last executing test programs: 1m14.182293548s ago: executing program 1 (id=3808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 1m14.08063972s ago: executing program 1 (id=3809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cce, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x2, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x3, 0x800, 0x101, 0x5, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 1m13.975851681s ago: executing program 1 (id=3812): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) 1m13.912236169s ago: executing program 1 (id=3813): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f00000000c0)={[{}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@dir_umask}]}, 0x2, 0x34e, &(0x7f0000002280)="$eJzs3T1rFE8cB/Dv7MPd3j8h/zWJBKwkGrAKSSwUG4MEG9+AhQRjckLIGkEjmIAYrUXsBMHSzlr0LWgjvgGtUoiN2gQLV+a3z3ezl8vl4e647wc89nZndn5zM7M3kxAHRDSwrix8fXN+R/9TLgAbwCXAAuABDoCTmPAerG8056wW39rpkUKUUzVlWV6vm2LwEOfIv3MwnJ2joxKGYfhtz1S/jiUW6h6VH8E5VjTQnWSEe8ce2dHYbnqADYBcC6td7OIhRroZDhER9QBHvh2s+FtiOJ6/WxYwFc/D+/37vzC/2e1eHD0h/f63oveh0p/P/3JJr/dWN4L6SrSE061vJatE072MfSLMPu4Kop5lD+WmXLlSzCQWq3Z7NahPb8sNnuJyLJdsXF5XkFRElEVbiVJNGtamLbSqe+RnyfkhqYOr6zBXEv9YqxKNC+AP3/HSXNziJ9PZhrqqj+qzWlQ+XmElnf85odLNJC3lNwyVKP6ZkirqWiZhBvWZQi2z8E9IIafiEvD+bVbLWtnn6sHWsRRVsno0zt/9JM4XFfMN5fQoij9WiGo3W147yTUGOEpWDflcc2miP8Zc44WylO7NblCfXr4blHX6w2Vc0ann6rqaxA+8w0Ju/m/p1FMoH5mFUa4kZdwzWtbHkZRN7WggQ/POvkYmiavF8dpWnme4hYsYub+5tbYUBPV73T9IhkqH2U8fZjzVza2oI8bdUV+CPOHSNPD0gQvg0D6Ev2EYGi85OI4mcKWqF15nVd5aW1LxM+9gRegnZ8Ol+fLEAOYBxGeSJ0InpT9Oc1WzG+6Ry5eyfuvWljOFDukmB0lUcinpukfTOklRhUs2qm2NlFoHhV57tLYUdPQkoj6TNTombnQ7GOoGPV9Q0fovt16ZkaeOfvFbrH/c4ttaU4LcHWdLVkCj8vpfeyu49Lal88Sh5GCPNdeZc8DZhhItJCU+abytH8eJXvyt5P5/laEW8AU3+fN/IiIiIiIiIiIiIiIiIiIiIiIiIqJ+s9+/RujkzwmKJe4M4H+8QURERERERERERERERERERERERERERER0MLn9fwFbdoypmPb/bbVTk7CjHWK8A+//C/h2G/v/qu1+3ouMqCf8CwAA//9x31g6") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m13.756766601s ago: executing program 1 (id=3816): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x800, 0x12) 1m13.438618244s ago: executing program 1 (id=3822): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000700)={0x7, 0x8296, &(0x7f00000000c0)=[0x401], &(0x7f0000000040)=[0x2, 0x4, 0x7ff, 0x4], &(0x7f0000000000)=[0x1, 0x21], &(0x7f0000000100)}) 1m13.291354158s ago: executing program 32 (id=3822): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000700)={0x7, 0x8296, &(0x7f00000000c0)=[0x401], &(0x7f0000000040)=[0x2, 0x4, 0x7ff, 0x4], &(0x7f0000000000)=[0x1, 0x21], &(0x7f0000000100)}) 3.594992765s ago: executing program 5 (id=5335): setresuid(0x0, 0xee01, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'veth1_macvtap\x00', {0x2}, 0x4}) 3.384748497s ago: executing program 5 (id=5338): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000c80)={0x0, @bt={0x2d0, 0x190, 0x0, 0x1, 0xdd9f83, 0x1, 0x9, 0x1, 0x1002, 0x8, 0xfffffffd, 0x13, 0x9, 0x7f, 0x3f, 0x3f, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 3.248832383s ago: executing program 5 (id=5343): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0}) 2.592418245s ago: executing program 0 (id=5365): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a"], 0x7c}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4bfb, &(0x7f0000000380)) 2.56333594s ago: executing program 0 (id=5367): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x468, &(0x7f0000002a00)="$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") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 2.294550151s ago: executing program 0 (id=5372): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x7fffffffffffffff) 2.079016513s ago: executing program 0 (id=5374): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@mmap={0x1, 0x2, 0x4, 0x800, 0x1, {0x77359400}, {0x1, 0x1, 0x1, 0x6, 0x2f, 0x7}, 0x9, 0x1, {}, 0x6}) 1.928476276s ago: executing program 0 (id=5379): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @remote, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 1.83900149s ago: executing program 0 (id=5382): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.160566528s ago: executing program 3 (id=5394): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) 1.096829157s ago: executing program 3 (id=5395): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd, 0xb4a}}, 0x28) 1.069368142s ago: executing program 3 (id=5396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) 1.013350101s ago: executing program 3 (id=5397): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x1, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) 920.787875ms ago: executing program 3 (id=5399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0x10, &(0x7f00000018c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000001940)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001a40)={r1, 0x20, &(0x7f0000001980)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000001a80)=0x10) 543.310617ms ago: executing program 2 (id=5403): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000040)) 532.688656ms ago: executing program 2 (id=5404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) 492.942258ms ago: executing program 2 (id=5405): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000680)='xfs\x00', 0x0) fsmount(r0, 0x0, 0x1) 420.793946ms ago: executing program 4 (id=5406): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f0000000a000100"], 0x50}}, 0x0) 412.095764ms ago: executing program 2 (id=5407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 397.148191ms ago: executing program 4 (id=5408): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 308.683065ms ago: executing program 4 (id=5409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 308.483865ms ago: executing program 2 (id=5410): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000300)={0x0, 0x4, 0x8}) 306.519445ms ago: executing program 4 (id=5411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mq_open(0x0, 0x40, 0x5e, &(0x7f0000000080)={0x2, 0x6, 0x99cf, 0x6}) 255.532026ms ago: executing program 4 (id=5412): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd28, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x44010) 232.537641ms ago: executing program 5 (id=5413): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 199.557135ms ago: executing program 2 (id=5414): syz_mount_image$sysv(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x81c000, &(0x7f0000000100)=ANY=[], 0x40, 0x9e9b, &(0x7f000000d000)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 173.486221ms ago: executing program 4 (id=5415): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x128, 0xc8, 0x8, 0x128, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x845}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @common=@frag={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 137.755534ms ago: executing program 5 (id=5416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmmsg$inet_sctp(r1, &(0x7f0000003400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x8205, 0x101, 0x10000}}], 0x20, 0x40}], 0x1, 0x40) 1.27379ms ago: executing program 3 (id=5417): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xa41d, 0x4) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x0) 0s ago: executing program 5 (id=5418): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) kernel console output (not intermixed with test programs): usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 191.008609][ T8114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.051946][ T8114] usb 3-1: Product: syz [ 191.078680][ T8114] usb 3-1: Manufacturer: syz [ 191.088799][ T8114] usb 3-1: SerialNumber: syz [ 191.105266][ T8114] usb 3-1: config 0 descriptor?? [ 191.105468][T11589] netlink: 'syz.4.3338': attribute type 44 has an invalid length. [ 191.144886][ T8114] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 191.154242][ T4233] usb 2-1: USB disconnect, device number 16 [ 191.364711][T11607] netlink: 'syz.4.3345': attribute type 3 has an invalid length. [ 191.406505][T11609] loop0: detected capacity change from 0 to 256 [ 191.477505][T11613] comedi comedi2: ni_at_a2150: I/O port conflict (0x3,28) [ 191.482217][T11609] FAT-fs (loop0): Directory bread(block 64) failed [ 191.501801][T11609] FAT-fs (loop0): Directory bread(block 65) failed [ 191.527179][T11609] FAT-fs (loop0): Directory bread(block 66) failed [ 191.534564][T11609] FAT-fs (loop0): Directory bread(block 67) failed [ 191.541245][T11609] FAT-fs (loop0): Directory bread(block 68) failed [ 191.556072][T11609] FAT-fs (loop0): Directory bread(block 69) failed [ 191.558454][T11615] loop3: detected capacity change from 0 to 4096 [ 191.573505][T11609] FAT-fs (loop0): Directory bread(block 70) failed [ 191.580609][T11609] FAT-fs (loop0): Directory bread(block 71) failed [ 191.591388][T11609] FAT-fs (loop0): Directory bread(block 72) failed [ 191.596811][ T8114] gspca_spca1528: reg_w err -71 [ 191.599497][T11609] FAT-fs (loop0): Directory bread(block 73) failed [ 191.643602][ T8114] spca1528: probe of 3-1:0.1 failed with error -71 [ 191.684768][T11615] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 191.699409][ T8114] usb 3-1: USB disconnect, device number 21 [ 191.832778][T10359] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 191.857046][T10359] ath9k_htc: Failed to initialize the device [ 191.892519][ T4233] usb 2-1: ath9k_htc: USB layer deinitialized [ 192.040965][T11635] net_ratelimit: 335 callbacks suppressed [ 192.040982][T11635] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.255574][T11651] loop0: detected capacity change from 0 to 256 [ 192.315430][T11657] loop4: detected capacity change from 0 to 4096 [ 192.416789][T11663] __nla_validate_parse: 3 callbacks suppressed [ 192.416805][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 192.423001][T11664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.423907][T11657] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 192.502831][T11663] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3373'. [ 192.519904][T11663] device vlan0 entered promiscuous mode [ 192.590256][T11657] NILFS (loop4): mounting fs with errors [ 192.618556][T11667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3377'. [ 192.746799][T11674] bad cache= option: nonw [ 192.746799][T11674] [ 192.773633][T11674] CIFS: VFS: bad cache= option: nonw [ 192.917330][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3389'. [ 193.083727][T11703] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 193.338910][T11724] kernel profiling enabled (shift: 5) [ 193.505507][T11741] netlink: 'syz.3.3412': attribute type 10 has an invalid length. [ 193.545162][T11741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3412'. [ 193.580241][T11741] device bond0 entered promiscuous mode [ 193.619085][T11741] device bond_slave_0 entered promiscuous mode [ 193.673635][T11741] device bond_slave_1 entered promiscuous mode [ 193.702201][T11753] rdma_rxe: rxe_register_device failed with error -23 [ 193.734187][T11753] rdma_rxe: failed to add veth0_vlan [ 193.929580][T11773] loop2: detected capacity change from 0 to 1024 [ 194.001045][T11773] hfsplus: Filesystem is marked locked, mounting read-only. [ 194.087002][T11783] loop4: detected capacity change from 0 to 128 [ 194.120729][T11781] loop0: detected capacity change from 0 to 4096 [ 194.139894][T11787] rdma_rxe: rxe_register_device failed with error -23 [ 194.167697][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.174063][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.185942][T11787] rdma_rxe: failed to add veth0_vlan [ 194.210097][T11783] attempt to access beyond end of device [ 194.210097][T11783] loop4: rw=0, want=6491538, limit=128 [ 194.219605][T11781] ntfs: volume version 3.1. [ 194.225960][T11783] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 194.255858][ T4198] sysv_free_block: flc_count > flc_size [ 194.269142][ T4198] sysv_free_block: flc_count > flc_size [ 194.295524][ T4198] sysv_free_block: flc_count > flc_size [ 194.317924][ T4198] sysv_free_block: flc_count > flc_size [ 194.341204][ T4198] sysv_free_block: flc_count > flc_size [ 194.341140][T11775] infiniband syz2: set active [ 194.358966][T11775] infiniband syz2: added bond_slave_1 [ 194.361610][ T4198] sysv_free_block: flc_count > flc_size [ 194.376987][ T4198] sysv_free_block: flc_count > flc_size [ 194.388322][ T4198] sysv_free_block: flc_count > flc_size [ 194.402061][ T4198] sysv_free_block: flc_count > flc_size [ 194.413663][ T4198] sysv_free_block: flc_count > flc_size [ 194.445179][T11775] RDS/IB: syz2: added [ 194.478315][ T4198] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 194.490087][T11775] smc: adding ib device syz2 with port count 1 [ 194.496383][T11775] smc: ib device syz2 port 1 has pnetid [ 194.883623][T11811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.018710][T11819] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 195.154432][T11827] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3453'. [ 195.197419][T11827] openvswitch: netlink: IP tunnel dst address not specified [ 195.305458][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.313152][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.320263][T11833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.520275][T11803] loop4: detected capacity change from 0 to 40427 [ 195.552212][T11803] F2FS-fs (loop4): Corrupted extension count (33554469 + 9 > 64) [ 195.583670][T11803] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 195.628594][T11803] F2FS-fs (loop4): invalid crc value [ 195.640430][T11803] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 195.827797][T11803] F2FS-fs (loop4): recover fsync data on readonly fs [ 195.898875][T11803] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 195.928039][T11803] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.937127][T11854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3466'. [ 195.956903][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 196.015594][T11831] loop0: detected capacity change from 0 to 32768 [ 196.070034][T11831] BTRFS: Invalid seeding and uuid-changed device detected [ 196.171365][ T6778] udevd[6778]: incorrect btrfs checksum on /dev/loop0 [ 196.992771][ T4233] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.007322][T11914] netlink: 'syz.0.3497': attribute type 21 has an invalid length. [ 197.104385][T11921] loop2: detected capacity change from 0 to 256 [ 197.170767][T11927] loop0: detected capacity change from 0 to 2048 [ 197.180197][T11921] FAT-fs (loop2): Directory bread(block 64) failed [ 197.192687][T11921] FAT-fs (loop2): Directory bread(block 65) failed [ 197.206414][T11921] FAT-fs (loop2): Directory bread(block 66) failed [ 197.214318][T11921] FAT-fs (loop2): Directory bread(block 67) failed [ 197.221168][T11921] FAT-fs (loop2): Directory bread(block 68) failed [ 197.228400][T11921] FAT-fs (loop2): Directory bread(block 69) failed [ 197.235838][T11921] FAT-fs (loop2): Directory bread(block 70) failed [ 197.245476][T11921] FAT-fs (loop2): Directory bread(block 71) failed [ 197.253551][T11921] FAT-fs (loop2): Directory bread(block 72) failed [ 197.267299][T11921] FAT-fs (loop2): Directory bread(block 73) failed [ 