last executing test programs: 1.977159553s ago: executing program 3 (id=1432): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 1.79039639s ago: executing program 3 (id=1435): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @local}}, 0xc, 0x3}, 0x90) 1.720546326s ago: executing program 3 (id=1438): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg(r0, &(0x7f0000000a40)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0}, 0x0) 1.645907813s ago: executing program 3 (id=1440): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000840)={0x1, "f01f254e82d27840c9eb0e9046ebfdf3471cc819819ae86444ac26abaaf302f0", 0x2}) 1.536456983s ago: executing program 3 (id=1442): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xfffffffd}) setregid(0x0, 0xee00) 1.464092699s ago: executing program 2 (id=1443): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_clone(0x120080, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)="4b54ffe49d") 1.463709689s ago: executing program 3 (id=1444): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f020000000000090506"], 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) 1.384827907s ago: executing program 2 (id=1446): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 1.322322122s ago: executing program 2 (id=1448): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010000080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 1.161102216s ago: executing program 2 (id=1452): r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000003040), 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x541b, 0x0) 1.055675336s ago: executing program 2 (id=1454): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.055543076s ago: executing program 2 (id=1455): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020ef0e01000000000300010902240001000080000904000001f2ff0100092100000001220500090581083f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 950.732275ms ago: executing program 0 (id=1457): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) 890.065531ms ago: executing program 0 (id=1460): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000180)={{0x1, 0x3}, {0x8, 0x4}, 0x1, 0x2, 0x3}) 813.723838ms ago: executing program 0 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20004000) 752.685813ms ago: executing program 0 (id=1465): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000001240)={[{@nodecompose}, {}, {@type={'type', 0x3d, "4d99459f"}}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x1, 0x6b3, &(0x7f0000000780)="$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") mount$nfs(&(0x7f0000000040)='\x8b\xb8\x98\x97\xb9\xdc\x80?!\xbc\x9a\xdf\xbc\x01\xec\xd8!Y\xc3?\xa5\x1d\x1d}8\xf0T?dw\xe2i\xe8q: \xed\xd5!\x8d+\xda\x84\xea\x8d\x15\xdd\t\v\x11\x97\xc9\x06\xba\x8f\x91e(\r\x1a\xbfZX\x16', &(0x7f0000000500)='./file0\x00', 0x0, 0xa55000, 0x0) 591.490898ms ago: executing program 4 (id=1469): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0xfffffffc, 0x1c, 0xf, 0x1016, 0x10006, 0x8000}}) 546.643101ms ago: executing program 0 (id=1470): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc) 546.526352ms ago: executing program 1 (id=1471): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009008100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 476.184828ms ago: executing program 4 (id=1472): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x7, 0x9, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20000800) 469.535178ms ago: executing program 1 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="130000004e0001"], 0x24}}, 0x0) 359.720288ms ago: executing program 1 (id=1474): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x1) 340.97301ms ago: executing program 1 (id=1475): r0 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0x40044102, 0x0) 334.06635ms ago: executing program 4 (id=1476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x40000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 218.338441ms ago: executing program 4 (id=1477): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xdf26, 0x800}) 171.165655ms ago: executing program 1 (id=1478): r0 = socket(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 87.608962ms ago: executing program 4 (id=1479): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes '], 0xd) 42.768396ms ago: executing program 4 (id=1480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.991686ms ago: executing program 1 (id=1481): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) 0s ago: executing program 0 (id=1482): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c00), 0x40, 0x0) read$ptp(r0, &(0x7f0000000c40)=""/246, 0xf6) kernel console output (not intermixed with test programs): 906061][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.923419][ T4188] device veth0_vlan entered promiscuous mode [ 66.950282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.959090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.972795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.982129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.990922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.000990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.010265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.018500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.027275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.036370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.062049][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.071370][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.085596][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.096674][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.124035][ T4190] device veth0_macvtap entered promiscuous mode [ 67.136809][ T4188] device veth1_vlan entered promiscuous mode [ 67.144855][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.167811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.180313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.180741][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.204286][ T4190] device veth1_macvtap entered promiscuous mode [ 67.227746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.244278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.257719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.294642][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.306683][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.322020][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.332496][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.344603][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.368927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.380732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.411722][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.419880][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.427985][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.439102][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.449460][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.461444][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.472718][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.481758][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.494949][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.503969][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.512806][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.521854][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.530622][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.539212][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.552671][ T4188] device veth0_macvtap entered promiscuous mode [ 67.587894][ T4188] device veth1_macvtap entered promiscuous mode [ 67.600569][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.608429][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.630754][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.642171][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.651373][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.661066][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.675379][ T4193] device veth0_vlan entered promiscuous mode [ 67.690338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.698664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.707704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.717437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.732696][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 67.738878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.777771][ T4193] device veth1_vlan entered promiscuous mode [ 67.784996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.794753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.803939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.812058][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 67.824969][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.840459][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.856379][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.867449][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.885886][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.890897][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 67.900366][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.909439][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 67.918139][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 67.927305][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.952242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.962465][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.977402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.992764][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.006551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.015743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.052955][ T4292] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 68.064336][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.084693][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.094631][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.130351][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.147595][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.158104][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.198405][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.217941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.241286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.268090][ T4193] device veth0_macvtap entered promiscuous mode [ 68.293237][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312125][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.326337][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.356144][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.369998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.385808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.410725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.433906][ T4193] device veth1_macvtap entered promiscuous mode [ 68.509632][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.517503][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.578865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.591737][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 68.610362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.630316][ T4309] Cannot find set identified by id 0 to match [ 68.639937][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.668472][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.690245][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.719220][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.733182][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.744435][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.753580][ T4313] loop2: detected capacity change from 0 to 128 [ 68.755042][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.778638][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.795667][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.805449][ T4313] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 68.824350][ T4313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.859922][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.868777][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.884844][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.906103][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.917448][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.928503][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.939052][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.949824][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.964988][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.982060][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.008183][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.037918][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.064858][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.077105][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.078030][ T4319] mmap: syz.1.19 (4319): VmData 175800320 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 69.100199][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.116243][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.128115][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.175718][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.202136][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.211495][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.282976][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.292782][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.350042][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.430300][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.438168][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.470718][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.506859][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.540831][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.562338][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.646353][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.676896][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.707922][ T4343] loop1: detected capacity change from 0 to 47 [ 69.710548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.799842][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.811690][ T4343] ======================================================= [ 69.811690][ T4343] WARNING: The mand mount option has been deprecated and [ 69.811690][ T4343] and is ignored by this kernel. Remove the mand [ 69.811690][ T4343] option from the mount to silence this warning. [ 69.811690][ T4343] ======================================================= [ 69.880521][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 69.946313][ T4355] Cannot find add_set index 0 as target [ 69.960270][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.960303][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 69.976656][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 70.088249][ T4363] loop4: detected capacity change from 0 to 256 [ 70.164790][ T4369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 70.186379][ T4369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 70.239712][ T4373] netlink: 'syz.2.39': attribute type 13 has an invalid length. [ 70.489527][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.698145][ T4399] netlink: 96 bytes leftover after parsing attributes in process `syz.0.53'. [ 70.776396][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 70.939664][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.954939][ T4405] loop2: detected capacity change from 0 to 256 [ 71.011055][ T4405] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 71.039628][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.149507][ T1107] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 71.159224][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.172780][ T1107] usb 4-1: Product: syz [ 71.177041][ T1107] usb 4-1: Manufacturer: syz [ 71.187017][ T1107] usb 4-1: SerialNumber: syz [ 71.207920][ T1107] usb 4-1: config 0 descriptor?? [ 71.254425][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.261024][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.284796][ T1107] usb 4-1: bad CDC descriptors [ 71.290002][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.304818][ T1107] usb 4-1: unsupported MDLM descriptors [ 71.329929][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 71.459576][ T13] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 71.472638][ T13] usb 5-1: config 179 has no interface number 0 [ 71.478958][ T13] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 71.518747][ T13] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 71.540117][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 71.550415][ T13] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.562911][ T13] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.574078][ T13] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 71.588449][ T13] usb 5-1: config 179 interface 65 has no altsetting 0 [ 71.611025][ T13] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 71.624356][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.634802][ T4421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 71.648617][ T4421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 71.663782][ T1107] usb 4-1: USB disconnect, device number 2 [ 71.690065][ T7] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 71.708541][ T7] usb 1-1: config 0 has no interface number 0 [ 71.731858][ T13] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 71.744532][ T7] usb 1-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 71.764475][ T7] usb 1-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 71.780269][ T7] usb 1-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 71.807462][ T4425] netlink: 'syz.1.65': attribute type 5 has an invalid length. [ 71.833446][ T4425] netlink: 'syz.1.65': attribute type 11 has an invalid length. [ 72.001502][ T7] usb 1-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 72.013293][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.021767][ T7] usb 1-1: Product: syz [ 72.026047][ T7] usb 1-1: Manufacturer: syz [ 72.031489][ T7] usb 1-1: SerialNumber: syz [ 72.045680][ T7] usb 1-1: config 0 descriptor?? [ 72.057396][ T1107] usb 5-1: USB disconnect, device number 2 [ 72.067080][ T1107] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 72.090352][ T4403] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 72.100405][ T4403] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 72.130408][ T7] usb-storage 1-1:0.216: USB Mass Storage device detected [ 72.148339][ T4433] loop3: detected capacity change from 0 to 512 [ 72.185598][ T7] scsi host1: usb-storage 1-1:0.216 [ 72.307840][ T4433] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback. [ 72.321453][ T4433] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.335381][ T4429] loop1: detected capacity change from 0 to 32768 [ 72.357795][ T7] usb 1-1: USB disconnect, device number 2 [ 72.426676][ T4429] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 72.435711][ T4429] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 72.485075][ T4429] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 72.733017][ T4429] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 72.745422][ T4446] blk_update_request: I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 72.777157][ T4446] gfs2: error 10 reading superblock [ 72.990947][ T4429] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 73.029915][ T4462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.80'. [ 73.049593][ T4429] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 73.049593][ T4429] inode = 12 2341 [ 73.049593][ T4429] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 73.134474][ T4429] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 73.152434][ T4468] netlink: 'syz.0.82': attribute type 8 has an invalid length. [ 73.175377][ T4429] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 73.224706][ T4472] trusted_key: encrypted_key: master key parameter '' is invalid [ 73.243197][ T4429] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 73.263275][ T4429] gfs2: fsid=syz:syz.s: File system withdrawn [ 73.285556][ T4429] CPU: 1 PID: 4429 Comm: syz.1.67 Not tainted syzkaller #0 [ 73.292807][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.302987][ T4429] Call Trace: [ 73.306290][ T4429] [ 73.309263][ T4429] dump_stack_lvl+0x188/0x250 [ 73.313995][ T4429] ? kobject_uevent_env+0x371/0x890 [ 73.319419][ T4429] ? show_regs_print_info+0x20/0x20 [ 73.324665][ T4429] ? load_image+0x400/0x400 [ 73.329201][ T4429] ? kobject_uevent_env+0x371/0x890 [ 73.334443][ T4429] gfs2_withdraw+0x1149/0x1490 [ 73.339254][ T4429] ? gfs2_lm+0x240/0x240 [ 73.343526][ T4429] ? load_image+0x400/0x400 [ 73.348058][ T4429] ? gfs2_consist_inode_i+0xc0/0xe0 [ 73.353297][ T4429] gfs2_dirent_scan+0x525/0x650 [ 73.358177][ T4429] ? gfs2_dirent_search+0x7f0/0x7f0 [ 73.363400][ T4429] gfs2_dirent_search+0x2e9/0x7f0 [ 73.368468][ T4429] ? gfs2_dirent_search+0x7f0/0x7f0 [ 73.373692][ T4429] ? gfs2_permission+0x40a/0x4e0 [ 73.378660][ T4429] ? gfs2_dir_search+0x220/0x220 [ 73.383639][ T4429] ? gfs2_lookupi+0x600/0x600 [ 73.388344][ T4429] ? gfs2_glock_nq+0xcb0/0x1550 [ 73.393224][ T4429] gfs2_dir_search+0x49/0x220 [ 73.397936][ T4429] gfs2_lookupi+0x46c/0x600 [ 73.402473][ T4429] ? gfs2_lookup_simple+0x100/0x100 [ 73.407695][ T4429] ? gfs2_lookupi+0x40e/0x600 [ 73.412395][ T4429] ? __d_lookup_rcu+0x68a/0x760 [ 73.417287][ T4429] ? __lock_acquire+0x7d10/0x7d10 [ 73.422356][ T4429] __gfs2_lookup+0xa9/0x290 [ 73.426900][ T4429] ? gfs2_atomic_open+0x210/0x210 [ 73.431948][ T4429] ? d_alloc_parallel+0x1222/0x1330 [ 73.437184][ T4429] gfs2_atomic_open+0x8e/0x210 [ 73.441980][ T4429] ? gfs2_rename2+0x1ef0/0x1ef0 [ 73.446861][ T4429] path_openat+0xe8c/0x2fa0 [ 73.451433][ T4429] ? slab_post_alloc_hook+0x4c/0x380 [ 73.456770][ T4429] ? do_filp_open+0x410/0x410 [ 73.461496][ T4429] do_filp_open+0x1e2/0x410 [ 73.466042][ T4429] ? vfs_tmpfile+0x300/0x300 [ 73.470681][ T4429] ? _raw_spin_unlock+0x24/0x40 [ 73.475559][ T4429] ? alloc_fd+0x598/0x630 [ 73.479928][ T4429] do_sys_openat2+0x150/0x4b0 [ 73.484629][ T4429] ? __lock_acquire+0x7d10/0x7d10 [ 73.489687][ T4429] ? do_sys_open+0xe0/0xe0 [ 73.494124][ T4429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 73.500147][ T4429] ? lock_chain_count+0x20/0x20 [ 73.505032][ T4429] ? vtime_user_exit+0x2c8/0x3e0 [ 73.510008][ T4429] __x64_sys_openat+0x135/0x160 [ 73.514893][ T4429] do_syscall_64+0x4c/0xa0 [ 73.519339][ T4429] ? clear_bhb_loop+0x30/0x80 [ 73.524051][ T4429] ? clear_bhb_loop+0x30/0x80 [ 73.528766][ T4429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.534782][ T4429] RIP: 0033:0x7f64c3b99629 [ 73.539236][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.558896][ T4429] RSP: 002b:00007f64c1df3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.567343][ T4429] RAX: ffffffffffffffda RBX: 00007f64c3e12fa0 RCX: 00007f64c3b99629 [ 73.575341][ T4429] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 73.583356][ T4429] RBP: 00007f64c3c2fb39 R08: 0000000000000000 R09: 0000000000000000 [ 73.591357][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.599356][ T4429] R13: 00007f64c3e13038 R14: 00007f64c3e12fa0 R15: 00007fffa0f86ce8 [ 73.607387][ T4429] [ 74.110008][ T4510] device wg1 entered promiscuous mode [ 74.344317][ T4522] loop3: detected capacity change from 0 to 64 [ 74.933689][ T4563] loop0: detected capacity change from 0 to 16 [ 74.953800][ T4561] device bridge1 entered promiscuous mode [ 75.008038][ T4563] erofs: (device loop0): mounted with root inode @ nid 36. [ 75.028211][ T4568] Option '2 O€ÉÇ—Wz [ 75.028211][ T4568] ­ f:ó–ã5úÉùÔAŠÀ- [ 75.028211][ T4568] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 75.211767][ T4580] loop3: detected capacity change from 0 to 47 [ 75.416068][ T4598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.144'. [ 75.502035][ T4602] loop1: detected capacity change from 0 to 2048 [ 75.575603][ T4602] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 75.608715][ T4602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.898468][ T4633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 75.910189][ T4633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 76.126932][ T4648] netlink: 'syz.0.169': attribute type 1 has an invalid length. [ 76.152606][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 76.246828][ T4655] netlink: 'syz.0.174': attribute type 3 has an invalid length. [ 76.662508][ T4689] netlink: 'syz.4.190': attribute type 5 has an invalid length. [ 76.782848][ T4699] loop2: detected capacity change from 0 to 256 [ 76.809461][ T4697] netlink: 104 bytes leftover after parsing attributes in process `syz.0.194'. [ 76.832152][ T4701] loop4: detected capacity change from 0 to 1764 [ 76.839828][ T4697] netlink: 104 bytes leftover after parsing attributes in process `syz.0.194'. [ 76.859088][ T4697] netlink: 81 bytes leftover after parsing attributes in process `syz.0.194'. [ 76.873401][ T4703] loop1: detected capacity change from 0 to 256 [ 76.963021][ T4699] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 76.969683][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.988261][ T4703] FAT-fs (loop1): Directory bread(block 64) failed [ 76.998395][ T4699] FAT-fs (loop2): bogus number of directory entries (1) [ 77.019373][ T4703] FAT-fs (loop1): Directory bread(block 65) failed [ 77.026181][ T4703] FAT-fs (loop1): Directory bread(block 66) failed [ 77.050177][ T4699] FAT-fs (loop2): Can't find a valid FAT filesystem [ 77.059920][ T4703] FAT-fs (loop1): Directory bread(block 67) failed [ 77.066604][ T4703] FAT-fs (loop1): Directory bread(block 68) failed [ 77.099153][ T4703] FAT-fs (loop1): Directory bread(block 69) failed [ 77.114226][ T4703] FAT-fs (loop1): Directory bread(block 70) failed [ 77.135928][ T4703] FAT-fs (loop1): Directory bread(block 71) failed [ 77.159410][ T4703] FAT-fs (loop1): Directory bread(block 72) failed [ 77.168856][ T4703] FAT-fs (loop1): Directory bread(block 73) failed [ 77.209442][ T4237] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.339435][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.365193][ T23] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 77.382780][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.436056][ T23] usb 4-1: config 0 has no interface number 0 [ 77.451286][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 77.461445][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.479888][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 77.521853][ T23] usb 4-1: config 0 descriptor?? [ 77.619822][ T23] ttusbir 4-1:0.83: cannot find expected altsetting [ 77.635074][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 77.708546][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 77.759717][ T1107] usb 5-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 77.780903][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 77.796672][ T1107] usb 5-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 77.843079][ T1107] usb 5-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 77.855927][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.867193][ T1107] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 77.878087][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.893219][ T23] usb 4-1: USB disconnect, device number 3 [ 77.914575][ T1107] usb 5-1: config 0 descriptor?? [ 77.969879][ T4701] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 77.989660][ T4237] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 77.999040][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.035600][ T4237] usb 1-1: Product: syz [ 78.042681][ T4237] usb 1-1: Manufacturer: syz [ 78.047319][ T4237] usb 1-1: SerialNumber: syz [ 78.059561][ T4237] usb 1-1: config 0 descriptor?? [ 78.099775][ T4724] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.229543][ T1107] usb 5-1: string descriptor 0 read error: -71 [ 78.236530][ T1107] usb 5-1: ucan: probing device on interface #0 [ 78.259343][ T1107] usb 5-1: ucan: invalid endpoint configuration [ 78.265648][ T1107] usb 5-1: ucan: probe failed; try to update the device firmware [ 78.323505][ T1107] usb 5-1: USB disconnect, device number 3 [ 78.338648][ T4223] usb 1-1: USB disconnect, device number 3 [ 78.359709][ T2306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.522999][ T4744] loop3: detected capacity change from 0 to 256 [ 78.609692][ T2306] usb 3-1: Using ep0 maxpacket: 32 [ 78.740286][ T2306] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 78.767457][ T2306] usb 3-1: config 0 has no interface number 0 [ 78.782616][ T2306] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.833625][ T2306] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 