last executing test programs: 2m1.543896001s ago: executing program 4 (id=4351): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) 2m1.469013467s ago: executing program 4 (id=4354): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) 2m1.407661672s ago: executing program 4 (id=4356): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 2m1.039826562s ago: executing program 4 (id=4364): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 2m0.900808864s ago: executing program 4 (id=4366): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') pread64(r0, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 2m0.417536832s ago: executing program 4 (id=4378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 2m0.156490294s ago: executing program 32 (id=4378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 2.413880344s ago: executing program 1 (id=7205): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc) 2.380595397s ago: executing program 1 (id=7206): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)) 2.34455389s ago: executing program 1 (id=7208): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, 0x0) 2.252545987s ago: executing program 1 (id=7210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x2b}, @in=@dev, {}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 2.22168458s ago: executing program 1 (id=7211): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e0000004e0081880400e3bd6efb440009030e000a0010000000ba8000001201199cfb2472e0bcbae16854fd46a7", 0x2e}], 0x1}, 0x0) 2.139726606s ago: executing program 1 (id=7213): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1ec, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) 839.573482ms ago: executing program 3 (id=7247): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$eJzs282O0lAYxvGnlMI4jo6fG1cmLnQj6OjGnXMB3oC7yVAJsagRNxAT46V4J9yJNwCJ7lxZ00MhLZZyLJZC+P+SGd5wePq2hEPPWSAAB+uG+e/IkWeqMAy/3Jf0+pWkesUnB6BUoX6HAA6V+6PqMwBQjem5a9YBY0f6/vPz5ST+8yzXD9Pz2qw4kpTIN2zzXx3zeK8uTRL5ZnzIteuXb7P8Q6XzV/6x//FS/nhNzlnkZ9f/6EE6f1XSiaRrkq5LOpUUvdM3Jd3K6N9Z6n/X8vyBTUSfvtYGG32TbxXvH82eN73Af5I16K7Pe3H+afZw4itknPmCRpw/szzfVflnBfPNON+6fB90MsZrBY8L2KiZ+V/cpvPflX6Fy/P/pX2+nj//AeQYDEdvL4LA/ziIbramWDyzqvBM0YyPkPfi6O6YeEY5LaLNiFV3ivKLo4whL/VpKbtobOdKo9vXLrzhlsV81pbf6zSo7CsJwJa0P/U/tAfD0eNe/6Lrd/13Z89fzLfdZl/eXrk7B7Dn0otzAAAAAAAAAAAAAACwj25LulMkaPsDPwAAAAA74//+eMiT9PdQTvuTLV4qAAAAAAAAAAAAAAAAAAAAsPf+BAAA//8xiEDA") truncate(&(0x7f00000002c0)='./file1\x00', 0x4c030) 607.222241ms ago: executing program 5 (id=7253): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x9, 0x7, 0x2000}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x30}}, 0x0) 599.065471ms ago: executing program 3 (id=7254): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0xe, @sdr={0x30364d54, 0x1ff}}) 566.054784ms ago: executing program 0 (id=7256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000000009000200731b2522600000000900010073797a30000000000800054000000021440000001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000"], 0xc8}}, 0x800) 507.911388ms ago: executing program 5 (id=7257): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x0, 0x0, "6386fa66717e0aff1de532af2cb403d7bbd04558880256a3"}) 506.386519ms ago: executing program 2 (id=7258): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0xfffd, 0x0, 0x2, 0x91}) 482.146581ms ago: executing program 5 (id=7259): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0x5, 0x148, 0x0, 0x0, 0x298, 0x2a8, 0x2a8, 0x298, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'erspan0\x00'}, 0x0, 0x110, 0x170, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x581b, 0x0, 0x3, {0x4}}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, 0x5, 0x6, [0x1d, 0x18, 0x1, 0xd, 0x14, 0x3f, 0x15, 0x23, 0x8, 0x3f, 0xb, 0x30, 0x33, 0x3e, 0x36, 0x9], 0x0, 0x3ff, 0x80000000}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0xffffff00, 'xfrm0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xc8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@addrtype={{0x30}, {0x100, 0x949, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557", 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xffff, 0x0, 0x0, 0x26]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 457.628212ms ago: executing program 0 (id=7260): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x0, 0x5, 0x2086, 0x1}) 444.559084ms ago: executing program 3 (id=7261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x10000, 0x6, 0x7, 0x7}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40000) 435.555735ms ago: executing program 2 (id=7262): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 382.358089ms ago: executing program 5 (id=7263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 358.288231ms ago: executing program 0 (id=7264): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000f00)='I', 0x1}], 0x1}}], 0x2, 0x48000) 357.739941ms ago: executing program 3 (id=7265): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x4490, &(0x7f0000000100)={[{@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0x216, &(0x7f0000000e00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8000) 337.936642ms ago: executing program 2 (id=7266): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0x851, 0x0) 317.652184ms ago: executing program 5 (id=7267): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") truncate(&(0x7f0000000000)='./file2\x00', 0x7) 247.37283ms ago: executing program 2 (id=7268): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4c840) 243.41109ms ago: executing program 0 (id=7269): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 224.940721ms ago: executing program 3 (id=7270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4b}, {0xc}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) 186.151615ms ago: executing program 2 (id=7271): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000300009000000000000000000070000000c0001ca65"], 0x20}}, 0x24000084) 156.433087ms ago: executing program 0 (id=7272): r0 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 86.109353ms ago: executing program 3 (id=7273): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000540)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff00000000000000002bacccbfc45ada3b207bcec407a42b52eaa83b89e73bedc0f2ec1c6d626bd992993e76f7119abf22d598f82081eb7f4670be8f092946c9358cd79c8c", 0x87) 23.393088ms ago: executing program 2 (id=7274): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x4004510f, &(0x7f0000001b80)) 23.313428ms ago: executing program 0 (id=7275): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept(r0, 0x0, 0x0) 0s ago: executing program 5 (id=7276): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) kernel console output (not intermixed with test programs): ce 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 265.559035][ T7] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 265.626811][T15097] Invalid option length (0) for dns_resolver key [ 265.700561][T15106] loop0: detected capacity change from 0 to 16 [ 265.741201][T15106] erofs: (device loop0): mounted with root inode @ nid 36. [ 265.777400][T15111] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4809'. [ 265.816865][ T7] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 265.828072][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 265.843965][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.861459][ T7] usb 4-1: Product: syz [ 265.865937][ T7] usb 4-1: Manufacturer: syz [ 265.870962][T15106] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 265.901940][ T7] usb 4-1: SerialNumber: syz [ 265.908594][T15116] tc_dump_action: action bad kind [ 265.909017][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 265.940059][ T7] usb 4-1: config 0 descriptor?? [ 265.968095][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 265.979595][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 265.991465][T15049] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 266.016480][ T7] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 266.059541][T15123] loop5: detected capacity change from 0 to 1024 [ 266.061440][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 266.091343][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 266.100322][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 266.187322][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 266.241752][T15106] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 266.279398][ T7] usb 4-1: USB disconnect, device number 19 [ 266.291983][T15106] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 266.314199][ T7] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 266.351721][T15106] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 266.369150][T15139] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4823'. [ 266.420455][ T25] audit: type=1800 audit(1755834388.321:5474): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4806" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 266.420467][T15141] snd_dummy snd_dummy.0: control 1:1:3:syz1:9 is already present [ 266.440930][T15139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.580517][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4826'. [ 266.733371][T15156] netlink: 'syz.1.4830': attribute type 32 has an invalid length. [ 267.204483][T15200] loop1: detected capacity change from 0 to 8 [ 267.302996][T15200] SQUASHFS error: zlib decompression failed, data probably corrupt [ 267.337251][T15200] SQUASHFS error: Failed to read block 0x9b: -5 [ 267.362317][T15200] SQUASHFS error: Unable to read metadata cache entry [99] [ 267.389994][T15200] SQUASHFS error: Unable to read inode 0x127 [ 267.709304][T15227] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4859'. [ 267.973008][T15246] loop1: detected capacity change from 0 to 64 [ 268.028067][T15252] loop3: detected capacity change from 0 to 512 [ 268.102959][T15252] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 268.111024][T15252] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 268.119671][T15260] program syz.0.4870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.124189][T15252] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.4869: bad orphan inode 13 [ 268.148410][T15252] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 268.198193][T15184] loop5: detected capacity change from 0 to 40427 [ 268.274948][T15184] F2FS-fs (loop5): invalid crc value [ 268.315894][T15184] F2FS-fs (loop5): Found nat_bits in checkpoint [ 268.343858][T15272] netlink: 'syz.2.4876': attribute type 2 has an invalid length. [ 268.384499][T15272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4876'. [ 268.509921][T15184] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 268.570196][T15184] attempt to access beyond end of device [ 268.570196][T15184] loop5: rw=0, want=45072, limit=40427 [ 268.796279][T15298] [U] [ 268.796393][T15298] [U] [ 268.796420][T15298] [U] [ 268.796442][T15298] [U] [ 268.799546][T15298] [U] [ 268.799687][T15298] [U] [ 268.799716][T15298] [U] [ 268.799745][T15298] [U] [ 268.799836][T15298] [U] [ 268.799864][T15298] [U] [ 268.799891][T15298] [U] [ 268.827827][T15297] [U] [ 268.949200][T15309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4889'. [ 268.970215][T15310] netlink: 'syz.2.4890': attribute type 12 has an invalid length. [ 269.113943][T15319] xt_TCPMSS: Only works on TCP SYN packets [ 269.386232][T15335] netlink: 'syz.0.4900': attribute type 3 has an invalid length. [ 269.496637][T15343] MTD: Couldn't look up './file0': -15 [ 269.507267][T15342] loop1: detected capacity change from 0 to 64 [ 269.547726][T15347] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4906'. [ 269.586116][T15347] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 269.631913][T15352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4908'. [ 269.675920][ T5331] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 269.865937][T15368] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.4913'. [ 269.967542][T15373] ALSA: mixer_oss: invalid OSS volume 'u' [ 270.061340][ T5331] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 270.076013][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.122936][ T5331] usb 4-1: config 0 descriptor?? [ 270.188663][ T5331] pwc: Philips SPC 900NC USB webcam detected. [ 270.213572][T15391] ceph: No source [ 270.362000][T15403] netlink: 'syz.0.4927': attribute type 30 has an invalid length. [ 270.369867][T15403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4927'. [ 270.401330][ T5331] pwc: Failed to set LED on/off time (-71) [ 270.432466][ T5331] pwc: send_video_command error -71 [ 270.450188][ T5331] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 270.476788][ T5331] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 270.550935][ T5331] usb 4-1: USB disconnect, device number 20 [ 270.572906][T15418] loop5: detected capacity change from 0 to 8 [ 270.597700][T15421] loop1: detected capacity change from 0 to 8 [ 270.644575][T15418] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 270.663713][T15425] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 270.692947][ T4172] udevd[4172]: incorrect cramfs checksum on /dev/loop5 [ 270.698869][T15425] overlayfs: missing 'lowerdir' [ 271.301160][ T6092] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 271.571282][ T6092] usb 4-1: Using ep0 maxpacket: 16 [ 271.691465][ T6092] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 271.712773][ T6092] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.793440][ T6092] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 271.842246][ T6092] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.864688][T15491] loop5: detected capacity change from 0 to 4096 [ 271.929899][T15503] netlink: 'syz.0.4967': attribute type 5 has an invalid length. [ 272.051077][T15491] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 272.061350][ T6092] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.080693][ T6092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.117635][T15491] ntfs3: loop5: Failed to load $Extend. [ 272.121163][ T6092] usb 4-1: Product: syz [ 272.137578][ T6092] usb 4-1: Manufacturer: syz [ 272.157840][ T6092] usb 4-1: SerialNumber: syz [ 272.405207][T15529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.461422][T15529] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 272.583524][ T6092] usb 4-1: USB disconnect, device number 21 [ 272.840602][T15565] loop5: detected capacity change from 0 to 64 [ 272.895335][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.944361][T15568] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.005481][T15572] loop1: detected capacity change from 0 to 512 [ 273.113167][T15572] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.196767][T15590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5001'. [ 273.211433][T15590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5001'. [ 273.474538][T15613] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5009'. [ 273.519992][T15617] loop5: detected capacity change from 0 to 1024 [ 273.562916][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5013'. [ 273.602900][T15617] EXT4-fs (loop5): Ignoring removed nobh option [ 273.629347][T15617] EXT4-fs (loop5): Ignoring removed