last executing test programs: 4.800446238s ago: executing program 3 (id=2886): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001140)={'geneve0\x00', &(0x7f0000001100)=@ethtool_modinfo}) 4.667339897s ago: executing program 3 (id=2889): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c0000000c4845"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.606006015s ago: executing program 3 (id=2930): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 2.469852074s ago: executing program 3 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xfffffffffffff6ff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.06522306s ago: executing program 3 (id=2941): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413"], 0x0) 1.216031871s ago: executing program 2 (id=2966): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, 0x0, 0x0) 1.108499074s ago: executing program 1 (id=2969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.07924311s ago: executing program 2 (id=2970): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 985.44942ms ago: executing program 2 (id=2972): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sync_file_range(r0, 0x2, 0x4, 0x3) 898.020079ms ago: executing program 1 (id=2975): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") setxattr$incfs_id(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) 865.288766ms ago: executing program 2 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001cc0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x0) 776.688485ms ago: executing program 4 (id=2980): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 679.078385ms ago: executing program 2 (id=2982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x55, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 620.765377ms ago: executing program 4 (id=2983): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x46, 0x2df, &(0x7f0000000f80)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 553.384802ms ago: executing program 2 (id=2985): syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce800090502020002020000090582020002"], 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x20000090) 470.652829ms ago: executing program 1 (id=2987): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000402000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 470.11437ms ago: executing program 0 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) 415.186451ms ago: executing program 0 (id=2989): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000580)=0x16, 0x4) 374.2891ms ago: executing program 4 (id=2990): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5760, 0x0) 294.381917ms ago: executing program 0 (id=2991): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000440)={0x200000, 0x200001, 0x4, 0x4000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 240.189858ms ago: executing program 0 (id=2992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x4000050) 228.833761ms ago: executing program 4 (id=2993): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) 218.997303ms ago: executing program 1 (id=2994): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r0}) 146.761399ms ago: executing program 0 (id=2995): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004e80)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0xcbb6, 0x6, 0x8, 0x6, {0x1, 0x4, 0x100000000, 0x5, 0x2b8df976, 0xff, 0x7fff, 0x9, 0xb, 0x6000, 0x5, 0x0, 0x0, 0x3, 0xffffff46}}, {0x0, 0x9}}}, 0xa0) 130.386452ms ago: executing program 1 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 125.781013ms ago: executing program 4 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40045}, 0x4) 79.215783ms ago: executing program 3 (id=2998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x19, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x9c}}, 0x0) 45.43869ms ago: executing program 0 (id=2999): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0x4}) 10.312797ms ago: executing program 4 (id=3000): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) 0s ago: executing program 1 (id=3001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x4000000) kernel console output (not intermixed with test programs): ero lowest_vcn. [ 87.225547][ T5392] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 87.245398][ T5392] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 87.259501][ T5392] ntfs: volume version 3.1. [ 87.265969][ T5407] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2928: inode #15: comm syz.4.494: corrupted xattr block 252 [ 87.300283][ T5392] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 87.305301][ T5407] EXT4-fs (loop4): Remounting filesystem read-only [ 87.318245][ T5392] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 87.349640][ T4453] usb 1-1: Using ep0 maxpacket: 8 [ 87.358059][ T5392] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 87.361254][ T5407] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 87.383913][ T5407] EXT4-fs (loop4): 1 orphan inode deleted [ 87.390312][ T5407] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000002,init_itable=0x00000000000000fd,noquota,orlov,nodiscard,usrjquota=,init_itable=0x0000000000000009,init_itable=0x0000000000000003. Quota mode: none. [ 87.435088][ T5392] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 87.489915][ T4453] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 87.509235][ T4453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.551002][ T4453] usb 1-1: config 0 descriptor?? [ 87.565193][ T5407] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 4: comm syz.4.494: lblock 0 mapped to illegal pblock 4 (length 1) [ 87.619668][ T5407] EXT4-fs (loop4): Remounting filesystem read-only [ 87.829895][ T4453] usb 1-1: string descriptor 0 read error: -71 [ 87.836177][ T4453] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 87.856723][ T4453] usb 1-1: Found UVC 0.00 device (2833:0201) [ 87.898873][ T4453] usb 1-1: No valid video chain found. [ 87.925035][ T4453] usb 1-1: USB disconnect, device number 2 [ 88.432035][ T5471] xt_l2tp: wrong L2TP version: 0 [ 88.567682][ T5434] loop3: detected capacity change from 0 to 32768 [ 88.578032][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.598464][ T5479] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.625108][ T5485] netlink: 224 bytes leftover after parsing attributes in process `syz.4.532'. [ 88.752501][ T5434] XFS (loop3): Mounting V5 Filesystem [ 88.819649][ T1332] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.871003][ T5434] XFS (loop3): Ending clean mount [ 88.947228][ T4191] XFS (loop3): Unmounting Filesystem [ 89.190595][ T1332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.230134][ T1332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.265649][ T1332] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.299252][ T1332] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.334533][ T1332] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 89.354626][ T5537] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 89.377585][ T1332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.459402][ T5541] loop1: detected capacity change from 0 to 2048 [ 89.628537][ T5557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.650057][ T1332] gud 3-1:1.0: Protocol version 33 is not supported [ 89.705634][ T5541] attempt to access beyond end of device [ 89.705634][ T5541] loop1: rw=0, want=281474976710724, limit=2048 [ 89.739825][ T5541] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 89.765324][ T5541] attempt to access beyond end of device [ 89.765324][ T5541] loop1: rw=0, want=281474976710724, limit=2048 [ 89.787125][ T5541] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 89.796729][ T5541] NILFS (loop1): error -5 truncating bmap (ino=16) [ 89.870396][ T21] usb 3-1: USB disconnect, device number 2 [ 89.977057][ T5584] loop0: detected capacity change from 0 to 256 [ 90.113081][ T5592] loop1: detected capacity change from 0 to 1024 [ 90.247831][ T5592] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.292188][ T5607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.587'. [ 90.334888][ T5607] netlink: 356 bytes leftover after parsing attributes in process `syz.0.587'. [ 90.352564][ T5609] loop4: detected capacity change from 0 to 1024 [ 90.383106][ T4190] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.411220][ T5609] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 90.467935][ T5616] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 90.549551][ T5609] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.558830][ T5609] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.688332][ T5609] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 3: comm syz.4.588: lblock 3 mapped to illegal pblock 3 (length 1) [ 90.715406][ T5637] netlink: 'syz.1.599': attribute type 2 has an invalid length. [ 90.757260][ T5637] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 90.788121][ T5637] netlink: 224 bytes leftover after parsing attributes in process `syz.1.599'. [ 90.800212][ T5609] __quota_error: 5 callbacks suppressed [ 90.800228][ T5609] Quota error (device loop4): write_blk: dquota write failed [ 90.817348][ T5609] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 90.860230][ T5609] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 90.893174][ T5609] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.588: Failed to acquire dquot type 0 [ 90.920378][ T5609] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.588: lblock 3 mapped to illegal pblock 3 (length 1) [ 90.978441][ T5609] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.015634][ T5609] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.588: Failed to acquire dquot type 0 [ 91.064821][ T5659] loop3: detected capacity change from 0 to 2048 [ 91.075966][ T5609] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.588: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.103609][ T5609] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.588: lblock 3 mapped to illegal pblock 3 (length 1) [ 91.105904][ T5666] loop0: detected capacity change from 0 to 256 [ 91.134571][ T5609] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.186108][ T5609] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.588: Failed to acquire dquot type 0 [ 91.201442][ T5670] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.212793][ T5609] EXT4-fs (loop4): 1 orphan inode deleted [ 91.226594][ T5659] attempt to access beyond end of device [ 91.226594][ T5659] loop3: rw=0, want=281474976710724, limit=2048 [ 91.274555][ T5609] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,max_batch_time=0x0000000000000007,acl,stripe=0x00000000000005b8,auto_da_alloc,jqfmt=vfsold,dax=never,usrjquota=,,errors=continue. Quota mode: writeback. [ 91.305121][ T5659] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 91.328293][ T5659] attempt to access beyond end of device [ 91.328293][ T5659] loop3: rw=0, want=281474976710724, limit=2048 [ 91.378366][ T5659] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 91.390492][ T5659] NILFS (loop3): error -5 truncating bmap (ino=16) [ 91.407514][ T5609] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 91.464930][ T5609] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.465449][ T5678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 91.688269][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.704138][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.718498][ T5696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.626'. [ 91.727798][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.737081][ T5696] netlink: 356 bytes leftover after parsing attributes in process `syz.1.626'. [ 91.746461][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.757008][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.776726][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.797559][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.838139][ T5694] IPv6: sit1: Disabled Multicast RS [ 92.381076][ T5756] loop4: detected capacity change from 0 to 256 [ 92.384547][ T5751] loop1: detected capacity change from 0 to 512 [ 92.442978][ T5751] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 92.460718][ T5756] exfat: Deprecated parameter 'utf8' [ 92.546413][ T5756] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 92.580268][ T5751] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.654: bad orphan inode 15 [ 92.641662][ T5751] ext4_test_bit(bit=14, block=18) = 1 [ 92.667082][ T5751] is_bad_inode(inode)=0 [ 92.691504][ T5751] NEXT_ORPHAN(inode)=1023 [ 92.728284][ T5751] max_ino=32 [ 92.738945][ T5751] i_nlink=0 [ 92.743308][ T5751] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.761224][ T5751] ext2 filesystem being mounted at /167/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 92.856426][ T5751] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #12: comm syz.1.654: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 61(61) [ 93.216372][ T5796] bond0: Error: Cannot enslave bond to itself. [ 93.260687][ T5800] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 93.741371][ T5828] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2 [ 93.988519][ T5842] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 94.187733][ T5812] loop4: detected capacity change from 0 to 32768 [ 94.271437][ T5862] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 94.297370][ T5812] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.684 (5812) [ 94.342101][ T5812] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 94.359742][ T5812] BTRFS info (device loop4): enabling disk space caching [ 94.374689][ T5812] BTRFS info (device loop4): force clearing of disk cache [ 94.389690][ T5812] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.409509][ T5812] BTRFS info (device loop4): use zstd compression, level 3 [ 94.425597][ T5812] BTRFS info (device loop4): disk space caching is enabled [ 94.443953][ T5812] BTRFS info (device loop4): has skinny extents [ 94.499858][ T1332] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 94.519729][ T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 94.558543][ T5876] loop2: detected capacity change from 0 to 2048 [ 94.667161][ T5894] cgroup: noprefix used incorrectly [ 94.668153][ T5891] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.720144][ T5812] BTRFS info (device loop4): enabling ssd optimizations [ 94.737603][ T5812] BTRFS info (device loop4): clearing free space tree [ 94.746376][ T5812] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.760155][ T5812] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.900009][ T1332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.939928][ T1332] usb 4-1: not running at top speed; connect to a high speed hub [ 94.970097][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.971833][ T5905] netlink: 'syz.0.721': attribute type 2 has an invalid length. [ 95.006751][ T5907] x_tables: unsorted entry at hook 3 [ 95.026345][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 95.029912][ T1332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.075473][ T1332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.129958][ T21] usb 2-1: config 4 has an invalid interface number: 84 but max is 0 [ 95.141119][ T21] usb 2-1: config 4 has no interface number 0 [ 95.147265][ T21] usb 2-1: config 4 interface 84 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 95.149429][ T5911] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 95.178862][ T21] usb 2-1: config 4 interface 84 has no altsetting 0 [ 95.245038][ T5913] futex_wake_op: syz.2.726 tries to shift op by 144; fix this program [ 95.283181][ T5913] futex_wake_op: syz.2.726 tries to shift op by 144; fix this program [ 95.339931][ T1332] usb 4-1: string descriptor 0 read error: -22 [ 95.346904][ T1332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.369866][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=36.a1 [ 95.374545][ T1332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.378951][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.378974][ T21] usb 2-1: Product: syz [ 95.378989][ T21] usb 2-1: Manufacturer: syz [ 95.417527][ T21] usb 2-1: SerialNumber: syz [ 95.450281][ T5860] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 95.477459][ T1332] usb 4-1: 0:1 : does not exist [ 95.496108][ T1332] usb 4-1: 0:2 : does not exist [ 95.751271][ T21] xbox_remote_probe: Unexpected endpoint_in [ 95.785578][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.796442][ T21] usb 2-1: USB disconnect, device number 3 [ 95.816613][ T23] usb 4-1: USB disconnect, device number 4 [ 95.984634][ T5953] loop0: detected capacity change from 0 to 2048 [ 95.987516][ T5957] loop2: detected capacity change from 0 to 256 [ 96.026337][ T5953] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 96.054762][ T5953] UDF-fs: unknown compression code (0) [ 96.491396][ T5982] loop2: detected capacity change from 0 to 512 [ 96.535260][ T5975] loop1: detected capacity change from 0 to 4096 [ 96.542015][ T5982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.627901][ T5982] EXT4-fs (loop2): 1 truncate cleaned up [ 96.635077][ T5975] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 96.664882][ T5982] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 96.777475][ T5975] ntfs: volume version 3.1. [ 96.827816][ T5982] Invalid option length (771) for dns_resolver key [ 97.012943][ T5990] loop0: detected capacity change from 0 to 32768 [ 97.033322][ T5999] netlink: 'syz.3.768': attribute type 2 has an invalid length. [ 97.084686][ T5999] __nla_validate_parse: 18 callbacks suppressed [ 97.084704][ T5999] netlink: 224 bytes leftover after parsing attributes in process `syz.3.768'. [ 97.118198][ T6001] loop2: detected capacity change from 0 to 1024 [ 97.178059][ T6001] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 97.230590][ T6001] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.244841][ T6001] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.286326][ T6001] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 3: comm syz.2.767: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.307597][ T5990] XFS (loop0): Mounting V5 Filesystem [ 97.332691][ T6001] Quota error (device loop2): write_blk: dquota write failed [ 97.352192][ T6001] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 97.426497][ T6001] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.462123][ T6001] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.767: Failed to acquire dquot type 0 [ 97.475454][ T5990] XFS (loop0): Ending clean mount [ 97.485696][ T6001] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 3: comm syz.2.767: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.526972][ T6001] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.542104][ T6001] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.767: Failed to acquire dquot type 0 [ 97.553544][ T4324] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 97.571119][ T6001] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.767: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.606960][ T6001] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 3: comm syz.2.767: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.633925][ T6001] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.645122][ T4193] XFS (loop0): Unmounting Filesystem [ 97.651956][ T6001] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.767: Failed to acquire dquot type 0 [ 97.693658][ T6001] EXT4-fs (loop2): 1 orphan inode deleted [ 97.714301][ T6001] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,max_batch_time=0x0000000000000007,acl,stripe=0x00000000000005b8,auto_da_alloc,jqfmt=vfsold,dax=never,usrjquota=,,errors=continue. Quota mode: writeback. [ 97.806096][ T6001] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 97.826714][ T6001] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.964840][ T4324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.997140][ T4324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.129959][ T4324] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 98.142941][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.162871][ T4324] usb 4-1: SerialNumber: syz [ 98.231859][ T26] audit: type=1326 audit(1790868116.181:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cde61b159 code=0x7ffc0000 [ 98.264769][ T4324] usb 4-1: 0:2 : does not exist [ 98.306386][ T26] audit: type=1326 audit(1790868116.181:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cde61b159 code=0x7ffc0000 [ 98.361692][ T26] audit: type=1326 audit(1790868116.201:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cde61b159 code=0x7ffc0000 [ 98.435591][ T26] audit: type=1326 audit(1790868116.201:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cde61b159 code=0x7ffc0000 [ 98.494756][ T6070] trusted_key: encrypted_key: master key parameter is missing [ 98.505846][ T4324] usb 4-1: USB disconnect, device number 5 [ 99.177205][ T6100] loop2: detected capacity change from 0 to 32768 [ 99.223821][ T6100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.812 (6100) [ 99.265368][ T6100] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 99.283614][ T6100] BTRFS info (device loop2): enabling disk space caching [ 99.295855][ T6100] BTRFS info (device loop2): force clearing of disk cache [ 99.338375][ T6100] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.376447][ T6100] BTRFS info (device loop2): use zstd compression, level 3 [ 99.379965][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.825'. [ 99.390016][ T6100] BTRFS info (device loop2): disk space caching is enabled [ 99.410225][ T6100] BTRFS info (device loop2): has skinny extents [ 99.601487][ T6157] loop1: detected capacity change from 0 to 16 [ 99.625891][ T6157] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 99.692799][ T6100] BTRFS info (device loop2): enabling ssd optimizations [ 99.727285][ T6100] BTRFS info (device loop2): clearing free space tree [ 99.758712][ T6169] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 99.765935][ T6100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.825087][ T6174] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 99.829724][ T6100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.073591][ T6183] loop4: detected capacity change from 0 to 4096 [ 100.121262][ T6183] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 100.419726][ T6183] ntfs3: loop4: failed to convert "c46c" to iso8859-15 [ 100.748980][ T6182] loop1: detected capacity change from 0 to 32768 [ 101.117998][ T6191] set_capacity_and_notify: 1 callbacks suppressed [ 101.118013][ T6191] loop2: detected capacity change from 0 to 32768 [ 101.245583][ T6191] XFS (loop2): Mounting V5 Filesystem [ 101.356946][ T6191] XFS (loop2): Ending clean mount [ 101.437871][ T4195] XFS (loop2): Unmounting Filesystem [ 101.621949][ T6234] netlink: 44 bytes leftover after parsing attributes in process `syz.3.864'. [ 101.660029][ T6234] netlink: 68 bytes leftover after parsing attributes in process `syz.3.864'. [ 101.812554][ T6242] netlink: 220 bytes leftover after parsing attributes in process `syz.1.851'. [ 101.852647][ T6248] rdma_rxe: rxe creation allowed on top of a real device only [ 101.932484][ T6252] loop3: detected capacity change from 0 to 512 [ 101.974467][ T6252] EXT4-fs (loop3): Ignoring removed oldalloc option [ 102.096191][ T6252] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 102.451993][ T6297] netlink: 'syz.4.892': attribute type 13 has an invalid length. [ 102.489807][ T6297] gretap0: refused to change device tx_queue_len [ 102.507003][ T6297] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.780421][ T6328] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 12 out of range (51000000..2150000000) [ 102.855435][ T6336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.910'. [ 102.867507][ T6338] netlink: 'syz.2.912': attribute type 11 has an invalid length. [ 102.991650][ T6348] loop2: detected capacity change from 0 to 512 [ 103.035595][ T6354] netlink: 'syz.3.918': attribute type 13 has an invalid length. [ 103.046973][ T6348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.142132][ T6363] netlink: 'syz.4.922': attribute type 3 has an invalid length. [ 103.151516][ T6363] netlink: 'syz.4.922': attribute type 3 has an invalid length. [ 103.325176][ T6378] program syz.2.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.331627][ T6376] loop4: detected capacity change from 0 to 2048 [ 103.374526][ T6382] SET target dimension over the limit! [ 103.423283][ T6388] ceph: No source [ 103.467969][ T6376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.478034][ T6390] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_key_bytes=-6] [ 103.487963][ T6390] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 103.496784][ T6390] Error parsing options; rc = [-22] [ 103.639912][ T1332] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.647558][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.899880][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 104.009810][ T1332] usb 2-1: config 2 has an invalid interface number: 3 but max is 0 [ 104.018053][ T1332] usb 2-1: config 2 has no interface number 0 [ 104.024761][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.036113][ T1332] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 104.045011][ T4176] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.045634][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.066804][ T1332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.078328][ T7] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 104.087946][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.098747][ T7] usb 3-1: config 0 descriptor?? [ 104.110759][ T1332] ums-realtek 2-1:2.3: USB Mass Storage device detected [ 104.147949][ T7] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 104.330130][ T7] usb 2-1: USB disconnect, device number 4 [ 104.371695][ T1332] usb 3-1: USB disconnect, device number 3 [ 104.650115][ T4176] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 104.659286][ T4176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.671977][ T4176] usb 5-1: Product: syz [ 104.676202][ T4176] usb 5-1: Manufacturer: syz [ 104.683114][ T4176] usb 5-1: SerialNumber: syz [ 104.692141][ T4176] usb 5-1: config 0 descriptor?? [ 104.732929][ T4176] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 104.829743][ T4456] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.065638][ T6454] loop2: detected capacity change from 0 to 8192 [ 105.073480][ T4456] usb 4-1: Using ep0 maxpacket: 32 [ 105.097951][ T6454] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.172412][ T23] usb 5-1: USB disconnect, device number 4 [ 105.191120][ T4456] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.212188][ T4456] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.248736][ T6463] damon: kdamond (6463) starts [ 105.351995][ T4456] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 105.366981][ T4456] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 105.376689][ T4456] usb 4-1: Product: syz [ 105.381419][ T4456] usb 4-1: Manufacturer: syz [ 105.441163][ T4456] hub 4-1:4.0: USB hub found [ 105.579741][ T1332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.659816][ T4456] hub 4-1:4.0: 2 ports detected [ 105.669968][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.733481][ T6476] netlink: 1052 bytes leftover after parsing attributes in process `syz.4.973'. [ 105.839725][ T1332] usb 3-1: Using ep0 maxpacket: 32 [ 105.853915][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 105.863105][ T4456] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 105.876910][ T4456] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 105.920166][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 105.940525][ T4456] usb 4-1: USB disconnect, device number 6 [ 105.970297][ T1332] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 105.981324][ T1332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.002953][ T1332] usb 3-1: config 0 descriptor?? [ 106.052747][ T1332] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 106.070475][ T1332] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 106.205965][ T21] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 106.225781][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.254534][ T21] usb 2-1: Product: syz [ 106.255843][ T7] usb 3-1: USB disconnect, device number 4 [ 106.258842][ T21] usb 2-1: Manufacturer: syz [ 106.280464][ T6508] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 106.287310][ T21] usb 2-1: SerialNumber: syz [ 106.307209][ T21] usb 2-1: config 0 descriptor?? [ 106.361533][ T21] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 106.503133][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 106.503159][ T26] audit: type=1400 audit(1790868124.451:8): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=6520 