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1049.108422][ T5583] openvswitch: netlink: Actions may not be safe on all matching packets [ 1049.114857][ T7305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.139728][ T5580] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.15013: invalid indirect mapped block 1819239214 (level 1) [ 1049.143832][ T7305] usb 2-1: config 0 descriptor?? [ 1049.174108][ T5580] EXT4-fs (loop0): 1 truncate cleaned up [ 1049.180089][ T5580] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 1049.194169][ T5536] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1049.287862][T18664] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1049.297245][T18664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.314259][T18664] usb 3-1: Product: syz [ 1049.318497][T18664] usb 3-1: Manufacturer: syz [ 1049.325733][T18664] usb 3-1: SerialNumber: syz [ 1049.395914][ T4326] usb 4-1: Using ep0 maxpacket: 32 [ 1049.414503][ T5593] netlink: 'syz.4.15019': attribute type 1 has an invalid length. [ 1049.427014][ T5593] netlink: 'syz.4.15019': attribute type 9 has an invalid length. [ 1049.458407][ T5595] netlink: 'syz.0.15020': attribute type 1 has an invalid length. [ 1049.468127][ T5595] netlink: 'syz.0.15020': attribute type 1 has an invalid length. [ 1049.533885][ T4326] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1049.544469][ T4326] usb 4-1: config 0 has no interface number 0 [ 1049.550631][ T4326] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1049.571280][ T4326] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xD3, skipping [ 1049.582981][ T4326] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1049.608800][T18664] snd-usb-6fire 3-1:1.0: unknown device firmware state received from device: [ 1049.623915][T18664] eb aa 55 00 00 00 00 00 [ 1049.628486][T18664] snd-usb-6fire: probe of 3-1:1.0 failed with error -5 [ 1049.691451][T18319] usb 2-1: USB disconnect, device number 103 [ 1049.731608][ T5611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1049.784282][ T4326] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1049.802143][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.810181][ T4326] usb 4-1: Product: syz [ 1049.822052][ T4326] usb 4-1: Manufacturer: syz [ 1049.826963][ T4326] usb 4-1: SerialNumber: syz [ 1049.850270][T18480] usb 3-1: USB disconnect, device number 100 [ 1049.866570][ T4326] usb 4-1: config 0 descriptor?? [ 1049.896821][ T5617] loop0: detected capacity change from 0 to 4096 [ 1049.910890][ T4326] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input78 [ 1049.960394][ T5617] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1050.110997][T18664] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1050.194193][ T4326] usb 4-1: USB disconnect, device number 95 [ 1050.313036][ T5621] loop1: detected capacity change from 0 to 2048 [ 1050.340760][ T5621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1050.367603][T18664] usb 5-1: Using ep0 maxpacket: 16 [ 1050.496184][T18664] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1050.504463][T18664] usb 5-1: config 0 has no interface number 0 [ 1050.709826][T18664] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1050.718932][T18664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.740234][ T5619] loop0: detected capacity change from 0 to 32768 [ 1050.747082][T18664] usb 5-1: Product: syz [ 1050.751284][T18664] usb 5-1: Manufacturer: syz [ 1050.763010][T18664] usb 5-1: SerialNumber: syz [ 1050.774897][T18664] usb 5-1: config 0 descriptor?? [ 1050.815453][ T5643] loop2: detected capacity change from 0 to 64 [ 1050.820216][T18664] hub 5-1:0.132: bad descriptor, ignoring hub [ 1050.830500][T18664] hub: probe of 5-1:0.132 failed with error -5 [ 1050.840364][T18664] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input79 [ 1050.856991][ T5619] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.15032 (5619) [ 1050.925064][ T5619] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1050.955276][ T5619] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1050.979432][ T5619] BTRFS info (device loop0): use zstd compression, level 3 [ 1050.986726][ T5619] BTRFS info (device loop0): using free space tree [ 1051.032546][ T5647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1051.098527][ T5619] BTRFS info (device loop0): has skinny extents [ 1051.353344][ T5672] set_capacity_and_notify: 1 callbacks suppressed [ 1051.353362][ T5672] loop3: detected capacity change from 0 to 22 [ 1051.369425][ T5672] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1051.385188][ T5672] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1051.431629][ T5619] BTRFS info (device loop0): enabling ssd optimizations [ 1051.543947][ C1] sd 0:0:1:0: tag#2317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1051.553927][ C1] sd 0:0:1:0: tag#2317 CDB: Mode Sense(10) [ 1051.559843][ C1] sd 0:0:1:0: tag#2317 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e [ 1051.568947][ C1] sd 0:0:1:0: tag#2317 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30 [ 1051.578071][ C1] sd 0:0:1:0: tag#2317 CDB[20]: 8b 52 18 [ 1051.697620][ T5688] netlink: 'syz.3.15057': attribute type 1 has an invalid length. [ 1051.803370][ T4348] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (4348) [ 1052.035863][ T5649] loop1: detected capacity change from 0 to 32768 [ 1052.583173][ T5727] loop0: detected capacity change from 0 to 8 [ 1052.717604][ T5727] squashfs image failed sanity check [ 1052.848920][ T4326] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1053.021733][ T5747] loop1: detected capacity change from 0 to 512 [ 1053.126134][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 1053.175439][ T5747] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 1053.198544][ T5747] ext4 filesystem being mounted at /2973/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.242951][ T5747] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz.1.15085: invalid size [ 1053.275616][ T4326] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1053.283883][ T4326] usb 3-1: config 0 has no interface number 0 [ 1053.362379][ T5762] loop4: detected capacity change from 0 to 64 [ 1053.380041][ T5760] ceph: No path or : separator in source [ 1053.466029][ T5762] attempt to access beyond end of device [ 1053.466029][ T5762] loop4: rw=0, want=268435470, limit=64 [ 1053.542719][ T5762] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 1053.543740][ T4326] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1053.595983][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.625319][ T4326] usb 3-1: Product: syz [ 1053.639202][ T4326] usb 3-1: Manufacturer: syz [ 1053.659392][ T4326] usb 3-1: SerialNumber: syz [ 1053.727950][ T4326] usb 3-1: config 0 descriptor?? [ 1053.777857][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15096'. [ 1053.800299][ T4326] hub 3-1:0.132: bad descriptor, ignoring hub [ 1053.807597][ T4326] hub: probe of 3-1:0.132 failed with error -5 [ 1053.869478][ T4326] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input81 [ 1054.230059][ T5819] dlm: non-version read from control device 8192 [ 1054.346729][ T5828] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.15113'. [ 1054.425032][ T5831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15114'. [ 1054.440170][ T5831] netlink: 252 bytes leftover after parsing attributes in process `syz.4.15114'. [ 1054.460038][ T5831] netlink: 'syz.4.15114': attribute type 1 has an invalid length. [ 1054.468820][ T5831] netlink: 80 bytes leftover after parsing attributes in process `syz.4.15114'. [ 1054.596914][ T4326] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1055.050202][ T4326] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1055.065640][ T4326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.086414][ T4326] usb 1-1: config 0 has no interface number 0 [ 1055.099899][ T4326] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1055.123845][ T4326] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 1055.146114][ T4326] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.172994][ T4326] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1055.312768][ T5871] loop4: detected capacity change from 0 to 1024 [ 1055.381634][ T4326] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1055.396609][ T4326] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1055.413329][ T4326] usb 1-1: Product: syz [ 1055.422256][ T4326] usb 1-1: Manufacturer: syz [ 1055.427042][ T4326] usb 