bh option [ 273.655313][T15617] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.764300][T15617] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 274.159169][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5030'. [ 274.260883][T15669] dlm: no local IP address has been set [ 274.311986][T15669] dlm: cannot start dlm midcomms -107 [ 274.587863][T15689] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 274.746867][T15685] loop0: detected capacity change from 0 to 4096 [ 274.877091][T15685] ntfs: volume version 3.1. [ 275.136905][T15726] loop0: detected capacity change from 0 to 1024 [ 275.189314][T15732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5061'. [ 275.220325][T15726] EXT4-fs (loop0): Ignoring removed nobh option [ 275.228520][T15726] EXT4-fs (loop0): Ignoring removed bh option [ 275.291720][T15726] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpquota,nobh,abort,lazytime,usrquota,resgid=0x0000000000000000,bh,,errors=continue. Quota mode: writeback. [ 275.398292][T15726] ext4 filesystem being mounted at /1025/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.424805][T15744] netlink: 'syz.5.5066': attribute type 13 has an invalid length. [ 275.472352][T15746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 275.760354][T15755] loop5: detected capacity change from 0 to 4096 [ 275.819838][T15766] netlink: 'syz.3.5076': attribute type 1 has an invalid length. [ 275.864324][T15768] netlink: 'syz.0.5077': attribute type 10 has an invalid length. [ 275.890871][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5077'. [ 275.913496][T15768] netlink: 'syz.0.5077': attribute type 10 has an invalid length. [ 275.946804][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5077'. [ 275.980286][T15774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5080'. [ 276.032497][T15774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5080'. [ 276.281361][ T5331] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.307347][T15792] loop1: detected capacity change from 0 to 512 [ 276.387941][T15792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.430814][T15792] EXT4-fs (loop1): 1 truncate cleaned up [ 276.446780][T15792] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,i_version,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 276.524017][ T5331] usb 3-1: Using ep0 maxpacket: 8 [ 276.619320][T15805] loop1: detected capacity change from 0 to 64 [ 276.641421][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.658479][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.699992][ T5331] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 276.717684][T15809] netlink: 'syz.3.5096': attribute type 6 has an invalid length. [ 276.722127][ T5331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.758019][ T5331] usb 3-1: config 0 descriptor?? [ 276.817398][ T5331] usbhid 3-1:0.0: can't add hid device: -22 [ 276.835280][ T5331] usbhid: probe of 3-1:0.0 failed with error -22 [ 276.845002][T15784] loop5: detected capacity change from 0 to 32768 [ 276.885934][T15815] netlink: 'syz.3.5099': attribute type 5 has an invalid length. [ 276.990406][T15822] loop3: detected capacity change from 0 to 128 [ 277.037681][ T5335] usb 3-1: USB disconnect, device number 15 [ 277.040713][T15784] XFS (loop5): Mounting V5 Filesystem [ 277.089197][T15822] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 277.113995][T15822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.182471][T15784] XFS (loop5): Ending clean mount [ 277.191007][T15784] XFS (loop5): Quotacheck needed: Please wait. [ 277.336152][T15784] XFS (loop5): Quotacheck: Done. [ 277.436003][T15843] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5110'. [ 277.519092][T14029] XFS (loop5): Unmounting Filesystem [ 277.756911][T15853] loop0: detected capacity change from 0 to 2364 [ 277.926771][T15855] loop3: detected capacity change from 0 to 8192 [ 278.008546][T15855] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 278.049956][T15855] REISERFS (device loop3): using ordered data mode [ 278.058868][T15855] reiserfs: using flush barriers [ 278.141381][T15855] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 278.232837][T15870] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5122'. [ 278.276215][T15870] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5122'. [ 278.350082][T15839] loop1: detected capacity change from 0 to 32768 [ 278.375384][T15855] REISERFS (device loop3): checking transaction log (loop3) [ 278.402487][T15855] REISERFS (device loop3): Using r5 hash to sort names [ 278.409689][T15855] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 278.458658][T15855] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 278.739128][T15866] loop5: detected capacity change from 0 to 32768 [ 278.889475][T15866] XFS (loop5): Mounting V5 Filesystem [ 279.037899][T15866] XFS (loop5): Ending clean mount [ 279.198332][T14029] XFS (loop5): Unmounting Filesystem [ 279.404192][T15933] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5150'. [ 279.470798][T15935] loop0: detected capacity change from 0 to 1024 [ 279.471388][T15933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.600681][T15935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.622621][T15935] ext4 filesystem being mounted at /1052/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.998224][T15968] Cannot find del_set index 4 as target [ 280.205393][T15988] netlink: 'syz.5.5173': attribute type 1 has an invalid length. [ 280.246077][T15987] loop0: detected capacity change from 0 to 1024 [ 280.287062][T15987] EXT4-fs (loop0): Ignoring removed nobh option [ 280.296186][T15987] EXT4-fs (loop0): Ignoring removed bh option [ 280.313886][T15996] loop5: detected capacity change from 0 to 16 [ 280.320786][T15987] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.347015][T15996] erofs: (device loop5): mounted with root inode @ nid 36. [ 280.359574][ T5992] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.385486][T15987] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 280.589049][T16003] loop1: detected capacity change from 0 to 8192 [ 280.688322][T16003] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 280.706982][T16003] REISERFS (device loop1): using ordered data mode [ 280.713743][T16003] reiserfs: using flush barriers [ 280.719837][T16003] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 280.738658][T16003] REISERFS (device loop1): checking transaction log (loop1) [ 280.801427][ T5992] usb 3-1: config index 0 descriptor too short (expected 65207, got 72) [ 280.810221][T16003] REISERFS (device loop1): Using tea hash to sort names [ 280.827746][T16003] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 280.881013][T16003] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 280.993009][ T5992] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.029304][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.050419][ T5992] usb 3-1: Product: syz [ 281.063787][ T5992] usb 3-1: Manufacturer: syz [ 281.068412][ T5992] usb 3-1: SerialNumber: syz [ 281.152257][ T5992] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 281.466214][T16049] netlink: 'syz.1.5202': attribute type 1 has an invalid length. [ 281.490849][T16049] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5202'. [ 281.760287][T16069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5212'. [ 281.772170][T16073] loop5: detected capacity change from 0 to 256 [ 281.788754][T16069] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5212'. [ 281.831444][ T5992] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.186114][T16087] loop1: detected capacity change from 0 to 256 [ 282.253247][T16087] FAT-fs (loop1): Directory bread(block 64) failed [ 282.271462][ T7] usb 3-1: USB disconnect, device number 16 [ 282.295314][T16087] FAT-fs (loop1): Directory bread(block 65) failed [ 282.331192][T16087] FAT-fs (loop1): Directory bread(block 66) failed [ 282.346936][T16063] loop3: detected capacity change from 0 to 32768 [ 282.357564][T16087] FAT-fs (loop1): Directory bread(block 67) failed [ 282.384595][T16087] FAT-fs (loop1): Directory bread(block 68) failed [ 282.392086][T16087] FAT-fs (loop1): Directory bread(block 69) failed [ 282.398684][T16087] FAT-fs (loop1): Directory bread(block 70) failed [ 282.405905][T16087] FAT-fs (loop1): Directory bread(block 71) failed [ 282.416571][T16087] FAT-fs (loop1): Directory bread(block 72) failed [ 282.435825][T16087] FAT-fs (loop1): Directory bread(block 73) failed [ 282.485975][T16063] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 282.518914][T16072] loop0: detected capacity change from 0 to 32768 [ 282.561035][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 282.576099][T16100] loop5: detected capacity change from 0 to 64 [ 282.708949][T16105] loop1: detected capacity change from 0 to 2048 [ 282.727622][T16072] XFS (loop0): Mounting V5 Filesystem [ 282.829087][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5229'. [ 282.860373][T16105] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 282.925172][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5229'. [ 282.931397][ T5992] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 282.941465][ T5992] ath9k_htc: Failed to initialize the device [ 282.947957][ T7] usb 3-1: ath9k_htc: USB layer deinitialized [ 282.982729][T16105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.106651][T16072] XFS (loop0): Ending clean mount [ 283.373236][ T4180] XFS (loop0): Unmounting Filesystem [ 283.533531][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5239'. [ 283.610249][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5239'. [ 283.630852][T16135] loop1: detected capacity change from 0 to 4096 [ 283.748713][T16135] ntfs: volume version 3.1. [ 283.762745][T16127] loop3: detected capacity change from 0 to 32768 [ 283.996916][T16127] XFS (loop3): Mounting V5 Filesystem [ 284.088847][T16159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5246'. [ 284.124317][T16159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5246'. [ 284.212927][T16127] XFS (loop3): Ending clean mount [ 284.340934][T16137] loop5: detected capacity change from 0 to 32768 [ 284.449441][ T4186] XFS (loop3): Unmounting Filesystem [ 284.506078][T16137] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 284.535938][T16188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5261'. [ 284.546588][T16188] netlink: 'syz.2.5261': attribute type 1 has an invalid length. [ 284.579154][T16180] loop0: detected capacity change from 0 to 4096 [ 284.624617][T16137] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 284.650010][T16184] xt_CT: No such helper "netbios-ns" [ 284.857995][T16194] xt_CT: No such helper "netbios-ns" [ 284.988326][T16204] loop0: detected capacity change from 0 to 1024 [ 285.049949][T14029] ocfs2: Unmounting device (7,5) on (node local) [ 285.152040][T16210] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 285.647132][T16234] binder: 16233:16234 ioctl c018620b 0 returned -14 [ 285.750642][T16239] QAT: failed to copy from user cfg_data. [ 285.888747][T16243] loop3: detected capacity change from 0 to 512 [ 285.995293][T16243] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 286.021212][T16243] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 286.021242][T16243] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 286.069520][T16243] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 286.069542][T16243] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 286.069639][T16243] EXT4-fs (loop3): failed to initialize system zone (-117) [ 286.069719][T16243] EXT4-fs (loop3): mount failed [ 286.086011][T16212] loop1: detected capacity change from 0 to 32768 [ 286.128682][T16212] XFS: attr2 mount option is deprecated. [ 286.128708][T16212] XFS: attr2 mount option is deprecated. [ 286.236284][T16224] loop5: detected capacity change from 0 to 32768 [ 286.250963][T16212] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 286.338982][T16212] XFS (loop1): ro->rw transition prohibited on norecovery mount [ 286.363244][ T4184] XFS (loop1): Unmounting Filesystem [ 286.445879][T16224] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 286.641275][T16283] __nla_validate_parse: 1 callbacks suppressed [ 286.641291][T16283] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5303'. [ 286.659482][T14029] ocfs2: Unmounting device (7,5) on (node local) [ 286.748153][T16289] loop0: detected capacity change from 0 to 256 [ 286.886450][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5308'. [ 287.093632][T16304] loop5: detected capacity change from 0 to 512 [ 287.144598][T16296] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 287.179168][T16310] xt_TCPMSS: Only works on TCP SYN packets [ 287.185406][T16308] netlink: 'syz.3.5314': attribute type 1 has an invalid length. [ 287.204701][T16308] netlink: 'syz.3.5314': attribute type 2 has an invalid length. [ 287.243471][T16304] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.5313: bad orphan inode 15 [ 287.269834][T16304] ext4_test_bit(bit=14, block=5) = 0 [ 287.275274][T16304] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 287.286463][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5315'. [ 287.430597][T16306] loop0: detected capacity change from 0 to 8192 [ 287.474747][T16326] device netdevsim0 entered promiscuous mode [ 287.515622][T16326] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.019231][T16377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5344'. [ 288.128123][T16381] device wlan0 entered promiscuous mode [ 288.173056][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5348'. [ 288.462872][T16393] loop0: detected capacity change from 0 to 4096 [ 288.542983][T16393] ntfs3: Invalid value for gid. [ 288.564606][T16370] loop5: detected capacity change from 0 to 32768 [ 288.581291][T16409] loop1: detected capacity change from 0 to 2048 [ 288.638139][T16409] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 288.675837][T16409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.707165][T16370] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 288.730242][T16370] (syz.5.5342,16370,1):ocfs2_mknod:502 ERROR: status = -2 [ 288.761645][T16370] (syz.5.5342,16370,0):ocfs2_create:676 ERROR: status = -2 [ 288.793700][T16427] loop3: detected capacity change from 0 to 164 [ 288.899269][T14029] (syz-executor,14029,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 288.936995][T14029] ocfs2: Unmounting device (7,5) on (node local) [ 289.108668][T16448] nftables ruleset with unbound chain [ 290.002222][T16493] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5400'. [ 290.002401][ T6092] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.025157][T16495] loop1: detected capacity change from 0 to 256 [ 290.299592][T16514] 9pnet: Insufficient options for proto=fd [ 290.322355][ T6092] usb 3-1: Using ep0 maxpacket: 16 [ 290.461355][ T6092] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 290.488932][ T6092] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 290.499450][T16524] cgroup: No subsys list or none specified [ 290.532994][ T6092] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.661522][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5419'. [ 