comm="syz.3.995" [ 106.578258][ T6529] libceph: osd_idle_ttl out of range [ 106.581007][ T21] ssu100: probe of 2-1:0.0 failed with error -71 [ 106.616837][ T6531] loop4: detected capacity change from 0 to 512 [ 106.630309][ T21] usb 2-1: USB disconnect, device number 5 [ 106.736826][ T6531] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.750731][ T6531] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.782458][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.160575][ T6573] tmpfs: Bad value for 'mpol' [ 107.265979][ T6583] loop4: detected capacity change from 0 to 128 [ 107.537053][ T6603] device gtp0 entered promiscuous mode [ 107.709695][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.723257][ T6618] sock: sock_timestamping_bind_phc: sock not bind to device [ 107.805842][ T6627] xt_connbytes: Forcing CT accounting to be enabled [ 107.820283][ T6627] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 107.838264][ T6627] xt_bpf: check failed: parse error [ 107.984502][ T6639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.109830][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 108.129623][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 108.138671][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.146797][ T1332] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.429734][ T1332] usb 5-1: Using ep0 maxpacket: 32 [ 108.599722][ T1332] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 108.619598][ T1332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.649849][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.655891][ T7] input input8: Device does not respond to id packet M [ 108.699786][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.705849][ T7] input input8: Device does not respond to id packet P [ 108.739847][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.745949][ T7] input input8: Device does not respond to id packet B [ 108.789874][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.796053][ T7] input input8: Device does not respond to id packet N [ 108.809781][ T1332] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 108.819441][ T1332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.827916][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.834483][ T1332] usb 5-1: Product: syz [ 108.836656][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'. [ 108.838673][ T1332] usb 5-1: Manufacturer: syz [ 108.838692][ T1332] usb 5-1: SerialNumber: syz [ 108.859865][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.882766][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.899849][ T7] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 108.908926][ T7] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8 [ 108.940697][ T7] usb 3-1: USB disconnect, device number 5 [ 109.056421][ T4682] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.069011][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1064'. [ 109.108295][ T6665] loop1: detected capacity change from 0 to 64 [ 109.230874][ T1332] usb 5-1: 0:1 : does not exist [ 109.235830][ T1332] usb 5-1: 0:2 : does not exist [ 109.247614][ T1332] usb 5-1: 0:3 : does not exist [ 109.254288][ T1332] usb 5-1: 0:4 : does not exist [ 109.259356][ T1332] usb 5-1: unit 6 not found! [ 109.265084][ T1332] usb 5-1: unit 7 not found! [ 109.337474][ T1332] usb 5-1: USB disconnect, device number 5 [ 109.363669][ T4682] usb 4-1: Using ep0 maxpacket: 8 [ 109.383994][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.459510][ T6679] device bond1 entered promiscuous mode [ 109.466193][ T6679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.566904][ T6690] netlink: 'syz.2.1078': attribute type 10 has an invalid length. [ 109.572014][ T6692] loop1: detected capacity change from 0 to 256 [ 109.575148][ T6690] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 109.585111][ T4682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.593310][ T6690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.707721][ T6694] netlink: 'syz.2.1079': attribute type 7 has an invalid length. [ 109.719950][ T4682] usb 4-1: config 86 has an invalid interface number: 78 but max is 0 [ 109.728200][ T4682] usb 4-1: config 86 has no interface number 0 [ 109.763261][ T4682] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 109.775790][ T6694] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 109.785452][ T4682] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 109.800896][ T6694] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1079'. [ 109.810302][ T4682] usb 4-1: config 86 interface 78 has no altsetting 0 [ 109.934961][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.937826][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.938003][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.977844][ T6714] netlink: 'syz.1.1089': attribute type 13 has an invalid length. [ 110.004600][ T4682] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 110.004633][ T4682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.004654][ T4682] usb 4-1: Product: syz [ 110.004669][ T4682] usb 4-1: Manufacturer: syz [ 110.004683][ T4682] usb 4-1: SerialNumber: syz [ 110.024640][ T6645] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 110.024774][ T6645] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 110.026427][ T6716] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 110.067667][ T6718] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 110.067690][ T6718] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1091'. [ 110.067775][ T6718] block nbd0: not configured, cannot reconfigure [ 110.264854][ T6731] loop1: detected capacity change from 0 to 64 [ 110.359751][ T4682] kvaser_usb 4-1:86.78: Cannot get software info, error -71 [ 110.374909][ T4682] kvaser_usb: probe of 4-1:86.78 failed with error -71 [ 110.386425][ T6735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1099'. [ 110.402428][ T4682] usb 4-1: USB disconnect, device number 7 [ 110.420498][ T6735] netlink: 'syz.2.1099': attribute type 3 has an invalid length. [ 111.372301][ T6795] loop4: detected capacity change from 0 to 256 [ 111.644510][ T6761] loop1: detected capacity change from 0 to 32768 [ 111.853644][ T6761] [ 111.853644][ T6761] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.853644][ T6761] [ 111.914499][ T1234] [ 111.914499][ T1234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.914499][ T1234] [ 111.914579][ T1234] [ 111.914579][ T1234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.914579][ T1234] [ 111.916979][ T276] [ 111.916979][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.916979][ T276] [ 111.917030][ T4187] [ 111.917030][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.917030][ T4187] [ 111.918993][ T4187] [ 111.918993][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.918993][ T4187] [ 112.016231][ T6831] loop2: detected capacity change from 0 to 1024 [ 112.094406][ T6836] loop1: detected capacity change from 0 to 512 [ 112.184454][ T6836] EXT4-fs (loop1): Ignoring removed oldalloc option [ 112.261615][ T6836] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,nombcache,abort,,errors=continue. Quota mode: writeback. [ 112.294162][ T6836] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.333718][ T6836] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1149: inode #327680: comm syz.1.1149: iget: illegal inode # [ 112.361072][ T6836] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1149: error while reading EA inode 327680 err=-117 [ 112.387930][ T6849] loop0: detected capacity change from 0 to 1764 [ 112.536931][ T6849] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 112.855635][ T6881] loop0: detected capacity change from 0 to 2048 [ 112.922916][ T6881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.932135][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 113.125370][ T6898] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1180'. [ 113.397957][ T6926] loop3: detected capacity change from 0 to 256 [ 113.600140][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.754884][ T6956] loop2: detected capacity change from 0 to 8 [ 113.775054][ T6962] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 113.930290][ T6974] dlm: no locking on control device [ 113.977772][ T6976] comedi comedi0: no supported board found! (req. bus/slot : 0/0) [ 113.992810][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1219'. [ 114.039679][ T7] usb 5-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.072639][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 114.102179][ T6985] Cannot find add_set index 3 as target [ 114.118202][ T6986] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 114.146075][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.168807][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.183923][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.285562][ T6998] bond0: ARP monitoring cannot be used with MII monitoring [ 114.342968][ T7] usb 5-1: string descriptor 0 read error: -22 [ 114.349285][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 114.388939][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.467364][ T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9 [ 114.594252][ T7019] ALSA: mixer_oss: invalid OSS volume 'u' [ 114.676598][ T7024] loop3: detected capacity change from 0 to 4096 [ 114.683473][ T3544] bcm5974 5-1:1.0: could not read from device [ 114.706930][ T7] usb 5-1: USB disconnect, device number 6 [ 114.716002][ T3544] bcm5974 5-1:1.0: could not read from device [ 114.824122][ T7024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.834151][ T7036] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1246'. [ 115.048243][ T26] audit: type=1107 audit(1790868132.991:9): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 115.277523][ T7052] nvme_rdma: malformed address passed: 1:4420 [ 115.389034][ T7028] loop1: detected capacity change from 0 to 32768 [ 115.486906][ T26] audit: type=1800 audit(1790868133.431:10): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1243" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 115.591587][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.599383][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.617763][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.632105][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.658884][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.075888][ T7107] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1281'. [ 116.340640][ T7119] loop4: detected capacity change from 0 to 4096 [ 116.390492][ T7119] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 116.413875][ T7137] xt_TCPMSS: Only works on TCP SYN packets [ 116.648568][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 116.802334][ T7170] Cannot find del_set index 4 as target [ 116.984726][ T7184] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 117.014463][ T7184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1319'. [ 117.047662][ T7184] device team0 entered promiscuous mode [ 117.053823][ T7184] device team_slave_0 entered promiscuous mode [ 117.060665][ T7184] device team_slave_1 entered promiscuous mode [ 117.078853][ T7184] bridge0: port 3(team0) entered blocking state [ 117.089410][ T7184] bridge0: port 3(team0) entered disabled state [ 117.105493][ T7184] bridge0: port 3(team0) entered blocking state [ 117.111868][ T7184] bridge0: port 3(team0) entered forwarding state [ 117.145961][ T7187] (unnamed net_device) (uninitialized): option mode: invalid value (7) [ 117.365831][ T4682] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.553551][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 117.570121][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 117.655918][ T7244] comedi comedi4: commands at RT priority not supported in this driver [ 117.752965][ T7254] loop4: detected capacity change from 0 to 512 [ 117.812588][ T4682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.833027][ T4682] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 117.849193][ T4682] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 117.869722][ T4682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.890375][ T4682] usb 4-1: config 0 descriptor?? [ 117.903884][ T7254] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 117.903999][ T7266] netlink: 'syz.0.1359': attribute type 8 has an invalid length. [ 117.922414][ T7254] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.955354][ T7269] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 117.976361][ T7254] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1355: inode #327680: comm syz.4.1355: iget: illegal inode # [ 117.999636][ T7254] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1355: error while reading EA inode 327680 err=-117 [ 118.317304][ T7295] netlink: 'syz.4.1371': attribute type 15 has an invalid length. [ 118.339924][ T4682] Bluetooth: Can't get state to change to load ram patch err [ 118.351877][ T4682] Bluetooth: Loading patch file failed [ 118.357397][ T4682] ath3k: probe of 4-1:0.0 failed with error -71 [ 118.393925][ T4682] usb 4-1: USB disconnect, device number 8 [ 118.408492][ T7301] xt_TCPMSS: Only works on TCP SYN packets [ 118.546193][ T7311] netlink: 'syz.1.1380': attribute type 9 has an invalid length. [ 118.557772][ T7311] netlink: 'syz.1.1380': attribute type 7 has an invalid length. [ 118.573145][ T7311] netlink: 'syz.1.1380': attribute type 8 has an invalid length. [ 118.745185][ T7327] loop2: detected capacity change from 0 to 512 [ 118.835852][ T7327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.871378][ T7327] EXT4-fs (loop2): 1 truncate cleaned up [ 118.906765][ T7327] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 119.042616][ T7338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1393'. [ 119.078850][ T7338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1393'. [ 119.088428][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.096222][ T4176] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.099670][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1393'. [ 119.331586][ T7342] netlink: 'syz.0.1396': attribute type 13 has an invalid length. [ 119.443677][ T4227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.472187][ T4176] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.492422][ T4176] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 119.520449][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.600046][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.619874][ T4176] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 3.00 [ 119.630131][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.639004][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.652033][ T4176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 119.669599][ T4176] usb 5-1: Product: syz [ 119.673782][ T4176] usb 5-1: Manufacturer: syz [ 119.730014][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 119.731377][ T4176] pl2303 5-1:1.0: required endpoints missing [ 119.749061][ T4176] pl2303 5-1:1.1: pl2303 converter detected [ 119.810045][ T21] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 119.827244][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 119.836099][ T21] usb 2-1: Product: syz [ 119.847513][ T21] usb 2-1: Manufacturer: syz [ 119.880404][ T4176] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 119.889909][ T4227] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 119.920420][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.936790][ T21] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 119.951885][ T4227] usb 4-1: config 0 descriptor?? [ 119.953177][ T21] usb 2-1: No streaming interface found for terminal 2. [ 119.986919][ T21] usb 2-1: Failed to create links for entity 3 [ 120.002208][ T4227] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 120.010373][ T21] usb 2-1: Failed to register entities (-22). [ 120.037451][ T4227] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 120.099597][ T4227] usb 5-1: USB disconnect, device number 7 [ 120.128085][ T4227] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 120.152888][ T4227] pl2303 5-1:1.1: device disconnected [ 120.197462][ T4176] usb 2-1: USB disconnect, device number 6 [ 120.232100][ T21] usb 4-1: USB disconnect, device number 9 [ 120.383863][ T26] audit: type=1107 audit(1790868138.331:11): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 120.707880][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 120.794794][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.195518][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1461'. [ 121.205104][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.249669][ T4682] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 121.297146][ T7484] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1465'. [ 121.324554][ T7484] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1465'. [ 121.328477][ T7487] loop0: detected capacity change from 0 to 512 [ 121.369820][ T7487] EXT4-fs (loop0): Ignoring removed oldalloc option [ 121.383881][ T7489] device netdevsim0 entered promiscuous mode [ 121.446318][ T7487] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,nombcache,abort,,errors=continue. Quota mode: writeback. [ 121.462056][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 121.472316][ T7487] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.500625][ T7500] loop3: detected capacity change from 0 to 512 [ 121.546012][ T7487] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1467: inode #327680: comm syz.0.1467: iget: illegal inode # [ 121.555487][ T7500] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 121.579878][ T23] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 121.582488][ T7487] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1467: error while reading EA inode 327680 err=-117 [ 121.598149][ T23] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 121.609313][ T23] usb 2-1: config 0 has no interface number 1 [ 121.615689][ T23] usb 2-1: config 0 has no interface number 2 [ 121.616591][ T7500] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.621902][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 121.644039][ T23] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 121.658309][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.665317][ T23] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 121.685446][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.707560][ T23] usb 2-1: config 0 descriptor?? [ 121.751033][ T7500] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1472: inode #327680: comm syz.3.1472: iget: illegal inode # [ 121.774088][ T7500] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1472: error while reading EA inode 327680 err=-117 [ 121.867155][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 121.883725][ T4682] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 121.895576][ T4682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.904635][ T4682] usb 3-1: Product: syz [ 121.909213][ T4682] usb 3-1: Manufacturer: syz [ 121.918393][ T4682] usb 3-1: SerialNumber: syz [ 121.946697][ T4682] r8152-cfgselector 3-1: config 0 descriptor?? [ 121.972212][ T23] usb 2-1: Could not set interface, error -71 [ 122.003974][ T23] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 122.028539][ T23] usb 2-1: USB disconnect, device number 7 [ 122.118233][ T7528] loop4: detected capacity change from 0 to 512 [ 122.162252][ T7528] EXT4-fs (loop4): Ignoring removed oldalloc option [ 122.212097][ T7528] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,nombcache,abort,,errors=continue. Quota mode: writeback. [ 122.229944][ T7528] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.253918][ T7528] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1486: inode #327680: comm syz.4.1486: iget: illegal inode # [ 122.269093][ T7528] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1486: error while reading EA inode 327680 err=-117 [ 122.447404][ T7542] loop4: detected capacity change from 0 to 256 [ 122.456863][ T4682] r8152-cfgselector 3-1: Unknown version 0x0000 [ 122.468952][ T4682] r8152-cfgselector 3-1: bad CDC descriptors [ 122.509918][ T4682] r8152-cfgselector 3-1: Unknown version 0x0000 [ 122.548523][ T4682] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 122.684835][ T7530] loop3: detected capacity change from 0 to 32768 [ 122.728580][ T7530] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 122.855714][ T7555] loop1: detected capacity change from 0 to 1024 [ 122.998608][ T7555] hfsplus: xattr search failed [ 123.293727][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 123.335696][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 123.689820][ T7559] loop3: detected capacity change from 0 to 32768 [ 123.713835][ T7559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1499 (7559) [ 123.755249][ T7559] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 123.776824][ T7559] BTRFS info (device loop3): use zlib compression, level 3 [ 123.796213][ T7559] BTRFS info (device loop3): using free space tree [ 123.806367][ T7559] BTRFS info (device loop3): has skinny extents [ 123.965056][ T7559] BTRFS info (device loop3): enabling ssd optimizations [ 124.105562][ T1332] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 124.112486][ T7611] loop4: detected capacity change from 0 to 512 [ 124.268126][ T7611] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,discard,dioread_lock,nouid32,. Quota mode: writeback. [ 124.295306][ T7611] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.467837][ T7622] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 124.487225][ T7622] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 124.499879][ T1332] usb 3-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 124.512984][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 124.532847][ T7623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.676793][ T1332] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 124.689226][ T1332] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 124.718315][ T1332] usb 3-1: Manufacturer: syz [ 124.730740][ T1332] usb 3-1: SerialNumber: syz [ 124.825497][ T7643] device netdevsim0 entered promiscuous mode [ 125.086932][ T1332] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 125.111457][ T1332] usb 3-1: USB disconnect, device number 7 [ 125.131645][ T4181] udevd[4181]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 125.473123][ T7665] __nla_validate_parse: 1 callbacks suppressed [ 125.473141][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 125.682424][ T7670] device netdevsim0 entered promiscuous mode [ 125.757989][ T7671] loop0: detected capacity change from 0 to 4096 [ 125.836582][ T7683] netlink: 'syz.4.1550': attribute type 11 has an invalid length. [ 125.921314][ T7671] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 126.093232][ T7696] libceph: resolve '0' (ret=-3): failed [ 126.236665][ T4193] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 126.263164][ T4193] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 126.289843][ T4193] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 126.351459][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 126.471796][ T7724] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 126.513618][ T7726] netlink: 'syz.1.1571': attribute type 2 has an invalid length. [ 126.597400][ T7734] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1574'. [ 126.643368][ T7740] loop2: detected capacity change from 0 to 164 [ 126.725186][ T7740] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 126.886496][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'. [ 127.000081][ T7769] No such timeout policy "syz1" [ 127.182063][ T7788] loop3: detected capacity change from 0 to 1024 [ 127.218464][ T7788] hfsplus: invalid length 32517 has been corrected to 255 [ 127.260299][ T7788] hfsplus: xattr searching failed [ 127.320752][ T7786] nvme_rdma: malformed address passed: 172.20.20.24:0 [ 127.381405][ T4675] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.398825][ T7791] loop2: detected capacity change from 0 to 4096 [ 127.463217][ T7791] EXT4-fs (loop2): Test dummy encryption mode enabled [ 127.557589][ T7791] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 127.743170][ T7791] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 127.799902][ T4675] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 127.818604][ T4675] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 127.836881][ T4675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.959664][ T4176] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.209294][ T7824] loop2: detected capacity change from 0 to 32768 [ 128.259504][ T7842] loop3: detected capacity change from 0 to 64 [ 128.280535][ T7824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1614 (7824) [ 128.298892][ T7824] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 128.309996][ T7824] BTRFS info (device loop2): use zlib compression, level 3 [ 128.317245][ T7824] BTRFS info (device loop2): using free space tree [ 128.325649][ T4176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.337758][ T4176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.339792][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.346861][ T7824] BTRFS info (device loop2): has skinny extents [ 128.365733][ T4176] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.389614][ T4675] input input11: Device does not respond to id packet M [ 128.402066][ T4176] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 128.411859][ T4176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.429932][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.435982][ T4675] input input11: Device does not respond to id packet P [ 128.480308][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.483341][ T4176] ims_pcu 5-1:1.0: Missing CDC union descriptor [ 128.487115][ T4675] input input11: Device does not respond to id packet B [ 128.529922][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.534112][ T4176] ims_pcu: probe of 5-1:1.0 failed with error -22 [ 128.536761][ T4675] input input11: Device does not respond to id packet N [ 128.569891][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.595422][ T7824] BTRFS info (device loop2): enabling ssd optimizations [ 128.609843][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.649899][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.672218][ T4675] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 128.688724][ T4675] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 128.770132][ T4675] usb 2-1: USB disconnect, device number 8 [ 129.045362][ T4181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4181) [ 129.124184][ T7887] loop3: detected capacity change from 0 to 164 [ 129.253903][ T7887] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 129.818659][ T7879] nvme nvme0: failed to connect socket: -512 [ 130.074554][ T7951] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 130.221334][ T7959] loop0: detected capacity change from 0 to 128 [ 130.479342][ T7975] netlink: 'syz.2.1673': attribute type 49 has an invalid length. [ 130.709316][ T1332] usb 5-1: USB disconnect, device number 8 [ 130.873343][ T7999] loop2: detected capacity change from 0 to 1024 [ 130.935101][ T7999] hfsplus: invalid length 32517 has been corrected to 255 [ 130.992875][ T7999] hfsplus: xattr searching failed [ 131.347334][ T8029] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8029 comm: syz.3.1700) [ 131.369729][ T1332] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.377336][ T26] audit: type=1800 audit(1790868149.321:12): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1700" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=44831 res=0 errno=0 [ 131.627406][ T8040] loop3: detected capacity change from 0 to 4096 [ 131.631573][ T8015] loop1: detected capacity change from 0 to 32768 [ 131.693421][ T8040] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.693936][ T8015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1693 (8015) [ 131.741403][ T8040] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 131.769827][ T1332] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 131.826495][ T1332] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 131.874686][ T1332] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 131.906232][ T1332] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.935342][ T1332] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.951455][ T1332] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 131.969642][ T1332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.995871][ T8015] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 132.010090][ T8007] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 132.017929][ T8007] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 132.035793][ T8015] BTRFS info (device