1-1: SerialNumber: syz [ 1055.451547][ T4326] usb 1-1: config 0 descriptor?? [ 1055.759583][ T4326] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input82 [ 1055.929866][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1055.939856][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1055.954532][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1055.964575][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1055.980702][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1055.994061][ T4174] usb 1-1: USB disconnect, device number 91 [ 1056.007664][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1056.017607][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1056.043840][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1056.049351][ T4284] usb 5-1: USB disconnect, device number 105 [ 1056.058481][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1056.085755][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1056.099490][ T5889] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1056.143413][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 1056.173087][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl4: link becomes ready [ 1056.408128][ T5903] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 1056.731208][ T5927] netlink: 'syz.4.15158': attribute type 8 has an invalid length. [ 1057.140261][ T5968] netlink: 'syz.2.15178': attribute type 3 has an invalid length. [ 1057.531547][ T5995] nvme_fabrics: missing parameter 'nqn=%s' [ 1057.613291][ T6007] loop1: detected capacity change from 0 to 4096 [ 1057.730892][ T6023] netlink: 'syz.4.15202': attribute type 15 has an invalid length. [ 1057.750044][ T6020] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1058.036340][ T6043] loop0: detected capacity change from 0 to 512 [ 1058.273588][ T6058] program syz.3.15222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.729169][ T6106] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1058.770280][ T6106] overlayfs: bad mount option "redirect_dir=nofollow\" [ 1058.934197][ T6124] netlink: 'syz.3.15253': attribute type 11 has an invalid length. [ 1058.961897][ T6124] netlink: 'syz.3.15253': attribute type 5 has an invalid length. [ 1059.168756][ T6147] __nla_validate_parse: 94 callbacks suppressed [ 1059.168774][ T6147] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15264'. [ 1059.186952][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15265'. [ 1059.277646][ T6153] netlink: 'syz.4.15269': attribute type 10 has an invalid length. [ 1059.337714][ T6154] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 1059.368526][ T6153] team0: Device ipvlan1 failed to register rx_handler [ 1059.606468][ T6181] netlink: 'syz.0.15281': attribute type 1 has an invalid length. [ 1059.709149][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15287'. [ 1059.825192][ T6197] netlink: 'syz.2.15290': attribute type 1 has an invalid length. [ 1059.861412][ T6197] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.15290'. [ 1060.171494][ T6225] loop1: detected capacity change from 0 to 512 [ 1060.237017][ T6231] loop2: detected capacity change from 0 to 8 [ 1060.248993][ T6225] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1060.308532][ T6225] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,max_dir_size_kb=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 1060.330096][ T6225] ext4 filesystem being mounted at /3003/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.343678][ T6231] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1060.357549][ T6189] loop3: detected capacity change from 0 to 32768 [ 1060.648451][T18486] usb 3-1: USB disconnect, device number 101 [ 1060.711400][ T6248] netlink: 'syz.3.15313': attribute type 49 has an invalid length. [ 1060.781049][ T6251] loop1: detected capacity change from 0 to 764 [ 1060.957327][ T6251] Symlink component flag not implemented [ 1060.984581][ T6251] Symlink component flag not implemented (128) [ 1061.416062][ T6282] openvswitch: netlink: Actions may not be safe on all matching packets [ 1061.524761][ T6288] loop4: detected capacity change from 0 to 1024 [ 1061.629582][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15336'. [ 1061.887251][ T6311] xt_bpf: check failed: parse error [ 1061.960988][ T6318] delete_channel: no stack [ 1062.108077][ T6332] CIFS: VFS: bad security option: krb5iż [ 1062.260029][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15358'. [ 1062.657854][ T6385] No such timeout policy "syz1" [ 1062.888684][ T6409] loop2: detected capacity change from 0 to 22 [ 1062.931371][ T6415] loop4: detected capacity change from 0 to 64 [ 1063.004959][ T6409] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1063.051503][ T6409] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1063.182058][ T6429] netlink: 'syz.4.15395': attribute type 2 has an invalid length. [ 1063.613608][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15414'. [ 1063.817967][ T6474] netlink: 'syz.3.15420': attribute type 22 has an invalid length. [ 1063.836082][ T6474] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 1064.337625][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1064.383706][T18319] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1064.551553][ T6524] netlink: 'syz.3.15445': attribute type 1 has an invalid length. [ 1064.560969][ T6524] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.15445'. [ 1064.609494][ T6526] loop1: detected capacity change from 0 to 8 [ 1064.673966][ T6526] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 1064.682246][T18319] usb 1-1: Using ep0 maxpacket: 32 [ 1064.851410][T18319] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1064.871247][T18319] usb 1-1: config 0 has no interface number 0 [ 1064.896722][T18319] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1064.914102][ T6545] vers=2.0 not permitted when mounting with smb3 [ 1064.914102][ T6545] [ 1064.934198][ T6545] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 1064.938762][T18319] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1065.015136][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.037164][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.056433][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.082767][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.103123][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.123088][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.138364][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.149249][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.159282][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1065.168860][T18486] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1065.175049][T18319] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1065.181493][ T6560] netlink: 'syz.2.15463': attribute type 12 has an invalid length. [ 1065.201105][T18319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.224008][T18319] usb 1-1: Product: syz [ 1065.238110][T18319] usb 1-1: Manufacturer: syz [ 1065.242760][T18319] usb 1-1: SerialNumber: syz [ 1065.302814][T18319] usb 1-1: config 0 descriptor?? [ 1065.416392][ T6572] No such timeout policy "syz1" [ 1065.558994][T18486] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.589759][T18486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1065.609877][T18486] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1065.612517][T18319] radio-si470x 1-1:0.35: this is not a si470x device. [ 1065.642025][T18486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.666488][T18486] usb 5-1: config 0 descriptor?? [ 1065.836940][T18319] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1065.901006][T18319] usb 1-1: USB disconnect, device number 92 [ 1065.941136][ T6600] xt_CT: No such helper "syz0" [ 1066.027227][ T6611] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1066.038126][ T4174] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1066.046546][ T6611] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1066.058404][ T6611] device bridge4 entered promiscuous mode [ 1066.184579][T18486] Bluetooth: Can't get state to change to load configuration err [ 1066.203471][T18486] Bluetooth: Loading sysconfig file failed [ 1066.220561][T18486] ath3k: probe of 5-1:0.0 failed with error -16 [ 1066.230078][ T6625] loop2: detected capacity change from 0 to 64 [ 1066.240265][T18486] usb 5-1: USB disconnect, device number 106 [ 1066.314845][ T4174] usb 4-1: Using ep0 maxpacket: 32 [ 