last executing test programs: 1.810538504s ago: executing program 2 (id=15741): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x28, 0x2, 0x3, "55ac07d401cc000000b28d002f179dd37829c92b00", 0x38414261}) 1.676875702s ago: executing program 2 (id=15746): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000002900000004000000d40000000000000018000000000000002900000002"], 0x30}}], 0x2, 0x0) 1.54762678s ago: executing program 2 (id=15751): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x7}, {0x0, 0x30}], 0x2, 0x0, 0x0, 0x900}, 0x0) 1.439447156s ago: executing program 2 (id=15756): iopl(0x3) times(0xfffffffffffffffe) 1.36606229s ago: executing program 2 (id=15760): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0x2, &(0x7f0000000200)={[{@noquota}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@noquota}, {@nointegrity}]}, 0x5, 0x6188, &(0x7f0000004940)="$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") setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) 1.03626987s ago: executing program 4 (id=15769): r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xd, @vbi={0x8, 0x301, 0xa7, 0x4745504a, [0xff, 0x6], [0x5, 0x7c80000]}}) 909.070557ms ago: executing program 4 (id=15772): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setfsgid(0xee00) 849.0679ms ago: executing program 0 (id=15776): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000040000000c00018006000600800a0000100002800c0017"], 0x34}}, 0xc000) 848.951ms ago: executing program 4 (id=15777): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de0000000000bf852c8986626691b0ffff44e4ce28712d2828"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) 802.011883ms ago: executing program 1 (id=15778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6000004, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) 753.913996ms ago: executing program 3 (id=15779): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0xffffffff, 0x0, 0x35314142, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x3}}) 665.030141ms ago: executing program 0 (id=15780): unshare(0x24020400) getdents(0xffffffffffffffff, 0x0, 0x0) 606.281745ms ago: executing program 3 (id=15781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 566.609677ms ago: executing program 1 (id=15782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000006000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 472.677772ms ago: executing program 3 (id=15783): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 471.914922ms ago: executing program 0 (id=15793): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x416eb135, 0x12) 369.625988ms ago: executing program 1 (id=15784): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000000240)=""/59, 0x3b, &(0x7f0000000100)={&(0x7f00000001c0)={'sha256\x00'}}) 365.253338ms ago: executing program 0 (id=15785): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0x1, 0x2, 0x3, {0x1, @vbi={0x4, 0x2, 0xfffffffb, 0x47504a50, [0x3, 0x9], [0x7, 0xfeedcafe], 0x108}}, 0xfffffff7}) 279.003444ms ago: executing program 4 (id=15786): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x5b, 0x5, 0x6, 0xb, 0xf39, 0x8100}) 278.409294ms ago: executing program 3 (id=15787): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x0, 0x2, 0x8}]}]}, {0x0, [0x61]}}, &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x1}, 0x28) 133.011772ms ago: executing program 3 (id=15788): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 132.883172ms ago: executing program 0 (id=15789): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000080)=0x84) 132.800362ms ago: executing program 1 (id=15790): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec}, [], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) 132.717972ms ago: executing program 4 (id=15791): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) 103.006554ms ago: executing program 0 (id=15792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) 90.361244ms ago: executing program 3 (id=15794): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000100)='./file2\x00', 0x14, &(0x7f00000027c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x174, &(0x7f0000000880)="$eJzs271OKkEYxvFngMPH+eQcjhbGwsTGRhYwQe3wRkwIrIS4KBEbiAl6Kd6VF6GFnYURwwJrWDQqybIC/1+z8/juOLOEgbdBAJZWSRsyMor3w3oy3c2YsLcEYEZ6w+tTD8DyiT6EvQMA4bg7kJqSbu8vKorGJ/qDfr00qkcSk/UraS02rJukUv7+4lrGjOab75PzK4ProP7j1f+/tTla/6d+6bf+KK2/+qfMsF715q9O2wYBALBUjLL+PPaHiI7qjp3z8jc3570cd3PBl3e8nHBztnLqVIN6BABTirxz/qO+8x/znX8A86vV7hyXHcc+YzA3g65mvOjhzeDN8tY9SX2Fl2VOBqnQVr/81KywP5kABM06bzStVruzXW+Ua3bNPikWisX93N5u3nIbf2u8/QewQF6+9MPeCQAAAAAAAAAAAAAAmNZ/rXz01sdgdwIAAAAgaLP47VHYzwgAAAAAAAAAAAAAAAAAwKJ5DgAA//8y1x45") unlink(&(0x7f0000000140)='./file1\x00') 37.044058ms ago: executing program 1 (id=15795): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x80, 0x7fff0000}]}) memfd_secret(0x80000) 36.869708ms ago: executing program 4 (id=15796): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b3d, 0x0) 12.952019ms ago: executing program 1 (id=15797): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) 0s ago: executing program 2 (id=15798): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") truncate(&(0x7f00000003c0)='./file2\x00', 0x8001bfc) kernel console output (not intermixed with test programs): interface descriptor's value: 44 [ 1004.688316][ T4311] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 1004.701983][T31526] FAT-fs (loop4): Directory bread(block 66) failed [ 1004.715273][T30091] usb 3-1: config 0 interface 111 has no altsetting 0 [ 1004.725636][T31526] FAT-fs (loop4): Directory bread(block 67) failed [ 1004.753802][T30091] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1004.764752][T31526] FAT-fs (loop4): Directory bread(block 68) failed [ 1004.771591][T31526] FAT-fs (loop4): Directory bread(block 69) failed [ 1004.789923][T30091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.812745][T31526] FAT-fs (loop4): Directory bread(block 70) failed [ 1004.831393][T30091] usb 3-1: config 0 descriptor?? [ 1004.858462][T31526] FAT-fs (loop4): Directory bread(block 71) failed [ 1004.873222][T31526] FAT-fs (loop4): Directory bread(block 72) failed [ 1004.883642][T31526] FAT-fs (loop4): Directory bread(block 73) failed [ 1004.914534][T30091] usb 3-1: selecting invalid altsetting 0 [ 1004.942586][T31545] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1004.987641][T31545] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1005.012062][T31545] overlayfs: missing 'lowerdir' [ 1005.083363][T30088] usb 4-1: USB disconnect, device number 59 [ 1005.139233][T30091] usb 3-1: USB disconnect, device number 44 [ 1005.623686][T31577] loop4: detected capacity change from 0 to 1024 [ 1005.782743][ T4269] hfsplus: b-tree write err: -5, ino 4 [ 1005.898641][T31593] tmpfs: Bad value for 'mpol' [ 1006.140859][T31611] __nla_validate_parse: 8 callbacks suppressed [ 1006.140879][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12758'. [ 1006.165541][T31615] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1006.165602][T31615] overlayfs: missing 'lowerdir' [ 1006.208932][T31619] netlink: 'syz.1.12761': attribute type 10 has an invalid length. [ 1006.208958][T31619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12761'. [ 1006.210988][T31618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12762'. [ 1006.570242][T31635] loop0: detected capacity change from 0 to 512 [ 1006.606640][T31640] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1006.632861][T31635] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 1006.632861][T31635] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1006.632861][T31635] [ 1006.699319][T31635] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.12770: inode #262144: comm syz.0.12770: iget: illegal inode # [ 1006.825698][T31635] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.12770: error while reading EA inode 262144 err=-117 [ 1006.859340][ T4311] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1006.912384][T31635] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.12770: inode #262144: comm syz.0.12770: iget: illegal inode # [ 1006.930924][T31635] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.12770: error while reading EA inode 262144 err=-117 [ 1006.964067][T31635] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.12770: inode #1: comm syz.0.12770: iget: illegal inode # [ 1006.982069][T31635] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.12770: error while reading EA inode 1 err=-117 [ 1007.035575][T31635] EXT4-fs (loop0): 1 orphan inode deleted [ 1007.043319][T31635] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,journal_ioprio=0x0000000000000001,lazytime,nouser_xattr,init_itable=0x0000000000001000,,errors=continue. Quota mode: none. [ 1007.070103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.153663][T31651] loop4: detected capacity change from 0 to 8192 [ 1007.210036][T31651] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1007.219279][T31651] REISERFS (device loop4): using ordered data mode [ 1007.252710][T31651] reiserfs: using flush barriers [ 1007.260624][T31651] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1007.274081][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1007.295280][ T4311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1007.305937][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1007.316521][ T4311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1007.326870][ T4311] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1007.337068][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.348835][ T4311] usb 3-1: config 0 descriptor?? [ 1007.354570][T31651] REISERFS (device loop4): checking transaction log (loop4) [ 1007.495401][T31651] REISERFS (device loop4): Using tea hash to sort names [ 1007.517800][T31651] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1007.626705][ T4311] hdpvr 3-1:0.0: firmware version 0x1e dated [ 1007.862021][ T4311] hdpvr 3-1:0.0: device init failed [ 1007.867334][ T4311] hdpvr: probe of 3-1:0.0 failed with error -12 [ 1007.898047][ T4311] usb 3-1: USB disconnect, device number 45 [ 1007.973341][T31693] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1008.167931][T31700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1008.392547][T31712] loop4: detected capacity change from 0 to 2048 [ 1008.468047][T31712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1008.559095][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12808'. [ 1008.591653][T31724] ceph: No source [ 1008.652823][T31728] comedi comedi0: dt2814: I/O port conflict (0x5,2) [ 1008.816577][T31742] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1008.820580][T31740] libceph: resolve '0..' (ret=-3): failed [ 1008.901115][T31742] overlayfs: missing 'lowerdir' [ 1009.177218][T31773] loop2: detected capacity change from 0 to 64 [ 1009.407964][T31789] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1009.416553][T31791] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12842'. [ 1009.543136][T30087] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1009.860967][T30087] usb 2-1: Using ep0 maxpacket: 8 [ 1010.179088][T31829] loop4: detected capacity change from 0 to 2048 [ 1010.224584][T30087] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1010.245042][T30087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.265389][T31829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1010.267042][T31838] loop2: detected capacity change from 0 to 16 [ 1010.285657][T30087] usb 2-1: Product: syz [ 1010.291272][T30087] usb 2-1: Manufacturer: syz [ 1010.309076][T30087] usb 2-1: SerialNumber: syz [ 1010.334576][T31838] erofs: (device loop2): mounted with root inode @ nid 36. [ 1010.364707][T30087] usb 2-1: config 0 descriptor?? [ 1010.405325][ T146] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000] [ 1010.432999][T30087] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1010.456256][T31838] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192] [ 1010.530245][ T26] audit: type=1800 audit(2000001431.754:51): pid=31838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12866" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1010.578398][T31849] netlink: 'syz.3.12872': attribute type 1 has an invalid length. [ 1010.586442][T31849] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.12872'. [ 1010.622313][T31849] netlink: 'syz.3.12872': attribute type 1 has an invalid length. [ 1010.667316][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1010.729254][T31850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1010.877069][T30087] gspca_sq930x: ucbus_write failed -71 [ 1010.883108][T30087] sq930x: probe of 2-1:0.0 failed with error -71 [ 1010.927167][T30087] usb 2-1: USB disconnect, device number 81 [ 1011.058808][T31867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1011.105337][T31872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12883'. [ 1011.146066][T31872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12883'. [ 1011.273162][T31883] device veth0_macvtap left promiscuous mode [ 1011.371063][T31888] device gtp0 entered promiscuous mode [ 1011.565926][T31906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12900'. [ 1011.784998][T16364] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1011.799368][T31920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.829566][T31920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.874020][T31920] device xfrm0 left promiscuous mode [ 1011.915724][T31920] device hsr0 left promiscuous mode [ 1011.945899][T31920] device wlan0 left promiscuous mode [ 1011.973006][T31920] device gtp0 left promiscuous mode [ 1012.351823][T16364] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1012.351859][T16364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.351889][T16364] usb 4-1: Product: syz [ 1012.351905][T16364] usb 4-1: Manufacturer: syz [ 1012.351922][T16364] usb 4-1: SerialNumber: syz [ 1012.353830][T16364] usb 4-1: config 0 descriptor?? [ 1012.417151][T16364] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1012.770194][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1012.784386][T31972] loop4: detected capacity change from 0 to 512 [ 1012.792187][T31973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1012.849781][ T4258] usb 4-1: USB disconnect, device number 60 [ 1012.901025][T31972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1012.935426][T31972] ext4 filesystem being mounted at /2393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.218845][T31982] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12936'. [ 1013.247822][T31984] loop4: detected capacity change from 0 to 1024 [ 1013.444125][T31967] loop0: detected capacity change from 0 to 32768 [ 1014.112413][T32023] ip6t_REJECT: ECHOREPLY is not supported [ 1014.299366][T32030] netlink: 'syz.4.12958': attribute type 15 has an invalid length. [ 1014.573533][T31986] loop2: detected capacity change from 0 to 32768 [ 1014.781229][T31986] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 1014.781229][T31986] [ 1014.804659][T31986] ERROR: (device loop2): remounting filesystem as read-only [ 1014.842062][T31986] ialloc: diAlloc returned -5! [ 1014.939890][ T4258] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1015.002873][T32073] netlink: 'syz.4.12981': attribute type 1 has an invalid length. [ 1015.140879][T32081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12985'. [ 1015.289275][T32085] netlink: 'syz.4.12986': attribute type 1 has an invalid length. [ 1015.290238][T32077] loop0: detected capacity change from 0 to 8192 [ 1015.316982][T32085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12986'. [ 1015.344820][ T4258] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.372089][T32077] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1015.390074][ T4258] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1015.450338][T32077] REISERFS (device loop0): using ordered data mode [ 1015.457393][T32077] reiserfs: using flush barriers [ 1015.500299][T32077] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1015.553113][T32077] REISERFS (device loop0): checking transaction log (loop0) [ 1015.566822][T32077] REISERFS (device loop0): Using r5 hash to sort names [ 1015.574649][ T4258] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1015.587252][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1015.596634][T32077] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1015.615793][ T4258] usb 4-1: SerialNumber: syz [ 1015.637670][T32077] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1015.924769][ T4258] usb 4-1: 0:2 : does not exist [ 1016.000885][ T4258] usb 4-1: USB disconnect, device number 61 [ 1016.162937][T32105] loop2: detected capacity change from 0 to 512 [ 1016.257348][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.299244][T32105] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1016.329696][T32105] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1016.369833][T32105] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1016.377408][T32120] IPv6: Can't replace route, no match found [ 1016.450044][T32105] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1016.507543][T32105] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 1016.542613][T32105] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1016.573450][T32136] loop0: detected capacity change from 0 to 512 [ 1016.574509][T32105] EXT4-fs (loop2): mount failed [ 1016.671554][T32136] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1016.769599][T32148] loop4: detected capacity change from 0 to 256 [ 1016.778918][T32136] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1016.821098][T32148] exfat: Deprecated parameter 'namecase' [ 1016.844086][T32152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13018'. [ 1016.892073][T32148] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1017.014431][T32161] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1017.215587][T32177] loop2: detected capacity change from 0 to 256 [ 1017.305260][T32188] x_tables: unsorted underflow at hook 2 [ 1017.317407][T32177] FAT-fs (loop2): Directory bread(block 64) failed [ 1017.335244][T32177] FAT-fs (loop2): Directory bread(block 65) failed [ 1017.342299][T32177] FAT-fs (loop2): Directory bread(block 66) failed [ 1017.386748][T32177] FAT-fs (loop2): Directory bread(block 67) failed [ 1017.421628][T32177] FAT-fs (loop2): Directory bread(block 68) failed [ 1017.428518][T32177] FAT-fs (loop2): Directory bread(block 69) failed [ 1017.475958][T32177] FAT-fs (loop2): Directory bread(block 70) failed [ 1017.503209][T32177] FAT-fs (loop2): Directory bread(block 71) failed [ 1017.543625][T32177] FAT-fs (loop2): Directory bread(block 72) failed [ 1017.570766][T32177] FAT-fs (loop2): Directory bread(block 73) failed [ 1017.678193][T32197] loop0: detected capacity change from 0 to 4096 [ 1017.747547][T32197] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1018.312751][T32223] netlink: 'syz.4.13055': attribute type 1 has an invalid length. [ 1018.362364][T32223] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.13055'. [ 1018.434272][T32223] netlink: 'syz.4.13055': attribute type 1 has an invalid length. [ 1018.679410][T32243] set_capacity_and_notify: 1 callbacks suppressed [ 1018.679429][T32243] loop0: detected capacity change from 0 to 24 [ 1018.692841][T32241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13062'. [ 1018.744872][T32243] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1018.792339][T32243] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1019.337732][T32276] loop0: detected capacity change from 0 to 1024 [ 1019.386834][T32280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13081'. [ 1019.784826][T32299] 9pnet: Insufficient options for proto=fd [ 1019.829070][T32300] loop4: detected capacity change from 0 to 1764 [ 1019.946153][T32310] loop0: detected capacity change from 0 to 8 [ 1019.970935][T32300] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1020.055861][T32314] device gre0 left promiscuous mode [ 1020.119076][T32314] bridge0: port 3(team0) entered disabled state [ 1020.274572][T32314] device batadv_slave_0 left promiscuous mode [ 1020.362379][T32314] device vlan0 left promiscuous mode [ 1020.407580][T32314] device ipvlan1 left promiscuous mode [ 1020.496828][T32314] device netdevsim0 left promiscuous mode [ 1020.526854][T32314] device wlan0 left promiscuous mode [ 1020.548765][T32314] device bridge2 left promiscuous mode [ 1020.568563][T32314] device bridge3 left promiscuous mode [ 1020.596907][T32314] device bridge4 left promiscuous mode [ 1020.609410][T32314] device bond2 left promiscuous mode [ 1020.622440][T32334] netlink: 'syz.4.13108': attribute type 3 has an invalid length. [ 1020.724354][T32345] openvswitch: netlink: Message has 4 unknown bytes. [ 1021.000996][T32361] printk: syz.4.13122 (32361): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 1021.009358][T32363] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1021.121298][T32367] overlayfs: missing 'lowerdir' [ 1021.257763][T32336] loop0: detected capacity change from 0 to 32768 [ 1021.323101][T32379] loop2: detected capacity change from 0 to 1024 [ 1021.355757][T32336] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 1021.355757][T32336] [ 1021.454143][ T8946] hfsplus: b-tree write err: -5, ino 4 [ 1021.617423][T32387] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1022.150130][T32418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13149'. [ 1022.446162][T32436] xt_connbytes: Forcing CT accounting to be enabled [ 1022.578831][T32444] loop0: detected capacity change from 0 to 8 [ 1022.662837][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1022.673237][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1022.692881][T32444] SQUASHFS error: Failed to read block 0x63a: -5 [ 1022.699677][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1022.708791][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1022.731986][T32444] SQUASHFS error: Unable to read metadata cache entry [638] [ 1022.744447][T32444] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1022.761712][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1022.790832][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1022.910172][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1022.933418][T32457] loop2: detected capacity change from 0 to 2048 [ 1023.014127][T32457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1023.245435][T32475] xt_l2tp: invalid flags combination: c [ 1023.488478][T32491] loop4: detected capacity change from 0 to 16 [ 1023.520744][T32492] 9pnet: p9_fd_create_tcp (32492): problem connecting socket to 127.0.0.1 [ 1023.566818][T32491] erofs: (device loop4): mounted with root inode @ nid 36. [ 1023.614061][T32491] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1023.887905][T32509] bond0: Error: Cannot enslave bond to itself. [ 1024.211561][T32531] ALSA: mixer_oss: invalid OSS volume 'u' [ 1024.307297][ T4258] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1024.322649][T32542] loop0: detected capacity change from 0 to 164 [ 1024.427212][T32542] rock: directory entry would overflow storage [ 1024.434498][T32542] rock: sig=0x66, size=4, remaining=3 [ 1024.446562][T32542] rock: directory entry would overflow storage [ 1024.461320][T32542] rock: sig=0x66, size=4, remaining=3 [ 1024.468235][T32542] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1024.542139][T32536] loop2: detected capacity change from 0 to 32768 [ 1024.570317][ T4311] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1024.585863][ T4258] usb 2-1: Using ep0 maxpacket: 8 [ 1024.598095][T32546] __nla_validate_parse: 40 callbacks suppressed [ 1024.598115][T32546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13212'. [ 1024.636072][T32546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13212'. [ 1024.648946][T32536] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1024.679520][T32536] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 1024.700865][T32536] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1024.713846][T32536] OCFS2: File system is now read-only. [ 1024.722368][T32536] (syz.2.13207,32536,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 1024.765936][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 1024.784234][ T4258] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1024.839999][ T4311] usb 4-1: Using ep0 maxpacket: 8 [ 1024.869851][ T4258] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 1024.879607][ T4258] usb 2-1: config 11 has no interface number 0 [ 1024.887696][ T4258] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 1024.905396][ T4258] usb 2-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.953911][ T4258] usb 2-1: config 11 interface 244 has no altsetting 0 [ 1024.965925][ T4311] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 1024.974641][ T4311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.019347][ T4311] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 1025.039151][ T4311] usb 4-1: config 0 has no interface number 0 [ 1025.054562][ T4311] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1025.077939][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.113266][ T4311] usb 4-1: config 0 descriptor?? [ 1025.179975][ T4258] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1025.190613][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.198836][ T4258] usb 2-1: Product: syz [ 1025.227960][ T4258] usb 2-1: Manufacturer: syz [ 1025.236556][ T4258] usb 2-1: SerialNumber: syz [ 1025.290745][T32576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1025.342532][T32580] netlink: 736 bytes leftover after parsing attributes in process `syz.0.13227'. [ 1025.422721][T32586] MTD: Couldn't look up './bus': -15 [ 1025.546696][ T4258] usb 2-1: USB disconnect, device number 82 [ 1025.622991][T30092] usb 4-1: USB disconnect, device number 62 [ 1025.625955][T32598] binder: BC_ACQUIRE_RESULT not supported [ 1025.650910][T32598] binder: 32597:32598 ioctl c0306201 200000000580 returned -22 [ 1025.833167][T32608] loop2: detected capacity change from 0 to 128 [ 1025.857089][T32608] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1025.875024][T32608] hpfs: filesystem error: improperly stopped [ 1025.882145][T32608] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1025.891492][T32608] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1025.904697][T32608] hpfs: You really don't want any checks? You are crazy... [ 1025.936796][T32608] hpfs: hpfs_map_sector(): read error [ 1025.942697][T32608] hpfs: code page support is disabled [ 1025.956419][T32608] hpfs: hpfs_map_4sectors(): unaligned read [ 1025.963750][T32608] hpfs: hpfs_map_4sectors(): unaligned read [ 1025.969839][T32608] hpfs: filesystem error: unable to find root dir [ 1025.991401][T32608] hpfs: bad mount options. [ 1026.437507][T32629] loop2: detected capacity change from 0 to 1024 [ 1026.600633][ T247] hfsplus: b-tree write err: -5, ino 4 [ 1026.713801][T32640] ieee802154 phy1 wpan1: encryption failed: -22 [ 1026.852302][T32646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13261'. [ 1027.018130][T32654] autofs4:pid:32654:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 1027.039729][T32654] autofs4:pid:32654:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1027.339175][T30087] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1027.649018][T30087] usb 1-1: Using ep0 maxpacket: 8 [ 1027.677361][T32685] loop2: detected capacity change from 0 to 4096 [ 1027.709689][T32685] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1027.809667][T30087] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1027.826367][T30087] usb 1-1: config 179 has no interface number 0 [ 1027.846130][T30087] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1027.885470][T30087] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1027.897841][T30087] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1027.944115][T30087] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1027.994533][T30087] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1028.065841][T30087] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1028.074985][T30087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.086834][T32707] loop2: detected capacity change from 0 to 512 [ 1028.171897][T32707] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1028.172937][T32657] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1028.202173][T32707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13291: bg 0: block 248: padding at end of block bitmap is not set [ 1028.272223][T32707] Quota error (device loop2): write_blk: dquota write failed [ 1028.325849][T32707] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1028.389425][T32707] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.13291: Failed to acquire dquot type 1 [ 1028.445717][T32707] EXT4-fs (loop2): 1 truncate cleaned up [ 1028.472147][T32707] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1028.721598][ T4311] usb 1-1: USB disconnect, device number 51 [ 1028.749900][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1028.758718][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1028.815358][T32745] device veth0_macvtap left promiscuous mode [ 1029.659485][T30088] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1029.884729][ T330] netlink: 'syz.0.13334': attribute type 5 has an invalid length. [ 1029.934305][ T330] device  entered promiscuous mode [ 1029.958022][T30088] usb 3-1: Using ep0 maxpacket: 8 [ 1029.998317][ T337] loop0: detected capacity change from 0 to 256 [ 1030.100201][ T341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1030.240050][ T350] device veth0_macvtap left promiscuous mode [ 1030.265102][ T351] 9pnet: p9_fd_create_tcp (351): problem connecting socket to 127.0.0.1 [ 1030.334691][T30088] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1030.355152][T30088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.402522][T30088] usb 3-1: Product: syz [ 1030.408641][T30088] usb 3-1: Manufacturer: syz [ 1030.413241][T30088] usb 3-1: SerialNumber: syz [ 1030.422442][T30088] usb 3-1: config 0 descriptor?? [ 1030.430479][ T357] device batadv2 entered promiscuous mode [ 