last executing test programs: 3.866332228s ago: executing program 3 (id=3706): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x20, 0xd, 0x6b, "7610457d915b0e2a38c2d94f165b09f6c10fab3bd8b21d4a9e1618ff0abc84d97b8ae3804b75e634c5575f4438cd46b734bcb91bbce5d07d1830b98c055a6840cdde1b1f865439e2784bd7a3a09efeac48a510d37efdb9d2e9578789ffa7be37925a71fa97e36215472722"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000280)={0x20, 0x0, 0xa9, {0xa7, "fb744cb694ec4511a823e4e6a2cd1c9586aff0a35d928c921b0d79ae172bd27d8fdb1e8019ceeda908fbc1999250e39296d46681ffdfa4cb545b7d6f1c0baf7cd9bc4fea27ee61e4877187fb8e1f89635130c9c1e51403ae621f00085392ebcf284a9e7aa6e470db50afaf6b99dfd134972e83d98351b518eb83bf90289eb8429659cf2761126982ae60ee551f9f1003aa5d1ca0e32e58a2a34ecb1d60c7071451e34374b07ca5"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x3}}) 3.48159061s ago: executing program 1 (id=3712): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xa0642, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x1018}, './file0\x00'}) 3.397012063s ago: executing program 1 (id=3716): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 3.253795267s ago: executing program 1 (id=3720): r0 = socket(0x22, 0x3, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 3.199326839s ago: executing program 1 (id=3722): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, 0x0) 3.097779422s ago: executing program 1 (id=3726): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x4, 0x109, 0x0, 0x0) 1.406244155s ago: executing program 2 (id=3784): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8"}, 0x60) 1.328135228s ago: executing program 2 (id=3788): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x3, 0x0, 0x0) 1.25007338s ago: executing program 2 (id=3790): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 1.140217484s ago: executing program 2 (id=3793): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x8919, 0xffffffffffffffff) 1.076074946s ago: executing program 2 (id=3796): r0 = socket(0x18, 0x0, 0x2) accept4$inet6(r0, 0x0, 0x0, 0x800) 1.004079898s ago: executing program 2 (id=3797): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@nobarrier}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@fsync_mode_strict}, {@noextent_cache}, {@compress_cache}, {@noinline_data}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 957.91185ms ago: executing program 0 (id=3799): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0) 893.130891ms ago: executing program 0 (id=3801): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) 830.102313ms ago: executing program 3 (id=3803): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 721.967717ms ago: executing program 0 (id=3805): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1c8, 0x2a8, 0x2a8, 0x1c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x7fffffe, 0x0, 0x0, 0x1]}, {0xffffffffffffffff, [], 0x0, 0x6}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x1, 0x6, 0x7, 0x5, 0x6], 0x6}, {0x0, [0x4, 0x4, 0x1, 0x0, 0x2], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 721.755397ms ago: executing program 4 (id=3806): capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000040)) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 651.308519ms ago: executing program 0 (id=3807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xda32}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 645.09691ms ago: executing program 3 (id=3808): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x96506c, &(0x7f0000000040)=ANY=[], 0xff, 0x0, 0x0) 560.345372ms ago: executing program 4 (id=3809): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) 559.947392ms ago: executing program 0 (id=3810): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x500) 450.112976ms ago: executing program 0 (id=3811): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x5, &(0x7f00000000c0)={0x0, 0x9, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) 449.912276ms ago: executing program 4 (id=3812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 449.738466ms ago: executing program 4 (id=3813): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="7ac406dd4d5dce23495b2e31c41c24d48109ff001a00ac2e19fd67f344da93b61b1f04f2cb745e00e511780a3c23f1a8777fcc771830282446a364c8abc5221549fd5fee5052b0470f070ca392a6347bff13de37a31c68d5748cf42eb65dd3461de323b5055ca314363e48a3fc3fdfe69d70e25d7b1d4dc0804ddee7f0174b4c200be9b9ead08284fd0e751b0230955efe6b0698db456282dacc51cfa6983226fa5e859dee2ecbbcec77a45f2e887449d0db6762ee5c160095dc515aec8eb7a60b51bf7acb3f3c82a2", @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESOCT], 0x1, 0x184, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x6) 320.51514ms ago: executing program 3 (id=3814): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001480), 0x109501, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000014c0)={0x7f, 0x4}) 160.209025ms ago: executing program 4 (id=3815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9e}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004000) 106.140796ms ago: executing program 3 (id=3816): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0x800, {0x52, 0xa, 0x7, {0x7, 0x7}, {0x2, 0x6c7}, @const={0xbf95, {0x2, 0x8, 0xba32, 0x2}}}, {0x55, 0x8, 0x6, {0x1, 0x8}, {0x280, 0xa}, @ramp={0x1, 0x2305, {0x8001, 0x8fc9, 0x4, 0x9}}}}) 66.487678ms ago: executing program 3 (id=3817): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/241, 0xf1}], 0x1) 5.21099ms ago: executing program 1 (id=3818): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100007e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) 0s ago: executing program 4 (id=3819): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000840)='/dev/comedi0\x00', 0x20840, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) kernel console output (not intermixed with test programs): ptor or descriptor too short [ 116.072781][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 116.102595][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 116.136710][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 116.149755][ T6820] xt_connbytes: Forcing CT accounting to be enabled [ 116.170855][ T6822] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 116.173199][ T6820] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 116.177790][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.199024][ T5307] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 116.216658][ T6820] xt_bpf: check failed: parse error [ 116.229601][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 116.238083][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 116.257580][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8669, setting to 64 [ 116.326067][ T6832] __nla_validate_parse: 26 callbacks suppressed [ 116.326080][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'. [ 116.422951][ T6218] vhci_hcd: vhci_device speed not set [ 116.432772][ T5307] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 116.469050][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.487815][ T5307] usb 1-1: Product: syz [ 116.492104][ T5307] usb 1-1: Manufacturer: syz [ 116.500360][ T5307] usb 1-1: SerialNumber: syz [ 116.515782][ T6218] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 116.519980][ T5307] usb 1-1: config 0 descriptor?? [ 116.552927][ T6786] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 116.649531][ T6850] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.1148'. [ 116.714987][ T6305] udevd[6305]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.779374][ T5307] usb 1-1: USB disconnect, device number 8 [ 116.785327][ T6823] vhci_hcd: connection reset by peer [ 116.792893][ T155] vhci_hcd: stop threads [ 116.797730][ T155] vhci_hcd: release socket [ 116.802265][ T155] vhci_hcd: disconnect device [ 116.908342][ T6864] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1155'. [ 117.058555][ T6876] loop1: detected capacity change from 0 to 64 [ 117.149881][ T6876] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 117.162508][ T6884] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1165'. [ 117.282677][ T6149] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.532622][ T6149] usb 5-1: Using ep0 maxpacket: 32 [ 117.678649][ T6149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.693317][ T6919] loop0: detected capacity change from 0 to 256 [ 117.767084][ T6919] FAT-fs (loop0): Directory bread(block 64) failed [ 117.767122][ T6919] FAT-fs (loop0): Directory bread(block 65) failed [ 117.767193][ T6919] FAT-fs (loop0): Directory bread(block 66) failed [ 117.767223][ T6919] FAT-fs (loop0): Directory bread(block 67) failed [ 117.767286][ T6919] FAT-fs (loop0): Directory bread(block 68) failed [ 117.767315][ T6919] FAT-fs (loop0): Directory bread(block 69) failed [ 117.767379][ T6919] FAT-fs (loop0): Directory bread(block 70) failed [ 117.767408][ T6919] FAT-fs (loop0): Directory bread(block 71) failed [ 117.767472][ T6919] FAT-fs (loop0): Directory bread(block 72) failed [ 117.767501][ T6919] FAT-fs (loop0): Directory bread(block 73) failed [ 117.865776][ T6924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.910448][ T6149] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 117.910477][ T6149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.910496][ T6149] usb 5-1: Product: syz [ 117.910510][ T6149] usb 5-1: Manufacturer: syz [ 117.910525][ T6149] usb 5-1: SerialNumber: syz [ 117.915326][ T6149] usb 5-1: config 0 descriptor?? [ 118.003689][ T6149] usb 5-1: bad CDC descriptors [ 118.004008][ T6149] usb 5-1: unsupported MDLM descriptors [ 118.087409][ T6926] loop3: detected capacity change from 0 to 512 [ 118.135654][ T5976] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.184709][ T6926] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 118.205614][ T6936] loop0: detected capacity change from 0 to 512 [ 118.209146][ T6149] usb 5-1: USB disconnect, device number 7 [ 118.225886][ T6926] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.275712][ T6936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 118.292827][ T6936] System zones: 1-12 [ 118.298126][ T6936] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1190: Directory hole found for htree index block 0 [ 118.321330][ T6936] EXT4-fs (loop0): Remounting filesystem read-only [ 118.347614][ T6939] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1192'. [ 118.363431][ T6936] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 118.399132][ T6936] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1190: Directory hole found for htree index block 0 [ 118.403371][ T5976] usb 2-1: Using ep0 maxpacket: 32 [ 118.420279][ T6936] EXT4-fs (loop0): Remounting filesystem read-only [ 118.427681][ T6936] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 118.435966][ T6936] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 118.541095][ T6936] EXT4-fs (loop0): re-mounted. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 118.582700][ T5976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.603248][ T5976] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.622481][ T5976] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 118.635308][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.650666][ T5976] usb 2-1: config 0 descriptor?? [ 118.708938][ T5976] rndis_wlan 2-1:0.0: skipping garbage [ 118.714543][ T5976] usb 2-1: bad CDC descriptors [ 118.747435][ T5976] rndis_host 2-1:0.0: skipping garbage [ 118.756270][ T5976] usb 2-1: bad CDC descriptors [ 118.761445][ T5976] cdc_acm 2-1:0.0: skipping garbage [ 118.840819][ T6954] loop3: detected capacity change from 0 to 256 [ 118.899026][ T5976] usb 2-1: USB disconnect, device number 4 [ 118.926090][ T6954] FAT-fs (loop3): Directory bread(block 64) failed [ 118.946223][ T6954] FAT-fs (loop3): Directory bread(block 65) failed [ 118.957983][ T6954] FAT-fs (loop3): Directory bread(block 66) failed [ 118.964779][ T6954] FAT-fs (loop3): Directory bread(block 67) failed [ 118.971446][ T6954] FAT-fs (loop3): Directory bread(block 68) failed [ 118.987207][ T6952] loop4: detected capacity change from 0 to 4096 [ 118.993923][ T6954] FAT-fs (loop3): Directory bread(block 69) failed [ 119.001049][ T6954] FAT-fs (loop3): Directory bread(block 70) failed [ 119.008013][ T6954] FAT-fs (loop3): Directory bread(block 71) failed [ 119.025945][ T6954] FAT-fs (loop3): Directory bread(block 72) failed [ 119.041049][ T6954] FAT-fs (loop3): Directory bread(block 73) failed [ 119.061914][ T6958] loop0: detected capacity change from 0 to 136 [ 119.080274][ T6952] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.110063][ T6952] NILFS (loop4): mounting unchecked fs [ 119.120187][ T6952] NILFS (loop4): recovery required for readonly filesystem [ 119.183938][ T6952] NILFS (loop4): write access will be enabled during recovery [ 119.218956][ T4689] udevd[4689]: incorrect nilfs2 checksum on /dev/loop4 [ 119.249919][ T6952] NILFS (loop4): recovery complete [ 119.364557][ T4689] udevd[4689]: incorrect nilfs2 checksum on /dev/loop4 [ 119.625913][ T6967] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 119.900937][ T6989] loop1: detected capacity change from 0 to 1024 [ 119.944300][ T6989] EXT4-fs (loop1): Ignoring removed orlov option [ 120.064570][ T6989] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 120.116372][ T6978] loop3: detected capacity change from 0 to 32768 [ 120.152487][ T6978] [ 120.152487][ T6978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.152487][ T6978] [ 120.168066][ T7005] No such timeout policy "syz0" [ 120.223752][ T6978] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 120.223752][ T6978] [ 120.262161][ T6978] xtLookup: xtSearch returned -5 [ 120.297754][ T6978] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 120.297754][ T6978] [ 120.411099][ T7019] capability: warning: `syz.2.1228' uses 32-bit capabilities (legacy support in use) [ 120.452997][ T1280] [ 120.452997][ T1280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.452997][ T1280] [ 120.491941][ T1280] [ 120.491941][ T1280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.491941][ T1280] [ 120.542646][ T276] [ 120.542646][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.542646][ T276] [ 120.594161][ T4199] [ 120.594161][ T4199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.594161][ T4199] [ 120.614276][ T7028] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1233'. [ 120.630425][ T4199] [ 120.630425][ T4199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.630425][ T4199] [ 120.651517][ T7028] openvswitch: netlink: Key type 541 is out of range max 29 [ 120.747509][ T7037] loop4: detected capacity change from 0 to 64 [ 120.840715][ T7037] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 121.002592][ T6148] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.053693][ T7045] SET target dimension over the limit! [ 121.162724][ T7056] loop3: detected capacity change from 0 to 16 [ 121.222633][ T7058] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1248'. [ 121.240382][ T7056] erofs: (device loop3): mounted with root inode @ nid 36. [ 121.364910][ T7058] syz.4.1248 (7058) used greatest stack depth: 18512 bytes left [ 121.584313][ T6148] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 121.606466][ T6148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.641772][ T6148] usb 1-1: Product: syz [ 121.652450][ T6148] usb 1-1: Manufacturer: syz [ 121.657109][ T6148] usb 1-1: SerialNumber: syz [ 121.672704][ T6218] vhci_hcd: vhci_device speed not set [ 121.696406][ T6148] usb 1-1: config 0 descriptor?? [ 121.736485][ T6148] ch341 1-1:0.0: ch341-uart converter detected [ 121.760320][ T7083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1261'. [ 121.821836][ T7084] loop4: detected capacity change from 0 to 4096 [ 121.868136][ T7086] loop1: detected capacity change from 0 to 2048 [ 121.876866][ T7084] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.014682][ T7086] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 122.072202][ T7086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.115797][ T7086] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (24) does not match entry length (28) [ 122.158527][ T7080] loop3: detected capacity change from 0 to 32768 [ 122.166332][ T6148] usb 1-1: failed to send control message: -71 [ 122.198045][ T6148] ch341-uart: probe of ttyUSB0 failed with error -71 [ 122.212634][ T6148] usb 1-1: USB disconnect, device number 9 [ 122.234734][ T6148] ch341 1-1:0.0: device disconnected [ 122.360403][ T7080] XFS (loop3): Mounting V5 Filesystem [ 122.477644][ T7080] XFS (loop3): Ending clean mount [ 122.484834][ T7114] loop1: detected capacity change from 0 to 4096 [ 122.493542][ T7114] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 122.506401][ T7115] netlink: 'syz.4.1272': attribute type 27 has an invalid length. [ 