197.281137][T11927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.412991][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.451394][ T4233] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.529689][T11942] loop1: detected capacity change from 0 to 164 [ 197.602031][T11947] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3512'. [ 197.656477][T11942] Unable to read rock-ridge attributes [ 197.687724][T11942] Unable to read rock-ridge attributes [ 197.697454][T11942] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 197.710341][ T4233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.737136][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.768090][ T4233] usb 4-1: Product: syz [ 197.786906][ T4233] usb 4-1: Manufacturer: syz [ 197.798453][ T4233] usb 4-1: SerialNumber: syz [ 197.874258][ T4233] cdc_ncm 4-1:1.0: skipping garbage [ 197.879624][ T4233] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 197.929142][ T4233] cdc_ncm 4-1:1.0: bind() failure [ 197.945618][ T4233] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 197.969474][ T4233] cdc_ncm 4-1:1.1: bind() failure [ 198.096470][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3524'. [ 198.130627][ T1336] usb 4-1: USB disconnect, device number 17 [ 198.333290][T11991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3533'. [ 198.333351][T11991] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3533'. [ 198.455255][T11999] xt_NFQUEUE: number of total queues is 0 [ 198.462774][ T8111] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 198.518458][T12005] loop2: detected capacity change from 0 to 64 [ 198.591470][T12011] cgroup: none used incorrectly [ 198.816786][T12022] loop4: detected capacity change from 0 to 8 [ 198.887082][ T8111] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 198.903374][ T8111] usb 1-1: config 0 has no interface number 0 [ 198.913910][T12032] netlink: 'syz.2.3554': attribute type 6 has an invalid length. [ 198.919833][ T8111] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 198.948535][ T8111] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 198.962643][T12032] netlink: 'syz.2.3554': attribute type 7 has an invalid length. [ 198.982027][ T8111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.991186][T12022] SQUASHFS error: Failed to read block 0x2d7: -5 [ 199.007356][T12032] netlink: 'syz.2.3554': attribute type 8 has an invalid length. [ 199.017579][ T8111] usb 1-1: config 0 descriptor?? [ 199.023116][T12022] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 199.068422][ T26] audit: type=1800 audit(1773064285.029:12): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3548" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 199.094719][ T8111] ttusbir 1-1:0.83: cannot find expected altsetting [ 199.175500][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3560'. [ 199.272273][T12051] kAFS: unable to lookup cell '.,' [ 199.372785][ T8111] usb 1-1: USB disconnect, device number 25 [ 199.412736][T12060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3567'. [ 199.703942][T12078] ip6t_srh: unknown srh match flags 4001 [ 199.718356][T12080] netlink: 'syz.1.3577': attribute type 41 has an invalid length. [ 200.001951][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3585'. [ 200.042074][T12097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3585'. [ 200.185127][T12110] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 200.434861][T12121] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3595'. [ 200.673710][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3599'. [ 200.906419][T12138] netlink: 'syz.0.3603': attribute type 4 has an invalid length. [ 201.100646][T12116] loop4: detected capacity change from 0 to 32768 [ 201.182849][T12116] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 201.302700][ T4233] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 201.342082][T12168] cgroup: Name too long [ 201.346692][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 201.678388][T12184] loop4: detected capacity change from 0 to 1024 [ 201.705417][ T4233] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 201.722709][ T4233] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 201.732280][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.797829][ T4233] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 201.816140][T12184] hfsplus: can't free extent [ 202.794426][T12252] loop2: detected capacity change from 0 to 8192 [ 202.822475][T12262] __nla_validate_parse: 28 callbacks suppressed [ 202.822494][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'. [ 202.859509][ T26] audit: type=1326 audit(1773064288.819:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.4.3654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45a736d799 code=0x0 [ 202.925520][ T4233] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 202.949962][T12252] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 203.043084][T12252] REISERFS (device loop2): using ordered data mode [ 203.049627][T12252] reiserfs: using flush barriers [ 203.078674][T12280] raw_sendmsg: syz.1.3661 forgot to set AF_INET. Fix it! [ 203.132859][ T4233] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 203.141519][ T4233] stv0680 4-1:4.0: last error: 70, command = 0x88 [ 203.143915][T12252] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.183040][T12252] REISERFS (device loop2): checking transaction log (loop2) [ 203.220881][T12252] REISERFS (device loop2): Using tea hash to sort names [ 203.233550][ T4233] usb 4-1: USB disconnect, device number 18 [ 203.240980][ T9484] udevd[9484]: setting mode of /dev/bus/usb/004/018 to 020664 failed: No such file or directory [ 203.253191][T12252] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 203.272741][ T4229] Bluetooth: hci4: command 0x0405 tx timeout [ 203.283267][ T9484] udevd[9484]: setting owner of /dev/bus/usb/004/018 to uid=0, gid=0 failed: No such file or directory [ 203.368050][T12288] loop4: detected capacity change from 0 to 4096 [ 203.375173][T12293] fuse: Invalid rootmode [ 203.465916][T12288] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 203.572449][T12288] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 203.726185][ T151] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 203.746514][ T4198] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 203.763402][ T4198] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 203.776748][ T4198] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 203.814416][ T151] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 203.821729][ T4198] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 204.139616][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3678'. [ 204.161754][T12331] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3680'. [ 204.185935][T12335] sctp: [Deprecated]: syz.0.3682 (pid 12335) Use of int in max_burst socket option. [ 204.185935][T12335] Use struct sctp_assoc_value instead [ 204.211739][T12329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3678'. [ 204.565689][T12362] autofs4:pid:12362:autofs_fill_super: called with bogus options [ 204.706034][T12369] loop1: detected capacity change from 0 to 256 [ 204.844498][T12376] loop2: detected capacity change from 0 to 4096 [ 204.857700][T12369] FAT-fs (loop1): Directory bread(block 64) failed [ 204.864882][T12369] FAT-fs (loop1): Directory bread(block 65) failed [ 204.871483][T12369] FAT-fs (loop1): Directory bread(block 66) failed [ 204.894184][T12376] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 204.938424][T12369] FAT-fs (loop1): Directory bread(block 67) failed [ 204.979236][T12369] FAT-fs (loop1): Directory bread(block 68) failed [ 204.999420][T12369] FAT-fs (loop1): Directory bread(block 69) failed [ 205.012832][T12369] FAT-fs (loop1): Directory bread(block 70) failed [ 205.020048][T12369] FAT-fs (loop1): Directory bread(block 71) failed [ 205.050287][T12376] ntfs: volume version 3.1. [ 205.060322][T12381] loop3: detected capacity change from 0 to 4096 [ 205.068702][T12369] FAT-fs (loop1): Directory bread(block 72) failed [ 205.085887][T12376] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 205.088544][T12369] FAT-fs (loop1): Directory bread(block 73) failed [ 205.118570][T12391] netlink: 'syz.0.3709': attribute type 1 has an invalid length. [ 205.143078][T12376] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 205.182329][T12381] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 205.389763][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 205.418722][T12399] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3714'. [ 205.468047][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 205.561866][T12410] device sit0 entered promiscuous mode [ 205.592326][T12410] netlink: 'syz.3.3717': attribute type 1 has an invalid length. [ 205.638225][T12410] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3717'. [ 205.654986][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 205.692761][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 205.729558][T12413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.052983][ T1336] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.230382][T12459] netlink: 'syz.1.3743': attribute type 21 has an invalid length. [ 206.245342][T12459] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.463417][ T1336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 206.477184][ T7519] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 206.498563][ T1336] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 206.517478][ T1336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 206.530776][ T1336] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 206.540979][ T1336] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 206.550314][ T1336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.589144][ T1336] usb 3-1: config 0 descriptor?? [ 206.742938][ T7519] usb 1-1: Using ep0 maxpacket: 32 [ 206.858541][ T1336] hdpvr 3-1:0.0: firmware version 0x8 dated —jl;™S11´Ô [ 206.883278][ T7519] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 206.915457][T12490] overlayfs: missing 'lowerdir' [ 207.028181][T10357] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.063990][ T1336] hdpvr 3-1:0.0: device init failed [ 207.069469][ T7519] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 207.079697][ T1336] hdpvr: probe of 3-1:0.0 failed with error -12 [ 207.099126][ T7519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.111290][ T1336] usb 3-1: USB disconnect, device number 22 [ 207.119354][ T7519] usb 1-1: Product: syz [ 207.132646][ T7519] usb 1-1: Manufacturer: syz [ 207.137286][ T7519] usb 1-1: SerialNumber: syz [ 207.155232][ T7519] usb 1-1: config 0 descriptor?? [ 207.223973][ T7519] usb 1-1: bad CDC descriptors [ 207.229367][ T7519] usb 1-1: unsupported MDLM descriptors [ 207.282756][T10357] usb 2-1: Using ep0 maxpacket: 32 [ 207.428605][ T1336] usb 1-1: USB disconnect, device number 26 [ 207.433086][T10357] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 207.453065][T10357] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 207.457071][T12524] overlayfs: missing 'lowerdir' [ 207.461761][T10357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 207.507541][T10357] usb 2-1: config 1 has no interface number 0 [ 207.514313][T10357] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.530572][T10357] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 207.584111][T10357] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 207.605144][T10357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.676045][T10357] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 207.741471][T12540] blk_update_request: I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 207.760808][T12540] gfs2: error 10 reading superblock [ 207.898937][T10357] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 208.002666][T10359] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 208.072881][T10357] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.093494][T12563] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 208.125845][T12564] loop3: detected capacity change from 0 to 4096 [ 208.151966][T12564] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 208.154838][ T1336] usb 2-1: USB disconnect, device number 17 [ 208.175579][ T1336] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 208.176479][T12564] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 208.201895][T12564] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 208.223875][T12564] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 208.286640][T12564] ntfs: volume version 3.1. [ 208.299008][T12567] netlink: 'syz.0.3795': attribute type 3 has an invalid length. [ 208.361385][T12564] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 208.377783][T10359] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 208.388142][T12564] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 208.402307][T10359] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 208.421778][T10359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.434012][T10357] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.448223][T10357] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 208.461967][T10357] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 208.471407][T10357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.510641][T10359] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 208.523440][T10357] usb 5-1: config 0 descriptor?? [ 208.605992][T12573] loop0: detected capacity change from 0 to 4096 [ 208.691030][T12573] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.008420][T10357] Bluetooth: Can't get state to change to load configuration err [ 209.038516][T10357] Bluetooth: Loading sysconfig file failed [ 209.049537][T10357] ath3k: probe of 5-1:0.0 failed with error -16 [ 209.067938][T10357] usb 5-1: USB disconnect, device number 12 [ 209.170196][T12605] loop1: detected capacity change from 0 to 64 [ 209.201279][T12607] usb usb1: usbfs: process 12607 (syz.3.3814) did not claim interface 0 before use [ 209.410416][T12614] trusted_key: encrypted_key: master key parameter is missing [ 209.485545][T12616] __nla_validate_parse: 2 callbacks suppressed [ 209.485561][T12616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3819'. [ 209.580792][T12619] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.633666][T10359] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 209.727352][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.739549][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.855620][T12630] netlink: 'syz.3.3827': attribute type 2 has an invalid length. [ 209.863867][T10359] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 209.878767][T10359] stv0680 3-1:4.0: last error: 86, command = 0x3 [ 209.894366][T12630] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 209.919665][T10359] usb 3-1: USB disconnect, device number 23 [ 209.944131][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.996795][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.201253][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.232005][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.268810][T12647] netlink: 'syz.3.3836': attribute