78.898547][ T4764] loop3: detected capacity change from 0 to 256 [ 79.009702][ T2306] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 79.029685][ T4764] FAT-fs (loop3): Directory bread(block 64) failed [ 79.039184][ T2306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.063891][ T4764] FAT-fs (loop3): Directory bread(block 65) failed [ 79.081070][ T2306] usb 3-1: Product: syz [ 79.085328][ T2306] usb 3-1: Manufacturer: syz [ 79.091282][ T4764] FAT-fs (loop3): Directory bread(block 66) failed [ 79.097857][ T4764] FAT-fs (loop3): Directory bread(block 67) failed [ 79.130359][ T2306] usb 3-1: SerialNumber: syz [ 79.145834][ T2306] usb 3-1: config 0 descriptor?? [ 79.163176][ T4764] FAT-fs (loop3): Directory bread(block 68) failed [ 79.185181][ T4764] FAT-fs (loop3): Directory bread(block 69) failed [ 79.215267][ T2306] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 79.228484][ T4764] FAT-fs (loop3): Directory bread(block 70) failed [ 79.250468][ T4764] FAT-fs (loop3): Directory bread(block 71) failed [ 79.257651][ T4764] FAT-fs (loop3): Directory bread(block 72) failed [ 79.281376][ T4764] FAT-fs (loop3): Directory bread(block 73) failed [ 79.424870][ T2306] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 79.433609][ T2306] quatech2: probe of 3-1:0.51 failed with error -90 [ 79.465258][ T4790] loop4: detected capacity change from 0 to 47 [ 79.669016][ T2306] usb 3-1: USB disconnect, device number 2 [ 79.890915][ T4237] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 79.904183][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 79.934892][ T4808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.247'. [ 80.311064][ T4237] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 80.327951][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.328151][ T4824] netlink: 84 bytes leftover after parsing attributes in process `syz.4.255'. [ 80.359754][ T4237] usb 1-1: config 0 descriptor?? [ 80.421657][ T4237] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 80.429605][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.255'. [ 80.518382][ T4834] netlink: 'syz.1.259': attribute type 8 has an invalid length. [ 80.602806][ T4840] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 80.702789][ T4843] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 80.728065][ T4845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 80.755970][ T4845] IPv6: sit1: Disabled Multicast RS [ 80.793814][ T4847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 80.822194][ T4847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 80.836421][ T4850] netlink: 196 bytes leftover after parsing attributes in process `syz.1.268'. [ 80.852406][ T4237] gp8psk: usb in 137 operation failed. [ 80.858285][ T4237] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 80.880584][ T4850] netlink: 196 bytes leftover after parsing attributes in process `syz.1.268'. [ 80.889630][ T4237] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 80.904935][ T4237] usb 1-1: USB disconnect, device number 4 [ 80.959436][ T4850] netlink: 19 bytes leftover after parsing attributes in process `syz.1.268'. [ 80.994772][ T4856] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 81.037821][ T4856] netlink: 156 bytes leftover after parsing attributes in process `syz.4.271'. [ 81.133534][ T4223] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.157163][ T4862] loop3: detected capacity change from 0 to 64 [ 81.379384][ T4223] usb 3-1: Using ep0 maxpacket: 16 [ 81.541456][ T4223] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.639679][ T4223] usb 3-1: config 3 has an invalid interface number: 209 but max is 1 [ 81.660640][ T4223] usb 3-1: config 3 has an invalid interface number: 44 but max is 1 [ 81.682017][ T4223] usb 3-1: config 3 has no interface number 0 [ 81.696235][ T4223] usb 3-1: config 3 has no interface number 1 [ 81.709307][ T4223] usb 3-1: config 3 interface 209 has no altsetting 0 [ 81.722897][ T4223] usb 3-1: config 3 interface 44 has no altsetting 0 [ 81.889609][ T4223] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 7.59 [ 81.903361][ T4223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.920723][ T4223] usb 3-1: Product: syz [ 81.929622][ T4223] usb 3-1: Manufacturer: syz [ 81.938895][ T4223] usb 3-1: SerialNumber: syz [ 82.326282][ T4223] usb 3-1: USB disconnect, device number 3 [ 82.338882][ T4893] loop3: detected capacity change from 0 to 64 [ 82.476133][ T4900] loop4: detected capacity change from 0 to 764 [ 82.605060][ T4900] Symlink component flag not implemented [ 82.626645][ T4900] Symlink component flag not implemented (15) [ 82.990301][ T13] kernel write not supported for file /input/mice (pid: 13 comm: kworker/0:1) [ 83.005628][ T4923] nvme_fabrics: missing parameter 'transport=%s' [ 83.036331][ T4923] nvme_fabrics: missing parameter 'nqn=%s' [ 83.079534][ T4237] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.329522][ T4237] usb 1-1: Using ep0 maxpacket: 8 [ 83.369737][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.447964][ T4952] loop2: detected capacity change from 0 to 2048 [ 83.458355][ T4237] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.470718][ T4237] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.488941][ T4237] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.544791][ T4952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.651034][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 83.689889][ T4237] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.702427][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.743527][ T4237] usb 1-1: Product: syz [ 83.758949][ T4237] usb 1-1: Manufacturer: syz [ 83.775521][ T4237] usb 1-1: SerialNumber: syz [ 83.839537][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.860654][ T4237] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 83.876993][ T4237] cdc_ncm 1-1:1.0: bind() failure [ 83.959607][ T13] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.975328][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 84.012808][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 84.074839][ T4237] cdc_mbim 1-1:1.1: CDC Union missing and no IAD found [ 84.094694][ T4237] cdc_mbim 1-1:1.1: bind() failure [ 84.199912][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 84.219417][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.245166][ T13] usb 2-1: Product: syz [ 84.255323][ T13] usb 2-1: Manufacturer: syz [ 84.260940][ T13] usb 2-1: SerialNumber: syz [ 84.274152][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 84.311526][ T4237] usb 1-1: USB disconnect, device number 5 [ 84.483951][ T4988] (unnamed net_device) (uninitialized): peer notification delay (1025) is not a multiple of miimon (12650), value rounded to 0 ms [ 84.536177][ T4934] udc-core: couldn't find an available UDC or it's busy [ 84.552560][ T4988] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 84.576033][ T4934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.676291][ T13] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 84.734850][ T3546] bcm5974 2-1:1.0: could not read from device [ 84.770322][ T5001] loop3: detected capacity change from 0 to 1024 [ 84.799433][ T3546] bcm5974 2-1:1.0: could not read from device [ 84.831214][ T13] usb 2-1: USB disconnect, device number 2 [ 84.845475][ T3546] bcm5974 2-1:1.0: could not read from device [ 84.860841][ T3546] bcm5974 2-1:1.0: could not read from device [ 84.896358][ T5006] loop2: detected capacity change from 0 to 8 [ 85.211161][ T5021] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.304939][ T26] audit: type=1400 audit(1771474092.061:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=5024 comm="syz.2.353" [ 85.755388][ T5055] __nla_validate_parse: 1 callbacks suppressed [ 85.755405][ T5055] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.367'. [ 85.960608][ T5069] device xfrm0 entered promiscuous mode [ 86.004936][ T263] block nbd4: Attempted send on invalid socket [ 86.012371][ T263] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.037629][ T5071] vxfs: unable to read disk superblock at 1 [ 86.073157][ T263] block nbd4: Attempted send on invalid socket [ 86.079522][ T263] blk_update_request: I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.091551][ T5071] vxfs: unable to read disk superblock at 8 [ 86.119171][ T5073] nfs: Deprecated parameter 'nointr' [ 86.125036][ T5071] vxfs: can't find superblock. [ 86.294456][ T5080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 86.356065][ T5084] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 86.406083][ T5084] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 86.457930][ T5054] loop3: detected capacity change from 0 to 32768 [ 86.613233][ T1335] cfg80211: failed to load regulatory.db [ 86.703497][ T5094] loop2: detected capacity change from 0 to 4096 [ 86.722529][ T5094] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 86.734154][ T5094] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 86.762894][ T5054] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 86.807341][ T5094] ntfs3: loop2: failed to read volume at offset 0x201800 [ 86.825189][ T5094] ntfs3: loop2: failed to read volume at offset 0x201800 [ 86.869513][ T5094] ntfs3: loop2: failed to read volume at offset 0x201800 [ 86.876675][ T5094] ntfs3: loop2: failed to read volume at offset 0x201800 [ 86.946159][ T5110] QAT: failed to copy from user cfg_data. [ 86.960173][ T5094] ntfs3: loop2: failed to read volume at offset 0x202800 [ 86.967386][ T5094] ntfs3: loop2: failed to read volume at offset 0x203800 [ 87.065857][ T5094] ntfs3: loop2: failed to read volume at offset 0x205800 [ 87.100051][ T5094] ntfs3: loop2: failed to read volume at offset 0x209800 [ 87.172581][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 87.466962][ T5132] loop2: detected capacity change from 0 to 64 [ 87.748529][ T5142] loop2: detected capacity change from 0 to 2048 [ 87.798919][ T5142] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 87.819424][ T1335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.849147][ T5142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.979466][ T5149] device wg1 entered promiscuous mode [ 88.069445][ T1335] usb 1-1: Using ep0 maxpacket: 32 [ 88.109532][ T5151] netlink: 'syz.1.414': attribute type 5 has an invalid length. [ 88.148708][ T5155] loop3: detected capacity change from 0 to 512 [ 88.155907][ T5153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.413'. [ 88.189578][ T1335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.271793][ T5155] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 88.271793][ T5155] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 88.271793][ T5155] [ 88.308736][ T5127] loop4: detected capacity change from 0 to 32768 [ 88.315635][ T5155] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.330135][ T5155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.351730][ T5155] EXT4-fs (loop3): 1 truncate cleaned up [ 88.365464][ T5127] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 88.368029][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,resuid=0x000000000000ee01,nouser_xattr,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 88.375376][ T1335] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 88.422784][ T5127] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 88.502614][ T5127] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 88.540596][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.584467][ T1335] usb 1-1: Product: syz [ 88.588707][ T1335] usb 1-1: Manufacturer: syz [ 88.649395][ T1335] usb 1-1: SerialNumber: syz [ 88.680608][ T1335] usb 1-1: config 0 descriptor?? [ 88.720674][ T1335] usb 1-1: bad CDC descriptors [ 88.736369][ T1335] usb 1-1: unsupported MDLM descriptors [ 88.812895][ T5127] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 88.943769][ T1335] usb 1-1: USB disconnect, device number 6 [ 88.952198][ T5127] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 89.032067][ T5127] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 89.032067][ T5127] inode = 12 2341 [ 89.032067][ T5127] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 89.054258][ T5163] loop1: detected capacity change from 0 to 32768 [ 89.092830][ T5181] x_tables: duplicate underflow at hook 4 [ 89.108581][ T5127] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 89.116447][ T5127] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 89.125801][ T5127] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 89.150121][ T5163] (syz.1.418,5163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.171580][ T5127] gfs2: fsid=syz:syz.s: File system withdrawn [ 89.199730][ T5127] CPU: 1 PID: 5127 Comm: syz.4.403 Not tainted syzkaller #0 [ 89.207191][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.217287][ T5127] Call Trace: [ 89.220604][ T5127] [ 89.223568][ T5127] dump_stack_lvl+0x188/0x250 [ 89.228298][ T5127] ? kobject_uevent_env+0x371/0x890 [ 89.233541][ T5127] ? show_regs_print_info+0x20/0x20 [ 89.238787][ T5127] ? load_image+0x400/0x400 [ 89.243336][ T5127] ? kobject_uevent_env+0x371/0x890 [ 89.248580][ T5127] gfs2_withdraw+0x1149/0x1490 [ 89.253408][ T5127] ? gfs2_lm+0x240/0x240 [ 89.257683][ T5127] ? load_image+0x400/0x400 [ 89.262237][ T5127] ? gfs2_consist_inode_i+0xc0/0xe0 [ 89.267477][ T5127] gfs2_dirent_scan+0x525/0x650 [ 89.272354][ T5127] ? gfs2_dirent_search+0x7f0/0x7f0 [ 89.277607][ T5127] gfs2_dirent_search+0x2e9/0x7f0 [ 89.282666][ T5127] ? gfs2_dirent_search+0x7f0/0x7f0 [ 89.283316][ T5163] (syz.1.418,5163,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.287896][ T5127] ? gfs2_permission+0x40a/0x4e0 [ 89.287945][ T5127] ? gfs2_dir_search+0x220/0x220 [ 89.287964][ T5127] ? gfs2_lookupi+0x600/0x600 [ 89.315973][ T5127] ? gfs2_glock_nq+0xcb0/0x1550 [ 89.320885][ T5127] gfs2_dir_search+0x49/0x220 [ 89.325606][ T5127] gfs2_lookupi+0x46c/0x600 [ 89.330141][ T5127] ? gfs2_lookup_simple+0x100/0x100 [ 89.335375][ T5127] ? gfs2_lookupi+0x40e/0x600 [ 89.340074][ T5127] ? __d_lookup_rcu+0x68a/0x760 [ 89.344956][ T5127] ? __lock_acquire+0x7d10/0x7d10 [ 89.350022][ T5127] __gfs2_lookup+0xa9/0x290 [ 89.354572][ T5127] ? gfs2_atomic_open+0x210/0x210 [ 89.359646][ T5127] ? d_alloc_parallel+0x1222/0x1330 [ 89.364906][ T5127] gfs2_atomic_open+0x8e/0x210 [ 89.369721][ T5127] ? gfs2_rename2+0x1ef0/0x1ef0 [ 89.374611][ T5127] path_openat+0xe8c/0x2fa0 [ 89.379189][ T5127] ? slab_post_alloc_hook+0x4c/0x380 [ 89.384638][ T5127] ? do_filp_open+0x410/0x410 [ 89.389417][ T5127] do_filp_open+0x1e2/0x410 [ 89.393975][ T5127] ? vfs_tmpfile+0x300/0x300 [ 89.398658][ T5127] ? _raw_spin_unlock+0x24/0x40 [ 89.403546][ T5127] ? alloc_fd+0x598/0x630 [ 89.407918][ T5127] do_sys_openat2+0x150/0x4b0 [ 89.412626][ T5127] ? __lock_acquire+0x7d10/0x7d10 [ 89.417700][ T5127] ? do_sys_open+0xe0/0xe0 [ 89.422157][ T5127] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 89.428181][ T5127] ? lock_chain_count+0x20/0x20 [ 89.433068][ T5127] ? vtime_user_exit+0x2c8/0x3e0 [ 89.438052][ T5127] __x64_sys_openat+0x135/0x160 [ 89.442937][ T5127] do_syscall_64+0x4c/0xa0 [ 89.447389][ T5127] ? clear_bhb_loop+0x30/0x80 [ 89.452098][ T5127] ? clear_bhb_loop+0x30/0x80 [ 89.456820][ T5127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.462758][ T5127] RIP: 0033:0x7f710c11c629 [ 89.467215][ T5127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.486858][ T5127] RSP: 002b:00007f710a376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.495316][ T5127] RAX: ffffffffffffffda RBX: 00007f710c395fa0 RCX: 00007f710c11c629 [ 89.503324][ T5127] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 89.511329][ T5127] RBP: 00007f710c1b2b39 R08: 0000000000000000 R09: 0000000000000000 [ 89.519339][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.527344][ T5127] R13: 00007f710c396038 R14: 00007f710c395fa0 R15: 00007ffc61021ab8 [ 89.535366][ T5127] [ 89.562692][ T5163] JBD2: Ignoring recovery information on journal [ 89.742746][ T5163] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 89.892804][ T5163] ocfs2: Unmounting device (7,1) on (node local) [ 89.999043][ T5206] 9pnet: p9_fd_create_tcp (5206): problem connecting socket to 127.0.0.1 [ 90.643594][ T5237] Cannot find map_set index 0 as target [ 90.822118][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 90.944987][ T26] audit: type=1326 audit(1771474097.701:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.0.462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67abd19629 code=0x0 [ 90.966603][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.977985][ T5202] loop3: detected capacity change from 0 to 40427 [ 91.076982][ T5202] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 91.119536][ T5202] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.164449][ T5202] F2FS-fs (loop3): invalid crc value [ 91.246348][ T5202] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.269388][ T4237] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.406537][ T5202] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.421060][ T5202] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.709674][ T4237] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 91.718958][ T4237] usb 2-1: config 0 has no interface number 1 [ 91.734293][ T4237] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 91.744726][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.767214][ T4237] usb 2-1: config 0 descriptor?? [ 91.840350][ T4237] usb 2-1: MIDIStreaming interface descriptor not found [ 91.999422][ T2306] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.029494][ T4237] gspca_main: spca561-2.14.0 probing abcd:cdee [ 92.155207][ T4237] spca561: probe of 2-1:0.0 failed with error -22 [ 92.195700][ T4237] usb 2-1: USB disconnect, device number 3 [ 92.239794][ T2306] usb 3-1: Using ep0 maxpacket: 16 [ 92.360613][ T2306] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 92.389437][ T2306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.437483][ T2306] usb 3-1: config 0 has no interface number 0 [ 92.588443][ T5335] loop0: detected capacity change from 0 to 2048 [ 92.609799][ T2306] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 92.629353][ T2306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.638165][ T2306] usb 3-1: Product: syz [ 92.666042][ T2306] usb 3-1: Manufacturer: syz [ 92.705477][ T2306] usb 3-1: SerialNumber: syz [ 92.713970][ T5342] loop4: detected capacity change from 0 to 512 [ 92.730622][ T2306] usb 3-1: config 0 descriptor?? [ 92.804608][ T5342] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 92.830449][ T5347] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.896494][ T5342] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 93.009944][ T2306] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 93.016387][ T2306] usb 3-1: No valid video chain found. [ 93.065198][ T5342] EXT4-fs error (device loop4): ext4_xattr_block_list:713: inode #15: comm syz.4.495: corrupted xattr block 32 [ 93.248535][ T23] usb 3-1: USB disconnect, device number 4 [ 93.398052][ T5371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 93.744637][ T5381] loop0: detected capacity change from 0 to 8192 [ 93.816961][ T5381] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 93.833912][ T5381] REISERFS (device loop0): using ordered data mode [ 93.846992][ T5381] reiserfs: using flush barriers [ 93.869147][ T5381] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.886281][ T5381] REISERFS (device loop0): checking transaction log (loop0) [ 93.927924][ T5381] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.6* [1 2 0x0 SD], item_len 30764, item_location 3847, free_space(entry_count) 0 [ 93.962520][ T5381] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 93.976583][ T5381] REISERFS (device loop0): Remounting filesystem read-only [ 93.984186][ T5381] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 94.038658][ T4237] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.095072][ T5402] loop4: detected capacity change from 0 to 64 [ 94.168938][ T26] audit: type=1800 audit(94.131:4): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.523" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 94.274945][ T5408] netlink: 'syz.3.526': attribute type 2 has an invalid length. [ 94.295027][ T5408] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 94.303656][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 94.411229][ T5411] loop2: detected capacity change from 0 to 1764 [ 94.449958][ T4237] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 94.475241][ T4237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.506084][ T4237] usb 2-1: config 0 has no interface number 0 [ 94.531092][ T4237] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 94.580267][ T4237] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.660544][ T21] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 94.670245][ T5422] netlink: 'syz.2.532': attribute type 30 has an invalid length. [ 94.779607][ T4237] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 94.788975][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.808856][ T5430] program syz.0.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.821923][ T4237] usb 2-1: Product: syz [ 94.826513][ T4237] usb 2-1: Manufacturer: syz [ 94.849404][ T4237] usb 2-1: SerialNumber: syz [ 94.856017][ T4237] usb 2-1: config 0 descriptor?? [ 95.011435][ T5437] loop0: detected capacity change from 0 to 8192 [ 95.039655][ T21] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 95.053376][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.087750][ T5437] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 95.125541][ T5437] REISERFS (device loop0): using ordered data mode [ 95.132715][ T5437] reiserfs: using flush barriers [ 95.159083][ T5437] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.180375][ T5437] REISERFS (device loop0): checking transaction log (loop0) [ 95.204613][ T5437] REISERFS (device loop0): Using r5 hash to sort names [ 95.229574][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 95.245655][ T21] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 95.260361][ T21] usb 5-1: Product: syz [ 95.264849][ T21] usb 5-1: Manufacturer: syz [ 95.286014][ T21] usb 5-1: SerialNumber: syz [ 95.313906][ T21] usb 5-1: config 0 descriptor?? [ 95.328025][ T5451] netlink: 100 bytes leftover after parsing attributes in process `syz.3.547'. [ 95.363268][ T13] usb 2-1: USB disconnect, device number 4 [ 95.383268][ T21] usb 5-1: selecting invalid altsetting 0 [ 95.460891][ T5456] loop2: detected capacity change from 0 to 16 [ 95.567199][ T5461] loop3: detected capacity change from 0 to 2048 [ 95.579792][ T5456] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.647559][ T5410] usb 5-1: selecting invalid altsetting 0 [ 95.654661][ T5461] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.664592][ T5410] usb 5-1: 0:0: usb_set_interface failed (-22) [ 95.672826][ T4237] usb 5-1: USB disconnect, device number 4 [ 95.719476][ T5464] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.839584][ T5470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.019368][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.269444][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 96.363287][ T5496] device ip6tnl1 entered promiscuous mode [ 96.389545][ T21] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 96.439371][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.451292][ T5490] loop2: detected capacity change from 0 to 4096 [ 96.474635][ T21] usb 1-1: config 0 has no interface number 0 [ 96.481502][ T21] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 96.492953][ T21] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 96.504387][ T21] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.517960][ T21] usb 1-1: config 0 interface 52 has no altsetting 0 [ 96.587993][ T5490] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 96.650390][ T21] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 96.666477][ T5490] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 96.668873][ T21] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 96.710915][ T21] usb 1-1: Product: syz [ 96.725482][ T21] usb 1-1: SerialNumber: syz [ 96.743896][ T21] usb 1-1: config 0 descriptor?? [ 97.022833][ T21] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input10 [ 97.052151][ T3546] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 97.120086][ T5508] loop4: detected capacity change from 0 to 32768 [ 97.141219][ T3546] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 97.206311][ T5517] loop2: detected capacity change from 0 to 1024 [ 97.237155][ T4237] usb 1-1: USB disconnect, device number 7 [ 97.336662][ T1198] hfsplus: b-tree write err: -5, ino 4 [ 97.512969][ T5521] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 97.700342][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 97.825956][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 98.045450][ T5548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.595'. [ 98.069323][ T2306] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.078574][ T5550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 98.202501][ T5557] netlink: 72 bytes leftover after parsing attributes in process `syz.4.598'. [ 98.322148][ T5566] loop2: detected capacity change from 0 to 64 [ 98.399480][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.469800][ T2306] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 98.492075][ T2306] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.518769][ T2306] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.538231][ T2306] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.547682][ T2306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.602452][ T2306] usb 2-1: invalid MIDI out EP 0 [ 98.738690][ T2306] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 98.811149][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.847701][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.865868][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.899727][ T13] usb 1-1: config 1 interface 1 has no altsetting 1 [ 98.917093][ T4237] usb 2-1: USB disconnect, device number 5 [ 98.999062][ T5569] loop3: detected capacity change from 0 to 32768 [ 99.092765][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.104483][ T5569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.604 (5569) [ 99.118324][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.133482][ T5595] netlink: 120 bytes leftover after parsing attributes in process `syz.2.617'. [ 99.154432][ T13] usb 1-1: Product: syz [ 99.160103][ T13] usb 1-1: Manufacturer: syz [ 99.174357][ T13] usb 1-1: SerialNumber: syz [ 99.233775][ T5569] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 99.243955][ T13] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 99.259375][ T13] cdc_ncm 1-1:1.0: bind() failure [ 99.278745][ T5569] BTRFS info (device loop3): using free space tree [ 99.292174][ T13] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 99.309457][ T5569] BTRFS info (device loop3): has skinny extents [ 99.316081][ T13] cdc_ncm 1-1:1.1: bind() failure [ 99.509122][ T4237] usb 1-1: USB disconnect, device number 8 [ 99.719723][ T5569] BTRFS info (device loop3): enabling ssd optimizations [ 99.942842][ T5601] loop2: detected capacity change from 0 to 32768 [ 100.036233][ T5637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.053138][ T5601] [ 100.053138][ T5601] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.053138][ T5601] [ 100.083765][ T5637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.150568][ T1198] read_mapping_page failed! [ 100.157046][ T1198] ERROR: (device loop2): txCommit: [ 100.157046][ T1198] [ 100.167098][ T5637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.185588][ T1198] jfs_write_inode: jfs_commit_inode failed! [ 100.195787][ T5637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.206637][ T4191] [ 100.206637][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.206637][ T4191] [ 100.227623][ T4191] [ 100.227623][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.227623][ T4191] [ 100.452496][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.724391][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 100.825300][ T5666] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.849715][ T21] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 100.869348][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.911571][ T5670] loop0: detected capacity change from 0 to 2048 [ 100.930054][ T21] usb 2-1: config 0 has no interface number 0 [ 100.972603][ T5670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.998631][ T5677] cgroup: No subsys list or none specified [ 101.110234][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 101.135747][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.175954][ T21] usb 2-1: Product: syz [ 101.190352][ T5685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.648'. [ 101.199461][ T21] usb 2-1: Manufacturer: syz [ 101.204145][ T21] usb 2-1: SerialNumber: syz [ 101.242871][ T5685] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 101.252786][ T21] usb 2-1: config 0 descriptor?? [ 101.266353][ T5689] xt_l2tp: missing protocol rule (udp|l2tpip) [ 101.291724][ T21] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 101.308603][ T21] usb 2-1: No valid video chain found. [ 101.528243][ T1107] usb 2-1: USB disconnect, device number 6 [ 101.639426][ T5657] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.661761][ T5709] loop4: detected capacity change from 0 to 256 [ 101.740833][ T5709] FAT-fs (loop4): Directory bread(block 64) failed [ 101.761588][ T5709] FAT-fs (loop4): Directory bread(block 65) failed [ 101.798764][ T5709] FAT-fs (loop4): Directory bread(block 66) failed [ 101.812403][ T5709] FAT-fs (loop4): Directory bread(block 67) failed [ 101.819157][ T5709] FAT-fs (loop4): Directory bread(block 68) failed [ 101.827553][ T5709] FAT-fs (loop4): Directory bread(block 69) failed [ 101.834589][ T5709] FAT-fs (loop4): Directory bread(block 70) failed [ 101.841297][ T5709] FAT-fs (loop4): Directory bread(block 71) failed [ 101.848003][ T5709] FAT-fs (loop4): Directory bread(block 72) failed [ 101.855319][ T5709] FAT-fs (loop4): Directory bread(block 73) failed [ 101.909451][ T5657] usb 3-1: Using ep0 maxpacket: 8 [ 102.039727][ T5657] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 102.057829][ T5657] usb 3-1: config 0 has no interface number 0 [ 102.095676][ T5657] usb 3-1: config 0 interface 93 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 102.122806][ T5719] (unnamed net_device) (uninitialized): peer notification delay (1025) is not a multiple of miimon (12650), value rounded to 0 ms [ 102.140995][ T5657] usb 3-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=17.d8 [ 102.149911][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.158166][ T5719] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 102.171515][ T5657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.181426][ T5657] usb 3-1: config 0 descriptor?? [ 102.314533][ T5725] netlink: 'syz.4.664': attribute type 10 has an invalid length. [ 102.419406][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 102.499451][ T5657] usb 3-1: string descriptor 0 read error: -71 [ 102.521658][ T5657] hdpvr 3-1:0.93: Could not find bulk-in endpoint [ 102.533975][ T5657] hdpvr: probe of 3-1:0.93 failed with error -12 [ 102.552303][ T5657] usb 3-1: USB disconnect, device number 5 [ 102.579693][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.659635][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 102.674117][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.687044][ T5737] loop4: detected capacity change from 0 to 8 [ 102.705216][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 102.717146][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 102.727561][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 102.738007][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 102.759419][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 102.814782][ T5737] SQUASHFS error: zlib decompression failed, data probably corrupt [ 102.828524][ T5737] SQUASHFS error: Failed to read block 0x9b: -5 [ 102.835905][ T5737] SQUASHFS error: Unable to read metadata cache entry [99] [ 102.843727][ T5737] SQUASHFS error: Unable to read inode 0x127 [ 102.878781][ T5746] loop1: detected capacity change from 0 to 256 [ 102.939626][ T21] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 102.958994][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.969116][ T21] usb 4-1: Product: syz [ 102.974219][ T21] usb 4-1: Manufacturer: syz [ 102.989353][ T21] usb 4-1: SerialNumber: syz [ 103.010415][ T21] usb 4-1: config 0 descriptor?? [ 103.035570][ T5714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.094358][ T26] audit: type=1400 audit(103.061:5): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=5750 comm="syz.0.677" [ 103.121153][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.149446][ T5754] loop1: detected capacity change from 0 to 256 [ 103.207637][ T21] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 103.226084][ T5754] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.305836][ T5758] loop0: detected capacity change from 0 to 64 [ 103.322629][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.364317][ T23] usb 4-1: USB disconnect, device number 4 [ 103.662483][ T5774] usb usb1: usbfs: process 5774 (syz.0.689) did not claim interface 0 before use [ 103.728060][ T5748] loop4: detected capacity change from 0 to 32768 [ 103.828603][ T5780] QAT: failed to copy from user cfg_data. [ 103.846898][ T5783] nfs: Deprecated parameter 'nointr' [ 104.054461][ T5748] XFS (loop4): Mounting V5 Filesystem [ 104.254367][ T5748] XFS (loop4): Ending clean mount [ 104.324398][ T5814] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.506272][ T4193] XFS (loop4): Unmounting Filesystem [ 104.734205][ T154] bond0: (slave bond_slave_0): interface is now down [ 104.733915][ T5840] bond0: option arp_validate: invalid value (18446744073491447809) [ 104.757606][ T154] bond0: (slave bond_slave_1): interface is now down [ 104.797507][ T154] bond0: now running without any active interface! [ 104.936631][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 104.947519][ T5842] netlink: 212 bytes leftover after parsing attributes in process `syz.3.719'. [ 105.369619][ T5834] loop2: detected capacity change from 0 to 32768 [ 105.420727][ T5834] (syz.2.715,5834,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.506145][ T5846] device lo entered promiscuous mode [ 105.510107][ T5834] (syz.2.715,5834,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.532465][ T5846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.638027][ T5834] JBD2: Ignoring recovery information on journal [ 105.695058][ T5853] loop4: detected capacity change from 0 to 256 [ 105.800200][ T5657] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.852353][ T5853] FAT-fs (loop4): Directory bread(block 64) failed [ 105.858968][ T5853] FAT-fs (loop4): Directory bread(block 65) failed [ 105.881427][ T5834] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.907133][ T5853] FAT-fs (loop4): Directory bread(block 66) failed [ 105.947172][ T5853] FAT-fs (loop4): Directory bread(block 67) failed [ 105.960832][ T5834] ocfs2: Unmounting device (7,2) on (node local) [ 105.977863][ T5853] FAT-fs (loop4): Directory bread(block 68) failed [ 105.996271][ T5853] FAT-fs (loop4): Directory bread(block 69) failed [ 106.006578][ T5853] FAT-fs (loop4): Directory bread(block 70) failed [ 106.045962][ T5853] FAT-fs (loop4): Directory bread(block 71) failed [ 106.058065][ T5853] FAT-fs (loop4): Directory bread(block 72) failed [ 106.092969][ T5853] FAT-fs (loop4): Directory bread(block 73) failed [ 106.226518][ T5860] loop0: detected capacity change from 0 to 4096 [ 106.230131][ T5657] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.258577][ T5657] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.292653][ T5860] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 106.322835][ T5860] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 106.360267][ T5860] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 106.399490][ T5657] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.414564][ T5657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 106.435968][ T5860] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 106.448086][ T5860] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 106.459498][ T5657] usb 4-1: SerialNumber: syz [ 106.496244][ T5860] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 106.516946][ T5860] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 106.568237][ T5860] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 106.582995][ T5860] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 106.612591][ T5860] ntfs: volume version 3.1. [ 106.822267][ T5657] usb 4-1: 0:2 : does not exist [ 106.844290][ T5870] loop4: detected capacity change from 0 to 1024 [ 106.865593][ T5657] usb 4-1: USB disconnect, device number 5 [ 106.886009][ T5868] loop2: detected capacity change from 0 to 4096 [ 106.962551][ T5868] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 107.040248][ T5877] ubi0: attaching mtd0 [ 107.046453][ T5870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.060690][ T5877] ubi0: scanning is finished [ 107.089964][ T5868] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 107.096627][ T5877] ubi0: empty MTD device detected [ 107.137686][ T5870] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.731: Attempting to read directory block (623) that is past i_size (638464) [ 107.156142][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.182231][ T5836] syz.1.716 (5836): drop_caches: 3 [ 107.191877][ T5877] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 107.214897][ T5877] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 107.259452][ T5877] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 107.290294][ T5877] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 107.339291][ T5877] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 107.346135][ T5877] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 107.369553][ T5877] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1707273751 [ 107.409433][ T5877] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 107.432126][ T5880] loop1: detected capacity change from 0 to 1764 [ 107.451241][ T5878] ubi0: background thread "ubi_bgt0d" started, PID 5878 [ 107.722919][ T5896] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.952163][ T5904] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 108.149448][ T4223] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 108.177945][ T5916] ubi: mtd0 is already attached to ubi0 [ 108.193576][ T5910] loop3: detected capacity change from 0 to 2048 [ 108.290921][ T5910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.399567][ T2306] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 108.519714][ T4223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.536389][ T4223] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.649493][ T23] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.689765][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.699774][ T4223] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 108.715442][ T4223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.727868][ T4223] usb 1-1: Product: syz [ 108.735263][ T4223] usb 1-1: Manufacturer: syz [ 108.740246][ T4223] usb 1-1: SerialNumber: syz [ 108.756401][ T4223] usb 1-1: config 0 descriptor?? [ 108.769616][ T2306] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 108.778070][ T2306] usb 5-1: config 0 has no interface number 0 [ 108.789616][ T2306] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 108.805561][ T4223] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 108.819068][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 108.819081][ T26] audit: type=1326 audit(108.781:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957fe18629 code=0x7ffc0000 [ 108.857033][ T4223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.867022][ T26] audit: type=1326 audit(108.821:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957fe18629 code=0x7ffc0000 [ 108.894707][ T26] audit: type=1326 audit(108.861:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f957fe18629 code=0x7ffc0000 [ 108.902900][ T4223] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 108.927459][ T26] audit: type=1326 audit(108.861:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957fe18629 code=0x7ffc0000 [ 108.937814][ T4223] usb 1-1: media controller created [ 108.959621][ T2306] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 108.987083][ T26] audit: type=1326 audit(108.861:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957fe18629 code=0x7ffc0000 [ 108.990822][ T2306] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 109.026885][ T4223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.038960][ T2306] usb 5-1: Product: syz [ 109.052979][ T2306] usb 5-1: SerialNumber: syz [ 109.066004][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.076296][ T21] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.089164][ T21] usb 2-1: config 1 has no interface number 1 [ 109.096057][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.113198][ T2306] usb 5-1: config 0 descriptor?? [ 109.141032][ T4223] DVB: Unable to find symbol tda10046_attach() [ 109.147297][ T4223] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 109.158803][ T2306] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 109.165995][ T4223] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 109.176721][ T2306] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11 [ 109.199523][ T4223] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 109.239918][ T4223] usb 1-1: USB disconnect, device number 9 [ 109.259693][ T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.268864][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.276997][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.287851][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.309340][ T21] usb 2-1: Product: syz [ 109.313570][ T21] usb 2-1: Manufacturer: syz [ 109.318216][ T21] usb 2-1: SerialNumber: syz [ 109.323068][ T23] usb 3-1: Product: syz [ 109.327261][ T23] usb 3-1: Manufacturer: syz [ 109.334417][ T23] usb 3-1: SerialNumber: syz [ 109.357344][ T23] usb 3-1: config 0 descriptor?? [ 109.412249][ T23] usb 3-1: selecting invalid altsetting 0 [ 109.601220][ T7] usb 5-1: USB disconnect, device number 5 [ 109.623121][ T7] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 109.636182][ T5925] usb 3-1: selecting invalid altsetting 0 [ 109.647407][ T5925] usb 3-1: 0:0: usb_set_interface failed (-22) [ 109.656532][ T5658] usb 3-1: USB disconnect, device number 6 [ 109.710349][ T21] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 109.710390][ T21] usb 2-1: 2:1 : sample bitwidth 8 in over sample bytes 0 [ 109.710405][ T21] usb 2-1: 2:1 : unsupported sample bitwidth 8 in 0 bytes [ 109.756243][ T21] usb 2-1: USB disconnect, device number 7 [ 109.898411][ T5953] loop0: detected capacity change from 0 to 512 [ 109.976358][ T5953] EXT4-fs (loop0): Ignoring removed bh option [ 109.991055][ T5953] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 