loop1): enabling ssd optimizations [ 132.059790][ T8007] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 132.069221][ T8015] BTRFS info (device loop1): using spread ssd allocation scheme [ 132.081157][ T1332] mos7720 5-1:1.0: Moschip 2 port adapter converter detected [ 132.098859][ T8015] BTRFS info (device loop1): force zlib compression, level 3 [ 132.136051][ T8015] BTRFS info (device loop1): metadata ratio 1 [ 132.150072][ T8015] BTRFS info (device loop1): turning on flush-on-commit [ 132.157150][ T8015] BTRFS info (device loop1): setting nodatacow [ 132.189834][ T8015] BTRFS info (device loop1): using free space tree [ 132.196482][ T8015] BTRFS info (device loop1): has skinny extents [ 132.237318][ T8076] usb usb8: usbfs: process 8076 (syz.2.1712) did not claim interface 0 before use [ 132.479814][ T4176] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.533680][ T1332] usb 5-1: mos7720: usb_control_msg() failed: -71 [ 132.558005][ T1332] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 132.578057][ T1332] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 132.596232][ T1332] usb 5-1: USB disconnect, device number 9 [ 132.602246][ C0] usb 5-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 132.650354][ T1332] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 132.673178][ T1332] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 132.684328][ T1332] mos7720 5-1:1.0: device disconnected [ 132.786741][ T8104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1722'. [ 132.827419][ T8106] netlink: 'syz.2.1723': attribute type 21 has an invalid length. [ 132.839913][ T4176] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 132.840452][ T8106] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1723'. [ 132.858448][ T4176] usb 4-1: config 0 has no interface number 0 [ 132.878810][ T4176] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 132.893816][ T4176] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.904963][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911380][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.925460][ T4176] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 132.937142][ T4176] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024 [ 133.099817][ T4176] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 133.119147][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 133.140793][ T4176] usb 4-1: Product: syz [ 133.147703][ T4176] usb 4-1: Manufacturer: syz [ 133.153969][ T8128] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1733'. [ 133.169753][ T4176] usb 4-1: SerialNumber: syz [ 133.182735][ T4176] usb 4-1: config 0 descriptor?? [ 133.232216][ T4176] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 133.269836][ T4176] xpad: probe of 4-1:0.237 failed with error -5 [ 133.295558][ T8136] xt_nfacct: accounting object `syz0' does not exist [ 133.483856][ T8149] loop4: detected capacity change from 0 to 64 [ 133.490945][ T4176] usb 4-1: USB disconnect, device number 10 [ 133.496607][ T8152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1744'. [ 133.582116][ T8155] netlink: 'syz.0.1746': attribute type 21 has an invalid length. [ 133.599877][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 133.612371][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 133.622628][ T8157] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1748'. [ 133.717092][ T8163] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1751'. [ 133.899367][ T8175] loop0: detected capacity change from 0 to 4096 [ 133.958303][ T8175] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 134.049267][ T8175] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 134.276875][ T8195] overlayfs: workdir and upperdir must reside under the same mount [ 134.420654][ T8203] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1771'. [ 134.614434][ T8215] sctp: [Deprecated]: syz.0.1775 (pid 8215) Use of int in maxseg socket option. [ 134.614434][ T8215] Use struct sctp_assoc_value instead [ 134.762637][ T8179] loop4: detected capacity change from 0 to 32768 [ 134.798964][ T8229] loop3: detected capacity change from 0 to 256 [ 134.843574][ T8229] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 134.849469][ T8228] xt_cluster: node mask cannot exceed total number of nodes [ 134.907544][ T8238] loop2: detected capacity change from 0 to 22 [ 134.930291][ T8238] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 134.942723][ T8179] XFS (loop4): Mounting V5 Filesystem [ 135.028481][ T8238] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.082761][ T8179] XFS (loop4): Ending clean mount [ 135.315424][ T8259] xt_cluster: node mask cannot exceed total number of nodes [ 135.323234][ T4197] XFS (loop4): Unmounting Filesystem [ 135.449806][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'. [ 135.586618][ T8271] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 135.998066][ T8284] loop0: detected capacity change from 0 to 8192 [ 136.016918][ T8289] xt_TCPMSS: Only works on TCP SYN packets [ 136.038574][ T8284] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 136.053250][ T8284] REISERFS (device loop0): using ordered data mode [ 136.060265][ T8284] reiserfs: using flush barriers [ 136.074702][ T8284] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.167099][ T8284] REISERFS (device loop0): checking transaction log (loop0) [ 136.194988][ T8284] REISERFS (device loop0): Using r5 hash to sort names [ 137.002587][ T8371] overlayfs: workdir and upperdir must reside under the same mount [ 137.126893][ T8382] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 137.150448][ T8382] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.220801][ T8391] syz.3.1859 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.276490][ T8395] xt_hashlimit: size too large, truncated to 1048576 [ 137.314743][ T8395] xt_hashlimit: max too large, truncated to 1048576 [ 137.325871][ T8395] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 137.369409][ T8404] overlayfs: workdir and upperdir must reside under the same mount [ 137.515348][ T8402] loop3: detected capacity change from 0 to 4096 [ 137.554594][ T8402] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 137.702219][ T8413] loop2: detected capacity change from 0 to 4096 [ 137.735610][ T8423] loop1: detected capacity change from 0 to 4096 [ 137.795818][ T8413] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 137.845107][ T8413] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 137.884351][ T8423] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 138.397940][ T8452] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.413112][ T8454] netlink: 'syz.1.1889': attribute type 6 has an invalid length. [ 138.562250][ T8463] comedi comedi3: pcl812: I/O port conflict (0xfd,16) [ 138.584577][ T8468] __nla_validate_parse: 2 callbacks suppressed [ 138.584594][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1894'. [ 138.721662][ T8473] loop3: detected capacity change from 0 to 1024 [ 139.068479][ T8502] device bond2 entered promiscuous mode [ 139.080404][ T8502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.119730][ T1332] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.190721][ T8517] openvswitch: netlink: Message has 8 unknown bytes. [ 139.197689][ T8517] openvswitch: netlink: Actions may not be safe on all matching packets [ 139.244705][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 139.396714][ T8533] netlink: 'syz.1.1926': attribute type 11 has an invalid length. [ 139.405130][ T8533] netlink: 'syz.1.1926': attribute type 5 has an invalid length. [ 139.413778][ T1332] usb 4-1: Using ep0 maxpacket: 8 [ 139.472747][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1928'. [ 139.521532][ T8543] usb usb7: usbfs: process 8543 (syz.4.1930) did not claim interface 0 before use [ 139.590033][ T4675] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.720057][ T1332] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 139.739403][ T1332] usb 4-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 139.766086][ T1332] usb 4-1: Product: syz [ 139.781017][ T1332] usb 4-1: Manufacturer: syz [ 139.791192][ T1332] usb 4-1: SerialNumber: syz [ 139.811582][ T1332] usb 4-1: config 0 descriptor?? [ 139.849173][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1945'. [ 139.863135][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 139.875055][ T1332] pwc: Logitech ViewPort AV 100 webcam detected. [ 140.000387][ T4675] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.021739][ T4675] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 140.119803][ T1332] pwc: Failed to set LED on/off time (-71) [ 140.134002][ T8594] mmap: syz.1.1956 (8594): VmData 37470208 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 140.143114][ T8595] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1957'. [ 140.147653][ T1332] pwc: send_video_command error -71 [ 140.163333][ T4675] usb 3-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 140.164478][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 140.179865][ T4675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 140.189741][ T1332] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 140.189929][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 140.197446][ T1332] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 140.215787][ T4675] usb 3-1: Product: syz [ 140.220560][ T4675] usb 3-1: Manufacturer: syz [ 140.222816][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 140.247191][ T1332] usb 4-1: USB disconnect, device number 11 [ 140.393822][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 140.484168][ T4670] usb 3-1: USB disconnect, device number 8 [ 140.637798][ T8623] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 140.728506][ T144] hfsplus: b-tree write err: -5, ino 25 [ 140.753889][ T144] hfsplus: b-tree write err: -5, ino 4 [ 140.789789][ T144] hfsplus: b-tree write err: -5, ino 2 [ 141.109929][ T4667] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 141.365540][ T8664] nfs: Deprecated parameter 'nointr' [ 141.395165][ T8625] loop0: detected capacity change from 0 to 32768 [ 141.504273][ T8625] XFS (loop0): Mounting V5 Filesystem [ 141.530030][ T4667] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 141.547934][ T4667] usb 5-1: too many endpoints for config 2 interface 0 altsetting 78: 39, using maximum allowed: 30 [ 141.563194][ T4667] usb 5-1: config 2 interface 0 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 141.577192][ T4667] usb 5-1: config 2 interface 0 has no altsetting 0 [ 141.628056][ T8625] XFS (loop0): Ending clean mount [ 141.672114][ T4670] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 141.778059][ T4193] XFS (loop0): Unmounting Filesystem [ 141.784042][ T4667] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 141.809879][ T4667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.838390][ T4667] usb 5-1: Product: syz [ 141.844513][ T4667] usb 5-1: Manufacturer: syz [ 141.859794][ T4667] usb 5-1: SerialNumber: syz [ 141.911855][ T4667] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 141.929591][ T4667] usb 5-1: selecting invalid altsetting 0 [ 141.952643][ T4667] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 142.100046][ T4670] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.175472][ T4669] usb 5-1: USB disconnect, device number 10 [ 142.199790][ T4670] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.215619][ T4670] usb 3-1: config 1 interface 0 has no altsetting 0 [ 142.519985][ T4670] usb 3-1: string descriptor 0 read error: -22 [ 142.526828][ T4670] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 142.549706][ T4670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.862415][ T4670] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 142.927474][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.047911][ T1332] usb 3-1: USB disconnect, device number 9 [ 143.536871][ T8789] loop4: detected capacity change from 0 to 4096 [ 143.663211][ T8803] tc_dump_action: action bad kind [ 143.668415][ T8789] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 143.744008][ T8809] __nla_validate_parse: 3 callbacks suppressed [ 143.744036][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2045'. [ 143.783189][ T8789] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 143.796305][ T8811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2046'. [ 143.811501][ T8789] ntfs3: loop4: mft corrupted [ 143.816284][ T8789] ntfs3: loop4: Failed to load $Extend. [ 143.846371][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2046'. [ 143.866349][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2046'. [ 144.036082][ T8826] libceph: resolve '0..' (ret=-3): failed [ 144.052255][ T1234] ntfs3: loop4: ino=1e, Internal error [ 144.069755][ T1234] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 144.107193][ T8833] loop3: detected capacity change from 0 to 128 [ 144.122905][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2059'. [ 144.132744][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2059'. [ 144.229313][ T8833] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 144.380982][ T8850] loop4: detected capacity change from 0 to 256 [ 144.457939][ T8850] FAT-fs (loop4): Directory bread(block 64) failed [ 144.464926][ T8850] FAT-fs (loop4): Directory bread(block 65) failed [ 144.479051][ T8850] FAT-fs (loop4): Directory bread(block 66) failed [ 144.517384][ T8850] FAT-fs (loop4): Directory bread(block 67) failed [ 144.544950][ T8850] FAT-fs (loop4): Directory bread(block 68) failed [ 144.579724][ T8850] FAT-fs (loop4): Directory bread(block 69) failed [ 144.607907][ T8850] FAT-fs (loop4): Directory bread(block 70) failed [ 144.630398][ T8850] FAT-fs (loop4): Directory bread(block 71) failed [ 144.642704][ T8869] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2072'. [ 144.643939][ T8850] FAT-fs (loop4): Directory bread(block 72) failed [ 144.666735][ T8850] FAT-fs (loop4): Directory bread(block 73) failed [ 145.108801][ T8897] loop3: detected capacity change from 0 to 4096 [ 145.143944][ T8897] ntfs3: loop3: ino=3, Correct links count -> 2. [ 145.158303][ T8907] loop1: detected capacity change from 0 to 512 [ 145.217122][ T8907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.242092][ T8903] loop4: detected capacity change from 0 to 4096 [ 145.250749][ T4670] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 145.267380][ T8907] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.2093: checksumming directory block 0 [ 145.296127][ T8897] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 145.316449][ T8903] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 145.417429][ T8903] ntfs3: loop4: Failed to load $Extend. [ 145.421423][ T8918] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 145.555390][ T8920] loop0: detected capacity change from 0 to 256 [ 145.699035][ T8920] FAT-fs (loop0): Directory bread(block 64) failed [ 145.720162][ T8920] FAT-fs (loop0): Directory bread(block 65) failed [ 145.726814][ T8920] FAT-fs (loop0): Directory bread(block 66) failed [ 145.767939][ T8920] FAT-fs (loop0): Directory bread(block 67) failed [ 145.777010][ T8920] FAT-fs (loop0): Directory bread(block 68) failed [ 145.803599][ T8920] FAT-fs (loop0): Directory bread(block 69) failed [ 145.829705][ T8920] FAT-fs (loop0): Directory bread(block 70) failed [ 145.842746][ T4670] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 145.851213][ T8920] FAT-fs (loop0): Directory bread(block 71) failed [ 145.868316][ T8920] FAT-fs (loop0): Directory bread(block 72) failed [ 145.868370][ T4670] usb 3-1: config 1 interface 0 has no altsetting 0 [ 145.875582][ T4464] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.892448][ T8920] FAT-fs (loop0): Directory bread(block 73) failed [ 146.045334][ T8949] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnekyptfs_cipher=aes] [ 146.087332][ T8949] ecryptfs_parse_options: eCryptfs: unrecognized option [ecqMIDryptfs_] [ 146.105173][ T8949] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 146.113580][ T8949] Error parsing options; rc = [-22] [ 146.186400][ T4670] usb 3-1: string descriptor 0 read error: -22 [ 146.196458][ T4670] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 146.216237][ T4670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.251880][ T8895] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.259901][ T4464] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.286584][ T4464] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 146.301881][ T4464] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 146.313310][ T8966] netlink: 'syz.4.2121': attribute type 2 has an invalid length. [ 146.313569][ T4464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.455075][ T8978] loop0: detected capacity change from 0 to 64 [ 146.526249][ T8983] geneve1: mtu greater than device maximum [ 146.535615][ T8984] netlink: 'syz.3.2130': attribute type 30 has an invalid length. [ 146.569955][ T4670] usbhid 3-1:1.0: can't add hid device: -71 [ 146.575989][ T4670] usbhid: probe of 3-1:1.0 failed with error -71 [ 146.598691][ T4670] usb 3-1: USB disconnect, device number 10 [ 146.609921][ T4464] usb 2-1: NFC: Can't submit reader poweron cmd response -90 [ 146.640617][ T4464] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 146.675800][ T4464] pn533_usb: probe of 2-1:1.0 failed with error -90 [ 146.728943][ T8992] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 146.754567][ T8995] loop0: detected capacity change from 0 to 764 [ 146.834191][ T8995] isofs: Unable to find the ".." directory for NFS. [ 146.854426][ T4464] usb 2-1: USB disconnect, device number 9 [ 147.132794][ T9014] loop0: detected capacity change from 0 to 128 [ 147.180660][ T9014] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 147.445009][ T4464] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.509971][ T9039] loop1: detected capacity change from 0 to 4096 [ 147.568943][ T9039] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 147.618553][ T9039] ntfs3: loop1: Failed to load $Extend. [ 147.632005][ T9049] netlink: 'syz.2.2161': attribute type 20 has an invalid length. [ 147.699788][ T4464] usb 4-1: Using ep0 maxpacket: 32 [ 147.819874][ T4464] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.010129][ T4464] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 148.023943][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.039643][ T4464] usb 4-1: Product: syz [ 148.048521][ T4464] usb 4-1: Manufacturer: syz [ 148.059625][ T4464] usb 4-1: SerialNumber: syz [ 148.074198][ T4464] usb 4-1: config 0 descriptor?? [ 148.120990][ T4464] usb 4-1: bad CDC descriptors [ 148.126255][ T4464] usb 4-1: unsupported MDLM descriptors [ 148.299724][ T4464] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 148.311913][ T9091] IPVS: length: 144 != 24 [ 148.349895][ T4670] usb 4-1: USB disconnect, device number 12 [ 148.469654][ T4455] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.679988][ T4464] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.709843][ T4455] usb 2-1: Using ep0 maxpacket: 8 [ 148.715016][ T4464] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.780626][ T9105] ntfs3: loop2: ino=3, Correct links count -> 2. [ 148.814597][ T9105] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 148.829990][ T4455] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.855710][ T4455] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.869214][ T4464] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 148.895675][ T4464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 148.929167][ T4464] usb 5-1: Product: syz [ 148.939806][ T4464] usb 5-1: Manufacturer: syz [ 148.951286][ T9112] attempt to access beyond end of device [ 148.951286][ T9112] loop0: rw=0, want=268435470, limit=64 [ 148.985220][ T9112] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 149.000274][ T4455] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.016767][ T4455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.027594][ T9112] Trying to free block not in datazone [ 149.038730][ T4455] usb 2-1: SerialNumber: syz [ 149.160728][ T4455] cdc_acm 2-1:1.0: skipping garbage [ 149.165995][ T4455] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 149.209479][ T4455] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 149.236562][ T4455] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 149.272688][ T4455] usb 5-1: USB disconnect, device number 11 [ 149.394946][ T4675] usb 2-1: USB disconnect, device number 10 [ 149.439929][ T4464] Bluetooth: hci4: command 0x0405 tx timeout [ 149.493089][ T9137] netlink: 'syz.3.2203': attribute type 3 has an invalid length. [ 149.608360][ T9143] sctp: [Deprecated]: syz.2.2204 (pid 9143) Use of int in maxseg socket option. [ 149.608360][ T9143] Use struct sctp_assoc_value instead [ 150.240112][ T4464] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 150.451565][ T9207] xt_nfacct: accounting object `' does not exist [ 150.567751][ T9213] set_capacity_and_notify: 3 callbacks suppressed [ 150.567768][ T9213] loop1: detected capacity change from 0 to 512 [ 150.610824][ T4464] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.654382][ T4464] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.656347][ T9213] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 8: comm syz.1.2229: lblock 0 mapped to illegal pblock 8 (length 1) [ 150.700162][ T9213] EXT4-fs (loop1): Remounting filesystem read-only [ 150.734370][ T9213] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2229: error -117 reading directory block [ 150.840973][ T9213] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 150.849322][ T9213] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 8: comm syz.1.2229: lblock 0 mapped to illegal pblock 8 (length 1) [ 150.899933][ T4464] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 150.900396][ T9221] loop2: detected capacity change from 0 to 4096 [ 150.915946][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.918431][ T9226] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2233'. [ 150.935399][ T9213] EXT4-fs (loop1): Remounting filesystem read-only [ 150.942375][ T4464] usb 4-1: Product: syz [ 150.966123][ T4464] usb 4-1: Manufacturer: syz [ 150.979592][ T9213] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2229: error -117 reading directory block [ 150.982077][ T9229] device macsec0 entered promiscuous mode [ 150.999707][ T4464] usb 4-1: SerialNumber: syz [ 151.011035][ T9221] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 151.041700][ T9213] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 151.060851][ T4464] usb-storage 4-1:1.0: USB Mass Storage device detected [ 151.102663][ T9213] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,init_itable,noinit_itable,discard,resuid=0x0000000000000000,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,usrquota,usrjquota=.,resgid=0x0000000000000000,nolazytime,,. Quota mode: writeback. [ 151.153991][ T9221] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 151.162190][ T4464] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 151.273146][ T4464] usb 4-1: USB disconnect, device number 13 [ 151.561334][ T9259] UBIFS error (pid: 9259): cannot open "./file0", error -22 [ 151.758760][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2253'. [ 151.845379][ T9275] netlink: 'syz.1.2255': attribute type 33 has an invalid length. [ 151.951921][ T9281] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2258'. [ 152.059011][ T9277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.071822][ T9249] loop0: detected capacity change from 0 to 32768 [ 152.169804][ T9249] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2244 (9249) [ 152.270387][ T9249] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 152.294053][ T9249] BTRFS info (device loop0): turning off barriers [ 152.321262][ T9298] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2266'. [ 152.340291][ T9249] BTRFS info (device loop0): enabling auto defrag [ 152.346772][ T9249] BTRFS info (device loop0): force zlib compression, level 3 [ 152.374854][ T9249] BTRFS info (device loop0): enabling ssd optimizations [ 152.409725][ T9249] BTRFS info (device loop0): using spread ssd allocation scheme [ 152.417729][ T9249] BTRFS info (device loop0): using free space tree [ 152.455774][ T9249] BTRFS info (device loop0): has skinny extents [ 152.669504][ T9325] xt_socket: unknown flags 0xc [ 152.770881][ T9249] BTRFS info (device loop0): not using spread ssd allocation scheme [ 152.779276][ T9249] BTRFS info (device loop0): using spread ssd allocation scheme [ 153.051241][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 153.168766][ T9353] loop2: detected capacity change from 0 to 512 [ 153.461889][ T9353] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 153.506481][ T9353] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 153.532787][ T9353] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 153.583593][ T9353] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 153.626046][ T9353] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 153.688702][ T9353] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.761452][ T9353] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2285: bg 0: block 34: padding at end of block bitmap is not set [ 153.889930][ T9382] netlink: 'syz.4.2297': attribute type 7 has an invalid length. [ 153.900227][ T9353] Quota error (device loop2): write_blk: dquota write failed [ 153.907678][ T9353] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 153.959736][ T9353] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.2285: Failed to acquire dquot type 1 [ 154.030388][ T9353] EXT4-fs (loop2): 1 truncate cleaned up [ 154.060167][ T9353] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000001,noquota,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 154.091936][ T9389] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2301'. [ 154.201059][ T9353] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 154.560409][ T9412] loop2: detected capacity change from 0 to 64 [ 154.621393][ T26] audit: type=1800 audit(1790868172.571:13): pid=9412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2312" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 154.688606][ T9377] loop1: detected capacity change from 0 to 32768 [ 154.713850][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2317'. [ 154.763223][ T9422] loop4: detected capacity change from 0 to 256 [ 154.857598][ T9377] [ 154.857598][ T9377] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.857598][ T9377] [ 154.922013][ T9377] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 154.922013][ T9377] [ 155.014441][ T9377] ERROR: (device loop1): remounting filesystem as read-only [ 155.049865][ T9377] ERROR: (device loop1): jfs_unlink: [ 155.049865][ T9377] [ 155.153096][ T4187] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 155.153096][ T4187] [ 155.527780][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2330'. [ 156.066693][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2343'. [ 156.105936][ T9474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2343'. [ 156.120422][ T9475] loop1: detected capacity change from 0 to 764 [ 156.131102][ T9431] loop3: detected capacity change from 0 to 40427 [ 156.651173][ T9431] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 156.675543][ T9431] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 156.710238][ T9431] F2FS-fs (loop3): invalid crc value [ 156.749396][ T9431] F2FS-fs (loop3): Found nat_bits in checkpoint [ 156.919658][ T9431] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 156.977463][ T9431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.508358][ T9509] loop1: detected capacity change from 0 to 256 [ 157.592083][ T9513] netlink: 'syz.0.2362': attribute type 25 has an invalid length. [ 157.619702][ T9513] netlink: 'syz.0.2362': attribute type 3 has an invalid length. [ 158.211364][ T9549] loop3: detected capacity change from 0 to 512 [ 158.285619][ T9554] tipc: Can't bind to reserved service type 0 [ 158.381155][ T9549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.440148][ T9549] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.736803][ T9584] loop0: detected capacity change from 0 to 8 [ 158.785684][ T9584] cramfs: empty filesystem [ 158.842699][ T9590] netlink: 'syz.1.2398': attribute type 9 has an invalid length. [ 158.852029][ T9589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.853478][ T9590] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2398'. [ 158.982214][ T9597] cgroup: name respecified [ 159.029658][ T1332] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 159.343321][ T9620] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2411'. [ 159.440107][ T1332] usb 4-1: config 34 has an invalid interface number: 116 but max is 0 [ 159.449103][ T1332] usb 4-1: config 34 has no interface number 0 [ 