type 1 has an invalid length. [ 210.350881][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.350951][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.556744][T12657] loop0: detected capacity change from 0 to 4096 [ 210.688167][T12657] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 210.819112][ T151] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 210.863141][ T4185] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 210.863196][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 210.863229][ T4185] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 210.863334][ T151] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 210.865654][ T4185] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 211.064200][T12680] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3850'. [ 211.370046][T12688] loop0: detected capacity change from 0 to 256 [ 211.444675][T12688] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 211.512477][T12688] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 211.515718][T12688] exFAT-fs (loop0): Filesystem has been set read-only [ 211.624562][T12696] netlink: 'syz.2.3854': attribute type 10 has an invalid length. [ 211.625139][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.626392][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.698877][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.698988][T12696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.701612][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.701686][T12696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.718392][T12672] loop3: detected capacity change from 0 to 32768 [ 211.787366][T12696] team0: Port device bridge0 added [ 211.809832][T12648] chnl_net:caif_netlink_parms(): no params data found [ 212.217821][T12648] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.242780][ T1336] Bluetooth: hci3: command 0x0409 tx timeout [ 212.256453][T12648] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.273476][T12726] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 212.281402][T12648] device bridge_slave_0 entered promiscuous mode [ 212.315073][T12726] overlayfs: missing 'lowerdir' [ 212.344406][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3867'. [ 212.379804][T12648] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.427977][T12648] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.456834][T12648] device bridge_slave_1 entered promiscuous mode [ 212.597279][T12648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.665863][T12648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.786651][T12738] loop0: detected capacity change from 0 to 4096 [ 212.822121][T12648] team0: Port device team_slave_0 added [ 212.838510][T12738] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 212.888187][T12648] team0: Port device team_slave_1 added [ 213.005975][T12648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.013146][T12711] comedi comedi2: reset error (fatal) [ 213.031117][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.123646][T12648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.235129][T12648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.256760][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.369920][T12778] loop0: detected capacity change from 0 to 1024 [ 213.420384][T12648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.587730][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3891'. [ 213.602213][T12778] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.634506][T12648] device hsr_slave_0 entered promiscuous mode [ 213.669211][T12648] device hsr_slave_1 entered promiscuous mode [ 213.689331][T12648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.698976][T12648] Cannot create hsr debugfs directory [ 213.832638][T10360] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.849308][T12807] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3897'. [ 214.115221][T10360] usb 5-1: Using ep0 maxpacket: 8 [ 214.167824][T12818] netlink: 'syz.0.3901': attribute type 3 has an invalid length. [ 214.212897][T12818] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3901'. [ 214.242944][T10360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 214.261081][T10360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.309497][T10360] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.330304][T12827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3905'. [ 214.362856][T10360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 214.388271][T10360] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 214.428894][T10360] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 214.449372][T10360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.468985][T12838] netlink: 'syz.3.3909': attribute type 3 has an invalid length. [ 214.480129][T12840] loop0: detected capacity change from 0 to 164 [ 214.493212][T10360] usb 5-1: config 0 descriptor?? [ 214.498700][T10357] Bluetooth: hci3: command 0x041b tx timeout [ 214.512267][ T4286] device hsr_slave_0 left promiscuous mode [ 214.519196][T12793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 214.543368][T12838] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3909'. [ 214.561081][T12840] isofs: Unable to find the ".." directory for NFS. [ 214.573157][ T4286] device hsr_slave_1 left promiscuous mode [ 214.580065][ T4286] device bridge_slave_1 left promiscuous mode [ 214.590260][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.629352][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.647066][ T4286] rdma_rxe: ignoring netdev event = 10 for bond_slave_1 [ 214.656616][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3913'. [ 214.702158][ T4286] device veth1_macvtap left promiscuous mode [ 214.714364][ T4286] device veth0_macvtap left promiscuous mode [ 214.738537][ T4286] device veth1_vlan left promiscuous mode [ 214.925897][ T4286] infiniband syz2: set down [ 214.984707][ T1108] usb 5-1: USB disconnect, device number 13 [ 215.106993][ T4286] bond1 (unregistering): Released all slaves [ 215.208122][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 215.226584][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 215.240259][ T4286] rdma_rxe: ignoring netdev event = 27 for bond_slave_1 [ 215.248998][ T4286] rdma_rxe: ignoring netdev event = 26 for bond_slave_1 [ 215.257622][ T4286] rdma_rxe: ignoring netdev event = 21 for bond_slave_1 [ 215.265272][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.274158][ T4286] rdma_rxe: ignoring netdev event = 9 for bond_slave_1 [ 215.281111][ T4286] rdma_rxe: ignoring netdev event = 8 for bond_slave_1 [ 215.296970][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.301780][ T4477] smc: removing ib device syz2 [ 215.378460][ T4286] bond0 (unregistering): Released all slaves [ 215.460127][T10359] team0 speed is unknown, defaulting to 1000 [ 215.528417][T12648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.565843][T12881] TCP: TCP_TX_DELAY enabled [ 215.567218][T12648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.623752][T12648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.714933][T12648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.788171][T12891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.866306][T12899] netlink: 'syz.2.3933': attribute type 1 has an invalid length. [ 215.909288][T12899] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3933'. [ 215.948736][T12903] SET target dimension over the limit! [ 215.990455][T12648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.063022][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.071485][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.109307][T12648] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.169411][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.207909][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.245079][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.252221][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.311712][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.366515][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.420832][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.463120][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.470240][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.527528][T12932] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3946'. [ 216.552837][T10360] Bluetooth: hci3: command 0x040f tx timeout [ 216.579503][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.600405][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.618419][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.634585][T12927] loop2: detected capacity change from 0 to 4096 [ 216.684468][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.702687][T12927] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 216.766463][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.792948][T12927] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 216.813265][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.853305][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.861611][T12927] ntfs3: loop2: mft corrupted [ 216.887814][T12927] ntfs3: loop2: Failed to load $Extend. [ 216.905179][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.953392][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.002122][T12648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.029776][T12648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.059404][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.089416][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.188346][T12918] loop3: detected capacity change from 0 to 32768 [ 217.295331][T12970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3956'. [ 217.334724][T12918] XFS (loop3): Mounting V5 Filesystem [ 217.491373][T12918] XFS (loop3): Ending clean mount [ 217.582852][T12985] netlink: 'syz.0.3963': attribute type 33 has an invalid length. [ 217.590698][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3963'. [ 217.598263][ T4187] XFS (loop3): Unmounting Filesystem [ 217.672729][ T4229] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 217.799217][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.819771][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.867993][T12648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.032835][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.072913][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 218.121749][ T4229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.202808][ T4229] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 218.222747][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.291893][ T4229] usb 3-1: config 0 descriptor?? [ 218.595596][ T4229] usb 3-1: USB disconnect, device number 24 [ 218.620579][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3979'. [ 218.632695][T10359] Bluetooth: hci3: command 0x0419 tx timeout [ 218.661741][T13038] loop4: detected capacity change from 0 to 16 [ 218.722051][T13038] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 218.777033][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.814128][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.977766][T12648] device veth0_vlan entered promiscuous mode [ 219.029111][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.067045][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.108664][T12648] device veth1_vlan entered promiscuous mode [ 219.134228][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.182423][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.213291][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.285900][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.308855][T13048] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 219.361454][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.404844][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.445567][T12648] device veth0_macvtap entered promiscuous mode [ 219.505972][T12648] device veth1_macvtap entered promiscuous mode [ 219.596141][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.642668][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.707420][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.733989][T13061] loop2: detected capacity change from 0 to 8 [ 219.742040][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.788594][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.833715][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.887869][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.942627][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.978778][T12648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.004430][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.021073][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.097413][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.109724][T13030] loop3: detected capacity change from 0 to 32768 [ 220.120139][T13061] unable to read fragment index table [ 220.144898][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.186620][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.225292][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.240417][T13041] loop0: detected capacity change from 0 to 40427 [ 220.247031][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.260512][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.282615][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.302851][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.316236][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.331599][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.351523][T12648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.385243][T13041] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x1ffff [ 220.409028][T13030] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 220.417653][T12648] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.417747][T12648] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.417771][T12648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.417793][T12648] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.427451][T13041] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 220.478550][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.511542][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.536826][T13030] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 220.649209][T13041] F2FS-fs (loop0): invalid crc value [ 220.714655][T13041] F2FS-fs (loop0): Found nat_bits in checkpoint [ 220.766103][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.782545][T13030] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 220.815203][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.898279][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.954500][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.962352][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.068298][T13041] F2FS-fs (loop0): Start checkpoint disabled! [ 221.090042][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.149654][T13041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 221.209049][T13030] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 221.220417][T13100] loop2: detected capacity change from 0 to 4096 [ 221.376192][ T26] audit: type=1400 audit(221.340:14): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=13110 comm="syz.4.4003" [ 221.396738][T13100] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 221.414684][T13100] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 221.452313][T13041] attempt to access beyond end of device [ 221.452313][T13041] loop0: rw=2049, want=45104, limit=40427 [ 221.485115][T13100] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 221.559125][T13100] ntfs: volume version 3.1. [ 221.649522][T13117] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4005'. [ 221.904551][ T4186] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 222.071552][ T1235] attempt to access beyond end of device [ 222.071552][ T1235] loop0: rw=2049, want=40976, limit=40427 [ 222.241362][T13139] device bridge_slave_1 left promiscuous mode [ 222.278359][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.355286][T13139] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.537941][T13144] loop5: detected capacity change from 0 to 4096 [ 222.669040][T13144] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 222.894004][T13144] ntfs3: loop5: failed to convert "c46c" to cp1250 [ 223.661795][T13147] loop3: detected capacity change from 0 to 32768 [ 223.715052][T13209] ip6t_rpfilter: unknown options [ 223.784753][T13216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 223.867278][T13218] loop4: detected capacity change from 0 to 2048 [ 223.948151][T13147] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 223.961284][T13218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.195212][T13147] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x1803 dinode [ 224.215952][T13147] XFS (loop3): Unmount and run xfs_repair [ 224.221725][T13147] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 224.267739][T13147] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 224.282369][T13147] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.395897][T13147] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 224.426552][T13256] xt_hashlimit: invalid interval [ 224.511849][T13147] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 224.566482][T13147] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.611906][T13266] (unnamed net_device) (uninitialized): peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 224.622624][T13147] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 224.659691][T13147] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 224.680118][T13147] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 224.760033][T13276] loop4: detected capacity change from 0 to 2048 [ 224.802080][ T4187] XFS (loop3): Unmounting Filesystem [ 224.853870][T10360] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 224.854081][T13276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.066487][T13276] Invalid option length (0) for dns_resolver key [ 225.104969][T10360] usb 3-1: Using ep0 maxpacket: 8 [ 225.697231][T13309] netlink: 'syz.4.4080': attribute type 5 has an invalid length. [ 225.707844][T13310] netlink: 'syz.3.4079': attribute type 2 has an invalid length. [ 225.716021][T10360] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 225.735177][T13309] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4080'. [ 225.750847][T10360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.759568][T10360] usb 3-1: Product: syz [ 225.785814][T10360] usb 3-1: Manufacturer: syz [ 225.790452][T10360] usb 3-1: SerialNumber: syz [ 225.851546][T10360] usb 3-1: config 0 descriptor?? [ 225.865715][T13320] netlink: 'syz.3.4082': attribute type 13 has an invalid length. [ 226.268732][T10360] usb 3-1: USB disconnect, device number 25 [ 226.301106][T13349] loop5: detected capacity change from 0 to 1024 [ 226.440683][T13358] IPVS: length: 117 != 8 [ 226.465186][ T1235] hfsplus: b-tree write err: -5, ino 25 [ 226.470940][ T1235] hfsplus: b-tree write err: -5, ino 4 [ 226.478893][ T1235] hfsplus: b-tree write err: -5, ino 2 [ 226.532964][ T6778] udevd[6778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.644415][T13372] netlink: 'syz.4.4108': attribute type 4 has an invalid length. [ 226.667009][T13370] loop5: detected capacity change from 0 to 512 [ 226.676057][T13372] netlink: 'syz.4.4108': attribute type 3 has an invalid length. [ 226.705058][T13372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'. [ 226.761278][T13370] EXT4-fs (loop5): Ignoring removed bh option [ 226.782910][T13370] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.823004][T13370] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 226.889459][T13378] loop0: detected capacity change from 0 to 4096 [ 226.912038][T13370] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 226.984430][T13378] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 227.041429][T13370] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 227.086864][T13400] tmpfs: Bad value for 'mpol' [ 227.096638][T13370] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 227.212779][T13370] EXT4-fs warning (device loop5): ext4_group_extend:1852: can't read last block, resize aborted [ 227.329625][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4126'. [ 227.492891][T13422] libceph: resolve '0' (ret=-3): failed [ 227.546159][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4128'. [ 227.660952][T13434] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 227.686764][T13436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4133'. [ 227.698085][T13438] loop0: detected capacity change from 0 to 256 [ 227.719821][T13434] overlayfs: overlapping lowerdir path [ 227.979363][ T4233] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.005078][ T4233] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.053942][ T1336] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.099057][T13466] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4145'. [ 228.411679][T13492] netlink: 'syz.3.4154': attribute type 1 has an invalid length. [ 228.452979][T13499] netlink: 'syz.5.4157': attribute type 6 has an invalid length. [ 228.472919][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'. [ 228.793000][ T1336] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.800704][ T1336] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.882643][T13527] dlm: non-version read from control device 4096 [ 229.044228][T13539] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 229.056591][T13530] loop0: detected capacity change from 0 to 4096 [ 229.182270][T13530] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 229.213534][T13530] ntfs3: loop0: Failed to load $Extend. [ 229.273500][T13530] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 229.298229][T13552] loop4: detected capacity change from 0 to 128 [ 229.337863][T13557] loop5: detected capacity change from 0 to 512 [ 229.378641][T13560] loop2: detected capacity change from 0 to 64 [ 229.390889][ T4185] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 229.400368][T13552] EXT4-fs (loop4): Test dummy encryption mode enabled [ 229.409992][ T4185] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 229.413770][T13552] EXT4-fs (loop4): inline encryption not supported [ 229.440727][T13557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 229.453532][T13557] System zones: 1-12 [ 229.457351][T13552] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,errors=continue,inlinecrypt,,errors=continue. Quota mode: none. [ 229.458464][T13557] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.4184: Directory hole found for htree index block 0 [ 229.540902][T13557] EXT4-fs (loop5): Remounting filesystem read-only [ 229.550791][T13557] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 229.559229][T13557] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.4184: Directory hole found for htree index block 0 [ 229.616111][T13557] EXT4-fs (loop5): Remounting filesystem read-only [ 229.632723][T13557] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 229.641170][T13557] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 229.659204][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.870059][T13586] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 230.006741][T13595] netlink: 'syz.0.4201': attribute type 3 has an invalid length. [ 230.053062][T13595] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4201'. [ 230.129229][T13603] loop3: detected capacity change from 0 to 8 [ 230.192847][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4205'. [ 230.202045][T13607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.263879][T13603] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 230.334991][T13617] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16 [ 230.894106][T13619] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.901337][T13619] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.533562][T13625] loop5: detected capacity change from 0 to 32768 [ 231.653913][T13625] JBD2: Ignoring recovery information on journal [ 231.768921][T13625] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 231.832708][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.845314][T13625] OCFS2: ERROR (device loop5): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 231.907057][T13625] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 231.947119][T13625] OCFS2: File system is now read-only. [ 231.967686][T13625] (syz.5.4214,13625,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 232.040857][T12648] ocfs2: Unmounting device (7,5) on (node local) [ 232.107462][T13619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.107971][T13647] loop5: detected capacity change from 0 to 1024 [ 232.208341][T13619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.226894][T13647] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 232.238291][T13647] hfsplus: xattr searching failed [ 232.539536][T13655] loop5: detected capacity change from 0 to 512 [ 232.691195][T13619] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.713328][T13619] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.733217][T13619] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.758677][T13619] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.772086][T13659] loop5: detected capacity change from 0 to 2048 [ 232.797709][T13659] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=26504, location=26504 [ 232.819223][T13659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.905291][T13629] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4217'. [ 233.229905][T13677] xt_ecn: cannot match TCP bits for non-tcp packets [ 233.272937][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 233.542872][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 233.661936][T13705] syz.2.4249 (13705): drop_caches: 0 [ 233.668309][ T21] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.702867][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.872373][T13722] loop4: detected capacity change from 0 to 16 [ 233.903010][ T21] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.923756][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.933110][T13722] erofs: (device loop4): mounted with root inode @ nid 36. [ 233.952664][ T21] usb 6-1: Product: syz [ 233.959571][T13722] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 233.989253][ T21] usb 6-1: Manufacturer: syz [ 233.994345][ T21] usb 6-1: SerialNumber: syz [ 233.995114][T13719] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 233.995114][T13719] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 233.995114][T13719] [ 234.084194][T13719] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 234.084194][T13719] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 234.084194][T13719] [ 234.146785][T13719] EXT4-fs (loop3): Ignoring removed oldalloc option [ 234.250556][T13719] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,commit=0x0000000000000000,nouser_xattr,noacl,nombcache,nodelalloc,minixdf,oldalloc,,errors=continue. Quota mode: writeback. [ 234.343071][ T21] usb 6-1: 0:2 : does not exist [ 234.348049][ T21] usb 6-1: unit 9 not found! [ 234.387949][ T21] usb 6-1: USB disconnect, device number 2 [ 234.618233][ T9484] udevd[9484]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.655589][T13766] set_capacity_and_notify: 1 callbacks suppressed [ 234.655605][T13766] loop4: detected capacity change from 0 to 256 [ 234.756749][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4276'. [ 234.882293][T13766] FAT-fs (loop4): Directory bread(block 64) failed [ 234.902891][T13766] FAT-fs (loop4): Directory bread(block 65) failed [ 234.918188][T13768] loop2: detected capacity change from 0 to 4096 [ 234.933860][T13766] FAT-fs (loop4): Directory bread(block 66) failed [ 234.940417][T13766] FAT-fs (loop4): Directory bread(block 67) failed [ 234.944981][T13768] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 235.008338][T13766] FAT-fs (loop4): Directory bread(block 68) failed [ 235.084417][T13766] FAT-fs (loop4): Directory bread(block 69) failed [ 235.127397][T13766] FAT-fs (loop4): Directory bread(block 70) failed [ 235.162690][T13766] FAT-fs (loop4): Directory bread(block 71) failed [ 235.182985][T13768] ntfs3: loop2: failed to convert "c46c" to maccenteuro [ 235.190222][T13766] FAT-fs (loop4): Directory bread(block 72) failed [ 235.220505][T13766] FAT-fs (loop4): Directory bread(block 73) failed [ 235.482526][T13812] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4292'. [ 235.504473][T13810] loop0: detected capacity change from 0 to 2048 [ 235.543232][T13812] openvswitch: netlink: Flow key attribute not present in set flow. [ 235.681036][T13810] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.103777][T13858] loop4: detected capacity change from 0 to 256 [ 236.153706][T13858] exfat: Deprecated parameter 'utf8' [ 236.159402][T13858] exfat: Deprecated parameter 'namecase' [ 236.214014][T13858] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 236.559573][T13892] loop2: detected capacity change from 0 to 64 [ 236.699431][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4328'. [ 236.789767][T13905] loop5: detected capacity change from 0 to 512 [ 236.860459][T13905] EXT4-fs (loop5): Ignoring removed bh option [ 236.897349][T13905] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 236.959646][T13911] loop4: detected capacity change from 0 to 4096 [ 237.009161][T13905] EXT4-fs (loop5): 1 truncate cleaned up [ 237.022254][T13905] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 237.032365][T13911] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 237.193664][T13911] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 10) do not match. Run ntfsfix or chkdsk. [ 237.278886][T13911] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 237.375441][T13911] ntfs: (device loop4): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 237.383172][T13933] loop3: detected capacity change from 0 to 8 [ 237.386518][T13911] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 237.504690][T13911] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 237.512000][T13938] device netdevsim0 entered promiscuous mode [ 237.534301][T13938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.614066][T13911] ntfs: volume