109.991055][ T5953] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 109.991055][ T5953] [ 110.010974][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 110.030312][ T5953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.055825][ T5953] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.093090][ T5953] EXT4-fs (loop0): 1 truncate cleaned up [ 110.098803][ T5953] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006c,nouser_xattr,nodelalloc,quota,,errors=continue. Quota mode: writeback. [ 110.245648][ T5967] loop4: detected capacity change from 0 to 1024 [ 110.322847][ T5971] loop0: detected capacity change from 0 to 1024 [ 110.343198][ T5967] hfsplus: request for non-existent node 33423360 in B*Tree [ 110.362970][ T5967] hfsplus: request for non-existent node 33423360 in B*Tree [ 110.501562][ T5971] EXT4-fs (loop0): Ignoring removed nobh option [ 110.522207][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 110.560907][ T5971] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.774: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 110.597884][ T5971] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.774: couldn't read orphan inode 11 (err -117) [ 110.635844][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 110.977964][ T6009] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 111.015636][ T6009] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.794'. [ 111.044405][ T6011] loop1: detected capacity change from 0 to 1024 [ 111.053394][ T6009] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 111.159480][ T4223] Bluetooth: hci4: command 0x0405 tx timeout [ 111.320406][ T6011] hfsplus: invalid xattr key length: 0 [ 111.709639][ T6047] netlink: 'syz.2.812': attribute type 2 has an invalid length. [ 111.717346][ T6047] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 111.853181][ T6015] loop0: detected capacity change from 0 to 32768 [ 111.862378][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.815'. [ 111.893194][ T6051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.920918][ T6015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.790 (6015) [ 112.028004][ T6015] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 112.057408][ T6015] BTRFS info (device loop0): using free space tree [ 112.110352][ T6015] BTRFS info (device loop0): has skinny extents [ 112.445947][ T6061] loop1: detected capacity change from 0 to 32768 [ 112.452727][ T6015] BTRFS info (device loop0): enabling ssd optimizations [ 112.645801][ T6061] XFS (loop1): Mounting V5 Filesystem [ 112.678276][ T6108] overlayfs: workdir and upperdir must be separate subtrees [ 112.878156][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 112.940995][ T6124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.092120][ T6131] loop2: detected capacity change from 0 to 1024 [ 113.157865][ T6061] XFS (loop1): Ending clean mount [ 113.256242][ T4184] XFS (loop1): Unmounting Filesystem [ 113.330837][ T1262] hfsplus: b-tree write err: -5, ino 4 [ 113.508715][ T6151] device vti0 entered promiscuous mode [ 113.525634][ T6156] loop0: detected capacity change from 0 to 1024 [ 113.662271][ T6156] hfsplus: invalid xattr key length: 0 [ 113.678369][ T6161] loop4: detected capacity change from 0 to 2048 [ 113.789614][ T6161] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.823397][ T6161] NILFS (loop4): mounting unchecked fs [ 113.888111][ T6161] NILFS (loop4): recovery complete [ 113.931808][ T6174] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.163637][ T6184] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 114.228210][ T6184] overlayfs: missing 'lowerdir' [ 114.263972][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 114.345287][ T6194] xt_NFQUEUE: number of total queues is 0 [ 114.426232][ T6197] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.865'. [ 114.469405][ T6197] openvswitch: netlink: IP tunnel dst address not specified [ 115.099546][ T4323] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.246892][ T6261] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 115.354024][ T4323] usb 4-1: Using ep0 maxpacket: 16 [ 115.394782][ T6271] netlink: 22 bytes leftover after parsing attributes in process `syz.0.901'. [ 115.449636][ T6275] tmpfs: Bad value for 'mpol' [ 115.479660][ T4323] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.489541][ T4323] usb 4-1: config 0 has no interface number 0 [ 115.656125][ T4323] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 115.686615][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.716764][ T4323] usb 4-1: Product: syz [ 115.723544][ T6292] netlink: 292 bytes leftover after parsing attributes in process `syz.1.913'. [ 115.747275][ T4323] usb 4-1: Manufacturer: syz [ 115.760887][ T4323] usb 4-1: SerialNumber: syz [ 115.779126][ T4323] usb 4-1: config 0 descriptor?? [ 115.840500][ T4323] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 116.213377][ T26] audit: type=1326 audit(116.181:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.2.929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a46ea629 code=0x0 [ 116.259610][ T4323] gspca_spca1528: reg_w err -71 [ 116.299468][ T4323] spca1528: probe of 4-1:0.1 failed with error -71 [ 116.322050][ T4323] usb 4-1: USB disconnect, device number 6 [ 116.375494][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'. [ 116.576501][ T6346] loop2: detected capacity change from 0 to 4096 [ 116.596024][ T6346] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 116.660191][ T26] audit: type=1326 audit(116.621:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67abd19629 code=0x7ffc0000 [ 116.689360][ T6139] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 116.740775][ T26] audit: type=1326 audit(116.631:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f67abd19629 code=0x7ffc0000 [ 116.837575][ T26] audit: type=1326 audit(116.631:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f67abd19629 code=0x7ffc0000 [ 117.072889][ T6373] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 117.073952][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.946'. [ 117.099764][ T6139] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 is Bulk; changing to Interrupt [ 117.119068][ T6139] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 117.160522][ T6139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.209654][ T6336] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.469534][ T6139] usb 2-1: string descriptor 0 read error: -71 [ 117.476084][ T6139] hub 2-1:32.0: USB hub found [ 117.509432][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.528880][ T6403] netlink: 'syz.2.959': attribute type 5 has an invalid length. [ 117.559465][ T6139] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 117.630060][ T6139] usb 2-1: USB disconnect, device number 8 [ 117.656913][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 117.685428][ T6409] capability: warning: `syz.3.962' uses 32-bit capabilities (legacy support in use) [ 117.819452][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 117.880658][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.909525][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'. [ 117.939627][ T13] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.961325][ T13] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.054319][ T6399] loop4: detected capacity change from 0 to 32768 [ 118.125982][ T6399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.957 (6399) [ 118.141699][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.161217][ T13] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 118.208625][ T13] usb 1-1: Product: syz [ 118.221864][ T13] usb 1-1: Manufacturer: syz [ 118.255330][ T6399] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 118.289493][ T6399] BTRFS info (device loop4): using free space tree [ 118.301006][ T13] hub 1-1:4.0: USB hub found [ 118.325384][ T6399] BTRFS info (device loop4): has skinny extents [ 118.509537][ T13] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 118.708866][ T6399] BTRFS info (device loop4): enabling ssd optimizations [ 118.869633][ T4323] usb 1-1: USB disconnect, device number 10 [ 118.962944][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4176) [ 119.535111][ T6527] bond0: Error: Cannot enslave bond to itself. [ 119.623902][ T6517] loop4: detected capacity change from 0 to 4096 [ 119.683529][ T6537] loop2: detected capacity change from 0 to 128 [ 119.697545][ T6517] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 119.800515][ T6543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.836164][ T6517] ntfs3: loop4: failed to convert "c46c" to cp1250 [ 119.958217][ T6550] loop0: detected capacity change from 0 to 1764 [ 120.100917][ T6550] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 120.104295][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.186796][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 120.243118][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 120.272606][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 120.324340][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 120.354256][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 120.434875][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 120.623865][ T6578] nftables ruleset with unbound chain [ 120.633300][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'. [ 120.675961][ T6580] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.804137][ T6586] loop3: detected capacity change from 0 to 64 [ 120.875260][ T6590] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 120.929604][ T6590] CIFS mount error: No usable UNC path provided in device string! [ 120.929604][ T6590] [ 120.959462][ T6593] device netdevsim0 entered promiscuous mode [ 120.970090][ T6590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.181377][ T6610] loop4: detected capacity change from 0 to 256 [ 121.222519][ T6603] loop1: detected capacity change from 0 to 2048 [ 121.242464][ T6613] loop3: detected capacity change from 0 to 128 [ 121.273868][ T6610] FAT-fs (loop4): Directory bread(block 64) failed [ 121.284615][ T6603] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.295127][ T6613] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 121.315518][ T6610] FAT-fs (loop4): Directory bread(block 65) failed [ 121.324262][ T6610] FAT-fs (loop4): Directory bread(block 66) failed [ 121.331593][ T6610] FAT-fs (loop4): Directory bread(block 67) failed [ 121.361407][ T6613] process 'syz.3.1050' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 121.389485][ T6610] FAT-fs (loop4): Directory bread(block 68) failed [ 121.429462][ T6134] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.476426][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.583677][ T6610] FAT-fs (loop4): Directory bread(block 69) failed [ 121.592041][ T6610] FAT-fs (loop4): Directory bread(block 70) failed [ 121.598641][ T6610] FAT-fs (loop4): Directory bread(block 71) failed [ 121.608361][ T6619] loop3: detected capacity change from 0 to 512 [ 121.619373][ T6610] FAT-fs (loop4): Directory bread(block 72) failed [ 121.625966][ T6610] FAT-fs (loop4): Directory bread(block 73) failed [ 121.656230][ T6619] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.703397][ T6623] dlm: non-version read from control device 4096 [ 121.784243][ T6134] usb 1-1: Using ep0 maxpacket: 16 [ 121.789660][ T6619] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 121.909509][ T6134] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 121.943294][ T6134] usb 1-1: config 0 has no interface number 0 [ 121.961476][ T6134] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.983859][ T6634] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.999733][ T6134] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.040740][ T6637] tmpfs: Bad value for 'mpol' [ 122.119700][ T6134] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 122.149525][ T6134] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 122.188367][ T6134] usb 1-1: Product: syz [ 122.194362][ T6134] usb 1-1: SerialNumber: syz [ 122.213393][ T6134] usb 1-1: config 0 descriptor?? [ 122.284222][ T6134] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 122.294374][ T6134] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input12 [ 122.469630][ T6501] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.485673][ T6659] device bridge2 entered promiscuous mode [ 122.519335][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 122.732932][ T6139] usb 1-1: USB disconnect, device number 11 [ 122.750852][ T6139] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 122.902092][ T6501] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 122.916100][ T6501] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 122.929301][ T6501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.961839][ T6653] loop4: detected capacity change from 0 to 32768 [ 122.997301][ T6501] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 123.061966][ T6653] __jfs_setxattr: xattr_size = 75, new_size = 12821 [ 123.512199][ T6701] loop4: detected capacity change from 0 to 4096 [ 123.583408][ T6701] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 123.841555][ T6718] loop0: detected capacity change from 0 to 4096 [ 123.861806][ T6718] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 124.008644][ T6718] ntfs: (device loop0): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 124.056760][ T6718] ntfs: volume version 3.1. [ 124.068224][ T6718] ntfs: (device loop0): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 124.083415][ T6718] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 124.096869][ T6718] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 124.113778][ T6501] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 124.204716][ T6727] loop4: detected capacity change from 0 to 2048 [ 124.258406][ T6727] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.349551][ T6501] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 124.357852][ T6501] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 124.387398][ T6501] usb 2-1: USB disconnect, device number 9 [ 124.590180][ T6739] loop3: detected capacity change from 0 to 128 [ 124.630681][ T6742] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.645218][ T6737] loop4: detected capacity change from 0 to 4096 [ 124.670753][ T6742] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 124.796915][ T6737] ntfs: volume