1030.466127][T30088] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1030.920104][T30088] gspca_sq930x: ucbus_write failed -71 [ 1030.926065][T30088] sq930x: probe of 3-1:0.0 failed with error -71 [ 1030.948001][T30088] usb 3-1: USB disconnect, device number 46 [ 1031.514100][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1031.526746][ T380] 9pnet: p9_fd_create_tcp (380): problem connecting socket to 127.0.0.1 [ 1031.561990][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1031.584590][ T377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1031.747711][ T388] loop2: detected capacity change from 0 to 512 [ 1031.764863][ T391] device veth0_macvtap left promiscuous mode [ 1031.847312][ T388] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1031.921358][ T396] device batadv0 entered promiscuous mode [ 1031.955170][ T388] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1032.115403][ T406] 9pnet: p9_fd_create_tcp (406): problem connecting socket to 127.0.0.1 [ 1032.344046][ T422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1032.363388][T16364] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1032.520848][ T4258] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1032.662707][T16364] usb 4-1: Using ep0 maxpacket: 8 [ 1032.834370][ T458] netlink: 'syz.4.13396': attribute type 16 has an invalid length. [ 1032.844199][ T4258] usb 1-1: Using ep0 maxpacket: 32 [ 1032.863260][ T458] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13396'. [ 1032.879158][T16364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1033.007470][T16364] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1033.189753][ T4258] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1033.206360][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.224391][ T4258] usb 1-1: Product: syz [ 1033.237175][ T4258] usb 1-1: Manufacturer: syz [ 1033.247906][ T4258] usb 1-1: SerialNumber: syz [ 1033.263250][ T4258] usb 1-1: config 0 descriptor?? [ 1033.296039][T16364] usb 4-1: string descriptor 0 read error: -22 [ 1033.302887][T16364] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1033.323885][T16364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.332669][ T478] netlink: 'syz.4.13408': attribute type 21 has an invalid length. [ 1033.347171][ T4258] ati_remote_probe: Unexpected desc.bNumEndpoints [ 1033.358916][ T478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13408'. [ 1033.403831][T16364] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1033.430565][T16364] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1033.458768][T16364] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1033.488349][T16364] usb 4-1: media controller created [ 1033.536110][T16364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1033.549061][ T468] loop2: detected capacity change from 0 to 32768 [ 1033.594554][ T4258] usb 1-1: USB disconnect, device number 52 [ 1033.635545][T16364] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1033.658047][T16364] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1033.679451][ T468] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1033.759880][T16364] DVB: Unable to find symbol qt1010_attach() [ 1033.872981][T16364] usb 4-1: USB disconnect, device number 63 [ 1033.918309][ T504] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 504 comm: syz.2.13418) [ 1034.043053][ T507] loop4: detected capacity change from 0 to 64 [ 1034.081484][ T511] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1034.596200][ T530] loop4: detected capacity change from 0 to 128 [ 1034.690088][ T530] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4. [ 1034.704222][ T543] loop0: detected capacity change from 0 to 64 [ 1034.739559][ T547] loop2: detected capacity change from 0 to 256 [ 1034.922560][ T547] FAT-fs (loop2): Directory bread(block 64) failed [ 1034.993252][ T547] FAT-fs (loop2): Directory bread(block 65) failed [ 1035.027480][ T547] FAT-fs (loop2): Directory bread(block 66) failed [ 1035.034344][ T547] FAT-fs (loop2): Directory bread(block 67) failed [ 1035.107254][ T547] FAT-fs (loop2): Directory bread(block 68) failed [ 1035.128951][ T547] FAT-fs (loop2): Directory bread(block 69) failed [ 1035.164155][ T547] FAT-fs (loop2): Directory bread(block 70) failed [ 1035.186041][ T547] FAT-fs (loop2): Directory bread(block 71) failed [ 1035.193020][ T547] FAT-fs (loop2): Directory bread(block 72) failed [ 1035.223578][ T547] FAT-fs (loop2): Directory bread(block 73) failed [ 1035.560218][ T589] loop0: detected capacity change from 0 to 512 [ 1035.607682][ T589] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1035.659525][ T589] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1035.712320][ T602] loop4: detected capacity change from 0 to 1024 [ 1035.729229][ T589] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 1035.744039][ T589] System zones: 0-1, 15-15, 18-18, 34-34 [ 1035.753881][ T589] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1035.790132][ T589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.13463: bg 0: block 15: invalid block bitmap [ 1035.811080][ T589] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 1035.811108][ T607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13471'. [ 1035.811957][ T589] EXT4-fs (loop0): 1 truncate cleaned up [ 1035.811982][ T589] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,mblk_io_submit,jqfmt=vfsv0,nodiscard,nogrpid,dioread_lock,,errors=continue. Quota mode: none. [ 1036.261408][ T631] loop0: detected capacity change from 0 to 64 [ 1036.567794][ T643] loop0: detected capacity change from 0 to 8 [ 1036.614822][ T643] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1036.649870][ T643] SQUASHFS error: Failed to read block 0x9b: -5 [ 1036.656365][ T643] SQUASHFS error: Unable to read metadata cache entry [99] [ 1036.700729][ T612] loop2: detected capacity change from 0 to 32768 [ 1036.703627][ T643] SQUASHFS error: Unable to read inode 0x127 [ 1037.329641][ T661] loop2: detected capacity change from 0 to 1764 [ 1037.531717][ T661] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1038.343887][ T705] netlink: 'syz.3.13516': attribute type 10 has an invalid length. [ 1038.537277][ T715] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1038.674805][ T685] loop0: detected capacity change from 0 to 32768 [ 1038.839121][ T685] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1038.869673][ T685] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 1038.932454][ T685] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1038.944320][ T732] netlink: 'syz.4.13530': attribute type 1 has an invalid length. [ 1038.996671][ T685] OCFS2: File system is now read-only. [ 1039.026614][ T685] (syz.0.13506,685,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 1039.100534][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 1039.260388][ T749] device gtp0 entered promiscuous mode [ 1039.724426][ T768] netlink: 'syz.3.13548': attribute type 30 has an invalid length. [ 1039.756636][ T768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13548'. [ 1040.053430][ T790] SET target dimension over the limit! [ 1040.154222][ T795] loop2: detected capacity change from 0 to 512 [ 1040.235285][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13564'. [ 1040.245084][ T795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1040.274988][ T795] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.13561: inode has both inline data and extents flags [ 1040.363670][ T795] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.13561: couldn't read orphan inode 15 (err -117) [ 1040.447609][ T795] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,nojournal_checksum,norecovery,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1040.468305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.500799][ T819] loop4: detected capacity change from 0 to 128 [ 1040.569825][ T822] loop0: detected capacity change from 0 to 512 [ 1040.591465][ T819] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1040.628477][ T822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1040.632696][ T819] FAT-fs (loop4): Filesystem has been set read-only [ 1040.708887][ T822] EXT4-fs (loop0): 1 truncate cleaned up [ 1040.727024][ T822] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000004,user_xattr,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 1040.875177][T30087] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1040.983131][ T834] loop0: detected capacity change from 0 to 2048 [ 1041.046472][ T834] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 1041.065104][ T834] UDF-fs: error (device loop0): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 1041.107571][ T834] UDF-fs: Scanning with blocksize 512 failed [ 1041.160447][ T834] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1041.201221][ T834] UDF-fs: Scanning with blocksize 1024 failed [ 1041.230305][ T834] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1041.251694][ T842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.279007][T30087] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 1041.293366][T30087] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 183 [ 1041.308833][T30087] usb 3-1: config 0 has no interface number 1 [ 1041.314717][ T834] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1041.334555][T30087] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1041.367047][ T834] UDF-fs: Scanning with blocksize 2048 failed [ 1041.381157][T30087] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1041.401505][ T834] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1041.412942][ T846] netlink: 'syz.4.13583': attribute type 21 has an invalid length. [ 1041.451400][ T834] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1041.458691][ T846] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13583'. [ 1041.485511][ T834] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1041.492458][ T846] netlink: 'syz.4.13583': attribute type 5 has an invalid length. [ 1041.494306][ T834] UDF-fs: Scanning with blocksize 4096 failed [ 1041.513331][ T846] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13583'. [ 1041.523096][ T834] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1041.578241][T30087] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1041.581026][ T850] loop4: detected capacity change from 0 to 512 [ 1041.587578][T30087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.587607][T30087] usb 3-1: Product: syz [ 1041.587622][T30087] usb 3-1: Manufacturer: syz [ 1041.624300][ T850] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1041.663575][T30087] usb 3-1: SerialNumber: syz [ 1041.710242][T30087] usb 3-1: config 0 descriptor?? [ 1041.720870][ T850] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1041.750188][T30087] usb-storage 3-1:0.127: USB Mass Storage device detected [ 1041.771998][ T850] ext4 filesystem being mounted at /2523/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.783823][T30087] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1041.851051][T30087] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1041.908846][T30087] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1042.014770][T30087] usb 3-1: USB disconnect, device number 47 [ 1042.351662][ T890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.583504][ T902] xt_l2tp: invalid flags combination: 0 [ 1043.343286][ T945] netlink: 'syz.4.13628': attribute type 1 has an invalid length. [ 1044.215434][ T988] loop4: detected capacity change from 0 to 1024 [ 1044.384080][ T8946] hfsplus: b-tree write err: -5, ino 4 [ 1044.605337][ T1018] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13662'. [ 1044.652879][ T1018] netlink: 'syz.4.13662': attribute type 3 has an invalid length. [ 1044.690574][ T1008] loop0: detected capacity change from 0 to 8192 [ 1044.854175][ T1008] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1044.891940][ T1008] REISERFS (device loop0): using ordered data mode [ 1044.898744][ T1008] reiserfs: using flush barriers [ 1044.905397][ T1008] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1044.935151][ T1008] REISERFS (device loop0): checking transaction log (loop0) [ 1044.968476][ T1008] REISERFS (device loop0): Using r5 hash to sort names [ 1045.031185][ T1008] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1045.050405][ T1047] netlink: 'syz.1.13676': attribute type 1 has an invalid length. [ 1045.102329][ T1047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13676'. [ 1045.486632][ T1071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13682'. [ 1045.541862][ T1071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13682'. [ 1045.596306][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13682'. [ 1045.617923][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13682'. [ 1046.012542][ T1103] netlink: 'syz.0.13696': attribute type 1 has an invalid length. [ 1046.057216][ T1103] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13696'. [ 1046.093546][ T1099] loop2: detected capacity change from 0 to 4096 [ 1046.279367][ T1118] hsr0: VLAN not yet supported [ 1046.316192][T16364] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1046.645284][T16364] usb 4-1: Using ep0 maxpacket: 32 [ 1046.786582][T16364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1046.812633][T16364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1046.833497][T16364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1047.075447][T16364] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1047.104364][T16364] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1047.123222][T16364] usb 4-1: Product: syz [ 1047.135381][T16364] usb 4-1: Manufacturer: syz [ 1047.148036][T16364] usb 4-1: SerialNumber: syz [ 1047.157715][T16364] usb 4-1: config 0 descriptor?? [ 1047.362752][ T1177] netlink: 'syz.0.13729': attribute type 21 has an invalid length. [ 1047.369195][ T1182] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.13730'. [ 1047.427602][T30087] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1047.444734][ T1185] loop0: detected capacity change from 0 to 1024 [ 1047.454098][T16364] usb 4-1: USB disconnect, device number 64 [ 1047.508813][ T1189] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 1047.551643][ T1185] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1047.610691][ T1185] hfsplus: filesystem is marked journaled, leaving read-only. [ 1047.681871][T30087] usb 3-1: Using ep0 maxpacket: 32 [ 1047.725055][T30087] usb 3-1: too many configurations: 15, using maximum allowed: 8 [ 1047.936388][ T1213] fuse: blksize only supported for fuseblk [ 1048.192320][ T1229] netlink: 'syz.0.13750': attribute type 30 has an invalid length. [ 1048.219227][ T1229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13750'. [ 1048.574013][ T26] audit: type=1326 audit(2000001467.339:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1251 comm="syz.0.13762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef20d93eb9 code=0x0 [ 1048.614694][T30087] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1048.654718][T30087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.662882][T30087] usb 3-1: Product: syz [ 1048.702903][T30087] usb 