159.479583][ T1332] usb 4-1: config 34 interface 116 has no altsetting 0 [ 159.522594][ T9629] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2416'. [ 159.649991][ T1332] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 159.660703][ T1332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.693303][ T1332] usb 4-1: Product: syz [ 159.697530][ T1332] usb 4-1: Manufacturer: syz [ 159.722978][ T1332] usb 4-1: SerialNumber: syz [ 160.120207][ T1332] comedi comedi5: could not set alternate setting 3 in high speed [ 160.128483][ T1332] usbdux 4-1:34.116: driver 'usbdux' failed to auto-configure device. [ 160.202887][ T1332] usbdux: probe of 4-1:34.116 failed with error -71 [ 160.234923][ T1332] usb 4-1: USB disconnect, device number 14 [ 160.283726][ T9678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.451279][ T9690] trusted_key: encrypted_key: keyword 'newU_5' not recognized [ 160.737714][ T9711] binder: 9709:9711 ioctl c00c620f 0 returned -14 [ 160.859850][ T1332] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.957733][ T9727] loop3: detected capacity change from 0 to 8 [ 161.004815][ T9727] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 161.129993][ T1332] usb 5-1: Using ep0 maxpacket: 8 [ 161.217701][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2461'. [ 161.257422][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2461'. [ 161.280010][ T1332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.297360][ T1332] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.342133][ T1332] usb 5-1: config 1 interface 0 has no altsetting 0 [ 161.609840][ T1332] usb 5-1: string descriptor 0 read error: -22 [ 161.616146][ T1332] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 161.656075][ T1332] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 161.675721][ T9703] loop1: detected capacity change from 0 to 32768 [ 161.732556][ T1332] usb 5-1: 0:2 : does not exist [ 161.750520][ T9703] XFS: attr2 mount option is deprecated. [ 161.761305][ T9703] XFS (loop1): invalid log iosize: 0 [not 12-30] [ 161.776926][ T1332] usb-storage 5-1:1.1: USB Mass Storage device detected [ 162.180525][ T9796] xt_TCPMSS: Only works on TCP SYN packets [ 162.199909][ T1332] us122l: couldn't allocate write buffer [ 162.206168][ T1332] snd-usb-us122l: probe of 5-1:1.1 failed with error -22 [ 162.268584][ T1332] usb 5-1: USB disconnect, device number 12 [ 162.511009][ T9815] x_tables: duplicate entry at hook 3 [ 162.571118][ T9818] loop3: detected capacity change from 0 to 8 [ 162.581439][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.656749][ T9818] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 162.693180][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop3 [ 162.852486][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 162.892740][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 162.998769][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2508'. [ 163.013998][ T9849] netlink: 'syz.1.2509': attribute type 21 has an invalid length. [ 163.049652][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 163.206594][ T9863] loop0: detected capacity change from 0 to 16 [ 163.317529][ T9863] erofs: (device loop0): mounted with root inode @ nid 36. [ 163.333084][ T4455] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 163.375006][ T9863] attempt to access beyond end of device [ 163.375006][ T9863] loop0: rw=0, want=15300821032, limit=16 [ 163.449490][ T9863] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 163.545570][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 163.757223][ T9895] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2531'. [ 163.769876][ T4455] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.783175][ T9888] loop3: detected capacity change from 0 to 4096 [ 163.792290][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 163.794091][ T4455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.852257][ T4455] usb 5-1: config 0 descriptor?? [ 163.861609][ T26] audit: type=1800 audit(1790868181.801:14): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2528" name="/" dev="tmpfs" ino=82 res=0 errno=0 [ 163.913713][ T9888] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 163.920571][ T9898] SET target dimension over the limit! [ 163.941355][ T4455] cp210x 5-1:0.0: cp210x converter detected [ 163.947459][ T9888] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 163.999363][ T9888] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 164.026868][ T9904] netlink: 'syz.2.2535': attribute type 21 has an invalid length. [ 164.036951][ T9888] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.060675][ T9904] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2535'. [ 164.080080][ T9888] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.127945][ T9888] ntfs: volume version 3.1. [ 164.142302][ T9888] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 164.206128][ T9888] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 164.251229][ T9888] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.309748][ T9888] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 164.370012][ T4455] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 164.395619][ T4455] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 164.413950][ T4455] usb 5-1: cp210x converter now attached to ttyUSB0 [ 164.421003][ T9920] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 164.469781][ T4455] usb 5-1: USB disconnect, device number 13 [ 164.495984][ T4455] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.520128][ T4455] cp210x 5-1:0.0: device disconnected [ 164.656604][ T9930] loop2: detected capacity change from 0 to 1024 [ 164.730209][ T9930] EXT4-fs (loop2): Ignoring removed bh option [ 164.812443][ T9930] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,grpid,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 164.866565][ T9930] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.2547: Abort forced by user [ 164.870966][ T9942] comedi comedi2: pcl818: I/O port conflict (0x6,16) [ 164.944797][ T9930] EXT4-fs (loop2): Remounting filesystem read-only [ 164.959714][ T9930] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 165.311826][ T9968] @0: renamed from virt_wifi0 [ 165.387358][ T9974] netlink: 'syz.3.2567': attribute type 10 has an invalid length. [ 165.671209][ T9996] nvme_fabrics: nof]bEDE=Ԙب]O0!WSל޷}F'5m[ޕwh}1n@ 7E aoVMYm0;yl:&1<7-h:SXl7ZS`.7Ph\fPG4`5_*v搡]\yu$[&s_M needs to be < 223 bytes [ 166.118720][T10026] comedi comedi2: pcl818: I/O port conflict (0x6,16) [ 166.294441][T10042] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 166.329731][T10042] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.337591][T10042] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 166.482966][T10059] netlink: 'syz.2.2608': attribute type 2 has an invalid length. [ 166.513972][T10059] __nla_validate_parse: 7 callbacks suppressed [ 166.513998][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2608'. [ 166.608617][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 166.620067][T10066] usb usb8: usbfs: process 10066 (syz.3.2612) did not claim interface 0 before use [ 166.659189][T10072] netlink: 'syz.4.2615': attribute type 6 has an invalid length. [ 166.826368][T10078] loop4: detected capacity change from 0 to 128 [ 167.312004][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'. [ 167.507672][T10064] loop1: detected capacity change from 0 to 32768 [ 167.513203][T10093] openvswitch: netlink: EtherType 0 is less than min 600 [ 167.560082][T10064] XFS: ikeep mount option is deprecated. [ 167.703987][T10064] XFS (loop1): Mounting V5 Filesystem [ 167.845824][T10087] loop3: detected capacity change from 0 to 32768 [ 167.861772][T10107] netlink: 'syz.4.2623': attribute type 8 has an invalid length. [ 167.880394][T10107] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2623'. [ 168.020915][T10087] XFS (loop3): Mounting V5 Filesystem [ 168.105854][T10064] XFS (loop1): Ending clean mount [ 168.274981][ T4187] XFS (loop1): Unmounting Filesystem [ 168.362483][T10087] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 168.369696][ T4455] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.467718][T10087] XFS (loop3): Starting recovery (logdev: internal) [ 168.528581][T10087] XFS (loop3): Ending recovery (logdev: internal) [ 168.544272][T10087] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 168.556521][T10087] XFS (loop3): Failed to initialize disk quotas. [ 168.755788][T10087] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 168.769888][ T4455] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.799553][ T4455] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 168.822282][ T4455] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 168.849774][ T4455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.872874][ T4191] XFS (loop3): Unmounting Filesystem [ 168.874710][ T4455] usb 3-1: config 0 descriptor?? [ 169.200521][ T4176] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 169.210045][T10168] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.310723][T10170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2654'. [ 169.382019][ T4455] Bluetooth: Can't get version to change to load ram patch err [ 169.399807][ T4455] Bluetooth: Loading patch file failed [ 169.405443][ T4455] ath3k: probe of 3-1:0.0 failed with error -71 [ 169.406635][T10174] loop3: detected capacity change from 0 to 256 [ 169.439608][ T4455] usb 3-1: USB disconnect, device number 11 [ 169.539964][ T4176] usb 5-1: not running at top speed; connect to a high speed hub [ 169.629906][ T4176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.686064][ T4176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.722390][ T4176] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 169.751765][ T4176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.823049][T10191] netlink: 'syz.1.2663': attribute type 29 has an invalid length. [ 169.839238][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 169.854216][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.890155][T10190] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.916621][T10191] netlink: 'syz.1.2663': attribute type 29 has an invalid length. [ 169.927588][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 170.049767][ T4176] usb 5-1: string descriptor 0 read error: -71 [ 170.056011][ T4176] usb 5-1: Found UVC 1.00 device (046d:0825) [ 170.079821][ T4176] usb 5-1: No valid video chain found. [ 170.125879][ T4176] usb 5-1: USB disconnect, device number 14 [ 170.135107][T10199] [U] .h0FwZ,iqgҏV2sO [ 170.164387][T10199] [U] ` w*BBOLhU [ 170.168938][T10199] [U] w$n|#%o.z\̧mРw [ 170.215659][T10199] [U] R{ꫢ S [ 170.246818][T10198] [U] [ 170.308756][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 170.308772][ T26] audit: type=1326 audit(1790868188.251:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.2.2672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024261e159 code=0x7ffc0000 [ 170.406811][ T26] audit: type=1326 audit(1790868188.301:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.2.2672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024261e159 code=0x7ffc0000 [ 170.457199][ T26] audit: type=1326 audit(1790868188.311:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.2.2672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f024261e159 code=0x7ffc0000 [ 170.543099][ T26] audit: type=1326 audit(1790868188.311:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.2.2672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024261e159 code=0x7ffc0000 [ 170.547688][T10219] loop1: detected capacity change from 0 to 24 [ 170.585836][ T1332] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 170.598080][ T26] audit: type=1326 audit(1790868188.311:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.2.2672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024261e159 code=0x7ffc0000 [ 170.688168][T10221] loop2: detected capacity change from 0 to 4096 [ 170.764405][T10219] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 170.813913][T10219] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 170.828618][T10221] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 170.886426][T10219] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 170.929687][ T1332] usb 4-1: Using ep0 maxpacket: 32 [ 171.067880][ T1332] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 171.080008][ T1332] usb 4-1: config 0 has no interface number 0 [ 171.106515][ T1332] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.134399][T10234] loop2: detected capacity change from 0 to 256 [ 171.161950][ T1332] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.181994][T10234] exfat: Deprecated parameter 'namecase' [ 171.202604][ T1332] usb 4-1: config 0 interface 85 has no altsetting 0 [ 171.227844][T10234] exfat: Deprecated parameter 'namecase' [ 171.272512][T10234] exfat: Deprecated parameter 'namecase' [ 171.343063][T10231] loop0: detected capacity change from 0 to 8192 [ 171.367778][T10234] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 171.420080][ T1332] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 171.429170][ T1332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.450329][T10231] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 171.498277][T10231] REISERFS (device loop0): using ordered data mode [ 171.528209][ T1332] usb 4-1: Product: syz [ 171.535807][T10231] reiserfs: using flush barriers [ 171.569557][ T1332] usb 4-1: Manufacturer: syz [ 171.599601][ T1332] usb 4-1: SerialNumber: syz [ 171.606298][T10231] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.660720][ T1332] usb 4-1: config 0 descriptor?? [ 171.700032][T10231] REISERFS (device loop0): checking transaction log (loop0) [ 171.901716][T10227] loop4: detected capacity change from 0 to 32768 [ 171.997659][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2693'. [ 172.042902][T10231] REISERFS (device loop0): Using tea hash to sort names [ 172.069251][T10227] XFS (loop4): Mounting V5 Filesystem [ 172.070889][T10231] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 172.116433][T10231] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 172.149716][ T1332] appletouch 4-1:0.85: Failed to request geyser raw mode [ 172.182544][ T1332] appletouch: probe of 4-1:0.85 failed with error -5 [ 172.279713][ T1332] usb 4-1: USB disconnect, device number 15 [ 172.349376][T10227] XFS (loop4): Ending clean mount [ 172.451688][T10227] attempt