122.535649][ T7114] ntfs: volume version 3.1. [ 122.723878][ T4199] XFS (loop3): Unmounting Filesystem [ 123.015448][ T7139] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1285'. [ 123.015508][ T7139] openvswitch: netlink: Flow key attribute not present in set flow. [ 123.300295][ T7148] loop4: detected capacity change from 0 to 4096 [ 123.538498][ T7159] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 123.576527][ T7160] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.655494][ T7159] team0: Port device wlan1 added [ 124.026847][ T7149] loop0: detected capacity change from 0 to 32768 [ 124.157405][ T7149] XFS (loop0): Mounting V5 Filesystem [ 124.350841][ T7149] XFS (loop0): Ending clean mount [ 124.363749][ T7191] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 124.406264][ T7191] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.444880][ T4194] XFS (loop0): Unmounting Filesystem [ 124.572138][ T7208] ntfs: volume version 3.1. [ 124.687497][ T7208] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 124.802547][ T7208] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 124.852665][ T5977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.894723][ T7208] overlayfs: workdir and upperdir must be separate subtrees [ 125.092773][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 125.212635][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.243315][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.243341][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 125.243361][ T5977] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 125.267558][ T7242] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1329'. [ 125.403141][ T5977] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 125.442977][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 125.469843][ T5977] usb 5-1: Product: syz [ 125.469861][ T5977] usb 5-1: Manufacturer: syz [ 125.469876][ T5977] usb 5-1: SerialNumber: syz [ 125.475187][ T5977] usb 5-1: config 0 descriptor?? [ 125.516658][ T5977] usb 5-1: no audio or video endpoints found [ 125.527755][ T7248] set_capacity_and_notify: 2 callbacks suppressed [ 125.527768][ T7248] loop3: detected capacity change from 0 to 4096 [ 125.600749][ T7248] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.719307][ T6218] usb 5-1: USB disconnect, device number 8 [ 125.735072][ T7244] loop1: detected capacity change from 0 to 32768 [ 125.750803][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 125.793906][ T7244] [ 125.793906][ T7244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.793906][ T7244] [ 125.832190][ T7244] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 125.832190][ T7244] [ 125.849089][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'. [ 125.876976][ T7244] xtLookup: xtSearch returned -5 [ 125.899169][ T7244] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 125.899169][ T7244] [ 125.930761][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1336'. [ 126.007422][ T9] [ 126.007422][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.007422][ T9] [ 126.037475][ T9] [ 126.037475][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.037475][ T9] [ 126.096108][ T276] [ 126.096108][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.096108][ T276] [ 126.122547][ T4189] [ 126.122547][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.122547][ T4189] [ 126.143893][ T4189] [ 126.143893][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.143893][ T4189] [ 126.725746][ T7297] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1355'. [ 126.862546][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 126.998467][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'. [ 127.043235][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 127.045800][ T7315] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 127.089878][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 127.419352][ T7333] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.569172][ T7344] netlink: 'syz.4.1379': attribute type 8 has an invalid length. [ 128.261152][ T7382] loop4: detected capacity change from 0 to 2048 [ 128.428112][ T7382] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.487938][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop4 [ 128.551914][ T7351] loop0: detected capacity change from 0 to 32768 [ 128.568603][ T7397] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.677694][ T7351] XFS (loop0): Mounting V5 Filesystem [ 128.863611][ T7351] XFS (loop0): Ending clean mount [ 128.953318][ T4194] XFS (loop0): Unmounting Filesystem [ 129.518600][ T7451] loop3: detected capacity change from 0 to 4096 [ 129.548042][ T7461] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 129.594647][ T7461] CIFS mount error: No usable UNC path provided in device string! [ 129.594647][ T7461] [ 129.607529][ T7451] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 129.649239][ T7451] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 129.660028][ T7461] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.696490][ T7451] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 129.716428][ T7471] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1430'. [ 129.836219][ T7476] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1433'. [ 129.889647][ T7480] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1434'. [ 130.219194][ T7506] overlayfs: missing 'lowerdir' [ 130.261909][ T7502] loop1: detected capacity change from 0 to 4096 [ 130.352066][ T7502] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 130.399470][ T7502] ntfs3: loop1: Failed to load $Extend. [ 130.412619][ T6218] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.421543][ T7517] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 130.467731][ T7517] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1451'. [ 130.483519][ T7517] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1451'. [ 130.722539][ T6218] usb 1-1: Using ep0 maxpacket: 32 [ 130.792654][ T6149] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 130.852765][ T6218] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 130.861105][ T6218] usb 1-1: config 0 has no interface number 0 [ 130.867673][ T6218] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 130.895590][ T6218] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 131.035724][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 131.072759][ T6218] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 131.081859][ T6218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.098293][ T6218] usb 1-1: Product: syz [ 131.104332][ T6218] usb 1-1: Manufacturer: syz [ 131.109046][ T6218] usb 1-1: SerialNumber: syz [ 131.114667][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.124909][ T6218] usb 1-1: config 0 descriptor?? [ 131.171959][ T7557] loop1: detected capacity change from 0 to 16 [ 131.226207][ T7557] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.242780][ T6149] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.255550][ T7557] attempt to access beyond end of device [ 131.255550][ T7557] loop1: rw=524288, want=56, limit=16 [ 131.273643][ T7557] attempt to access beyond end of device [ 131.273643][ T7557] loop1: rw=524288, want=1960, limit=16 [ 131.289894][ T7557] attempt to access beyond end of device [ 131.289894][ T7557] loop1: rw=0, want=48, limit=16 [ 131.293445][ T6149] usb 3-1: not running at top speed; connect to a high speed hub [ 131.403548][ T6149] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 131.482570][ T6148] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 131.622687][ T6218] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 131.631706][ T6218] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 131.672644][ T6149] usb 3-1: string descriptor 0 read error: -22 [ 131.683231][ T6149] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 131.692643][ T6218] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 131.700193][ T6149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.748908][ T6218] usb 1-1: USB disconnect, device number 10 [ 131.862604][ T6148] usb 5-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.962796][ T6149] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 131.969783][ T6148] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 131.983547][ T6148] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 131.991732][ T6148] usb 5-1: Product: syz [ 132.032911][ T7561] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 132.054858][ T6148] usbhid 5-1:15.0: fixing wrong optional hid class descriptors count [ 132.066110][ T6148] usbhid 5-1:15.0: can't add hid device: -22 [ 132.072668][ T6148] usbhid: probe of 5-1:15.0 failed with error -22 [ 132.145915][ T7575] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 132.195565][ T6149] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.208392][ T7579] netlink: 'syz.0.1481': attribute type 5 has an invalid length. [ 132.227876][ T7579] device ip6erspan0 entered promiscuous mode [ 132.243804][ T6149] usb 3-1: USB disconnect, device number 9 [ 132.276860][ T6148] usb 5-1: USB disconnect, device number 9 [ 132.285826][ T7581] binder: 7580:7581 ioctl 400c620e 200000000340 returned -22 [ 132.376141][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.382481][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.587806][ T7599] netlink: 'syz.0.1491': attribute type 2 has an invalid length. [ 132.703442][ T7607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1495'. [ 132.827903][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1498'. [ 133.319385][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'. [ 133.472150][ T7668] 9pnet: Insufficient options for proto=fd [ 133.633493][ T7678] comedi comedi1: Minor 256 is invalid! [ 133.803624][ T7693] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 133.820269][ T7688] loop0: detected capacity change from 0 to 4096 [ 133.830296][ T7694] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1539'. [ 133.852567][ T7693] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 133.865169][ T7693] overlayfs: missing 'lowerdir' [ 133.918664][ T7688] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 133.964200][ T7688] ntfs3: loop0: Failed to load $Extend. [ 134.048212][ T7708] fuse: Bad value for 'fd' [ 134.222727][ T23] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 134.560739][ T7736] loop3: detected capacity change from 0 to 256 [ 134.582634][ T23] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 134.622820][ T23] usb 5-1: config 2 interface 0 has no altsetting 0 [ 134.641811][ T7736] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 134.671829][ T7738] loop0: detected capacity change from 0 to 8 [ 134.855620][ T23] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 134.883177][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.922515][ T23] usb 5-1: Product: syz [ 134.926707][ T23] usb 5-1: Manufacturer: syz [ 134.947978][ T23] usb 5-1: SerialNumber: syz [ 135.027725][ T23] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 135.057021][ T23] usb 5-1: selecting invalid altsetting 0 [ 135.077998][ T23] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 135.095773][ T7714] loop1: detected capacity change from 0 to 32768 [ 135.171458][ T7714] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1549 (7714) [ 135.200764][ T7714] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 135.219907][ T7714] BTRFS info (device loop1): using free space tree [ 135.232656][ T23] usb 5-1: USB disconnect, device number 10 [ 135.263231][ T7714] BTRFS info (device loop1): has skinny extents [ 135.545174][ T7714] BTRFS info (device loop1): enabling ssd optimizations [ 135.618729][ T7744] loop3: detected capacity change from 0 to 40427 [ 135.639732][ T7744] F2FS-fs (loop3): inline encryption not supported [ 135.657771][ T7744] F2FS-fs (loop3): invalid crc value [ 135.679155][ T7744] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.980411][ T7744] F2FS-fs (loop3): Start checkpoint disabled! [ 136.028069][ T7744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 136.475574][ T155] attempt to access beyond end of device [ 136.475574][ T155] loop3: rw=2049, want=40992, limit=40427 [ 136.745231][ T7805] overlayfs: missing 'lowerdir' [ 136.845629][ T7771] loop4: detected capacity change from 0 to 40427 [ 136.936727][ T7771] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 136.952447][ T7771] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 136.956401][ T7815] netlink: 'syz.0.1589': attribute type 3 has an invalid length. [ 136.984174][ T7771] F2FS-fs (loop4): invalid crc value [ 137.027596][ T7771] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 137.047745][ T7820] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1590'. [ 137.084154][ T7822] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1574'. [ 137.112976][ T7815] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1589'. [ 137.246449][ T7771] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 137.291835][ T7771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.333003][ T7832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.406767][ T26] audit: type=1800 audit(1781048302.788:6): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1566" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 137.559757][ T4201] attempt to access beyond end of device [ 137.559757][ T4201] loop4: rw=2049, want=45104, limit=40427 [ 137.659487][ T7847] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1603'. [ 138.057133][ T7809] loop1: detected capacity change from 0 to 40427 [ 138.160020][ T7809] F2FS-fs (loop1): inline encryption not supported [ 138.189637][ T7872] netlink: 'syz.3.1614': attribute type 3 has an invalid length. [ 138.212464][ T7809] F2FS-fs (loop1): invalid crc value [ 138.218611][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1614'. [ 138.242642][ T7809] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.377287][ T7881] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1617'. [ 138.425324][ T7881] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1617'. [ 138.462698][ T7809] F2FS-fs (loop1): Start checkpoint disabled! [ 138.499097][ T7809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 138.579037][ T7888] netlink: 'syz.3.1621': attribute type 16 has an invalid length. [ 138.611361][ T7888] netlink: 'syz.3.1621': attribute type 17 has an invalid length. [ 138.700732][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.744720][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.790939][ T155] attempt to access beyond end of device [ 138.790939][ T155] loop1: rw=2049, want=40992, limit=40427 [ 138.848155][ T7900] binder: 7899:7900 ioctl c018620c 2000000025c0 returned -22 [ 138.897947][ T7896] loop4: detected capacity change from 0 to 4096 [ 139.094279][ T7896] ntfs: volume version 3.1. [ 139.142219][ T7896] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 139.198011][ T7896] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 139.245028][ T7896] overlayfs: workdir and upperdir must be separate subtrees [ 139.417335][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.424572][ T7925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.431989][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.439125][ T7925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.498835][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.511042][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.529966][ T7925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.818122][ T7946] loop4: detected capacity change from 0 to 8 [ 139.846674][ T7948] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1650'. [ 139.873136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.975675][ T7954] loop1: detected capacity change from 0 to 512 [ 140.077637][ T7954] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1653: bad orphan inode 11862016 [ 140.111342][ T7954] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.161897][ T7954] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.583757][ T5971] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.842628][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 140.962755][ T5971] usb 5-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 140.983783][ T5971] usb 5-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 141.021063][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 141.092510][ T5306] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.152691][ T5971] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 141.168567][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.177231][ T5307] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 141.187333][ T5971] usb 5-1: Product: syz [ 141.191514][ T5971] usb 5-1: Manufacturer: syz [ 141.222783][ T5971] usb 5-1: SerialNumber: syz [ 