3-1: Manufacturer: syz [ 1048.707672][T30087] usb 3-1: SerialNumber: syz [ 1048.773309][T30087] usb 3-1: config 0 descriptor?? [ 1049.072763][T30087] mdc800 3-1:0.0: probe fails -> wrong Number of Configuration [ 1049.112717][T30087] usb 3-1: USB disconnect, device number 48 [ 1049.187530][ T1285] netlink: 180 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1049.500202][ T1310] netlink: 'syz.3.13790': attribute type 17 has an invalid length. [ 1049.509659][ T1313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13791'. [ 1049.521884][ T1310] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13790'. [ 1050.194095][T30087] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1050.257615][ T1355] loop0: detected capacity change from 0 to 512 [ 1050.258634][ T1344] loop4: detected capacity change from 0 to 4096 [ 1050.334163][ T1344] ntfs3: Invalid value for gid. [ 1050.365985][ T1355] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1050.387311][ T1355] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1050.450945][ T1355] System zones: 0-2, 18-18, 34-35 [ 1050.480107][ T1370] netlink: 'syz.1.13818': attribute type 4 has an invalid length. [ 1050.482703][T30087] usb 3-1: Using ep0 maxpacket: 8 [ 1050.497491][ T1355] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1050.744369][ T1380] kAFS: unable to lookup cell '.,' [ 1050.860496][T30087] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 1050.887942][T30087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.923492][T30087] usb 3-1: Product: syz [ 1050.927919][T30087] usb 3-1: Manufacturer: syz [ 1050.961068][T30087] usb 3-1: SerialNumber: syz [ 1050.988427][T30087] usb 3-1: config 0 descriptor?? [ 1051.059193][T30087] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 1051.286384][ T1410] loop0: detected capacity change from 0 to 4096 [ 1051.327538][T30087] pwc: send_video_command error -71 [ 1051.332803][T30087] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1051.357470][T30087] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1051.389390][ T1410] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1051.395311][T30087] usb 3-1: USB disconnect, device number 49 [ 1051.439938][ T1425] __nla_validate_parse: 3 callbacks suppressed [ 1051.439959][ T1425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13843'. [ 1051.496876][ T1427] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1051.566595][ T4185] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 1051.589708][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1051.627750][ T4185] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 1052.126511][ T1458] netlink: 'syz.0.13868': attribute type 1 has an invalid length. [ 1052.150547][ T1458] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.13868'. [ 1052.165861][ T1459] loop2: detected capacity change from 0 to 1024 [ 1052.241779][ T1459] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1052.327799][ T1459] hfsplus: filesystem is marked journaled, leaving read-only. [ 1052.680663][ T1484] loop2: detected capacity change from 0 to 2048 [ 1052.769226][ T1484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.809682][ T1484] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1052.907766][ T1484] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 1052.980846][ T1502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1053.144780][T16364] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1053.254749][ T1514] CIFS mount error: No usable UNC path provided in device string! [ 1053.254749][ T1514] [ 1053.308724][ T1514] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1053.413880][ T1521] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 1053.436887][ T1524] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.13888'. [ 1053.552790][ T1528] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13892'. [ 1053.819242][T16364] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1053.854493][T16364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.871125][ T1549] loop4: detected capacity change from 0 to 1024 [ 1053.877997][T16364] usb 1-1: Product: syz [ 1053.892697][T16364] usb 1-1: Manufacturer: syz [ 1053.907205][T16364] usb 1-1: SerialNumber: syz [ 1053.968713][T16364] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1054.026278][ T1549] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1054.078459][ T1549] EXT4-fs (loop4): invalid journal inode [ 1054.084492][ T1549] EXT4-fs (loop4): can't get journal size [ 1054.109853][ T1549] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 1054.272419][ T1569] loop4: detected capacity change from 0 to 512 [ 1054.334291][ T1575] netlink: 'syz.1.13914': attribute type 10 has an invalid length. [ 1054.598529][T30088] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1054.737293][T16364] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1054.854936][T30088] usb 4-1: Using ep0 maxpacket: 32 [ 1055.153093][ T1569] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1055.163531][T30088] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1055.193006][T30088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.205081][ T1569] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1055.246202][T30088] usb 4-1: Product: syz [ 1055.257029][T30088] usb 4-1: Manufacturer: syz [ 1055.263807][ T1569] System zones: 0-2, 18-18, 34-35 [ 1055.273294][T30088] usb 4-1: SerialNumber: syz [ 1055.289354][T30087] usb 1-1: USB disconnect, device number 53 [ 1055.326554][ T1569] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1055.340237][T30088] usb 4-1: config 0 descriptor?? [ 1055.394401][T30088] ati_remote_probe: Unexpected desc.bNumEndpoints [ 1055.619330][ T1584] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.13916'. [ 1055.639522][ T4258] usb 4-1: USB disconnect, device number 65 [ 1055.944172][ T1597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13922'. [ 1056.085579][T16364] usb 1-1: Service connection timeout for: 256 [ 1056.094516][T16364] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1056.122718][T16364] ath9k_htc: Failed to initialize the device [ 1056.164108][T30087] usb 1-1: ath9k_htc: USB layer deinitialized [ 1056.263675][ T1608] netlink: 'syz.1.13928': attribute type 1 has an invalid length. [ 1056.291795][ T1608] netlink: 228 bytes leftover after parsing attributes in process `syz.1.13928'. [ 1056.439854][ T1620] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1056.462559][ T1622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13935'. [ 1056.492233][ T1622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13935'. [ 1056.520509][ T1622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13935'. [ 1056.616571][ T1629] netlink: 'syz.0.13937': attribute type 10 has an invalid length. [ 1056.942323][ T1653] loop2: detected capacity change from 0 to 128 [ 1057.107712][ T1662] loop4: detected capacity change from 0 to 128 [ 1057.207260][ T1662] UBIFS error (pid: 1662): cannot open "./file0", error -22 [ 1057.436357][ T1682] netlink: 'syz.2.13964': attribute type 10 has an invalid length. [ 1057.581442][ T1689] SET target dimension over the limit! [ 1057.685561][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.710651][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.734610][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.751300][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.765373][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.770724][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.799120][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.804340][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.828947][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.850532][ T1694] QAT: Invalid ioctl 1075883590 [ 1057.871184][ T1704] netlink: 'syz.3.13975': attribute type 1 has an invalid length. [ 1057.902779][T16364] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1057.916235][ T1704] netlink: 'syz.3.13975': attribute type 2 has an invalid length. [ 1058.317556][ T1731] openvswitch: netlink: Actions may not be safe on all matching packets [ 1058.329641][T16364] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 1058.349875][T16364] usb 1-1: config 0 has no interface number 0 [ 1058.364627][T16364] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1058.382627][ T4311] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1058.501448][ T1741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13995'. [ 1058.598838][T16364] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1058.627645][T16364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.644338][T16364] usb 1-1: Product: syz [ 1058.648659][T16364] usb 1-1: Manufacturer: syz [ 1058.655090][T16364] usb 1-1: SerialNumber: syz [ 1058.662048][T16364] usb 1-1: config 0 descriptor?? [ 1058.686510][ T1690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1058.707001][T16364] ums-karma 1-1:0.46: USB Mass Storage device detected [ 1058.828391][T16364] ums-karma: probe of 1-1:0.46 failed with error -5 [ 1058.844889][ T1765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14005'. [ 1058.898645][ T1771] netlink: 'syz.4.14008': attribute type 8 has an invalid length. [ 1058.925461][T16364] usb 1-1: USB disconnect, device number 54 [ 1059.005183][ T4311] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1059.018544][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.037402][ T4311] usb 4-1: Product: syz [ 1059.041746][ T4311] usb 4-1: Manufacturer: syz [ 1059.048968][ T4311] usb 4-1: SerialNumber: syz [ 1059.110862][ T4311] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1059.291317][T30088] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1059.558522][T30088] usb 2-1: Using ep0 maxpacket: 8 [ 1059.687096][T30088] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 1059.695574][T30088] usb 2-1: config 0 has no interface number 0 [ 1059.702327][T30088] usb 2-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 1059.715234][T30088] usb 2-1: config 0 interface 96 has no altsetting 0 [ 1059.772413][ T4311] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1059.890148][T30088] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 1059.900118][T30088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.908753][T30088] usb 2-1: Product: syz [ 1059.913341][T30088] usb 2-1: Manufacturer: syz [ 1059.918370][T30088] usb 2-1: SerialNumber: syz [ 1059.925280][T30088] usb 2-1: config 0 descriptor?? [ 1060.204846][ T4258] usb 4-1: USB disconnect, device number 66 [ 1060.418761][T16364] usb 2-1: USB disconnect, device number 83 [ 1060.873390][ T4311] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1060.881193][ T4311] ath9k_htc: Failed to initialize the device [ 1060.887900][ T4258] usb 4-1: ath9k_htc: USB layer deinitialized [ 1061.089323][ T1791] loop4: detected capacity change from 0 to 128 [ 1061.589299][ T1803] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14024'. [ 1061.615018][ T1807] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1061.660259][ T1819] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1061.714851][ T1821] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.14034'. [ 1061.732228][ T1823] siw: device registration error -23 [ 1061.808891][ T1827] futex_wake_op: syz.4.14035 tries to shift op by 32; fix this program [ 1061.938635][ T1837] netlink: 'syz.4.14041': attribute type 10 has an invalid length. [ 1062.147336][ T1846] netlink: 'syz.1.14045': attribute type 3 has an invalid length. [ 1062.353863][ T1858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1062.457269][ T1862] device wlan0 entered promiscuous mode [ 1062.463286][ T1862] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1062.841407][ T1887] netlink: 'syz.1.14067': attribute type 10 has an invalid length. [ 1063.305400][ T1918] netlink: 'syz.3.14081': attribute type 10 has an invalid length. [ 1063.410456][ T1921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14082'. [ 1063.569535][ T1930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14085'. [ 1063.789483][ T1945] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.14093'. [ 1063.906785][ T1951] netlink: 'syz.1.14094': attribute type 1 has an invalid length. [ 1063.922452][ T1951] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14094'. [ 1064.139063][ T1976] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14107'. [ 1064.351924][ T1991] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.14115'. [ 1064.548729][ T2012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14125'. [ 1064.626914][ T2012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14125'. [ 1064.996007][ T2044] Cannot find del_set index 4 as target [ 1065.004538][ T2045] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.14140'. [ 1065.137558][ T2048] netlink: 'syz.1.14142': attribute type 11 has an invalid length. [ 1065.171771][ T2048] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14142'. [ 1065.536403][ T2065] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.14151'. [ 1065.752123][ T2078] loop0: detected capacity change from 0 to 1024 [ 1065.904813][ T2085] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14161'. [ 1066.435144][ T2103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14171'. [ 1066.948881][ T2131] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1067.680992][ T2083] syz.2.14159 (2083): drop_caches: 2 [ 1067.753249][ T2172] netlink: 'syz.1.14204': attribute type 1 has an invalid length. [ 1067.817736][ T2174] SET target dimension over the limit! [ 1067.869065][ T2179] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1068.185330][T16364] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1068.223369][ T2194] loop0: detected capacity change from 0 to 256 [ 1068.269117][ T2194] FAT-fs (loop0): Directory bread(block 64) failed [ 1068.287845][ T2194] FAT-fs (loop0): Directory bread(block 65) failed [ 1068.309549][ T2194] FAT-fs (loop0): Directory bread(block 66) failed [ 1068.330920][ T2194] FAT-fs (loop0): Directory bread(block 67) failed [ 1068.343318][ T2194] FAT-fs (loop0): Directory bread(block 68) failed [ 1068.359542][ T2194] FAT-fs (loop0): Directory bread(block 69) failed [ 1068.367967][ T2194] FAT-fs (loop0): Directory bread(block 70) failed [ 1068.375375][ T2194] FAT-fs (loop0): Directory bread(block 71) failed [ 1068.389781][ T2194] FAT-fs (loop0): Directory bread(block 72) failed [ 1068.405413][ T2194] FAT-fs (loop0): Directory bread(block 73) failed [ 1068.573968][T16364] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1068.592851][T16364] usb 2-1: config 0 has no interface number 0 [ 1068.628887][T16364] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1068.666043][ T2208] No source specified [ 1068.684642][T16364] usb 2-1: config 0 interface 2 altsetting 2 has an invalid endpoint with address 0x6D, skipping [ 1068.718087][T16364] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1068.901759][T16364] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1068.922379][T16364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.945058][T16364] usb 2-1: Product: syz [ 1068.949306][T16364] usb 2-1: Manufacturer: syz [ 1068.953909][T16364] usb 2-1: SerialNumber: syz [ 1068.973333][T16364] usb 2-1: config 0 descriptor?? [ 1069.030090][ T2180] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1069.060908][ T2180] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1069.085380][ T4258] Bluetooth: hci4: command 0x0405 tx timeout [ 1069.395286][T16364] usb 2-1: invalid MIDI in EP 0 [ 1069.405481][T30088] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1069.460783][T16364] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 1069.502692][T16364] usb 2-1: USB disconnect, device number 84 [ 1069.703354][T30088] usb 1-1: Using ep0 maxpacket: 16 [ 1069.757793][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.793376][ T2275] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 1069.853590][T30088] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 1069.862519][T30088] usb 1-1: config 254 has no interface number 0 [ 1069.900883][T30088] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1069.909941][ T2277] loop2: detected capacity change from 0 to 4096 [ 1069.931260][T30088] usb 1-1: config 254 interface 235 has no altsetting 0 [ 1069.985559][ T2277] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1070.040606][ T2277] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1070.065276][ T2277] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1070.119205][ T2277] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1070.153025][ T2283] loop4: detected capacity change from 0 to 4096 [ 1070.165630][T30088] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1070.177497][ T2277] ntfs: volume version 3.1. [ 1070.187323][T30088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.198520][ T2277] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1070.205601][T30088] usb 1-1: Product: syz [ 1070.214608][T30088] usb 1-1: Manufacturer: syz [ 1070.223475][ T2283] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1070.240871][T30088] usb 1-1: SerialNumber: syz [ 1070.246186][ T2277] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1070.255501][ T2291] __nla_validate_parse: 1 callbacks suppressed [ 1070.255519][ T2291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14261'. [ 1070.292253][ T2277] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1070.306880][ T2236] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1070.324386][ T2277] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 1070.337640][ T2277] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 1070.353357][ T2277] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1070.561741][ T2236] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1070.594119][T30088] usbtest 1-1:254.235: Linux gadget zero [ 1070.609872][T30088] usbtest 1-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1070.721250][T16364] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1070.812123][ T2310] 9pnet: Could not find request transport: xen [ 1070.824111][T30088] usb 1-1: USB disconnect, device number 55 [ 1070.996828][T16364] usb 2-1: Using ep0 maxpacket: 8 [ 1071.034949][ T2328] vivid-000: disconnect [ 1071.054284][ T2327] vivid-000: reconnect [ 1071.139070][T16364] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1071.158866][T16364] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.187436][T16364] usb 2-1: config 0 has no interface number 0 [ 1071.222012][ T2335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14282'. [ 1071.295023][ T2339] cgroup: Unknown subsys name 'noxattr' [ 1071.348958][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14284'. [ 1071.360431][T16364] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1071.380915][T16364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.389829][T16364] usb 2-1: Product: syz [ 1071.397844][T16364] usb 2-1: Manufacturer: syz [ 1071.419399][T16364] usb 2-1: SerialNumber: syz [ 1071.445523][T16364] usb 2-1: config 0 descriptor?? [ 1071.451365][ T2343] netlink: 'syz.4.14286': attribute type 21 has an invalid length. [ 1071.453722][ T2324] loop2: detected capacity change from 0 to 32768 [ 1071.469835][ T2343] IPv6: NLM_F_CREATE should be specified when creating new route [ 1071.481034][ T2343] IPv6: Can't replace route, no match found [ 1071.547980][ T2324] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.14276 (2324) [ 1071.560968][T30088] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1071.600880][ T2324] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1071.629826][ T2351] loop0: detected capacity change from 0 to 256 [ 1071.630714][ T2324] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1071.672159][ T2324] BTRFS info (device loop2): force clearing of disk cache [ 1071.683221][ T2324] BTRFS info (device loop2): enabling ssd optimizations [ 1071.690708][ T2324] BTRFS info (device loop2): using spread ssd allocation scheme [ 1071.719454][ T2351] FAT-fs (loop0): Directory bread(block 64) failed [ 1071.739951][ T2351] FAT-fs (loop0): Directory bread(block 65) failed [ 1071.750748][ T2324] BTRFS info (device loop2): disabling free space tree [ 1071.756006][T16364] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1071.761582][ T2324] BTRFS info (device loop2): setting datasum, datacow enabled [ 1071.768618][T16364] usb 2-1: No valid video chain found. [ 1071.778090][ T2351] FAT-fs (loop0): Directory bread(block 66) failed [ 1071.790415][ T2351] FAT-fs (loop0): Directory bread(block 67) failed [ 1071.791834][ T2324] BTRFS info (device loop2): turning on sync discard [ 1071.804471][ T2324] BTRFS info (device loop2): has skinny extents [ 1071.814451][ T2351] FAT-fs (loop0): Directory bread(block 68) failed [ 1071.822621][ T2351] FAT-fs (loop0): Directory bread(block 69) failed [ 1071.829295][ T2351] FAT-fs (loop0): Directory bread(block 70) failed [ 1071.839400][ T2351] FAT-fs (loop0): Directory bread(block 71) failed [ 1071.849022][ T2351] FAT-fs (loop0): Directory bread(block 72) failed [ 1071.852144][T30088] usb 4-1: Using ep0 maxpacket: 32 [ 1071.858426][ T2351] FAT-fs (loop0): Directory bread(block 73) failed [ 1071.975459][ T4311] usb 2-1: USB disconnect, device number 85 [ 1072.014761][ T2367] loop4: detected capacity change from 0 to 4096 [ 1072.017528][T30088] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.048828][ T2324] BTRFS info (device loop2): clearing free space tree [ 1072.057537][ T2324] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1072.066506][T30088] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.074408][ T2324] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1072.091453][ T2367] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1072.242188][ T4196] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 1072.258213][ T4196] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1072.277614][ T4196] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 1072.303559][T30088] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1072.317704][T30088] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1072.330703][T30088] usb 4-1: Product: syz [ 1072.332948][T16364] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1072.336260][T30088] usb 4-1: Manufacturer: syz [ 1072.422247][T30088] hub 4-1:4.0: USB hub found [ 1072.560422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1072.666902][T30088] hub 4-1:4.0: 8 ports detected [ 1072.707281][T30088] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1072.783523][T16364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.795462][T16364] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.891426][T30088] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1072.917796][ T2387] loop4: detected capacity change from 0 to 32768 [ 1072.928109][T30088] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1072.954417][ T2387] XFS: noikeep mount option is deprecated. [ 1072.960486][ T2387] XFS: attr2 mount option is deprecated. [ 1072.985285][T16364] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1072.994595][T16364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.007773][T30088] usb 4-1: USB disconnect, device number 67 [ 1073.014551][T16364] usb 1-1: Product: syz [ 1073.021622][T16364] usb 1-1: Manufacturer: syz [ 1073.030640][T16364] usb 1-1: SerialNumber: syz [ 1073.037864][T16364] usb 1-1: config 0 descriptor?? [ 1073.093353][ T2387] XFS (loop4): Mounting V5 Filesystem [ 1073.196540][ T2387] XFS (loop4): Ending clean mount [ 1073.321166][ T4196] XFS (loop4): Unmounting Filesystem [ 1073.351704][T16364] usb 1-1: USB disconnect, device number 56 [ 1073.498592][ T2437] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14313'. [ 1074.301707][ T2498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.353017][ T2505] loop0: detected capacity change from 0 to 24 [ 1074.781853][ T2542] loop0: detected capacity change from 0 to 164 [ 1074.941345][ T2402] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1075.112182][ T2542] Unable to read rock-ridge attributes [ 1075.132452][ T2542] Unable to read rock-ridge attributes [ 1075.152709][ T2542] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1075.337033][ T2402] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1075.346417][ T2402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.420624][ T2402] usb 4-1: config 0 descriptor?? [ 1075.775417][ T2402] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1075.792737][ T2402] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1075.820470][ T2402] [drm:udl_init] *ERROR* Selecting channel failed [ 1075.858835][ T2402] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1075.895154][ T2402] [drm] Initialized udl on minor 2 [ 1075.928675][ T2402] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1075.951875][ T2402] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1075.983088][ T2575] loop2: detected capacity change from 0 to 256 [ 1075.991694][ T2576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1076.002147][ T2402] usb 4-1: USB disconnect, device number 68 [ 1076.011204][ T2396] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1076.036846][ T2396] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1076.084671][ T2575] FAT-fs (loop2): Directory bread(block 64) failed [ 1076.104319][ T2575] FAT-fs (loop2): Directory bread(block 65) failed [ 1076.112736][ T2396] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1076.123407][ T2575] FAT-fs (loop2): Directory bread(block 66) failed [ 1076.151513][ T2575] FAT-fs (loop2): Directory bread(block 67) failed [ 1076.166148][ T2575] FAT-fs (loop2): Directory bread(block 68) failed [ 1076.186844][ T2575] FAT-fs (loop2): Directory bread(block 69) failed [ 1076.194788][ T2575] FAT-fs (loop2): Directory bread(block 70) failed [ 1076.201992][ T2575] FAT-fs (loop2): Directory bread(block 71) failed [ 1076.212314][ T2575] FAT-fs (loop2): Directory bread(block 72) failed [ 1076.219746][ T2575] FAT-fs (loop2): Directory bread(block 73) failed [ 1076.540734][ T2601] netlink: 'syz.0.14390': attribute type 5 has an invalid length. [ 1076.652743][ T2611] netlink: 'syz.0.14383': attribute type 13 has an invalid length. [ 1076.760948][ T2620] syz.0.14386[2620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1076.761373][ T2620] syz.0.14386[2620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1076.801594][ T2402] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1076.857205][ T2625] loop0: detected capacity change from 0 to 512 [ 1076.912699][ T2632] PKCS7: Unknown OID: [4] 0.0 [ 1076.945184][ T2632] PKCS7: Only support pkcs7_signedData type [ 1076.949975][ T2627] ODEBUG: Out of memory. ODEBUG disabled [ 1077.079311][ T2402] usb 4-1: Using ep0 maxpacket: 32 [ 1077.118414][ T2625] EXT4-fs (loop0): #blocks per group too big: 294912 [ 1077.173583][ T2627] syz.1.14388 (2627): drop_caches: 2 [ 1077.207791][ T2402] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1077.207824][ T2402] usb 4-1: config 0 has no interface number 0 [ 1077.207860][ T2402] usb 4-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1077.207885][ T2402] usb 4-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1077.207910][ T2402] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1077.207933][ T2402] usb 4-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1077.207958][ T2402] usb 4-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1077.389551][ T2402] usb 4-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 1077.389586][ T2402] usb 4-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 1077.389608][ T2402] usb 4-1: Product: syz [ 1077.389625][ T2402] usb 4-1: Manufacturer: syz [ 1077.389641][ T2402] usb 4-1: SerialNumber: syz [ 1077.392005][ T2402] usb 4-1: config 0 descriptor?? [ 1077.509123][ T2593] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1077.529730][ T2402] spcp8x5 4-1:0.110: required endpoints missing [ 1077.825952][ T6713] usb 4-1: USB disconnect, device number 69 [ 1077.891757][ T2402] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1078.071083][ T2684] loop0: detected capacity change from 0 to 256 [ 1078.140081][ T2684] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1078.276731][ T2402] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 1078.285544][ T2402] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1078.319154][ T2402] usb 3-1: config 1 has no interface number 0 [ 1078.335476][ T2402] usb 3-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1078.335702][ T2700] loop4: detected capacity change from 0 to 256 [ 1078.361669][ T2402] usb 3-1: config 1 interface 188 has no altsetting 0 [ 1078.487956][ T2713] netlink: 332 bytes leftover after parsing attributes in process `syz.0.14424'. [ 1078.492098][ T2700] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1078.558339][ T2402] usb 3-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1078.582138][ T2402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.608029][ T2402] usb 3-1: Product: syz [ 1078.634971][ T2402] usb 3-1: Manufacturer: syz [ 1078.639865][ T2402] usb 3-1: SerialNumber: syz [ 1079.031780][ T2402] usb 3-1: unknown interface protocol 0xc1, assuming v1 [ 1079.055916][ T2402] usb 3-1: 188:2 : does not exist [ 1079.114635][ T2750] loop4: detected capacity change from 0 to 16 [ 1079.140696][ T2402] usb 3-1: USB disconnect, device number 50 [ 1079.189812][ T2750] erofs: (device loop4): mounted with root inode @ nid 36. [ 1079.313491][T30087] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1079.376052][ T2767] Cannot find add_set index 3 as target [ 1079.445002][ T2771] device ipip1 entered promiscuous mode [ 1079.463824][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1079.955083][T30087] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1079.964297][T30087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.004443][T30087] usb 1-1: Product: syz [ 1080.015235][T30087] usb 1-1: Manufacturer: syz [ 1080.029891][T30087] usb 1-1: SerialNumber: syz [ 1080.057193][T30087] usb 1-1: config 0 descriptor?? [ 1080.127261][T30087] ch341 1-1:0.0: ch341-uart converter detected [ 1080.371900][T30087] usb 1-1: failed to receive control message: -71 [ 1080.398660][T30087] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1080.444181][T30087] usb 