290.672612][ T6092] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.693413][ T6092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.709176][ T6092] usb 3-1: SerialNumber: syz [ 290.761571][T16482] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 290.816202][T16533] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 290.991308][ T6092] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 291.017122][ T6092] usb 3-1: USB disconnect, device number 17 [ 291.087789][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5428'. [ 291.162076][ T7] Bluetooth: hci3: command 0x0407 tx timeout [ 291.267969][T16562] IPv6: Can't replace route, no match found [ 291.499264][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5439'. [ 291.879881][T16592] netlink: 'syz.5.5448': attribute type 1 has an invalid length. [ 291.895082][T16592] netlink: 'syz.5.5448': attribute type 9 has an invalid length. [ 292.760383][T16637] loop1: detected capacity change from 0 to 256 [ 292.863621][T16637] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 293.266835][T16661] loop1: detected capacity change from 0 to 16 [ 293.327292][T16529] vivid-001: kernel_thread() failed [ 293.345642][T16661] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 293.390105][T16661] cramfs: Error -3 while decompressing! [ 293.407848][T16661] cramfs: ffffffff961e9ee8(453)->ffff8880539e8000(4096) [ 293.737916][T16686] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.068819][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5502'. [ 294.088488][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5502'. [ 294.100674][T16704] netlink: 'syz.2.5503': attribute type 10 has an invalid length. [ 294.135555][T16704] team0: Port device wlan1 added [ 294.301637][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5507'. [ 294.838488][T16726] loop5: detected capacity change from 0 to 256 [ 294.868281][T16731] netlink: 'syz.2.5515': attribute type 1 has an invalid length. [ 294.886341][T16731] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5515'. [ 294.962773][T16726] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 295.093247][T16747] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 295.464883][T16785] loop3: detected capacity change from 0 to 64 [ 295.485218][T16788] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 295.941315][ T5992] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 296.341472][ T5992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.357881][T16845] netlink: 'syz.2.5573': attribute type 1 has an invalid length. [ 296.369141][ T5992] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 296.398967][ T5992] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 296.426166][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.460592][ T5992] usb 1-1: config 0 descriptor?? [ 296.623897][T16855] loop3: detected capacity change from 0 to 8192 [ 296.704826][T16855] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 296.729960][T16855] REISERFS (device loop3): using ordered data mode [ 296.741331][T16855] reiserfs: using flush barriers [ 296.781517][ T5992] Bluetooth: Can't get state to change to load ram patch err [ 296.788920][ T5992] Bluetooth: Loading patch file failed [ 296.793189][T16855] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.811190][ T5992] ath3k: probe of 1-1:0.0 failed with error -121 [ 296.881527][T16855] REISERFS (device loop3): checking transaction log (loop3) [ 296.897593][T16855] REISERFS (device loop3): Using r5 hash to sort names [ 296.911572][T16855] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 296.958590][T16870] netlink: set zone limit has 8 unknown bytes [ 296.989310][T16855] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 296.997185][ T5338] usb 1-1: USB disconnect, device number 18 [ 297.194340][T16878] netlink: 'syz.1.5589': attribute type 14 has an invalid length. [ 297.220991][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5589'. [ 297.682983][T16914] netlink: 'syz.0.5607': attribute type 7 has an invalid length. [ 297.707409][T16914] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5607'. [ 297.811205][ T5992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 297.842962][T16928] loop0: detected capacity change from 0 to 16 [ 297.878112][T16930] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 297.904909][T16928] erofs: (device loop0): mounted with root inode @ nid 36. [ 297.940905][T16928] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 297.976580][T16928] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851] [ 298.017047][T16928] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 298.132949][T16949] delete_channel: no stack [ 298.133594][T16950] netlink: 'syz.1.5625': attribute type 10 has an invalid length. [ 298.200321][T16950] team0: Port device wlan1 added [ 298.395589][T16964] netlink: 'syz.3.5632': attribute type 1 has an invalid length. [ 298.412403][T16962] loop1: detected capacity change from 0 to 2048 [ 298.421549][ T5992] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 298.441283][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.449297][ T5992] usb 6-1: Product: syz [ 298.491242][ T5992] usb 6-1: Manufacturer: syz [ 298.501359][ T5992] usb 6-1: SerialNumber: syz [ 298.518156][T16962] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 298.523722][ T5992] usb 6-1: config 0 descriptor?? [ 298.584227][T16975] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.597181][ T5992] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 298.625396][T16962] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=104, inode=16, rec_len=24, name_len=128 [ 298.680739][T16962] Remounting filesystem read-only [ 298.987611][T16999] CIFS mount error: No usable UNC path provided in device string! [ 298.987611][T16999] [ 299.028011][ T7] usb 6-1: USB disconnect, device number 3 [ 299.042293][T16999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 299.050503][T16995] ODEBUG: Out of memory. ODEBUG disabled [ 299.076611][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.123719][T17006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5652'. [ 299.148483][T17006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5652'. [ 299.362377][T17015] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5658'. [ 299.394272][T17017] IPv6: NLM_F_REPLACE set, but no existing node found! [ 299.634807][T17025] netlink: 612 bytes leftover after parsing attributes in process `syz.5.5662'. [ 299.811638][T17037] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 299.845008][T17039] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 299.905316][T17043] damon: invalid nr_regions. min (2047) > max (1) [ 299.919501][T17004] loop0: detected capacity change from 0 to 32768 [ 300.001159][ T7] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 300.080916][T17004] XFS (loop0): Mounting V5 Filesystem [ 300.142509][T17064] loop3: detected capacity change from 0 to 16 [ 300.166980][T17004] XFS (loop0): Ending clean mount [ 300.171854][T17064] erofs: (device loop3): mounted with root inode @ nid 36. [ 300.334620][ T6092] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 300.348662][ T4180] XFS (loop0): Unmounting Filesystem [ 300.431352][ T7] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 300.450896][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 300.471658][ T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 300.514657][ T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 300.543870][ T7] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 300.567101][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.611382][ T6092] usb 6-1: Using ep0 maxpacket: 16 [ 300.751239][ T6092] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 300.759588][ T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 300.769700][ T6092] usb 6-1: config 0 has no interface number 0 [ 300.776235][ T7] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 300.809868][ T6092] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 300.835448][ T7] usb 2-1: Product: syz [ 300.839647][ T7] usb 2-1: Manufacturer: syz [ 300.845641][ T6092] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 300.871799][ T7] usb 2-1: SerialNumber: syz [ 300.878692][ T7] usb 2-1: config 0 descriptor?? [ 300.901402][T17031] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 300.933259][ T7] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 300.954146][ T7] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 301.021340][ T6092] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 301.037536][ T6092] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 301.047789][ T5992] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 301.055863][ T6092] usb 6-1: Manufacturer: syz [ 301.068077][ T6092] usb 6-1: SerialNumber: syz [ 301.103803][ T6092] usb 6-1: config 0 descriptor?? [ 301.131565][T17052] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 301.204807][ T5335] usb 2-1: USB disconnect, device number 22 [ 301.220427][ T5335] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 301.311271][ T5992] usb 3-1: Using ep0 maxpacket: 16 [ 301.381522][ T6092] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 301.392286][ T6092] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 301.410955][ T6092] usb 6-1: USB disconnect, device number 4 [ 301.451426][ T5992] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 301.463541][ T5992] usb 3-1: config 0 has no interface number 0 [ 301.602652][T17145] afs: Bad value for 'source' [ 301.631958][ T5992] usb 3-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 301.652976][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.671283][ T5992] usb 3-1: Product: syz [ 301.678293][ T5992] usb 3-1: Manufacturer: syz [ 301.695868][ T5992] usb 3-1: SerialNumber: syz [ 301.720704][ T5992] usb 3-1: config 0 descriptor?? [ 301.763264][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5723'. [ 301.773678][ T5992] usb-storage 3-1:0.102: USB Mass Storage device detected [ 301.836413][ T5992] usb-storage 3-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 301.858836][ T5992] usb-storage 3-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.15.189-syzkaller) [ 301.858836][ T5992] Please send a copy of this message to and [ 301.997463][T17173] netlink: 'syz.3.5730': attribute type 1 has an invalid length. [ 302.020407][T17173] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5730'. [ 302.058660][ T5992] usb 3-1: USB disconnect, device number 18 [ 302.238180][T17183] loop3: detected capacity change from 0 to 4096 [ 302.274945][T17183] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 302.337342][T17195] netlink: 'syz.1.5740': attribute type 2 has an invalid length. [ 302.385992][T17183] overlayfs: bad mount option "redirect_dir=follow:/" [ 302.729838][T17212] loop5: detected capacity change from 0 to 2048 [ 302.856994][T17212] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,jqfmt=vfsv1,auto_da_alloc=0x000000000000997c,,errors=continue. Quota mode: none. [ 302.906778][T17230] xt_l2tp: unknown flags: 3b [ 303.127940][T17252] trusted_key: encrypted_key: master key parameter '' is invalid [ 303.290822][T17263] loop1: detected capacity change from 0 to 8 [ 303.389346][T17263] SQUASHFS error: Failed to read block 0x738: -5 [ 303.398173][T17263] SQUASHFS error: Unable to read metadata cache entry [736] [ 303.538921][T17283] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 303.582937][T17281] XFS (nullb0): Invalid superblock magic number [ 304.015460][T17316] netlink: 'syz.3.5797': attribute type 21 has an invalid length. [ 304.023649][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 304.054064][T17316] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5797'. [ 304.350602][T17342] netlink: 736 bytes leftover after parsing attributes in process `syz.1.5810'. [ 304.621428][ T7] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 304.635856][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.681557][ T7] usb 6-1: Product: syz [ 304.685752][ T7] usb 6-1: Manufacturer: syz [ 304.701308][ T4229] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 304.721593][ T7] usb 6-1: SerialNumber: syz [ 304.739040][ T5992] Bluetooth: hci3: command 0x0405 tx timeout [ 304.746435][ T7] usb 6-1: config 0 descriptor?? [ 304.755745][T17375] netlink: del zone limit has 4 unknown bytes [ 304.794587][ T7] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 304.888929][T17381] loop1: detected capacity change from 0 to 512 [ 304.974853][T17381] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 304.990152][T17381] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 305.015980][T17393] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 305.034484][T17393] bond0: (slave lo): Error: Device can not be enslaved while up [ 305.045487][T17381] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 305.066212][T17381] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 305.074797][ T4229] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 305.091143][ T4229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.102989][T17381] EXT4-fs (loop1): 1 truncate cleaned up [ 305.104752][ T4229] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 305.116205][T17381] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 305.120523][ T4229] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 305.151914][ T4229] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.165194][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 305.171885][ T5335] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 305.187206][T17398] x_tables: duplicate entry at hook 3 [ 305.233777][ T7] usb 6-1: USB disconnect, device number 5 [ 305.238965][T17381] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 4: comm syz.1.5829: lblock 0 mapped to illegal pblock 4 (length 1) [ 305.268125][T17381] EXT4-fs (loop1): Remounting filesystem read-only [ 305.331306][ T4229] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.340525][ T4229] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.378192][ T4229] usb 1-1: Product: syz [ 305.393733][ T4229] usb 1-1: Manufacturer: syz [ 305.398370][ T4229] usb 1-1: SerialNumber: syz [ 305.421995][ T4229] usb 1-1: config 0 descriptor?? [ 305.441492][T17352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 305.472655][ T4229] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.500042][T17410] 9pnet: Insufficient options for proto=fd [ 305.500722][ T4229] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 305.531390][ T5335] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.546716][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.560795][ T5335] usb 4-1: config 0 descriptor?? [ 305.602253][ T5335] cp210x 4-1:0.0: cp210x converter detected [ 305.678321][T17420] netlink: 'syz.2.5848': attribute type 21 has an invalid length. [ 305.686829][T17420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5848'. [ 305.743443][T17424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5850'. [ 305.767468][T17424] openvswitch: netlink: EtherType 0 is less than min 600 [ 305.813762][ T5335] usb 4-1: cp210x converter now attached to ttyUSB0 [ 305.858345][T17428] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 