141.542588][ T5307] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.551845][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.575518][ T5307] usb 1-1: config 0 descriptor?? [ 141.602848][ T5971] usb 5-1: unit 2 not found! [ 141.616400][ T5307] cp210x 1-1:0.0: cp210x converter detected [ 141.651119][ T5971] usb 5-1: USB disconnect, device number 11 [ 141.722608][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.821354][ T8046] loop1: detected capacity change from 0 to 4096 [ 141.838799][ T5307] usb 1-1: cp210x converter now attached to ttyUSB0 [ 141.840679][ T8046] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 141.884277][ T6307] udevd[6307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.972736][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 142.045277][ T5307] usb 1-1: USB disconnect, device number 11 [ 142.069851][ T5307] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.087864][ T8054] netlink: 'syz.4.1701': attribute type 16 has an invalid length. [ 142.102776][ T5307] cp210x 1-1:0.0: device disconnected [ 142.118487][ T8054] netlink: 'syz.4.1701': attribute type 17 has an invalid length. [ 142.159176][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 142.191951][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.196033][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 142.212034][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.412608][ T23] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 142.421920][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.431467][ T23] usb 3-1: Product: syz [ 142.436164][ T23] usb 3-1: Manufacturer: syz [ 142.440846][ T23] usb 3-1: SerialNumber: syz [ 142.448767][ T23] usb 3-1: config 0 descriptor?? [ 142.493249][ T8034] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 142.508310][ T8070] loop1: detected capacity change from 0 to 4096 [ 142.572676][ T8070] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 142.618566][ T8072] netlink: 'syz.0.1710': attribute type 3 has an invalid length. [ 142.752826][ T23] usbtouchscreen: probe of 3-1:0.0 failed with error -71 [ 142.762360][ T23] usb 3-1: USB disconnect, device number 10 [ 142.798059][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.817143][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.060241][ T8082] netlink: 'syz.0.1715': attribute type 21 has an invalid length. [ 143.068447][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 143.133425][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1717'. [ 143.172506][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1717'. [ 143.510483][ T8110] netlink: 'syz.1.1728': attribute type 16 has an invalid length. [ 143.550888][ T8110] netlink: 'syz.1.1728': attribute type 17 has an invalid length. [ 143.647675][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 143.799616][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 143.819944][ T8120] netlink: 'syz.2.1734': attribute type 13 has an invalid length. [ 143.838507][ T8120] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1734'. [ 143.889957][ T8120] syz_tun: refused to change device tx_queue_len [ 143.909355][ T8120] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 144.135326][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 144.240368][ T8138] netlink: 'syz.0.1743': attribute type 10 has an invalid length. [ 144.372718][ T5971] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.392849][ T8138] team0: Device wg1 is of different type [ 144.561073][ T8112] loop3: detected capacity change from 0 to 40427 [ 144.629926][ T8112] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 144.645736][ T8112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 144.673137][ T8112] F2FS-fs (loop3): invalid crc value [ 144.724995][ T8112] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 144.899146][ T8112] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 144.922672][ T8112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.012737][ T8186] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 145.060746][ T26] audit: type=1800 audit(1781048310.438:7): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1730" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 145.138629][ T4199] attempt to access beyond end of device [ 145.138629][ T4199] loop3: rw=2049, want=45104, limit=40427 [ 145.242135][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 145.338859][ T8210] netlink: 'syz.0.1777': attribute type 2 has an invalid length. [ 145.398063][ T8210] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 146.260597][ T8222] loop1: detected capacity change from 0 to 32768 [ 146.280289][ T8221] loop0: detected capacity change from 0 to 40427 [ 146.292586][ T5307] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 146.346424][ T8221] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 146.352933][ T8221] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 146.389222][ T8221] F2FS-fs (loop0): invalid crc value [ 146.412979][ T6217] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 146.426849][ T8222] (syz.1.1782,8222,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.444746][ T8221] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 146.475903][ T8222] (syz.1.1782,8222,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.567130][ T8222] JBD2: Ignoring recovery information on journal [ 146.646945][ T8221] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 146.654418][ T5307] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 146.672617][ T6217] usb 3-1: Using ep0 maxpacket: 16 [ 146.675443][ T8221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.691066][ T5307] usb 5-1: config 0 has no interface number 0 [ 146.713055][ T8222] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 146.728116][ T5307] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.778347][ T5307] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.806191][ T26] audit: type=1800 audit(1781048312.188:8): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1783" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 146.826270][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.879375][ T4194] attempt to access beyond end of device [ 146.879375][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 146.891052][ T6217] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.964147][ T8271] kAFS: unparsable volume name [ 146.985095][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 146.998444][ T6217] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 147.003610][ T5307] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 147.012311][ T6217] usb 3-1: config 4 has no interface number 0 [ 147.024323][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.032784][ T5307] usb 5-1: Product: syz [ 147.036990][ T5307] usb 5-1: Manufacturer: syz [ 147.041600][ T5307] usb 5-1: SerialNumber: syz [ 147.048822][ T5307] usb 5-1: config 0 descriptor?? [ 147.056212][ T6217] usb 3-1: config 4 interface 127 has no altsetting 0 [ 147.087680][ T8273] loop3: detected capacity change from 0 to 128 [ 147.095396][ T5307] yurex 5-1:0.50: Could not submitting URB [ 147.101316][ T5307] yurex: probe of 5-1:0.50 failed with error -5 [ 147.118347][ T6217] usb 3-1: language id specifier not provided by device, defaulting to English [ 147.158384][ T8273] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 147.228845][ T8273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.303160][ T5306] usb 5-1: USB disconnect, device number 12 [ 147.506563][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.519568][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.532801][ T6217] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 147.544083][ T6217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.552164][ T6217] usb 3-1: Product: syz [ 147.557210][ T6217] usb 3-1: SerialNumber: syz [ 147.568273][ T8285] device vlan0 left promiscuous mode [ 147.583689][ T8285] device ip6erspan0 left promiscuous mode [ 147.590171][ T8287] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 147.601934][ T8287] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 147.948168][ T6217] usb 3-1: USB disconnect, device number 11 [ 148.073087][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.287820][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.426526][ T8342] device netdevsim0 entered promiscuous mode [ 148.492920][ T8342] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 148.547856][ T8349] [U] fƒú°Gó®Ém§ÚžñrGf׊7 ¨e‘M–ICê/ŠnzUTˆ7MÍ‚Sv +éÎø”`w´¬ó%k,kAòçqí“ŽáÂØŒÐÈ´²-éG«ì?Ý–aÌ¥N7¤]¯×TA,gm¸.´*j6—_¥¿FãÖÕxæ„ýX(Î_Wÿg¡§÷íØîÌ_Ý%ZÏ u¦–ã2 [ 148.588014][ T8349] [U] d¨Û¬y³ˆ{H¨ÿ_jAj:ƒHM˜…ÎFÖ;A“MŸÿ [ 148.595144][ T8349] [U] ÛˆrŸ,¦ö÷ ->»¨§ðÙCb’z_RdâþÂ"d‡QíÎÄUÒ&„KÞFÀÔXÅÙ]¼ ™AïbË.ÜR²ç£ê›Çî°ÿ{œ2H”á‚×PBÈá `•`V 3YÅœy [ 148.607428][ T8349] [U] ‡&'Dp¡£÷\R¼eË®úNtæÐÁãœE#›qŠru…–ÂÍsÈm|:j~­£ús}èæjCú2d+r>+ÍDûýí# [ 148.617075][ T8349] [U] ùð@v¢u¼Òƒø9{¿oî+bÈñý¿Qà±›9ô×|ºú"oaÊH£ªžÆ€†LŠº—"ô ë{€S„’Ú”«ñ”jF‘KMm²Ã(qoög×ï¢G|·§H@ä-¦ÉN!’×f«tFô5@àüV?ûG„™2S£hÀí`:JZ£µ³r¬ßgyRå¼N×ÉBCu”R;Ä’›'è¸ò{´Ce”>=¦Y Tüñ”Ä´Kªq0âJ¯”gÉëLÆoÞÁÖ×Sr|u”sÉ=†9G±Wg ç;ÉCåbZ_l¾› [ 148.640870][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.656388][ T8349] [U] ߉§ÂcU|²CþÍthñ\7“h^|†ûèWÆ™d;rÜš+JuB‡hRôRË“$Ì[H!z~ð“Š›åp{$mˇ#AWýд´[U [ 148.683429][ T8349] [U] Óàãˬ‘Üšì'$ÝþU8®üü0ïlÏF ŽUùºßêD{i6:’ž@¸pnuSŒFrÿREtíC2µ~ïÍ"Ç_? 4.±„nyk ÛµÞ^APªA¶m:_ì1&í‘’'Îü©FCî:L8_ýD\ò3 [ 148.703513][ T8354] netdevsim netdevsim2: Direct firmware load for ÿÿ failed with error -2 [ 148.727149][ T8349] [U] :œhê(÷F®E^À|‚©¤F,¨Ðë|c.ñÏ;«¸*„[Ûx W¨û)[ýÍ—™P~b[zGÓ†N]eõVÁnŽ‹E] ÿþ [ 148.734593][ T8354] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿÿ [ 148.772617][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.885030][ T8365] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 148.984415][ T5307] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.232748][ T5307] usb 2-1: Using ep0 maxpacket: 32 [ 149.338153][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.338416][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.352763][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 149.352794][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 149.435509][ T8401] openvswitch: netlink: Actions may not be safe on all matching packets [ 149.524793][ T5307] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 149.527928][ T8407] loop0: detected capacity change from 0 to 256 [ 149.557931][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.579627][ T5307] usb 2-1: Product: syz [ 149.605391][ T5307] usb 2-1: Manufacturer: syz [ 149.614476][ T8407] FAT-fs (loop0): Directory bread(block 64) failed [ 149.621113][ T8407] FAT-fs (loop0): Directory bread(block 65) failed [ 149.627645][ T5307] usb 2-1: SerialNumber: syz [ 149.633552][ T5307] usb 2-1: config 0 descriptor?? [ 149.662749][ T8356] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.670274][ T8407] FAT-fs (loop0): Directory bread(block 66) failed [ 149.677088][ T8407] FAT-fs (loop0): Directory bread(block 67) failed [ 149.693340][ T8407] FAT-fs (loop0): Directory bread(block 68) failed [ 149.700000][ T8407] FAT-fs (loop0): Directory bread(block 69) failed [ 149.721210][ T8413] kernel profiling enabled (shift: 5) [ 149.726863][ T8407] FAT-fs (loop0): Directory bread(block 70) failed [ 149.742998][ T8407] FAT-fs (loop0): Directory bread(block 71) failed [ 149.766011][ T8407] FAT-fs (loop0): Directory bread(block 72) failed [ 149.776782][ T8407] FAT-fs (loop0): Directory bread(block 73) failed [ 149.824069][ T5306] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.923946][ T5307] usbtouchscreen: probe of 2-1:0.0 failed with error -71 [ 149.967306][ T5307] usb 2-1: USB disconnect, device number 5 [ 150.186819][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.196014][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.402566][ T5971] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 150.412611][ T5306] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.652727][ T5306] usb 5-1: Using ep0 maxpacket: 16 [ 150.762599][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.773172][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.792709][ T5306] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 150.932685][ T5971] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 150.941873][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.950211][ T5971] usb 1-1: Product: syz [ 150.954646][ T5306] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 150.963745][ T5971] usb 1-1: Manufacturer: syz [ 150.968357][ T5971] usb 1-1: SerialNumber: syz [ 150.973226][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.981226][ T5306] usb 5-1: Product: syz [ 150.986363][ T5306] usb 5-1: Manufacturer: syz [ 150.992874][ T5306] usb 5-1: SerialNumber: syz [ 150.999536][ T5306] r8152-cfgselector 5-1: config 0 descriptor?? [ 151.352678][ T5971] usb 1-1: 0:1 : does not exist [ 151.357709][ T5971] usb 1-1: 0:2 : does not exist [ 151.362885][ T5971] usb 1-1: unit 66 not found! [ 151.378326][ T5971] usb 1-1: USB disconnect, device number 12 [ 151.482646][ T5306] r8152-cfgselector 5-1: Unknown version 0x0000 [ 151.489078][ T5306] r8152-cfgselector 5-1: bad CDC descriptors [ 151.512567][ T5306] r8152-cfgselector 5-1: Unknown version 0x0000 [ 151.531810][ T5306] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 151.593572][ T4689] udevd[4689]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.067557][ T8458] device netdevsim0 left promiscuous mode [ 152.080334][ T8458] device bridge1 left promiscuous mode [ 152.099214][ T8470] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1899'. [ 152.181824][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 152.207933][ T8475] loop0: detected capacity change from 0 to 2048 [ 152.225286][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 152.276734][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 152.299663][ T8479] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.785131][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 152.798998][ T8518] netlink: 'syz.0.1921': attribute type 19 has an invalid length. [ 153.088628][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 153.172533][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.563003][ T8574] loop3: detected capacity change from 0 to 256 [ 153.621344][ T8579] device geneve3 entered promiscuous mode [ 154.053730][ T8614] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 154.392859][ T8631] device geneve3 left promiscuous mode [ 154.494967][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 154.560303][ T8628] loop4: detected capacity change from 0 to 4096 [ 154.667833][ T8641] netlink: 'syz.1.1982': attribute type 21 has an invalid length. [ 154.757109][ T8628] ntfs: volume version 3.1. [ 154.879328][ T8604] loop3: detected capacity change from 0 to 32768 [ 154.954748][ T8656] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1991'. [ 155.108335][ T8604] XFS (loop3): Mounting V5 Filesystem [ 155.211744][ T8679] loop4: detected capacity change from 0 to 512 [ 155.225591][ T8604] XFS (loop3): Ending clean mount [ 155.309523][ T8679] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.363516][ T8679] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 155.420114][ T4199] XFS (loop3): Unmounting Filesystem [ 155.497062][ T8679] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 155.528827][ T8679] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 155.586721][ T8679] System zones: 0-2, 18-18, 34-34 [ 155.671160][ T8679] EXT4-fs (loop4): 1 truncate cleaned up [ 155.732542][ T8679] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.980154][ T8716] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 156.123402][ T8724] netlink: 'syz.0.2020': attribute type 17 has an invalid length. [ 156.162596][ T8724] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2020'. [ 156.185327][ T8724] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 156.353346][ T8744] netlink: 'syz.2.2027': attribute type 15 has an invalid length. [ 156.391783][ T8744] netlink: 'syz.2.2027': attribute type 7 has an invalid length. [ 156.412978][ T8744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2027'. [ 156.747152][ T8767] openvswitch: netlink: Message has 8 unknown bytes. [ 157.062557][ T5971] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.140773][ T8797] loop0: detected capacity change from 0 to 128 [ 157.220088][ T8797] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.236011][ T8800] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2055'. [ 157.378823][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 157.412774][ T8797] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.606638][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'. [ 157.626123][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'. [ 157.682582][ T5971] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 157.695743][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.712495][ T5971] usb 2-1: Product: syz [ 157.730313][ T5971] usb 2-1: Manufacturer: syz [ 157.745152][ T5971] usb 2-1: SerialNumber: syz [ 157.754339][ T8815] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 157.776802][ T5971] usb 2-1: config 0 descriptor?? [ 157.842606][ T8819] openvswitch: netlink: EtherType 0 is less than min 600 [ 157.850130][ T5971] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 157.953732][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2068'. [ 157.963145][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2068'. [ 157.972149][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2068'. [ 158.078149][ T8831] loop3: detected capacity change from 0 to 164 [ 158.297901][ T5971] gspca_sunplus: reg_w_riv err -71 [ 158.304491][ T5971] sunplus: probe of 2-1:0.0 failed with error -71 [ 158.320120][ T5971] usb 2-1: USB disconnect, device number 6 [ 158.431194][ T8847] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 158.439438][ T8847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2079'. [ 158.449224][ T8847] block nbd0: not configured, cannot reconfigure [ 158.505391][ T8849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.582815][ T8855] netlink: 'syz.3.2082': attribute type 3 has an invalid length. [ 158.699851][ T8863] sctp: [Deprecated]: syz.2.2086 (pid 8863) Use of int in max_burst socket option. [ 158.699851][ T8863] Use struct sctp_assoc_value instead [ 159.022790][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.065464][ T8886] loop0: detected capacity change from 0 to 128 [ 159.112289][ T8886] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.129922][ T8886] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.272764][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 159.392690][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.405586][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.542736][ T5971] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 159.574802][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.586488][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.612489][ T23] usb 5-1: Product: syz [ 159.616860][ T23] usb 5-1: Manufacturer: syz [ 159.621470][ T23] usb 5-1: SerialNumber: syz [ 159.808335][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 159.992828][ T5971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.092661][ T5971] usb 1-1: config 5 has an invalid interface number: 110 but max is 0 [ 160.112384][ T5971] usb 1-1: config 5 has no interface number 0 [ 160.119169][ T5971] usb 1-1: config 5 interface 110 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 160.123844][ T23] usb 5-1: 0:2 : does not exist [ 160.164738][ T23] usb 5-1: USB disconnect, device number 14 [ 160.191301][ T5971] usb 1-1: config 5 interface 110 altsetting 4 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 160.226647][ T5971] usb 1-1: config 5 interface 110 has no altsetting 0 [ 160.439425][ T4689] udevd[4689]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.455940][ T5971] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=b0.b7 [ 160.472467][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.510061][ T5971] usb 1-1: Product: syz [ 160.525669][ T5971] usb 1-1: Manufacturer: syz [ 160.530305][ T5971] usb 1-1: SerialNumber: syz [ 160.739261][ T8990] loop3: detected capacity change from 0 to 128 [ 160.829137][ T8990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.861909][ T8990] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.880244][ T8990] EXT4-fs warning (device loop3): ext4_group_extend:1852: can't read last block, resize aborted [ 160.965764][ T5971] adutux 1-1:5.110: interrupt endpoints not found [ 161.013632][ T5971] usb 1-1: USB disconnect, device number 13 [ 161.030393][ T9006] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.172577][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.474363][ T5306] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.614390][ T9045] xt_limit: Overflow, try lower: 2147483649/3300 [ 161.762485][ T5306] usb 5-1: Using ep0 maxpacket: 8 [ 161.902612][ T5306] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 161.932598][ T5306] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.946765][ T9074] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2186'. [ 161.972770][ T9078] netlink: 'syz.1.2188': attribute type 2 has an invalid length. [ 162.008566][ T9074] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2186'. [ 162.122582][ T5306] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 162.131658][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.152101][ T9077] loop3: detected capacity change from 0 to 4096 [ 162.190676][ T5306] usb 5-1: Product: syz [ 162.195155][ T5306] usb 5-1: Manufacturer: syz [ 162.199773][ T5306] usb 5-1: SerialNumber: syz [ 162.215182][ T5306] usb 5-1: config 0 descriptor?? [ 162.226056][ T9087] libceph: resolve '0.' (ret=-3): failed [ 162.275607][ T5306] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 162.285166][ T9077] ntfs: volume version 3.1. [ 162.329976][ T9077] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 162.361656][ T9077] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 162.410482][ T9077] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 162.425454][ T9096] No such timeout policy "syz0" [ 162.486835][ T9077] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 162.514845][ T5306] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 162.559496][ T5306] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 162.612851][ T9077] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 162.634751][ T9077] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 162.743995][ T5971] usb 5-1: USB disconnect, device number 15 [ 163.488934][ T9166] loop0: detected capacity change from 0 to 1024 [ 163.602555][ T5306] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 163.653504][ T9166] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 163.688450][ T9166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.2229: directory missing '..' [ 163.694512][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 163.827536][ T9191] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 163.902799][ T5306] usb 5-1: Using ep0 maxpacket: 32 [ 163.949998][ T9196] netlink: 'syz.0.2243': attribute type 10 has an invalid length. [ 163.984081][ T9196] device hsr0 entered promiscuous mode [ 164.025391][ T9196] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 164.042096][ T9199] loop1: detected capacity change from 0 to 4096 [ 164.052996][ T5306] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 164.065142][ T5306] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 164.080849][ T9196] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 164.091241][ T5306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.101965][ T5306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 164.111370][ T9196] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 164.124125][ T5306] usb 5-1: config 1 has no interface number 0 [ 164.130237][ T5306] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 164.145217][ T9196] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 164.170666][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.224097][ T9205] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2248'. [ 164.247189][ T9199] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 164.270688][ T5306] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 164.277174][ T9199] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 164.321884][ T4242] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 164.349256][ T4189] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 164.474295][ T5306] snd_usb_pod 5-1:1.1: set_interface failed [ 164.480369][ T5306] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 164.498598][ T5306] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 164.542600][ T5306] usb 5-1: USB disconnect, device number 16 [ 164.691714][ T9230] loop1: detected capacity change from 0 to 4096 [ 164.714532][ T9230] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 164.725128][ T9230] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 164.733765][ T9230] System zones: 0-5 [ 164.739209][ T9230] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 164.855349][ T5976] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 164.944423][ T5971] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.075771][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 165.222859][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 165.238042][ T9251] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 165.306517][ T9241] loop1: detected capacity change from 0 to 32768 [ 165.382900][ T5971] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.399374][ T5971] usb 3-1: config 0 has no interface number 0 [ 165.403542][ T9255] loop4: detected capacity change from 0 to 4096 [ 165.417776][ T9241] XFS (loop1): Mounting V5 Filesystem [ 165.446232][ T9255] ntfs3: loop4: ino=3, Correct links count -> 2. [ 165.482814][ T5976] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.502148][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.512257][ T5976] usb 1-1: Product: syz [ 165.516879][ T5976] usb 1-1: Manufacturer: syz [ 165.521616][ T5976] usb 1-1: SerialNumber: syz [ 165.556610][ T9241] XFS (loop1): Ending clean mount [ 165.582753][ T9255] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 165.585043][ T5976] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.613245][ T5971] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 165.637321][ T9241] attempt to access beyond end of device [ 165.637321][ T9241] loop1: rw=4096, want=18446744073709486044, limit=32768 [ 165.645144][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.689388][ T5971] usb 3-1: Product: syz [ 165.693630][ T5971] usb 3-1: Manufacturer: syz [ 165.698231][ T5971] usb 3-1: SerialNumber: syz [ 165.713812][ T5971] usb 3-1: config 0 descriptor?? [ 165.719758][ T4189] XFS (loop1): Unmounting Filesystem [ 165.781297][ T5971] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 165.956088][ T9269] loop4: detected capacity change from 0 to 1024 [ 165.976675][ T9271] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2274'. [ 166.222783][ T5971] gspca_spca1528: reg_w err -71 [ 166.262664][ T5971] spca1528: probe of 3-1:0.1 failed with error -71 [ 166.280851][ T5971] usb 3-1: USB disconnect, device number 12 [ 166.342615][ T5976] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.765350][ T6148] usb 1-1: USB disconnect, device number 14 [ 167.063816][ T9313] loop4: detected capacity change from 0 to 32768 [ 167.353779][ T9345] device gtp0 entered promiscuous mode [ 167.429778][ T5976] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 167.442610][ T5976] ath9k_htc: Failed to initialize the device [ 167.467101][ T6148] usb 1-1: ath9k_htc: USB layer deinitialized [ 167.565702][ T9361] loop4: detected capacity change from 0 to 16 [ 167.606225][ T9361] erofs: (device loop4): mounted with root inode @ nid 36. [ 167.898199][ T6148] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 168.088522][ T9353] loop1: detected capacity change from 0 to 32768 [ 168.119626][ T9353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2316 (9353) [ 168.143619][ T9353] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 168.152357][ T9353] BTRFS info (device loop1): setting nodatasum [ 168.158924][ T9353] BTRFS info (device loop1): force zlib compression, level 3 [ 168.166675][ T6148] usb 1-1: Using ep0 maxpacket: 16 [ 168.175217][ T9353] BTRFS info (device loop1): max_inline at 4096 [ 168.202591][ T9353] BTRFS info (device loop1): using free space tree [ 168.209352][ T9353] BTRFS info (device loop1): has skinny extents [ 168.442585][ T6148] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 168.451667][ T6148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.460061][ T6148] usb 1-1: Product: syz [ 168.465601][ T6148] usb 1-1: Manufacturer: syz [ 168.470218][ T6148] usb 1-1: SerialNumber: syz [ 168.499027][ T6148] r8152-cfgselector 1-1: config 0 descriptor?? [ 168.539556][ T9353] BTRFS info (device loop1): enabling ssd optimizations [ 168.622598][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 168.702492][ T4689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4689) [ 168.862500][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 168.992542][ T6148] r8152-cfgselector 1-1: Unknown version 0x0000 [ 168.998906][ T6148] r8152-cfgselector 1-1: bad CDC descriptors [ 169.022581][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.040601][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2346'. [ 169.052589][ T6148] r8152-cfgselector 1-1: Unknown version 0x0000 [ 169.054211][ T9433] IPv6: sit1: Disabled Multicast RS [ 169.093250][ T6148] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 169.102795][ T23] usb 5-1: config 4 has an invalid interface number: 54 but max is 2 [ 169.110927][ T23] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 169.148042][ T23] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 169.167815][ T23] usb 5-1: config 4 has no interface number 0 [ 169.182707][ T23] usb 5-1: config 4 interface 54 altsetting 16 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 169.204146][ T23] usb 5-1: config 4 interface 54 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 8 [ 169.218667][ T9438] loop3: detected capacity change from 0 to 4096 [ 169.225145][ T23] usb 5-1: config 4 interface 54 altsetting 16 has an invalid endpoint with address 0x18, skipping [ 169.255167][ T9438] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 169.272991][ T23] usb 5-1: config 4 interface 54 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 169.293062][ T23] usb 5-1: config 4 interface 54 has no altsetting 0 [ 169.301859][ T9438] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 169.301944][ T9438] System zones: 0-5 [ 169.314595][ T9438] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 169.431335][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.458239][ T9446] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 169.472710][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=98.fa [ 169.481906][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.542554][ T23] usb 5-1: Product: syz [ 169.546762][ T23] usb 5-1: Manufacturer: syz [ 169.551367][ T23] usb 5-1: SerialNumber: syz [ 169.632775][ T9397] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 169.639933][ T9455] kAFS: Can only specify source 'none' with -o dyn [ 169.741236][ T9462] loop1: detected capacity change from 0 to 128 [ 169.828009][ T9469] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2362'. [ 169.862829][ T9462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.905926][ T9469] device bond_slave_0 entered promiscuous mode [ 169.912487][ T9469] device bond_slave_1 entered promiscuous mode [ 169.913236][ T9462] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.963608][ T23] usbtest 5-1:4.54: couldn't get endpoints, -22 [ 169.982665][ T23] usbtest: probe of 5-1:4.54 failed with error -22 [ 170.042583][ T23] usb 5-1: USB disconnect, device number 17 [ 170.156218][ T9487] delete_channel: no stack [ 170.589536][ T9526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.728172][ T9539] loop1: detected capacity change from 0 to 64 [ 170.748282][ T5976] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.871326][ T9539] attempt to access beyond end of device [ 170.871326][ T9539] loop1: rw=0, want=268435470, limit=64 [ 170.912696][ T9539] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 170.955093][ T9539] Trying to free block not in datazone [ 171.018573][ T5976] usb 1-1: Using ep0 maxpacket: 8 [ 171.063710][ T9563] sctp: [Deprecated]: syz.3.2408 (pid 9563) Use of int in max_burst socket option. [ 171.063710][ T9563] Use struct sctp_assoc_value instead [ 171.152904][ T5976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.215787][ T9569] netlink: 'syz.3.2410': attribute type 2 has an invalid length. [ 171.322732][ T5976] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 171.322763][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.322783][ T5976] usb 1-1: Product: syz [ 171.322798][ T5976] usb 1-1: Manufacturer: syz [ 171.322813][ T5976] usb 1-1: SerialNumber: syz [ 171.326488][ T5976] usb 1-1: config 0 descriptor?? [ 171.377948][ T5976] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 171.378008][ T5976] usb 1-1: selecting invalid altsetting 1 [ 171.592592][ T5976] gspca_stk014: init reg: 0x00 [ 171.597423][ T5976] stk014: probe of 1-1:0.0 failed with error -5 [ 171.682398][ T9591] loop1: detected capacity change from 0 to 128 [ 171.807127][ T5976] usb 1-1: USB disconnect, device number 16 [ 171.851550][ T9591] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.862353][ T9591] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.117387][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 172.555212][ T9626] loop0: detected capacity change from 0 to 256 [ 172.646931][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 172.658168][ T9626] FAT-fs (loop0): Directory bread(block 64) failed [ 172.677043][ T9631] loop4: detected capacity change from 0 to 64 [ 172.680234][ T9626] FAT-fs (loop0): Directory bread(block 65) failed [ 172.739725][ T9626] FAT-fs (loop0): Directory bread(block 66) failed [ 172.755992][ T9626] FAT-fs (loop0): Directory bread(block 67) failed [ 172.785941][ T9626] FAT-fs (loop0): Directory bread(block 68) failed [ 172.799639][ T9626] FAT-fs (loop0): Directory bread(block 69) failed [ 172.806906][ T9626] FAT-fs (loop0): Directory bread(block 70) failed [ 172.822663][ T9626] FAT-fs (loop0): Directory bread(block 71) failed [ 172.829283][ T9626] FAT-fs (loop0): Directory bread(block 72) failed [ 172.845364][ T9626] FAT-fs (loop0): Directory bread(block 73) failed [ 173.018235][ T9642] overlayfs: bad mount option "redirect_dir=on:/" [ 173.150367][ T9651] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 173.481185][ T9673] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.645224][ T9685] QAT: Stopping all acceleration devices. [ 173.876907][ T9696] openvswitch: netlink: Key type 2481 is out of range max 29 [ 174.066559][ T9661] loop4: detected capacity change from 0 to 32768 [ 174.143678][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 174.217847][ T9661] XFS (loop4): Mounting V5 Filesystem [ 174.300337][ T5971] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.356859][ T9661] XFS (loop4): Ending clean mount [ 174.374942][ T9661] XFS (loop4): Quotacheck needed: Please wait. [ 174.452864][ T9422] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 174.472076][ T9661] XFS (loop4): Quotacheck: Done. [ 174.553957][ T4201] XFS (loop4): Unmounting Filesystem [ 174.611693][ T9737] netlink: 'syz.2.2490': attribute type 21 has an invalid length. [ 174.692937][ T9422] usb 1-1: Using ep0 maxpacket: 8 [ 174.742625][ T5971] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.773142][ T5971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.832622][ T9422] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 174.872584][ T9422] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.902631][ T5971] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.922197][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.942102][ T5971] usb 2-1: SerialNumber: syz [ 175.013571][ T5971] usb 2-1: bad CDC descriptors [ 175.042742][ T9422] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 175.061983][ T9422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.085073][ T9422] usb 1-1: Product: syz [ 175.102512][ T9422] usb 1-1: Manufacturer: syz [ 175.119352][ T9422] usb 1-1: SerialNumber: syz [ 175.134215][ T9422] usb 1-1: config 0 descriptor?? [ 175.183737][ T9422] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 175.206219][ T9764] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2501'. [ 175.241607][ T5976] usb 2-1: USB disconnect, device number 7 [ 175.318409][ T9768] comedi: No check for data length of config insn id 6025 is implemented [ 175.328069][ T9768] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 175.345325][ T9768] comedi: Assuming n=15 is correct [ 175.384196][ T9422] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 175.410986][ T9422] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 175.486253][ T9778] xt_TCPMSS: Only works on TCP SYN packets [ 175.607231][ T9784] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 175.619728][ T23] usb 1-1: USB disconnect, device number 17 [ 175.643276][ T9784] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 176.029272][ T9812] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.205939][ T9824] netlink: 'syz.0.2531': attribute type 10 has an invalid length. [ 176.225502][ T9824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2531'. [ 176.238592][ T9826] loop4: detected capacity change from 0 to 256 [ 176.253227][ T9824] device virt_wifi0 entered promiscuous mode [ 176.263303][ T9824] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 176.336858][ T9826] FAT-fs (loop4): Directory bread(block 64) failed [ 176.352527][ T9826] FAT-fs (loop4): Directory bread(block 65) failed [ 176.359292][ T9826] FAT-fs (loop4): Directory bread(block 66) failed [ 176.408378][ T9832] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 176.414099][ T9826] FAT-fs (loop4): Directory bread(block 67) failed [ 176.423751][ T9826] FAT-fs (loop4): Directory bread(block 68) failed [ 176.430304][ T9826] FAT-fs (loop4): Directory bread(block 69) failed [ 176.449058][ T9826] FAT-fs (loop4): Directory bread(block 70) failed [ 176.482488][ T9826] FAT-fs (loop4): Directory bread(block 71) failed [ 176.489103][ T9826] FAT-fs (loop4): Directory bread(block 72) failed [ 176.519265][ T9826] FAT-fs (loop4): Directory bread(block 73) failed [ 176.611420][ T9840] netlink: 'syz.1.2540': attribute type 6 has an invalid length. [ 176.798845][ T9853] netlink: 'syz.2.2547': attribute type 1 has an invalid length. [ 177.082251][ T9874] loop1: detected capacity change from 0 to 256 [ 177.159883][ T9874] exfat: Deprecated parameter 'namecase' [ 177.166258][ T9874] exfat: Deprecated parameter 'utf8' [ 177.182633][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.219673][ T9874] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 177.253527][ T9874] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 177.429720][ T9894] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 177.461469][ T9894] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.2567'. [ 177.858001][ T9925] CIFS mount error: No usable UNC path provided in device string! [ 177.858001][ T9925] [ 177.937630][ T9925] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 178.069575][ T9935] loop4: detected capacity change from 0 to 512 [ 178.175386][ T9935] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.2588: inode has both inline data and extents flags [ 178.209396][ T9935] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2588: couldn't read orphan inode 15 (err -117) [ 178.231872][ T9935] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.530398][ T9951] loop1: detected capacity change from 0 to 2048 [ 178.665982][ T9951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.125102][ T9995] loop4: detected capacity change from 0 to 512 [ 179.378706][ T9995] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2614: invalid indirect mapped block 10 (level 1) [ 179.436081][ T9995] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2614: invalid indirect mapped block 8 (level 1) [ 179.500591][T10007] loop3: detected capacity change from 0 to 2048 [ 179.519235][ T9995] EXT4-fs (loop4): 1 truncate cleaned up [ 179.538953][ T9995] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 179.627487][T10007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.857538][T10021] loop0: detected capacity change from 0 to 16 [ 179.931198][T10027] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 179.942546][T10027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2629'. [ 179.973257][T10027] device virt_wifi0 entered promiscuous mode [ 179.984569][T10021] erofs: (device loop0): mounted with root inode @ nid 36. [ 179.994429][T10027] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 180.182482][ T6148] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.316726][T10047] netlink: 'syz.3.2639': attribute type 8 has an invalid length. [ 180.425092][T10056] program syz.0.2643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.544547][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2647'. [ 180.577822][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2647'. [ 180.654061][T10067] loop0: detected capacity change from 0 to 512 [ 180.660459][T10071] kAFS: Can only specify source 'none' with -o dyn [ 180.672747][ T6148] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 180.686198][ T6148] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 180.703952][ T6148] usb 2-1: Product: syz [ 180.713102][ T6148] usb 2-1: SerialNumber: syz [ 180.733594][ T6148] usb 2-1: config 0 descriptor?? [ 180.771220][T10067] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,nogrpid,,errors=continue. Quota mode: writeback. [ 180.786542][T10067] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.851593][T10059] infiniband syz2: set active [ 180.856713][T10059] infiniband syz2: added team_slave_0 [ 180.905984][T10059] RDS/IB: syz2: added [ 180.910943][T10059] smc: adding ib device syz2 with port count 1 [ 180.917490][T10059] smc: ib device syz2 port 1 has pnetid [ 180.926621][ T5971] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 180.992642][ T6148] hso 2-1:0.0: Can't find BULK IN endpoint [ 181.163121][T10093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.182765][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 181.196013][ T6148] usb 2-1: USB disconnect, device number 8 [ 181.504404][ T5971] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 181.532441][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.570023][ T5971] usb 5-1: Product: syz [ 181.574371][ T5971] usb 5-1: Manufacturer: syz [ 181.578979][ T5971] usb 5-1: SerialNumber: syz [ 181.604949][ T5971] r8152-cfgselector 5-1: config 0 descriptor?? [ 181.705840][T10117] netlink: 'syz.0.2672': attribute type 1 has an invalid length. [ 181.743770][T10117] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2672'. [ 182.017807][T10136] xt_nfacct: accounting object `syz1' does not exist [ 182.102685][ T5971] r8152-cfgselector 5-1: Unknown version 0x0000 [ 182.119314][ T5971] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 182.394056][T10159] netlink: 'syz.0.2693': attribute type 1 has an invalid length. [ 182.492704][T10163] netlink: 'syz.2.2695': attribute type 21 has an invalid length. [ 182.520924][T10163] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2695'. [ 182.569447][T10166] binder: 10165:10166 ioctl c0306201 200000000080 returned -14 [ 182.964670][T10205] loop4: detected capacity change from 0 to 128 [ 182.995841][ T26] audit: type=1326 audit(1781048348.378:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.3.2716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8994481e59 code=0x0 [ 183.384680][T10239] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2731'. [ 183.412780][T10239] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 183.421140][T10239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 183.598026][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 183.641996][T10262] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.2744'. [ 183.736645][T10269] netlink: 'syz.2.2747': attribute type 29 has an invalid length. [ 183.736679][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 183.736990][T10269] netlink: 'syz.2.2747': attribute type 29 has an invalid length. [ 183.737005][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 183.745113][T10264] [U] ^C [ 183.749550][T10268] smb3: Bad value for 'uid' [ 184.332507][ T5306] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.592556][ T5306] usb 2-1: Using ep0 maxpacket: 8 [ 184.634624][T10325] syz.4.2773 uses old SIOCAX25GETINFO [ 184.762695][ T5306] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 184.782472][ T5306] usb 2-1: config 0 has no interface number 1 [ 184.788601][ T5306] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 184.846336][ T5306] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 184.903538][T10341] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 185.248856][ T5306] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 185.268500][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.285290][T10356] loop0: detected capacity change from 0 to 4096 [ 185.297258][ T5306] usb 2-1: Product: syz [ 185.301564][ T5306] usb 2-1: Manufacturer: syz [ 185.312516][ T5306] usb 2-1: SerialNumber: syz [ 185.318827][T10356] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 185.331615][ T5306] usb 2-1: config 0 descriptor?? [ 185.407829][ T5306] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 185.501227][ T4194] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 185.528037][ T4194] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 185.563385][ T4194] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 185.616798][ T5306] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 185.623515][ T2426] pvrusb2: Invalid read control endpoint [ 185.664175][ T2426] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 185.675039][ T5306] usb 2-1: USB disconnect, device number 9 [ 185.694730][ T5307] Bluetooth: hci0: command 0x0406 tx timeout [ 185.703066][ T5307] Bluetooth: hci2: command 0x0406 tx timeout [ 185.718120][ T2426] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 185.729557][ T5307] Bluetooth: hci3: command 0x0406 tx timeout [ 185.746056][ T5307] Bluetooth: hci4: command 0x0406 tx timeout [ 185.766862][ T5307] Bluetooth: hci1: command 0x0406 tx timeout [ 185.946187][T10378] xt_l2tp: v2 doesn't support IP mode [ 186.072601][T10382] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.173947][T10366] loop4: detected capacity change from 0 to 32768 [ 186.290329][T10401] IPv6: NLM_F_REPLACE set, but no existing node found! [ 186.303292][T10366] XFS (loop4): Mounting V5 Filesystem [ 186.510936][T10366] XFS (loop4): Starting recovery (logdev: internal) [ 186.602871][T10366] XFS (loop4): Ending recovery (logdev: internal) [ 186.615800][T10424] netlink: 'syz.1.2815': attribute type 2 has an invalid length. [ 186.713916][ T4201] XFS (loop4): Unmounting Filesystem [ 186.832902][T10437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2824'. [ 186.864435][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2824'. [ 186.914034][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2824'. [ 186.954918][T10442] loop1: detected capacity change from 0 to 512 [ 187.041625][T10447] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.071154][T10442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.154045][T10442] EXT4-fs (loop1): 1 truncate cleaned up [ 187.159867][T10442] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 187.264209][T10459] tc_dump_action: action bad kind [ 187.302541][T10458] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2832'. [ 187.644311][T10486] netlink: zone id is out of range [ 187.649612][T10486] netlink: zone id is out of range [ 187.714951][T10494] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 187.751018][T10486] netlink: zone id is out of range [ 187.773081][T10486] netlink: zone id is out of range [ 187.778379][T10486] netlink: zone id is out of range [ 187.799016][T10486] netlink: zone id is out of range [ 187.829511][T10486] netlink: zone id is out of range [ 187.839902][T10486] netlink: zone id is out of range [ 187.859686][T10486] netlink: zone id is out of range [ 187.902028][T10486] netlink: zone id is out of range [ 188.008736][T10514] [U] ^C [ 188.108530][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'. [ 188.378364][T10534] loop1: detected capacity change from 0 to 4096 [ 188.388937][T10543] [U] ^C [ 188.394770][T10538] loop0: detected capacity change from 0 to 4096 [ 188.608884][T10534] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one macroman. [ 188.650671][T10534] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 188.659869][T10553] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 188.729044][T10553] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 188.756260][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 188.765738][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2878'. [ 188.806399][T10534] ntfs: volume version 3.1. [ 188.825325][T10558] netlink: 'syz.0.2879': attribute type 2 has an invalid length. [ 188.850083][T10560] loop4: detected capacity change from 0 to 256 [ 188.857017][T10558] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2879'. [ 188.965556][T10560] FAT-fs (loop4): Directory bread(block 64) failed [ 188.972236][T10560] FAT-fs (loop4): Directory bread(block 65) failed [ 189.007917][T10560] FAT-fs (loop4): Directory bread(block 66) failed [ 189.035490][T10560] FAT-fs (loop4): Directory bread(block 67) failed [ 189.062101][T10560] FAT-fs (loop4): Directory bread(block 68) failed [ 189.103032][T10560] FAT-fs (loop4): Directory bread(block 69) failed [ 189.130753][T10560] FAT-fs (loop4): Directory bread(block 70) failed [ 189.157617][T10560] FAT-fs (loop4): Directory bread(block 71) failed [ 189.194476][T10560] FAT-fs (loop4): Directory bread(block 72) failed [ 189.206787][T10560] FAT-fs (loop4): Directory bread(block 73) failed [ 189.332029][T10572] loop1: detected capacity change from 0 to 4096 [ 189.349805][T10576] loop0: detected capacity change from 0 to 1024 [ 189.356855][T10578] Timeout policy `syz0' can only be used by L3 protocol number 35047 [ 189.420584][T10576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.453966][T10572] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 189.630997][T10572] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 189.870937][T10603] overlayfs: failed to resolve 'obj_user=/ ­': -2 [ 189.911689][T10605] SET target dimension over the limit! [ 190.235050][T10629] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 190.252520][ T9422] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.303226][T10629] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 190.323708][T10629] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 190.341192][T10629] comedi comedi1: 8255: I/O port conflict (0x800afa3,4) [ 190.349008][T10629] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 190.503598][ T9422] usb 3-1: Using ep0 maxpacket: 8 [ 190.552030][T10651] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 190.561340][T10651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2925'. [ 190.581165][T10651] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2925'. [ 190.618059][T10653] dlm: non-version read from control device 8192 [ 190.782906][ T9422] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 190.802174][ T9422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.823521][ T9422] usb 3-1: Product: syz [ 190.827836][ T9422] usb 3-1: Manufacturer: syz [ 190.844038][ T9422] usb 3-1: SerialNumber: syz [ 190.877559][ T9422] usb 3-1: config 0 descriptor?? [ 190.924431][ T9422] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 190.939728][T10675] mmap: syz.0.2937 (10675) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 190.963232][ T9422] dvb-usb: bulk message failed: -22 (2/0) [ 190.993454][ T9422] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.029695][ T9422] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 191.046317][ T9422] usb 3-1: media controller created [ 191.066514][ T9422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.092679][T10682] loop1: detected capacity change from 0 to 512 [ 191.147690][ T9422] dvb-usb: bulk message failed: -22 (1/0) [ 191.162527][ T5307] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 191.209928][ T9422] DVB: Unable to find symbol mt352_attach() [ 191.216685][ T9422] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 191.242996][T10682] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2940: invalid indirect mapped block 10 (level 1) [ 191.266897][T10682] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2940: invalid indirect mapped block 8 (level 1) [ 191.286314][T10682] EXT4-fs (loop1): 1 truncate cleaned up [ 191.292053][T10682] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 191.352492][ T9422] rc_core: IR keymap rc-dvico-portable not found [ 191.358880][ T9422] Registered IR keymap rc-empty [ 191.398459][ T9422] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 191.437471][ T9422] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 191.493520][ T9422] dvb-usb: schedule remote query interval to 100 msecs. [ 191.500563][ T9422] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 191.550919][ T9422] usb 3-1: USB disconnect, device number 13 [ 191.638850][ T5307] usb 5-1: not running at top speed; connect to a high speed hub [ 191.657027][T10695] netlink: 'syz.3.2945': attribute type 2 has an invalid length. [ 191.720924][ T9422] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 191.732763][ T5307] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 624, setting to 64 [ 191.762111][ T5307] usb 5-1: config 1 interface 0 has no altsetting 0 [ 192.013725][ T5307] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 192.035164][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.058101][ T5307] usb 5-1: Product: syz [ 192.076323][ T5307] usb 5-1: Manufacturer: syz [ 192.091150][ T5307] usb 5-1: SerialNumber: syz [ 192.155648][T10669] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 192.179718][T10730] netlink: 'syz.0.2962': attribute type 10 has an invalid length. [ 192.208429][T10730] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 192.435616][T10750] device syz_tun entered promiscuous mode [ 192.453377][ T5307] usblp0: Disabling reads from problematic bidirectional printer [ 192.515442][ T5307] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 192.553096][ T5307] usb 5-1: USB disconnect, device number 19 [ 192.581275][T10758] netlink: 'syz.0.2975': attribute type 21 has an invalid length. [ 192.601766][ T5307] usblp0: removed [ 192.661451][T10761] loop3: detected capacity change from 0 to 512 [ 192.685195][T10766] netlink: 'syz.2.2979': attribute type 21 has an invalid length. [ 192.709215][T10766] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 192.725738][T10766] __nla_validate_parse: 2 callbacks suppressed [ 192.725751][T10766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2979'. [ 192.770710][T10761] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,stripe=0x0000000000002dc9,,errors=continue. Quota mode: writeback. [ 192.853415][T10761] ext4 filesystem being mounted at /438/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.920815][T10761] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.2977: Attempting to read directory block (0) that is past i_size (3) [ 193.238866][T10794] loop3: detected capacity change from 0 to 64 [ 193.274532][T10798] SET target dimension over the limit! [ 193.386269][T10809] loop0: detected capacity change from 0 to 22 [ 193.453916][T10809] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 193.481948][T10809] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 193.791524][T10837] netlink: 'syz.1.3014': attribute type 3 has an invalid length. [ 193.817419][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.825424][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.864400][T10837] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3014'. [ 193.890415][T10844] loop0: detected capacity change from 0 to 256 [ 194.054505][T10857] loop3: detected capacity change from 0 to 512 [ 194.089796][T10861] loop4: detected capacity change from 0 to 256 [ 194.097585][T10857] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 194.156999][T10857] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 194.187224][T10857] ext4 filesystem being mounted at /445/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.282501][T10861] FAT-fs (loop4): Directory bread(block 64) failed [ 194.289072][T10861] FAT-fs (loop4): Directory bread(block 65) failed [ 194.348461][T10861] FAT-fs (loop4): Directory bread(block 66) failed [ 194.366437][T10861] FAT-fs (loop4): Directory bread(block 67) failed [ 194.390237][T10861] FAT-fs (loop4): Directory bread(block 68) failed [ 194.402289][T10878] Option '2 O€ÉÇ—Wz [ 194.402289][T10878] ­ f:ó–ã5úÉùÔAŠÀ- [ 194.402289][T10878] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 194.432305][T10861] FAT-fs (loop4): Directory bread(block 69) failed [ 194.472528][T10861] FAT-fs (loop4): Directory bread(block 70) failed [ 194.479083][T10861] FAT-fs (loop4): Directory bread(block 71) failed [ 194.518268][T10861] FAT-fs (loop4): Directory bread(block 72) failed [ 194.560553][T10861] FAT-fs (loop4): Directory bread(block 73) failed [ 194.739662][T10891] loop0: detected capacity change from 0 to 2048 [ 194.913562][T10903] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.953994][T10891] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8 [ 195.025987][T10891] Remounting filesystem read-only [ 195.111007][T10904] loop1: detected capacity change from 0 to 4096 [ 195.212330][T10904] NILFS (loop1): invalid segment: Checksum error in segment payload [ 195.231000][T10910] netlink: 'syz.4.3048': attribute type 6 has an invalid length. [ 195.254366][T10904] NILFS (loop1): trying rollback from an earlier position [ 195.281151][T10910] netlink: 'syz.4.3048': attribute type 7 has an invalid length. [ 195.317103][T10910] netlink: 'syz.4.3048': attribute type 8 has an invalid length. [ 195.358081][T10904] NILFS (loop1): recovery complete [ 195.445871][T10916] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.167534][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3066'. [ 196.502552][T10969] loop0: detected capacity change from 0 to 64 [ 197.086253][T11005] netlink: 'syz.2.3093': attribute type 3 has an invalid length. [ 197.106625][T11007] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.133019][T11005] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3093'. [ 197.618802][T11033] netlink: 'syz.4.3108': attribute type 3 has an invalid length. [ 197.668217][T11033] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3108'. [ 197.713036][T11011] loop0: detected capacity change from 0 to 32768 [ 197.848386][T11011] XFS (loop0): Mounting V5 Filesystem [ 197.951489][T11011] XFS (loop0): Starting recovery (logdev: internal) [ 198.006309][T11011] XFS (loop0): Ending recovery (logdev: internal) [ 198.078170][ T4194] XFS (loop0): Unmounting Filesystem [ 198.382369][T11074] netlink: 'syz.0.3122': attribute type 3 has an invalid length. [ 198.390434][T11074] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3122'. [ 198.422529][ T5307] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 198.455791][T11078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.473634][T11078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.492280][T11078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.500910][T11078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.598658][T11084] netlink: 'syz.0.3128': attribute type 12 has an invalid length. [ 198.606981][T11084] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.3128'. [ 198.699717][T11090] netlink: 'syz.0.3131': attribute type 5 has an invalid length. [ 198.953101][T11101] loop0: detected capacity change from 0 to 4096 [ 198.959765][T11103] netlink: 'syz.1.3137': attribute type 10 has an invalid length. [ 198.971383][T11103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3137'. [ 198.981234][T11103] netlink: 'syz.1.3137': attribute type 10 has an invalid length. [ 198.989193][T11103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3137'. [ 199.036794][T11104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.052652][ T5307] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 199.062182][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.104367][ T5307] usb 5-1: Product: syz [ 199.115923][T11106] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3138'. [ 199.127045][ T5307] usb 5-1: Manufacturer: syz [ 199.131701][ T5307] usb 5-1: SerialNumber: syz [ 199.150422][ T5307] usb 5-1: config 0 descriptor?? [ 199.208233][ T5307] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 199.492609][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 199.604253][T11134] netlink: 'syz.0.3151': attribute type 2 has an invalid length. [ 199.620742][T11134] netlink: 'syz.0.3151': attribute type 4 has an invalid length. [ 199.629201][T11134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3151'. [ 199.630357][ T5307] usb 5-1: USB disconnect, device number 20 [ 199.742702][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 199.863236][ T23] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 199.881790][ T23] usb 3-1: config 0 has no interface number 0 [ 199.888320][ T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 199.902494][ T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 199.912732][ T23] usb 3-1: config 0 interface 41 has no altsetting 0 [ 199.982535][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3157'. [ 200.073291][ T23] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 200.092669][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.121123][ T23] usb 3-1: Product: syz [ 200.125462][ T23] usb 3-1: Manufacturer: syz [ 200.130093][ T23] usb 3-1: SerialNumber: syz [ 200.152989][ T23] usb 3-1: config 0 descriptor?? [ 200.193016][T11109] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.212936][T11109] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.236704][T11155] loop0: detected capacity change from 0 to 256 [ 200.372297][T11155] FAT-fs (loop0): Directory bread(block 64) failed [ 200.445654][T11155] FAT-fs (loop0): Directory bread(block 65) failed [ 200.455355][T11109] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.472640][T11109] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.485872][T11155] FAT-fs (loop0): Directory bread(block 66) failed [ 200.540106][T11155] FAT-fs (loop0): Directory bread(block 67) failed [ 200.572839][T11155] FAT-fs (loop0): Directory bread(block 68) failed [ 200.579504][T11155] FAT-fs (loop0): Directory bread(block 69) failed [ 200.609044][T11155] FAT-fs (loop0): Directory bread(block 70) failed [ 200.636476][T11155] FAT-fs (loop0): Directory bread(block 71) failed [ 200.643550][T11155] FAT-fs (loop0): Directory bread(block 72) failed [ 200.650218][T11155] FAT-fs (loop0): Directory bread(block 73) failed [ 200.757528][ T23] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 200.770417][ T23] usb 3-1: USB disconnect, device number 14 [ 201.922043][T11247] netlink: 'syz.2.3206': attribute type 21 has an invalid length. [ 202.064927][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 202.150236][T11257] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.276943][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3215'. [ 202.427580][T11275] net_ratelimit: 336 callbacks suppressed [ 202.427595][T11275] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 202.474579][T11278] QAT: failed to copy from user. [ 202.552341][T11282] smc: removing ib device syz2 [ 202.726167][T11291] loop4: detected capacity change from 0 to 512 [ 202.792908][T11291] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.853323][T11291] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3227: invalid indirect mapped block 9 (level 0) [ 202.883527][T11291] EXT4-fs (loop4): 1 truncate cleaned up [ 202.889195][T11291] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 203.619842][T11337] netlink: 'syz.2.3249': attribute type 12 has an invalid length. [ 203.762539][T11341] netlink: 'syz.2.3251': attribute type 26 has an invalid length. [ 203.812851][ T5307] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 204.082596][ T5307] usb 5-1: Using ep0 maxpacket: 8 [ 204.141849][T11350] xt_l2tp: invalid flags combination: 0 [ 204.226807][ T5307] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 149, changing to 7 [ 204.272290][ T5307] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 85, changing to 7 [ 204.303116][T11352] xt_cluster: node mask cannot exceed total number of nodes [ 204.472765][ T5307] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 204.494443][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.512808][ T5307] usb 5-1: Product: syz [ 204.523093][ T5307] usb 5-1: Manufacturer: syz [ 204.527720][ T5307] usb 5-1: SerialNumber: syz [ 204.700529][T11368] loop3: detected capacity change from 0 to 512 [ 204.749815][T11368] EXT4-fs (loop3): Ignoring removed orlov option [ 204.882657][T11368] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 204.942809][ T5307] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 205.029996][T11379] netlink: 'syz.2.3268': attribute type 1 has an invalid length. [ 205.038464][ T5307] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 205.063981][T11379] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3268'. [ 205.086443][ T5307] usb 5-1: USB disconnect, device number 21 [ 205.096607][T11379] NCSI netlink: No device for ifindex 0 [ 205.158319][T11382] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.3271'. [ 205.336887][ T4689] udevd[4689]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.098968][T11408] loop0: detected capacity change from 0 to 32768 [ 207.461417][T11520] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 207.506556][T11524] sctp: [Deprecated]: syz.4.3340 (pid 11524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.506556][T11524] Use struct sctp_sack_info instead [ 207.534381][T11512] loop1: detected capacity change from 0 to 8192 [ 207.604738][T11512] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 207.628609][T11512] REISERFS (device loop1): using ordered data mode [ 207.638910][T11532] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3343'. [ 207.646684][T11512] reiserfs: using flush barriers [ 207.655352][T11512] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.673082][T11512] REISERFS (device loop1): checking transaction log (loop1) [ 207.682917][T11512] REISERFS (device loop1): Using r5 hash to sort names [ 207.690139][T11512] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 