version 3.1. [ 237.703745][T13911] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 237.762460][T13911] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 237.797231][T13911] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota. [ 237.855799][T13911] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 238.214636][T13966] loop5: detected capacity change from 0 to 2048 [ 238.285794][T13966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.412689][ T4233] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 238.742274][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4366'. [ 238.852910][ T4233] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 238.861090][ T4233] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 238.907470][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 238.981791][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4373'. [ 239.125676][ T4233] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.125709][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.125729][ T4233] usb 1-1: Product: syz [ 239.125745][ T4233] usb 1-1: Manufacturer: syz [ 239.125760][ T4233] usb 1-1: SerialNumber: syz [ 239.129166][ T4233] usb 1-1: config 0 descriptor?? [ 239.183395][ T4233] hub 1-1:0.0: bad descriptor, ignoring hub [ 239.183423][ T4233] hub: probe of 1-1:0.0 failed with error -5 [ 239.185926][ T4233] usb 1-1: selecting invalid altsetting 0 [ 239.241424][T13970] loop4: detected capacity change from 0 to 32768 [ 239.316578][T13970] jfs_lookup: iget failed on inum 32 [ 239.320408][T13970] jfs_lookup: iget failed on inum 32 [ 239.601217][ T4233] usb 1-1: USB disconnect, device number 27 [ 239.710929][T14044] netlink: 'syz.4.4382': attribute type 10 has an invalid length. [ 239.715854][T14044] device syz_tun entered promiscuous mode [ 239.755115][T14044] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 240.148688][T14065] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 240.232712][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.287519][T14074] netlink: 'syz.0.4393': attribute type 19 has an invalid length. [ 240.287543][T14074] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4393'. [ 240.308178][T14075] netlink: 'syz.3.4392': attribute type 10 has an invalid length. [ 240.364045][T14075] device hsr0 entered promiscuous mode [ 240.427866][T14075] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.427894][T14075] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 240.428095][T14075] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 240.428116][T14075] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 241.024623][T14119] set_capacity_and_notify: 1 callbacks suppressed [ 241.024639][T14119] loop4: detected capacity change from 0 to 256 [ 241.061496][T14124] UBIFS error (pid: 14124): cannot open "(null)", error -22 [ 241.082739][ T1336] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 241.201358][T14119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.236499][T14119] FAT-fs (loop4): Filesystem has been set read-only [ 241.288566][T14119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.322637][ T8114] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 241.329848][T14119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.385504][T14119] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 241.402726][ T1336] usb 1-1: Using ep0 maxpacket: 16 [ 241.542972][ T1336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.564088][ T1336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 241.579526][ T1336] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 241.592854][ T1336] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.612610][ T8114] usb 3-1: Using ep0 maxpacket: 16 [ 241.720979][T14159] netlink: 'syz.4.4421': attribute type 10 has an invalid length. [ 241.739415][T14159] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 241.752839][T10358] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.753251][ T8114] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 241.802916][ T1336] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 241.831953][ T1336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.852264][ T1336] usb 1-1: Product: syz [ 241.869872][ T1336] usb 1-1: Manufacturer: syz [ 241.875169][ T1336] usb 1-1: SerialNumber: syz [ 241.892152][ T1336] usb 1-1: config 0 descriptor?? [ 241.922940][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 241.943984][ T1336] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 241.972949][ T8114] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.982074][ T8114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.990969][ T8114] usb 3-1: Product: syz [ 241.993875][T10358] usb 4-1: Using ep0 maxpacket: 8 [ 241.995876][ T8114] usb 3-1: Manufacturer: syz [ 242.005263][ T8114] usb 3-1: SerialNumber: syz [ 242.020246][ T8114] usb 3-1: config 0 descriptor?? [ 242.122746][T10358] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 242.131043][T10358] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 242.139452][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 242.147320][T10358] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 242.177736][T10358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 214, changing to 11 [ 242.192644][ T4233] usb 6-1: Using ep0 maxpacket: 8 [ 242.195357][T10358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49299, setting to 1024 [ 242.216371][ T4229] usb 1-1: USB disconnect, device number 28 [ 242.329676][ T4233] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 242.343290][ T4233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.362864][T10358] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 242.365667][ T8114] usb 3-1: USB disconnect, device number 26 [ 242.371945][T10358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.378034][ T4233] usb 6-1: config 0 has no interface number 1 [ 242.397878][ T4233] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 242.402690][T10358] usb 4-1: Product: syz [ 242.422667][T10358] usb 4-1: Manufacturer: syz [ 242.427503][T10358] usb 4-1: SerialNumber: syz [ 242.435828][T10358] usb 4-1: config 0 descriptor?? [ 242.481167][T10358] hub 4-1:0.0: bad descriptor, ignoring hub [ 242.487267][T10358] hub: probe of 4-1:0.0 failed with error -5 [ 242.500262][T10358] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 242.522689][ T21] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 242.532964][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.587538][ T21] usb 5-1: config 0 descriptor?? [ 242.602841][ T4233] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 242.618150][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.634273][ T4233] usb 6-1: Product: syz [ 242.647301][ T4233] usb 6-1: Manufacturer: syz [ 242.656750][ T4233] usb 6-1: SerialNumber: syz [ 242.670937][ T4233] usb 6-1: config 0 descriptor?? [ 242.715440][ T4233] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 242.824251][T10358] usb 4-1: USB disconnect, device number 19 [ 242.936945][ T2422] pvrusb2: Invalid write control endpoint [ 242.945372][ T4233] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 242.968635][ T2422] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 242.995869][ T2422] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 243.072226][T14173] netlink: 'syz.2.4427': attribute type 10 has an invalid length. [ 243.078364][ T21] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 243.097442][ T21] hackrf 5-1:0.0: Could not detect board [ 243.100979][T14173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4427'. [ 243.107594][ T21] hackrf: probe of 5-1:0.0 failed with error -71 [ 243.142934][T14173] batman_adv: batadv0: Adding interface: virt_wifi0 [ 243.146563][ T21] usb 5-1: USB disconnect, device number 14 [ 243.158918][ T4233] usb 6-1: USB disconnect, device number 3 [ 243.205502][T14173] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.231110][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.274657][T14173] batman_adv: batadv0: Interface activated: virt_wifi0 [ 243.780702][T14209] netlink: 736 bytes leftover after parsing attributes in process `syz.4.4445'. [ 244.024484][T14228] comedi comedi1: dt2817: a I/O base address must be specified [ 244.175811][T14245] loop2: detected capacity change from 0 to 16 [ 244.277299][T14245] erofs: (device loop2): mounted with root inode @ nid 36. [ 244.318912][T14245] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 244.368400][T14245] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 244.380953][T14252] loop4: detected capacity change from 0 to 4096 [ 244.395232][T14258] loop5: detected capacity change from 0 to 1024 [ 244.459267][T14252] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 244.500591][T14258] EXT4-fs (loop5): Ignoring removed orlov option [ 244.593478][T14258] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,orlov,bsdgroups,,errors=continue. Quota mode: writeback. [ 244.660648][T14276] loop2: detected capacity change from 0 to 256 [ 244.742277][T14276] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 244.827410][T14282] netlink: 'syz.0.4481': attribute type 1 has an invalid length. [ 245.192815][ T7519] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.234649][T14318] loop4: detected capacity change from 0 to 8 [ 245.242773][ T21] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 245.482809][ T7519] usb 4-1: Using ep0 maxpacket: 16 [ 245.492705][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 245.622940][ T21] usb 3-1: config 253 has an invalid interface number: 184 but max is 0 [ 245.633002][ T7519] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.644810][ T21] usb 3-1: config 253 has no interface number 0 [ 245.675831][ T21] usb 3-1: config 253 interface 184 has no altsetting 0 [ 245.679350][ T7519] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.716965][T14334] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4505'. [ 245.739110][ T7519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.771680][ T7519] usb 4-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 245.799867][ T7519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.824281][ T7519] usb 4-1: config 0 descriptor?? [ 245.842982][ T21] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 245.860694][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.887149][ T21] usb 3-1: Product: syz [ 245.903174][ T21] usb 3-1: Manufacturer: syz [ 245.908290][ T21] usb 3-1: SerialNumber: syz [ 245.955073][ T21] go7007: probe of 3-1:253.184 failed with error -12 [ 246.002370][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4515'. [ 246.021247][T14354] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 246.030294][T14354] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4515'. [ 246.089100][ T21] usb 4-1: USB disconnect, device number 20 [ 246.122717][ T1336] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 246.166383][ T7519] usb 3-1: USB disconnect, device number 27 [ 246.187419][T14362] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4519'. [ 246.412829][ T1336] usb 1-1: Using ep0 maxpacket: 8 [ 246.582886][ T1336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.673306][ T1336] usb 1-1: config 86 has an invalid interface number: 246 but max is 0 [ 246.681599][ T1336] usb 1-1: config 86 has no interface number 0 [ 246.703326][ T1336] usb 1-1: config 86 interface 246 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1023 [ 246.749743][ T1336] usb 1-1: config 86 interface 246 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 246.787118][ T1336] usb 1-1: config 86 interface 246 has no altsetting 0 [ 246.849714][T14390] loop2: detected capacity change from 0 to 256 [ 246.954960][ T1336] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=12.36 [ 246.972758][ T1336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.980794][ T1336] usb 1-1: Product: syz [ 247.012771][ T1336] usb 1-1: Manufacturer: syz [ 247.017414][ T1336] usb 1-1: SerialNumber: syz [ 247.063115][T14342] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 247.099241][T14402] loop2: detected capacity change from 0 to 512 [ 247.201613][T14402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.289239][T14402] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.4539: Attempting to read directory block (0) that is past i_size (3) [ 247.369336][ T1336] kvaser_usb 1-1:86.246: Cannot get usb endpoint(s) [ 247.395522][ T1336] usb 1-1: USB disconnect, device number 29 [ 247.587989][T14433] netlink: 'syz.2.4552': attribute type 8 has an invalid length. [ 247.622685][ T4229] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 248.062881][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 248.162944][ T1336] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 248.243055][ T4229] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 248.256359][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.265031][T10358] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 248.282805][ T4229] usb 4-1: Product: syz [ 248.287249][ T4229] usb 4-1: Manufacturer: syz [ 248.291847][ T4229] usb 4-1: SerialNumber: syz [ 248.313153][ T4229] usb 4-1: config 0 descriptor?? [ 248.342880][T14419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 248.349957][T14419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 248.373689][ T4229] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 248.486634][T14491] netlink: 'syz.2.4580': attribute type 8 has an invalid length. [ 248.522860][ T1336] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 248.531285][ T1336] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 248.542357][ T1336] usb 5-1: config 220 has no interface number 2 [ 248.549260][ T1336] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 248.564751][ T1336] usb 5-1: config 220 interface 0 has no altsetting 0 [ 248.571650][ T1336] usb 5-1: config 220 interface 76 has no altsetting 0 [ 248.583470][ T1336] usb 5-1: config 220 interface 1 has no altsetting 0 [ 248.592342][ T7519] usb 4-1: USB disconnect, device number 21 [ 248.718792][T10358] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.742822][ T1336] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 248.752206][ T1336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.763530][ T1336] usb 5-1: Product: syz [ 248.767727][ T1336] usb 5-1: Manufacturer: syz [ 248.772414][ T1336] usb 5-1: SerialNumber: syz [ 248.813136][T10358] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.823935][T10358] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 248.835917][T10358] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.039037][T10358] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 249.052657][T10358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.071042][T10358] usb 1-1: Product: syz [ 249.078871][T10358] usb 1-1: Manufacturer: syz [ 249.092335][T10358] usb 1-1: SerialNumber: syz [ 249.133023][ T1336] usb 5-1: selecting invalid altsetting 0 [ 249.151048][ T1336] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 249.177516][ T1336] usb 5-1: No valid video chain found. [ 249.230141][T14523] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 249.262344][T14523] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 