305.924394][T17432] netlink: 'syz.5.5854': attribute type 28 has an invalid length. [ 305.936922][ T5335] usb 1-1: USB disconnect, device number 19 [ 305.954989][ T5335] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 306.023902][ T5331] usb 4-1: USB disconnect, device number 22 [ 306.044623][ T5331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.074465][ T5331] cp210x 4-1:0.0: device disconnected [ 306.161567][T17440] loop1: detected capacity change from 0 to 4096 [ 306.219123][T17450] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.273200][T17440] ntfs3: loop1: try to read out of volume at offset 0x3fffffc7000 [ 306.916858][T17494] loop1: detected capacity change from 0 to 4096 [ 306.929309][ T5992] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 307.022384][T17494] ntfs: volume version 3.1. [ 307.034256][T17502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5889'. [ 307.443286][T17532] loop0: detected capacity change from 0 to 64 [ 307.504008][T17537] loop5: detected capacity change from 0 to 64 [ 307.551433][ T5992] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 307.606220][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.626452][ T5992] usb 4-1: Product: syz [ 307.630643][ T5992] usb 4-1: Manufacturer: syz [ 307.655846][ T5992] usb 4-1: SerialNumber: syz [ 307.705574][ T5992] r8152-cfgselector 4-1: config 0 descriptor?? [ 307.873388][T17558] x_tables: unsorted entry at hook 3 [ 307.882222][T17560] netlink: 'syz.2.5918': attribute type 10 has an invalid length. [ 307.900528][T17560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5918'. [ 307.972610][T17560] team0: Port device geneve0 added [ 308.040523][T17569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5922'. [ 308.090989][T17569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5922'. [ 308.144439][T17569] device gretap4 entered promiscuous mode [ 308.186556][ T5992] r8152-cfgselector 4-1: Unknown version 0x0000 [ 308.199926][ T5992] r8152-cfgselector 4-1: USB disconnect, device number 23 [ 308.799617][T17567] loop5: detected capacity change from 0 to 32768 [ 308.864858][T17567] [ 308.864858][T17567] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.864858][T17567] [ 308.928596][T17567] JFS: metapage_get_blocks failed [ 308.945867][T17567] ERROR: (device loop5): release_metapage: write_one_page() failed [ 308.945867][T17567] [ 309.011273][T17567] ERROR: (device loop5): diWrite: ixpxd invalid [ 309.011273][T17567] [ 309.044321][T17567] ERROR: (device loop5): txCommit: [ 309.044321][T17567] [ 309.061898][T17633] netlink: 'syz.2.5954': attribute type 1 has an invalid length. [ 309.107291][T17633] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.5954'. [ 309.217909][T14029] [ 309.217909][T14029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.217909][T14029] [ 309.240812][T17640] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 309.241129][T14029] [ 309.241129][T14029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.241129][T14029] [ 309.346393][T17645] syz.1.5960 (17645): /proc/17644/oom_adj is deprecated, please use /proc/17644/oom_score_adj instead. [ 309.605213][T17657] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.619612][T17657] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 309.759902][T17668] xt_l2tp: missing protocol rule (udp|l2tpip) [ 309.866484][T17664] loop0: detected capacity change from 0 to 4096 [ 309.931809][T17664] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 309.994620][T17664] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 310.025694][T17687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.441298][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5995'. [ 310.630311][T17732] loop1: detected capacity change from 0 to 512 [ 310.721933][T17732] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 310.725438][T17742] netlink: 'syz.2.6006': attribute type 1 has an invalid length. [ 310.779210][T17742] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6006'. [ 310.790040][T17732] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 310.819624][T17732] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 310.836460][T17732] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 310.856191][T17732] EXT4-fs (loop1): failed to initialize system zone (-117) [ 310.871232][ T5331] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 310.872555][T17732] EXT4-fs (loop1): mount failed [ 310.925342][T17751] loop0: detected capacity change from 0 to 8 [ 310.983291][T17751] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 311.006954][ T4172] udevd[4172]: incorrect cramfs checksum on /dev/loop0 [ 311.015409][T17751] cramfs: bad data blocksize 3221485570 [ 311.058036][T17751] cramfs: bad data blocksize 3221485570 [ 311.069807][ T25] audit: type=1800 audit(1755834432.971:5475): pid=17751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6011" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 311.188043][ T4172] udevd[4172]: incorrect cramfs checksum on /dev/loop0 [ 311.270482][T17770] loop5: detected capacity change from 0 to 2048 [ 311.314018][T17774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6020'. [ 311.331325][ T6092] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 311.338834][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6020'. [ 311.347348][T17770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.411359][ T5331] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 311.436995][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.473384][ T5331] usb 4-1: Product: syz [ 311.477617][ T5331] usb 4-1: Manufacturer: syz [ 311.490106][T17780] Restarting kernel threads ... [ 311.496370][ T5331] usb 4-1: SerialNumber: syz [ 311.506224][T17780] done. [ 311.542064][ T5331] usb 4-1: config 0 descriptor?? [ 311.624441][ T4195] Bluetooth: hci5: urb ffff888021afc400 submission failed (2) [ 311.694316][T17791] xt_socket: unknown flags 0x48 [ 311.831463][ T6092] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 311.848998][ T6092] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.905540][ T6092] usb 2-1: config 0 has no interface number 0 [ 311.921126][ T6092] usb 2-1: too many endpoints for config 0 interface 111 altsetting 99: 44, using maximum allowed: 30 [ 311.954892][ T6092] usb 2-1: config 0 interface 111 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 311.968950][ T6092] usb 2-1: config 0 interface 111 has no altsetting 0 [ 311.976491][ T6092] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 312.010599][ T6092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.045238][ T5992] usb 4-1: USB disconnect, device number 24 [ 312.057734][ T6092] usb 2-1: config 0 descriptor?? [ 312.115157][ T6092] usb 2-1: selecting invalid altsetting 0 [ 312.376401][ T5331] usb 2-1: USB disconnect, device number 23 [ 313.161895][ T25] audit: type=1326 audit(1755834435.071:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17877 comm="syz.1.6074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f547b742be9 code=0x0 [ 313.377138][ T263] block nbd5: Attempted send on invalid socket [ 313.383654][ T263] blk_update_request: I/O error, dev nbd5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 313.403440][T17894] VFS: could not find a valid V7 on nbd5. [ 313.480228][T17841] loop3: detected capacity change from 0 to 32768 [ 313.616902][T17905] loop5: detected capacity change from 0 to 512 [ 313.618164][T17841] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 313.618164][T17841] [ 313.653664][T17841] ERROR: (device loop3): remounting filesystem as read-only [ 313.672951][T17905] EXT4-fs (loop5): Ignoring removed oldalloc option [ 313.762770][T17905] EXT4-fs (loop5): 1 truncate cleaned up [ 313.768460][T17905] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 314.006776][T17923] netlink: zone id is out of range [ 314.055892][T17923] netlink: set zone limit has 4 unknown bytes [ 314.082216][T17927] device bond2 entered promiscuous mode [ 314.088225][T17927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.091139][ T6092] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 314.334690][T17947] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6105'. [ 314.425944][T17947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.441138][ T6092] usb 2-1: Using ep0 maxpacket: 8 [ 314.451808][T17947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.469226][T17947] bond0 (unregistering): Released all slaves [ 314.492358][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.500325][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6107'. [ 314.510165][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.518186][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6107'. [ 314.536302][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.545713][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6107'. [ 314.555283][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.568420][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6107'. [ 314.577909][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.591023][ T6092] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 314.599349][ T6092] usb 2-1: config 11 has no interface number 0 [ 314.613220][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6107'. [ 314.624428][ T6092] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 314.639257][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.640545][T17948] loop0: detected capacity change from 0 to 32768 [ 314.649297][ T6092] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 1293, setting to 1024 [ 314.654859][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.670387][ T6092] usb 2-1: config 11 interface 95 has no altsetting 0 [ 314.674322][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.689280][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.697211][ T5331] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 314.705315][T17950] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 314.714585][T17950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.723901][T17950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.731567][T17950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.747101][T17950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.757021][T17950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.776158][T17948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6106 (17948) [ 314.790249][T17950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 314.805302][T17948] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 314.816500][T17948] BTRFS info (device loop0): using free space tree [ 314.825353][T17948] BTRFS info (device loop0): has skinny extents [ 314.871297][ T6092] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 314.872723][T17958] xt_TCPMSS: Only works on TCP SYN packets [ 314.880361][ T6092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.880388][ T6092] usb 2-1: Product: syz [ 314.880402][ T6092] usb 2-1: Manufacturer: syz [ 314.880416][ T6092] usb 2-1: SerialNumber: syz [ 314.951153][ T5331] usb 3-1: Using ep0 maxpacket: 16 [ 315.027204][T17948] BTRFS info (device loop0): enabling ssd optimizations [ 315.071426][ T5331] usb 3-1: config 0 has no interfaces? [ 315.145924][T17972] team0: Port device geneve0 added [ 315.236244][ T5331] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.e3 [ 315.242603][ T6092] usbtouchscreen: probe of 2-1:11.95 failed with error -22 [ 315.266893][ T6092] usb 2-1: USB disconnect, device number 24 [ 315.276087][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.304266][ T5331] usb 3-1: Product: syz [ 315.309338][ T4172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4172) [ 315.326163][ T5331] usb 3-1: Manufacturer: syz [ 315.330808][ T5331] usb 3-1: SerialNumber: syz [ 315.336837][ T5331] r8152-cfgselector 3-1: config 0 descriptor?? [ 315.346081][T17989] loop5: detected capacity change from 0 to 64 [ 315.379871][T17989] hfs: filesystem is marked locked, mounting read-only. [ 315.429004][T17989] hfs: filesystem is marked locked, leaving read-only. [ 315.586491][ T5992] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 315.612864][ T5331] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 315.828772][ T6317] usb 3-1: USB disconnect, device number 19 [ 315.881310][ T5992] usb 4-1: Using ep0 maxpacket: 16 [ 316.036620][ T5992] usb 4-1: config 0 has no interfaces? [ 316.262599][ T5992] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 316.278874][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.306146][ T5992] usb 4-1: Product: syz [ 316.336429][ T5992] usb 4-1: Manufacturer: syz [ 316.341183][ T5992] usb 4-1: SerialNumber: syz [ 316.356765][ T5992] r8152-cfgselector 4-1: config 0 descriptor?? [ 316.656245][ T5992] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 316.867053][ T5992] usb 4-1: USB disconnect, device number 25 [ 316.980474][T18101] __nla_validate_parse: 80 callbacks suppressed [ 316.980491][T18101] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6165'. [ 317.003602][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.009954][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.299194][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 317.540997][T18143] xt_bpf: check failed: parse error [ 317.651997][ T5992] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 317.730528][T18154] tmpfs: Bad value for 'mpol' [ 317.931234][ T5992] usb 1-1: Using ep0 maxpacket: 32 [ 318.030206][T18168] loop3: detected capacity change from 0 to 128 [ 318.142657][T18176] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.6199'. [ 318.222545][ T5992] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 318.251119][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.266320][ T5992] usb 1-1: Product: syz [ 318.277897][ T5992] usb 1-1: Manufacturer: syz [ 318.285874][ T5992] usb 1-1: SerialNumber: syz [ 318.303848][ T5992] usb 1-1: config 0 descriptor?? [ 318.528436][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'. [ 318.548562][T18188] loop3: detected capacity change from 0 to 2364 [ 318.601607][ T5992] usb 1-1: USB disconnect, device number 20 [ 319.097646][T18214] device netdevsim0 left promiscuous mode [ 319.131303][T18214] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 319.136995][T18181] loop1: detected capacity change from 0 to 32768 [ 319.233980][T18181] XFS: noikeep mount option is deprecated. [ 319.353413][T18181] XFS (loop1): Mounting V5 Filesystem [ 319.587933][T18248] validate_nla: 76 callbacks suppressed [ 319.587950][T18248] netlink: 'syz.2.6229': attribute type 5 has an invalid length. [ 319.606525][T18181] XFS (loop1): Ending clean mount [ 319.623906][T18181] XFS (loop1): Quotacheck needed: Please wait. [ 319.715546][T18181] XFS (loop1): Quotacheck: Done. [ 319.871727][T18264] [U] ÀT”¼+ [ 319.875704][T18264] [U] ­f']¥S¿ü!|r„wc!