1066.457323][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.476791][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.497918][ T4174] usb 4-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 1066.515568][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.552884][ T4174] usb 4-1: config 0 descriptor?? [ 1066.596949][ T4174] hub 4-1:0.0: USB hub found [ 1066.852720][ T4174] hub 4-1:0.0: 1 port detected [ 1066.982549][ T6686] netlink: 'syz.2.15525': attribute type 46 has an invalid length. [ 1067.087926][ T4174] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1067.094347][ T4174] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1067.111815][ T6700] device wlan0 entered promiscuous mode [ 1067.174180][ T4174] usb 4-1: USB disconnect, device number 96 [ 1067.695115][ T6739] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 1067.747822][ T6717] loop4: detected capacity change from 0 to 32768 [ 1067.776472][ T6717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15538 (6717) [ 1067.859575][ T6717] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1067.921669][ T6717] BTRFS info (device loop4): using free space tree [ 1067.928248][ T6717] BTRFS info (device loop4): has skinny extents [ 1068.041844][ T6719] loop0: detected capacity change from 0 to 32768 [ 1068.166483][ T6717] BTRFS info (device loop4): enabling ssd optimizations [ 1068.263750][ T4174] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1068.279362][ T6783] xt_TCPMSS: Only works on TCP SYN packets [ 1068.633141][ T6799] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1068.725499][ T4174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.735796][ T4174] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1068.747418][ T4174] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.757994][ T4174] usb 2-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1068.771381][ T4174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1068.883868][ T4174] usb 2-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 1068.892992][ T4174] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1068.936982][ T4174] usb 2-1: Manufacturer: syz [ 1068.943685][ T4174] usb 2-1: config 0 descriptor?? [ 1068.992829][ T6809] openvswitch: netlink: Unknown key attributes 20000000 [ 1069.232257][T18486] usb 2-1: USB disconnect, device number 104 [ 1069.465138][ T6851] loop2: detected capacity change from 0 to 256 [ 1069.567178][ T6858] xt_connbytes: Forcing CT accounting to be enabled [ 1069.637825][ T6862] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 1069.653531][ T6860] loop0: detected capacity change from 0 to 1024 [ 1069.740063][ T6860] hfsplus: catalog searching failed [ 1069.759716][ T6866] tmpfs: Bad value for 'mpol' [ 1069.945308][ T4174] ------------[ cut here ]------------ [ 1069.951444][ T4174] WARNING: CPU: 0 PID: 4174 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 1069.981171][ T4174] Modules linked in: [ 1069.987740][ T4174] CPU: 0 PID: 4174 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1069.995742][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.006400][ T4174] Workqueue: events nf_tables_trans_destroy_work [ 1070.012898][ T4174] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 1070.019324][ T4174] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 7b e1 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 9b 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 2a 6b 8e 80 e1 07 80 c1 03 38 c1 [ 1070.061232][ T4174] RSP: 0018:ffffc90002d8fa68 EFLAGS: 00010293 [ 1070.067386][ T4174] RAX: ffffffff883d8780 RBX: ffff88802b47c0f0 RCX: ffff888074750000 [ 1070.096819][ T6879] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 1070.122519][ T4174] RDX: 0000000000000000 RSI: ffff88802b47c000 RDI: ffff88807dbe9528 [ 1070.131202][ T4174] RBP: ffffc90002d8fc30 R08: ffff888074750000 R09: 0000000000000008 [ 1070.145019][ T4174] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88802b47c0c0 [ 1070.164036][ T4174] R13: dffffc0000000000 R14: ffff88802b47c110 R15: dffffc0000000000 [ 1070.177219][ T4174] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1070.198614][ T4174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1070.205306][ T4174] CR2: 00007f55dbc96000 CR3: 000000002b3a8000 CR4: 00000000003506f0 [ 1070.230980][ T4174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1070.249886][ T4174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1070.260678][ T4174] Call Trace: [ 1070.264365][ T4174] [ 1070.267353][ T4174] nft_set_destroy+0x488/0xa30 [ 1070.272289][ T4174] ? kfree+0xef/0x2a0 [ 1070.276869][ T4174] ? nf_tables_chain_destroy+0x19b/0x530 [ 1070.282555][ T4174] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 1070.288921][ T4174] ? nft_object_dump+0x1e0/0x1e0 [ 1070.293916][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1070.299661][ T4174] process_one_work+0x867/0xff0 [ 1070.304688][ T4174] ? worker_detach_from_pool+0x240/0x240 [ 1070.310848][ T4174] ? lockdep_hardirqs_off+0x70/0x100 [ 1070.316474][ T4174] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1070.321643][ T4174] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1070.327656][ T4174] ? wq_worker_running+0x97/0x170 [ 1070.341154][ T4174] worker_thread+0xad7/0x12a0 [ 1070.346008][ T4174] kthread+0x42e/0x520 [ 1070.355134][ T4174] ? rcu_lock_release+0x20/0x20 [ 1070.365038][ T4174] ? kthread_blkcg+0xd0/0xd0 [ 1070.374752][ T4174] ret_from_fork+0x1f/0x30 [ 1070.379255][ T4174] [ 1070.387367][ T4174] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1070.394729][ T4174] CPU: 0 PID: 4174 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1070.402223][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.412312][ T4174] Workqueue: events nf_tables_trans_destroy_work [ 1070.418690][ T4174] Call Trace: [ 1070.422043][ T4174] [ 1070.425010][ T4174] dump_stack_lvl+0x188/0x250 [ 1070.429728][ T4174] ? show_regs_print_info+0x20/0x20 [ 1070.434966][ T4174] ? load_image+0x410/0x410 [ 1070.439519][ T4174] panic+0x2f8/0x850 [ 1070.443451][ T4174] ? bpf_jit_dump+0xd0/0xd0 [ 1070.447991][ T4174] ? ret_from_fork+0x1f/0x30 [ 1070.452619][ T4174] ? nft_pipapo_destroy+0x8b0/0x960 [ 1070.457894][ T4174] __warn+0x248/0x2b0 [ 1070.461924][ T4174] ? nft_pipapo_destroy+0x8b0/0x960 [ 1070.467167][ T4174] report_bug+0x1b9/0x2e0 [ 1070.471633][ T4174] handle_bug+0x3a/0x70 [ 1070.475845][ T4174] exc_invalid_op+0x16/0x40 [ 1070.480391][ T4174] asm_exc_invalid_op+0x16/0x20 [ 1070.485624][ T4174] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 1070.491470][ T4174] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 7b e1 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 9b 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 2a 6b 8e 80 e1 07 80 c1 03 38 c1 [ 1070.511202][ T4174] RSP: 0018:ffffc90002d8fa68 EFLAGS: 00010293 [ 1070.517316][ T4174] RAX: ffffffff883d8780 RBX: ffff88802b47c0f0 RCX: ffff888074750000 [ 1070.525321][ T4174] RDX: 0000000000000000 RSI: ffff88802b47c000 RDI: ffff88807dbe9528 [ 1070.533331][ T4174] RBP: ffffc90002d8fc30 R08: ffff888074750000 R09: 0000000000000008 [ 1070.541335][ T4174] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88802b47c0c0 [ 1070.549338][ T4174] R13: dffffc0000000000 R14: ffff88802b47c110 R15: dffffc0000000000 [ 1070.557353][ T4174] ? nft_pipapo_destroy+0x8b0/0x960 [ 1070.562602][ T4174] ? nft_pipapo_destroy+0x8b0/0x960 [ 1070.567843][ T4174] nft_set_destroy+0x488/0xa30 [ 1070.572640][ T4174] ? kfree+0xef/0x2a0 [ 1070.576656][ T4174] ? nf_tables_chain_destroy+0x19b/0x530 [ 1070.582357][ T4174] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 1070.588298][ T4174] ? nft_object_dump+0x1e0/0x1e0 [ 1070.593276][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1070.598516][ T4174] process_one_work+0x867/0xff0 [ 1070.603417][ T4174] ? worker_detach_from_pool+0x240/0x240 [ 1070.609084][ T4174] ? lockdep_hardirqs_off+0x70/0x100 [ 1070.614442][ T4174] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1070.619507][ T4174] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1070.625092][ T4174] ? wq_worker_running+0x97/0x170 [ 1070.630162][ T4174] worker_thread+0xad7/0x12a0 [ 1070.634903][ T4174] kthread+0x42e/0x520 [ 1070.639009][ T4174] ? rcu_lock_release+0x20/0x20 [ 1070.643892][ T4174] ? kthread_blkcg+0xd0/0xd0 [ 1070.648514][ T4174] ret_from_fork+0x1f/0x30 [ 1070.652986][ T4174] [ 1070.655941][ T6881] loop1: detected capacity change from 0 to 32768 [ 1070.656313][ T4174] Kernel Offset: disabled [ 1070.673935][ T4174] Rebooting in 86400 seconds..