249.279025][ T1336] usb 5-1: selecting invalid altsetting 0 [ 249.295068][ T1336] usbtest: probe of 5-1:220.1 failed with error -22 [ 249.316976][T14523] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 249.331823][ T1336] usb 5-1: USB disconnect, device number 15 [ 249.434903][T10358] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 249.494660][T10358] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 249.624966][T10358] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 249.640936][T14552] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 249.674926][T10358] usb 1-1: USB disconnect, device number 30 [ 249.831259][T14563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4614'. [ 249.934793][ T5166] udevd[5166]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.988251][T14574] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4619'. [ 250.042377][T14580] netlink: 'syz.2.4622': attribute type 32 has an invalid length. [ 250.107603][T14582] netlink: 'syz.3.4623': attribute type 21 has an invalid length. [ 250.108135][T14577] loop4: detected capacity change from 0 to 2048 [ 250.217335][T14577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.314718][T14599] netlink: 'syz.0.4631': attribute type 1 has an invalid length. [ 250.347922][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4631'. [ 250.432974][T14608] netlink: 'syz.4.4634': attribute type 21 has an invalid length. [ 250.518335][T14611] loop0: detected capacity change from 0 to 256 [ 250.639671][T14611] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.662843][T14611] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 250.687800][T14627] loop2: detected capacity change from 0 to 1764 [ 250.716306][T14631] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.722404][T14611] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 250.792140][T14627] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 250.874889][T14639] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4651'. [ 250.908278][T14637] loop4: detected capacity change from 0 to 2048 [ 250.955906][T14647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4656'. [ 250.987887][T14637] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.206705][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4664'. [ 251.546281][T14693] loop4: detected capacity change from 0 to 2048 [ 251.567872][T14685] loop3: detected capacity change from 0 to 8192 [ 251.607567][T14693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.616898][T14685] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 251.636897][T14685] REISERFS (device loop3): using ordered data mode [ 251.718353][T14685] reiserfs: using flush barriers [ 251.832055][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4682'. [ 251.832951][T14685] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.857723][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4682'. [ 251.988736][T14685] REISERFS (device loop3): checking transaction log (loop3) [ 252.066710][T14685] REISERFS (device loop3): Using r5 hash to sort names [ 252.093144][T14685] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 252.171498][T14685] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 252.310204][T14723] loop5: detected capacity change from 0 to 256 [ 252.394509][T14723] exfat: Deprecated parameter 'namecase' [ 252.409476][T14723] exfat: Deprecated parameter 'namecase' [ 252.465739][T14723] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 252.989180][T14760] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4710'. [ 253.554480][T14795] loop2: detected capacity change from 0 to 1024 [ 253.668088][T14803] netlink: 'syz.0.4731': attribute type 3 has an invalid length. [ 253.703034][ T4286] hfsplus: b-tree write err: -5, ino 25 [ 253.708790][ T4286] hfsplus: b-tree write err: -5, ino 4 [ 253.732759][ T4286] hfsplus: b-tree write err: -5, ino 2 [ 253.760365][ T4286] hfsplus: b-tree write err: -5, ino 26 [ 253.777389][T14805] loop4: detected capacity change from 0 to 1024 [ 253.810103][T14811] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4732'. [ 253.829330][T14805] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 253.895094][T14815] netlink: 'syz.3.4737': attribute type 27 has an invalid length. [ 253.909044][T14814] loop0: detected capacity change from 0 to 1024 [ 253.920189][T14815] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 253.947228][T14805] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 254.051753][T14814] hfsplus: invalid xattr key length: 0 [ 254.062673][T14821] tmpfs: Bad value for 'mpol' [ 254.694993][T14870] loop0: detected capacity change from 0 to 512 [ 254.756570][T14872] netlink: 'syz.2.4765': attribute type 10 has an invalid length. [ 254.832748][ T1336] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 254.854137][T14870] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.901808][T14883] __nla_validate_parse: 3 callbacks suppressed [ 254.901825][T14883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4769'. [ 254.917298][T14883] openvswitch: netlink: Missing key (keys=40, expected=100) [ 255.154632][T14891] netlink: 'syz.3.4775': attribute type 2 has an invalid length. [ 255.179263][T14891] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4775'. [ 255.216144][T14897] loop0: detected capacity change from 0 to 256 [ 255.232999][ T1336] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.262190][ T1336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.272481][ T1336] usb 5-1: config 0 descriptor?? [ 255.315422][ T1336] cp210x 5-1:0.0: cp210x converter detected [ 255.344547][T14905] loop2: detected capacity change from 0 to 512 [ 255.386398][T14905] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 255.410197][T14905] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 255.549528][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4783'. [ 255.596351][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.602714][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.620598][T14921] loop0: detected capacity change from 0 to 256 [ 255.632862][ T7519] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 255.716966][T14927] loop2: detected capacity change from 0 to 736 [ 255.772746][ T1336] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 255.780410][ T1336] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 255.837700][ T1336] usb 5-1: cp210x converter now attached to ttyUSB0 [ 255.872012][ T1336] usb 5-1: USB disconnect, device number 16 [ 255.878084][ T7519] usb 4-1: Using ep0 maxpacket: 32 [ 255.913471][ T1336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.944352][ T1336] cp210x 5-1:0.0: device disconnected [ 255.997289][T14937] loop5: detected capacity change from 0 to 16 [ 256.007912][ T7519] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 256.042120][ T7519] usb 4-1: config 0 has no interface number 0 [ 256.056070][ T7519] usb 4-1: config 0 interface 167 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 256.069910][ T7519] usb 4-1: config 0 interface 167 has no altsetting 0 [ 256.118857][T14937] erofs: (device loop5): mounted with root inode @ nid 36. [ 256.128876][ T8114] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 256.154143][T14941] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 256.232748][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.252870][ T7519] usb 4-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=db.cd [ 256.267590][ T7519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.287396][ T7519] usb 4-1: Product: syz [ 256.312696][ T7519] usb 4-1: Manufacturer: syz [ 256.331279][ T7519] usb 4-1: SerialNumber: syz [ 256.370801][ T7519] usb 4-1: config 0 descriptor?? [ 256.382662][ T8114] usb 1-1: Using ep0 maxpacket: 8 [ 256.413119][T14907] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 256.474727][T14955] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4804'. [ 256.498044][T14955] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 256.503115][ T8114] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 256.531433][ T8114] usb 1-1: config 127 has no interface number 1 [ 256.543672][ T8114] usb 1-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.563039][ T8114] usb 1-1: config 127 interface 171 has no altsetting 0 [ 256.570027][ T8114] usb 1-1: config 127 interface 0 has no altsetting 0 [ 256.642024][T14968] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4809'. [ 256.703745][ T7519] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 256.756564][T14966] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 256.776186][ T7519] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 256.792910][ T8114] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 256.808804][ T8114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.825211][ T8114] usb 1-1: Product: syz [ 256.832944][ T7519] dib0700: firmware download failed at 7 with -71 [ 256.839846][ T8114] usb 1-1: Manufacturer: syz [ 256.854120][ T7519] usb 4-1: USB disconnect, device number 22 [ 256.870328][ T8114] usb 1-1: SerialNumber: syz [ 256.909579][T14966] ntfs3: loop2: Failed to load $Extend. [ 257.178426][T14987] SET target dimension over the limit! [ 257.204140][ T8114] xr_serial 1-1:127.171: xr_serial converter detected [ 257.233372][ T8114] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 257.253190][ T8114] xr_serial: probe of ttyUSB0 failed with error -71 [ 257.319329][ T8114] usb 1-1: USB disconnect, device number 31 [ 257.353985][ T8114] xr_serial 1-1:127.171: device disconnected [ 257.383375][T15002] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.652746][ T21] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 257.687543][T15016] set_capacity_and_notify: 2 callbacks suppressed [ 257.687559][T15016] loop2: detected capacity change from 0 to 4096 [ 257.769310][T15016] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 257.811238][T15016] ntfs3: loop2: mft corrupted [ 257.826710][T15016] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 257.840664][T15016] ntfs3: loop2: Failed to load $BadClus. [ 257.845393][T15027] netlink: 'syz.3.4837': attribute type 3 has an invalid length. [ 257.902696][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4837'. [ 258.083057][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.098645][ T21] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.110713][T15033] loop0: detected capacity change from 0 to 4096 [ 258.117191][ T21] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 258.176632][T15033] __ntfs_error: 1 callbacks suppressed [ 258.176652][T15033] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 258.220280][T15033] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 258.257940][T15033] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 258.285912][T15033] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 258.313054][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.322135][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.342772][T15033] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 258.355937][ T21] usb 5-1: Product: syz [ 258.362090][ T21] usb 5-1: Manufacturer: syz [ 258.382892][ T21] usb 5-1: SerialNumber: syz [ 258.390742][T15033] ntfs: volume version 3.1. [ 258.410959][T15033] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 258.441415][T15033] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 258.481355][T15033] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 258.519460][T15033] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 258.537991][T15033] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 258.738220][ T21] usb 5-1: 0:2 : does not exist [ 258.779013][T15065] loop2: detected capacity change from 0 to 1024 [ 258.809381][T15067] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4857'. [ 258.834908][T15065] EXT4-fs (loop2): Ignoring removed orlov option [ 258.847404][ T21] usb 5-1: USB disconnect, device number 17 [ 258.862209][T15065] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 258.915679][T15065] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 258.937223][T15065] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 258.937223][T15065] [ 258.948834][T15065] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 258.961733][T15065] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,auto_da_alloc=0x00000000000001ff,errors=remount-ro,user_xattr,. Quota mode: writeback. [ 258.994221][T15065] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 258.994221][T15065] [ 259.134588][T15064] loop0: detected capacity change from 0 to 32768 [ 259.174319][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.263544][T15064] XFS (loop0): Mounting V5 Filesystem [ 259.369109][T15094] loop2: detected capacity change from 0 to 16 [ 259.370873][T15064] XFS (loop0): Ending clean mount [ 259.386709][T15094] erofs: (device loop2): mounted with root inode @ nid 36. [ 259.419920][T15064] XFS (loop0): Quotacheck needed: Please wait. [ 259.623672][T15064] XFS (loop0): Quotacheck: Done. [ 259.720218][T15112] netlink: 'syz.4.4874': attribute type 10 has an invalid length. [ 259.797243][T15112] device veth1_macvtap left promiscuous mode [ 259.899348][T15118] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 259.915404][T15118] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 259.950654][ T4185] XFS (loop0): Unmounting Filesystem [ 260.012663][T15121] loop2: detected capacity change from 0 to 64 [ 260.139560][T15128] openvswitch: netlink: Actions may not be safe on all matching packets [ 260.261972][T15132] loop5: detected capacity change from 0 to 8192 [ 260.544176][T15121] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 260.571136][T15132] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.592762][T15121] MINIX-fs: bad superblock [ 260.709025][T15146] tmpfs: Bad value for 'mpol' [ 261.470228][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4911'. [ 261.500566][T15121] loop2: detected capacity change from 0 to 32768 [ 261.705803][T15121] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.4880 (15121) [ 261.728685][T15201] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.4919'. [ 261.771563][T15121] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 261.794121][T15121] BTRFS info (device loop2): setting nodatacow, compression disabled [ 261.824796][T15121] BTRFS info (device loop2): force clearing of disk cache [ 261.828980][T15196] loop3: detected capacity change from 0 to 4096 [ 261.864322][T15121] BTRFS info (device loop2): turning off barriers [ 261.893232][T15196] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 261.919233][T15121] BTRFS info (device loop2): use no compression [ 261.940124][T15121] BTRFS info (device loop2): disabling free space tree [ 261.982086][T15121] BTRFS info (device loop2): enabling ssd optimizations [ 262.041309][T15121] BTRFS info (device loop2): using spread ssd allocation scheme [ 262.088791][T15121] BTRFS info (device loop2): not using ssd optimizations [ 262.102259][T15196] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 262.119518][T15121] BTRFS info (device loop2): not using spread ssd allocation scheme [ 262.174622][T15121] BTRFS info (device loop2): has skinny extents [ 