version 3.1. [ 124.938919][ T6737] ntfs: (device loop4): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 125.215713][ T6766] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.341414][ T6777] user_cmd nlpid 377 [ 125.507070][ T6788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'. [ 125.703417][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 125.719562][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 125.843265][ T6817] autofs4:pid:6817:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8192), cmd(0xc018937e) [ 125.905092][ T6817] autofs4:pid:6817:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 126.731841][ T6499] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 126.747666][ T6499] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 126.786828][ T6498] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 126.913721][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1190'. [ 126.999555][ T6501] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.059545][ T6499] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 127.097000][ T6914] loop4: detected capacity change from 0 to 1024 [ 127.137314][ T6918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1198'. [ 127.174642][ T6909] loop1: detected capacity change from 0 to 4096 [ 127.227714][ T6914] hfsplus: invalid length 32517 has been corrected to 255 [ 127.231156][ T6909] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 127.304157][ T6909] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 127.315463][ T6926] device netdevsim0 entered promiscuous mode [ 127.344576][ T6499] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 127.353707][ T6926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.361077][ T6909] ntfs3: loop1: failed to convert "c46c" to cp863 [ 127.439718][ T6501] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.509371][ T6139] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 127.539421][ T6501] usb 4-1: config 12 has an invalid interface number: 243 but max is 0 [ 127.547759][ T6501] usb 4-1: config 12 has no interface number 0 [ 127.564590][ T6501] usb 4-1: config 12 interface 243 has no altsetting 0 [ 127.739882][ T6501] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=de.58 [ 127.748987][ T6501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.749627][ T6139] usb 1-1: Using ep0 maxpacket: 32 [ 127.832256][ T6501] usb 4-1: Product: syz [ 127.836476][ T6501] usb 4-1: Manufacturer: syz [ 127.872404][ T6944] loop1: detected capacity change from 0 to 1024 [ 127.889414][ T6501] usb 4-1: SerialNumber: syz [ 127.902188][ T6946] loop4: detected capacity change from 0 to 8 [ 127.920770][ T6139] usb 1-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 127.955915][ T4706] udevd[4706]: incorrect cramfs checksum on /dev/loop4 [ 127.998126][ T6946] cramfs: Error -3 while decompressing! [ 128.020517][ T6946] cramfs: ffffffff964010a8(26)->ffff888072f3d000(4096) [ 128.027459][ T6946] cramfs: Error -3 while decompressing! [ 128.053585][ T4706] udevd[4706]: incorrect cramfs checksum on /dev/loop4 [ 128.074446][ T6946] cramfs: ffffffff964010c2(26)->ffff888072f3e000(4096) [ 128.082221][ T6946] cramfs: Error -3 while decompressing! [ 128.087881][ T6946] cramfs: ffffffff964010dc(16)->ffff888072f3f000(4096) [ 128.110060][ T6946] cramfs: Error -3 while decompressing! [ 128.115868][ T6135] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.123930][ T6139] usb 1-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 128.138087][ T6946] cramfs: ffffffff964010a8(26)->ffff888072f3d000(4096) [ 128.151238][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop4 [ 128.158350][ T6139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.174315][ T6139] usb 1-1: Product: syz [ 128.195654][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop4 [ 128.204461][ T6139] usb 1-1: Manufacturer: syz [ 128.209145][ T6139] usb 1-1: SerialNumber: syz [ 128.244429][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop4 [ 128.261538][ T6139] pwc: Askey VC010 type 1 USB webcam detected. [ 128.270900][ T6501] gspca_main: pac7311-2.14.0 probing 093a:260e [ 128.309552][ T6501] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 128.317570][ T6501] pac7311: probe of 4-1:12.243 failed with error -71 [ 128.353175][ T6501] usb 4-1: USB disconnect, device number 7 [ 128.380409][ T6135] usb 3-1: Using ep0 maxpacket: 8 [ 128.458850][ T6960] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 128.520788][ T6139] pwc: send_video_command error -71 [ 128.526753][ T6139] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 128.543229][ T6139] Philips webcam: probe of 1-1:76.0 failed with error -71 [ 128.565161][ T6139] usb 1-1: USB disconnect, device number 12 [ 128.640302][ T6968] device netdevsim0 entered promiscuous mode [ 128.648071][ T6968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.669646][ T6135] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 128.678783][ T6135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.691085][ T6135] usb 3-1: Product: syz [ 128.695408][ T6135] usb 3-1: Manufacturer: syz [ 128.700348][ T6135] usb 3-1: SerialNumber: syz [ 128.715500][ T6135] usb 3-1: config 0 descriptor?? [ 128.766466][ T6135] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 128.797569][ T6135] dvb-usb: bulk message failed: -22 (2/0) [ 128.822529][ T6135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.862558][ T6135] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 128.882402][ T6135] usb 3-1: media controller created [ 128.936831][ T6135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.009769][ T6135] dvb-usb: bulk message failed: -22 (1/0) [ 129.015706][ T6135] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 129.081304][ T6135] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 129.100046][ T6984] loop3: detected capacity change from 0 to 24 [ 129.140688][ T6135] dvb-usb: schedule remote query interval to 50 msecs. [ 129.150958][ T6135] dvb-usb: bulk message failed: -22 (2/0) [ 129.156768][ T6135] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 129.170070][ T6984] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 129.204550][ T6984] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 129.231604][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'. [ 129.241932][ T6135] usb 3-1: USB disconnect, device number 7 [ 129.248851][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 129.259492][ T21] dvb-usb: error while querying for an remote control event. [ 129.345063][ T6135] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 129.683546][ T7008] loop1: detected capacity change from 0 to 64 [ 129.698956][ T6970] loop4: detected capacity change from 0 to 40427 [ 129.756231][ T7002] loop3: detected capacity change from 0 to 4096 [ 129.815653][ T7008] hfs: unable to load iocharset "Sp—" [ 129.826360][ T6970] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 129.838360][ T7008] hfs: unable to parse mount options [ 129.845880][ T6970] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 129.863272][ T7002] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 129.875816][ T6970] F2FS-fs (loop4): invalid crc value [ 129.901442][ T7002] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 129.921055][ T6970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.977971][ T7002] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 129.981425][ T7022] xt_cgroup: xt_cgroup: no path or classid specified [ 130.044949][ T7002] ntfs: volume version 3.1. [ 130.060022][ T6970] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 130.067146][ T6970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 130.076389][ T7002] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 130.103962][ T7002] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 130.169537][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 130.182675][ T7002] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota/$Q index. [ 130.186836][ T7030] loop1: detected capacity change from 0 to 1024 [ 130.208688][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 130.263944][ T7002] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 130.378979][ T7002] ntfs: (device loop3): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode. [ 130.451452][ T1262] hfsplus: b-tree write err: -5, ino 4 [ 130.479766][ T7002] ntfs: (device loop3): ntfs_lookup(): Failed to convert name to Unicode. [ 130.596809][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 130.927188][ T7061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1268'. [ 131.081689][ T7070] loop2: detected capacity change from 0 to 64 [ 131.156640][ T7070] Trying to free block not in datazone [ 131.195000][ T7070] Trying to free block not in datazone [ 131.216652][ T7070] Trying to free block not in datazone [ 131.226668][ T7070] Trying to free block not in datazone [ 131.239518][ T7070] minix_free_block (loop2:6): bit already cleared [ 131.249579][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 131.289333][ T7070] Trying to free block not in datazone [ 131.294870][ T7070] Trying to free block not in datazone [ 131.302641][ T7080] loop3: detected capacity change from 0 to 64 [ 131.453207][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 131.553362][ T7093] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1283'. [ 131.870710][ T7109] loop3: detected capacity change from 0 to 512 [ 131.969769][ T7113] loop0: detected capacity change from 0 to 512 [ 131.996623][ T7115] damon: min_nr_regions (0) must be at least 3 [ 132.010160][ T7109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.038577][ T7109] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1290: bad orphan inode 131083 [ 132.051757][ T7109] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 132.074292][ T7109] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.1290: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 132.166195][ T7113] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 132.179590][ T7113] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1292: Failed to acquire dquot type 0 [ 132.297726][ T7113] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1292: bg 0: block 64: padding at end of block bitmap is not set [ 132.350049][ T7113] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 132.386263][ T7113] EXT4-fs (loop0): 1 truncate cleaned up [ 132.414181][ T7113] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.499319][ T6135] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.597148][ T7137] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1302'. [ 132.612126][ T7137] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1302'. [ 132.692776][ T7140] loop3: detected capacity change from 0 to 512 [ 132.692803][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709356][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.794096][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1306'. [ 132.808266][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 132.862413][ T6139] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.879416][ T6135] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 132.931488][ T7140] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1304: bg 0: block 473: padding at end of block bitmap is not set [ 132.948528][ T6135] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.998837][ T7140] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 133.008295][ T6135] usb 2-1: config 220 has no interface number 2 [ 133.017536][ T7140] EXT4-fs (loop3): 1 orphan inode deleted [ 133.025384][ T6135] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 133.031246][ T7140] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.086669][ T6135] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 133.112231][ T7155] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 133.122937][ T6135] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 133.144052][ T6135] usb 2-1: config 220 interface 0 has no altsetting 0 [ 133.153393][ T6135] usb 2-1: config 220 interface 76 has no altsetting 0 [ 133.163946][ T6135] usb 2-1: config 220 interface 1 has no altsetting 0 [ 133.279721][ T6139] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.301078][ T6139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 133.333518][ T6135] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.356547][ T6135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.366611][ T6139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 133.384611][ T6135] usb 2-1: Product: syz [ 133.417986][ T6139] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.437389][ T6135] usb 2-1: Manufacturer: syz [ 133.446586][ T6135] usb 2-1: SerialNumber: syz [ 133.463709][ T6139] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 133.498606][ T6139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.555320][ T6139] usb 5-1: config 0 descriptor?? [ 133.725671][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 133.821928][ T6135] usb 2-1: selecting invalid altsetting 0 [ 133.828697][ T6135] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 133.844300][ T6499] usb 5-1: USB disconnect, device number 6 [ 133.861332][ T6135] usb 2-1: No valid video chain found. [ 133.961829][ T6135] usb 2-1: selecting invalid altsetting 0 [ 133.967647][ T6135] usbtest: probe of 2-1:220.1 failed with error -22 [ 133.981913][ T6135] usb 2-1: USB disconnect, device number 10 [ 134.295778][ T7210] set_capacity_and_notify: 1 callbacks suppressed [ 134.295794][ T7210] loop2: detected capacity change from 0 to 4096 [ 134.415865][ T7216] loop3: detected capacity change from 0 to 512 [ 134.613584][ T7216] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 134.874505][ T7241] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 134.897612][ T7241] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1351'. [ 135.140526][ T7212] loop0: detected capacity change from 0 to 32768 [ 135.201704][ T7260] ipt_REJECT: TCP_RESET invalid for non-tcp [ 135.227524][ T7263] netlink: 'syz.4.1362': attribute type 21 has an invalid length. [ 135.244656][ T7263] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.274505][ T7263] IPv6: Can't replace route, no match found [ 135.358953][ T7212] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 135.429454][ T6499] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.615139][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 135.699765][ T6499] usb 4-1: Using ep0 maxpacket: 32 [ 135.787376][ T7292] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 51054 - 0 [ 135.787578][ T7296] loop2: detected capacity change from 0 to 512 [ 135.809329][ T7292] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 51054 - 0 [ 135.818408][ T7292] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 51054 - 0 [ 135.828695][ T7292] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 51054 - 0 [ 135.840287][ T7292] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 41433 - 0 [ 135.855709][ T7292] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 41433 - 0 [ 135.864797][ T7292] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 41433 - 0 [ 135.878970][ T7292] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 41433 - 0 [ 135.890686][ T7292] device geneve2 entered promiscuous mode [ 135.897009][ T6499] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.004445][ T6499] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 136.026165][ T7296] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 136.213529][ T7315] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.235730][ T7311] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.244691][ T6499] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 136.260641][ T6499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.269171][ T6499] usb 4-1: Product: syz [ 136.280137][ T6499] usb 4-1: Manufacturer: syz [ 136.284853][ T6499] usb 4-1: SerialNumber: syz [ 136.365077][ T7311] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.549599][ T6499] usb 4-1: Invalid number of CPorts: 0 [ 136.555145][ T6499] es2_ap_driver: probe of 4-1:7.0 failed with error -22 [ 136.668360][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 136.815947][ T6499] usb 4-1: USB disconnect, device number 8 [ 136.933681][ T6500] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.951555][ T7355] loop1: detected capacity change from 0 to 256 [ 137.053533][ T7345] loop4: detected capacity change from 0 to 32768 [ 137.103079][ T7345] JBD2: Ignoring recovery information on journal [ 137.119380][ T6498] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 137.163656][ T7345] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 137.189410][ T6500] usb 3-1: Using ep0 maxpacket: 32 [ 137.243109][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 137.343145][ T6500] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.369307][ T6498] usb 1-1: Using ep0 maxpacket: 8 [ 137.516678][ T6498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.574413][ T6500] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 137.590040][ T6500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.599052][ T7377] loop3: detected capacity change from 0 to 64 [ 137.611552][ T6500] usb 3-1: Product: syz [ 137.614097][ T7373] loop4: detected capacity change from 0 to 2048 [ 137.615760][ T6500] usb 3-1: Manufacturer: syz [ 137.627121][ T6500] usb 3-1: SerialNumber: syz [ 137.635513][ T6500] usb 3-1: config 0 descriptor?? [ 137.666418][ T7373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.700521][ T6500] usb 3-1: bad CDC descriptors [ 137.705839][ T6500] usb 3-1: unsupported MDLM descriptors [ 137.730901][ T6498] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 137.749838][ T6498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.757872][ T6498] usb 1-1: Product: syz [ 137.763396][ T6498] usb 1-1: Manufacturer: syz [ 137.768020][ T6498] usb 1-1: SerialNumber: syz [ 137.785454][ T7379] netlink: 'syz.3.1415': attribute type 3 has an invalid length. [ 137.802222][ T6498] usb 1-1: config 0 descriptor?? [ 137.919425][ T6139] usb 3-1: USB disconnect, device number 8 [ 137.919455][ T6499] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.087229][ T6500] usb 1-1: USB disconnect, device number 13 [ 138.329569][ T6499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 138.356398][ T6499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.367099][ T6499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 138.378755][ T6499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 138.570026][ T6499] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 138.583507][ T6499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.613504][ T7413] ip6t_srh: unknown srh invflags 7F00 [ 138.617947][ T6499] usb 2-1: Product: syz [ 138.624835][ T6499] usb 2-1: Manufacturer: syz [ 138.643112][ T6499] usb 2-1: SerialNumber: syz [ 138.670176][ T6499] usb 2-1: config 0 descriptor?? [ 138.930716][ T6499] adutux 2-1:0.0: Could not retrieve serial number [ 138.937412][ T6499] adutux: probe of 2-1:0.0 failed with error -5 [ 139.167737][ T13] usb 2-1: USB disconnect, device number 11 [ 139.315893][ T7453] loop4: detected capacity change from 0 to 64 [ 139.415311][ T6499] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.510906][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 139.530639][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 139.679532][ T6499] usb 4-1: Using ep0 maxpacket: 8 [ 139.729372][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 139.801635][ T6500] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 139.819607][ T6499] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 139.831123][ T6499] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 139.845450][ T7480] loop0: detected capacity change from 0 to 1024 [ 139.853689][ T6499] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 139.865416][ T7482] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1464'. [ 139.877160][ T7482] unsupported nlmsg_type 40 [ 139.978671][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 140.007029][ T7491] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 140.015676][ T7491] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1471'. [ 140.069566][ T6499] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 140.089526][ T6499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.097553][ T6499] usb 4-1: Product: syz [ 140.102471][ T6500] usb 3-1: Using ep0 maxpacket: 32 [ 140.136113][ T7493] loop0: detected capacity change from 0 to 2048 [ 140.143032][ T6499] usb 4-1: Manufacturer: syz [ 140.147656][ T6499] usb 4-1: SerialNumber: syz [ 140.220684][ T6499] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 140.250023][ T7502] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.298741][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 140.298755][ T26] audit: type=1800 audit(140.261:16): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1470" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 140.329488][ T6500] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 140.338680][ T6500] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 140.387962][ T7493] NILFS (loop0): error -2 truncating bmap (ino=16) [ 140.395542][ T6500] usb 3-1: Product: syz [ 140.434901][ T4323] usb 4-1: USB disconnect, device number 9 [ 140.441480][ T6500] usb 3-1: config 0 descriptor?? [ 140.549028][ T7502] ------------[ cut here ]------------ [ 140.555100][ T7502] WARNING: CPU: 0 PID: 7502 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 140.564595][ T7502] Modules linked in: [ 140.568535][ T7502] CPU: 0 PID: 7502 Comm: segctord Not tainted syzkaller #0 [ 140.575788][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.585888][ T7502] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 140.591935][ T7502] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 e3 64 6a fe e8 be bf f1 fd e9 b8 fc ff ff e8 d4 64 6a fe <0f> 0b e9 16 fc ff ff e8 c8 64 6a fe e8 a3 bf f1 fd e9 74 fe ff ff [ 140.611595][ T7502] RSP: 0018:ffffc900043cf390 EFLAGS: 00010293 [ 140.617686][ T7502] RAX: ffffffff830ebd6c RBX: ffff8880211231a0 RCX: ffff88805d075940 [ 140.625703][ T7502] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 140.633737][ T7502] RBP: 0000000000000003 R08: ffff888074bd8ae7 R09: 1ffff1100e97b15c [ 140.641758][ T7502] R10: dffffc0000000000 R11: ffffed100e97b15d R12: ffff88805d0770c8 [ 140.649792][ T7502] R13: ffff888075b7d9e0 R14: 00000000003f0002 R15: ffff8880790a3530 [ 140.657793][ T7502] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 140.666780][ T7502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.673414][ T7502] CR2: 00007f2ea5cf9000 CR3: 00000000637e0000 CR4: 00000000003506f0 [ 140.681453][ T7502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.689498][ T7502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.697508][ T7502] Call Trace: [ 140.700878][ T7502] [ 140.703848][ T7502] nilfs_dat_commit_update+0x24/0x40 [ 140.709198][ T7502] nilfs_btree_commit_update_v+0x93/0x410 [ 140.714996][ T7502] nilfs_btree_propagate+0x95a/0xcf0 [ 140.720352][ T7502] nilfs_bmap_propagate+0x70/0x120 [ 140.725493][ T7502] nilfs_segctor_apply_buffers+0x15d/0x320 [ 140.731361][ T7502] ? nilfs_collect_file_data+0xc0/0xc0 [ 140.736865][ T7502] nilfs_segctor_scan_file+0x7af/0x9d0 [ 140.742388][ T7502] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 140.749567][ T7502] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 140.755484][ T7502] ? rcu_is_watching+0x11/0xa0 [ 140.760307][ T7502] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 140.766267][ T7502] ? verify_lock_unused+0x140/0x140 [ 140.771530][ T7502] ? nilfs_transaction_unlock+0x220/0x220 [ 140.777272][ T7502] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 140.783496][ T7502] ? clear_nonspinnable+0x60/0x60 [ 140.788563][ T7502] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 140.794100][ T7502] ? __lock_acquire+0x7d10/0x7d10 [ 140.799153][ T7502] ? __rwlock_init+0x140/0x140 [ 140.803982][ T7502] ? do_raw_spin_unlock+0x11d/0x230 [ 140.809245][ T7502] ? _raw_spin_unlock+0x24/0x40 [ 140.814114][ T7502] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 140.819649][ T7502] nilfs_segctor_construct+0x17b/0x690 [ 140.825151][ T7502] nilfs_segctor_thread+0x523/0x1180 [ 140.830524][ T7502] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 140.836440][ T7502] ? nilfs_iput_work_func+0x70/0x70 [ 140.841724][ T7502] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.847634][ T7502] ? _raw_spin_unlock+0x40/0x40 [ 140.852529][ T7502] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 140.858459][ T7502] ? init_wait_entry+0xd0/0xd0 [ 140.863287][ T7502] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.869204][ T7502] ? __kthread_parkme+0x157/0x1b0 [ 140.874294][ T7502] kthread+0x436/0x520 [ 140.878388][ T7502] ? nilfs_iput_work_func+0x70/0x70 [ 140.883730][ T7502] ? kthread_blkcg+0xd0/0xd0 [ 140.888343][ T7502] ret_from_fork+0x1f/0x30 [ 140.892830][ T7502] [ 140.895873][ T7502] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.903179][ T7502] CPU: 0 PID: 7502 Comm: segctord Not tainted syzkaller #0 [ 140.910487][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.920554][ T7502] Call Trace: [ 140.923841][ T7502] [ 140.926773][ T7502] dump_stack_lvl+0x188/0x250 [ 140.931465][ T7502] ? show_regs_print_info+0x20/0x20 [ 140.936701][ T7502] ? load_image+0x400/0x400 [ 140.941222][ T7502] panic+0x2e5/0x810 [ 140.945125][ T7502] ? bpf_jit_dump+0xd0/0xd0 [ 140.949641][ T7502] ? ret_from_fork+0x1f/0x30 [ 140.954244][ T7502] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 140.959623][ T7502] __warn+0x248/0x2b0 [ 140.963620][ T7502] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 140.969018][ T7502] report_bug+0x1b7/0x2e0 [ 140.973366][ T7502] handle_bug+0x3a/0x70 [ 140.977535][ T7502] exc_invalid_op+0x16/0x40 [ 140.982041][ T7502] asm_exc_invalid_op+0x16/0x20 [ 140.986908][ T7502] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 140.992897][ T7502] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 e3 64 6a fe e8 be bf f1 fd e9 b8 fc ff ff e8 d4 64 6a fe <0f> 0b e9 16 fc ff ff e8 c8 64 6a fe e8 a3 bf f1 fd e9 74 fe ff ff [ 141.012521][ T7502] RSP: 0018:ffffc900043cf390 EFLAGS: 00010293 [ 141.018713][ T7502] RAX: ffffffff830ebd6c RBX: ffff8880211231a0 RCX: ffff88805d075940 [ 141.026704][ T7502] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 141.034698][ T7502] RBP: 0000000000000003 R08: ffff888074bd8ae7 R09: 1ffff1100e97b15c [ 141.042762][ T7502] R10: dffffc0000000000 R11: ffffed100e97b15d R12: ffff88805d0770c8 [ 141.050742][ T7502] R13: ffff888075b7d9e0 R14: 00000000003f0002 R15: ffff8880790a3530 [ 141.058844][ T7502] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 141.064241][ T7502] nilfs_dat_commit_update+0x24/0x40 [ 141.069538][ T7502] nilfs_btree_commit_update_v+0x93/0x410 [ 141.075273][ T7502] nilfs_btree_propagate+0x95a/0xcf0 [ 141.080568][ T7502] nilfs_bmap_propagate+0x70/0x120 [ 141.085692][ T7502] nilfs_segctor_apply_buffers+0x15d/0x320 [ 141.091514][ T7502] ? nilfs_collect_file_data+0xc0/0xc0 [ 141.097004][ T7502] nilfs_segctor_scan_file+0x7af/0x9d0 [ 141.102484][ T7502] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 141.109643][ T7502] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 141.115554][ T7502] ? rcu_is_watching+0x11/0xa0 [ 141.120329][ T7502] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 141.126262][ T7502] ? verify_lock_unused+0x140/0x140 [ 141.131486][ T7502] ? nilfs_transaction_unlock+0x220/0x220 [ 141.137212][ T7502] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 141.143376][ T7502] ? clear_nonspinnable+0x60/0x60 [ 141.148405][ T7502] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 141.153878][ T7502] ? __lock_acquire+0x7d10/0x7d10 [ 141.158929][ T7502] ? __rwlock_init+0x140/0x140 [ 141.163703][ T7502] ? do_raw_spin_unlock+0x11d/0x230 [ 141.168917][ T7502] ? _raw_spin_unlock+0x24/0x40 [ 141.173787][ T7502] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 141.179261][ T7502] nilfs_segctor_construct+0x17b/0x690 [ 141.184744][ T7502] nilfs_segctor_thread+0x523/0x1180 [ 141.190055][ T7502] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 141.195953][ T7502] ? nilfs_iput_work_func+0x70/0x70 [ 141.201246][ T7502] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 141.207145][ T7502] ? _raw_spin_unlock+0x40/0x40 [ 141.211995][ T7502] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 141.217919][ T7502] ? init_wait_entry+0xd0/0xd0 [ 141.222701][ T7502] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 141.228601][ T7502] ? __kthread_parkme+0x157/0x1b0 [ 141.233664][ T7502] kthread+0x436/0x520 [ 141.237738][ T7502] ? nilfs_iput_work_func+0x70/0x70 [ 141.242947][ T7502] ? kthread_blkcg+0xd0/0xd0 [ 141.247541][ T7502] ret_from_fork+0x1f/0x30 [ 141.251973][ T7502] [ 141.255276][ T7502] Kernel Offset: disabled [ 141.259868][ T7502] Rebooting in 86400 seconds..