1-1: USB disconnect, device number 57 [ 1080.511537][T30087] ch341 1-1:0.0: device disconnected [ 1080.978236][ T2877] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14495'. [ 1081.039143][ T2877] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1081.066183][ T2877] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1081.172869][ T2890] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 1081.216346][ T2890] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1081.230281][ T2890] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 1081.396081][ T2911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14507'. [ 1081.974092][ T2954] Timeout policy `syz0' can only be used by L3 protocol number 248 [ 1082.311128][ T2978] xt_socket: unknown flags 0x50 [ 1082.333534][ T2397] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1082.370912][ T2402] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1082.467173][ T2396] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1082.606391][ T2397] usb 3-1: Using ep0 maxpacket: 32 [ 1082.616837][T30087] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1082.638576][ T2402] usb 4-1: Using ep0 maxpacket: 32 [ 1082.767005][ T2397] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1082.776106][ T2397] usb 3-1: config 0 has no interface number 0 [ 1082.783163][ T2397] usb 3-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1082.794771][ T2397] usb 3-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1082.806220][ T2397] usb 3-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1082.817061][ T2397] usb 3-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1082.828038][ T2397] usb 3-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1082.883948][T30087] usb 2-1: Using ep0 maxpacket: 16 [ 1082.884106][ T2396] usb 1-1: config 0 has no interfaces? [ 1082.986806][ T2402] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1082.996986][ T2402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.008405][ T2402] usb 4-1: Product: syz [ 1083.012526][T30087] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1083.013124][ T2402] usb 4-1: Manufacturer: syz [ 1083.026965][T30087] usb 2-1: config 0 has no interface number 0 [ 1083.033830][ T2397] usb 3-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 1083.049073][ T2402] usb 4-1: SerialNumber: syz [ 1083.049655][T30087] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1083.057329][ T2397] usb 3-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 1083.080333][ T2402] usb 4-1: config 0 descriptor?? [ 1083.085978][ T2397] usb 3-1: Product: syz [ 1083.091507][ T2397] usb 3-1: Manufacturer: syz [ 1083.096322][ T2397] usb 3-1: SerialNumber: syz [ 1083.103955][ T2396] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1083.116390][ T2396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.129836][ T2397] usb 3-1: config 0 descriptor?? [ 1083.136083][ T2396] usb 1-1: Product: syz [ 1083.141330][ T2396] usb 1-1: Manufacturer: syz [ 1083.146348][ T2396] usb 1-1: SerialNumber: syz [ 1083.154356][ T2963] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1083.163293][ T2396] r8152-cfgselector 1-1: config 0 descriptor?? [ 1083.167786][ T2988] loop4: detected capacity change from 0 to 128 [ 1083.184964][ T2397] spcp8x5 3-1:0.110: required endpoints missing [ 1083.236946][T30087] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1083.246643][T30087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.254831][T30087] usb 2-1: Product: syz [ 1083.260550][T30087] usb 2-1: Manufacturer: syz [ 1083.265305][T30087] usb 2-1: SerialNumber: syz [ 1083.273669][T30087] usb 2-1: config 0 descriptor?? [ 1083.291273][ T2988] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1083.305102][ T2988] ext4 filesystem being mounted at /2714/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.368426][ T2402] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 070 [ 1083.444655][ T2992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14538'. [ 1083.451538][ T2402] usb 3-1: USB disconnect, device number 51 [ 1083.457618][ T2992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14538'. [ 1083.461758][ T2396] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1083.493837][ T4269] usb 1-1: config 0 descriptor?? [ 1083.588118][ T2396] usb 4-1: USB disconnect, device number 70 [ 1083.628166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 1083.680110][ T2397] usb 1-1: USB disconnect, device number 58 [ 1083.685953][ T4269] usb 1-1: can't set config #0, error -71 [ 1083.792962][T30087] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 1083.807748][T30087] usb 2-1: USB disconnect, device number 86 [ 1084.324384][ T3028] loop4: detected capacity change from 0 to 4096 [ 1084.421861][ T3045] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1084.440183][ T3028] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1084.466531][ T3028] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1084.501922][ T3028] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1084.660694][ T3028] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1084.689788][ T3028] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.14553: Logical block already allocated [ 1084.805017][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14573'. [ 1084.831868][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14573'. [ 1084.883110][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14573'. [ 1084.896613][ T3070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1085.109798][ T3084] qrtr: Invalid version 0 [ 1085.667569][ T3108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14593'. [ 1085.706852][ T3108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14593'. [ 1085.988510][ T3114] loop0: detected capacity change from 0 to 4096 [ 1086.071978][ T3114] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1086.212886][ T3114] ntfs3: loop0: failed to convert "c46c" to cp869 [ 1086.239021][ T3081] loop2: detected capacity change from 0 to 32768 [ 1086.274707][ T3134] netlink: 'syz.4.14605': attribute type 3 has an invalid length. [ 1086.318308][ T3081] XFS: noikeep mount option is deprecated. [ 1086.324829][ T3081] XFS: attr2 mount option is deprecated. [ 1086.428417][ T3081] XFS (loop2): Mounting V5 Filesystem [ 1086.474277][ T4334] bond0: (slave bond_slave_0): interface is now down [ 1086.474215][ T3153] bond0: option arp_validate: invalid value (18446744073491447809) [ 1086.497003][ T4334] bond0: (slave bond_slave_1): interface is now down [ 1086.512790][ T3158] netlink: 'syz.3.14612': attribute type 1 has an invalid length. [ 1086.539486][ T8946] bond0: (slave bond_slave_0): interface is now down [ 1086.586821][ T8946] bond0: (slave bond_slave_1): interface is now down [ 1086.594358][ T2402] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1086.613465][ T3081] XFS (loop2): Ending clean mount [ 1086.666433][ T8946] bond0: now running without any active interface! [ 1086.788819][ T4184] XFS (loop2): Unmounting Filesystem [ 1086.882307][ T2402] usb 2-1: Using ep0 maxpacket: 32 [ 1086.957196][ T3178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14623'. [ 1087.061672][ T3183] Invalid ELF header magic: != ELF [ 1087.068981][ T2402] usb 2-1: config 0 has too many interfaces: 195, using maximum allowed: 32 [ 1087.086713][ T2402] usb 2-1: config 0 has an invalid interface number: 196 but max is 194 [ 1087.128056][ T2402] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 195 [ 1087.167904][ T2402] usb 2-1: config 0 has no interface number 0 [ 1087.210113][ T2402] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1087.246966][ T2402] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1087.291173][ T2402] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1087.335082][ T2402] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1087.380357][ T3188] loop4: detected capacity change from 0 to 4096 [ 1087.462714][ T3188] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1087.566434][ T2402] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1087.601444][ T2402] usb 2-1: New USB device strings: Mfr=72, Product=223, SerialNumber=3 [ 1087.619705][ T2402] usb 2-1: Product: syz [ 1087.639421][ T2402] usb 2-1: Manufacturer: syz [ 1087.673104][ T2402] usb 2-1: SerialNumber: syz [ 1087.685873][ T2402] usb 2-1: config 0 descriptor?? [ 1087.727067][ T3132] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1088.039052][ T2402] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1088.055669][ T2402] ipheth: probe of 2-1:0.196 failed with error -71 [ 1088.093406][ T2402] usb 2-1: USB disconnect, device number 87 [ 1088.136759][ T3196] loop0: detected capacity change from 0 to 32768 [ 1088.176658][ T3196] XFS: noikeep mount option is deprecated. [ 1088.182654][ T3196] XFS: attr2 mount option is deprecated. [ 1088.302878][ T3196] XFS (loop0): Mounting V5 Filesystem [ 1088.302994][ T3241] tmpfs: Bad value for 'mpol' [ 1088.422541][ T3196] XFS (loop0): Ending clean mount [ 1088.430457][ T3250] loop2: detected capacity change from 0 to 64 [ 1088.493129][ T4185] XFS (loop0): Unmounting Filesystem [ 1088.605875][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.807122][ T3262] netlink: 'syz.1.14661': attribute type 5 has an invalid length. [ 1089.070284][ T3277] netlink: 'syz.3.14667': attribute type 13 has an invalid length. [ 1089.209181][ T3279] loop2: detected capacity change from 0 to 4096 [ 1089.287407][ T3279] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1089.353641][ T3279] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1089.355344][ T3291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14674'. [ 1089.361540][ T3279] ntfs3: loop2: Failed to load $Extend. [ 1089.392809][ T3291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14674'. [ 1089.877700][ T3320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14690'. [ 1089.907295][ T3320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14690'. [ 1090.028972][ T3333] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1090.039403][ T3331] QAT: failed to copy from user cfg_data. [ 1090.251940][ T3345] __nla_validate_parse: 1 callbacks suppressed [ 1090.251962][ T3345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14701'. [ 1090.729959][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1090.729979][ T26] audit: type=1400 audit(2000001506.768:53): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=3380 comm="syz.0.14719" [ 1090.899989][ T3393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1090.919453][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.949299][ T3394] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14726'. [ 1091.460297][ T3431] overlayfs: unrecognized mount option "\{\" or missing value [ 1091.527304][ T3436] xt_CONNSECMARK: invalid mode: 0 [ 1091.597363][ T3442] device batadv_slave_0 entered promiscuous mode [ 1091.615816][ T3442] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1091.804210][ T3446] xt_CT: No such helper "netbios-ns" [ 1092.122637][ T3488] loop0: detected capacity change from 0 to 8 [ 1092.159976][ T3493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14770'. [ 1092.184470][ T6713] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1092.219943][ T3495] libceph: resolve '40.' (ret=-3): failed [ 1092.471105][ T3507] loop2: detected capacity change from 0 to 4096 [ 1092.525366][ T3507] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1092.567778][ T3507] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1092.603844][ T6713] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1092.622955][ T3507] ntfs: volume version 3.1. [ 1092.625258][ T6713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.643576][ T3507] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1092.665654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.673329][ T6713] usb 2-1: config 0 descriptor?? [ 1092.676528][ T3507] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1092.692630][ T3507] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1092.714107][ T3507] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 1092.729722][ T6713] usb 2-1: selecting invalid altsetting 3 [ 1092.737408][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.740803][ T3507] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1092.743989][ T6713] comedi comedi5: could not set alternate setting 3 in high speed [ 1092.750198][ T3507] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1092.761061][ T6713] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1092.772810][ T2402] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1092.782337][ T6713] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 1092.953888][ T2397] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1092.983462][ T6713] usb 2-1: USB disconnect, device number 88 [ 1093.381808][T30088] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1093.392668][ T2397] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 1093.402408][ T2397] usb 4-1: config 0 has no interface number 0 [ 1093.409432][ T2402] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1093.418863][ T2397] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 1093.430882][ T2402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.439657][ T2397] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 1093.449364][ T2402] usb 1-1: Product: syz [ 1093.453641][ T2402] usb 1-1: Manufacturer: syz [ 1093.459217][ T2402] usb 1-1: SerialNumber: syz [ 1093.464449][ T2397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.474412][ T2402] usb 1-1: config 0 descriptor?? [ 1093.482116][ T2397] usb 4-1: config 0 descriptor?? [ 1093.522138][ T2402] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1093.533685][ T2397] usb 4-1: Found UVC 0.00 device (8086:0b5b) [ 1093.541448][ T2397] usb 4-1: No valid video chain found. [ 1093.749902][ T2397] usb 4-1: USB disconnect, device number 71 [ 1093.772642][ T3558] netlink: 'syz.1.14797': attribute type 5 has an invalid length. [ 1093.788169][T30088] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 1093.807982][T30088] usb 3-1: config 0 has no interface number 1 [ 1093.815842][T30088] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1093.826653][T30088] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1093.926973][T30088] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1093.937254][T30088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1093.945942][T30088] usb 3-1: SerialNumber: syz [ 1093.952363][T30088] usb 3-1: config 0 descriptor?? [ 1093.973880][T30087] usb 1-1: USB disconnect, device number 59 [ 1094.236988][T30088] usb 3-1: Found UVC 0.00 device (0002:0000) [ 1094.244544][T30088] usb 3-1: No valid video chain found. [ 1094.254461][T30088] usb 3-1: USB disconnect, device number 52 [ 1094.365678][ T3567] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14801'. [ 1094.597811][ T3581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14808'. [ 1095.137324][ T2402] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1095.188733][ T3620] netlink: 'syz.1.14827': attribute type 1 has an invalid length. [ 