262.472099][T15204] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 262.548526][T15121] BTRFS info (device loop2): clearing free space tree [ 262.569278][T15121] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.620129][T15121] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.675158][T15121] BTRFS info (device loop2): checking UUID tree [ 263.182756][ T4229] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 263.222055][T15210] loop4: detected capacity change from 0 to 32768 [ 263.472671][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 263.599063][T15210] XFS (loop4): Mounting V5 Filesystem [ 263.612959][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.691667][T15210] XFS (loop4): Ending clean mount [ 263.709725][T15210] XFS (loop4): Quotacheck needed: Please wait. [ 263.784623][T15210] XFS (loop4): Quotacheck: Done. [ 263.832992][ T4229] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 263.863001][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.902154][ T4229] usb 4-1: Product: syz [ 263.907443][ T4229] usb 4-1: Manufacturer: syz [ 263.932952][ T4229] usb 4-1: SerialNumber: syz [ 263.944602][ T4198] XFS (loop4): Unmounting Filesystem [ 263.966447][ T4229] usb 4-1: config 0 descriptor?? [ 264.024386][ T4229] usb 4-1: bad CDC descriptors [ 264.029640][ T4229] usb 4-1: unsupported MDLM descriptors [ 264.250358][T15304] loop0: detected capacity change from 0 to 4096 [ 264.250705][ T4229] usb 4-1: USB disconnect, device number 23 [ 264.292079][T15304] __ntfs_warning: 6 callbacks suppressed [ 264.292095][T15304] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 264.470692][T15304] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 264.520388][T15304] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 264.549861][T15304] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 264.614877][T15304] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 264.691195][T15304] ntfs: volume version 3.1. [ 264.718579][T15304] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 264.790516][T15304] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 264.867267][T15306] loop5: detected capacity change from 0 to 32768 [ 264.870670][T15304] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 264.946850][T15306] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.4945 (15306) [ 265.046486][T15306] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 265.053963][T15304] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 265.076049][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.091199][T15306] BTRFS info (device loop5): enabling ssd optimizations [ 265.133688][T15306] BTRFS info (device loop5): not using ssd optimizations [ 265.150168][T15304] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 265.163953][T15306] BTRFS info (device loop5): turning off barriers [ 265.170415][T15306] BTRFS info (device loop5): using free space tree [ 265.252654][T15306] BTRFS info (device loop5): has skinny extents [ 265.555125][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4966'. [ 265.645131][T15395] netlink: 'syz.4.4971': attribute type 12 has an invalid length. [ 265.794128][T15409] netlink: 'syz.0.4972': attribute type 1 has an invalid length. [ 265.938705][T15306] BTRFS warning (device loop5): can't clear the mixed_groups,compress_lzo,big_metadata,extended_iref,raid56,skinny_metadata,no_holes,raid1c34,incompat:12,incompat:13,incompat:15,incompat:16,incompat:18,incompat:23,incompat:25,incompat:30,incompat:31,incompat:32,incompat:33,incompat:36,incompat:37,incompat:39,incompat:41,incompat:43,incompat:46,incompat:48,incompat:49,incompat:50,incompat:54,incompat:60,incompat:62,incompat:63 feature bits while mounted [ 266.138902][T15431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.498504][T15446] loop4: detected capacity change from 0 to 1024 [ 266.598543][T15446] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 266.648694][T15446] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #32: comm syz.4.4990: iget: special inode unallocated [ 266.725889][T15446] EXT4-fs (loop4): no journal found [ 266.742333][T15446] EXT4-fs (loop4): can't get journal size [ 266.797323][T15446] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,jqfmt=vfsv0,nobarrier,. Quota mode: none. [ 267.378614][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5009'. [ 267.439953][T15501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.645327][T15604] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.685077][T15604] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 268.941011][T15618] netlink: 'syz.5.5060': attribute type 2 has an invalid length. [ 269.046512][T15579] loop0: detected capacity change from 0 to 32768 [ 269.066370][T15615] loop3: detected capacity change from 0 to 4096 [ 269.116457][T15579] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.5041 (15579) [ 269.148728][T15615] ntfs: volume version 3.1. [ 269.212097][T15579] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 269.269451][T15579] BTRFS info (device loop0): using free space tree [ 269.293872][T15579] BTRFS info (device loop0): has skinny extents [ 269.635527][T15643] loop3: detected capacity change from 0 to 4096 [ 269.680749][T15579] BTRFS info (device loop0): enabling ssd optimizations [ 269.734020][T15643] __ntfs_warning: 10 callbacks suppressed [ 269.734037][T15643] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 269.889456][T15643] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 269.980959][T15643] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 270.143948][T15643] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 270.182689][T15643] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 270.262842][T15643] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 270.282688][T15643] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 270.346091][T15643] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 270.356025][T15643] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 270.393221][T15685] loop4: detected capacity change from 0 to 256 [ 270.417783][T15643] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 270.433447][T15685] exfat: Deprecated parameter 'utf8' [ 270.443574][T15643] ntfs: volume version 3.1. [ 270.557703][T15685] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 271.022735][ T4228] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 271.054657][T15717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5100'. [ 271.074142][T15718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5101'. [ 271.114436][T15717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5100'. [ 271.217619][T15724] loop0: detected capacity change from 0 to 512 [ 271.320392][T15732] loop3: detected capacity change from 0 to 1764 [ 271.420797][T15732] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 271.442948][ T4228] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 271.457864][T15724] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.476741][ T4228] usb 3-1: config 0 has no interface number 0 [ 271.512361][ T4228] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 271.562975][T15724] EXT4-fs error (device loop0): ext4_xattr_block_find:1855: inode #15: comm syz.0.5104: corrupted xattr block 33 [ 271.591449][T15751] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 271.615266][ T4228] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 271.688826][ T4228] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 271.717624][ T4228] usb 3-1: config 0 interface 11 has no altsetting 0 [ 271.741980][ T4228] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 271.756765][T15758] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5121'. [ 271.772176][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.799097][T15758] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5121'. [ 271.809730][ T4228] usb 3-1: config 0 descriptor?? [ 271.838964][T15700] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.876496][T15700] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.923802][ T4228] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 271.945251][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 271.974730][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 271.992834][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 272.030660][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 272.049964][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 272.091771][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 272.108456][ T4228] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 272.141174][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 272.165070][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 272.192745][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 272.220854][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 272.239070][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 272.269012][ T4228] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 272.284980][T15789] loop3: detected capacity change from 0 to 1024 [ 272.306889][ T4228] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 272.335791][ T4228] usb 3-1: USB disconnect, device number 28 [ 272.410625][ T4228] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 272.449540][ T4473] hfsplus: b-tree write err: -5, ino 25 [ 272.458309][ T4473] hfsplus: b-tree write err: -5, ino 4 [ 272.476517][ T4473] hfsplus: b-tree write err: -5, ino 2 [ 272.505817][ T4228] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 272.516762][ T4228] keyspan 3-1:0.11: device disconnected [ 272.561120][T15803] loop3: detected capacity change from 0 to 64 [ 272.629286][T15813] loop0: detected capacity change from 0 to 256 [ 272.756036][T15813] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 273.244097][T15855] netlink: 'syz.4.5164': attribute type 3 has an invalid length. [ 273.370204][T15871] loop3: detected capacity change from 0 to 256 [ 273.503198][T15871] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 273.736730][T15868] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 273.811381][T15868] ntfs3: loop0: Failed to load $Extend. [ 273.818669][T15903] kAFS: Can only specify source 'none' with -o dyn [ 273.823224][T15896] EXT4-fs (loop3): Test dummy encryption mode enabled [ 273.868482][T15896] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 273.908509][T15896] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 273.951670][T15896] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,min_batch_time=0x000000000000001a,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 274.121718][T15918] Cannot find map_set index 135 as target [ 274.349355][T15941] set_capacity_and_notify: 2 callbacks suppressed [ 274.349372][T15941] loop3: detected capacity change from 0 to 2048 [ 274.469696][T15941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.507365][T15957] loop2: detected capacity change from 0 to 64 [ 274.524763][T15952] loop0: detected capacity change from 0 to 2048 [ 274.608619][T15952] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.624774][T15965] loop4: detected capacity change from 0 to 256 [ 274.684804][T15965] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 274.846371][T15975] kAFS: unable to lookup cell '/,' [ 274.908738][T15972] loop2: detected capacity change from 0 to 4096 [ 274.959454][T15976] loop5: detected capacity change from 0 to 4096 [ 274.973853][T15972] __ntfs_error: 12 callbacks suppressed [ 274.973871][T15972] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 275.003886][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5224'. [ 275.054484][T15972] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 275.054606][T15976] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 275.118895][T15972] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 275.168284][T15972] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 275.213330][T15972] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 275.232724][T15996] xt_TCPMSS: Only works on TCP SYN packets [ 275.261462][T15972] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 275.306612][T15972] ntfs: volume version 3.1. [ 275.318753][T15972] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 275.350173][T15972] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 275.412180][T15972] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 275.449538][T16011] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5236'. [ 275.481168][T15972] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 275.499449][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5236'. [ 275.800480][T16036] netlink: 'syz.0.5250': attribute type 5 has an invalid length. [ 275.812815][T15281] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 276.032799][T10354] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 276.182791][T15281] usb 4-1: config 0 has no interfaces? [ 276.199265][T16059] openvswitch: netlink: Missing key (keys=40, expected=80) [ 276.312784][T10354] usb 5-1: Using ep0 maxpacket: 16 [ 276.343030][T15281] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 276.376286][T15281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.415632][T15281] usb 4-1: Product: syz [ 276.419840][T15281] usb 4-1: Manufacturer: syz [ 276.435569][T15281] usb 4-1: SerialNumber: syz [ 276.470549][T15281] r8152-cfgselector 4-1: config 0 descriptor?? [ 276.513020][T10354] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.612825][T10354] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 276.620560][T16072] netlink: 'syz.0.5266': attribute type 21 has an invalid length. [ 276.621022][T10354] usb 5-1: config 1 has no interface number 0 [ 276.631048][T16072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5266'. [ 276.654481][T16072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5266'. [ 276.773868][T15281] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 276.863017][T10354] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 276.872102][T10354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.872256][T16075] loop2: detected capacity change from 0 to 2048 [ 276.935317][T10354] usb 5-1: Product: syz [ 276.939528][T10354] usb 5-1: Manufacturer: syz [ 276.962182][T16077] netlink: 'syz.0.5269': attribute type 6 has an invalid length. [ 276.962439][T16075] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 276.977169][T10354] usb 5-1: SerialNumber: syz [ 276.983282][T15281] usb 4-1: USB disconnect, device number 24 [ 277.084854][T16075] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 277.101101][T16075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.159645][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5270'. [ 277.259384][T16075] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 9 [ 277.334090][T16081] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 277.443920][T10354] usb 5-1: USB disconnect, device number 18 [ 277.479070][T16087] xt_TCPMSS: Only works on TCP SYN packets [ 277.734268][T16102] sctp: [Deprecated]: syz.0.5281 (pid 16102) Use of int in maxseg socket option. [ 277.734268][T16102] Use struct sctp_assoc_value instead [ 277.846025][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5284'. [ 277.850060][T16111] netlink: zone id is out of range [ 277.866841][T16111] netlink: zone id is out of range [ 277.899802][T16107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.941811][T16109] loop0: detected capacity change from 0 to 2048 [ 278.002121][T16109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.302050][T16136] loop4: detected capacity change from 0 to 8 [ 278.308606][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 278.360499][T16136] SQUASHFS error: lzo decompression failed, data probably corrupt [ 278.382668][T16136] SQUASHFS error: Failed to read block 0x91: -5 [ 278.388956][T16136] SQUASHFS error: Unable to read metadata cache entry [8f] [ 278.448345][T16136] SQUASHFS error: Unable to read inode 0x11f [ 278.562253][T16146] loop0: detected capacity change from 0 to 64 [ 278.757306][T16158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5310'. [ 278.970402][ T8122] kernel write not supported for file /sg0 (pid: 8122 comm: kworker/0:19) [ 278.984208][T16175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5317'. [ 279.374659][T16200] set_capacity_and_notify: 1 callbacks suppressed [ 279.374675][T16200] loop4: detected capacity change from 0 to 256 [ 279.498088][T16211] loop0: detected capacity change from 0 to 22 [ 279.555952][T16200] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 279.573251][T16211] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 279.593099][T16211] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 280.101463][T16250] loop2: detected capacity change from 0 to 64 [ 280.415574][T16274] loop4: detected capacity change from 0 to 256 [ 280.490509][T16277] loop3: detected capacity change from 0 to 2048 [ 280.500912][T16274] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 280.513794][T16282] loop0: detected capacity change from 0 to 512 [ 280.532953][T16277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.560440][T16282] EXT4-fs (loop0): inline encryption not supported [ 280.578851][T16282] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 280.641176][T16282] EXT4-fs (loop0): 1 truncate cleaned up [ 280.661085][T16282] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 281.174271][T16312] __nla_validate_parse: 2 callbacks suppressed [ 281.174289][T16312] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5380'. [ 281.354601][T16324] loop3: detected capacity change from 0 to 64 [ 281.378693][T16324] attempt to access beyond end of device [ 281.378693][T16324] loop3: rw=0, want=550, limit=64 [ 281.392834][T16324] Buffer I/O error on dev loop3, logical block 274, async page read [ 281.408372][T16324] attempt to access beyond end of device [ 281.408372][T16324] loop3: rw=0, want=550, limit=64 [ 281.421733][T16324] Buffer I/O error on dev loop3, logical block 274, async page read [ 281.440595][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 281.440609][ T26] audit: type=1800 audit(281.400:17): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5386" name="file3" dev="loop3" ino=6 res=0 errno=0 [ 281.467321][T16326] Trying to free block not in datazone [ 281.472853][T16326] Trying to free block not in datazone [ 281.478404][T16326] Trying to free block not in datazone [ 281.484001][T16326] Trying to free block not in datazone [ 281.489575][T16326] Trying to free block not in datazone [ 281.502179][T16326] Trying to free block not in datazone [ 281.507881][T16326] Trying to free block not in datazone [ 281.513799][T16326] Trying to free block not in datazone [ 281.519347][T16326] Trying to free block not in datazone [ 281.526255][T16326] Trying to free block not in datazone [ 281.531810][T16326] Trying to free block not in datazone [ 281.537512][T10354] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 281.545268][T16326] Trying to free block not in datazone [ 281.550908][T16326] minix_free_block (loop3:6): bit already cleared [ 281.558351][T16326] Trying to free block not in datazone [ 281.564158][T16326] Trying to free block not in datazone [ 281.569745][T16326] Trying to free block not in datazone [ 281.578366][T16326] minix_free_block (loop3:7): bit already cleared [ 281.585767][T16326] Trying to free block not in datazone [ 281.591314][T16326] Trying to free block not in datazone [ 281.597046][T16326] Trying to free block not in datazone [ 281.602607][T16326] Trying to free block not in datazone [ 281.608220][T16326] Trying to free block not in datazone [ 281.613856][T16326] minix_free_block (loop3:6): bit already cleared [ 281.812520][T16337] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5391'. [ 281.884191][T16340] loop2: detected capacity change from 0 to 1024 [ 281.977967][T16340] hfsplus: bad catalog entry type [ 282.056113][ T4473] hfsplus: b-tree write err: -5, ino 25 [ 282.065279][ T4473] hfsplus: b-tree write err: -5, ino 4 [ 282.072420][ T4473] hfsplus: b-tree write err: -5, ino 2 [ 282.114617][T10354] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 282.139414][T10354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.151647][T16353] loop2: detected capacity change from 0 to 256 [ 282.162255][T10354] usb 1-1: Product: syz [ 282.166672][T10354] usb 1-1: Manufacturer: syz [ 282.171320][T10354] usb 1-1: SerialNumber: syz [ 282.191663][T10354] usb 1-1: config 0 descriptor?? [ 282.211383][T16353] FAT-fs (loop2): Directory bread(block 64) failed [ 282.218313][T16353] FAT-fs (loop2): Directory bread(block 65) failed [ 282.225765][T16353] FAT-fs (loop2): Directory bread(block 66) failed [ 282.233199][T16353] FAT-fs (loop2): Directory bread(block 67) failed [ 282.240007][T16353] FAT-fs (loop2): Directory bread(block 68) failed [ 282.242475][T10354] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 282.254072][T16353] FAT-fs (loop2): Directory bread(block 69) failed [ 282.260896][T16353] FAT-fs (loop2): Directory bread(block 70) failed [ 282.267730][T16353] FAT-fs (loop2): Directory bread(block 71) failed [ 282.274477][T16353] FAT-fs (loop2): Directory bread(block 72) failed [ 282.281014][T16353] FAT-fs (loop2): Directory bread(block 73) failed [ 282.627328][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5406'. [ 282.873088][T10354] gspca_stk1135: reg_w 0x3 err -71 [ 282.885731][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 282.900398][T10354] gspca_stk1135: Sensor write failed [ 282.904410][T16387] loop2: detected capacity change from 0 to 128 [ 282.917164][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 282.934051][T16389] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 282.952784][T10354] gspca_stk1135: Sensor write failed [ 282.973155][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 282.978986][T16387] attempt to access beyond end of device [ 282.978986][T16387] loop2: rw=0, want=6491538, limit=128 [ 282.985502][T10354] gspca_stk1135: Sensor read failed [ 283.027061][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 283.037094][T16387] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 283.042944][T10354] gspca_stk1135: Sensor read failed [ 283.068621][T16387] ================================================================== [ 283.077494][T16387] BUG: KASAN: use-after-free in sysv_new_inode+0x1130/0x12c0 [ 283.077948][T10354] gspca_stk1135: Detected sensor type unknown (0x0) [ 283.084889][T16387] Read of size 2 at addr ffff8880509121ce by task syz.2.5414/16387 [ 283.084957][T16387] [ 283.084964][T16387] CPU: 0 PID: 16387 Comm: syz.2.5414 Not tainted syzkaller #0 [ 283.092303][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 283.099554][T16387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.099571][T16387] Call Trace: [ 283.099580][T16387] [ 283.099589][T16387] dump_stack_lvl+0x188/0x250 [ 283.099616][T16387] ? show_regs_print_info+0x20/0x20 [ 283.127985][T10354] gspca_stk1135: Sensor read failed [ 283.129032][T16387] ? load_image+0x400/0x400 [ 283.131979][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 283.136627][T16387] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 283.136653][T16387] ? mutex_lock_io_nested+0x60/0x60 [ 283.136676][T16387] print_address_description+0x60/0x2d0 [ 283.170860][T10354] gspca_stk1135: Sensor read failed [ 283.174047][T16387] ? sysv_new_inode+0x1130/0x12c0 [ 283.174073][T16387] kasan_report+0xdf/0x130 [ 283.174097][T16387] ? sysv_new_inode+0x1130/0x12c0 [ 283.174119][T16387] sysv_new_inode+0x1130/0x12c0 [ 283.198582][T16387] ? from_kgid+0x169/0x690 [ 283.199965][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 283.203010][T16387] ? make_kgid+0x660/0x660 [ 283.203032][T16387] ? apparmor_capable+0x12c/0x190 [ 283.203055][T16387] ? sysv_free_inode+0x7e0/0x7e0 [ 283.209634][T10354] gspca_stk1135: Sensor write failed [ 283.213774][T16387] ? generic_permission+0x292/0x510 [ 283.213805][T16387] sysv_mknod+0x4a/0xd0 [ 283.213824][T16387] vfs_mknod+0x424/0x4c0 [ 283.213851][T16387] do_mknodat+0x453/0x630 [ 283.213879][T16387] ? __phys_addr_symbol+0x2b/0x70 [ 283.213901][T16387] ? may_open+0x400/0x400 [ 283.213925][T16387] ? getname_flags+0x1fe/0x500 [ 283.213948][T16387] __x64_sys_mknodat+0xa5/0xc0 [ 283.213972][T16387] do_syscall_64+0x4c/0xa0 [ 283.213995][T16387] ? clear_bhb_loop+0x30/0x80 [ 283.214016][T16387] ? clear_bhb_loop+0x30/0x80 [ 283.214037][T16387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.214057][T16387] RIP: 0033:0x7fcdd84b6799 [ 283.223620][T10354] gspca_stk1135: serial bus timeout: status=0x00 [ 283.223976][T16387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.248517][T10354] gspca_stk1135: Sensor write failed [ 283.252213][T16387] RSP: 002b:00007fcdd6710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 283.252239][T16387] RAX: ffffffffffffffda RBX: 00007fcdd872ffa0 RCX: 00007fcdd84b6799 [ 283.252254][T16387] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 283.272692][T10354] stk1135: probe of 1-1:0.0 failed with error -71 [ 283.275161][T16387] RBP: 00007fcdd854cbd9 R08: 0000000000000000 R09: 0000000000000000 [ 283.319793][T10354] usb 1-1: USB disconnect, device number 32 [ 283.321290][T16387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.351307][T16403] fuse: Bad value for 'fd' [ 283.352042][T16387] R13: 00007fcdd8730038 R14: 00007fcdd872ffa0 R15: 00007ffcc47aee48 [ 283.386235][T16387] [ 283.389263][T16387] [ 283.391586][T16387] The buggy address belongs to the page: [ 283.397226][T16387] page:ffffea0001424480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x50912 [ 283.407397][T16387] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 283.414583][T16387] raw: 00fff00000000000 ffffea000141c208 ffffea0001c93448 0000000000000000 [ 283.423184][T16387] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 283.431776][T16387] page dumped because: kasan: bad access detected [ 283.438284][T16387] page_owner tracks the page as freed [ 283.443660][T16387] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4186, ts 282379595242, free_ts 282620998685 [ 283.458440][T16387] get_page_from_freelist+0x1bbd/0x1ca0 [ 283.464007][T16387] __alloc_pages+0x1ee/0x480 [ 283.468622][T16387] alloc_pages_vma+0x393/0x7c0 [ 283.473406][T16387] wp_page_copy+0x24b/0x2050 [ 283.478017][T16387] handle_mm_fault+0x1f06/0x4410 [ 283.482975][T16387] do_user_addr_fault+0x489/0xc80 [ 283.488018][T16387] exc_page_fault+0x60/0x100 [ 283.492626][T16387] asm_exc_page_fault+0x22/0x30 [ 283.497586][T16387] page last free stack trace: [ 283.502264][T16387] free_unref_page_prepare+0x637/0x6c0 [ 283.507739][T16387] free_unref_page_list+0x119/0x820 [ 283.512963][T16387] release_pages+0x186c/0x1be0 [ 283.517738][T16387] tlb_finish_mmu+0x176/0x300 [ 283.524790][T16387] exit_mmap+0x3d0/0x640 [ 283.524822][T16387] __mmput+0x115/0x3b0 [ 283.524839][T16387] exit_mm+0x588/0x6e0 [ 283.524854][T16387] do_exit+0x5a9/0x20c0 [ 283.541630][T16387] __x64_sys_exit+0x3c/0x40 [ 283.546143][T16387] do_syscall_64+0x4c/0xa0 [ 283.550578][T16387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.556546][T16387] [ 283.558879][T16387] Memory state around the buggy address: [ 283.564514][T16387] ffff888050912080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.572597][T16387] ffff888050912100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.580665][T16387] >ffff888050912180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.588993][T16387] ^ [ 283.595424][T16387] ffff888050912200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.603562][T16387] ffff888050912280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.611658][T16387] ================================================================== [ 283.619725][T16387] Disabling lock debugging due to kernel taint [ 283.625931][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.644742][T16411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 283.656234][T16387] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 283.663960][T16387] CPU: 0 PID: 16387 Comm: syz.2.5414 Tainted: G B syzkaller #0 [ 283.672819][T16387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.682959][T16387] Call Trace: [ 283.686238][T16387] [ 283.689170][T16387] dump_stack_lvl+0x188/0x250 [ 283.693940][T16387] ? show_regs_print_info+0x20/0x20 [ 283.699147][T16387] ? load_image+0x400/0x400 [ 283.703662][T16387] panic+0x2e5/0x810 [ 283.707577][T16387] ? bpf_jit_dump+0xd0/0xd0 [ 283.712089][T16387] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 283.718078][T16387] ? _raw_spin_unlock+0x40/0x40 [ 283.722949][T16387] ? sysv_new_inode+0x1130/0x12c0 [ 283.727988][T16387] check_panic_on_warn+0x80/0xa0 [ 283.732944][T16387] ? sysv_new_inode+0x1130/0x12c0 [ 283.737974][T16387] end_report+0x6d/0xf0 [ 283.742138][T16387] kasan_report+0x102/0x130 [ 283.746652][T16387] ? sysv_new_inode+0x1130/0x12c0 [ 283.751680][T16387] sysv_new_inode+0x1130/0x12c0 [ 283.756541][T16387] ? from_kgid+0x169/0x690 [ 283.760971][T16387] ? make_kgid+0x660/0x660 [ 283.765388][T16387] ? apparmor_capable+0x12c/0x190 [ 283.770418][T16387] ? sysv_free_inode+0x7e0/0x7e0 [ 283.775372][T16387] ? generic_permission+0x292/0x510 [ 283.780581][T16387] sysv_mknod+0x4a/0xd0 [ 283.784744][T16387] vfs_mknod+0x424/0x4c0 [ 283.788989][T16387] do_mknodat+0x453/0x630 [ 283.793333][T16387] ? __phys_addr_symbol+0x2b/0x70 [ 283.798356][T16387] ? may_open+0x400/0x400 [ 283.802685][T16387] ? getname_flags+0x1fe/0x500 [ 283.807437][T16387] __x64_sys_mknodat+0xa5/0xc0 [ 283.812186][T16387] do_syscall_64+0x4c/0xa0 [ 283.816587][T16387] ? clear_bhb_loop+0x30/0x80 [ 283.821246][T16387] ? clear_bhb_loop+0x30/0x80 [ 283.825908][T16387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.831787][T16387] RIP: 0033:0x7fcdd84b6799 [ 283.836187][T16387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.856136][T16387] RSP: 002b:00007fcdd6710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 283.864619][T16387] RAX: ffffffffffffffda RBX: 00007fcdd872ffa0 RCX: 00007fcdd84b6799 [ 283.872572][T16387] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 283.880525][T16387] RBP: 00007fcdd854cbd9 R08: 0000000000000000 R09: 0000000000000000 [ 283.888738][T16387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.896691][T16387] R13: 00007fcdd8730038 R14: 00007fcdd872ffa0 R15: 00007ffcc47aee48 [ 283.904651][T16387] [ 283.907961][T16387] Kernel Offset: disabled [ 283.912285][T16387] Rebooting in 86400 seconds..