ºª?q&Ãõø)ðºÒÄ_Ž+xHdgDF³s]õ(R¬ÞOß)?, [ 319.890931][ T4184] XFS (loop1): Unmounting Filesystem [ 319.912102][T18264] [U] •µýq“$Æ è4úý¡Áµåkt§¨ [ 320.265025][T18292] netlink: 'syz.2.6253': attribute type 1 has an invalid length. [ 320.278535][T18290] x_tables: unsorted underflow at hook 2 [ 320.316409][T18292] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6253'. [ 320.430664][T18300] netlink: 'syz.2.6257': attribute type 2 has an invalid length. [ 320.522537][T18304] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 320.631459][ T5992] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 320.681139][ T6092] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 320.727374][T18320] loop1: detected capacity change from 0 to 47 [ 320.891230][ T5992] usb 4-1: Using ep0 maxpacket: 8 [ 320.918694][T18332] 9pnet: Could not find request transport: 0xffffffffffffffff [ 320.964529][T18334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.021689][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 321.061432][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.074457][T18338] netlink: 448 bytes leftover after parsing attributes in process `syz.0.6275'. [ 321.083680][ T6092] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 321.094160][ T6092] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.103433][ T5992] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.114681][T18338] unsupported nla_type 14345 [ 321.126553][ T6092] usb 6-1: config 0 descriptor?? [ 321.135917][ T5992] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 321.153352][ T5992] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 321.164217][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.188021][T18340] loop1: detected capacity change from 0 to 4096 [ 321.198932][ T6092] cp210x 6-1:0.0: cp210x converter detected [ 321.209726][ T5992] usb 4-1: config 0 descriptor?? [ 321.231712][T18296] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 321.242869][T18344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6278'. [ 321.282968][T18340] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 321.313738][T18340] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 321.351142][T18340] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 321.371264][T18340] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 321.390853][T18346] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.6279'. [ 321.415487][T18340] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 321.473782][T18340] ntfs: volume version 3.1. [ 321.487303][T18340] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 321.513062][T18340] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 321.533337][T18340] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 321.549302][T18340] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 321.566234][T18340] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 321.612739][T18351] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 321.642971][ T6092] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 321.651215][ T6092] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 321.703609][ T6092] usb 6-1: cp210x converter now attached to ttyUSB0 [ 321.704295][ T5331] usb 4-1: USB disconnect, device number 26 [ 321.747270][ T6092] usb 6-1: USB disconnect, device number 6 [ 321.814733][ T6092] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 321.841520][ T6092] cp210x 6-1:0.0: device disconnected [ 321.868851][T18366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6288'. [ 322.359259][T18390] loop3: detected capacity change from 0 to 8 [ 322.373834][T18391] delete_channel: no stack [ 322.382565][T18387] loop5: detected capacity change from 0 to 4096 [ 322.465779][T18390] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 322.480148][ T4172] udevd[4172]: incorrect cramfs checksum on /dev/loop3 [ 322.500427][T18390] cramfs: bad data blocksize 4294950552 [ 322.526860][T18387] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 322.561563][ T4172] udevd[4172]: incorrect cramfs checksum on /dev/loop3 [ 322.594359][T18390] cramfs: bad data blocksize 4294950552 [ 322.800158][T18415] netlink: 'syz.3.6309': attribute type 16 has an invalid length. [ 322.847572][T18415] netlink: 'syz.3.6309': attribute type 17 has an invalid length. [ 322.930445][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.997596][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 323.021822][T18423] netlink: 'syz.5.6314': attribute type 28 has an invalid length. [ 323.060956][T18423] netlink: 'syz.5.6314': attribute type 29 has an invalid length. [ 323.072075][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.097527][T18423] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6314'. [ 323.098026][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.194593][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.226465][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.268925][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 323.311475][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 323.435368][T18437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6319'. [ 323.635885][T18445] IPv6: sit2: Disabled Multicast RS [ 323.686742][T18439] loop3: detected capacity change from 0 to 4096 [ 323.719317][T18439] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 323.909739][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6327'. [ 323.927450][T18456] ipt_CLUSTERIP: bad num_local_nodes 18 [ 324.029572][T18460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6331'. [ 324.059141][T18460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6331'. [ 324.097641][T18431] loop5: detected capacity change from 0 to 32768 [ 324.453581][T18487] netlink: 3416 bytes leftover after parsing attributes in process `syz.1.6342'. [ 324.504298][T18487] netlink: 3416 bytes leftover after parsing attributes in process `syz.1.6342'. [ 324.551252][T18487] netlink: 242 bytes leftover after parsing attributes in process `syz.1.6342'. [ 324.579728][T18491] dlm: no locking on control device [ 325.056024][T18508] loop5: detected capacity change from 0 to 4096 [ 325.063836][T18467] loop0: detected capacity change from 0 to 32768 [ 325.070915][T18514] loop1: detected capacity change from 0 to 256 [ 325.100597][T18467] (syz.0.6333,18467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 325.144944][T18467] (syz.0.6333,18467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 325.203895][T18508] ntfs3: loop5: ino=3, Correct links count -> 2. [ 325.251653][T18467] JBD2: Ignoring recovery information on journal [ 325.259657][T18508] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 325.361885][T18467] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 325.735295][ T4180] ocfs2: Unmounting device (7,0) on (node local) [ 326.240509][T18562] loop5: detected capacity change from 0 to 16 [ 326.250843][T18563] device ipip1 entered promiscuous mode [ 326.291721][T18562] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 326.335208][T18562] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 326.485445][T18571] loop0: detected capacity change from 0 to 4096 [ 326.621273][T18571] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 326.676618][T18571] ntfs3: loop0: failed to convert "c46c" to iso8859-7 [ 326.747437][T18588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6392'. [ 326.783865][T18588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6392'. [ 326.886021][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 326.924824][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 326.977572][T18600] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.995670][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.029864][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.048847][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.077648][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.116417][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.136735][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.158729][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.177985][T18594] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 327.201683][T18594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.226565][T18594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.244449][T18594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.291346][T18594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 327.514209][T18618] loop5: detected capacity change from 0 to 4096 [ 327.616416][T18628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.622685][T18629] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.650934][T18618] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 327.655498][T18628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.707439][T18618] Remounting filesystem read-only [ 327.734175][T18628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.747033][T18628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.857905][T18628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 327.878438][T18628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 328.049471][T18622] loop1: detected capacity change from 0 to 32768 [ 328.091656][T18622] (syz.1.6409,18622,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 328.134346][T18622] (syz.1.6409,18622,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 328.247490][T18622] JBD2: Ignoring recovery information on journal [ 328.353900][T18622] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 328.578523][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 328.776298][T18683] loop3: detected capacity change from 0 to 512 [ 328.857791][T18683] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.881418][T18690] __nla_validate_parse: 105 callbacks suppressed [ 328.881436][T18690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6431'. [ 328.942756][T18683] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 329.037703][T18690] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6431'. [ 329.053965][T18683] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.6437: inode #15: comm syz.3.6437: iget: illegal inode # [ 329.088973][T18690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6431'. [ 329.098745][T18683] EXT4-fs (loop3): Remounting filesystem read-only [ 329.111636][T18683] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.6437: couldn't read orphan inode 15 (err -117) [ 329.134312][T18683] EXT4-fs (loop3): Remounting filesystem read-only [ 329.151215][T18683] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,noblock_validity,noquota,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 329.313693][T18683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.6437: bg 0: block 19: invalid block bitmap [ 329.383020][T18683] EXT4-fs (loop3): Remounting filesystem read-only [ 329.390162][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6448'. [ 329.421403][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6448'. [ 329.584085][T18719] delete_channel: no stack [ 330.154288][T18761] overlayfs: missing 'lowerdir' [ 330.578548][T18785] (syz.3.6486,18785,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 330.651296][T18785] (syz.3.6486,18785,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 330.932046][T18798] loop3: detected capacity change from 0 to 4096 [ 330.962489][T18759] loop5: detected capacity change from 0 to 32768 [ 330.968342][T18798] __ntfs_error: 7 callbacks suppressed [ 330.968360][T18798] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 330.996884][T18759] XFS: noikeep mount option is deprecated. [ 331.015734][T18798] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 331.031600][T18798] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 331.056939][T18798] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 331.075372][T18798] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 331.097568][T18759] XFS (loop5): Mounting V5 Filesystem [ 331.134432][T18798] ntfs: volume version 3.1. [ 331.140939][T18798] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 331.153577][T18798] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 331.156701][T18775] loop1: detected capacity change from 0 to 32768 [ 331.180759][T18798] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 331.212137][T18775] (syz.1.6481,18775,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 331.226664][T18798] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 331.238659][T18798] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 331.268605][T18759] XFS (loop5): Ending clean mount [ 331.281375][T18775] (syz.1.6481,18775,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 331.286577][T18759] XFS (loop5): Quotacheck needed: Please wait. [ 331.380945][T18775] JBD2: Ignoring recovery information on journal [ 331.488767][T18792] loop0: detected capacity change from 0 to 32768 [ 331.541693][T18792] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 331.581233][T18792] (syz.0.6490,18792,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 331.601903][T18775] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 331.668308][T18759] XFS (loop5): Quotacheck: Done. [ 331.744692][T18792] (syz.0.6490,18792,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 331.780694][T18792] (syz.0.6490,18792,1):ocfs2_mknod:298 ERROR: status = -2 [ 331.818215][T18811] loop3: detected capacity change from 0 to 32768 [ 331.839147][T18792] (syz.0.6490,18792,1):ocfs2_mknod:502 ERROR: status = -2 [ 331.861985][T18792] (syz.0.6490,18792,1):ocfs2_create:676 ERROR: status = -2 [ 331.909540][T14029] XFS (loop5): Unmounting Filesystem [ 331.916926][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 331.946793][T18811] (syz.3.6494,18811,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.004123][ T4180] ocfs2: Unmounting device (7,0) on (node local) [ 332.105013][T18811] (syz.3.6494,18811,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.272549][T18811] JBD2: Ignoring recovery information on journal [ 332.439310][T18811] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 332.674407][T18841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6508'. [ 332.753046][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 333.054130][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6516'. [ 333.086046][T18861] validate_nla: 95 callbacks suppressed [ 333.086061][T18861] netlink: 'syz.5.6518': attribute type 3 has an invalid length. [ 333.155427][T18864] loop3: detected capacity change from 0 to 1024 [ 333.209417][T18866] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6520'. [ 333.233498][T18864] EXT4-fs (loop3): Ignoring removed nobh option [ 333.266405][T18864] EXT4-fs (loop3): inline encryption not supported [ 333.313917][T18864] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.326529][T18874] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6523'. [ 333.426031][T18836] loop1: detected capacity change from 0 to 40427 [ 333.452356][T18864] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,nojournal_checksum,barrier=0x0000000000000002,init_itable=0x0000000000000001,data_err=ignore,lazytime,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,data_err=ignore,dioread_nolock,,errors=continue. Quota mode: none. [ 333.489423][T18836] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 333.549207][T18889] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 333.559839][T18889] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 333.570594][T18836] F2FS-fs (loop1): invalid crc value [ 333.627082][T18891] loop0: detected capacity change from 0 to 2048 [ 333.659781][T18836] F2FS-fs (loop1): Found nat_bits in checkpoint [ 333.723948][T18899] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.768726][T18836] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 333.803671][T18891] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 333.848078][T18891] Remounting filesystem read-only [ 334.066352][ T4184] attempt to access beyond end of device [ 334.066352][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 334.300818][T18925] loop5: detected capacity change from 0 to 512 [ 334.309323][T18927] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6547'. [ 334.369938][T18929] netlink: 'syz.0.6548': attribute type 4 has an invalid length. [ 334.448727][T18925] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6546: bg 0: block 248: padding at end of block bitmap is not set [ 334.477093][T18925] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.6546: Failed to acquire dquot type 1 [ 334.555179][T18925] EXT4-fs (loop5): 1 truncate cleaned up [ 334.596581][T18925] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 334.659403][T18925] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.730573][T18925] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.6546: Failed to acquire dquot type 1 [ 334.918098][T18946] netlink: 'syz.0.6555': attribute type 9 has an invalid length. [ 334.930836][ T8940] EXT4-fs error (device loop5): ext4_release_dquot:6243: comm kworker/u4:7: Failed to release dquot type 1 [ 334.958765][T18946] netlink: 'syz.0.6555': attribute type 6 has an invalid length. [ 335.136492][T18952] loop0: detected capacity change from 0 to 1024 [ 335.216218][T18965] loop1: detected capacity change from 0 to 1024 [ 335.252893][T18952] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 335.324599][T18952] ext4 filesystem being mounted at /1329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.428023][T18952] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #15: comm syz.0.6560: corrupted xattr block 128 [ 335.814942][T18984] loop0: detected capacity change from 0 to 8192 [ 335.887839][T18984] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 335.901871][T18984] REISERFS (device loop0): using ordered data mode [ 335.909136][T18984] reiserfs: using flush barriers [ 335.928152][T18984] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 335.961509][T18984] REISERFS (device loop0): checking transaction log (loop0) [ 336.009317][T18984] REISERFS (device loop0): Using r5 hash to sort names [ 336.030725][T18984] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 336.091278][T18984] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 336.178995][T19002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6580'. [ 336.186257][T19003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6581'. [ 336.225297][T19002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6580'. [ 336.252268][T19003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6581'. [ 336.678246][T19023] netlink: 'syz.0.6590': attribute type 21 has an invalid length. [ 336.898928][T19036] damon: min_nr_regions (0) must be at least 3 [ 336.904610][ T7] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 337.176757][ T6092] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 337.184494][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 337.355412][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.441141][ T6092] usb 2-1: Using ep0 maxpacket: 16 [ 337.497199][T19059] netlink: 'syz.3.6605': attribute type 4 has an invalid length. [ 337.542884][T19061] loop0: detected capacity change from 0 to 128 [ 337.556727][T19059] device veth1_macvtap left promiscuous mode [ 337.571802][ T6092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 337.636628][T19061] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 337.711538][ T7] usb 3-1: string descriptor 0 read error: -22 [ 337.717813][ T7] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 337.751312][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.763475][ T4180] sysv_free_block: flc_count > flc_size [ 337.769052][ T4180] sysv_free_block: flc_count > flc_size [ 337.781202][ T4180] sysv_free_block: flc_count > flc_size [ 337.791253][ T6092] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 337.800334][ T6092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.804422][ T4180] sysv_free_block: flc_count > flc_size [ 337.813955][ T6092] usb 2-1: Product: syz [ 337.813974][ T6092] usb 2-1: Manufacturer: syz [ 337.813988][ T6092] usb 2-1: SerialNumber: syz [ 337.828621][ T6092] usb 2-1: config 0 descriptor?? [ 337.857963][ T4180] sysv_free_block: flc_count > flc_size [ 337.876809][ T4180] sysv_free_block: flc_count > flc_size [ 337.889550][ T4180] sysv_free_block: flc_count > flc_size [ 337.903356][ T6092] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 337.910982][ T4180] sysv_free_block: flc_count > flc_size [ 337.931595][ T4180] sysv_free_block: flc_count > flc_size [ 337.937174][ T4180] sysv_free_block: flc_count > flc_size [ 337.967694][ T4180] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 338.115346][ T5333] usb 2-1: USB disconnect, device number 25 [ 338.238308][T19078] loop3: detected capacity change from 0 to 1024 [ 338.291324][ T7] asix 3-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 338.316129][ T7] asix 3-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 338.324821][T19078] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.337846][ T7] asix: probe of 3-1:7.0 failed with error -71 [ 338.368779][ T7] usb 3-1: USB disconnect, device number 20 [ 339.896734][T19158] overlayfs: missing 'workdir' [ 339.991403][ T5992] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 340.055719][T19171] netlink: 'syz.2.6658': attribute type 1 has an invalid length. [ 340.148351][T19178] netlink: 'syz.3.6661': attribute type 1 has an invalid length. [ 340.261146][ T5992] usb 1-1: Using ep0 maxpacket: 8 [ 340.451541][ T5992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.483075][T19201] loop1: detected capacity change from 0 to 512 [ 340.563147][ T5992] usb 1-1: config 15 has an invalid interface number: 162 but max is 0 [ 340.579836][ T5992] usb 1-1: config 15 has no interface number 0 [ 340.591287][ T5992] usb 1-1: config 15 interface 162 has no altsetting 0 [ 340.634155][T19201] EXT4-fs (loop1): 1 truncate cleaned up [ 340.641338][T19201] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 340.697200][T19188] loop3: detected capacity change from 0 to 32768 [ 340.737789][T19209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6676'. [ 340.771223][ T6317] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 340.794125][T19188] XFS (loop3): Mounting V5 Filesystem [ 340.815589][ T5992] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7c.ce [ 340.824765][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.832976][ T5992] usb 1-1: Product: syz [ 340.837245][ T5992] usb 1-1: Manufacturer: syz [ 340.841977][ T5992] usb 1-1: SerialNumber: syz [ 340.910673][T19188] XFS (loop3): Ending clean mount [ 340.923330][T19188] XFS (loop3): Quotacheck needed: Please wait. [ 340.964589][T19224] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6680'. [ 340.986860][ T4271] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1807 dinode [ 341.000147][ T4271] XFS (loop3): Unmount and run xfs_repair [ 341.007210][ T4271] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 341.016957][ T6317] usb 6-1: Using ep0 maxpacket: 16 [ 341.023351][ T4271] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 341.032771][ T4271] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 341.043298][ T4271] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 341.087066][T19228] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6682'. [ 341.092621][ T4271] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00 4.Xh....|....... [ 341.117437][ T4271] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01 ................ [ 341.141353][ T6317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.144438][ T4271] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5 .............6.. [ 341.171486][ T5992] usb 1-1: USB disconnect, device number 21 [ 341.215319][ T4271] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06 ......Ty........ [ 341.225483][ T4271] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 341.274703][T19188] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 341.334178][ T6317] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 341.374199][ T6317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.396335][ T6317] usb 6-1: Product: syz [ 341.401543][ T6317] usb 6-1: Manufacturer: syz [ 341.416410][ T6317] usb 6-1: SerialNumber: syz [ 341.427763][ T6317] usb 6-1: config 0 descriptor?? [ 341.440886][ T4186] XFS (loop3): Unmounting Filesystem [ 341.530325][ T6317] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 341.659756][T19257] loop1: detected capacity change from 0 to 128 [ 341.685940][ T6317] usb 6-1: USB disconnect, device number 7 [ 341.701580][ T154] usb 6-1: Failed to submit usb control message: -71 [ 341.708976][ T154] usb 6-1: unable to send the bmi data to the device: -71 [ 341.763411][ T154] usb 6-1: unable to get target info from device [ 341.800850][ T154] usb 6-1: could not get target info (-71) [ 341.839315][ T154] usb 6-1: could not probe fw (-71) [ 342.211806][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6709'. [ 342.388454][T19285] loop3: detected capacity change from 0 to 4096 [ 342.459823][T19303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6719'. [ 342.462306][T19285] __ntfs_warning: 11 callbacks suppressed [ 342.462320][T19285] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 342.539692][T19308] tmpfs: Bad value for 'size' [ 342.566982][T19309] netlink: 'syz.2.6721': attribute type 9 has an invalid length. [ 342.605070][T19285] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 342.648975][T19285] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 342.703078][T19285] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 342.714513][T19317] loop1: detected capacity change from 0 to 256 [ 342.734613][T19285] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 342.790697][T19285] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 342.831370][T19285] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 342.907359][T19317] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 342.915964][T19285] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 342.961273][T19285] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 342.981185][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.059625][T19285] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 343.094837][T19285] ntfs: volume version 3.1. [ 343.108644][T19337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6734'. [ 343.118177][ T5313] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 343.140223][T19337] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 343.151039][T19337] netlink: 'syz.2.6734': attribute type 2 has an invalid length. [ 343.162283][T19337] netlink: 'syz.2.6734': attribute type 2 has an invalid length. [ 343.170115][T19337] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 343.572321][T19353] loop3: detected capacity change from 0 to 1024 [ 343.661543][T19357] device veth0_macvtap left promiscuous mode [ 344.091263][ T7] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 344.116233][T19385] loop3: detected capacity change from 0 to 256 [ 344.154960][T19339] loop1: detected capacity change from 0 to 40427 [ 344.158879][T19384] device ~ÿ entered promiscuous mode [ 344.202547][T19385] FAT-fs (loop3): Directory bread(block 64) failed [ 344.225421][T19339] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 344.233546][T19385] FAT-fs (loop3): Directory bread(block 65) failed [ 344.247295][T19385] FAT-fs (loop3): Directory bread(block 66) failed [ 344.254232][T19339] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 344.265145][T19385] FAT-fs (loop3): Directory bread(block 67) failed [ 344.279514][T19339] F2FS-fs (loop1): invalid crc value [ 344.286403][T19385] FAT-fs (loop3): Directory bread(block 68) failed [ 344.330261][T19385] FAT-fs (loop3): Directory bread(block 69) failed [ 344.347778][T19339] F2FS-fs (loop1): Found nat_bits in checkpoint [ 344.386635][T19385] FAT-fs (loop3): Directory bread(block 70) failed [ 344.397660][T19385] FAT-fs (loop3): Directory bread(block 71) failed [ 344.419775][T19385] FAT-fs (loop3): Directory bread(block 72) failed [ 344.439511][T19385] FAT-fs (loop3): Directory bread(block 73) failed [ 344.446153][T19391] loop5: detected capacity change from 0 to 4096 [ 344.463125][T19339] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 344.480162][T19339] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 344.491388][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 344.521395][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 344.541164][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 344.588669][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.618035][T19339] attempt to access beyond end of device [ 344.618035][T19339] loop1: rw=2049, want=45104, limit=40427 [ 344.646633][ T7] usb 3-1: config 0 descriptor?? [ 344.759208][T19391] ntfs3: loop5: ino=5, "/" directory corrupted [ 344.899884][T19410] loop3: detected capacity change from 0 to 16 [ 344.933521][ T6317] usb 3-1: USB disconnect, device number 21 [ 345.010396][T19410] erofs: (device loop3): mounted with root inode @ nid 36. [ 345.119542][T19420] netlink: 428 bytes leftover after parsing attributes in process `syz.0.6775'. [ 345.361758][T19432] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.369432][T19434] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.6782'. [ 345.407163][T19434] openvswitch: netlink: IP tunnel dst address not specified [ 345.551283][ T4287] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 345.673021][T19455] netlink: 'syz.5.6790': attribute type 9 has an invalid length. [ 345.799480][T19461] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6793'. [ 345.929028][T19471] loop5: detected capacity change from 0 to 256 [ 345.976740][ T4287] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.008557][ T4287] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.038662][T19471] FAT-fs (loop5): Directory bread(block 64) failed [ 346.059500][T19471] FAT-fs (loop5): Directory bread(block 65) failed [ 346.084964][T19471] FAT-fs (loop5): Directory bread(block 66) failed [ 346.103460][T19471] FAT-fs (loop5): Directory bread(block 67) failed [ 346.126509][T19471] FAT-fs (loop5): Directory bread(block 68) failed [ 346.161403][T19471] FAT-fs (loop5): Directory bread(block 69) failed [ 346.178853][T19471] FAT-fs (loop5): Directory bread(block 70) failed [ 346.187688][T19471] FAT-fs (loop5): Directory bread(block 71) failed [ 346.220651][T19471] FAT-fs (loop5): Directory bread(block 72) failed [ 346.241451][ T4287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.250534][ T4287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.258521][T19490] loop1: detected capacity change from 0 to 1764 [ 346.267721][T19471] FAT-fs (loop5): Directory bread(block 73) failed [ 346.291380][ T4287] usb 1-1: Product: syz [ 346.305795][ T4287] usb 1-1: Manufacturer: syz [ 346.310445][ T4287] usb 1-1: SerialNumber: syz [ 346.331787][T19494] loop3: detected capacity change from 0 to 2048 [ 346.379279][T19494] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 346.379279][T19494] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 346.379279][T19494] [ 346.402362][ T4287] cdc_ncm 1-1:1.0: skipping garbage [ 346.409044][T19490] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 346.411350][ T4287] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 346.427391][ T4287] cdc_ncm 1-1:1.0: bind() failure [ 346.435829][ T4287] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 346.442955][ T4287] cdc_ncm 1-1:1.1: bind() failure [ 346.450314][T19494] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.536743][T19503] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6815'. [ 346.559390][T19508] netlink: 'syz.1.6814': attribute type 21 has an invalid length. [ 346.567880][T19494] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,nouser_xattr,dioread_nolock,. Quota mode: writeback. [ 346.615092][ T4287] usb 1-1: USB disconnect, device number 22 [ 346.644947][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6814'. [ 346.722234][T19513] loop1: detected capacity change from 0 to 4096 [ 346.810307][T19517] SET target dimension over the limit! [ 347.033205][T19528] x_tables: unsorted underflow at hook 3 [ 347.215502][T19531] loop5: detected capacity change from 0 to 4096 [ 347.227726][T19533] loop1: detected capacity change from 0 to 4096 [ 347.292584][T19533] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 347.333217][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6831'. [ 347.369024][T19531] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 347.403893][T19531] ntfs3: loop5: Failed to load $Extend. [ 347.448094][T19544] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 347.534119][T19548] usb usb5: usbfs: process 19548 (syz.0.6835) did not claim interface 0 before use [ 347.866655][T19569] SET target dimension over the limit! [ 348.196966][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6860'. [ 348.414205][T19621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6871'. [ 348.571236][ T5333] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 348.571524][T19627] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6874'. [ 348.707694][T19639] loop3: detected capacity change from 0 to 128 [ 348.756458][T19639] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 348.807741][T19639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.811184][ T5333] usb 1-1: Using ep0 maxpacket: 16 [ 348.951403][ T5333] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 348.961215][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 349.013136][ T5333] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 349.053666][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 349.108781][ T5333] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 349.304379][ T5333] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 349.326692][ T5333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.346261][ T5333] usb 1-1: Product: syz [ 349.346311][T19681] program syz.5.6901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.353234][ T5333] usb 1-1: Manufacturer: syz [ 349.377552][ T5333] usb 1-1: SerialNumber: syz [ 349.409346][ T5333] usb 1-1: config 0 descriptor?? [ 349.434497][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6903'. [ 349.451408][T19610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 349.469014][T19610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 349.519114][ T5333] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 349.532142][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 349.538315][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 349.817481][ T5333] usb 1-1: USB disconnect, device number 23 [ 349.841933][ T5333] mcba_usb 1-1:0.0 can0: device disconnected [ 349.880149][T19705] netlink: 'syz.3.6912': attribute type 3 has an invalid length. [ 349.893803][T19705] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6912'. [ 350.082870][T19722] trusted_key: encrypted_key: keyword 'bew' not recognized [ 350.553114][T19763] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 350.787776][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 350.787791][ T25] audit: type=1326 audit(1755834472.691:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.2.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe157a8bbe9 code=0x7ffc0000 [ 350.920852][ T25] audit: type=1326 audit(1755834472.691:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.2.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe157a8bbe9 code=0x7ffc0000 [ 350.943415][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.971418][ T25] audit: type=1326 audit(1755834472.731:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.2.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fe157a8bbe9 code=0x7ffc0000 [ 350.993853][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.001251][ T5992] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 351.121357][ T25] audit: type=1326 audit(1755834472.731:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.2.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe157a8bbe9 code=0x7ffc0000 [ 351.143985][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.221580][ T25] audit: type=1326 audit(1755834472.731:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.2.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe157a8bbe9 code=0x7ffc0000 [ 351.244008][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.340257][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6952'. [ 351.381412][ T5992] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 351.389703][ T5992] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 351.421157][ T5992] usb 6-1: config 220 has no interface number 2 [ 351.445968][ T5992] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 351.494234][ T5992] usb 6-1: config 220 interface 0 has no altsetting 0 [ 351.513641][ T5992] usb 6-1: config 220 interface 76 has no altsetting 0 [ 351.539782][ T5992] usb 6-1: config 220 interface 1 has no altsetting 0 [ 351.566861][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.607859][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 351.660641][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 351.718755][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 351.731670][ T5992] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 351.742846][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 351.756662][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.773765][ T5992] usb 6-1: Product: syz [ 351.782468][ T5992] usb 6-1: Manufacturer: syz [ 351.800948][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 351.810944][ T5992] usb 6-1: SerialNumber: syz [ 351.819297][T19777] loop0: detected capacity change from 0 to 40427 [ 351.854070][T19777] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 351.897460][T19777] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 351.948448][T19777] F2FS-fs (loop0): invalid crc value [ 351.999838][T19777] F2FS-fs (loop0): Found nat_bits in checkpoint [ 352.133459][T19777] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 352.168092][T19777] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 352.200538][T19854] loop3: detected capacity change from 0 to 2048 [ 352.212436][ T5992] usb 6-1: selecting invalid altsetting 0 [ 352.218677][ T5992] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 352.235846][T19858] loop1: detected capacity change from 0 to 256 [ 352.238237][ T5992] usb 6-1: No valid video chain found. [ 352.265369][T19777] attempt to access beyond end of device [ 352.265369][T19777] loop0: rw=2049, want=45104, limit=40427 [ 352.283038][T19854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.307911][T19858] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 352.368793][ T5992] usb 6-1: selecting invalid altsetting 0 [ 352.375385][T19858] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 352.380503][ T5992] usbtest: probe of 6-1:220.1 failed with error -22 [ 352.441798][T19858] exFAT-fs (loop1): Filesystem has been set read-only [ 352.470609][ T5992] usb 6-1: USB disconnect, device number 8 [ 352.499423][T19858] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880719fa1e0 iblock : 8, err : -5) [ 352.558797][T19858] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 352.586901][T19858] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 352.637579][T19869] netlink: 'syz.2.6980': attribute type 21 has an invalid length. [ 352.665253][T19869] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6980'. [ 352.738854][T19869] netlink: 'syz.2.6980': attribute type 4 has an invalid length. [ 352.765796][T19869] netlink: 'syz.2.6980': attribute type 3 has an invalid length. [ 352.825410][T19869] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6980'. [ 352.857238][T19875] device bridge2 entered promiscuous mode [ 353.191125][ T5335] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 353.308066][T19911] QAT: failed to copy from user. [ 353.377637][T19913] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 353.490474][T19925] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7007'. [ 353.560019][ T5335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 353.575435][ T5335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 353.604111][ T5335] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 353.627884][ T5335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.648517][ T5335] usb 6-1: config 0 descriptor?? [ 353.649930][T19936] syz.1.7012 uses old SIOCAX25GETINFO [ 353.921233][ T6317] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 353.932433][ T5992] usb 6-1: USB disconnect, device number 9 [ 353.945670][T19954] loop0: detected capacity change from 0 to 64 [ 354.064293][T19960] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7024'. [ 354.457535][ T6317] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 354.505721][ T6317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.505788][T19986] tmpfs: Bad value for 'mpol' [ 354.514600][ T6317] usb 3-1: Product: syz [ 354.520021][ T7] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 354.531270][ T6317] usb 3-1: Manufacturer: syz [ 354.541437][ T6317] usb 3-1: SerialNumber: syz [ 354.598878][ T6317] usb 3-1: config 0 descriptor?? [ 354.653287][ T6317] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 354.666687][ T6317] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 354.695318][ T6317] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 354.899842][ T6092] usb 3-1: USB disconnect, device number 22 [ 354.939430][T20014] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7051'. [ 355.103645][T20027] loop1: detected capacity change from 0 to 256 [ 355.153046][T20027] exfat: Deprecated parameter 'utf8' [ 355.191317][ T7] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 355.215003][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.240201][T20027] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 355.241313][ T7] usb 1-1: Product: syz [ 355.283071][ T7] usb 1-1: Manufacturer: syz [ 355.297500][ T7] usb 1-1: SerialNumber: syz [ 355.329222][ T7] usb 1-1: config 0 descriptor?? [ 355.407493][ T7] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 355.413992][T20046] xt_socket: unknown flags 0xc [ 355.634243][T20064] qrtr: Invalid version 0 [ 355.841271][ T7] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 355.848421][ T7] sq905c 1-1:0.0: Reading version command failed [ 355.873803][T20084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7086'. [ 355.882280][ T7] sq905c: probe of 1-1:0.0 failed with error -71 [ 355.941367][ T7] usb 1-1: USB disconnect, device number 24 [ 356.022759][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7090'. [ 356.027117][T20096] loop1: detected capacity change from 0 to 128 [ 356.063130][T20096] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.185220][T20096] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.218417][T20100] loop3: detected capacity change from 0 to 4096 [ 356.353639][T20100] ntfs3: loop3: Failed to load $Extend. [ 356.476727][T20112] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7100'. [ 356.521519][T20112] unsupported nlmsg_type 40 [ 356.927354][T20128] loop0: detected capacity change from 0 to 4096 [ 356.968623][T20128] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 357.035043][T20128] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 357.077478][T20108] loop5: detected capacity change from 0 to 32768 [ 357.079366][T20128] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 357.122217][T20128] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 357.182056][T20108] ERROR: (device loop5): diAllocBit: iag inconsistent [ 357.182056][T20108] [ 357.190447][T20128] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 357.225344][T20108] ERROR: (device loop5): remounting filesystem as read-only [ 357.234150][T20128] ntfs: volume version 3.1. [ 357.261228][T20128] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 357.282745][T20108] ialloc: diAlloc returned -5! [ 357.366469][T20128] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 357.459187][T20128] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 357.499954][T20128] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 357.515813][T20128] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 357.731340][ T7] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 357.858394][T20172] netlink: 'syz.0.7126': attribute type 2 has an invalid length. [ 357.896978][T20172] netlink: 'syz.0.7126': attribute type 1 has an invalid length. [ 357.938732][T20177] loop5: detected capacity change from 0 to 256 [ 357.997846][T20182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7132'. [ 358.141396][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.167620][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.223913][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 358.249914][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.311227][ T7] usb 2-1: config 0 descriptor?? [ 358.362990][ T7] xbox_remote_probe: endpoint_in message size==0? [ 358.391791][T20208] netlink: 'syz.5.7143': attribute type 15 has an invalid length. [ 358.409881][T20208] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7143'. [ 358.547980][T20220] xt_limit: Overflow, try lower: 33554432/384 [ 358.599808][T20224] bond0: (slave bond_slave_0): Releasing backup interface [ 358.663485][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 358.669474][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 358.702023][ T7] usb 2-1: USB disconnect, device number 26 [ 358.756960][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7157'. [ 358.799599][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7157'. [ 358.996232][T20241] loop3: detected capacity change from 0 to 8192 [ 359.088197][T20246] loop5: detected capacity change from 0 to 4096 [ 359.131523][T20241] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff00) [ 359.139921][T20241] FAT-fs (loop3): Filesystem has been set read-only [ 359.419702][T20268] netlink: 'syz.5.7174': attribute type 4 has an invalid length. [ 359.426362][T20266] loop3: detected capacity change from 0 to 2048 [ 359.441209][ T7] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 359.541196][T20270] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.556520][T20266] attempt to access beyond end of device [ 359.556520][T20266] loop3: rw=0, want=5629499534213192, limit=2048 [ 359.604322][T20266] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 359.782953][T20277] loop5: detected capacity change from 0 to 64 [ 359.847886][ T7] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 359.847913][ T7] usb 1-1: config 0 has no interface number 0 [ 359.847941][ T7] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.896698][T20262] loop1: detected capacity change from 0 to 32768 [ 360.011258][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 360.011287][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.011303][ T7] usb 1-1: Product: syz [ 360.011316][ T7] usb 1-1: Manufacturer: syz [ 360.011328][ T7] usb 1-1: SerialNumber: syz [ 360.013017][ T7] usb 1-1: config 0 descriptor?? [ 360.030181][T20262] XFS (loop1): Mounting V5 Filesystem [ 360.071389][ T7] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 360.256457][T20262] XFS (loop1): Ending clean mount [ 360.311956][ T4184] XFS (loop1): Unmounting Filesystem [ 360.400480][ T5333] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 360.469194][ T5335] usb 1-1: USB disconnect, device number 25 [ 360.482622][ T5335] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 360.571252][ T5331] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 360.757739][T20328] siw: device registration error -23 [ 360.781382][ T5333] usb 6-1: config 127 has an invalid interface number: 218 but max is 0 [ 360.789801][ T5333] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 360.805497][ T5333] usb 6-1: config 127 has no interface number 0 [ 360.811978][ T5331] usb 4-1: Using ep0 maxpacket: 8 [ 360.817534][ T5333] usb 6-1: config 127 interface 218 altsetting 2 bulk endpoint 0xF has invalid maxpacket 32 [ 360.833687][ T5333] usb 6-1: config 127 interface 218 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 360.845875][ T5333] usb 6-1: config 127 interface 218 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 360.860835][ T5333] usb 6-1: config 127 interface 218 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.880724][ T5333] usb 6-1: config 127 interface 218 has no altsetting 0 [ 360.931329][ T5331] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 360.946866][ T5331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.957210][ T5331] usb 4-1: config 0 has no interface number 0 [ 360.963978][ T5331] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 361.000371][ T5331] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 361.012040][ T5331] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.025646][ T5331] usb 4-1: config 0 interface 52 has no altsetting 0 [ 361.035958][ T6317] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 361.051282][ T5333] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c [ 361.067807][ T5333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.076633][ T5333] usb 6-1: Product: syz [ 361.086903][ T5333] usb 6-1: Manufacturer: syz [ 361.091733][ T5333] usb 6-1: SerialNumber: syz [ 361.127113][T20301] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 361.153152][T20352] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7211'. [ 361.180029][T20354] netlink: 'syz.0.7212': attribute type 6 has an invalid length. [ 361.201377][ T5331] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 361.217347][ T5331] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 361.237763][ T5331] usb 4-1: Product: syz [ 361.245832][ T5331] usb 4-1: Manufacturer: syz [ 361.250570][ T5331] usb 4-1: SerialNumber: syz [ 361.263852][ T5331] usb 4-1: config 0 descriptor?? [ 361.286043][ T6317] usb 3-1: Using ep0 maxpacket: 32 [ 361.396146][T20366] loop0: detected capacity change from 0 to 4096 [ 361.411525][ T6317] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 361.423130][T20366] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 361.423508][ T5333] etas_es58x 6-1:127.218: Starting syz syz (Serial Number syz) driver version 1.00 [ 361.445765][ T6317] usb 3-1: config 0 has no interface number 0 [ 361.467783][ T5333] usb 6-1: USB disconnect, device number 10 [ 361.494470][T20366] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 361.611310][ T6317] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=70.50 [ 361.620809][ T6317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.629204][ T5335] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 361.637201][ T6317] usb 3-1: Product: syz [ 361.641775][ T6317] usb 3-1: Manufacturer: syz [ 361.646622][ T6317] usb 3-1: SerialNumber: syz [ 361.653310][ T6317] usb 3-1: config 0 descriptor?? [ 361.693187][ T6317] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 361.700094][ T6317] gspca_stv06xx: st6422 sensor detected [ 361.742295][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7224'. [ 361.750517][ T5333] usb 4-1: USB disconnect, device number 27 [ 361.756842][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7224'. [ 361.936194][T20392] loop0: detected capacity change from 0 to 256 [ 361.976617][T20392] FAT-fs (loop0): Directory bread(block 64) failed [ 362.009572][T20392] FAT-fs (loop0): Directory bread(block 65) failed [ 362.017499][T20392] FAT-fs (loop0): Directory bread(block 66) failed [ 362.024741][T20392] FAT-fs (loop0): Directory bread(block 67) failed [ 362.047101][T20392] FAT-fs (loop0): Directory bread(block 68) failed [ 362.054410][T20392] FAT-fs (loop0): Directory bread(block 69) failed [ 362.061877][T20392] FAT-fs (loop0): Directory bread(block 70) failed [ 362.077619][T20392] FAT-fs (loop0): Directory bread(block 71) failed [ 362.101400][T20392] FAT-fs (loop0): Directory bread(block 72) failed [ 362.111381][T20392] FAT-fs (loop0): Directory bread(block 73) failed [ 362.161354][ T5335] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 362.180638][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.198975][ T5335] usb 2-1: Product: syz [ 362.210182][ T5335] usb 2-1: Manufacturer: syz [ 362.223176][ T5335] usb 2-1: SerialNumber: syz [ 362.242292][ T6317] STV06xx: probe of 3-1:0.238 failed with error -71 [ 362.272065][ T5335] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 362.321401][ T6317] usb 3-1: unknown interface protocol 0x9, assuming v1 [ 362.328348][ T6317] usb 3-1: cannot find UAC_HEADER [ 362.390442][ T6317] snd-usb-audio: probe of 3-1:0.238 failed with error -22 [ 362.420143][ T6317] usb 3-1: USB disconnect, device number 23 [ 362.559519][T20425] loop3: detected capacity change from 0 to 64 [ 362.595821][T20428] IPVS: length: 148 != 24 [ 362.616831][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7250'. [ 362.648975][ T4172] udevd[4172]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.684160][T20425] Trying to free block not in datazone [ 362.931320][ T5335] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 363.041177][T20459] loop3: detected capacity change from 0 to 256 [ 363.122600][T20464] loop5: detected capacity change from 0 to 2048 [ 363.176528][T20470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7270'. [ 363.236280][T20471] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.256882][T20464] NILFS (loop5): error -2 truncating bmap (ino=16) [ 363.358524][T20471] ------------[ cut here ]------------ [ 363.365064][T20471] WARNING: CPU: 1 PID: 20471 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 363.374904][T20471] Modules linked in: [ 363.378807][T20471] CPU: 1 PID: 20471 Comm: segctord Not tainted 5.15.189-syzkaller #0 [ 363.386929][T20471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.397057][T20471] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 363.403081][T20471] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 53 25 6f fe e8 ae db f7 fd e9 b8 fc ff ff e8 44 25 6f fe <0f> 0b e9 16 fc ff ff e8 38 25 6f fe e8 93 db f7 fd e9 74 fe ff ff [ 363.422848][T20471] RSP: 0018:ffffc90004a1f390 EFLAGS: 00010293 [ 363.428927][T20471] RAX: ffffffff83089edc RBX: ffff8880754b21a0 RCX: ffff88805a750000 [ 363.436941][T20471] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 363.439781][ T5992] usb 2-1: USB disconnect, device number 27 [ 363.444966][T20471] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100e36fe92 [ 363.445024][T20471] R10: ffffed100e36fe92 R11: 1ffff1100e36fe91 R12: ffff88805a751788 [ 363.445038][T20471] R13: ffff888067ab19e0 R14: 00000000003f0002 R15: ffff88804b569eb0 [ 363.445052][T20471] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 363.445068][T20471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.490529][T20471] CR2: 00007f53def5edac CR3: 0000000024e66000 CR4: 00000000003506e0 [ 363.498563][T20471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.506578][T20471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.514591][T20471] Call Trace: [ 363.517874][T20471] [ 363.520813][T20471] nilfs_dat_commit_update+0x24/0x40 [ 363.526148][T20471] nilfs_btree_commit_update_v+0x93/0x400 [ 363.531917][T20471] nilfs_btree_propagate+0x974/0xd40 [ 363.537224][T20471] nilfs_bmap_propagate+0x70/0x120 [ 363.542387][T20471] nilfs_segctor_apply_buffers+0x15d/0x320 [ 363.548216][T20471] ? nilfs_collect_file_data+0xc0/0xc0 [ 363.553733][T20471] nilfs_segctor_scan_file+0x75f/0x960 [ 363.559214][T20471] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 363.566486][T20471] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 363.572437][T20471] ? rcu_is_watching+0x11/0xa0 [ 363.577210][T20471] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 363.583200][T20471] ? nilfs_transaction_unlock+0x220/0x220 [ 363.588927][T20471] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 363.595139][T20471] ? clear_nonspinnable+0x60/0x60 [ 363.600186][T20471] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 363.605700][T20471] ? __lock_acquire+0x7c60/0x7c60 [ 363.610732][T20471] ? __rwlock_init+0x140/0x140 [ 363.615534][T20471] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 363.621724][T20471] ? do_raw_spin_unlock+0x11d/0x230 [ 363.626933][T20471] ? _raw_spin_unlock+0x24/0x40 [ 363.631931][T20471] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 363.637499][T20471] nilfs_segctor_construct+0x17b/0x690 [ 363.643106][T20471] nilfs_segctor_thread+0x50a/0x1120 [ 363.648422][T20471] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 363.654383][T20471] ? nilfs_iput_work_func+0x70/0x70 [ 363.659676][T20471] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 363.665637][T20471] ? _raw_spin_unlock+0x40/0x40 [ 363.670492][T20471] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 363.676453][T20471] ? init_wait_entry+0xd0/0xd0 [ 363.681253][T20471] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 363.687161][T20471] ? __kthread_parkme+0x157/0x1b0 [ 363.692263][T20471] kthread+0x436/0x520 [ 363.696338][T20471] ? nilfs_iput_work_func+0x70/0x70 [ 363.701595][T20471] ? kthread_blkcg+0xd0/0xd0 [ 363.706313][T20471] ret_from_fork+0x1f/0x30 [ 363.710760][T20471] [ 363.713895][T20471] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 363.721188][T20471] CPU: 1 PID: 20471 Comm: segctord Not tainted 5.15.189-syzkaller #0 [ 363.729263][T20471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.739440][T20471] Call Trace: [ 363.742827][T20471] [ 363.745761][T20471] dump_stack_lvl+0x168/0x230 [ 363.750535][T20471] ? show_regs_print_info+0x20/0x20 [ 363.755745][T20471] ? load_image+0x3b0/0x3b0 [ 363.760269][T20471] panic+0x2c9/0x7f0 [ 363.764172][T20471] ? bpf_jit_dump+0xd0/0xd0 [ 363.768684][T20471] ? ret_from_fork+0x1f/0x30 [ 363.773362][T20471] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 363.778780][T20471] __warn+0x248/0x2b0 [ 363.782769][T20471] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 363.788130][T20471] report_bug+0x1b7/0x2e0 [ 363.792456][T20471] handle_bug+0x3a/0x70 [ 363.796603][T20471] exc_invalid_op+0x16/0x40 [ 363.801099][T20471] asm_exc_invalid_op+0x16/0x20 [ 363.806001][T20471] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 363.811969][T20471] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 53 25 6f fe e8 ae db f7 fd e9 b8 fc ff ff e8 44 25 6f fe <0f> 0b e9 16 fc ff ff e8 38 25 6f fe e8 93 db f7 fd e9 74 fe ff ff [ 363.831657][T20471] RSP: 0018:ffffc90004a1f390 EFLAGS: 00010293 [ 363.837802][T20471] RAX: ffffffff83089edc RBX: ffff8880754b21a0 RCX: ffff88805a750000 [ 363.845759][T20471] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 363.853947][T20471] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100e36fe92 [ 363.861904][T20471] R10: ffffed100e36fe92 R11: 1ffff1100e36fe91 R12: ffff88805a751788 [ 363.869862][T20471] R13: ffff888067ab19e0 R14: 00000000003f0002 R15: ffff88804b569eb0 [ 363.878000][T20471] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 363.883399][T20471] nilfs_dat_commit_update+0x24/0x40 [ 363.888673][T20471] nilfs_btree_commit_update_v+0x93/0x400 [ 363.894397][T20471] nilfs_btree_propagate+0x974/0xd40 [ 363.899677][T20471] nilfs_bmap_propagate+0x70/0x120 [ 363.904779][T20471] nilfs_segctor_apply_buffers+0x15d/0x320 [ 363.910785][T20471] ? nilfs_collect_file_data+0xc0/0xc0 [ 363.916238][T20471] nilfs_segctor_scan_file+0x75f/0x960 [ 363.921711][T20471] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 363.928839][T20471] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 363.934725][T20471] ? rcu_is_watching+0x11/0xa0 [ 363.939482][T20471] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 363.945444][T20471] ? nilfs_transaction_unlock+0x220/0x220 [ 363.951184][T20471] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 363.957354][T20471] ? clear_nonspinnable+0x60/0x60 [ 363.962382][T20471] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 363.967859][T20471] ? __lock_acquire+0x7c60/0x7c60 [ 363.972882][T20471] ? __rwlock_init+0x140/0x140 [ 363.977737][T20471] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 363.983906][T20471] ? do_raw_spin_unlock+0x11d/0x230 [ 363.989109][T20471] ? _raw_spin_unlock+0x24/0x40 [ 363.993945][T20471] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 363.999399][T20471] nilfs_segctor_construct+0x17b/0x690 [ 364.004850][T20471] nilfs_segctor_thread+0x50a/0x1120 [ 364.010138][T20471] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 364.016033][T20471] ? nilfs_iput_work_func+0x70/0x70 [ 364.021251][T20471] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 364.027144][T20471] ? _raw_spin_unlock+0x40/0x40 [ 364.032042][T20471] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 364.037922][T20471] ? init_wait_entry+0xd0/0xd0 [ 364.042686][T20471] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 364.048677][T20471] ? __kthread_parkme+0x157/0x1b0 [ 364.053694][T20471] kthread+0x436/0x520 [ 364.057753][T20471] ? nilfs_iput_work_func+0x70/0x70 [ 364.062945][T20471] ? kthread_blkcg+0xd0/0xd0 [ 364.067521][T20471] ret_from_fork+0x1f/0x30 [ 364.072134][T20471] [ 364.075385][T20471] Kernel Offset: disabled [ 364.080067][T20471] Rebooting in 86400 seconds..