1095.415264][ T2402] usb 3-1: Using ep0 maxpacket: 8 [ 1095.514353][ T3643] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14839'. [ 1095.542268][ T3646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14840'. [ 1095.543253][ T2402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1095.560769][ T3646] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1095.586484][ T2402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.614602][ T2402] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1095.642021][ T2402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1095.690511][ T2402] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1095.701027][ T2402] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1095.735811][ T3659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14845'. [ 1095.740036][ T2402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.787789][ T2402] usb 3-1: config 0 descriptor?? [ 1095.808749][ T3599] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1095.887895][ T3667] cgroup: Invalid name [ 1096.043559][ T3674] netlink: 'syz.3.14853': attribute type 9 has an invalid length. [ 1096.325457][ T2402] usb 3-1: USB disconnect, device number 53 [ 1096.599419][T30088] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1096.995087][ T3725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14877'. [ 1097.006793][T30088] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1097.015695][T30088] usb 2-1: config 0 has no interface number 0 [ 1097.112578][T30087] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1097.197940][T30088] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1097.230098][T30088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.250966][T30088] usb 2-1: Product: syz [ 1097.292070][T30088] usb 2-1: Manufacturer: syz [ 1097.297203][T30088] usb 2-1: SerialNumber: syz [ 1097.316593][T30088] usb 2-1: config 0 descriptor?? [ 1097.411795][T30087] usb 1-1: Using ep0 maxpacket: 8 [ 1097.574426][T30087] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1097.604043][T30087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.655294][T30087] usb 1-1: config 0 descriptor?? [ 1097.673591][ T3771] netlink: 'syz.4.14899': attribute type 21 has an invalid length. [ 1097.699972][ T3771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14899'. [ 1097.730095][T30088] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 1097.751569][T30088] usb 2-1: No valid video chain found. [ 1097.777086][T30088] usb 2-1: USB disconnect, device number 89 [ 1097.989007][T30087] usb 1-1: string descriptor 0 read error: -71 [ 1097.999819][T30087] usb 1-1: Found UVC 0.00 device (2833:0201) [ 1098.028599][T30087] usb 1-1: No valid video chain found. [ 1098.051412][T30087] usb 1-1: USB disconnect, device number 60 [ 1098.114120][ T3795] loop4: detected capacity change from 0 to 1024 [ 1098.332717][ T4269] hfsplus: b-tree write err: -5, ino 4 [ 1098.392298][ T150] block nbd4: Attempted send on invalid socket [ 1098.398945][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1098.540231][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14921'. [ 1098.607498][ T3813] netlink: 'syz.3.14921': attribute type 1 has an invalid length. [ 1098.695650][ T3791] loop2: detected capacity change from 0 to 32768 [ 1098.738590][ T3823] IPv6: Can't replace route, no match found [ 1098.747936][T30087] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1098.805381][ T3791] ERROR: (device loop2): diAllocAG: numfree > numinos [ 1098.805381][ T3791] [ 1098.893949][ T3791] ialloc: diAlloc returned -5! [ 1098.995334][ T3838] netlink: 'syz.4.14933': attribute type 3 has an invalid length. [ 1099.218432][T30087] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.231935][ T3849] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1099.239976][T30087] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1099.253111][T30087] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1099.308661][T30087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.323882][T30087] usb 2-1: config 0 descriptor?? [ 1099.656998][ T3875] loop0: detected capacity change from 0 to 16 [ 1099.851320][T30087] Bluetooth: Can't get version to change to load ram patch err [ 1099.859378][T30087] Bluetooth: Loading patch file failed [ 1099.865477][T30087] ath3k: probe of 2-1:0.0 failed with error -71 [ 1099.884677][T30087] usb 2-1: USB disconnect, device number 90 [ 1100.062921][ T3875] erofs: (device loop0): mounted with root inode @ nid 36. [ 1101.008790][ T3930] overlayfs: missing 'lowerdir' [ 1101.123636][T30087] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1101.168821][ T3938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14978'. [ 1101.228048][ T3938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14978'. [ 1101.487559][ T3965] loop2: detected capacity change from 0 to 128 [ 1101.562144][T30087] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1101.572206][T30087] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.600707][ T3965] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1101.611632][T30087] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1101.634241][T30087] usb 1-1: config 1 has no interface number 1 [ 1101.658169][T30087] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1101.673945][T30087] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33022, setting to 64 [ 1101.686710][ T4334] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1101.876760][T30087] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1101.910461][T30087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.921263][T30087] usb 1-1: Product: syz [ 1101.941111][T30087] usb 1-1: Manufacturer: syz [ 1101.957379][T30087] usb 1-1: SerialNumber: syz [ 1102.383510][T30087] usb 1-1: USB disconnect, device number 61 [ 1102.608107][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.655154][ T4026] netlink: 'syz.4.15019': attribute type 1 has an invalid length. [ 1102.696889][ T4026] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.15019'. [ 1102.773598][ T4030] libceph: resolve '0' (ret=-3): failed [ 1103.087153][ T4007] loop2: detected capacity change from 0 to 32768 [ 1103.142698][ T4007] XFS: noikeep mount option is deprecated. [ 1103.164792][ T4056] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 1103.187050][ T4062] netlink: 'syz.0.15036': attribute type 1 has an invalid length. [ 1103.205931][ T4062] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15036'. [ 1103.215812][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15036'. [ 1103.262495][ T4007] XFS (loop2): Mounting V5 Filesystem [ 1103.370870][ T4072] tmpfs: Bad value for 'mpol' [ 1103.458771][ T4007] XFS (loop2): Ending clean mount [ 1103.483610][T30087] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1103.486893][ T4007] XFS (loop2): Quotacheck needed: Please wait. [ 1103.674210][ T4007] XFS (loop2): Quotacheck: Done. [ 1103.780118][ T4184] XFS (loop2): Unmounting Filesystem [ 1104.026238][ T4090] 9pnet: p9_fd_create_tcp (4090): problem connecting socket to 127.0.0.1 [ 1104.210505][T30087] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1104.219823][T30087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.262940][T30087] usb 2-1: Product: syz [ 1104.292902][T30087] usb 2-1: Manufacturer: syz [ 1104.306599][T30087] usb 2-1: SerialNumber: syz [ 1104.323270][T30087] usb 2-1: config 0 descriptor?? [ 1104.405042][T30087] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1104.756712][ T4132] kernel profiling enabled (shift: 63) [ 1104.765779][ T4135] netlink: 'syz.2.15070': attribute type 1 has an invalid length. [ 1104.790373][ T4132] profiling shift: 63 too large [ 1104.873350][T30087] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1104.880718][T30087] sq905c 2-1:0.0: Reading version command failed [ 1104.927997][T30087] sq905c: probe of 2-1:0.0 failed with error -71 [ 1104.968408][T30087] usb 2-1: USB disconnect, device number 91 [ 1105.080201][ T4158] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 1105.297355][ T4191] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1105.513833][ T4228] loop2: detected capacity change from 0 to 8 [ 1105.647792][ T4271] netlink: 'syz.1.15102': attribute type 10 has an invalid length. [ 1105.708053][ T4271] device veth0_vlan left promiscuous mode [ 1105.790498][ T4271] device veth0_vlan entered promiscuous mode [ 1105.815660][ T4271] team0: Device veth0_vlan failed to register rx_handler [ 1106.306241][ T4306] netlink: 'syz.0.15117': attribute type 10 has an invalid length. [ 1106.334671][ T4306] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1106.352070][ T4307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1106.440689][ T4315] tmpfs: Bad value for 'mpol' [ 1106.622999][ T4330] SET target dimension over the limit! [ 1106.995907][ T4354] loop2: detected capacity change from 0 to 1024 [ 1107.159470][ T4354] hfsplus: request for non-existent node 211 in B*Tree [ 1107.195561][ T4354] hfsplus: request for non-existent node 211 in B*Tree [ 1107.536730][ T26] audit: type=1400 audit(2000001522.503:54): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=4383 comm="syz.4.15156" [ 1107.599266][ T2397] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1107.869013][ T2397] usb 2-1: Using ep0 maxpacket: 8 [ 1107.997710][ T2397] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.022579][ T4409] loop2: detected capacity change from 0 to 1024 [ 1108.148587][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x000000000000000f,nodioread_nolock,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 1108.198138][ T2397] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1108.208491][ T2397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.217142][ T2397] usb 2-1: Product: syz [ 1108.222293][ T2397] usb 2-1: Manufacturer: syz [ 1108.227157][ T2397] usb 2-1: SerialNumber: syz [ 1108.233364][ T4409] ext4 filesystem being mounted at /2745/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.251776][ T2397] usb 2-1: config 0 descriptor?? [ 1108.296308][ T2397] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1108.313689][ T2397] usb 2-1: selecting invalid altsetting 1 [ 1108.581826][ T4448] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1108.749199][ T2397] usb 2-1: USB disconnect, device number 92 [ 1108.978205][T30087] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1109.373862][T30087] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1109.386823][T30087] usb 4-1: config 0 has no interface number 1 [ 1109.412306][T30087] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1109.449519][ T4487] netlink: 'syz.4.15203': attribute type 6 has an invalid length. [ 1109.459195][T30087] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1109.576900][T30087] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1109.610873][T30087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1109.641031][T30087] usb 4-1: SerialNumber: syz [ 1109.653448][T30087] usb 4-1: config 0 descriptor?? [ 1109.951359][T30087] usb 4-1: Found UVC 0.00 device (0002:0000) [ 1109.958570][T30087] usb 4-1: No valid video chain found. [ 1109.973865][T30087] usb 4-1: USB disconnect, device number 72 [ 1110.489679][ T4514] loop2: detected capacity change from 0 to 64 [ 1110.713256][ T4532] netlink: 'syz.3.15227': attribute type 10 has an invalid length. [ 1110.763531][ T4532] openvswitch: netlink: Flow key attr not present in new flow. [ 1110.834795][ T4540] sctp: [Deprecated]: syz.0.15229 (pid 4540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1110.834795][ T4540] Use struct sctp_sack_info instead [ 1111.736565][ T4611] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1111.791502][ T4619] netlink: 'syz.0.15269': attribute type 1 has an invalid length. [ 1111.811002][ T4619] netlink: 'syz.0.15269': attribute type 9 has an invalid length. [ 1111.928197][ T4624] --map-set only usable from mangle table [ 1112.016189][ T4632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15275'. [ 1112.281785][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15287'. [ 1112.305367][ T4657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15287'. [ 1113.391407][ T4743] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1113.457303][T30087] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1113.525238][ T4752] netlink: 'syz.2.15333': attribute type 1 has an invalid length. [ 1113.558025][ T4755] xt_addrtype: ipv6 does not support BROADCAST matching [ 1113.569896][ T4752] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.15333'. [ 1113.907003][T30087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.935166][T30087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.962316][T30087] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.005031][T30087] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.026463][T30087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.050839][ T4777] loop2: detected capacity change from 0 to 4096 [ 1114.077534][T30087] usb 2-1: config 0 descriptor?? [ 1114.125428][ T4777] ntfs: (device loop2): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 1114.145198][T30087] hub 2-1:0.0: USB hub found [ 1114.213525][ T4799] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1114.215540][ T4777] ntfs: volume version 3.1. [ 1114.361858][ T4805] x_tables: unsorted entry at hook 2 [ 1114.376886][T30087] hub 2-1:0.0: 14 ports detected [ 1114.399294][T30087] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1114.507856][ T4813] netlink: 'syz.2.15362': attribute type 4 has an invalid length. [ 1114.535710][ T4813] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.15362'. [ 1114.601229][T30087] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1114.608099][T30087] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1114.678170][T30087] usb 2-1: USB disconnect, device number 93 [ 1114.798141][ T4827] loop2: detected capacity change from 0 to 256 [ 1114.881861][ T4827] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1115.460807][ T4865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15388'. [ 1116.149839][ T4913] loop2: detected capacity change from 0 to 764 [ 1116.180300][ T4915] loop0: detected capacity change from 0 to 1024 [ 1116.187524][T30087] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1116.234412][ T4913] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1116.274305][ T4913] Symlink component flag not implemented [ 1116.289347][ T4915] hfsplus: request for non-existent node 211 in B*Tree [ 1116.310776][ T4915] hfsplus: request for non-existent node 211 in B*Tree [ 1116.325747][ T4913] Symlink component flag not implemented (7) [ 1116.472218][T30087] usb 4-1: Using ep0 maxpacket: 16 [ 1116.632415][T30087] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.666015][T30087] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.698207][ T4943] netlink: 'syz.4.15428': attribute type 1 has an invalid length. [ 1116.789431][ T4947] loop0: detected capacity change from 0 to 4096 [ 1116.830395][ T4947] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1116.867766][T30087] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1116.909657][T30087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.929138][T30087] usb 