to access beyond end of device [ 172.451688][T10227] loop4: rw=4096, want=262148, limit=32768 [ 172.501344][T10272] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2699'. [ 172.525745][ T4197] XFS (loop4): Unmounting Filesystem [ 172.591016][T10274] tmpfs: Bad value for 'mpol' [ 172.632376][T10276] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 172.692212][ T151] block nbd2: Attempted send on invalid socket [ 172.699677][ T151] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.713609][T10278] VFS: unable to read V7 FS superblock on device nbd2. [ 172.749644][T10278] VFS: could not find a valid V7 on nbd2. [ 173.352814][T10320] program syz.0.2724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.138803][T10370] loop4: detected capacity change from 0 to 2048 [ 174.180823][T10378] device netdevsim0 left promiscuous mode [ 174.220945][T10379] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.568185][T10394] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 174.597895][T10394] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 174.640625][T10394] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 174.660326][T10394] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 174.683401][T10394] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 174.708105][T10394] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 174.720145][T10396] loop4: detected capacity change from 0 to 4096 [ 174.736877][T10394] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 174.772843][T10394] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 174.807366][T10394] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 174.823867][T10403] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.826266][T10394] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 174.879904][T10394] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 174.905224][T10394] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 174.939882][T10394] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 174.964426][T10394] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 174.992981][T10394] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 175.012928][T10394] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 175.067522][T10394] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 175.083223][T10394] comedi comedi3: 8255: I/O port conflict (0xffffffffffffcadb,4) [ 175.112721][T10394] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 175.137874][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2769'. [ 175.228114][T10421] netlink: 'syz.3.2771': attribute type 49 has an invalid length. [ 175.244167][T10425] loop4: detected capacity change from 0 to 256 [ 175.426939][T10432] loop3: detected capacity change from 0 to 64 [ 175.686523][T10449] ecryptfs_parse_options: eCryptfs: unrecognized option [ecrypbMs_ciphes] [ 175.715029][T10450] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2784'. [ 175.730342][T10449] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfsb] [ 175.754303][T10449] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 175.797259][T10449] Error parsing options; rc = [-22] [ 175.831619][T10456] netlink: 'syz.3.2787': attribute type 21 has an invalid length. [ 175.869647][T10456] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2787'. [ 176.072426][T10467] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 176.220550][T10478] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 176.522013][T10505] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2813'. [ 176.837453][T10530] loop1: detected capacity change from 0 to 64 [ 176.987500][T10538] deleting an unspecified loop device is not supported. [ 177.038948][T10540] loop4: detected capacity change from 0 to 1024 [ 177.455630][T10571] loop0: detected capacity change from 0 to 64 [ 177.751967][T10591] xt_hashlimit: size too large, truncated to 1048576 [ 177.987675][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2865'. [ 178.145544][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2872'. [ 178.311322][T10635] netlink: 'syz.0.2879': attribute type 1 has an invalid length. [ 178.339613][T10635] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2879'. [ 178.537411][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'. [ 178.704150][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'. [ 178.794414][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2892'. [ 178.915829][T10660] loop2: detected capacity change from 0 to 8192 [ 178.961306][ T4670] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 178.978954][T10660] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 179.060622][T10660] REISERFS (device loop2): using ordered data mode [ 179.067212][T10660] reiserfs: using flush barriers [ 179.120915][T10660] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.235441][T10660] REISERFS (device loop2): checking transaction log (loop2) [ 179.389848][ T4670] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.419563][ T4670] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.544194][T10660] REISERFS (device loop2): Using tea hash to sort names [ 179.564756][T10660] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 179.591365][ T4670] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.612370][ T4670] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 179.628702][T10660] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 179.638117][ T4670] usb 4-1: Product: syz [ 179.648181][ T4670] usb 4-1: Manufacturer: syz [ 179.717164][ T4670] hub 4-1:4.0: USB hub found [ 179.927780][ T4670] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 180.024928][T10706] usb usb8: usbfs: process 10706 (syz.4.2913) did not claim interface 32 before use [ 180.083731][ T4176] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 180.279949][ T4464] usb 4-1: USB disconnect, device number 16 [ 180.459837][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 180.650727][ T4176] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 180.680321][T10736] nfs4: Bad value for 'source' [ 180.689406][T10738] loop4: detected capacity change from 0 to 8 [ 180.692443][ T4176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.719705][ T4176] usb 2-1: Product: syz [ 180.730214][ T4176] usb 2-1: Manufacturer: syz [ 180.759577][ T4176] usb 2-1: SerialNumber: syz [ 180.795552][ T4176] usb 2-1: config 0 descriptor?? [ 180.800359][T10738] squashfs image failed sanity check [ 180.857850][ T4176] hub 2-1:0.0: bad descriptor, ignoring hub [ 180.864281][ T4176] hub: probe of 2-1:0.0 failed with error -5 [ 180.893100][ T4176] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 181.001127][T10749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.349876][ T4176] usb 2-1: USB disconnect, device number 11 [ 181.579743][ T4670] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 181.869794][ T4670] usb 4-1: Using ep0 maxpacket: 32 [ 181.973025][ T26] audit: type=1326 audit(1790868199.921:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10803 comm="syz.4.2961" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19a9665159 code=0x0 [ 181.997450][ T4670] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 182.171179][T10816] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 182.215769][ T4670] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 182.261561][T10824] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2970'. [ 182.263766][ T4670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.303176][ T4670] usb 4-1: Product: syz [ 182.307402][ T4670] usb 4-1: Manufacturer: syz [ 182.351778][ T4670] usb 4-1: SerialNumber: syz [ 182.374243][ T4670] usb 4-1: config 0 descriptor?? [ 182.420970][ T4670] usb 4-1: bad CDC descriptors [ 182.426172][ T4670] usb 4-1: unsupported MDLM descriptors [ 182.513977][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'. [ 182.563518][T10838] loop1: detected capacity change from 0 to 2048 [ 182.679990][ T4670] usb 4-1: USB disconnect, device number 17 [ 182.728146][T10838] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 182.749470][T10838] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 182.777174][T10852] loop4: detected capacity change from 0 to 256 [ 182.981660][T10863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2987'. [ 182.992845][T10865] capability: warning: `syz.0.2991' uses 32-bit capabilities (legacy support in use) [ 183.099774][ T4678] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 183.273338][ T4667] ------------[ cut here ]------------ [ 183.279292][ T4667] WARNING: CPU: 0 PID: 4667 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 183.308465][ T4667] Modules linked in: [ 183.321746][ T4667] CPU: 0 PID: 4667 Comm: kworker/0:10 Not tainted syzkaller #0 [ 183.335683][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.374365][ T4667] Workqueue: events nf_tables_trans_destroy_work [ 183.390105][ T4667] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 183.402086][ T4667] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 fb 3b 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a0 07 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 20 8b 8d 80 e1 07 80 c1 03 38 c1 [ 183.423168][ T4667] RSP: 0018:ffffc9000340fa68 EFLAGS: 00010293 [ 183.429363][ T4667] RAX: ffffffff883d0d00 RBX: ffff88802a6bacf0 RCX: ffff888077e10000 [ 183.437886][ T4667] RDX: 0000000000000000 RSI: ffff88802a6bac00 RDI: ffff88805fbb2028 [ 183.447311][ T4667] RBP: ffffc9000340fc30 R08: ffff888077e10000 R09: 0000000000000008 [ 183.462164][ T4667] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88802a6bacc0 [ 183.475658][ T4667] R13: dffffc0000000000 R14: ffff88802a6bad10 R15: dffffc0000000000 [ 183.486434][ T4667] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 183.499575][ T4678] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 183.511119][ T4667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.520750][ T4678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.536639][ T4667] CR2: 00007f19a98b4158 CR3: 0000000029598000 CR4: 00000000003506f0 [ 183.551432][ T4678] usb 3-1: config 0 has no interface number 0 [ 183.559760][ T4667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.572330][ T4678] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 183.587635][ T4667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.600154][ T4678] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 183.615674][ T4667] Call Trace: [ 183.623703][ T4667] [ 183.628951][ T4667] ? __lock_acquire+0x7b50/0x7b50 [ 183.634586][ T4667] ? do_raw_spin_lock+0x128/0x2f0 [ 183.640045][ T4667] nft_set_destroy+0x488/0xa30 [ 183.644970][ T4667] ? do_raw_spin_unlock+0x11d/0x230 [ 183.650800][ T4667] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 183.656856][ T4667] ? __lock_acquire+0x7b50/0x7b50 [ 183.662297][ T4667] ? nft_object_dump+0x1e0/0x1e0 [ 183.667386][ T4667] ? _raw_spin_unlock_irq+0x1f/0x40 [ 183.673264][ T4667] process_one_work+0x867/0xff0 [ 183.678287][ T4667] ? worker_detach_from_pool+0x240/0x240 [ 183.684369][ T4667] ? lockdep_hardirqs_off+0x70/0x100 [ 183.690217][ T4667] ? _raw_spin_lock_irq+0xb7/0xf0 [ 183.695350][ T4667] ? _raw_spin_lock_irqsave+0x100/0x100 [ 183.701336][ T4667] ? wq_worker_running+0x97/0x170 [ 183.706468][ T4667] worker_thread+0xad7/0x12a0 [ 183.711955][ T4667] kthread+0x42e/0x520 [ 183.716127][ T4667] ? rcu_lock_release+0x20/0x20 [ 183.721335][ T4667] ? kthread_blkcg+0xd0/0xd0 [ 183.726700][ T4667] ret_from_fork+0x1f/0x30 [ 183.731730][ T4667] [ 183.734965][ T4667] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.742257][ T4667] CPU: 0 PID: 4667 Comm: kworker/0:10 Not tainted syzkaller #0 [ 183.749821][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.759897][ T4667] Workqueue: events nf_tables_trans_destroy_work [ 183.766254][ T4667] Call Trace: [ 183.769554][ T4667] [ 183.772507][ T4667] dump_stack_lvl+0x188/0x250 [ 183.777214][ T4667] ? show_regs_print_info+0x20/0x20 [ 183.782428][ T4667] ? load_image+0x410/0x410 [ 183.786960][ T4667] panic+0x2f8/0x850 [ 183.790883][ T4667] ? bpf_jit_dump+0xd0/0xd0 [ 183.795414][ T4667] ? ret_from_fork+0x1f/0x30 [ 183.800025][ T4667] ? nft_pipapo_destroy+0x8b0/0x960 [ 183.805245][ T4667] __warn+0x248/0x2b0 [ 183.809251][ T4667] ? nft_pipapo_destroy+0x8b0/0x960 [ 183.814470][ T4667] report_bug+0x1b9/0x2e0 [ 183.818827][ T4667] handle_bug+0x3a/0x70 [ 183.822999][ T4667] exc_invalid_op+0x16/0x40 [ 183.827525][ T4667] asm_exc_invalid_op+0x16/0x20 [ 183.832401][ T4667] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 183.838235][ T4667] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 fb 3b 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a0 07 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 20 8b 8d 80 e1 07 80 c1 03 38 c1 [ 183.857882][ T4667] RSP: 0018:ffffc9000340fa68 EFLAGS: 00010293 [ 183.863981][ T4667] RAX: ffffffff883d0d00 RBX: ffff88802a6bacf0 RCX: ffff888077e10000 [ 183.871970][ T4667] RDX: 0000000000000000 RSI: ffff88802a6bac00 RDI: ffff88805fbb2028 [ 183.879964][ T4667] RBP: ffffc9000340fc30 R08: ffff888077e10000 R09: 0000000000000008 [ 183.887950][ T4667] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88802a6bacc0 [ 183.895941][ T4667] R13: dffffc0000000000 R14: ffff88802a6bad10 R15: dffffc0000000000 [ 183.903938][ T4667] ? nft_pipapo_destroy+0x8b0/0x960 [ 183.909164][ T4667] ? nft_pipapo_destroy+0x8b0/0x960 [ 183.914383][ T4667] ? __lock_acquire+0x7b50/0x7b50 [ 183.919432][ T4667] ? do_raw_spin_lock+0x128/0x2f0 [ 183.924481][ T4667] nft_set_destroy+0x488/0xa30 [ 183.929275][ T4667] ? do_raw_spin_unlock+0x11d/0x230 [ 183.934510][ T4667] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 183.940432][ T4667] ? __lock_acquire+0x7b50/0x7b50 [ 183.945488][ T4667] ? nft_object_dump+0x1e0/0x1e0 [ 183.950459][ T4667] ? _raw_spin_unlock_irq+0x1f/0x40 [ 183.955682][ T4667] process_one_work+0x867/0xff0 [ 183.960583][ T4667] ? worker_detach_from_pool+0x240/0x240 [ 183.966236][ T4667] ? lockdep_hardirqs_off+0x70/0x100 [ 183.971551][ T4667] ? _raw_spin_lock_irq+0xb7/0xf0 [ 183.976592][ T4667] ? _raw_spin_lock_irqsave+0x100/0x100 [ 183.982160][ T4667] ? wq_worker_running+0x97/0x170 [ 183.987206][ T4667] worker_thread+0xad7/0x12a0 [ 183.991928][ T4667] kthread+0x42e/0x520 [ 183.996031][ T4667] ? rcu_lock_release+0x20/0x20 [ 184.000899][ T4667] ? kthread_blkcg+0xd0/0xd0 [ 184.005622][ T4667] ret_from_fork+0x1f/0x30 [ 184.010095][ T4667] [ 184.013214][ T4667] Kernel Offset: disabled [ 184.017799][ T4667] Rebooting in 86400 seconds..