207.763947][T11539] ipt_CLUSTERIP: Please specify destination IP [ 207.932130][T11548] netlink: 'syz.2.3353': attribute type 4 has an invalid length. [ 207.947858][T11548] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.3353'. [ 208.069625][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3350'. [ 208.310426][T11573] mmap: syz.0.3364 (11573): VmData 37478400 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 208.378116][ T5971] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 208.672522][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 208.714465][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 208.770296][T11601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3377'. [ 208.880908][ T5971] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.987922][ T5971] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 209.160267][T11626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3391'. [ 209.174268][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.229324][T11581] loop0: detected capacity change from 0 to 32768 [ 209.242782][ T5971] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 209.265023][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.297386][ T5971] usb 5-1: Product: syz [ 209.301592][ T5971] usb 5-1: Manufacturer: syz [ 209.318792][ T5971] usb 5-1: SerialNumber: syz [ 209.359629][T11581] JBD2: Ignoring recovery information on journal [ 209.515123][T11581] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 209.626483][T11652] loop3: detected capacity change from 0 to 256 [ 209.696914][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 209.727578][ T5971] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.772525][ T5971] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 209.818522][ T5971] usb 5-1: USB disconnect, device number 22 [ 209.903289][T11660] loop1: detected capacity change from 0 to 65 [ 209.977236][T11660] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 210.121752][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.293987][T11684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3419'. [ 210.313133][T11687] device sit0 entered promiscuous mode [ 210.342201][T11687] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 210.380733][T11687] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3418'. [ 210.419172][T11693] tmpfs: Bad value for 'mpol' [ 210.657455][T11709] device vti0 entered promiscuous mode [ 210.744801][T11712] device wlan0 entered promiscuous mode [ 210.787509][T11716] netlink: 'syz.2.3434': attribute type 21 has an invalid length. [ 210.812634][T11716] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3434'. [ 211.171091][T11748] netlink: 'syz.1.3449': attribute type 32 has an invalid length. [ 211.211354][T11750] dlm: non-version read from control device 169 [ 211.353284][T11760] netlink: 'syz.0.3456': attribute type 21 has an invalid length. [ 211.381747][T11760] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3456'. [ 211.412263][T11760] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 211.437711][T11760] netlink: 'syz.0.3456': attribute type 3 has an invalid length. [ 211.457676][T11760] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3456'. [ 211.547896][T11773] binder: 11772:11773 ioctl c018620c 0 returned -14 [ 211.679254][T11778] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 212.015184][T11805] loop0: detected capacity change from 0 to 1024 [ 212.080365][T11805] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 212.103760][T11812] netlink: 'syz.1.3481': attribute type 8 has an invalid length. [ 212.161570][T11816] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 212.291426][T11822] usb usb9: usbfs: process 11822 (syz.0.3485) did not claim interface 8 before use [ 213.024848][T11881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3516'. [ 213.644285][T11919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3535'. [ 213.750892][T11925] loop0: detected capacity change from 0 to 64 [ 213.846021][T11873] loop4: detected capacity change from 0 to 40427 [ 213.879563][ T26] audit: type=1800 audit(213.848:10): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3538" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 213.888925][T11873] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 213.975904][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.134449][ T26] audit: type=1400 audit(214.108:11): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=11941 comm="syz.0.3546" [ 214.211019][T11944] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.3547'. [ 214.240825][T11873] F2FS-fs (loop4): invalid crc value [ 214.255480][T11873] F2FS-fs (loop4): Found nat_bits in checkpoint [ 214.362585][T11873] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 214.454908][ T4201] attempt to access beyond end of device [ 214.454908][ T4201] loop4: rw=2049, want=45104, limit=40427 [ 214.492545][ T5307] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 214.659735][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3558'. [ 214.770167][T11970] netlink: 'syz.1.3559': attribute type 10 has an invalid length. [ 214.793125][T11970] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.877600][T11974] tmpfs: Bad value for 'mpol' [ 215.062669][ T5307] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.081928][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.113968][ T5307] usb 1-1: Product: syz [ 215.127847][ T5307] usb 1-1: Manufacturer: syz [ 215.140811][ T5307] usb 1-1: SerialNumber: syz [ 215.202329][T11995] netlink: 4844 bytes leftover after parsing attributes in process `syz.3.3571'. [ 215.217686][ T5307] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.328774][T11999] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 215.344713][T12001] loop4: detected capacity change from 0 to 8 [ 215.393472][T12001] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 215.409597][ T4689] udevd[4689]: incorrect cramfs checksum on /dev/loop4 [ 215.437974][T12001] cramfs: bad data blocksize 4294934200 [ 215.482483][T12001] cramfs: bad data blocksize 4294934200 [ 215.494081][ T4689] udevd[4689]: incorrect cramfs checksum on /dev/loop4 [ 215.521397][ T26] audit: type=1800 audit(215.488:12): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3574" name="file1" dev="loop4" ino=33092 res=0 errno=0 [ 215.623312][T12015] xt_TCPMSS: Only works on TCP SYN packets [ 215.902613][ T5307] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.973402][T12042] nfs: Deprecated parameter 'nointr' [ 216.338544][ T4231] usb 1-1: USB disconnect, device number 18 [ 216.441714][T12075] xt_socket: unknown flags 0xc [ 216.699254][T12089] loop3: detected capacity change from 0 to 256 [ 216.760505][T12089] FAT-fs (loop3): Directory bread(block 64) failed [ 216.775178][T12089] FAT-fs (loop3): Directory bread(block 65) failed [ 216.788527][T12089] FAT-fs (loop3): Directory bread(block 66) failed [ 216.800709][T12089] FAT-fs (loop3): Directory bread(block 67) failed [ 216.815369][T12089] FAT-fs (loop3): Directory bread(block 68) failed [ 216.827588][T12089] FAT-fs (loop3): Directory bread(block 69) failed [ 216.840913][T12089] FAT-fs (loop3): Directory bread(block 70) failed [ 216.855595][T12089] FAT-fs (loop3): Directory bread(block 71) failed [ 216.870491][T12089] FAT-fs (loop3): Directory bread(block 72) failed [ 216.903120][T12089] FAT-fs (loop3): Directory bread(block 73) failed [ 216.932598][ T5307] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 216.945141][ T5307] ath9k_htc: Failed to initialize the device [ 216.961731][ T4231] usb 1-1: ath9k_htc: USB layer deinitialized [ 217.610266][T12118] No such timeout policy "syz1" [ 217.680514][T12122] nfs: Unknown parameter '/dev/ocfs2_control' [ 217.764977][T12126] program syz.1.3635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.789967][T12128] overlayfs: missing 'lowerdir' [ 217.812606][T12130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3637'. [ 217.932360][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 217.982530][T12141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3644'. [ 218.001239][T12143] netlink: 'syz.2.3643': attribute type 21 has an invalid length. [ 218.009862][T12143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3643'. [ 218.260954][T12163] loop1: detected capacity change from 0 to 256 [ 218.407253][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3658'. [ 219.187705][T12206] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 219.228608][T12206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.280621][T12213] netlink: 'syz.3.3675': attribute type 3 has an invalid length. [ 219.392762][ T4231] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 219.684087][T12231] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3685'. [ 219.734823][ T4231] usb 5-1: not running at top speed; connect to a high speed hub [ 219.842701][ T4231] usb 5-1: config 11 has an invalid interface number: 95 but max is 0 [ 219.850951][ T4231] usb 5-1: config 11 has no interface number 0 [ 219.866365][T12235] loop1: detected capacity change from 0 to 8192 [ 219.873136][ T4231] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 219.918648][ T4231] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 10727, setting to 64 [ 219.950367][ T4231] usb 5-1: config 11 interface 95 has no altsetting 0 [ 220.034628][T12235] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 220.052779][ T4231] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 220.068309][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 220.082751][ T4231] usb 5-1: Manufacturer: syz [ 220.102254][T12235] REISERFS (device loop1): using ordered data mode [ 220.112922][T12200] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 220.122732][T12200] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 220.146522][T12235] reiserfs: using flush barriers [ 220.194796][T12235] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.264285][T12235] REISERFS (device loop1): checking transaction log (loop1) [ 220.400329][T12258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.466670][ T4231] usbtouchscreen: probe of 5-1:11.95 failed with error -71 [ 220.485171][ T4231] usb 5-1: USB disconnect, device number 23 [ 220.548281][T12235] REISERFS (device loop1): Using tea hash to sort names [ 220.578907][T12235] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 220.616580][T12235] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 220.675309][T12266] loop0: detected capacity change from 0 to 256 [ 220.814035][T12266] FAT-fs (loop0): Directory bread(block 64) failed [ 220.820609][T12266] FAT-fs (loop0): Directory bread(block 65) failed [ 220.841996][T12266] FAT-fs (loop0): Directory bread(block 66) failed [ 220.853638][T12266] FAT-fs (loop0): Directory bread(block 67) failed [ 220.860322][T12266] FAT-fs (loop0): Directory bread(block 68) failed [ 220.871232][T12266] FAT-fs (loop0): Directory bread(block 69) failed [ 220.914574][T12266] FAT-fs (loop0): Directory bread(block 70) failed [ 220.921143][T12266] FAT-fs (loop0): Directory bread(block 71) failed [ 220.975523][T12266] FAT-fs (loop0): Directory bread(block 72) failed [ 220.982096][T12266] FAT-fs (loop0): Directory bread(block 73) failed [ 221.242040][T12290] device vti0 entered promiscuous mode [ 221.549949][T12316] netlink: 'syz.0.3727': attribute type 13 has an invalid length. [ 221.596229][T12309] loop4: detected capacity change from 0 to 4096 [ 221.633131][T12320] IPv6: sit1: Disabled Multicast RS [ 221.685985][T12309] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 221.723315][T12309] ntfs3: loop4: Failed to load $Extend. [ 222.166449][T12352] IPv6: sit2: Disabled Multicast RS [ 222.240508][T12355] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3747'. [ 222.252858][T12358] unsupported nlmsg_type 40 [ 222.349716][T12364] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3751'. [ 223.255382][T12434] libceph: resolve '0' (ret=-3): failed [ 223.328226][T12436] loop0: detected capacity change from 0 to 2048 [ 223.384836][T12436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.580641][T12453] 9p: Unknown access argument Ø [ 223.901933][T12473] Cannot find add_set index 3 as target [ 224.038052][T12482] loop3: detected capacity change from 0 to 512 [ 224.212115][T12497] loop4: detected capacity change from 0 to 8 [ 224.236670][T12482] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 224.380972][ T26] audit: type=1800 audit(224.348:13): pid=12497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3813" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 224.412542][ T4231] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 224.544650][ T27] INFO: task kworker/1:3:4178 blocked for more than 143 seconds. [ 224.558148][ T27] Not tainted syzkaller #0 [ 224.580798][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.639022][ T27] task:kworker/1:3 state:D stack:19736 pid: 4178 ppid: 2 flags:0x00004000 [ 224.682403][ T27] Workqueue: events request_firmware_work_func [ 224.736238][ T27] Call Trace: [ 224.739580][ T27] [ 224.744502][ T27] __schedule+0x11ef/0x43c0 [ 224.749058][ T27] ? release_firmware_map_entry+0x190/0x190 [ 224.770557][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 224.787216][ T27] ? __mutex_trylock_common+0x86/0x260 [ 224.800478][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 224.806118][ T4231] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 224.820047][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 224.826560][ T4231] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 224.842407][ T27] schedule+0x11b/0x1e0 [ 224.846597][ T27] schedule_preempt_disabled+0xf/0x20 [ 224.851994][ T27] __mutex_lock_common+0xcfc/0x2400 [ 224.860721][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.872325][ T27] ? ath9k_hif_usb_firmware_cb+0x32c/0x4b0 [ 224.882780][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 224.888017][ T27] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 224.895378][ T27] ? _raw_spin_unlock+0x40/0x40 [ 224.900278][ T27] ? swake_up_all_locked+0x93/0x170 [ 224.907778][ T4231] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 224.922735][ T27] mutex_lock_nested+0x17/0x20 [ 224.927554][ T27] ath9k_hif_usb_firmware_cb+0x32c/0x4b0 [ 224.942414][ T27] ? ath9k_hif_request_firmware+0x490/0x490 [ 224.948342][ T27] request_firmware_work_func+0xfb/0x1b0 [ 224.963992][ T27] process_one_work+0x85f/0x1010 [ 224.969132][ T27] ? worker_detach_from_pool+0x240/0x240 [ 224.977829][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 224.985265][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 224.990389][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 225.001717][ T27] ? wq_worker_running+0x97/0x170 [ 225.008930][ T27] worker_thread+0xaa6/0x1290 [ 225.017304][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.027900][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 225.037136][ T27] kthread+0x436/0x520 [ 225.041377][ T27] ? rcu_lock_release+0x20/0x20 [ 225.048531][ T27] ? kthread_blkcg+0xd0/0xd0 [ 225.056455][ T27] ret_from_fork+0x1f/0x30 [ 225.061321][ T27] [ 225.077177][ T27] INFO: task udevd:4182 blocked for more than 143 seconds. [ 225.126844][ T27] Not tainted syzkaller #0 [ 225.131807][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.140936][ T27] task:udevd state:D stack:23120 pid: 4182 ppid: 3561 flags:0x00004002 [ 225.150468][ T27] Call Trace: [ 225.154073][ T27] [ 225.157026][ T27] __schedule+0x11ef/0x43c0 [ 225.161698][ T27] ? rcu_lock_acquire+0x30/0x30 [ 225.166992][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 225.177144][ T27] ? release_firmware_map_entry+0x190/0x190 [ 225.183353][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 225.188467][ T27] ? __mutex_trylock_common+0x86/0x260 [ 225.194227][ T27] ? rcu_lock_release+0x20/0x20 [ 225.199177][ T27] schedule+0x11b/0x1e0 [ 225.204121][ T27] schedule_preempt_disabled+0xf/0x20 [ 225.209580][ T27] __mutex_lock_common+0xcfc/0x2400 [ 225.216816][ T27] ? uevent_show+0x17a/0x330 [ 225.221502][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 225.227022][ T27] mutex_lock_nested+0x17/0x20 [ 225.231876][ T27] uevent_show+0x17a/0x330 [ 225.236656][ T27] dev_attr_show+0x50/0xb0 [ 225.241104][ T27] ? device_get_ownership+0xa0/0xa0 [ 225.246636][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 225.251642][ T27] seq_read_iter+0x49b/0xd50 [ 225.256762][ T27] vfs_read+0x759/0xd60 [ 225.260952][ T27] ? kernel_read+0x1e0/0x1e0 [ 225.270358][ T27] ? __context_tracking_exit+0x4c/0x80 [ 225.276216][ T27] ? __fdget_pos+0x2c6/0x370 [ 225.280902][ T27] ksys_read+0x152/0x260 [ 225.285574][ T27] ? vfs_write+0xd60/0xd60 [ 225.290025][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.295657][ T27] do_syscall_64+0x4c/0xa0 [ 225.300095][ T27] ? clear_bhb_loop+0x30/0x80 [ 225.305321][ T27] ? clear_bhb_loop+0x30/0x80 [ 225.310105][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.319200][ T27] RIP: 0033:0x7fdc2f70c407 [ 225.326444][ T27] RSP: 002b:00007fff83705a10 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 225.338906][ T27] RAX: ffffffffffffffda RBX: 00007fdc2f61e880 RCX: 00007fdc2f70c407 [ 225.347264][ T27] RDX: 0000000000001000 RSI: 000055bf8f5a8a00 RDI: 0000000000000008 [ 225.355605][ T27] RBP: 00007fdc2f854ff0 R08: 0000000000000000 R09: 0000000000000000 [ 225.363962][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 225.372292][ T27] R13: 00007fdc2f854ea0 R14: 0000000000000000 R15: 000055bf8f5a67a0 [ 225.380565][ T27] [ 225.383908][ T27] INFO: task kworker/1:10:4332 blocked for more than 144 seconds. [ 225.391735][ T27] Not tainted syzkaller #0 [ 225.401415][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.410729][ T27] task:kworker/1:10 state:D stack:24336 pid: 4332 ppid: 2 flags:0x00004000 [ 225.421362][ T27] Workqueue: usb_hub_wq hub_event [ 225.426602][ T27] Call Trace: [ 225.429901][ T27] [ 225.435028][ T27] __schedule+0x11ef/0x43c0 [ 225.439598][ T27] ? release_firmware_map_entry+0x190/0x190 [ 225.445839][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 225.450807][ T27] ? lock_acquire+0x208/0x400 [ 225.455872][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.461099][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.469615][ T27] schedule+0x11b/0x1e0 [ 225.475111][ T27] schedule_timeout+0xbd/0x2d0 [ 225.480080][ T27] ? console_conditional_schedule+0x40/0x40 [ 225.490316][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 225.496890][ T27] ? lock_chain_count+0x20/0x20 [ 225.501778][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.507333][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.512908][ T27] do_wait_for_common+0x2a2/0x450 [ 225.517975][ T27] ? console_conditional_schedule+0x40/0x40 [ 225.524032][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 225.530660][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 225.535769][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 225.541338][ T27] ? kthread_data+0x4b/0xc0 [ 225.549736][ T27] wait_for_completion+0x48/0x60 [ 225.556102][ T27] flush_workqueue+0x664/0x13d0 [ 225.561105][ T27] ? rcu_work_rcufn+0x120/0x120 [ 225.570533][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 225.576153][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 225.581513][ T27] ? usb_kill_anchored_urbs+0x326/0x340 [ 225.587521][ T27] ath6kl_usb_power_off+0x34/0x40 [ 225.592869][ T27] ath6kl_core_init+0xac4/0x1090 [ 225.597930][ T27] ? lockdep_softirqs_off+0x430/0x430 [ 225.603770][ T27] ? ath6kl_core_rx_complete+0x70/0x70 [ 225.609352][ T27] ? memcpy+0x3c/0x60 [ 225.614236][ T27] ? ath6kl_core_create+0x7d6/0x980 [ 225.619573][ T27] ath6kl_usb_probe+0x1302/0x1410 [ 225.625168][ T27] usb_probe_interface+0x5c5/0xb20 [ 225.630433][ T27] ? usb_register_driver+0x3d0/0x3d0 [ 225.636130][ T27] really_probe+0x284/0xc80 [ 225.640773][ T27] __driver_probe_device+0x1ef/0x390 [ 225.646481][ T27] driver_probe_device+0x4f/0x420 [ 225.651634][ T27] __device_attach_driver+0x2b0/0x500 [ 225.659331][ T27] ? deferred_probe_work_func+0x230/0x230 [ 225.665358][ T27] bus_for_each_drv+0x184/0x210 [ 225.670375][ T27] ? deferred_probe_work_func+0x230/0x230 [ 225.676732][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 225.682814][ T27] __device_attach+0x2a8/0x480 [ 225.687692][ T27] ? device_attach+0x20/0x20 [ 225.692649][ T27] ? kobject_uevent_env+0x371/0x890 [ 225.698047][ T27] bus_probe_device+0xbc/0x1e0 [ 225.703274][ T27] device_add+0xa3a/0x1000 [ 225.707831][ T27] usb_set_configuration+0x1991/0x1fd0 [ 225.717366][ T27] usb_generic_driver_probe+0x89/0x150 [ 225.723165][ T27] usb_probe_device+0x139/0x270 [ 225.728189][ T27] ? usb_register_device_driver+0x230/0x230 [ 225.738381][ T27] really_probe+0x284/0xc80 [ 225.744274][ T27] __driver_probe_device+0x1ef/0x390 [ 225.749726][ T27] driver_probe_device+0x4f/0x420 [ 225.759103][ T27] __device_attach_driver+0x2b0/0x500 [ 225.767558][ T27] ? deferred_probe_work_func+0x230/0x230 [ 225.777898][ T27] bus_for_each_drv+0x184/0x210 [ 225.784338][ T27] ? deferred_probe_work_func+0x230/0x230 [ 225.790234][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 225.800327][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.806953][ T27] __device_attach+0x2a8/0x480 [ 225.811874][ T27] ? device_attach+0x20/0x20 [ 225.817366][ T27] ? kobject_uevent_env+0x371/0x890 [ 225.824222][ T27] bus_probe_device+0xbc/0x1e0 [ 225.829112][ T27] device_add+0xa3a/0x1000 [ 225.833980][ T27] usb_new_device+0xd65/0x1660 [ 225.838884][ T27] ? lock_chain_count+0x20/0x20 [ 225.844162][ T27] ? usb_disconnect+0x8a0/0x8a0 [ 225.849165][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.854824][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.860148][ T27] hub_event+0x2e4a/0x55e0 [ 225.864997][ T27] ? hub_post_resume+0x120/0x120 [ 225.870078][ T27] ? read_lock_is_recursive+0x10/0x10 [ 225.877636][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 225.884224][ T27] ? _raw_spin_unlock+0x40/0x40 [ 225.889273][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.895018][ T27] process_one_work+0x85f/0x1010 [ 225.900135][ T27] ? worker_detach_from_pool+0x240/0x240 [ 225.906186][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 225.911634][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 225.917120][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 225.923288][ T27] ? wq_worker_running+0x97/0x170 [ 225.928463][ T27] worker_thread+0xaa6/0x1290 [ 225.933682][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.939008][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 225.945414][ T27] kthread+0x436/0x520 [ 225.949639][ T27] ? rcu_lock_release+0x20/0x20 [ 225.954926][ T27] ? kthread_blkcg+0xd0/0xd0 [ 225.959681][ T27] ret_from_fork+0x1f/0x30 [ 225.964488][ T27] [ 225.967694][ T27] [ 225.967694][ T27] Showing all locks held in the system: [ 225.984592][ T27] 1 lock held by khungtaskd/27: [ 225.991385][ T27] #0: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 226.001281][ T27] 2 locks held by pvrusb2-context/2426: [ 226.007173][ T27] #0: ffff888055ab0188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_initialize+0xe1/0x3c10 [ 226.018071][ T27] #1: ffffffff8c1cfb90 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xf4/0x330 [ 226.029054][ T27] 2 locks held by getty/3957: [ 226.034321][ T27] #0: ffff88814d0c6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 226.044401][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 226.055369][ T27] 3 locks held by kworker/1:3/4178: [ 226.060690][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 226.071574][ T27] #1: ffffc90002defd00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 226.083799][ T27] #2: ffff888024161220 (&dev->mutex){....}-{3:3}, at: ath9k_hif_usb_firmware_cb+0x32c/0x4b0 [ 226.096094][ T27] 4 locks held by udevd/4182: [ 226.100883][ T27] #0: ffff888022214d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 226.110147][ T27] #1: ffff888024f15088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 226.119720][ T27] #2: ffff88802317aa00 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 226.129863][ T27] #3: ffff88807c2ce220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 226.139849][ T27] 5 locks held by kworker/0:4/4231: [ 226.145420][ T27] #0: ffff8880183f8938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 226.156496][ T27] #1: ffffc90003d7fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 226.168214][ T27] #2: ffff888023faa220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 226.177438][ T27] #3: ffff888078450220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 226.190299][ T27] #4: ffff8880200e01a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 226.200979][ T27] 5 locks held by kworker/1:10/4332: [ 226.208539][ T27] #0: ffff8880183f8938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 226.219590][ T27] #1: ffffc90003e3fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 226.230963][ T27] #2: ffff888024161220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 226.241685][ T27] #3: ffff88807c2ce220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 226.251164][ T27] #4: ffff8880767451a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 226.261079][ T4231] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 226.263380][ T27] 4 locks held by udevd/4689: [ 226.274017][ T27] #0: ffff88802ac5d2f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 226.282928][ T27] #1: ffff888061f53088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 226.292308][ T27] #2: ffff88801b5ac1d8 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 226.293323][ T4231] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 226.308261][ T4231] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 226.310964][ T27] #3: ffff888078450220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 226.328582][ T27] 6 locks held by kworker/0:10/5306: [ 226.334932][ T27] #0: ffff8880183f8938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 226.341086][ T4231] usb 1-1: USB disconnect, device number 19 [ 226.351749][ T27] #1: ffffc900032ffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 226.364256][ T27] #2: ffff8880240f1220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 226.378844][ T27] #3: ffff8880615ae220 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x107/0x8a0 [ 226.388283][ T27] #4: ffff8880629c11a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb0/0x750 [ 226.399333][ T27] #5: ffff888055ab0188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_disconnect+0x69/0x500 [ 226.409911][ T27] 2 locks held by kworker/0:11/5307: [ 226.415310][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 226.426039][ T27] #1: ffffc9000333fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 226.438243][ T27] 4 locks held by udevd/6307: [ 226.443699][ T27] #0: ffff888023a88418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 226.453103][ T27] #1: ffff88806358b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 226.462589][ T27] #2: ffff88801fd1aa00 (kn->active#119){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 226.472310][ T27] #3: ffff8880615ae220 (&dev->mutex){....}-{3:3}, at: serial_show+0x22/0x90 [ 226.481339][ T27] 2 locks held by dhcpcd/12543: [ 226.486294][ T27] #0: ffff8880239c2120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 226.496128][ T27] #1: ffffffff8c323de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 226.507093][ T27] 2 locks held by dhcpcd/12544: [ 226.511949][ T27] #0: ffff888060052120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 226.521772][ T27] #1: ffffffff8c323de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 226.533239][ T27] [ 226.539389][ T27] ============================================= [ 226.539389][ T27] [ 226.549624][ T27] NMI backtrace for cpu 1 [ 226.553988][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 226.561209][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.571277][ T27] Call Trace: [ 226.574557][ T27] [ 226.577487][ T27] dump_stack_lvl+0x188/0x250 [ 226.582191][ T27] ? show_regs_print_info+0x20/0x20 [ 226.587428][ T27] ? load_image+0x400/0x400 [ 226.591932][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 226.597311][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 226.602476][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 226.607439][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 226.613610][ T27] ? _printk+0xda/0x130 [ 226.617783][ T27] ? load_image+0x400/0x400 [ 226.622306][ T27] ? load_image+0x400/0x400 [ 226.626828][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 226.632923][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 226.638931][ T27] watchdog+0xe0f/0xe50 [ 226.643111][ T27] kthread+0x436/0x520 [ 226.647177][ T27] ? hungtask_pm_notify+0x40/0x40 [ 226.652215][ T27] ? kthread_blkcg+0xd0/0xd0 [ 226.656829][ T27] ret_from_fork+0x1f/0x30 [ 226.661286][ T27] [ 226.664783][ T27] Sending NMI from CPU 1 to CPUs 0: [ 226.670011][ C0] NMI backtrace for cpu 0 [ 226.670021][ C0] CPU: 0 PID: 4176 Comm: syz-executor Not tainted syzkaller #0 [ 226.670038][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.670047][ C0] RIP: 0010:kasan_check_range+0x92/0x290 [ 226.670070][ C0] Code: 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 0f 85 86 01 00 00 49 ff c3 48 ff c3 75 ee 18 01 00 00 44 89 dd 83 e5 07 0f 84 b5 00 00 00 41 80 3b 00 4d [ 226.670085][ C0] RSP: 0018:ffffc900030cf6b0 EFLAGS: 00000056 [ 226.670101][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff815d3d48 [ 226.670114][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d80c8 [ 226.670125][ C0] RBP: ffffc900030cf930 R08: ffffffff901d80cf R09: 1ffffffff203b019 [ 226.670137][ C0] R10: dffffc0000000000 R11: fffffbfff203b01a R12: dffffc0000000001 [ 226.670150][ C0] R13: ffff88807b5d9dc0 R14: 1ffffffff203b019 R15: 0000000000000001 [ 226.670162][ C0] FS: 000055556eb7b500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 226.670178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.670190][ C0] CR2: 00007ffdec2c02c0 CR3: 0000000078a64000 CR4: 00000000003506f0 [ 226.670205][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.670215][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.670226][ C0] Call Trace: [ 226.670231][ C0] [ 226.670238][ C0] __lock_acquire+0x12e8/0x7d10 [ 226.670281][ C0] ? verify_lock_unused+0x140/0x140 [ 226.670299][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 226.670319][ C0] ? verify_lock_unused+0x140/0x140 [ 226.670347][ C0] ? verify_lock_unused+0x140/0x140 [ 226.670365][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 226.670379][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 226.670397][ C0] lock_acquire+0x19e/0x400 [ 226.670413][ C0] ? ktime_get+0x31/0x270 [ 226.670429][ C0] ? read_lock_is_recursive+0x10/0x10 [ 226.670448][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 226.670462][ C0] ? ktime_get+0x31/0x270 [ 226.670475][ C0] seqcount_lockdep_reader_access+0xcd/0x1d0 [ 226.670489][ C0] ? ktime_get+0x31/0x270 [ 226.670501][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 226.670514][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 226.670531][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 226.670546][ C0] ? _raw_spin_lock+0x40/0x40 [ 226.670559][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 226.670574][ C0] ktime_get+0x31/0x270 [ 226.670588][ C0] hrtimer_start_range_ns+0x338/0xc20 [ 226.670614][ C0] do_nanosleep+0x1a1/0x770 [ 226.670631][ C0] ? usleep_range_state+0x180/0x180 [ 226.670648][ C0] hrtimer_nanosleep+0x33e/0x590 [ 226.670666][ C0] ? nanosleep_copyout+0x110/0x110 [ 226.670683][ C0] ? __remove_hrtimer+0x3a0/0x3a0 [ 226.670696][ C0] ? timespec64_add_safe+0x1f0/0x1f0 [ 226.670714][ C0] __se_sys_clock_nanosleep+0x30b/0x3a0 [ 226.670732][ C0] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 226.670749][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 226.670766][ C0] do_syscall_64+0x4c/0xa0 [ 226.670779][ C0] ? clear_bhb_loop+0x30/0x80 [ 226.670794][ C0] ? clear_bhb_loop+0x30/0x80 [ 226.670808][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.670823][ C0] RIP: 0033:0x7f4bc72e7fd7 [ 226.670834][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 226.670846][ C0] RSP: 002b:00007ffdf6c0b990 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 226.670860][ C0] RAX: ffffffffffffffda RBX: 000055556eb7b500 RCX: 00007f4bc72e7fd7 [ 226.670871][ C0] RDX: 00007ffdf6c0b9d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.670880][ C0] RBP: 00007ffdf6c0beb0 R08: 0000000000000000 R09: 0000000000000000 [ 226.670889][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 226.670897][ C0] R13: 00007ffdf6c0ba0c R14: 00007ffdf6c0baa0 R15: 0000000000000000 [ 226.670912][ C0] [ 226.688322][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 227.065905][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 227.073093][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.083295][ T27] Call Trace: [ 227.086566][ T27] [ 227.089503][ T27] dump_stack_lvl+0x188/0x250 [ 227.094202][ T27] ? show_regs_print_info+0x20/0x20 [ 227.099417][ T27] ? load_image+0x400/0x400 [ 227.103948][ T27] panic+0x2e5/0x810 [ 227.107877][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 227.113540][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 227.118075][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 227.124244][ T27] watchdog+0xe4e/0xe50 [ 227.128411][ T27] kthread+0x436/0x520 [ 227.132491][ T27] ? hungtask_pm_notify+0x40/0x40 [ 227.137513][ T27] ? kthread_blkcg+0xd0/0xd0 [ 227.142099][ T27] ret_from_fork+0x1f/0x30 [ 227.146530][ T27] [ 227.149897][ T27] Kernel Offset: disabled [ 227.154258][ T27] Rebooting in 86400 seconds..