4-1: Product: syz [ 1116.950749][T30087] usb 4-1: Manufacturer: syz [ 1116.956722][T30087] usb 4-1: SerialNumber: syz [ 1117.338473][T30087] usb 4-1: 0:2 : does not exist [ 1117.346287][T30087] usb 4-1: unit 9 not found! [ 1117.368032][ T4974] openvswitch: netlink: Actions may not be safe on all matching packets [ 1117.394558][T30087] usb 4-1: USB disconnect, device number 73 [ 1117.426052][ T4977] netlink: 256 bytes leftover after parsing attributes in process `syz.0.15444'. [ 1117.431717][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.493553][ T4979] device netdevsim0 left promiscuous mode [ 1117.530279][ T4979] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1117.687078][ T4951] loop2: detected capacity change from 0 to 32768 [ 1117.723195][ T4993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15452'. [ 1117.744295][ T4993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15452'. [ 1118.323226][ T5034] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1118.444622][ T5041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1118.536314][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15478'. [ 1118.854925][ T5068] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1119.046987][ T5076] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1119.053778][ T5076] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1119.102021][ T5082] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1119.108775][ T5082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1119.146797][ T5076] vhci_hcd vhci_hcd.0: Device attached [ 1119.168031][ T5082] vhci_hcd vhci_hcd.0: Device attached [ 1119.200994][ T5083] vhci_hcd: connection closed [ 1119.201199][ T5077] vhci_hcd: connection closed [ 1119.206366][ T4334] vhci_hcd: stop threads [ 1119.225024][ T4334] vhci_hcd: release socket [ 1119.229618][ T4334] vhci_hcd: disconnect device [ 1119.259170][ T4334] vhci_hcd: stop threads [ 1119.280912][ T4334] vhci_hcd: release socket [ 1119.282207][ T5097] netlink: 'syz.0.15500': attribute type 1 has an invalid length. [ 1119.326185][ T4334] vhci_hcd: disconnect device [ 1119.381865][T30087] vhci_hcd: vhci_device speed not set [ 1119.469161][ T5103] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.621341][ T5113] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15508'. [ 1119.647611][ T5114] ip6t_srh: unknown srh match flags 4000 [ 1119.661315][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15508'. [ 1119.692298][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15508'. [ 1119.718490][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15508'. [ 1119.913592][ T5135] loop0: detected capacity change from 0 to 256 [ 1119.968425][ T5135] exfat: Deprecated parameter 'utf8' [ 1119.988681][ T5135] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1120.027136][ T5144] loop2: detected capacity change from 0 to 256 [ 1120.153609][ T5144] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1120.257117][ T5144] exFAT-fs (loop2): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5) [ 1120.297657][ T5144] exFAT-fs (loop2): Filesystem has been set read-only [ 1120.598839][ T5185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.609500][ T5187] netlink: 'syz.3.15540': attribute type 15 has an invalid length. [ 1120.817385][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15544'. [ 1121.043868][ T5205] ipt_CLUSTERIP: Please specify destination IP [ 1121.152066][ T5216] loop2: detected capacity change from 0 to 256 [ 1121.306357][ T5224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15570'. [ 1121.335201][ T5216] FAT-fs (loop2): Directory bread(block 64) failed [ 1121.353134][ T5216] FAT-fs (loop2): Directory bread(block 65) failed [ 1121.365720][ T5216] FAT-fs (loop2): Directory bread(block 66) failed [ 1121.375414][ T5216] FAT-fs (loop2): Directory bread(block 67) failed [ 1121.428877][ T5216] FAT-fs (loop2): Directory bread(block 68) failed [ 1121.477490][ T5216] FAT-fs (loop2): Directory bread(block 69) failed [ 1121.499585][ T5216] FAT-fs (loop2): Directory bread(block 70) failed [ 1121.536834][ T5216] FAT-fs (loop2): Directory bread(block 71) failed [ 1121.595491][ T5216] FAT-fs (loop2): Directory bread(block 72) failed [ 1121.602480][ T5216] FAT-fs (loop2): Directory bread(block 73) failed [ 1122.013529][ T5272] loop0: detected capacity change from 0 to 128 [ 1122.818221][ T26] audit: type=1400 audit(2000001536.796:55): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5339 comm="syz.4.15618" [ 1122.858182][ T5345] ubi0: attaching mtd0 [ 1122.880693][ T5346] __nla_validate_parse: 1 callbacks suppressed [ 1122.880712][ T5346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15621'. [ 1122.883138][ T5345] ubi0: scanning is finished [ 1122.915339][ T5345] ubi0: empty MTD device detected [ 1122.931042][ T5350] xt_TCPMSS: Only works on TCP SYN packets [ 1123.054051][ T5345] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1123.067538][ T5345] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1123.077405][ T5354] loop0: detected capacity change from 0 to 2048 [ 1123.085962][ T5345] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1123.094015][ T6713] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1123.123551][ T5345] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1123.136778][ T5345] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1123.158895][ T5354] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1123.175491][ T5345] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1123.183604][ T5361] loop4: detected capacity change from 0 to 256 [ 1123.190253][ T5345] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3657480414 [ 1123.206001][ T5345] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1123.219689][ T5357] ubi0: background thread "ubi_bgt0d" started, PID 5357 [ 1123.227304][ T5362] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1123.388327][ T6713] usb 2-1: Using ep0 maxpacket: 32 [ 1123.487845][ T5369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15631'. [ 1123.538366][ T6713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.580753][ T6713] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.861379][ T6713] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 1123.886931][ T6713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.948638][ T6713] usb 2-1: Product: syz [ 1123.953008][ T6713] usb 2-1: Manufacturer: syz [ 1123.997956][ T6713] usb 2-1: SerialNumber: syz [ 1124.051698][ T6713] usb 2-1: config 0 descriptor?? [ 1124.096525][ T5395] xt_l2tp: v2 doesn't support IP mode [ 1124.099611][ T6713] qmi_wwan 2-1:0.0: bogus CDC Union: master=101, slave=0 [ 1124.129721][ T6713] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 1124.163372][ T5401] netlink: 'syz.3.15647': attribute type 6 has an invalid length. [ 1124.200782][ T5401] netlink: 140 bytes leftover after parsing attributes in process `syz.3.15647'. [ 1124.314299][ T6713] usb 2-1: USB disconnect, device number 94 [ 1124.489564][ T5417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15655'. [ 1124.669809][ T5433] netlink: 'syz.4.15663': attribute type 44 has an invalid length. [ 1124.845585][ T5445] trusted_key: encrypted_key: master key parameter is missing [ 1124.929594][ T5450] netlink: 'syz.4.15672': attribute type 1 has an invalid length. [ 1125.096053][ T5464] netlink: 292 bytes leftover after parsing attributes in process `syz.0.15678'. [ 1125.259147][ T5475] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15684'. [ 1125.825851][ T5500] loop0: detected capacity change from 0 to 4096 [ 1125.835467][ T5499] loop4: detected capacity change from 0 to 4096 [ 1125.896282][ T5500] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1125.960472][ T5499] ntfs3: loop4: Failed to load $Extend. [ 1126.029192][ T5499] ntfs3: loop4: ino=5, "/" directory corrupted [ 1126.106437][ T5500] ntfs3: loop0: ntfs_sync_inode r=1e failed, -22. [ 1126.113986][ T5500] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1126.256589][ T154] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22. [ 1126.287809][ T4185] ntfs3: loop0: ntfs_evict_inode r=1e failed, -22. [ 1126.415334][ T5517] loop2: detected capacity change from 0 to 4096 [ 1126.417160][ T5525] overlayfs: missing 'lowerdir' [ 1126.439392][ T5522] loop4: detected capacity change from 0 to 2048 [ 1126.598304][ T5522] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,lazytime,norecovery,bsdgroups,grpquota,minixdf,noload,debug_want_extra_isize=0x0000000000000004,grpquota,,errors=continue. Quota mode: writeback. [ 1126.780969][ T5517] ntfs3: loop2: ino=5, "/" directory corrupted [ 1126.818589][ T5517] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1126.952861][ T5546] loop4: detected capacity change from 0 to 8 [ 1126.962068][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15718'. [ 1127.063039][T25765] udevd[25765]: incorrect cramfs checksum on /dev/loop4 [ 1127.063102][ T5546] cramfs: Error -3 while decompressing! [ 1127.109483][ T5546] cramfs: ffffffff964040a8(26)->ffff888050675000(4096) [ 1127.130810][ T5546] cramfs: Error -3 while decompressing! [ 1127.137042][ T5546] cramfs: ffffffff964040c2(26)->ffff88803524b000(4096) [ 1127.171613][ T5546] cramfs: Error -3 while decompressing! [ 1127.176730][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop4 [ 1127.184678][ T5546] cramfs: ffffffff964040dc(16)->ffff888035592000(4096) [ 1127.202936][ T5562] netlink: 'syz.3.15724': attribute type 7 has an invalid length. [ 1127.203974][ T5546] cramfs: Error -3 while decompressing! [ 1127.235477][ T5546] cramfs: ffffffff964040a8(26)->ffff888050675000(4096) [ 1127.265363][ T5562] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15724'. [ 1127.679789][ T5601] xt_hashlimit: invalid interval [ 1127.797361][ T5612] loop0: detected capacity change from 0 to 256 [ 1128.135582][ T5640] binder: 5639:5640 ioctl 40046210 0 returned -14 [ 1128.542007][ T5668] openvswitch: netlink: Message has 8 unknown bytes. [ 1128.549110][ T5668] openvswitch: netlink: Actions may not be safe on all matching packets [ 1128.681946][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15778'. [ 1128.863577][ T5682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15782'. [ 1129.183963][ T5636] loop2: detected capacity change from 0 to 32768 [ 1129.399256][ T4184] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 1129.412521][ T4184] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 1129.421305][ T4184] CPU: 0 PID: 4184 Comm: syz-executor Not tainted syzkaller #0 [ 1129.429369][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1129.440681][ T4184] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0 [ 1129.447724][ T4184] Code: ff df 80 3c 08 00 74 08 48 89 df e8 4f 36 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 27 36 ec fd bb 90 00 00 00 49 03 1e [ 1129.467900][ T4184] RSP: 0018:ffffc90002eafa80 EFLAGS: 00010202 [ 1129.474277][ T4184] RAX: 00000000000000ba RBX: ffff888051972a08 RCX: dffffc0000000000 [ 1129.482489][ T4184] RDX: 0000000000000000 RSI: ffffffff8a79f760 RDI: ffffffff8a79f720 [ 1129.490880][ T4184] RBP: 1ffff1100a32e549 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 1129.499581][ T4184] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff8881485b2110 [ 1129.507863][ T4184] R13: ffff888051972a48 R14: 00000000000005d0 R15: ffff888073d01dec [ 1129.516170][ T4184] FS: 0000555559881500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1129.525683][ T4184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1129.532561][ T4184] CR2: 00007fe213687000 CR3: 0000000064721000 CR4: 00000000003506f0 [ 1129.541107][ T4184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1129.549646][ T4184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1129.558580][ T4184] Call Trace: [ 1129.562068][ T4184] [ 1129.565243][ T4184] bio_associate_blkg+0x23a/0x340 [ 1129.570543][ T4184] lbmStartIO+0x204/0x4c0 [ 1129.575409][ T4184] lbmWrite+0x361/0x480 [ 1129.579867][ T4184] jfs_flush_journal+0x537/0xec0 [ 1129.585151][ T4184] ? lmLogShutdown+0x850/0x850 [ 1129.590189][ T4184] ? dqput+0x460/0x460 [ 1129.594785][ T4184] ? writeback_inodes_sb_nr+0x30/0x30 [ 1129.600549][ T4184] jfs_sync_fs+0x79/0xa0 [ 1129.604796][ T4184] sync_filesystem+0xe6/0x220 [ 1129.609817][ T4184] generic_shutdown_super+0x6b/0x300 [ 1129.615377][ T4184] kill_block_super+0x7c/0xe0 [ 1129.620065][ T4184] deactivate_locked_super+0x93/0xf0 [ 1129.625366][ T4184] cleanup_mnt+0x42d/0x4e0 [ 1129.629886][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 1129.636546][ T4184] task_work_run+0x125/0x1a0 [ 1129.641519][ T4184] exit_to_user_mode_loop+0x10f/0x130 [ 1129.647358][ T4184] exit_to_user_mode_prepare+0xee/0x180 [ 1129.653102][ T4184] syscall_exit_to_user_mode+0x16/0x40 [ 1129.658654][ T4184] do_syscall_64+0x58/0xa0 [ 1129.663088][ T4184] ? clear_bhb_loop+0x30/0x80 [ 1129.667859][ T4184] ? clear_bhb_loop+0x30/0x80 [ 1129.672850][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.679211][ T4184] RIP: 0033:0x7fe6d0faa117 [ 1129.683896][ T4184] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1129.704689][ T4184] RSP: 002b:00007ffd948f6648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1129.713289][ T4184] RAX: 0000000000000000 RBX: 00007fe6d101271f RCX: 00007fe6d0faa117 [ 1129.721578][ T4184] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd948f6700 [ 1129.729858][ T4184] RBP: 00007ffd948f6700 R08: 00007ffd948f7700 R09: 00000000ffffffff [ 1129.738753][ T4184] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd948f7790 [ 1129.747546][ T4184] R13: 00007fe6d101271f R14: 000000000010ac2e R15: 00007ffd948f77d0 [ 1129.755556][ T4184] [ 1129.758837][ T4184] Modules linked in: [ 1129.764099][ T4184] ---[ end trace 88f95b0366bd4cda ]--- [ 1129.769874][ T4184] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0 [ 1129.777009][ T4184] Code: ff df 80 3c 08 00 74 08 48 89 df e8 4f 36 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 27 36 ec fd bb 90 00 00 00 49 03 1e [ 1129.798232][ T4184] RSP: 0018:ffffc90002eafa80 EFLAGS: 00010202 [ 1129.805166][ T4184] RAX: 00000000000000ba RBX: ffff888051972a08 RCX: dffffc0000000000 [ 1129.813291][ T4184] RDX: 0000000000000000 RSI: ffffffff8a79f760 RDI: ffffffff8a79f720 [ 1129.821914][ T4184] RBP: 1ffff1100a32e549 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 1129.830294][ T4184] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff8881485b2110 [ 1129.838971][ T4184] R13: ffff888051972a48 R14: 00000000000005d0 R15: ffff888073d01dec [ 1129.847368][ T4184] FS: 0000555559881500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1129.856666][ T4184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1129.863878][ T4184] CR2: 00007fe213691000 CR3: 0000000064721000 CR4: 00000000003506e0 [ 1129.872745][ T4184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1129.881052][ T4184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1129.889467][ T4184] Kernel panic - not syncing: Fatal exception [ 1129.896902][ T4184] Kernel Offset: disabled [ 1129.901417][ T4184] Rebooting in 86400 seconds..